@goauthentik/api 2025.10.0-rc1-1759955726 → 2025.10.0-rc1-1760097716

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goauthentik/api",
-  "version": "2025.10.0-rc1-1759955726",
+  "version": "2025.10.0-rc1-1760097716",
   "description": "OpenAPI client for @goauthentik/api",
   "author": "OpenAPI-Generator",
   "repository": {

package/src/apis/ProvidersApi.ts

@@ -693,6 +693,7 @@ export interface ProvidersSamlListRequest {
     invalidationFlow?: string;
     isBackchannel?: boolean;
     issuer?: string;
+    logoutMethod?: ProvidersSamlListLogoutMethodEnum;
     name?: string;
     nameIdMapping?: string;
     ordering?: string;
@@ -702,9 +703,12 @@ export interface ProvidersSamlListRequest {
     search?: string;
     sessionValidNotOnOrAfter?: string;
     signAssertion?: boolean;
+    signLogoutRequest?: boolean;
     signResponse?: boolean;
     signatureAlgorithm?: ProvidersSamlListSignatureAlgorithmEnum;
     signingKp?: string;
+    slsBinding?: ProvidersSamlListSlsBindingEnum;
+    slsUrl?: string;
     spBinding?: ProvidersSamlListSpBindingEnum;
     verificationKp?: string;
 }
@@ -5199,6 +5203,10 @@ export class ProvidersApi extends runtime.BaseAPI {
             queryParameters['issuer'] = requestParameters['issuer'];
         }
 
+        if (requestParameters['logoutMethod'] != null) {
+            queryParameters['logout_method'] = requestParameters['logoutMethod'];
+        }
+
         if (requestParameters['name'] != null) {
             queryParameters['name'] = requestParameters['name'];
         }
@@ -5235,6 +5243,10 @@ export class ProvidersApi extends runtime.BaseAPI {
             queryParameters['sign_assertion'] = requestParameters['signAssertion'];
         }
 
+        if (requestParameters['signLogoutRequest'] != null) {
+            queryParameters['sign_logout_request'] = requestParameters['signLogoutRequest'];
+        }
+
         if (requestParameters['signResponse'] != null) {
             queryParameters['sign_response'] = requestParameters['signResponse'];
         }
@@ -5247,6 +5259,14 @@ export class ProvidersApi extends runtime.BaseAPI {
             queryParameters['signing_kp'] = requestParameters['signingKp'];
         }
 
+        if (requestParameters['slsBinding'] != null) {
+            queryParameters['sls_binding'] = requestParameters['slsBinding'];
+        }
+
+        if (requestParameters['slsUrl'] != null) {
+            queryParameters['sls_url'] = requestParameters['slsUrl'];
+        }
+
         if (requestParameters['spBinding'] != null) {
             queryParameters['sp_binding'] = requestParameters['spBinding'];
         }
@@ -6928,6 +6948,16 @@ export const ProvidersSamlListDigestAlgorithmEnum = {
     UnknownDefaultOpenApi: '11184809'
 } as const;
 export type ProvidersSamlListDigestAlgorithmEnum = typeof ProvidersSamlListDigestAlgorithmEnum[keyof typeof ProvidersSamlListDigestAlgorithmEnum];
+/**
+ * @export
+ */
+export const ProvidersSamlListLogoutMethodEnum = {
+    Backchannel: 'backchannel',
+    FrontchannelIframe: 'frontchannel_iframe',
+    FrontchannelNative: 'frontchannel_native',
+    UnknownDefaultOpenApi: '11184809'
+} as const;
+export type ProvidersSamlListLogoutMethodEnum = typeof ProvidersSamlListLogoutMethodEnum[keyof typeof ProvidersSamlListLogoutMethodEnum];
 /**
  * @export
  */
@@ -6944,6 +6974,15 @@ export const ProvidersSamlListSignatureAlgorithmEnum = {
     UnknownDefaultOpenApi: '11184809'
 } as const;
 export type ProvidersSamlListSignatureAlgorithmEnum = typeof ProvidersSamlListSignatureAlgorithmEnum[keyof typeof ProvidersSamlListSignatureAlgorithmEnum];
+/**
+ * @export
+ */
+export const ProvidersSamlListSlsBindingEnum = {
+    Post: 'post',
+    Redirect: 'redirect',
+    UnknownDefaultOpenApi: '11184809'
+} as const;
+export type ProvidersSamlListSlsBindingEnum = typeof ProvidersSamlListSlsBindingEnum[keyof typeof ProvidersSamlListSlsBindingEnum];
 /**
  * @export
  */

package/src/models/ChallengeTypes.ts

@@ -131,6 +131,20 @@ import {
     IdentificationChallengeFromJSONTyped,
     IdentificationChallengeToJSON,
 } from './IdentificationChallenge';
+import type { IframeLogoutChallenge } from './IframeLogoutChallenge';
+import {
+    instanceOfIframeLogoutChallenge,
+    IframeLogoutChallengeFromJSON,
+    IframeLogoutChallengeFromJSONTyped,
+    IframeLogoutChallengeToJSON,
+} from './IframeLogoutChallenge';
+import type { NativeLogoutChallenge } from './NativeLogoutChallenge';
+import {
+    instanceOfNativeLogoutChallenge,
+    NativeLogoutChallengeFromJSON,
+    NativeLogoutChallengeFromJSONTyped,
+    NativeLogoutChallengeToJSON,
+} from './NativeLogoutChallenge';
 import type { OAuthDeviceCodeChallenge } from './OAuthDeviceCodeChallenge';
 import {
     instanceOfOAuthDeviceCodeChallenge,
@@ -207,7 +221,7 @@ import {
  * 
  * @export
  */
-export type ChallengeTypes = { component: 'ak-provider-oauth2-device-code' } & OAuthDeviceCodeChallenge | { component: 'ak-provider-oauth2-device-code-finish' } & OAuthDeviceCodeFinishChallenge | { component: 'ak-source-oauth-apple' } & AppleLoginChallenge | { component: 'ak-source-plex' } & PlexAuthenticationChallenge | { component: 'ak-source-telegram' } & TelegramLoginChallenge | { component: 'ak-stage-access-denied' } & AccessDeniedChallenge | { component: 'ak-stage-authenticator-duo' } & AuthenticatorDuoChallenge | { component: 'ak-stage-authenticator-email' } & AuthenticatorEmailChallenge | { component: 'ak-stage-authenticator-sms' } & AuthenticatorSMSChallenge | { component: 'ak-stage-authenticator-static' } & AuthenticatorStaticChallenge | { component: 'ak-stage-authenticator-totp' } & AuthenticatorTOTPChallenge | { component: 'ak-stage-authenticator-validate' } & AuthenticatorValidationChallenge | { component: 'ak-stage-authenticator-webauthn' } & AuthenticatorWebAuthnChallenge | { component: 'ak-stage-autosubmit' } & AutosubmitChallenge | { component: 'ak-stage-captcha' } & CaptchaChallenge | { component: 'ak-stage-consent' } & ConsentChallenge | { component: 'ak-stage-dummy' } & DummyChallenge | { component: 'ak-stage-email' } & EmailChallenge | { component: 'ak-stage-flow-error' } & FlowErrorChallenge | { component: 'ak-stage-identification' } & IdentificationChallenge | { component: 'ak-stage-password' } & PasswordChallenge | { component: 'ak-stage-prompt' } & PromptChallenge | { component: 'ak-stage-session-end' } & SessionEndChallenge | { component: 'ak-stage-user-login' } & UserLoginChallenge | { component: 'xak-flow-frame' } & FrameChallenge | { component: 'xak-flow-redirect' } & RedirectChallenge | { component: 'xak-flow-shell' } & ShellChallenge;
+export type ChallengeTypes = { component: 'ak-provider-iframe-logout' } & IframeLogoutChallenge | { component: 'ak-provider-oauth2-device-code' } & OAuthDeviceCodeChallenge | { component: 'ak-provider-oauth2-device-code-finish' } & OAuthDeviceCodeFinishChallenge | { component: 'ak-provider-saml-native-logout' } & NativeLogoutChallenge | { component: 'ak-source-oauth-apple' } & AppleLoginChallenge | { component: 'ak-source-plex' } & PlexAuthenticationChallenge | { component: 'ak-source-telegram' } & TelegramLoginChallenge | { component: 'ak-stage-access-denied' } & AccessDeniedChallenge | { component: 'ak-stage-authenticator-duo' } & AuthenticatorDuoChallenge | { component: 'ak-stage-authenticator-email' } & AuthenticatorEmailChallenge | { component: 'ak-stage-authenticator-sms' } & AuthenticatorSMSChallenge | { component: 'ak-stage-authenticator-static' } & AuthenticatorStaticChallenge | { component: 'ak-stage-authenticator-totp' } & AuthenticatorTOTPChallenge | { component: 'ak-stage-authenticator-validate' } & AuthenticatorValidationChallenge | { component: 'ak-stage-authenticator-webauthn' } & AuthenticatorWebAuthnChallenge | { component: 'ak-stage-autosubmit' } & AutosubmitChallenge | { component: 'ak-stage-captcha' } & CaptchaChallenge | { component: 'ak-stage-consent' } & ConsentChallenge | { component: 'ak-stage-dummy' } & DummyChallenge | { component: 'ak-stage-email' } & EmailChallenge | { component: 'ak-stage-flow-error' } & FlowErrorChallenge | { component: 'ak-stage-identification' } & IdentificationChallenge | { component: 'ak-stage-password' } & PasswordChallenge | { component: 'ak-stage-prompt' } & PromptChallenge | { component: 'ak-stage-session-end' } & SessionEndChallenge | { component: 'ak-stage-user-login' } & UserLoginChallenge | { component: 'xak-flow-frame' } & FrameChallenge | { component: 'xak-flow-redirect' } & RedirectChallenge | { component: 'xak-flow-shell' } & ShellChallenge;
 
 export function ChallengeTypesFromJSON(json: any): ChallengeTypes {
     return ChallengeTypesFromJSONTyped(json, false);
@@ -218,10 +232,14 @@ export function ChallengeTypesFromJSONTyped(json: any, ignoreDiscriminator: bool
         return json;
     }
     switch (json['component']) {
+        case 'ak-provider-iframe-logout':
+            return Object.assign({}, IframeLogoutChallengeFromJSONTyped(json, true), { component: 'ak-provider-iframe-logout' } as const);
         case 'ak-provider-oauth2-device-code':
             return Object.assign({}, OAuthDeviceCodeChallengeFromJSONTyped(json, true), { component: 'ak-provider-oauth2-device-code' } as const);
         case 'ak-provider-oauth2-device-code-finish':
             return Object.assign({}, OAuthDeviceCodeFinishChallengeFromJSONTyped(json, true), { component: 'ak-provider-oauth2-device-code-finish' } as const);
+        case 'ak-provider-saml-native-logout':
+            return Object.assign({}, NativeLogoutChallengeFromJSONTyped(json, true), { component: 'ak-provider-saml-native-logout' } as const);
         case 'ak-source-oauth-apple':
             return Object.assign({}, AppleLoginChallengeFromJSONTyped(json, true), { component: 'ak-source-oauth-apple' } as const);
         case 'ak-source-plex':
@@ -286,10 +304,14 @@ export function ChallengeTypesToJSONTyped(value?: ChallengeTypes | null, ignoreD
         return value;
     }
     switch (value['component']) {
+        case 'ak-provider-iframe-logout':
+            return Object.assign({}, IframeLogoutChallengeToJSON(value), { component: 'ak-provider-iframe-logout' } as const);
         case 'ak-provider-oauth2-device-code':
             return Object.assign({}, OAuthDeviceCodeChallengeToJSON(value), { component: 'ak-provider-oauth2-device-code' } as const);
         case 'ak-provider-oauth2-device-code-finish':
             return Object.assign({}, OAuthDeviceCodeFinishChallengeToJSON(value), { component: 'ak-provider-oauth2-device-code-finish' } as const);
+        case 'ak-provider-saml-native-logout':
+            return Object.assign({}, NativeLogoutChallengeToJSON(value), { component: 'ak-provider-saml-native-logout' } as const);
         case 'ak-source-oauth-apple':
             return Object.assign({}, AppleLoginChallengeToJSON(value), { component: 'ak-source-oauth-apple' } as const);
         case 'ak-source-plex':

package/src/models/FlowChallengeResponseRequest.ts

@@ -117,6 +117,20 @@ import {
     IdentificationChallengeResponseRequestFromJSONTyped,
     IdentificationChallengeResponseRequestToJSON,
 } from './IdentificationChallengeResponseRequest';
+import type { IframeLogoutChallengeResponseRequest } from './IframeLogoutChallengeResponseRequest';
+import {
+    instanceOfIframeLogoutChallengeResponseRequest,
+    IframeLogoutChallengeResponseRequestFromJSON,
+    IframeLogoutChallengeResponseRequestFromJSONTyped,
+    IframeLogoutChallengeResponseRequestToJSON,
+} from './IframeLogoutChallengeResponseRequest';
+import type { NativeLogoutChallengeResponseRequest } from './NativeLogoutChallengeResponseRequest';
+import {
+    instanceOfNativeLogoutChallengeResponseRequest,
+    NativeLogoutChallengeResponseRequestFromJSON,
+    NativeLogoutChallengeResponseRequestFromJSONTyped,
+    NativeLogoutChallengeResponseRequestToJSON,
+} from './NativeLogoutChallengeResponseRequest';
 import type { OAuthDeviceCodeChallengeResponseRequest } from './OAuthDeviceCodeChallengeResponseRequest';
 import {
     instanceOfOAuthDeviceCodeChallengeResponseRequest,
@@ -179,7 +193,7 @@ import {
  * 
  * @export
  */
-export type FlowChallengeResponseRequest = { component: 'ak-provider-oauth2-device-code' } & OAuthDeviceCodeChallengeResponseRequest | { component: 'ak-provider-oauth2-device-code-finish' } & OAuthDeviceCodeFinishChallengeResponseRequest | { component: 'ak-source-oauth-apple' } & AppleChallengeResponseRequest | { component: 'ak-source-plex' } & PlexAuthenticationChallengeResponseRequest | { component: 'ak-source-telegram' } & TelegramChallengeResponseRequest | { component: 'ak-stage-authenticator-duo' } & AuthenticatorDuoChallengeResponseRequest | { component: 'ak-stage-authenticator-email' } & AuthenticatorEmailChallengeResponseRequest | { component: 'ak-stage-authenticator-sms' } & AuthenticatorSMSChallengeResponseRequest | { component: 'ak-stage-authenticator-static' } & AuthenticatorStaticChallengeResponseRequest | { component: 'ak-stage-authenticator-totp' } & AuthenticatorTOTPChallengeResponseRequest | { component: 'ak-stage-authenticator-validate' } & AuthenticatorValidationChallengeResponseRequest | { component: 'ak-stage-authenticator-webauthn' } & AuthenticatorWebAuthnChallengeResponseRequest | { component: 'ak-stage-autosubmit' } & AutoSubmitChallengeResponseRequest | { component: 'ak-stage-captcha' } & CaptchaChallengeResponseRequest | { component: 'ak-stage-consent' } & ConsentChallengeResponseRequest | { component: 'ak-stage-dummy' } & DummyChallengeResponseRequest | { component: 'ak-stage-email' } & EmailChallengeResponseRequest | { component: 'ak-stage-identification' } & IdentificationChallengeResponseRequest | { component: 'ak-stage-password' } & PasswordChallengeResponseRequest | { component: 'ak-stage-prompt' } & PromptChallengeResponseRequest | { component: 'ak-stage-user-login' } & UserLoginChallengeResponseRequest | { component: 'xak-flow-frame' } & FrameChallengeResponseRequest | { component: 'xak-flow-redirect' } & RedirectChallengeResponseRequest;
+export type FlowChallengeResponseRequest = { component: 'ak-provider-iframe-logout' } & IframeLogoutChallengeResponseRequest | { component: 'ak-provider-oauth2-device-code' } & OAuthDeviceCodeChallengeResponseRequest | { component: 'ak-provider-oauth2-device-code-finish' } & OAuthDeviceCodeFinishChallengeResponseRequest | { component: 'ak-provider-saml-native-logout' } & NativeLogoutChallengeResponseRequest | { component: 'ak-source-oauth-apple' } & AppleChallengeResponseRequest | { component: 'ak-source-plex' } & PlexAuthenticationChallengeResponseRequest | { component: 'ak-source-telegram' } & TelegramChallengeResponseRequest | { component: 'ak-stage-authenticator-duo' } & AuthenticatorDuoChallengeResponseRequest | { component: 'ak-stage-authenticator-email' } & AuthenticatorEmailChallengeResponseRequest | { component: 'ak-stage-authenticator-sms' } & AuthenticatorSMSChallengeResponseRequest | { component: 'ak-stage-authenticator-static' } & AuthenticatorStaticChallengeResponseRequest | { component: 'ak-stage-authenticator-totp' } & AuthenticatorTOTPChallengeResponseRequest | { component: 'ak-stage-authenticator-validate' } & AuthenticatorValidationChallengeResponseRequest | { component: 'ak-stage-authenticator-webauthn' } & AuthenticatorWebAuthnChallengeResponseRequest | { component: 'ak-stage-autosubmit' } & AutoSubmitChallengeResponseRequest | { component: 'ak-stage-captcha' } & CaptchaChallengeResponseRequest | { component: 'ak-stage-consent' } & ConsentChallengeResponseRequest | { component: 'ak-stage-dummy' } & DummyChallengeResponseRequest | { component: 'ak-stage-email' } & EmailChallengeResponseRequest | { component: 'ak-stage-identification' } & IdentificationChallengeResponseRequest | { component: 'ak-stage-password' } & PasswordChallengeResponseRequest | { component: 'ak-stage-prompt' } & PromptChallengeResponseRequest | { component: 'ak-stage-user-login' } & UserLoginChallengeResponseRequest | { component: 'xak-flow-frame' } & FrameChallengeResponseRequest | { component: 'xak-flow-redirect' } & RedirectChallengeResponseRequest;
 
 export function FlowChallengeResponseRequestFromJSON(json: any): FlowChallengeResponseRequest {
     return FlowChallengeResponseRequestFromJSONTyped(json, false);
@@ -190,10 +204,14 @@ export function FlowChallengeResponseRequestFromJSONTyped(json: any, ignoreDiscr
         return json;
     }
     switch (json['component']) {
+        case 'ak-provider-iframe-logout':
+            return Object.assign({}, IframeLogoutChallengeResponseRequestFromJSONTyped(json, true), { component: 'ak-provider-iframe-logout' } as const);
         case 'ak-provider-oauth2-device-code':
             return Object.assign({}, OAuthDeviceCodeChallengeResponseRequestFromJSONTyped(json, true), { component: 'ak-provider-oauth2-device-code' } as const);
         case 'ak-provider-oauth2-device-code-finish':
             return Object.assign({}, OAuthDeviceCodeFinishChallengeResponseRequestFromJSONTyped(json, true), { component: 'ak-provider-oauth2-device-code-finish' } as const);
+        case 'ak-provider-saml-native-logout':
+            return Object.assign({}, NativeLogoutChallengeResponseRequestFromJSONTyped(json, true), { component: 'ak-provider-saml-native-logout' } as const);
         case 'ak-source-oauth-apple':
             return Object.assign({}, AppleChallengeResponseRequestFromJSONTyped(json, true), { component: 'ak-source-oauth-apple' } as const);
         case 'ak-source-plex':
@@ -250,10 +268,14 @@ export function FlowChallengeResponseRequestToJSONTyped(value?: FlowChallengeRes
         return value;
     }
     switch (value['component']) {
+        case 'ak-provider-iframe-logout':
+            return Object.assign({}, IframeLogoutChallengeResponseRequestToJSON(value), { component: 'ak-provider-iframe-logout' } as const);
         case 'ak-provider-oauth2-device-code':
             return Object.assign({}, OAuthDeviceCodeChallengeResponseRequestToJSON(value), { component: 'ak-provider-oauth2-device-code' } as const);
         case 'ak-provider-oauth2-device-code-finish':
             return Object.assign({}, OAuthDeviceCodeFinishChallengeResponseRequestToJSON(value), { component: 'ak-provider-oauth2-device-code-finish' } as const);
+        case 'ak-provider-saml-native-logout':
+            return Object.assign({}, NativeLogoutChallengeResponseRequestToJSON(value), { component: 'ak-provider-saml-native-logout' } as const);
         case 'ak-source-oauth-apple':
             return Object.assign({}, AppleChallengeResponseRequestToJSON(value), { component: 'ak-source-oauth-apple' } as const);
         case 'ak-source-plex':

package/src/models/IframeLogoutChallenge.ts

@@ -0,0 +1,104 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * authentik
+ * Making authentication simple.
+ *
+ * The version of the OpenAPI document: 2025.10.0-rc1
+ * Contact: hello@goauthentik.io
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+import type { ErrorDetail } from './ErrorDetail';
+import {
+    ErrorDetailFromJSON,
+    ErrorDetailFromJSONTyped,
+    ErrorDetailToJSON,
+    ErrorDetailToJSONTyped,
+} from './ErrorDetail';
+import type { ContextualFlowInfo } from './ContextualFlowInfo';
+import {
+    ContextualFlowInfoFromJSON,
+    ContextualFlowInfoFromJSONTyped,
+    ContextualFlowInfoToJSON,
+    ContextualFlowInfoToJSONTyped,
+} from './ContextualFlowInfo';
+
+/**
+ * Challenge for iframe logout
+ * @export
+ * @interface IframeLogoutChallenge
+ */
+export interface IframeLogoutChallenge {
+    /**
+     * 
+     * @type {ContextualFlowInfo}
+     * @memberof IframeLogoutChallenge
+     */
+    flowInfo?: ContextualFlowInfo;
+    /**
+     * 
+     * @type {string}
+     * @memberof IframeLogoutChallenge
+     */
+    component?: string;
+    /**
+     * 
+     * @type {{ [key: string]: Array<ErrorDetail>; }}
+     * @memberof IframeLogoutChallenge
+     */
+    responseErrors?: { [key: string]: Array<ErrorDetail>; };
+    /**
+     * 
+     * @type {Array<{ [key: string]: any; }>}
+     * @memberof IframeLogoutChallenge
+     */
+    logoutUrls?: Array<{ [key: string]: any; }>;
+}
+
+/**
+ * Check if a given object implements the IframeLogoutChallenge interface.
+ */
+export function instanceOfIframeLogoutChallenge(value: object): value is IframeLogoutChallenge {
+    return true;
+}
+
+export function IframeLogoutChallengeFromJSON(json: any): IframeLogoutChallenge {
+    return IframeLogoutChallengeFromJSONTyped(json, false);
+}
+
+export function IframeLogoutChallengeFromJSONTyped(json: any, ignoreDiscriminator: boolean): IframeLogoutChallenge {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'flowInfo': json['flow_info'] == null ? undefined : ContextualFlowInfoFromJSON(json['flow_info']),
+        'component': json['component'] == null ? undefined : json['component'],
+        'responseErrors': json['response_errors'] == null ? undefined : json['response_errors'],
+        'logoutUrls': json['logout_urls'] == null ? undefined : json['logout_urls'],
+    };
+}
+
+export function IframeLogoutChallengeToJSON(json: any): IframeLogoutChallenge {
+    return IframeLogoutChallengeToJSONTyped(json, false);
+}
+
+export function IframeLogoutChallengeToJSONTyped(value?: IframeLogoutChallenge | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'flow_info': ContextualFlowInfoToJSON(value['flowInfo']),
+        'component': value['component'],
+        'response_errors': value['responseErrors'],
+        'logout_urls': value['logoutUrls'],
+    };
+}
+

package/src/models/IframeLogoutChallengeResponseRequest.ts

@@ -0,0 +1,65 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * authentik
+ * Making authentication simple.
+ *
+ * The version of the OpenAPI document: 2025.10.0-rc1
+ * Contact: hello@goauthentik.io
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+/**
+ * Response for iframe logout
+ * @export
+ * @interface IframeLogoutChallengeResponseRequest
+ */
+export interface IframeLogoutChallengeResponseRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof IframeLogoutChallengeResponseRequest
+     */
+    component?: string;
+}
+
+/**
+ * Check if a given object implements the IframeLogoutChallengeResponseRequest interface.
+ */
+export function instanceOfIframeLogoutChallengeResponseRequest(value: object): value is IframeLogoutChallengeResponseRequest {
+    return true;
+}
+
+export function IframeLogoutChallengeResponseRequestFromJSON(json: any): IframeLogoutChallengeResponseRequest {
+    return IframeLogoutChallengeResponseRequestFromJSONTyped(json, false);
+}
+
+export function IframeLogoutChallengeResponseRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): IframeLogoutChallengeResponseRequest {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'component': json['component'] == null ? undefined : json['component'],
+    };
+}
+
+export function IframeLogoutChallengeResponseRequestToJSON(json: any): IframeLogoutChallengeResponseRequest {
+    return IframeLogoutChallengeResponseRequestToJSONTyped(json, false);
+}
+
+export function IframeLogoutChallengeResponseRequestToJSONTyped(value?: IframeLogoutChallengeResponseRequest | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'component': value['component'],
+    };
+}
+

package/src/models/NativeLogoutChallenge.ts

@@ -0,0 +1,152 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * authentik
+ * Making authentication simple.
+ *
+ * The version of the OpenAPI document: 2025.10.0-rc1
+ * Contact: hello@goauthentik.io
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+import type { ErrorDetail } from './ErrorDetail';
+import {
+    ErrorDetailFromJSON,
+    ErrorDetailFromJSONTyped,
+    ErrorDetailToJSON,
+    ErrorDetailToJSONTyped,
+} from './ErrorDetail';
+import type { ContextualFlowInfo } from './ContextualFlowInfo';
+import {
+    ContextualFlowInfoFromJSON,
+    ContextualFlowInfoFromJSONTyped,
+    ContextualFlowInfoToJSON,
+    ContextualFlowInfoToJSONTyped,
+} from './ContextualFlowInfo';
+
+/**
+ * Challenge for native browser logout
+ * @export
+ * @interface NativeLogoutChallenge
+ */
+export interface NativeLogoutChallenge {
+    /**
+     * 
+     * @type {ContextualFlowInfo}
+     * @memberof NativeLogoutChallenge
+     */
+    flowInfo?: ContextualFlowInfo;
+    /**
+     * 
+     * @type {string}
+     * @memberof NativeLogoutChallenge
+     */
+    component?: string;
+    /**
+     * 
+     * @type {{ [key: string]: Array<ErrorDetail>; }}
+     * @memberof NativeLogoutChallenge
+     */
+    responseErrors?: { [key: string]: Array<ErrorDetail>; };
+    /**
+     * 
+     * @type {string}
+     * @memberof NativeLogoutChallenge
+     */
+    postUrl?: string;
+    /**
+     * 
+     * @type {string}
+     * @memberof NativeLogoutChallenge
+     */
+    samlRequest?: string;
+    /**
+     * 
+     * @type {string}
+     * @memberof NativeLogoutChallenge
+     */
+    relayState?: string;
+    /**
+     * 
+     * @type {string}
+     * @memberof NativeLogoutChallenge
+     */
+    providerName?: string;
+    /**
+     * 
+     * @type {string}
+     * @memberof NativeLogoutChallenge
+     */
+    binding?: string;
+    /**
+     * 
+     * @type {string}
+     * @memberof NativeLogoutChallenge
+     */
+    redirectUrl?: string;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof NativeLogoutChallenge
+     */
+    isComplete?: boolean;
+}
+
+/**
+ * Check if a given object implements the NativeLogoutChallenge interface.
+ */
+export function instanceOfNativeLogoutChallenge(value: object): value is NativeLogoutChallenge {
+    return true;
+}
+
+export function NativeLogoutChallengeFromJSON(json: any): NativeLogoutChallenge {
+    return NativeLogoutChallengeFromJSONTyped(json, false);
+}
+
+export function NativeLogoutChallengeFromJSONTyped(json: any, ignoreDiscriminator: boolean): NativeLogoutChallenge {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'flowInfo': json['flow_info'] == null ? undefined : ContextualFlowInfoFromJSON(json['flow_info']),
+        'component': json['component'] == null ? undefined : json['component'],
+        'responseErrors': json['response_errors'] == null ? undefined : json['response_errors'],
+        'postUrl': json['post_url'] == null ? undefined : json['post_url'],
+        'samlRequest': json['saml_request'] == null ? undefined : json['saml_request'],
+        'relayState': json['relay_state'] == null ? undefined : json['relay_state'],
+        'providerName': json['provider_name'] == null ? undefined : json['provider_name'],
+        'binding': json['binding'] == null ? undefined : json['binding'],
+        'redirectUrl': json['redirect_url'] == null ? undefined : json['redirect_url'],
+        'isComplete': json['is_complete'] == null ? undefined : json['is_complete'],
+    };
+}
+
+export function NativeLogoutChallengeToJSON(json: any): NativeLogoutChallenge {
+    return NativeLogoutChallengeToJSONTyped(json, false);
+}
+
+export function NativeLogoutChallengeToJSONTyped(value?: NativeLogoutChallenge | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'flow_info': ContextualFlowInfoToJSON(value['flowInfo']),
+        'component': value['component'],
+        'response_errors': value['responseErrors'],
+        'post_url': value['postUrl'],
+        'saml_request': value['samlRequest'],
+        'relay_state': value['relayState'],
+        'provider_name': value['providerName'],
+        'binding': value['binding'],
+        'redirect_url': value['redirectUrl'],
+        'is_complete': value['isComplete'],
+    };
+}
+

package/src/models/NativeLogoutChallengeResponseRequest.ts

@@ -0,0 +1,65 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * authentik
+ * Making authentication simple.
+ *
+ * The version of the OpenAPI document: 2025.10.0-rc1
+ * Contact: hello@goauthentik.io
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+/**
+ * Response for native browser logout
+ * @export
+ * @interface NativeLogoutChallengeResponseRequest
+ */
+export interface NativeLogoutChallengeResponseRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof NativeLogoutChallengeResponseRequest
+     */
+    component?: string;
+}
+
+/**
+ * Check if a given object implements the NativeLogoutChallengeResponseRequest interface.
+ */
+export function instanceOfNativeLogoutChallengeResponseRequest(value: object): value is NativeLogoutChallengeResponseRequest {
+    return true;
+}
+
+export function NativeLogoutChallengeResponseRequestFromJSON(json: any): NativeLogoutChallengeResponseRequest {
+    return NativeLogoutChallengeResponseRequestFromJSONTyped(json, false);
+}
+
+export function NativeLogoutChallengeResponseRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): NativeLogoutChallengeResponseRequest {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'component': json['component'] == null ? undefined : json['component'],
+    };
+}
+
+export function NativeLogoutChallengeResponseRequestToJSON(json: any): NativeLogoutChallengeResponseRequest {
+    return NativeLogoutChallengeResponseRequestToJSONTyped(json, false);
+}
+
+export function NativeLogoutChallengeResponseRequestToJSONTyped(value?: NativeLogoutChallengeResponseRequest | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'component': value['component'],
+    };
+}
+

package/src/models/OAuth2Provider.ts

@@ -27,6 +27,13 @@ import {
     SubModeEnumToJSON,
     SubModeEnumToJSONTyped,
 } from './SubModeEnum';
+import type { OAuth2ProviderLogoutMethodEnum } from './OAuth2ProviderLogoutMethodEnum';
+import {
+    OAuth2ProviderLogoutMethodEnumFromJSON,
+    OAuth2ProviderLogoutMethodEnumFromJSONTyped,
+    OAuth2ProviderLogoutMethodEnumToJSON,
+    OAuth2ProviderLogoutMethodEnumToJSONTyped,
+} from './OAuth2ProviderLogoutMethodEnum';
 import type { RedirectURI } from './RedirectURI';
 import {
     RedirectURIFromJSON,
@@ -203,7 +210,13 @@ export interface OAuth2Provider {
      * @type {string}
      * @memberof OAuth2Provider
      */
-    backchannelLogoutUri?: string;
+    logoutUri?: string;
+    /**
+     * Backchannel logs out with server to server calls. Frontchannel uses iframes in your browser
+     * @type {OAuth2ProviderLogoutMethodEnum}
+     * @memberof OAuth2Provider
+     */
+    logoutMethod?: OAuth2ProviderLogoutMethodEnum;
     /**
      * Configure what data should be used as unique User Identifier. For most cases, the default should be fine.
      * @type {SubModeEnum}
@@ -287,7 +300,8 @@ export function OAuth2ProviderFromJSONTyped(json: any, ignoreDiscriminator: bool
         'signingKey': json['signing_key'] == null ? undefined : json['signing_key'],
         'encryptionKey': json['encryption_key'] == null ? undefined : json['encryption_key'],
         'redirectUris': ((json['redirect_uris'] as Array<any>).map(RedirectURIFromJSON)),
-        'backchannelLogoutUri': json['backchannel_logout_uri'] == null ? undefined : json['backchannel_logout_uri'],
+        'logoutUri': json['logout_uri'] == null ? undefined : json['logout_uri'],
+        'logoutMethod': json['logout_method'] == null ? undefined : OAuth2ProviderLogoutMethodEnumFromJSON(json['logout_method']),
         'subMode': json['sub_mode'] == null ? undefined : SubModeEnumFromJSON(json['sub_mode']),
         'issuerMode': json['issuer_mode'] == null ? undefined : IssuerModeEnumFromJSON(json['issuer_mode']),
         'jwtFederationSources': json['jwt_federation_sources'] == null ? undefined : json['jwt_federation_sources'],
@@ -322,7 +336,8 @@ export function OAuth2ProviderToJSONTyped(value?: Omit<OAuth2Provider, 'pk'|'com
         'signing_key': value['signingKey'],
         'encryption_key': value['encryptionKey'],
         'redirect_uris': ((value['redirectUris'] as Array<any>).map(RedirectURIToJSON)),
-        'backchannel_logout_uri': value['backchannelLogoutUri'],
+        'logout_uri': value['logoutUri'],
+        'logout_method': OAuth2ProviderLogoutMethodEnumToJSON(value['logoutMethod']),
         'sub_mode': SubModeEnumToJSON(value['subMode']),
         'issuer_mode': IssuerModeEnumToJSON(value['issuerMode']),
         'jwt_federation_sources': value['jwtFederationSources'],