@goauthentik/api 2024.6.3-1723497462 → 2024.6.3-1723921843

package/src/apis/ProvidersApi.ts

@@ -345,8 +345,6 @@ export interface ProvidersLdapListRequest {
     page?: number;
     pageSize?: number;
     search?: string;
-    searchGroupGroupUuidIexact?: string;
-    searchGroupNameIexact?: string;
     tlsServerNameIexact?: string;
     uidStartNumberIexact?: number;
 }
@@ -662,6 +660,7 @@ export interface ProvidersSamlListRequest {
     backchannelApplication?: string;
     defaultRelayState?: string;
     digestAlgorithm?: ProvidersSamlListDigestAlgorithmEnum;
+    encryptionKp?: string;
     isBackchannel?: boolean;
     issuer?: string;
     name?: string;
@@ -672,6 +671,8 @@ export interface ProvidersSamlListRequest {
     propertyMappings?: Array<string>;
     search?: string;
     sessionValidNotOnOrAfter?: string;
+    signAssertion?: boolean;
+    signResponse?: boolean;
     signatureAlgorithm?: ProvidersSamlListSignatureAlgorithmEnum;
     signingKp?: string;
     spBinding?: ProvidersSamlListSpBindingEnum;
@@ -1914,14 +1915,6 @@ export class ProvidersApi extends runtime.BaseAPI {
             queryParameters['search'] = requestParameters.search;
         }
 
-        if (requestParameters.searchGroupGroupUuidIexact !== undefined) {
-            queryParameters['search_group__group_uuid__iexact'] = requestParameters.searchGroupGroupUuidIexact;
-        }
-
-        if (requestParameters.searchGroupNameIexact !== undefined) {
-            queryParameters['search_group__name__iexact'] = requestParameters.searchGroupNameIexact;
-        }
-
         if (requestParameters.tlsServerNameIexact !== undefined) {
             queryParameters['tls_server_name__iexact'] = requestParameters.tlsServerNameIexact;
         }
@@ -4470,6 +4463,10 @@ export class ProvidersApi extends runtime.BaseAPI {
             queryParameters['digest_algorithm'] = requestParameters.digestAlgorithm;
         }
 
+        if (requestParameters.encryptionKp !== undefined) {
+            queryParameters['encryption_kp'] = requestParameters.encryptionKp;
+        }
+
         if (requestParameters.isBackchannel !== undefined) {
             queryParameters['is_backchannel'] = requestParameters.isBackchannel;
         }
@@ -4510,6 +4507,14 @@ export class ProvidersApi extends runtime.BaseAPI {
             queryParameters['session_valid_not_on_or_after'] = requestParameters.sessionValidNotOnOrAfter;
         }
 
+        if (requestParameters.signAssertion !== undefined) {
+            queryParameters['sign_assertion'] = requestParameters.signAssertion;
+        }
+
+        if (requestParameters.signResponse !== undefined) {
+            queryParameters['sign_response'] = requestParameters.signResponse;
+        }
+
         if (requestParameters.signatureAlgorithm !== undefined) {
             queryParameters['signature_algorithm'] = requestParameters.signatureAlgorithm;
         }

package/src/models/LDAPCheckAccess.ts

@@ -0,0 +1,81 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * authentik
+ * Making authentication simple.
+ *
+ * The version of the OpenAPI document: 2024.6.3
+ * Contact: hello@goauthentik.io
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { exists, mapValues } from '../runtime';
+import type { PolicyTestResult } from './PolicyTestResult';
+import {
+    PolicyTestResultFromJSON,
+    PolicyTestResultFromJSONTyped,
+    PolicyTestResultToJSON,
+} from './PolicyTestResult';
+
+/**
+ * Base serializer class which doesn't implement create/update methods
+ * @export
+ * @interface LDAPCheckAccess
+ */
+export interface LDAPCheckAccess {
+    /**
+     * 
+     * @type {boolean}
+     * @memberof LDAPCheckAccess
+     */
+    hasSearchPermission?: boolean;
+    /**
+     * 
+     * @type {PolicyTestResult}
+     * @memberof LDAPCheckAccess
+     */
+    access: PolicyTestResult;
+}
+
+/**
+ * Check if a given object implements the LDAPCheckAccess interface.
+ */
+export function instanceOfLDAPCheckAccess(value: object): boolean {
+    let isInstance = true;
+    isInstance = isInstance && "access" in value;
+
+    return isInstance;
+}
+
+export function LDAPCheckAccessFromJSON(json: any): LDAPCheckAccess {
+    return LDAPCheckAccessFromJSONTyped(json, false);
+}
+
+export function LDAPCheckAccessFromJSONTyped(json: any, ignoreDiscriminator: boolean): LDAPCheckAccess {
+    if ((json === undefined) || (json === null)) {
+        return json;
+    }
+    return {
+        
+        'hasSearchPermission': !exists(json, 'has_search_permission') ? undefined : json['has_search_permission'],
+        'access': PolicyTestResultFromJSON(json['access']),
+    };
+}
+
+export function LDAPCheckAccessToJSON(value?: LDAPCheckAccess | null): any {
+    if (value === undefined) {
+        return undefined;
+    }
+    if (value === null) {
+        return null;
+    }
+    return {
+        
+        'has_search_permission': value.hasSearchPermission,
+        'access': PolicyTestResultToJSON(value.access),
+    };
+}
+

package/src/models/LDAPOutpostConfig.ts

@@ -56,12 +56,6 @@ export interface LDAPOutpostConfig {
      * @memberof LDAPOutpostConfig
      */
     readonly applicationSlug: string;
-    /**
-     * Users in this group can do search queries. If not set, every user can execute search queries.
-     * @type {string}
-     * @memberof LDAPOutpostConfig
-     */
-    searchGroup?: string | null;
     /**
      * 
      * @type {string}
@@ -134,7 +128,6 @@ export function LDAPOutpostConfigFromJSONTyped(json: any, ignoreDiscriminator: b
         'baseDn': !exists(json, 'base_dn') ? undefined : json['base_dn'],
         'bindFlowSlug': json['bind_flow_slug'],
         'applicationSlug': json['application_slug'],
-        'searchGroup': !exists(json, 'search_group') ? undefined : json['search_group'],
         'certificate': !exists(json, 'certificate') ? undefined : json['certificate'],
         'tlsServerName': !exists(json, 'tls_server_name') ? undefined : json['tls_server_name'],
         'uidStartNumber': !exists(json, 'uid_start_number') ? undefined : json['uid_start_number'],
@@ -157,7 +150,6 @@ export function LDAPOutpostConfigToJSON(value?: LDAPOutpostConfig | null): any {
         'name': value.name,
         'base_dn': value.baseDn,
         'bind_flow_slug': value.bindFlowSlug,
-        'search_group': value.searchGroup,
         'certificate': value.certificate,
         'tls_server_name': value.tlsServerName,
         'uid_start_number': value.uidStartNumber,

package/src/models/LDAPProvider.ts

@@ -110,12 +110,6 @@ export interface LDAPProvider {
      * @memberof LDAPProvider
      */
     baseDn?: string;
-    /**
-     * Users in this group can do search queries. If not set, every user can execute search queries.
-     * @type {string}
-     * @memberof LDAPProvider
-     */
-    searchGroup?: string | null;
     /**
      * 
      * @type {string}
@@ -211,7 +205,6 @@ export function LDAPProviderFromJSONTyped(json: any, ignoreDiscriminator: boolea
         'verboseNamePlural': json['verbose_name_plural'],
         'metaModelName': json['meta_model_name'],
         'baseDn': !exists(json, 'base_dn') ? undefined : json['base_dn'],
-        'searchGroup': !exists(json, 'search_group') ? undefined : json['search_group'],
         'certificate': !exists(json, 'certificate') ? undefined : json['certificate'],
         'tlsServerName': !exists(json, 'tls_server_name') ? undefined : json['tls_server_name'],
         'uidStartNumber': !exists(json, 'uid_start_number') ? undefined : json['uid_start_number'],
@@ -237,7 +230,6 @@ export function LDAPProviderToJSON(value?: LDAPProvider | null): any {
         'authorization_flow': value.authorizationFlow,
         'property_mappings': value.propertyMappings,
         'base_dn': value.baseDn,
-        'search_group': value.searchGroup,
         'certificate': value.certificate,
         'tls_server_name': value.tlsServerName,
         'uid_start_number': value.uidStartNumber,

package/src/models/LDAPProviderRequest.ts

@@ -56,12 +56,6 @@ export interface LDAPProviderRequest {
      * @memberof LDAPProviderRequest
      */
     baseDn?: string;
-    /**
-     * Users in this group can do search queries. If not set, every user can execute search queries.
-     * @type {string}
-     * @memberof LDAPProviderRequest
-     */
-    searchGroup?: string | null;
     /**
      * 
      * @type {string}
@@ -132,7 +126,6 @@ export function LDAPProviderRequestFromJSONTyped(json: any, ignoreDiscriminator:
         'authorizationFlow': json['authorization_flow'],
         'propertyMappings': !exists(json, 'property_mappings') ? undefined : json['property_mappings'],
         'baseDn': !exists(json, 'base_dn') ? undefined : json['base_dn'],
-        'searchGroup': !exists(json, 'search_group') ? undefined : json['search_group'],
         'certificate': !exists(json, 'certificate') ? undefined : json['certificate'],
         'tlsServerName': !exists(json, 'tls_server_name') ? undefined : json['tls_server_name'],
         'uidStartNumber': !exists(json, 'uid_start_number') ? undefined : json['uid_start_number'],
@@ -157,7 +150,6 @@ export function LDAPProviderRequestToJSON(value?: LDAPProviderRequest | null): a
         'authorization_flow': value.authorizationFlow,
         'property_mappings': value.propertyMappings,
         'base_dn': value.baseDn,
-        'search_group': value.searchGroup,
         'certificate': value.certificate,
         'tls_server_name': value.tlsServerName,
         'uid_start_number': value.uidStartNumber,

package/src/models/PatchedLDAPProviderRequest.ts

@@ -56,12 +56,6 @@ export interface PatchedLDAPProviderRequest {
      * @memberof PatchedLDAPProviderRequest
      */
     baseDn?: string;
-    /**
-     * Users in this group can do search queries. If not set, every user can execute search queries.
-     * @type {string}
-     * @memberof PatchedLDAPProviderRequest
-     */
-    searchGroup?: string | null;
     /**
      * 
      * @type {string}
@@ -130,7 +124,6 @@ export function PatchedLDAPProviderRequestFromJSONTyped(json: any, ignoreDiscrim
         'authorizationFlow': !exists(json, 'authorization_flow') ? undefined : json['authorization_flow'],
         'propertyMappings': !exists(json, 'property_mappings') ? undefined : json['property_mappings'],
         'baseDn': !exists(json, 'base_dn') ? undefined : json['base_dn'],
-        'searchGroup': !exists(json, 'search_group') ? undefined : json['search_group'],
         'certificate': !exists(json, 'certificate') ? undefined : json['certificate'],
         'tlsServerName': !exists(json, 'tls_server_name') ? undefined : json['tls_server_name'],
         'uidStartNumber': !exists(json, 'uid_start_number') ? undefined : json['uid_start_number'],
@@ -155,7 +148,6 @@ export function PatchedLDAPProviderRequestToJSON(value?: PatchedLDAPProviderRequ
         'authorization_flow': value.authorizationFlow,
         'property_mappings': value.propertyMappings,
         'base_dn': value.baseDn,
-        'search_group': value.searchGroup,
         'certificate': value.certificate,
         'tls_server_name': value.tlsServerName,
         'uid_start_number': value.uidStartNumber,

package/src/models/PatchedSAMLProviderRequest.ts

@@ -128,6 +128,24 @@ export interface PatchedSAMLProviderRequest {
      * @memberof PatchedSAMLProviderRequest
      */
     verificationKp?: string | null;
+    /**
+     * When selected, incoming assertions are encrypted by the IdP using the public key of the encryption keypair. The assertion is decrypted by the SP using the the private key.
+     * @type {string}
+     * @memberof PatchedSAMLProviderRequest
+     */
+    encryptionKp?: string | null;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof PatchedSAMLProviderRequest
+     */
+    signAssertion?: boolean;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof PatchedSAMLProviderRequest
+     */
+    signResponse?: boolean;
     /**
      * 
      * @type {SpBindingEnum}
@@ -176,6 +194,9 @@ export function PatchedSAMLProviderRequestFromJSONTyped(json: any, ignoreDiscrim
         'signatureAlgorithm': !exists(json, 'signature_algorithm') ? undefined : SignatureAlgorithmEnumFromJSON(json['signature_algorithm']),
         'signingKp': !exists(json, 'signing_kp') ? undefined : json['signing_kp'],
         'verificationKp': !exists(json, 'verification_kp') ? undefined : json['verification_kp'],
+        'encryptionKp': !exists(json, 'encryption_kp') ? undefined : json['encryption_kp'],
+        'signAssertion': !exists(json, 'sign_assertion') ? undefined : json['sign_assertion'],
+        'signResponse': !exists(json, 'sign_response') ? undefined : json['sign_response'],
         'spBinding': !exists(json, 'sp_binding') ? undefined : SpBindingEnumFromJSON(json['sp_binding']),
         'defaultRelayState': !exists(json, 'default_relay_state') ? undefined : json['default_relay_state'],
     };
@@ -205,6 +226,9 @@ export function PatchedSAMLProviderRequestToJSON(value?: PatchedSAMLProviderRequ
         'signature_algorithm': SignatureAlgorithmEnumToJSON(value.signatureAlgorithm),
         'signing_kp': value.signingKp,
         'verification_kp': value.verificationKp,
+        'encryption_kp': value.encryptionKp,
+        'sign_assertion': value.signAssertion,
+        'sign_response': value.signResponse,
         'sp_binding': SpBindingEnumToJSON(value.spBinding),
         'default_relay_state': value.defaultRelayState,
     };

package/src/models/SAMLProvider.ts

@@ -182,6 +182,24 @@ export interface SAMLProvider {
      * @memberof SAMLProvider
      */
     verificationKp?: string | null;
+    /**
+     * When selected, incoming assertions are encrypted by the IdP using the public key of the encryption keypair. The assertion is decrypted by the SP using the the private key.
+     * @type {string}
+     * @memberof SAMLProvider
+     */
+    encryptionKp?: string | null;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof SAMLProvider
+     */
+    signAssertion?: boolean;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof SAMLProvider
+     */
+    signResponse?: boolean;
     /**
      * 
      * @type {SpBindingEnum}
@@ -293,6 +311,9 @@ export function SAMLProviderFromJSONTyped(json: any, ignoreDiscriminator: boolea
         'signatureAlgorithm': !exists(json, 'signature_algorithm') ? undefined : SignatureAlgorithmEnumFromJSON(json['signature_algorithm']),
         'signingKp': !exists(json, 'signing_kp') ? undefined : json['signing_kp'],
         'verificationKp': !exists(json, 'verification_kp') ? undefined : json['verification_kp'],
+        'encryptionKp': !exists(json, 'encryption_kp') ? undefined : json['encryption_kp'],
+        'signAssertion': !exists(json, 'sign_assertion') ? undefined : json['sign_assertion'],
+        'signResponse': !exists(json, 'sign_response') ? undefined : json['sign_response'],
         'spBinding': !exists(json, 'sp_binding') ? undefined : SpBindingEnumFromJSON(json['sp_binding']),
         'defaultRelayState': !exists(json, 'default_relay_state') ? undefined : json['default_relay_state'],
         'urlDownloadMetadata': json['url_download_metadata'],
@@ -328,6 +349,9 @@ export function SAMLProviderToJSON(value?: SAMLProvider | null): any {
         'signature_algorithm': SignatureAlgorithmEnumToJSON(value.signatureAlgorithm),
         'signing_kp': value.signingKp,
         'verification_kp': value.verificationKp,
+        'encryption_kp': value.encryptionKp,
+        'sign_assertion': value.signAssertion,
+        'sign_response': value.signResponse,
         'sp_binding': SpBindingEnumToJSON(value.spBinding),
         'default_relay_state': value.defaultRelayState,
     };

package/src/models/SAMLProviderRequest.ts

@@ -128,6 +128,24 @@ export interface SAMLProviderRequest {
      * @memberof SAMLProviderRequest
      */
     verificationKp?: string | null;
+    /**
+     * When selected, incoming assertions are encrypted by the IdP using the public key of the encryption keypair. The assertion is decrypted by the SP using the the private key.
+     * @type {string}
+     * @memberof SAMLProviderRequest
+     */
+    encryptionKp?: string | null;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof SAMLProviderRequest
+     */
+    signAssertion?: boolean;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof SAMLProviderRequest
+     */
+    signResponse?: boolean;
     /**
      * 
      * @type {SpBindingEnum}
@@ -179,6 +197,9 @@ export function SAMLProviderRequestFromJSONTyped(json: any, ignoreDiscriminator:
         'signatureAlgorithm': !exists(json, 'signature_algorithm') ? undefined : SignatureAlgorithmEnumFromJSON(json['signature_algorithm']),
         'signingKp': !exists(json, 'signing_kp') ? undefined : json['signing_kp'],
         'verificationKp': !exists(json, 'verification_kp') ? undefined : json['verification_kp'],
+        'encryptionKp': !exists(json, 'encryption_kp') ? undefined : json['encryption_kp'],
+        'signAssertion': !exists(json, 'sign_assertion') ? undefined : json['sign_assertion'],
+        'signResponse': !exists(json, 'sign_response') ? undefined : json['sign_response'],
         'spBinding': !exists(json, 'sp_binding') ? undefined : SpBindingEnumFromJSON(json['sp_binding']),
         'defaultRelayState': !exists(json, 'default_relay_state') ? undefined : json['default_relay_state'],
     };
@@ -208,6 +229,9 @@ export function SAMLProviderRequestToJSON(value?: SAMLProviderRequest | null): a
         'signature_algorithm': SignatureAlgorithmEnumToJSON(value.signatureAlgorithm),
         'signing_kp': value.signingKp,
         'verification_kp': value.verificationKp,
+        'encryption_kp': value.encryptionKp,
+        'sign_assertion': value.signAssertion,
+        'sign_response': value.signResponse,
         'sp_binding': SpBindingEnumToJSON(value.spBinding),
         'default_relay_state': value.defaultRelayState,
     };

package/src/models/index.ts

@@ -179,6 +179,7 @@ export * from './IssuerModeEnum';
 export * from './KubernetesServiceConnection';
 export * from './KubernetesServiceConnectionRequest';
 export * from './LDAPAPIAccessMode';
+export * from './LDAPCheckAccess';
 export * from './LDAPDebug';
 export * from './LDAPOutpostConfig';
 export * from './LDAPProvider';