authentik-client 2025.10.3__py3-none-any.whl → 2025.12.0rc1__py3-none-any.whl

authentik_client/models/invitation_stage_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -21,7 +21,6 @@ import json
 from pydantic import BaseModel, ConfigDict, Field, StrictBool
 from typing import Any, ClassVar, Dict, List, Optional
 from typing_extensions import Annotated
-from authentik_client.models.flow_set_request import FlowSetRequest
 from typing import Optional, Set
 from typing_extensions import Self
 
@@ -30,9 +29,8 @@ class InvitationStageRequest(BaseModel):
     InvitationStage Serializer
     """ # noqa: E501
     name: Annotated[str, Field(min_length=1, strict=True)]
-    flow_set: Optional[List[FlowSetRequest]] = None
     continue_flow_without_invitation: Optional[StrictBool] = Field(default=None, description="If this flag is set, this Stage will jump to the next Stage when no Invitation is given. By default this Stage will cancel the Flow when no invitation is given.")
-    __properties: ClassVar[List[str]] = ["name", "flow_set", "continue_flow_without_invitation"]
+    __properties: ClassVar[List[str]] = ["name", "continue_flow_without_invitation"]
 
     model_config = ConfigDict(
         populate_by_name=True,
@@ -73,13 +71,6 @@ class InvitationStageRequest(BaseModel):
             exclude=excluded_fields,
             exclude_none=True,
         )
-        # override the default output from pydantic by calling `to_dict()` of each item in flow_set (list)
-        _items = []
-        if self.flow_set:
-            for _item_flow_set in self.flow_set:
-                if _item_flow_set:
-                    _items.append(_item_flow_set.to_dict())
-            _dict['flow_set'] = _items
         return _dict
 
     @classmethod
@@ -93,7 +84,6 @@ class InvitationStageRequest(BaseModel):
 
         _obj = cls.model_validate({
             "name": obj.get("name"),
-            "flow_set": [FlowSetRequest.from_dict(_item) for _item in obj["flow_set"]] if obj.get("flow_set") is not None else None,
             "continue_flow_without_invitation": obj.get("continue_flow_without_invitation")
         })
         return _obj

authentik_client/models/issuer_mode_enum.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/kadmin_type_enum.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/kerberos_source.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -25,6 +25,7 @@ from uuid import UUID
 from authentik_client.models.group_matching_mode_enum import GroupMatchingModeEnum
 from authentik_client.models.kadmin_type_enum import KadminTypeEnum
 from authentik_client.models.policy_engine_mode import PolicyEngineMode
+from authentik_client.models.sync_outgoing_trigger_mode_enum import SyncOutgoingTriggerModeEnum
 from authentik_client.models.user_matching_mode_enum import UserMatchingModeEnum
 from typing import Optional, Set
 from typing_extensions import Self
@@ -35,8 +36,9 @@ class KerberosSource(BaseModel):
     """ # noqa: E501
     pk: UUID
     name: StrictStr = Field(description="Source's display Name.")
-    slug: Annotated[str, Field(strict=True, max_length=50)] = Field(description="Internal source name, used in URLs.")
+    slug: Annotated[str, Field(strict=True)] = Field(description="Internal source name, used in URLs.")
     enabled: Optional[StrictBool] = None
+    promoted: Optional[StrictBool] = Field(default=None, description="When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon.")
     authentication_flow: Optional[UUID] = Field(default=None, description="Flow to use when authenticating existing users.")
     enrollment_flow: Optional[UUID] = Field(default=None, description="Flow to use when enrolling new users.")
     user_property_mappings: Optional[List[UUID]] = None
@@ -49,7 +51,8 @@ class KerberosSource(BaseModel):
     user_matching_mode: Optional[UserMatchingModeEnum] = Field(default=None, description="How the source determines if an existing user should be authenticated or a new user enrolled.")
     managed: Optional[StrictStr] = Field(description="Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update.")
     user_path_template: Optional[StrictStr] = None
-    icon: StrictStr
+    icon: Optional[StrictStr] = None
+    icon_url: StrictStr
     group_matching_mode: Optional[GroupMatchingModeEnum] = Field(default=None, description="How the source determines if an existing group should be used or a new group created.")
     realm: StrictStr = Field(description="Kerberos realm")
     krb5_conf: Optional[StrictStr] = Field(default=None, description="Custom krb5.conf to use. Uses the system one by default")
@@ -62,7 +65,8 @@ class KerberosSource(BaseModel):
     spnego_server_name: Optional[StrictStr] = Field(default=None, description="Force the use of a specific server name for SPNEGO. Must be in the form HTTP@hostname")
     spnego_ccache: Optional[StrictStr] = Field(default=None, description="Credential cache to use for SPNEGO in form type:residual")
     password_login_update_internal_password: Optional[StrictBool] = Field(default=None, description="If enabled, the authentik-stored password will be updated upon login with the Kerberos password backend")
-    __properties: ClassVar[List[str]] = ["pk", "name", "slug", "enabled", "authentication_flow", "enrollment_flow", "user_property_mappings", "group_property_mappings", "component", "verbose_name", "verbose_name_plural", "meta_model_name", "policy_engine_mode", "user_matching_mode", "managed", "user_path_template", "icon", "group_matching_mode", "realm", "krb5_conf", "kadmin_type", "sync_users", "sync_users_password", "sync_principal", "sync_ccache", "connectivity", "spnego_server_name", "spnego_ccache", "password_login_update_internal_password"]
+    sync_outgoing_trigger_mode: Optional[SyncOutgoingTriggerModeEnum] = Field(default=None, description="When to trigger sync for outgoing providers")
+    __properties: ClassVar[List[str]] = ["pk", "name", "slug", "enabled", "promoted", "authentication_flow", "enrollment_flow", "user_property_mappings", "group_property_mappings", "component", "verbose_name", "verbose_name_plural", "meta_model_name", "policy_engine_mode", "user_matching_mode", "managed", "user_path_template", "icon", "icon_url", "group_matching_mode", "realm", "krb5_conf", "kadmin_type", "sync_users", "sync_users_password", "sync_principal", "sync_ccache", "connectivity", "spnego_server_name", "spnego_ccache", "password_login_update_internal_password", "sync_outgoing_trigger_mode"]
 
     @field_validator('slug')
     def slug_validate_regular_expression(cls, value):
@@ -117,7 +121,7 @@ class KerberosSource(BaseModel):
             "verbose_name_plural",
             "meta_model_name",
             "managed",
-            "icon",
+            "icon_url",
             "connectivity",
         ])
 
@@ -162,6 +166,7 @@ class KerberosSource(BaseModel):
             "name": obj.get("name"),
             "slug": obj.get("slug"),
             "enabled": obj.get("enabled"),
+            "promoted": obj.get("promoted"),
             "authentication_flow": obj.get("authentication_flow"),
             "enrollment_flow": obj.get("enrollment_flow"),
             "user_property_mappings": obj.get("user_property_mappings"),
@@ -175,6 +180,7 @@ class KerberosSource(BaseModel):
             "managed": obj.get("managed"),
             "user_path_template": obj.get("user_path_template"),
             "icon": obj.get("icon"),
+            "icon_url": obj.get("icon_url"),
             "group_matching_mode": obj.get("group_matching_mode"),
             "realm": obj.get("realm"),
             "krb5_conf": obj.get("krb5_conf"),
@@ -186,7 +192,8 @@ class KerberosSource(BaseModel):
             "connectivity": obj.get("connectivity"),
             "spnego_server_name": obj.get("spnego_server_name"),
             "spnego_ccache": obj.get("spnego_ccache"),
-            "password_login_update_internal_password": obj.get("password_login_update_internal_password")
+            "password_login_update_internal_password": obj.get("password_login_update_internal_password"),
+            "sync_outgoing_trigger_mode": obj.get("sync_outgoing_trigger_mode")
         })
         return _obj
 

authentik_client/models/kerberos_source_property_mapping.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/kerberos_source_property_mapping_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/kerberos_source_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -25,6 +25,7 @@ from uuid import UUID
 from authentik_client.models.group_matching_mode_enum import GroupMatchingModeEnum
 from authentik_client.models.kadmin_type_enum import KadminTypeEnum
 from authentik_client.models.policy_engine_mode import PolicyEngineMode
+from authentik_client.models.sync_outgoing_trigger_mode_enum import SyncOutgoingTriggerModeEnum
 from authentik_client.models.user_matching_mode_enum import UserMatchingModeEnum
 from typing import Optional, Set
 from typing_extensions import Self
@@ -34,8 +35,9 @@ class KerberosSourceRequest(BaseModel):
     Kerberos Source Serializer
     """ # noqa: E501
     name: Annotated[str, Field(min_length=1, strict=True)] = Field(description="Source's display Name.")
-    slug: Annotated[str, Field(min_length=1, strict=True, max_length=50)] = Field(description="Internal source name, used in URLs.")
+    slug: Annotated[str, Field(min_length=1, strict=True)] = Field(description="Internal source name, used in URLs.")
     enabled: Optional[StrictBool] = None
+    promoted: Optional[StrictBool] = Field(default=None, description="When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon.")
     authentication_flow: Optional[UUID] = Field(default=None, description="Flow to use when authenticating existing users.")
     enrollment_flow: Optional[UUID] = Field(default=None, description="Flow to use when enrolling new users.")
     user_property_mappings: Optional[List[UUID]] = None
@@ -43,6 +45,7 @@ class KerberosSourceRequest(BaseModel):
     policy_engine_mode: Optional[PolicyEngineMode] = None
     user_matching_mode: Optional[UserMatchingModeEnum] = Field(default=None, description="How the source determines if an existing user should be authenticated or a new user enrolled.")
     user_path_template: Optional[Annotated[str, Field(min_length=1, strict=True)]] = None
+    icon: Optional[StrictStr] = None
     group_matching_mode: Optional[GroupMatchingModeEnum] = Field(default=None, description="How the source determines if an existing group should be used or a new group created.")
     realm: Annotated[str, Field(min_length=1, strict=True)] = Field(description="Kerberos realm")
     krb5_conf: Optional[StrictStr] = Field(default=None, description="Custom krb5.conf to use. Uses the system one by default")
@@ -57,7 +60,8 @@ class KerberosSourceRequest(BaseModel):
     spnego_keytab: Optional[StrictStr] = Field(default=None, description="SPNEGO keytab base64-encoded or path to keytab in the form FILE:path")
     spnego_ccache: Optional[StrictStr] = Field(default=None, description="Credential cache to use for SPNEGO in form type:residual")
     password_login_update_internal_password: Optional[StrictBool] = Field(default=None, description="If enabled, the authentik-stored password will be updated upon login with the Kerberos password backend")
-    __properties: ClassVar[List[str]] = ["name", "slug", "enabled", "authentication_flow", "enrollment_flow", "user_property_mappings", "group_property_mappings", "policy_engine_mode", "user_matching_mode", "user_path_template", "group_matching_mode", "realm", "krb5_conf", "kadmin_type", "sync_users", "sync_users_password", "sync_principal", "sync_password", "sync_keytab", "sync_ccache", "spnego_server_name", "spnego_keytab", "spnego_ccache", "password_login_update_internal_password"]
+    sync_outgoing_trigger_mode: Optional[SyncOutgoingTriggerModeEnum] = Field(default=None, description="When to trigger sync for outgoing providers")
+    __properties: ClassVar[List[str]] = ["name", "slug", "enabled", "promoted", "authentication_flow", "enrollment_flow", "user_property_mappings", "group_property_mappings", "policy_engine_mode", "user_matching_mode", "user_path_template", "icon", "group_matching_mode", "realm", "krb5_conf", "kadmin_type", "sync_users", "sync_users_password", "sync_principal", "sync_password", "sync_keytab", "sync_ccache", "spnego_server_name", "spnego_keytab", "spnego_ccache", "password_login_update_internal_password", "sync_outgoing_trigger_mode"]
 
     @field_validator('slug')
     def slug_validate_regular_expression(cls, value):
@@ -130,6 +134,7 @@ class KerberosSourceRequest(BaseModel):
             "name": obj.get("name"),
             "slug": obj.get("slug"),
             "enabled": obj.get("enabled"),
+            "promoted": obj.get("promoted"),
             "authentication_flow": obj.get("authentication_flow"),
             "enrollment_flow": obj.get("enrollment_flow"),
             "user_property_mappings": obj.get("user_property_mappings"),
@@ -137,6 +142,7 @@ class KerberosSourceRequest(BaseModel):
             "policy_engine_mode": obj.get("policy_engine_mode"),
             "user_matching_mode": obj.get("user_matching_mode"),
             "user_path_template": obj.get("user_path_template"),
+            "icon": obj.get("icon"),
             "group_matching_mode": obj.get("group_matching_mode"),
             "realm": obj.get("realm"),
             "krb5_conf": obj.get("krb5_conf"),
@@ -150,7 +156,8 @@ class KerberosSourceRequest(BaseModel):
             "spnego_server_name": obj.get("spnego_server_name"),
             "spnego_keytab": obj.get("spnego_keytab"),
             "spnego_ccache": obj.get("spnego_ccache"),
-            "password_login_update_internal_password": obj.get("password_login_update_internal_password")
+            "password_login_update_internal_password": obj.get("password_login_update_internal_password"),
+            "sync_outgoing_trigger_mode": obj.get("sync_outgoing_trigger_mode")
         })
         return _obj
 

authentik_client/models/{initial_permissions_mode_enum.py → key_type_enum.py}

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -19,20 +19,23 @@ from enum import Enum
 from typing_extensions import Self
 
 
-class InitialPermissionsModeEnum(str, Enum):
+class KeyTypeEnum(str, Enum):
     """
-    InitialPermissionsModeEnum
+    KeyTypeEnum
     """
 
     """
     allowed enum values
     """
-    USER = 'user'
-    ROLE = 'role'
+    RSA = 'rsa'
+    EC = 'ec'
+    DSA = 'dsa'
+    ED25519 = 'ed25519'
+    ED448 = 'ed448'
 
     @classmethod
     def from_json(cls, json_str: str) -> Self:
-        """Create an instance of InitialPermissionsModeEnum from a JSON string"""
+        """Create an instance of KeyTypeEnum from a JSON string"""
         return cls(json.loads(json_str))
 
 

authentik_client/models/kubernetes_service_connection.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/kubernetes_service_connection_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/last_task_status_enum.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/ldap_check_access.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/ldap_debug.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/ldap_outpost_config.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/ldap_provider.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/ldap_provider_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/ldap_source.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -23,6 +23,7 @@ from typing import Any, ClassVar, Dict, List, Optional
 from typing_extensions import Annotated
 from uuid import UUID
 from authentik_client.models.policy_engine_mode import PolicyEngineMode
+from authentik_client.models.sync_outgoing_trigger_mode_enum import SyncOutgoingTriggerModeEnum
 from authentik_client.models.user_matching_mode_enum import UserMatchingModeEnum
 from typing import Optional, Set
 from typing_extensions import Self
@@ -33,8 +34,9 @@ class LDAPSource(BaseModel):
     """ # noqa: E501
     pk: UUID
     name: StrictStr = Field(description="Source's display Name.")
-    slug: Annotated[str, Field(strict=True, max_length=50)] = Field(description="Internal source name, used in URLs.")
+    slug: Annotated[str, Field(strict=True)] = Field(description="Internal source name, used in URLs.")
     enabled: Optional[StrictBool] = None
+    promoted: Optional[StrictBool] = Field(default=None, description="When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon.")
     authentication_flow: Optional[UUID] = Field(default=None, description="Flow to use when authenticating existing users.")
     enrollment_flow: Optional[UUID] = Field(default=None, description="Flow to use when enrolling new users.")
     user_property_mappings: Optional[List[UUID]] = None
@@ -47,7 +49,8 @@ class LDAPSource(BaseModel):
     user_matching_mode: Optional[UserMatchingModeEnum] = Field(default=None, description="How the source determines if an existing user should be authenticated or a new user enrolled.")
     managed: Optional[StrictStr] = Field(description="Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update.")
     user_path_template: Optional[StrictStr] = None
-    icon: StrictStr
+    icon: Optional[StrictStr] = None
+    icon_url: StrictStr
     server_uri: StrictStr
     peer_certificate: Optional[UUID] = Field(default=None, description="Optionally verify the LDAP Server's Certificate against the CA Chain in this keypair.")
     client_certificate: Optional[UUID] = Field(default=None, description="Client certificate to authenticate against the LDAP Server's Certificate.")
@@ -70,7 +73,8 @@ class LDAPSource(BaseModel):
     connectivity: Optional[Dict[str, Dict[str, StrictStr]]] = Field(description="Get cached source connectivity")
     lookup_groups_from_user: Optional[StrictBool] = Field(default=None, description="Lookup group membership based on a user attribute instead of a group attribute. This allows nested group resolution on systems like FreeIPA and Active Directory")
     delete_not_found_objects: Optional[StrictBool] = Field(default=None, description="Delete authentik users and groups which were previously supplied by this source, but are now missing from it.")
-    __properties: ClassVar[List[str]] = ["pk", "name", "slug", "enabled", "authentication_flow", "enrollment_flow", "user_property_mappings", "group_property_mappings", "component", "verbose_name", "verbose_name_plural", "meta_model_name", "policy_engine_mode", "user_matching_mode", "managed", "user_path_template", "icon", "server_uri", "peer_certificate", "client_certificate", "bind_cn", "start_tls", "sni", "base_dn", "additional_user_dn", "additional_group_dn", "user_object_filter", "group_object_filter", "group_membership_field", "user_membership_attribute", "object_uniqueness_field", "password_login_update_internal_password", "sync_users", "sync_users_password", "sync_groups", "sync_parent_group", "connectivity", "lookup_groups_from_user", "delete_not_found_objects"]
+    sync_outgoing_trigger_mode: Optional[SyncOutgoingTriggerModeEnum] = Field(default=None, description="When to trigger sync for outgoing providers")
+    __properties: ClassVar[List[str]] = ["pk", "name", "slug", "enabled", "promoted", "authentication_flow", "enrollment_flow", "user_property_mappings", "group_property_mappings", "component", "verbose_name", "verbose_name_plural", "meta_model_name", "policy_engine_mode", "user_matching_mode", "managed", "user_path_template", "icon", "icon_url", "server_uri", "peer_certificate", "client_certificate", "bind_cn", "start_tls", "sni", "base_dn", "additional_user_dn", "additional_group_dn", "user_object_filter", "group_object_filter", "group_membership_field", "user_membership_attribute", "object_uniqueness_field", "password_login_update_internal_password", "sync_users", "sync_users_password", "sync_groups", "sync_parent_group", "connectivity", "lookup_groups_from_user", "delete_not_found_objects", "sync_outgoing_trigger_mode"]
 
     @field_validator('slug')
     def slug_validate_regular_expression(cls, value):
@@ -125,7 +129,7 @@ class LDAPSource(BaseModel):
             "verbose_name_plural",
             "meta_model_name",
             "managed",
-            "icon",
+            "icon_url",
             "connectivity",
         ])
 
@@ -185,6 +189,7 @@ class LDAPSource(BaseModel):
             "name": obj.get("name"),
             "slug": obj.get("slug"),
             "enabled": obj.get("enabled"),
+            "promoted": obj.get("promoted"),
             "authentication_flow": obj.get("authentication_flow"),
             "enrollment_flow": obj.get("enrollment_flow"),
             "user_property_mappings": obj.get("user_property_mappings"),
@@ -198,6 +203,7 @@ class LDAPSource(BaseModel):
             "managed": obj.get("managed"),
             "user_path_template": obj.get("user_path_template"),
             "icon": obj.get("icon"),
+            "icon_url": obj.get("icon_url"),
             "server_uri": obj.get("server_uri"),
             "peer_certificate": obj.get("peer_certificate"),
             "client_certificate": obj.get("client_certificate"),
@@ -219,7 +225,8 @@ class LDAPSource(BaseModel):
             "sync_parent_group": obj.get("sync_parent_group"),
             "connectivity": obj.get("connectivity"),
             "lookup_groups_from_user": obj.get("lookup_groups_from_user"),
-            "delete_not_found_objects": obj.get("delete_not_found_objects")
+            "delete_not_found_objects": obj.get("delete_not_found_objects"),
+            "sync_outgoing_trigger_mode": obj.get("sync_outgoing_trigger_mode")
         })
         return _obj
 

authentik_client/models/ldap_source_property_mapping.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/ldap_source_property_mapping_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/ldap_source_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -23,6 +23,7 @@ from typing import Any, ClassVar, Dict, List, Optional
 from typing_extensions import Annotated
 from uuid import UUID
 from authentik_client.models.policy_engine_mode import PolicyEngineMode
+from authentik_client.models.sync_outgoing_trigger_mode_enum import SyncOutgoingTriggerModeEnum
 from authentik_client.models.user_matching_mode_enum import UserMatchingModeEnum
 from typing import Optional, Set
 from typing_extensions import Self
@@ -32,8 +33,9 @@ class LDAPSourceRequest(BaseModel):
     LDAP Source Serializer
     """ # noqa: E501
     name: Annotated[str, Field(min_length=1, strict=True)] = Field(description="Source's display Name.")
-    slug: Annotated[str, Field(min_length=1, strict=True, max_length=50)] = Field(description="Internal source name, used in URLs.")
+    slug: Annotated[str, Field(min_length=1, strict=True)] = Field(description="Internal source name, used in URLs.")
     enabled: Optional[StrictBool] = None
+    promoted: Optional[StrictBool] = Field(default=None, description="When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon.")
     authentication_flow: Optional[UUID] = Field(default=None, description="Flow to use when authenticating existing users.")
     enrollment_flow: Optional[UUID] = Field(default=None, description="Flow to use when enrolling new users.")
     user_property_mappings: Optional[List[UUID]] = None
@@ -41,6 +43,7 @@ class LDAPSourceRequest(BaseModel):
     policy_engine_mode: Optional[PolicyEngineMode] = None
     user_matching_mode: Optional[UserMatchingModeEnum] = Field(default=None, description="How the source determines if an existing user should be authenticated or a new user enrolled.")
     user_path_template: Optional[Annotated[str, Field(min_length=1, strict=True)]] = None
+    icon: Optional[StrictStr] = None
     server_uri: Annotated[str, Field(min_length=1, strict=True)]
     peer_certificate: Optional[UUID] = Field(default=None, description="Optionally verify the LDAP Server's Certificate against the CA Chain in this keypair.")
     client_certificate: Optional[UUID] = Field(default=None, description="Client certificate to authenticate against the LDAP Server's Certificate.")
@@ -63,7 +66,8 @@ class LDAPSourceRequest(BaseModel):
     sync_parent_group: Optional[UUID] = None
     lookup_groups_from_user: Optional[StrictBool] = Field(default=None, description="Lookup group membership based on a user attribute instead of a group attribute. This allows nested group resolution on systems like FreeIPA and Active Directory")
     delete_not_found_objects: Optional[StrictBool] = Field(default=None, description="Delete authentik users and groups which were previously supplied by this source, but are now missing from it.")
-    __properties: ClassVar[List[str]] = ["name", "slug", "enabled", "authentication_flow", "enrollment_flow", "user_property_mappings", "group_property_mappings", "policy_engine_mode", "user_matching_mode", "user_path_template", "server_uri", "peer_certificate", "client_certificate", "bind_cn", "bind_password", "start_tls", "sni", "base_dn", "additional_user_dn", "additional_group_dn", "user_object_filter", "group_object_filter", "group_membership_field", "user_membership_attribute", "object_uniqueness_field", "password_login_update_internal_password", "sync_users", "sync_users_password", "sync_groups", "sync_parent_group", "lookup_groups_from_user", "delete_not_found_objects"]
+    sync_outgoing_trigger_mode: Optional[SyncOutgoingTriggerModeEnum] = Field(default=None, description="When to trigger sync for outgoing providers")
+    __properties: ClassVar[List[str]] = ["name", "slug", "enabled", "promoted", "authentication_flow", "enrollment_flow", "user_property_mappings", "group_property_mappings", "policy_engine_mode", "user_matching_mode", "user_path_template", "icon", "server_uri", "peer_certificate", "client_certificate", "bind_cn", "bind_password", "start_tls", "sni", "base_dn", "additional_user_dn", "additional_group_dn", "user_object_filter", "group_object_filter", "group_membership_field", "user_membership_attribute", "object_uniqueness_field", "password_login_update_internal_password", "sync_users", "sync_users_password", "sync_groups", "sync_parent_group", "lookup_groups_from_user", "delete_not_found_objects", "sync_outgoing_trigger_mode"]
 
     @field_validator('slug')
     def slug_validate_regular_expression(cls, value):
@@ -151,6 +155,7 @@ class LDAPSourceRequest(BaseModel):
             "name": obj.get("name"),
             "slug": obj.get("slug"),
             "enabled": obj.get("enabled"),
+            "promoted": obj.get("promoted"),
             "authentication_flow": obj.get("authentication_flow"),
             "enrollment_flow": obj.get("enrollment_flow"),
             "user_property_mappings": obj.get("user_property_mappings"),
@@ -158,6 +163,7 @@ class LDAPSourceRequest(BaseModel):
             "policy_engine_mode": obj.get("policy_engine_mode"),
             "user_matching_mode": obj.get("user_matching_mode"),
             "user_path_template": obj.get("user_path_template"),
+            "icon": obj.get("icon"),
             "server_uri": obj.get("server_uri"),
             "peer_certificate": obj.get("peer_certificate"),
             "client_certificate": obj.get("client_certificate"),
@@ -179,7 +185,8 @@ class LDAPSourceRequest(BaseModel):
             "sync_groups": obj.get("sync_groups"),
             "sync_parent_group": obj.get("sync_parent_group"),
             "lookup_groups_from_user": obj.get("lookup_groups_from_user"),
-            "delete_not_found_objects": obj.get("delete_not_found_objects")
+            "delete_not_found_objects": obj.get("delete_not_found_objects"),
+            "sync_outgoing_trigger_mode": obj.get("sync_outgoing_trigger_mode")
         })
         return _obj
 

authentik_client/models/ldapapi_access_mode.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/license.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/license_flags_enum.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/license_forecast.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/license_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/license_summary.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/license_summary_status_enum.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/link.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)