@goauthentik/api 2025.4.1-1747332783 → 2025.4.1-1747687715

package/dist/esm/apis/StagesApi.d.ts

@@ -10,7 +10,7 @@
  * Do not edit the class manually.
  */
 import * as runtime from '../runtime';
-import type { AuthenticatorDuoStage, AuthenticatorDuoStageDeviceImportResponse, AuthenticatorDuoStageManualDeviceImportRequest, AuthenticatorDuoStageRequest, AuthenticatorEmailStage, AuthenticatorEmailStageRequest, AuthenticatorEndpointGDTCStage, AuthenticatorEndpointGDTCStageRequest, AuthenticatorSMSStage, AuthenticatorSMSStageRequest, AuthenticatorStaticStage, AuthenticatorStaticStageRequest, AuthenticatorTOTPStage, AuthenticatorTOTPStageRequest, AuthenticatorValidateStage, AuthenticatorValidateStageRequest, AuthenticatorWebAuthnStage, AuthenticatorWebAuthnStageRequest, CaptchaStage, CaptchaStageRequest, ConsentStage, ConsentStageRequest, DenyStage, DenyStageRequest, DummyStage, DummyStageRequest, DuoDeviceEnrollmentStatus, EmailStage, EmailStageRequest, IdentificationStage, IdentificationStageRequest, Invitation, InvitationRequest, InvitationStage, InvitationStageRequest, PaginatedAuthenticatorDuoStageList, PaginatedAuthenticatorEmailStageList, PaginatedAuthenticatorEndpointGDTCStageList, PaginatedAuthenticatorSMSStageList, PaginatedAuthenticatorStaticStageList, PaginatedAuthenticatorTOTPStageList, PaginatedAuthenticatorValidateStageList, PaginatedAuthenticatorWebAuthnStageList, PaginatedCaptchaStageList, PaginatedConsentStageList, PaginatedDenyStageList, PaginatedDummyStageList, PaginatedEmailStageList, PaginatedIdentificationStageList, PaginatedInvitationList, PaginatedInvitationStageList, PaginatedPasswordStageList, PaginatedPromptList, PaginatedPromptStageList, PaginatedRedirectStageList, PaginatedSourceStageList, PaginatedStageList, PaginatedUserDeleteStageList, PaginatedUserLoginStageList, PaginatedUserLogoutStageList, PaginatedUserWriteStageList, PaginatedWebAuthnDeviceTypeList, PasswordStage, PasswordStageRequest, PatchedAuthenticatorDuoStageRequest, PatchedAuthenticatorEmailStageRequest, PatchedAuthenticatorEndpointGDTCStageRequest, PatchedAuthenticatorSMSStageRequest, PatchedAuthenticatorStaticStageRequest, PatchedAuthenticatorTOTPStageRequest, PatchedAuthenticatorValidateStageRequest, PatchedAuthenticatorWebAuthnStageRequest, PatchedCaptchaStageRequest, PatchedConsentStageRequest, PatchedDenyStageRequest, PatchedDummyStageRequest, PatchedEmailStageRequest, PatchedIdentificationStageRequest, PatchedInvitationRequest, PatchedInvitationStageRequest, PatchedPasswordStageRequest, PatchedPromptRequest, PatchedPromptStageRequest, PatchedRedirectStageRequest, PatchedSourceStageRequest, PatchedUserDeleteStageRequest, PatchedUserLoginStageRequest, PatchedUserLogoutStageRequest, PatchedUserWriteStageRequest, Prompt, PromptChallenge, PromptRequest, PromptStage, PromptStageRequest, RedirectStage, RedirectStageRequest, SourceStage, SourceStageRequest, Stage, TypeCreate, UsedBy, UserDeleteStage, UserDeleteStageRequest, UserLoginStage, UserLoginStageRequest, UserLogoutStage, UserLogoutStageRequest, UserSetting, UserWriteStage, UserWriteStageRequest, WebAuthnDeviceType } from '../models/index';
+import type { AuthenticatorDuoStage, AuthenticatorDuoStageDeviceImportResponse, AuthenticatorDuoStageManualDeviceImportRequest, AuthenticatorDuoStageRequest, AuthenticatorEmailStage, AuthenticatorEmailStageRequest, AuthenticatorEndpointGDTCStage, AuthenticatorEndpointGDTCStageRequest, AuthenticatorSMSStage, AuthenticatorSMSStageRequest, AuthenticatorStaticStage, AuthenticatorStaticStageRequest, AuthenticatorTOTPStage, AuthenticatorTOTPStageRequest, AuthenticatorValidateStage, AuthenticatorValidateStageRequest, AuthenticatorWebAuthnStage, AuthenticatorWebAuthnStageRequest, CaptchaStage, CaptchaStageRequest, ConsentStage, ConsentStageRequest, DenyStage, DenyStageRequest, DummyStage, DummyStageRequest, DuoDeviceEnrollmentStatus, EmailStage, EmailStageRequest, IdentificationStage, IdentificationStageRequest, Invitation, InvitationRequest, InvitationStage, InvitationStageRequest, MutualTLSStage, MutualTLSStageRequest, PaginatedAuthenticatorDuoStageList, PaginatedAuthenticatorEmailStageList, PaginatedAuthenticatorEndpointGDTCStageList, PaginatedAuthenticatorSMSStageList, PaginatedAuthenticatorStaticStageList, PaginatedAuthenticatorTOTPStageList, PaginatedAuthenticatorValidateStageList, PaginatedAuthenticatorWebAuthnStageList, PaginatedCaptchaStageList, PaginatedConsentStageList, PaginatedDenyStageList, PaginatedDummyStageList, PaginatedEmailStageList, PaginatedIdentificationStageList, PaginatedInvitationList, PaginatedInvitationStageList, PaginatedMutualTLSStageList, PaginatedPasswordStageList, PaginatedPromptList, PaginatedPromptStageList, PaginatedRedirectStageList, PaginatedSourceStageList, PaginatedStageList, PaginatedUserDeleteStageList, PaginatedUserLoginStageList, PaginatedUserLogoutStageList, PaginatedUserWriteStageList, PaginatedWebAuthnDeviceTypeList, PasswordStage, PasswordStageRequest, PatchedAuthenticatorDuoStageRequest, PatchedAuthenticatorEmailStageRequest, PatchedAuthenticatorEndpointGDTCStageRequest, PatchedAuthenticatorSMSStageRequest, PatchedAuthenticatorStaticStageRequest, PatchedAuthenticatorTOTPStageRequest, PatchedAuthenticatorValidateStageRequest, PatchedAuthenticatorWebAuthnStageRequest, PatchedCaptchaStageRequest, PatchedConsentStageRequest, PatchedDenyStageRequest, PatchedDummyStageRequest, PatchedEmailStageRequest, PatchedIdentificationStageRequest, PatchedInvitationRequest, PatchedInvitationStageRequest, PatchedMutualTLSStageRequest, PatchedPasswordStageRequest, PatchedPromptRequest, PatchedPromptStageRequest, PatchedRedirectStageRequest, PatchedSourceStageRequest, PatchedUserDeleteStageRequest, PatchedUserLoginStageRequest, PatchedUserLogoutStageRequest, PatchedUserWriteStageRequest, Prompt, PromptChallenge, PromptRequest, PromptStage, PromptStageRequest, RedirectStage, RedirectStageRequest, SourceStage, SourceStageRequest, Stage, TypeCreate, UsedBy, UserDeleteStage, UserDeleteStageRequest, UserLoginStage, UserLoginStageRequest, UserLogoutStage, UserLogoutStageRequest, UserSetting, UserWriteStage, UserWriteStageRequest, WebAuthnDeviceType } from '../models/index';
 export interface StagesAllDestroyRequest {
     stageUuid: string;
 }
@@ -563,6 +563,38 @@ export interface StagesInvitationStagesUpdateRequest {
 export interface StagesInvitationStagesUsedByListRequest {
     stageUuid: string;
 }
+export interface StagesMtlsCreateRequest {
+    mutualTLSStageRequest: MutualTLSStageRequest;
+}
+export interface StagesMtlsDestroyRequest {
+    stageUuid: string;
+}
+export interface StagesMtlsListRequest {
+    certAttribute?: StagesMtlsListCertAttributeEnum;
+    certificateAuthorities?: Array<string>;
+    mode?: StagesMtlsListModeEnum;
+    name?: string;
+    ordering?: string;
+    page?: number;
+    pageSize?: number;
+    search?: string;
+    stageUuid?: string;
+    userAttribute?: StagesMtlsListUserAttributeEnum;
+}
+export interface StagesMtlsPartialUpdateRequest {
+    stageUuid: string;
+    patchedMutualTLSStageRequest?: PatchedMutualTLSStageRequest;
+}
+export interface StagesMtlsRetrieveRequest {
+    stageUuid: string;
+}
+export interface StagesMtlsUpdateRequest {
+    stageUuid: string;
+    mutualTLSStageRequest: MutualTLSStageRequest;
+}
+export interface StagesMtlsUsedByListRequest {
+    stageUuid: string;
+}
 export interface StagesPasswordCreateRequest {
     passwordStageRequest: PasswordStageRequest;
 }
@@ -1832,6 +1864,62 @@ export declare class StagesApi extends runtime.BaseAPI {
      * Get a list of all objects that use this object
      */
     stagesInvitationStagesUsedByList(requestParameters: StagesInvitationStagesUsedByListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<UsedBy>>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsCreateRaw(requestParameters: StagesMtlsCreateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<MutualTLSStage>>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsCreate(requestParameters: StagesMtlsCreateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<MutualTLSStage>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsDestroyRaw(requestParameters: StagesMtlsDestroyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsDestroy(requestParameters: StagesMtlsDestroyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsListRaw(requestParameters: StagesMtlsListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PaginatedMutualTLSStageList>>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsList(requestParameters?: StagesMtlsListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PaginatedMutualTLSStageList>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsPartialUpdateRaw(requestParameters: StagesMtlsPartialUpdateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<MutualTLSStage>>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsPartialUpdate(requestParameters: StagesMtlsPartialUpdateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<MutualTLSStage>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsRetrieveRaw(requestParameters: StagesMtlsRetrieveRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<MutualTLSStage>>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsRetrieve(requestParameters: StagesMtlsRetrieveRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<MutualTLSStage>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsUpdateRaw(requestParameters: StagesMtlsUpdateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<MutualTLSStage>>;
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsUpdate(requestParameters: StagesMtlsUpdateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<MutualTLSStage>;
+    /**
+     * Get a list of all objects that use this object
+     */
+    stagesMtlsUsedByListRaw(requestParameters: StagesMtlsUsedByListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<UsedBy>>>;
+    /**
+     * Get a list of all objects that use this object
+     */
+    stagesMtlsUsedByList(requestParameters: StagesMtlsUsedByListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<UsedBy>>;
     /**
      * PasswordStage Viewset
      */
@@ -2421,6 +2509,34 @@ export declare const StagesConsentListModeEnum: {
     readonly UnknownDefaultOpenApi: "11184809";
 };
 export type StagesConsentListModeEnum = typeof StagesConsentListModeEnum[keyof typeof StagesConsentListModeEnum];
+/**
+ * @export
+ */
+export declare const StagesMtlsListCertAttributeEnum: {
+    readonly CommonName: "common_name";
+    readonly Email: "email";
+    readonly Subject: "subject";
+    readonly UnknownDefaultOpenApi: "11184809";
+};
+export type StagesMtlsListCertAttributeEnum = typeof StagesMtlsListCertAttributeEnum[keyof typeof StagesMtlsListCertAttributeEnum];
+/**
+ * @export
+ */
+export declare const StagesMtlsListModeEnum: {
+    readonly Optional: "optional";
+    readonly Required: "required";
+    readonly UnknownDefaultOpenApi: "11184809";
+};
+export type StagesMtlsListModeEnum = typeof StagesMtlsListModeEnum[keyof typeof StagesMtlsListModeEnum];
+/**
+ * @export
+ */
+export declare const StagesMtlsListUserAttributeEnum: {
+    readonly Email: "email";
+    readonly Username: "username";
+    readonly UnknownDefaultOpenApi: "11184809";
+};
+export type StagesMtlsListUserAttributeEnum = typeof StagesMtlsListUserAttributeEnum[keyof typeof StagesMtlsListUserAttributeEnum];
 /**
  * @export
  */

package/dist/esm/apis/StagesApi.js

@@ -21,7 +21,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 import * as runtime from '../runtime';
-import { AuthenticatorDuoStageFromJSON, AuthenticatorDuoStageDeviceImportResponseFromJSON, AuthenticatorDuoStageManualDeviceImportRequestToJSON, AuthenticatorDuoStageRequestToJSON, AuthenticatorEmailStageFromJSON, AuthenticatorEmailStageRequestToJSON, AuthenticatorEndpointGDTCStageFromJSON, AuthenticatorEndpointGDTCStageRequestToJSON, AuthenticatorSMSStageFromJSON, AuthenticatorSMSStageRequestToJSON, AuthenticatorStaticStageFromJSON, AuthenticatorStaticStageRequestToJSON, AuthenticatorTOTPStageFromJSON, AuthenticatorTOTPStageRequestToJSON, AuthenticatorValidateStageFromJSON, AuthenticatorValidateStageRequestToJSON, AuthenticatorWebAuthnStageFromJSON, AuthenticatorWebAuthnStageRequestToJSON, CaptchaStageFromJSON, CaptchaStageRequestToJSON, ConsentStageFromJSON, ConsentStageRequestToJSON, DenyStageFromJSON, DenyStageRequestToJSON, DummyStageFromJSON, DummyStageRequestToJSON, DuoDeviceEnrollmentStatusFromJSON, EmailStageFromJSON, EmailStageRequestToJSON, IdentificationStageFromJSON, IdentificationStageRequestToJSON, InvitationFromJSON, InvitationRequestToJSON, InvitationStageFromJSON, InvitationStageRequestToJSON, PaginatedAuthenticatorDuoStageListFromJSON, PaginatedAuthenticatorEmailStageListFromJSON, PaginatedAuthenticatorEndpointGDTCStageListFromJSON, PaginatedAuthenticatorSMSStageListFromJSON, PaginatedAuthenticatorStaticStageListFromJSON, PaginatedAuthenticatorTOTPStageListFromJSON, PaginatedAuthenticatorValidateStageListFromJSON, PaginatedAuthenticatorWebAuthnStageListFromJSON, PaginatedCaptchaStageListFromJSON, PaginatedConsentStageListFromJSON, PaginatedDenyStageListFromJSON, PaginatedDummyStageListFromJSON, PaginatedEmailStageListFromJSON, PaginatedIdentificationStageListFromJSON, PaginatedInvitationListFromJSON, PaginatedInvitationStageListFromJSON, PaginatedPasswordStageListFromJSON, PaginatedPromptListFromJSON, PaginatedPromptStageListFromJSON, PaginatedRedirectStageListFromJSON, PaginatedSourceStageListFromJSON, PaginatedStageListFromJSON, PaginatedUserDeleteStageListFromJSON, PaginatedUserLoginStageListFromJSON, PaginatedUserLogoutStageListFromJSON, PaginatedUserWriteStageListFromJSON, PaginatedWebAuthnDeviceTypeListFromJSON, PasswordStageFromJSON, PasswordStageRequestToJSON, PatchedAuthenticatorDuoStageRequestToJSON, PatchedAuthenticatorEmailStageRequestToJSON, PatchedAuthenticatorEndpointGDTCStageRequestToJSON, PatchedAuthenticatorSMSStageRequestToJSON, PatchedAuthenticatorStaticStageRequestToJSON, PatchedAuthenticatorTOTPStageRequestToJSON, PatchedAuthenticatorValidateStageRequestToJSON, PatchedAuthenticatorWebAuthnStageRequestToJSON, PatchedCaptchaStageRequestToJSON, PatchedConsentStageRequestToJSON, PatchedDenyStageRequestToJSON, PatchedDummyStageRequestToJSON, PatchedEmailStageRequestToJSON, PatchedIdentificationStageRequestToJSON, PatchedInvitationRequestToJSON, PatchedInvitationStageRequestToJSON, PatchedPasswordStageRequestToJSON, PatchedPromptRequestToJSON, PatchedPromptStageRequestToJSON, PatchedRedirectStageRequestToJSON, PatchedSourceStageRequestToJSON, PatchedUserDeleteStageRequestToJSON, PatchedUserLoginStageRequestToJSON, PatchedUserLogoutStageRequestToJSON, PatchedUserWriteStageRequestToJSON, PromptFromJSON, PromptChallengeFromJSON, PromptRequestToJSON, PromptStageFromJSON, PromptStageRequestToJSON, RedirectStageFromJSON, RedirectStageRequestToJSON, SourceStageFromJSON, SourceStageRequestToJSON, StageFromJSON, TypeCreateFromJSON, UsedByFromJSON, UserDeleteStageFromJSON, UserDeleteStageRequestToJSON, UserLoginStageFromJSON, UserLoginStageRequestToJSON, UserLogoutStageFromJSON, UserLogoutStageRequestToJSON, UserSettingFromJSON, UserWriteStageFromJSON, UserWriteStageRequestToJSON, WebAuthnDeviceTypeFromJSON, } from '../models/index';
+import { AuthenticatorDuoStageFromJSON, AuthenticatorDuoStageDeviceImportResponseFromJSON, AuthenticatorDuoStageManualDeviceImportRequestToJSON, AuthenticatorDuoStageRequestToJSON, AuthenticatorEmailStageFromJSON, AuthenticatorEmailStageRequestToJSON, AuthenticatorEndpointGDTCStageFromJSON, AuthenticatorEndpointGDTCStageRequestToJSON, AuthenticatorSMSStageFromJSON, AuthenticatorSMSStageRequestToJSON, AuthenticatorStaticStageFromJSON, AuthenticatorStaticStageRequestToJSON, AuthenticatorTOTPStageFromJSON, AuthenticatorTOTPStageRequestToJSON, AuthenticatorValidateStageFromJSON, AuthenticatorValidateStageRequestToJSON, AuthenticatorWebAuthnStageFromJSON, AuthenticatorWebAuthnStageRequestToJSON, CaptchaStageFromJSON, CaptchaStageRequestToJSON, ConsentStageFromJSON, ConsentStageRequestToJSON, DenyStageFromJSON, DenyStageRequestToJSON, DummyStageFromJSON, DummyStageRequestToJSON, DuoDeviceEnrollmentStatusFromJSON, EmailStageFromJSON, EmailStageRequestToJSON, IdentificationStageFromJSON, IdentificationStageRequestToJSON, InvitationFromJSON, InvitationRequestToJSON, InvitationStageFromJSON, InvitationStageRequestToJSON, MutualTLSStageFromJSON, MutualTLSStageRequestToJSON, PaginatedAuthenticatorDuoStageListFromJSON, PaginatedAuthenticatorEmailStageListFromJSON, PaginatedAuthenticatorEndpointGDTCStageListFromJSON, PaginatedAuthenticatorSMSStageListFromJSON, PaginatedAuthenticatorStaticStageListFromJSON, PaginatedAuthenticatorTOTPStageListFromJSON, PaginatedAuthenticatorValidateStageListFromJSON, PaginatedAuthenticatorWebAuthnStageListFromJSON, PaginatedCaptchaStageListFromJSON, PaginatedConsentStageListFromJSON, PaginatedDenyStageListFromJSON, PaginatedDummyStageListFromJSON, PaginatedEmailStageListFromJSON, PaginatedIdentificationStageListFromJSON, PaginatedInvitationListFromJSON, PaginatedInvitationStageListFromJSON, PaginatedMutualTLSStageListFromJSON, PaginatedPasswordStageListFromJSON, PaginatedPromptListFromJSON, PaginatedPromptStageListFromJSON, PaginatedRedirectStageListFromJSON, PaginatedSourceStageListFromJSON, PaginatedStageListFromJSON, PaginatedUserDeleteStageListFromJSON, PaginatedUserLoginStageListFromJSON, PaginatedUserLogoutStageListFromJSON, PaginatedUserWriteStageListFromJSON, PaginatedWebAuthnDeviceTypeListFromJSON, PasswordStageFromJSON, PasswordStageRequestToJSON, PatchedAuthenticatorDuoStageRequestToJSON, PatchedAuthenticatorEmailStageRequestToJSON, PatchedAuthenticatorEndpointGDTCStageRequestToJSON, PatchedAuthenticatorSMSStageRequestToJSON, PatchedAuthenticatorStaticStageRequestToJSON, PatchedAuthenticatorTOTPStageRequestToJSON, PatchedAuthenticatorValidateStageRequestToJSON, PatchedAuthenticatorWebAuthnStageRequestToJSON, PatchedCaptchaStageRequestToJSON, PatchedConsentStageRequestToJSON, PatchedDenyStageRequestToJSON, PatchedDummyStageRequestToJSON, PatchedEmailStageRequestToJSON, PatchedIdentificationStageRequestToJSON, PatchedInvitationRequestToJSON, PatchedInvitationStageRequestToJSON, PatchedMutualTLSStageRequestToJSON, PatchedPasswordStageRequestToJSON, PatchedPromptRequestToJSON, PatchedPromptStageRequestToJSON, PatchedRedirectStageRequestToJSON, PatchedSourceStageRequestToJSON, PatchedUserDeleteStageRequestToJSON, PatchedUserLoginStageRequestToJSON, PatchedUserLogoutStageRequestToJSON, PatchedUserWriteStageRequestToJSON, PromptFromJSON, PromptChallengeFromJSON, PromptRequestToJSON, PromptStageFromJSON, PromptStageRequestToJSON, RedirectStageFromJSON, RedirectStageRequestToJSON, SourceStageFromJSON, SourceStageRequestToJSON, StageFromJSON, TypeCreateFromJSON, UsedByFromJSON, UserDeleteStageFromJSON, UserDeleteStageRequestToJSON, UserLoginStageFromJSON, UserLoginStageRequestToJSON, UserLogoutStageFromJSON, UserLogoutStageRequestToJSON, UserSettingFromJSON, UserWriteStageFromJSON, UserWriteStageRequestToJSON, WebAuthnDeviceTypeFromJSON, } from '../models/index';
 /**
  *
  */
@@ -4956,6 +4956,286 @@ export class StagesApi extends runtime.BaseAPI {
             return yield response.value();
         });
     }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsCreateRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['mutualTLSStageRequest'] == null) {
+                throw new runtime.RequiredError('mutualTLSStageRequest', 'Required parameter "mutualTLSStageRequest" was null or undefined when calling stagesMtlsCreate().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            headerParameters['Content-Type'] = 'application/json';
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("authentik", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            const response = yield this.request({
+                path: `/stages/mtls/`,
+                method: 'POST',
+                headers: headerParameters,
+                query: queryParameters,
+                body: MutualTLSStageRequestToJSON(requestParameters['mutualTLSStageRequest']),
+            }, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => MutualTLSStageFromJSON(jsonValue));
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsCreate(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.stagesMtlsCreateRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsDestroyRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['stageUuid'] == null) {
+                throw new runtime.RequiredError('stageUuid', 'Required parameter "stageUuid" was null or undefined when calling stagesMtlsDestroy().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("authentik", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            const response = yield this.request({
+                path: `/stages/mtls/{stage_uuid}/`.replace(`{${"stage_uuid"}}`, encodeURIComponent(String(requestParameters['stageUuid']))),
+                method: 'DELETE',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.VoidApiResponse(response);
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsDestroy(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.stagesMtlsDestroyRaw(requestParameters, initOverrides);
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsListRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const queryParameters = {};
+            if (requestParameters['certAttribute'] != null) {
+                queryParameters['cert_attribute'] = requestParameters['certAttribute'];
+            }
+            if (requestParameters['certificateAuthorities'] != null) {
+                queryParameters['certificate_authorities'] = requestParameters['certificateAuthorities'];
+            }
+            if (requestParameters['mode'] != null) {
+                queryParameters['mode'] = requestParameters['mode'];
+            }
+            if (requestParameters['name'] != null) {
+                queryParameters['name'] = requestParameters['name'];
+            }
+            if (requestParameters['ordering'] != null) {
+                queryParameters['ordering'] = requestParameters['ordering'];
+            }
+            if (requestParameters['page'] != null) {
+                queryParameters['page'] = requestParameters['page'];
+            }
+            if (requestParameters['pageSize'] != null) {
+                queryParameters['page_size'] = requestParameters['pageSize'];
+            }
+            if (requestParameters['search'] != null) {
+                queryParameters['search'] = requestParameters['search'];
+            }
+            if (requestParameters['stageUuid'] != null) {
+                queryParameters['stage_uuid'] = requestParameters['stageUuid'];
+            }
+            if (requestParameters['userAttribute'] != null) {
+                queryParameters['user_attribute'] = requestParameters['userAttribute'];
+            }
+            const headerParameters = {};
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("authentik", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            const response = yield this.request({
+                path: `/stages/mtls/`,
+                method: 'GET',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => PaginatedMutualTLSStageListFromJSON(jsonValue));
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsList() {
+        return __awaiter(this, arguments, void 0, function* (requestParameters = {}, initOverrides) {
+            const response = yield this.stagesMtlsListRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsPartialUpdateRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['stageUuid'] == null) {
+                throw new runtime.RequiredError('stageUuid', 'Required parameter "stageUuid" was null or undefined when calling stagesMtlsPartialUpdate().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            headerParameters['Content-Type'] = 'application/json';
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("authentik", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            const response = yield this.request({
+                path: `/stages/mtls/{stage_uuid}/`.replace(`{${"stage_uuid"}}`, encodeURIComponent(String(requestParameters['stageUuid']))),
+                method: 'PATCH',
+                headers: headerParameters,
+                query: queryParameters,
+                body: PatchedMutualTLSStageRequestToJSON(requestParameters['patchedMutualTLSStageRequest']),
+            }, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => MutualTLSStageFromJSON(jsonValue));
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsPartialUpdate(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.stagesMtlsPartialUpdateRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsRetrieveRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['stageUuid'] == null) {
+                throw new runtime.RequiredError('stageUuid', 'Required parameter "stageUuid" was null or undefined when calling stagesMtlsRetrieve().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("authentik", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            const response = yield this.request({
+                path: `/stages/mtls/{stage_uuid}/`.replace(`{${"stage_uuid"}}`, encodeURIComponent(String(requestParameters['stageUuid']))),
+                method: 'GET',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => MutualTLSStageFromJSON(jsonValue));
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsRetrieve(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.stagesMtlsRetrieveRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsUpdateRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['stageUuid'] == null) {
+                throw new runtime.RequiredError('stageUuid', 'Required parameter "stageUuid" was null or undefined when calling stagesMtlsUpdate().');
+            }
+            if (requestParameters['mutualTLSStageRequest'] == null) {
+                throw new runtime.RequiredError('mutualTLSStageRequest', 'Required parameter "mutualTLSStageRequest" was null or undefined when calling stagesMtlsUpdate().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            headerParameters['Content-Type'] = 'application/json';
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("authentik", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            const response = yield this.request({
+                path: `/stages/mtls/{stage_uuid}/`.replace(`{${"stage_uuid"}}`, encodeURIComponent(String(requestParameters['stageUuid']))),
+                method: 'PUT',
+                headers: headerParameters,
+                query: queryParameters,
+                body: MutualTLSStageRequestToJSON(requestParameters['mutualTLSStageRequest']),
+            }, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => MutualTLSStageFromJSON(jsonValue));
+        });
+    }
+    /**
+     * MutualTLSStage Viewset
+     */
+    stagesMtlsUpdate(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.stagesMtlsUpdateRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
+    /**
+     * Get a list of all objects that use this object
+     */
+    stagesMtlsUsedByListRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['stageUuid'] == null) {
+                throw new runtime.RequiredError('stageUuid', 'Required parameter "stageUuid" was null or undefined when calling stagesMtlsUsedByList().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            if (this.configuration && this.configuration.accessToken) {
+                const token = this.configuration.accessToken;
+                const tokenString = yield token("authentik", []);
+                if (tokenString) {
+                    headerParameters["Authorization"] = `Bearer ${tokenString}`;
+                }
+            }
+            const response = yield this.request({
+                path: `/stages/mtls/{stage_uuid}/used_by/`.replace(`{${"stage_uuid"}}`, encodeURIComponent(String(requestParameters['stageUuid']))),
+                method: 'GET',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => jsonValue.map(UsedByFromJSON));
+        });
+    }
+    /**
+     * Get a list of all objects that use this object
+     */
+    stagesMtlsUsedByList(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.stagesMtlsUsedByListRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
     /**
      * PasswordStage Viewset
      */
@@ -7528,6 +7808,31 @@ export const StagesConsentListModeEnum = {
     Permanent: 'permanent',
     UnknownDefaultOpenApi: '11184809'
 };
+/**
+ * @export
+ */
+export const StagesMtlsListCertAttributeEnum = {
+    CommonName: 'common_name',
+    Email: 'email',
+    Subject: 'subject',
+    UnknownDefaultOpenApi: '11184809'
+};
+/**
+ * @export
+ */
+export const StagesMtlsListModeEnum = {
+    Optional: 'optional',
+    Required: 'required',
+    UnknownDefaultOpenApi: '11184809'
+};
+/**
+ * @export
+ */
+export const StagesMtlsListUserAttributeEnum = {
+    Email: 'email',
+    Username: 'username',
+    UnknownDefaultOpenApi: '11184809'
+};
 /**
  * @export
  */

package/dist/esm/models/AppEnum.d.ts

@@ -75,6 +75,7 @@ export declare const AppEnum: {
     readonly AuthentikEnterpriseProvidersMicrosoftEntra: "authentik.enterprise.providers.microsoft_entra";
     readonly AuthentikEnterpriseProvidersSsf: "authentik.enterprise.providers.ssf";
     readonly AuthentikEnterpriseStagesAuthenticatorEndpointGdtc: "authentik.enterprise.stages.authenticator_endpoint_gdtc";
+    readonly AuthentikEnterpriseStagesMtls: "authentik.enterprise.stages.mtls";
     readonly AuthentikEnterpriseStagesSource: "authentik.enterprise.stages.source";
     readonly AuthentikEvents: "authentik.events";
     readonly UnknownDefaultOpenApi: "11184809";

package/dist/esm/models/AppEnum.js

@@ -77,6 +77,7 @@ export const AppEnum = {
     AuthentikEnterpriseProvidersMicrosoftEntra: 'authentik.enterprise.providers.microsoft_entra',
     AuthentikEnterpriseProvidersSsf: 'authentik.enterprise.providers.ssf',
     AuthentikEnterpriseStagesAuthenticatorEndpointGdtc: 'authentik.enterprise.stages.authenticator_endpoint_gdtc',
+    AuthentikEnterpriseStagesMtls: 'authentik.enterprise.stages.mtls',
     AuthentikEnterpriseStagesSource: 'authentik.enterprise.stages.source',
     AuthentikEvents: 'authentik.events',
     UnknownDefaultOpenApi: '11184809'

package/dist/esm/models/Brand.d.ts

@@ -111,6 +111,12 @@ export interface Brand {
      * @memberof Brand
      */
     webCertificate?: string | null;
+    /**
+     * Certificates used for client authentication.
+     * @type {Array<string>}
+     * @memberof Brand
+     */
+    clientCertificates?: Array<string>;
     /**
      *
      * @type {any}

package/dist/esm/models/Brand.js

@@ -45,6 +45,7 @@ export function BrandFromJSONTyped(json, ignoreDiscriminator) {
         'flowDeviceCode': json['flow_device_code'] == null ? undefined : json['flow_device_code'],
         'defaultApplication': json['default_application'] == null ? undefined : json['default_application'],
         'webCertificate': json['web_certificate'] == null ? undefined : json['web_certificate'],
+        'clientCertificates': json['client_certificates'] == null ? undefined : json['client_certificates'],
         'attributes': json['attributes'] == null ? undefined : json['attributes'],
     };
 }
@@ -71,6 +72,7 @@ export function BrandToJSONTyped(value, ignoreDiscriminator = false) {
         'flow_device_code': value['flowDeviceCode'],
         'default_application': value['defaultApplication'],
         'web_certificate': value['webCertificate'],
+        'client_certificates': value['clientCertificates'],
         'attributes': value['attributes'],
     };
 }

package/dist/esm/models/BrandRequest.d.ts

@@ -105,6 +105,12 @@ export interface BrandRequest {
      * @memberof BrandRequest
      */
     webCertificate?: string | null;
+    /**
+     * Certificates used for client authentication.
+     * @type {Array<string>}
+     * @memberof BrandRequest
+     */
+    clientCertificates?: Array<string>;
     /**
      *
      * @type {any}

package/dist/esm/models/BrandRequest.js

@@ -42,6 +42,7 @@ export function BrandRequestFromJSONTyped(json, ignoreDiscriminator) {
         'flowDeviceCode': json['flow_device_code'] == null ? undefined : json['flow_device_code'],
         'defaultApplication': json['default_application'] == null ? undefined : json['default_application'],
         'webCertificate': json['web_certificate'] == null ? undefined : json['web_certificate'],
+        'clientCertificates': json['client_certificates'] == null ? undefined : json['client_certificates'],
         'attributes': json['attributes'] == null ? undefined : json['attributes'],
     };
 }
@@ -68,6 +69,7 @@ export function BrandRequestToJSONTyped(value, ignoreDiscriminator = false) {
         'flow_device_code': value['flowDeviceCode'],
         'default_application': value['defaultApplication'],
         'web_certificate': value['webCertificate'],
+        'client_certificates': value['clientCertificates'],
         'attributes': value['attributes'],
     };
 }

package/dist/esm/models/CertAttributeEnum.d.ts

@@ -0,0 +1,27 @@
+/**
+ * authentik
+ * Making authentication simple.
+ *
+ * The version of the OpenAPI document: 2025.4.1
+ * Contact: hello@goauthentik.io
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ */
+export declare const CertAttributeEnum: {
+    readonly Subject: "subject";
+    readonly CommonName: "common_name";
+    readonly Email: "email";
+    readonly UnknownDefaultOpenApi: "11184809";
+};
+export type CertAttributeEnum = typeof CertAttributeEnum[keyof typeof CertAttributeEnum];
+export declare function instanceOfCertAttributeEnum(value: any): boolean;
+export declare function CertAttributeEnumFromJSON(json: any): CertAttributeEnum;
+export declare function CertAttributeEnumFromJSONTyped(json: any, ignoreDiscriminator: boolean): CertAttributeEnum;
+export declare function CertAttributeEnumToJSON(value?: CertAttributeEnum | null): any;
+export declare function CertAttributeEnumToJSONTyped(value: any, ignoreDiscriminator: boolean): CertAttributeEnum;

package/dist/esm/models/CertAttributeEnum.js

@@ -0,0 +1,45 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * authentik
+ * Making authentication simple.
+ *
+ * The version of the OpenAPI document: 2025.4.1
+ * Contact: hello@goauthentik.io
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ */
+export const CertAttributeEnum = {
+    Subject: 'subject',
+    CommonName: 'common_name',
+    Email: 'email',
+    UnknownDefaultOpenApi: '11184809'
+};
+export function instanceOfCertAttributeEnum(value) {
+    for (const key in CertAttributeEnum) {
+        if (Object.prototype.hasOwnProperty.call(CertAttributeEnum, key)) {
+            if (CertAttributeEnum[key] === value) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+export function CertAttributeEnumFromJSON(json) {
+    return CertAttributeEnumFromJSONTyped(json, false);
+}
+export function CertAttributeEnumFromJSONTyped(json, ignoreDiscriminator) {
+    return json;
+}
+export function CertAttributeEnumToJSON(value) {
+    return value;
+}
+export function CertAttributeEnumToJSONTyped(value, ignoreDiscriminator) {
+    return value;
+}

package/dist/esm/models/ModelEnum.d.ts

@@ -111,6 +111,7 @@ export declare const ModelEnum: {
     readonly AuthentikProvidersMicrosoftEntraMicrosoftentraprovidermapping: "authentik_providers_microsoft_entra.microsoftentraprovidermapping";
     readonly AuthentikProvidersSsfSsfprovider: "authentik_providers_ssf.ssfprovider";
     readonly AuthentikStagesAuthenticatorEndpointGdtcAuthenticatorendpointgdtcstage: "authentik_stages_authenticator_endpoint_gdtc.authenticatorendpointgdtcstage";
+    readonly AuthentikStagesMtlsMutualtlsstage: "authentik_stages_mtls.mutualtlsstage";
     readonly AuthentikStagesSourceSourcestage: "authentik_stages_source.sourcestage";
     readonly AuthentikEventsEvent: "authentik_events.event";
     readonly AuthentikEventsNotificationtransport: "authentik_events.notificationtransport";