@goauthentik/api 2025.4.1-1747332783 → 2025.4.1-1747687715

package/.openapi-generator/FILES

@@ -96,6 +96,7 @@ src/models/CaptchaChallenge.ts
 src/models/CaptchaChallengeResponseRequest.ts
 src/models/CaptchaStage.ts
 src/models/CaptchaStageRequest.ts
+src/models/CertAttributeEnum.ts
 src/models/CertificateData.ts
 src/models/CertificateGenerationRequest.ts
 src/models/CertificateKeyPair.ts
@@ -275,6 +276,9 @@ src/models/MicrosoftEntraProviderUser.ts
 src/models/MicrosoftEntraProviderUserRequest.ts
 src/models/ModelEnum.ts
 src/models/ModelRequest.ts
+src/models/MutualTLSStage.ts
+src/models/MutualTLSStageModeEnum.ts
+src/models/MutualTLSStageRequest.ts
 src/models/NameIdPolicyEnum.ts
 src/models/NetworkBindingEnum.ts
 src/models/NotConfiguredActionEnum.ts
@@ -369,6 +373,7 @@ src/models/PaginatedMicrosoftEntraProviderGroupList.ts
 src/models/PaginatedMicrosoftEntraProviderList.ts
 src/models/PaginatedMicrosoftEntraProviderMappingList.ts
 src/models/PaginatedMicrosoftEntraProviderUserList.ts
+src/models/PaginatedMutualTLSStageList.ts
 src/models/PaginatedNotificationList.ts
 src/models/PaginatedNotificationRuleList.ts
 src/models/PaginatedNotificationTransportList.ts
@@ -508,6 +513,7 @@ src/models/PatchedLDAPSourceRequest.ts
 src/models/PatchedLicenseRequest.ts
 src/models/PatchedMicrosoftEntraProviderMappingRequest.ts
 src/models/PatchedMicrosoftEntraProviderRequest.ts
+src/models/PatchedMutualTLSStageRequest.ts
 src/models/PatchedNotificationRequest.ts
 src/models/PatchedNotificationRuleRequest.ts
 src/models/PatchedNotificationTransportRequest.ts
@@ -718,6 +724,7 @@ src/models/UsedByActionEnum.ts
 src/models/User.ts
 src/models/UserAccountRequest.ts
 src/models/UserAssignedObjectPermission.ts
+src/models/UserAttributeEnum.ts
 src/models/UserConsent.ts
 src/models/UserCreationModeEnum.ts
 src/models/UserDeleteStage.ts

package/dist/apis/CoreApi.d.ts

@@ -121,6 +121,7 @@ export interface CoreBrandsListRequest {
     brandingFavicon?: string;
     brandingLogo?: string;
     brandingTitle?: string;
+    clientCertificates?: Array<string>;
     _default?: boolean;
     domain?: string;
     flowAuthentication?: string;

package/dist/apis/CoreApi.js

@@ -1038,6 +1038,9 @@ class CoreApi extends runtime.BaseAPI {
             if (requestParameters['brandingTitle'] != null) {
                 queryParameters['branding_title'] = requestParameters['brandingTitle'];
             }
+            if (requestParameters['clientCertificates'] != null) {
+                queryParameters['client_certificates'] = requestParameters['clientCertificates'];
+            }
             if (requestParameters['_default'] != null) {
                 queryParameters['default'] = requestParameters['_default'];
             }

package/dist/apis/RbacApi.d.ts

@@ -511,6 +511,7 @@ export declare const RbacPermissionsAssignedByRolesListModelEnum: {
     readonly AuthentikStagesIdentificationIdentificationstage: "authentik_stages_identification.identificationstage";
     readonly AuthentikStagesInvitationInvitation: "authentik_stages_invitation.invitation";
     readonly AuthentikStagesInvitationInvitationstage: "authentik_stages_invitation.invitationstage";
+    readonly AuthentikStagesMtlsMutualtlsstage: "authentik_stages_mtls.mutualtlsstage";
     readonly AuthentikStagesPasswordPasswordstage: "authentik_stages_password.passwordstage";
     readonly AuthentikStagesPromptPrompt: "authentik_stages_prompt.prompt";
     readonly AuthentikStagesPromptPromptstage: "authentik_stages_prompt.promptstage";
@@ -621,6 +622,7 @@ export declare const RbacPermissionsAssignedByUsersListModelEnum: {
     readonly AuthentikStagesIdentificationIdentificationstage: "authentik_stages_identification.identificationstage";
     readonly AuthentikStagesInvitationInvitation: "authentik_stages_invitation.invitation";
     readonly AuthentikStagesInvitationInvitationstage: "authentik_stages_invitation.invitationstage";
+    readonly AuthentikStagesMtlsMutualtlsstage: "authentik_stages_mtls.mutualtlsstage";
     readonly AuthentikStagesPasswordPasswordstage: "authentik_stages_password.passwordstage";
     readonly AuthentikStagesPromptPrompt: "authentik_stages_prompt.prompt";
     readonly AuthentikStagesPromptPromptstage: "authentik_stages_prompt.promptstage";

package/dist/apis/RbacApi.js

@@ -1396,6 +1396,7 @@ exports.RbacPermissionsAssignedByRolesListModelEnum = {
     AuthentikStagesIdentificationIdentificationstage: 'authentik_stages_identification.identificationstage',
     AuthentikStagesInvitationInvitation: 'authentik_stages_invitation.invitation',
     AuthentikStagesInvitationInvitationstage: 'authentik_stages_invitation.invitationstage',
+    AuthentikStagesMtlsMutualtlsstage: 'authentik_stages_mtls.mutualtlsstage',
     AuthentikStagesPasswordPasswordstage: 'authentik_stages_password.passwordstage',
     AuthentikStagesPromptPrompt: 'authentik_stages_prompt.prompt',
     AuthentikStagesPromptPromptstage: 'authentik_stages_prompt.promptstage',
@@ -1505,6 +1506,7 @@ exports.RbacPermissionsAssignedByUsersListModelEnum = {
     AuthentikStagesIdentificationIdentificationstage: 'authentik_stages_identification.identificationstage',
     AuthentikStagesInvitationInvitation: 'authentik_stages_invitation.invitation',
     AuthentikStagesInvitationInvitationstage: 'authentik_stages_invitation.invitationstage',
+    AuthentikStagesMtlsMutualtlsstage: 'authentik_stages_mtls.mutualtlsstage',
     AuthentikStagesPasswordPasswordstage: 'authentik_stages_password.passwordstage',
     AuthentikStagesPromptPrompt: 'authentik_stages_prompt.prompt',
     AuthentikStagesPromptPromptstage: 'authentik_stages_prompt.promptstage',

package/dist/apis/StagesApi.d.ts

@@ -10,7 +10,7 @@
  * Do not edit the class manually.
  */
 import * as runtime from '../runtime';
-import type { AuthenticatorDuoStage, AuthenticatorDuoStageDeviceImportResponse, AuthenticatorDuoStageManualDeviceImportRequest, AuthenticatorDuoStageRequest, AuthenticatorEmailStage, AuthenticatorEmailStageRequest, AuthenticatorEndpointGDTCStage, AuthenticatorEndpointGDTCStageRequest, AuthenticatorSMSStage, AuthenticatorSMSStageRequest, AuthenticatorStaticStage, AuthenticatorStaticStageRequest, AuthenticatorTOTPStage, AuthenticatorTOTPStageRequest, AuthenticatorValidateStage, AuthenticatorValidateStageRequest, AuthenticatorWebAuthnStage, AuthenticatorWebAuthnStageRequest, CaptchaStage, CaptchaStageRequest, ConsentStage, ConsentStageRequest, DenyStage, DenyStageRequest, DummyStage, DummyStageRequest, DuoDeviceEnrollmentStatus, EmailStage, EmailStageRequest, IdentificationStage, IdentificationStageRequest, Invitation, InvitationRequest, InvitationStage, InvitationStageRequest, PaginatedAuthenticatorDuoStageList, PaginatedAuthenticatorEmailStageList, PaginatedAuthenticatorEndpointGDTCStageList, PaginatedAuthenticatorSMSStageList, PaginatedAuthenticatorStaticStageList, PaginatedAuthenticatorTOTPStageList, PaginatedAuthenticatorValidateStageList, PaginatedAuthenticatorWebAuthnStageList, PaginatedCaptchaStageList, PaginatedConsentStageList, PaginatedDenyStageList, PaginatedDummyStageList, PaginatedEmailStageList, PaginatedIdentificationStageList, PaginatedInvitationList, PaginatedInvitationStageList, PaginatedPasswordStageList, PaginatedPromptList, PaginatedPromptStageList, PaginatedRedirectStageList, PaginatedSourceStageList, PaginatedStageList, PaginatedUserDeleteStageList, PaginatedUserLoginStageList, PaginatedUserLogoutStageList, PaginatedUserWriteStageList, PaginatedWebAuthnDeviceTypeList, PasswordStage, PasswordStageRequest, PatchedAuthenticatorDuoStageRequest, PatchedAuthenticatorEmailStageRequest, PatchedAuthenticatorEndpointGDTCStageRequest, PatchedAuthenticatorSMSStageRequest, PatchedAuthenticatorStaticStageRequest, PatchedAuthenticatorTOTPStageRequest, PatchedAuthenticatorValidateStageRequest, PatchedAuthenticatorWebAuthnStageRequest, PatchedCaptchaStageRequest, PatchedConsentStageRequest, PatchedDenyStageRequest, PatchedDummyStageRequest, PatchedEmailStageRequest, PatchedIdentificationStageRequest, PatchedInvitationRequest, PatchedInvitationStageRequest, PatchedPasswordStageRequest, PatchedPromptRequest, PatchedPromptStageRequest, PatchedRedirectStageRequest, PatchedSourceStageRequest, PatchedUserDeleteStageRequest, PatchedUserLoginStageRequest, PatchedUserLogoutStageRequest, PatchedUserWriteStageRequest, Prompt, PromptChallenge, PromptRequest, PromptStage, PromptStageRequest, RedirectStage, RedirectStageRequest, SourceStage, SourceStageRequest, Stage, TypeCreate, UsedBy, UserDeleteStage, UserDeleteStageRequest, UserLoginStage, UserLoginStageRequest, UserLogoutStage, UserLogoutStageRequest, UserSetting, UserWriteStage, UserWriteStageRequest, WebAuthnDeviceType } from '../models/index';
+import type { AuthenticatorDuoStage, AuthenticatorDuoStageDeviceImportResponse, AuthenticatorDuoStageManualDeviceImportRequest, AuthenticatorDuoStageRequest, AuthenticatorEmailStage, AuthenticatorEmailStageRequest, AuthenticatorEndpointGDTCStage, AuthenticatorEndpointGDTCStageRequest, AuthenticatorSMSStage, AuthenticatorSMSStageRequest, AuthenticatorStaticStage, AuthenticatorStaticStageRequest, AuthenticatorTOTPStage, AuthenticatorTOTPStageRequest, AuthenticatorValidateStage, AuthenticatorValidateStageRequest, AuthenticatorWebAuthnStage, AuthenticatorWebAuthnStageRequest, CaptchaStage, CaptchaStageRequest, ConsentStage, ConsentStageRequest, DenyStage, DenyStageRequest, DummyStage, DummyStageRequest, DuoDeviceEnrollmentStatus, EmailStage, EmailStageRequest, IdentificationStage, IdentificationStageRequest, Invitation, InvitationRequest, InvitationStage, InvitationStageRequest, MutualTLSStage, MutualTLSStageRequest, PaginatedAuthenticatorDuoStageList, PaginatedAuthenticatorEmailStageList, PaginatedAuthenticatorEndpointGDTCStageList, PaginatedAuthenticatorSMSStageList, PaginatedAuthenticatorStaticStageList, PaginatedAuthenticatorTOTPStageList, PaginatedAuthenticatorValidateStageList, PaginatedAuthenticatorWebAuthnStageList, PaginatedCaptchaStageList, PaginatedConsentStageList, PaginatedDenyStageList, PaginatedDummyStageList, PaginatedEmailStageList, PaginatedIdentificationStageList, PaginatedInvitationList, PaginatedInvitationStageList, PaginatedMutualTLSStageList, PaginatedPasswordStageList, PaginatedPromptList, PaginatedPromptStageList, PaginatedRedirectStageList, PaginatedSourceStageList, PaginatedStageList, PaginatedUserDeleteStageList, PaginatedUserLoginStageList, PaginatedUserLogoutStageList, PaginatedUserWriteStageList, PaginatedWebAuthnDeviceTypeList, PasswordStage, PasswordStageRequest, PatchedAuthenticatorDuoStageRequest, PatchedAuthenticatorEmailStageRequest, PatchedAuthenticatorEndpointGDTCStageRequest, PatchedAuthenticatorSMSStageRequest, PatchedAuthenticatorStaticStageRequest, PatchedAuthenticatorTOTPStageRequest, PatchedAuthenticatorValidateStageRequest, PatchedAuthenticatorWebAuthnStageRequest, PatchedCaptchaStageRequest, PatchedConsentStageRequest, PatchedDenyStageRequest, PatchedDummyStageRequest, PatchedEmailStageRequest, PatchedIdentificationStageRequest, PatchedInvitationRequest, PatchedInvitationStageRequest, PatchedMutualTLSStageRequest, PatchedPasswordStageRequest, PatchedPromptRequest, PatchedPromptStageRequest, PatchedRedirectStageRequest, PatchedSourceStageRequest, PatchedUserDeleteStageRequest, PatchedUserLoginStageRequest, PatchedUserLogoutStageRequest, PatchedUserWriteStageRequest, Prompt, PromptChallenge, PromptRequest, PromptStage, PromptStageRequest, RedirectStage, RedirectStageRequest, SourceStage, SourceStageRequest, Stage, TypeCreate, UsedBy, UserDeleteStage, UserDeleteStageRequest, UserLoginStage, UserLoginStageRequest, UserLogoutStage, UserLogoutStageRequest, UserSetting, UserWriteStage, UserWriteStageRequest, WebAuthnDeviceType } from '../models/index';
 export interface StagesAllDestroyRequest {
     stageUuid: string;
 }
@@ -563,6 +563,38 @@ export interface StagesInvitationStagesUpdateRequest {
 export interface StagesInvitationStagesUsedByListRequest {
     stageUuid: string;
 }
+export interface StagesMtlsCreateRequest {
+    mutualTLSStageRequest: MutualTLSStageRequest;
+}
+export interface StagesMtlsDestroyRequest {
+    stageUuid: string;
+}
+export interface StagesMtlsListRequest {
+    certAttribute?: StagesMtlsListCertAttributeEnum;
+    certificateAuthorities?: Array<string>;
+    mode?: StagesMtlsListModeEnum;
+    name?: string;
+    ordering?: string;
+    page?: number;
+    pageSize?: number;
+    search?: string;
+    stageUuid?: string;
+    userAttribute?: StagesMtlsListUserAttributeEnum;
+}
+export interface StagesMtlsPartialUpdateRequest {
+    stageUuid: string;
+    patchedMutualTLSStageRequest?: PatchedMutualTLSStageRequest;
+}
+export interface StagesMtlsRetrieveRequest {
+    stageUuid: string;
+}
+export interface StagesMtlsUpdateRequest {
+    stageUuid: string;
+    mutualTLSStageRequest: MutualTLSStageRequest;
+}
+export interface StagesMtlsUsedByListRequest {
+    stageUuid: string;
+}
 export interface StagesPasswordCreateRequest {
     passwordStageRequest: PasswordStageRequest;
 }
@@ -1832,6 +1864,62 @@ export declare class StagesApi extends runtime.BaseAPI {
      * Get a list of all objects that use this object
      */
     stagesInvitationStagesUsedByList(requestParameters: StagesInvitationStagesUsedByListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<UsedBy>>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsCreateRaw(requestParameters: StagesMtlsCreateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<MutualTLSStage>>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsCreate(requestParameters: StagesMtlsCreateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<MutualTLSStage>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsDestroyRaw(requestParameters: StagesMtlsDestroyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsDestroy(requestParameters: StagesMtlsDestroyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsListRaw(requestParameters: StagesMtlsListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PaginatedMutualTLSStageList>>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsList(requestParameters?: StagesMtlsListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PaginatedMutualTLSStageList>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsPartialUpdateRaw(requestParameters: StagesMtlsPartialUpdateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<MutualTLSStage>>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsPartialUpdate(requestParameters: StagesMtlsPartialUpdateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<MutualTLSStage>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsRetrieveRaw(requestParameters: StagesMtlsRetrieveRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<MutualTLSStage>>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsRetrieve(requestParameters: StagesMtlsRetrieveRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<MutualTLSStage>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsUpdateRaw(requestParameters: StagesMtlsUpdateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<MutualTLSStage>>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsUpdate(requestParameters: StagesMtlsUpdateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<MutualTLSStage>;
+    /**
+     * Get a list of all objects that use this object
+     */
+    stagesMtlsUsedByListRaw(requestParameters: StagesMtlsUsedByListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<UsedBy>>>;
+    /**
+     * Get a list of all objects that use this object
+     */
+    stagesMtlsUsedByList(requestParameters: StagesMtlsUsedByListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<UsedBy>>;
     /**
      * PasswordStage Viewset
      */
@@ -2421,6 +2509,34 @@ export declare const StagesConsentListModeEnum: {
     readonly UnknownDefaultOpenApi: "11184809";
 };
 export type StagesConsentListModeEnum = typeof StagesConsentListModeEnum[keyof typeof StagesConsentListModeEnum];
+/**
+ * @export
+ */
+export declare const StagesMtlsListCertAttributeEnum: {
+    readonly CommonName: "common_name";
+    readonly Email: "email";
+    readonly Subject: "subject";
+    readonly UnknownDefaultOpenApi: "11184809";
+};
+export type StagesMtlsListCertAttributeEnum = typeof StagesMtlsListCertAttributeEnum[keyof typeof StagesMtlsListCertAttributeEnum];
+/**
+ * @export
+ */
+export declare const StagesMtlsListModeEnum: {
+    readonly Optional: "optional";
+    readonly Required: "required";
+    readonly UnknownDefaultOpenApi: "11184809";
+};
+export type StagesMtlsListModeEnum = typeof StagesMtlsListModeEnum[keyof typeof StagesMtlsListModeEnum];
+/**
+ * @export
+ */
+export declare const StagesMtlsListUserAttributeEnum: {
+    readonly Email: "email";
+    readonly Username: "username";
+    readonly UnknownDefaultOpenApi: "11184809";
+};
+export type StagesMtlsListUserAttributeEnum = typeof StagesMtlsListUserAttributeEnum[keyof typeof StagesMtlsListUserAttributeEnum];
 /**
  * @export
  */

package/dist/apis/StagesApi.js

@@ -22,7 +22,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.StagesUserWriteListUserTypeEnum = exports.StagesUserWriteListUserCreationModeEnum = exports.StagesUserLoginListNetworkBindingEnum = exports.StagesUserLoginListGeoipBindingEnum = exports.StagesPromptPromptsListTypeEnum = exports.StagesConsentListModeEnum = exports.StagesAuthenticatorWebauthnListUserVerificationEnum = exports.StagesAuthenticatorWebauthnListResidentKeyRequirementEnum = exports.StagesAuthenticatorWebauthnListAuthenticatorAttachmentEnum = exports.StagesAuthenticatorValidateListNotConfiguredActionEnum = exports.StagesAuthenticatorTotpListDigitsEnum = exports.StagesAuthenticatorSmsListProviderEnum = exports.StagesAuthenticatorSmsListAuthTypeEnum = exports.StagesApi = void 0;
+exports.StagesUserWriteListUserTypeEnum = exports.StagesUserWriteListUserCreationModeEnum = exports.StagesUserLoginListNetworkBindingEnum = exports.StagesUserLoginListGeoipBindingEnum = exports.StagesPromptPromptsListTypeEnum = exports.StagesMtlsListUserAttributeEnum = exports.StagesMtlsListModeEnum = exports.StagesMtlsListCertAttributeEnum = exports.StagesConsentListModeEnum = exports.StagesAuthenticatorWebauthnListUserVerificationEnum = exports.StagesAuthenticatorWebauthnListResidentKeyRequirementEnum = exports.StagesAuthenticatorWebauthnListAuthenticatorAttachmentEnum = exports.StagesAuthenticatorValidateListNotConfiguredActionEnum = exports.StagesAuthenticatorTotpListDigitsEnum = exports.StagesAuthenticatorSmsListProviderEnum = exports.StagesAuthenticatorSmsListAuthTypeEnum = exports.StagesApi = void 0;
 const runtime = require("../runtime");
 const index_1 = require("../models/index");
 /**
@@ -4959,6 +4959,286 @@ class StagesApi extends runtime.BaseAPI {
             return yield response.value();
         });
     }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsCreateRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['mutualTLSStageRequest'] == null) {
+                throw new runtime.RequiredError('mutualTLSStageRequest', 'Required parameter "mutualTLSStageRequest" was null or undefined when calling stagesMtlsCreate().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            headerParameters['Content-Type'] = 'application/json';
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("authentik", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            const response = yield this.request({
+                path: `/stages/mtls/`,
+                method: 'POST',
+                headers: headerParameters,
+                query: queryParameters,
+                body: (0, index_1.MutualTLSStageRequestToJSON)(requestParameters['mutualTLSStageRequest']),
+            }, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.MutualTLSStageFromJSON)(jsonValue));
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsCreate(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.stagesMtlsCreateRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsDestroyRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['stageUuid'] == null) {
+                throw new runtime.RequiredError('stageUuid', 'Required parameter "stageUuid" was null or undefined when calling stagesMtlsDestroy().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("authentik", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            const response = yield this.request({
+                path: `/stages/mtls/{stage_uuid}/`.replace(`{${"stage_uuid"}}`, encodeURIComponent(String(requestParameters['stageUuid']))),
+                method: 'DELETE',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.VoidApiResponse(response);
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsDestroy(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.stagesMtlsDestroyRaw(requestParameters, initOverrides);
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsListRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const queryParameters = {};
+            if (requestParameters['certAttribute'] != null) {
+                queryParameters['cert_attribute'] = requestParameters['certAttribute'];
+            }
+            if (requestParameters['certificateAuthorities'] != null) {
+                queryParameters['certificate_authorities'] = requestParameters['certificateAuthorities'];
+            }
+            if (requestParameters['mode'] != null) {
+                queryParameters['mode'] = requestParameters['mode'];
+            }
+            if (requestParameters['name'] != null) {
+                queryParameters['name'] = requestParameters['name'];
+            }
+            if (requestParameters['ordering'] != null) {
+                queryParameters['ordering'] = requestParameters['ordering'];
+            }
+            if (requestParameters['page'] != null) {
+                queryParameters['page'] = requestParameters['page'];
+            }
+            if (requestParameters['pageSize'] != null) {
+                queryParameters['page_size'] = requestParameters['pageSize'];
+            }
+            if (requestParameters['search'] != null) {
+                queryParameters['search'] = requestParameters['search'];
+            }
+            if (requestParameters['stageUuid'] != null) {
+                queryParameters['stage_uuid'] = requestParameters['stageUuid'];
+            }
+            if (requestParameters['userAttribute'] != null) {
+                queryParameters['user_attribute'] = requestParameters['userAttribute'];
+            }
+            const headerParameters = {};
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("authentik", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            const response = yield this.request({
+                path: `/stages/mtls/`,
+                method: 'GET',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.PaginatedMutualTLSStageListFromJSON)(jsonValue));
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsList() {
+        return __awaiter(this, arguments, void 0, function* (requestParameters = {}, initOverrides) {
+            const response = yield this.stagesMtlsListRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsPartialUpdateRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['stageUuid'] == null) {
+                throw new runtime.RequiredError('stageUuid', 'Required parameter "stageUuid" was null or undefined when calling stagesMtlsPartialUpdate().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            headerParameters['Content-Type'] = 'application/json';
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("authentik", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            const response = yield this.request({
+                path: `/stages/mtls/{stage_uuid}/`.replace(`{${"stage_uuid"}}`, encodeURIComponent(String(requestParameters['stageUuid']))),
+                method: 'PATCH',
+                headers: headerParameters,
+                query: queryParameters,
+                body: (0, index_1.PatchedMutualTLSStageRequestToJSON)(requestParameters['patchedMutualTLSStageRequest']),
+            }, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.MutualTLSStageFromJSON)(jsonValue));
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsPartialUpdate(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.stagesMtlsPartialUpdateRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsRetrieveRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['stageUuid'] == null) {
+                throw new runtime.RequiredError('stageUuid', 'Required parameter "stageUuid" was null or undefined when calling stagesMtlsRetrieve().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("authentik", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            const response = yield this.request({
+                path: `/stages/mtls/{stage_uuid}/`.replace(`{${"stage_uuid"}}`, encodeURIComponent(String(requestParameters['stageUuid']))),
+                method: 'GET',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.MutualTLSStageFromJSON)(jsonValue));
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsRetrieve(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.stagesMtlsRetrieveRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsUpdateRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['stageUuid'] == null) {
+                throw new runtime.RequiredError('stageUuid', 'Required parameter "stageUuid" was null or undefined when calling stagesMtlsUpdate().');
+            }
+            if (requestParameters['mutualTLSStageRequest'] == null) {
+                throw new runtime.RequiredError('mutualTLSStageRequest', 'Required parameter "mutualTLSStageRequest" was null or undefined when calling stagesMtlsUpdate().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            headerParameters['Content-Type'] = 'application/json';
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("authentik", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            const response = yield this.request({
+                path: `/stages/mtls/{stage_uuid}/`.replace(`{${"stage_uuid"}}`, encodeURIComponent(String(requestParameters['stageUuid']))),
+                method: 'PUT',
+                headers: headerParameters,
+                query: queryParameters,
+                body: (0, index_1.MutualTLSStageRequestToJSON)(requestParameters['mutualTLSStageRequest']),
+            }, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.MutualTLSStageFromJSON)(jsonValue));
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsUpdate(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.stagesMtlsUpdateRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
+    /**
+     * Get a list of all objects that use this object
+     */
+    stagesMtlsUsedByListRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['stageUuid'] == null) {
+                throw new runtime.RequiredError('stageUuid', 'Required parameter "stageUuid" was null or undefined when calling stagesMtlsUsedByList().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("authentik", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            const response = yield this.request({
+                path: `/stages/mtls/{stage_uuid}/used_by/`.replace(`{${"stage_uuid"}}`, encodeURIComponent(String(requestParameters['stageUuid']))),
+                method: 'GET',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => jsonValue.map(index_1.UsedByFromJSON));
+        });
+    }
+    /**
+     * Get a list of all objects that use this object
+     */
+    stagesMtlsUsedByList(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.stagesMtlsUsedByListRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
     /**
      * PasswordStage Viewset
      */
@@ -7532,6 +7812,31 @@ exports.StagesConsentListModeEnum = {
     Permanent: 'permanent',
     UnknownDefaultOpenApi: '11184809'
 };
+/**
+ * @export
+ */
+exports.StagesMtlsListCertAttributeEnum = {
+    CommonName: 'common_name',
+    Email: 'email',
+    Subject: 'subject',
+    UnknownDefaultOpenApi: '11184809'
+};
+/**
+ * @export
+ */
+exports.StagesMtlsListModeEnum = {
+    Optional: 'optional',
+    Required: 'required',
+    UnknownDefaultOpenApi: '11184809'
+};
+/**
+ * @export
+ */
+exports.StagesMtlsListUserAttributeEnum = {
+    Email: 'email',
+    Username: 'username',
+    UnknownDefaultOpenApi: '11184809'
+};
 /**
  * @export
  */

package/dist/esm/apis/CoreApi.d.ts

@@ -121,6 +121,7 @@ export interface CoreBrandsListRequest {
     brandingFavicon?: string;
     brandingLogo?: string;
     brandingTitle?: string;
+    clientCertificates?: Array<string>;
     _default?: boolean;
     domain?: string;
     flowAuthentication?: string;

package/dist/esm/apis/CoreApi.js

@@ -1035,6 +1035,9 @@ export class CoreApi extends runtime.BaseAPI {
             if (requestParameters['brandingTitle'] != null) {
                 queryParameters['branding_title'] = requestParameters['brandingTitle'];
             }
+            if (requestParameters['clientCertificates'] != null) {
+                queryParameters['client_certificates'] = requestParameters['clientCertificates'];
+            }
             if (requestParameters['_default'] != null) {
                 queryParameters['default'] = requestParameters['_default'];
             }

package/dist/esm/apis/RbacApi.d.ts

@@ -511,6 +511,7 @@ export declare const RbacPermissionsAssignedByRolesListModelEnum: {
     readonly AuthentikStagesIdentificationIdentificationstage: "authentik_stages_identification.identificationstage";
     readonly AuthentikStagesInvitationInvitation: "authentik_stages_invitation.invitation";
     readonly AuthentikStagesInvitationInvitationstage: "authentik_stages_invitation.invitationstage";
+    readonly AuthentikStagesMtlsMutualtlsstage: "authentik_stages_mtls.mutualtlsstage";
     readonly AuthentikStagesPasswordPasswordstage: "authentik_stages_password.passwordstage";
     readonly AuthentikStagesPromptPrompt: "authentik_stages_prompt.prompt";
     readonly AuthentikStagesPromptPromptstage: "authentik_stages_prompt.promptstage";
@@ -621,6 +622,7 @@ export declare const RbacPermissionsAssignedByUsersListModelEnum: {
     readonly AuthentikStagesIdentificationIdentificationstage: "authentik_stages_identification.identificationstage";
     readonly AuthentikStagesInvitationInvitation: "authentik_stages_invitation.invitation";
     readonly AuthentikStagesInvitationInvitationstage: "authentik_stages_invitation.invitationstage";
+    readonly AuthentikStagesMtlsMutualtlsstage: "authentik_stages_mtls.mutualtlsstage";
     readonly AuthentikStagesPasswordPasswordstage: "authentik_stages_password.passwordstage";
     readonly AuthentikStagesPromptPrompt: "authentik_stages_prompt.prompt";
     readonly AuthentikStagesPromptPromptstage: "authentik_stages_prompt.promptstage";

package/dist/esm/apis/RbacApi.js

@@ -1392,6 +1392,7 @@ export const RbacPermissionsAssignedByRolesListModelEnum = {
     AuthentikStagesIdentificationIdentificationstage: 'authentik_stages_identification.identificationstage',
     AuthentikStagesInvitationInvitation: 'authentik_stages_invitation.invitation',
     AuthentikStagesInvitationInvitationstage: 'authentik_stages_invitation.invitationstage',
+    AuthentikStagesMtlsMutualtlsstage: 'authentik_stages_mtls.mutualtlsstage',
     AuthentikStagesPasswordPasswordstage: 'authentik_stages_password.passwordstage',
     AuthentikStagesPromptPrompt: 'authentik_stages_prompt.prompt',
     AuthentikStagesPromptPromptstage: 'authentik_stages_prompt.promptstage',
@@ -1501,6 +1502,7 @@ export const RbacPermissionsAssignedByUsersListModelEnum = {
     AuthentikStagesIdentificationIdentificationstage: 'authentik_stages_identification.identificationstage',
     AuthentikStagesInvitationInvitation: 'authentik_stages_invitation.invitation',
     AuthentikStagesInvitationInvitationstage: 'authentik_stages_invitation.invitationstage',
+    AuthentikStagesMtlsMutualtlsstage: 'authentik_stages_mtls.mutualtlsstage',
     AuthentikStagesPasswordPasswordstage: 'authentik_stages_password.passwordstage',
     AuthentikStagesPromptPrompt: 'authentik_stages_prompt.prompt',
     AuthentikStagesPromptPromptstage: 'authentik_stages_prompt.promptstage',