authentik-client 2025.10.3__py3-none-any.whl → 2025.12.0rc1__py3-none-any.whl

authentik_client/models/patched_group_ldap_source_connection_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/patched_group_o_auth_source_connection_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/patched_group_plex_source_connection_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/patched_group_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -31,12 +31,11 @@ class PatchedGroupRequest(BaseModel):
     """ # noqa: E501
     name: Optional[Annotated[str, Field(min_length=1, strict=True)]] = None
     is_superuser: Optional[StrictBool] = Field(default=None, description="Users added to this group will be superusers.")
-    parent: Optional[UUID] = None
+    parents: Optional[List[UUID]] = None
     users: Optional[List[StrictInt]] = None
     attributes: Optional[Dict[str, Any]] = None
     roles: Optional[List[UUID]] = None
-    children: Optional[List[UUID]] = None
-    __properties: ClassVar[List[str]] = ["name", "is_superuser", "parent", "users", "attributes", "roles", "children"]
+    __properties: ClassVar[List[str]] = ["name", "is_superuser", "parents", "users", "attributes", "roles"]
 
     model_config = ConfigDict(
         populate_by_name=True,
@@ -77,11 +76,6 @@ class PatchedGroupRequest(BaseModel):
             exclude=excluded_fields,
             exclude_none=True,
         )
-        # set to None if parent (nullable) is None
-        # and model_fields_set contains the field
-        if self.parent is None and "parent" in self.model_fields_set:
-            _dict['parent'] = None
-
         return _dict
 
     @classmethod
@@ -96,11 +90,10 @@ class PatchedGroupRequest(BaseModel):
         _obj = cls.model_validate({
             "name": obj.get("name"),
             "is_superuser": obj.get("is_superuser"),
-            "parent": obj.get("parent"),
+            "parents": obj.get("parents"),
             "users": obj.get("users"),
             "attributes": obj.get("attributes"),
-            "roles": obj.get("roles"),
-            "children": obj.get("children")
+            "roles": obj.get("roles")
         })
         return _obj
 

authentik_client/models/patched_group_saml_source_connection_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/patched_group_source_connection_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/patched_group_telegram_source_connection_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/patched_identification_stage_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -22,7 +22,6 @@ from pydantic import BaseModel, ConfigDict, Field, StrictBool
 from typing import Any, ClassVar, Dict, List, Optional
 from typing_extensions import Annotated
 from uuid import UUID
-from authentik_client.models.flow_set_request import FlowSetRequest
 from authentik_client.models.user_fields_enum import UserFieldsEnum
 from typing import Optional, Set
 from typing_extensions import Self
@@ -32,7 +31,6 @@ class PatchedIdentificationStageRequest(BaseModel):
     IdentificationStage Serializer
     """ # noqa: E501
     name: Optional[Annotated[str, Field(min_length=1, strict=True)]] = None
-    flow_set: Optional[List[FlowSetRequest]] = None
     user_fields: Optional[List[UserFieldsEnum]] = Field(default=None, description="Fields of the user object to match against. (Hold shift to select multiple options)")
     password_stage: Optional[UUID] = Field(default=None, description="When set, shows a password field, instead of showing the password field as separate step.")
     captcha_stage: Optional[UUID] = Field(default=None, description="When set, adds functionality exactly like a Captcha stage, but baked into the Identification stage.")
@@ -45,7 +43,8 @@ class PatchedIdentificationStageRequest(BaseModel):
     show_source_labels: Optional[StrictBool] = None
     pretend_user_exists: Optional[StrictBool] = Field(default=None, description="When enabled, the stage will succeed and continue even when incorrect user info is entered.")
     enable_remember_me: Optional[StrictBool] = Field(default=None, description="Show the user the 'Remember me on this device' toggle, allowing repeat users to skip straight to entering their password.")
-    __properties: ClassVar[List[str]] = ["name", "flow_set", "user_fields", "password_stage", "captcha_stage", "case_insensitive_matching", "show_matched_user", "enrollment_flow", "recovery_flow", "passwordless_flow", "sources", "show_source_labels", "pretend_user_exists", "enable_remember_me"]
+    webauthn_stage: Optional[UUID] = Field(default=None, description="When set, and conditional WebAuthn is available, allow the user to use their passkey as a first factor.")
+    __properties: ClassVar[List[str]] = ["name", "user_fields", "password_stage", "captcha_stage", "case_insensitive_matching", "show_matched_user", "enrollment_flow", "recovery_flow", "passwordless_flow", "sources", "show_source_labels", "pretend_user_exists", "enable_remember_me", "webauthn_stage"]
 
     model_config = ConfigDict(
         populate_by_name=True,
@@ -86,13 +85,6 @@ class PatchedIdentificationStageRequest(BaseModel):
             exclude=excluded_fields,
             exclude_none=True,
         )
-        # override the default output from pydantic by calling `to_dict()` of each item in flow_set (list)
-        _items = []
-        if self.flow_set:
-            for _item_flow_set in self.flow_set:
-                if _item_flow_set:
-                    _items.append(_item_flow_set.to_dict())
-            _dict['flow_set'] = _items
         # set to None if password_stage (nullable) is None
         # and model_fields_set contains the field
         if self.password_stage is None and "password_stage" in self.model_fields_set:
@@ -118,6 +110,11 @@ class PatchedIdentificationStageRequest(BaseModel):
         if self.passwordless_flow is None and "passwordless_flow" in self.model_fields_set:
             _dict['passwordless_flow'] = None
 
+        # set to None if webauthn_stage (nullable) is None
+        # and model_fields_set contains the field
+        if self.webauthn_stage is None and "webauthn_stage" in self.model_fields_set:
+            _dict['webauthn_stage'] = None
+
         return _dict
 
     @classmethod
@@ -131,7 +128,6 @@ class PatchedIdentificationStageRequest(BaseModel):
 
         _obj = cls.model_validate({
             "name": obj.get("name"),
-            "flow_set": [FlowSetRequest.from_dict(_item) for _item in obj["flow_set"]] if obj.get("flow_set") is not None else None,
             "user_fields": obj.get("user_fields"),
             "password_stage": obj.get("password_stage"),
             "captcha_stage": obj.get("captcha_stage"),
@@ -143,7 +139,8 @@ class PatchedIdentificationStageRequest(BaseModel):
             "sources": obj.get("sources"),
             "show_source_labels": obj.get("show_source_labels"),
             "pretend_user_exists": obj.get("pretend_user_exists"),
-            "enable_remember_me": obj.get("enable_remember_me")
+            "enable_remember_me": obj.get("enable_remember_me"),
+            "webauthn_stage": obj.get("webauthn_stage")
         })
         return _obj
 

authentik_client/models/patched_initial_permissions_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -22,7 +22,6 @@ from pydantic import BaseModel, ConfigDict, Field, StrictInt
 from typing import Any, ClassVar, Dict, List, Optional
 from typing_extensions import Annotated
 from uuid import UUID
-from authentik_client.models.initial_permissions_mode_enum import InitialPermissionsModeEnum
 from typing import Optional, Set
 from typing_extensions import Self
 
@@ -31,10 +30,9 @@ class PatchedInitialPermissionsRequest(BaseModel):
     InitialPermissions serializer
     """ # noqa: E501
     name: Optional[Annotated[str, Field(min_length=1, strict=True, max_length=150)]] = None
-    mode: Optional[InitialPermissionsModeEnum] = None
     role: Optional[UUID] = None
     permissions: Optional[List[StrictInt]] = None
-    __properties: ClassVar[List[str]] = ["name", "mode", "role", "permissions"]
+    __properties: ClassVar[List[str]] = ["name", "role", "permissions"]
 
     model_config = ConfigDict(
         populate_by_name=True,
@@ -88,7 +86,6 @@ class PatchedInitialPermissionsRequest(BaseModel):
 
         _obj = cls.model_validate({
             "name": obj.get("name"),
-            "mode": obj.get("mode"),
             "role": obj.get("role"),
             "permissions": obj.get("permissions")
         })

authentik_client/models/patched_invitation_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -30,7 +30,7 @@ class PatchedInvitationRequest(BaseModel):
     """
     Invitation Serializer
     """ # noqa: E501
-    name: Optional[Annotated[str, Field(min_length=1, strict=True, max_length=50)]] = None
+    name: Optional[Annotated[str, Field(min_length=1, strict=True)]] = None
     expires: Optional[datetime] = None
     fixed_data: Optional[Dict[str, Any]] = None
     single_use: Optional[StrictBool] = Field(default=None, description="When enabled, the invitation will be deleted after usage.")

authentik_client/models/patched_invitation_stage_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -21,7 +21,6 @@ import json
 from pydantic import BaseModel, ConfigDict, Field, StrictBool
 from typing import Any, ClassVar, Dict, List, Optional
 from typing_extensions import Annotated
-from authentik_client.models.flow_set_request import FlowSetRequest
 from typing import Optional, Set
 from typing_extensions import Self
 
@@ -30,9 +29,8 @@ class PatchedInvitationStageRequest(BaseModel):
     InvitationStage Serializer
     """ # noqa: E501
     name: Optional[Annotated[str, Field(min_length=1, strict=True)]] = None
-    flow_set: Optional[List[FlowSetRequest]] = None
     continue_flow_without_invitation: Optional[StrictBool] = Field(default=None, description="If this flag is set, this Stage will jump to the next Stage when no Invitation is given. By default this Stage will cancel the Flow when no invitation is given.")
-    __properties: ClassVar[List[str]] = ["name", "flow_set", "continue_flow_without_invitation"]
+    __properties: ClassVar[List[str]] = ["name", "continue_flow_without_invitation"]
 
     model_config = ConfigDict(
         populate_by_name=True,
@@ -73,13 +71,6 @@ class PatchedInvitationStageRequest(BaseModel):
             exclude=excluded_fields,
             exclude_none=True,
         )
-        # override the default output from pydantic by calling `to_dict()` of each item in flow_set (list)
-        _items = []
-        if self.flow_set:
-            for _item_flow_set in self.flow_set:
-                if _item_flow_set:
-                    _items.append(_item_flow_set.to_dict())
-            _dict['flow_set'] = _items
         return _dict
 
     @classmethod
@@ -93,7 +84,6 @@ class PatchedInvitationStageRequest(BaseModel):
 
         _obj = cls.model_validate({
             "name": obj.get("name"),
-            "flow_set": [FlowSetRequest.from_dict(_item) for _item in obj["flow_set"]] if obj.get("flow_set") is not None else None,
             "continue_flow_without_invitation": obj.get("continue_flow_without_invitation")
         })
         return _obj

authentik_client/models/patched_kerberos_source_property_mapping_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/patched_kerberos_source_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -25,6 +25,7 @@ from uuid import UUID
 from authentik_client.models.group_matching_mode_enum import GroupMatchingModeEnum
 from authentik_client.models.kadmin_type_enum import KadminTypeEnum
 from authentik_client.models.policy_engine_mode import PolicyEngineMode
+from authentik_client.models.sync_outgoing_trigger_mode_enum import SyncOutgoingTriggerModeEnum
 from authentik_client.models.user_matching_mode_enum import UserMatchingModeEnum
 from typing import Optional, Set
 from typing_extensions import Self
@@ -34,8 +35,9 @@ class PatchedKerberosSourceRequest(BaseModel):
     Kerberos Source Serializer
     """ # noqa: E501
     name: Optional[Annotated[str, Field(min_length=1, strict=True)]] = Field(default=None, description="Source's display Name.")
-    slug: Optional[Annotated[str, Field(min_length=1, strict=True, max_length=50)]] = Field(default=None, description="Internal source name, used in URLs.")
+    slug: Optional[Annotated[str, Field(min_length=1, strict=True)]] = Field(default=None, description="Internal source name, used in URLs.")
     enabled: Optional[StrictBool] = None
+    promoted: Optional[StrictBool] = Field(default=None, description="When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon.")
     authentication_flow: Optional[UUID] = Field(default=None, description="Flow to use when authenticating existing users.")
     enrollment_flow: Optional[UUID] = Field(default=None, description="Flow to use when enrolling new users.")
     user_property_mappings: Optional[List[UUID]] = None
@@ -43,6 +45,7 @@ class PatchedKerberosSourceRequest(BaseModel):
     policy_engine_mode: Optional[PolicyEngineMode] = None
     user_matching_mode: Optional[UserMatchingModeEnum] = Field(default=None, description="How the source determines if an existing user should be authenticated or a new user enrolled.")
     user_path_template: Optional[Annotated[str, Field(min_length=1, strict=True)]] = None
+    icon: Optional[StrictStr] = None
     group_matching_mode: Optional[GroupMatchingModeEnum] = Field(default=None, description="How the source determines if an existing group should be used or a new group created.")
     realm: Optional[Annotated[str, Field(min_length=1, strict=True)]] = Field(default=None, description="Kerberos realm")
     krb5_conf: Optional[StrictStr] = Field(default=None, description="Custom krb5.conf to use. Uses the system one by default")
@@ -57,7 +60,8 @@ class PatchedKerberosSourceRequest(BaseModel):
     spnego_keytab: Optional[StrictStr] = Field(default=None, description="SPNEGO keytab base64-encoded or path to keytab in the form FILE:path")
     spnego_ccache: Optional[StrictStr] = Field(default=None, description="Credential cache to use for SPNEGO in form type:residual")
     password_login_update_internal_password: Optional[StrictBool] = Field(default=None, description="If enabled, the authentik-stored password will be updated upon login with the Kerberos password backend")
-    __properties: ClassVar[List[str]] = ["name", "slug", "enabled", "authentication_flow", "enrollment_flow", "user_property_mappings", "group_property_mappings", "policy_engine_mode", "user_matching_mode", "user_path_template", "group_matching_mode", "realm", "krb5_conf", "kadmin_type", "sync_users", "sync_users_password", "sync_principal", "sync_password", "sync_keytab", "sync_ccache", "spnego_server_name", "spnego_keytab", "spnego_ccache", "password_login_update_internal_password"]
+    sync_outgoing_trigger_mode: Optional[SyncOutgoingTriggerModeEnum] = Field(default=None, description="When to trigger sync for outgoing providers")
+    __properties: ClassVar[List[str]] = ["name", "slug", "enabled", "promoted", "authentication_flow", "enrollment_flow", "user_property_mappings", "group_property_mappings", "policy_engine_mode", "user_matching_mode", "user_path_template", "icon", "group_matching_mode", "realm", "krb5_conf", "kadmin_type", "sync_users", "sync_users_password", "sync_principal", "sync_password", "sync_keytab", "sync_ccache", "spnego_server_name", "spnego_keytab", "spnego_ccache", "password_login_update_internal_password", "sync_outgoing_trigger_mode"]
 
     @field_validator('slug')
     def slug_validate_regular_expression(cls, value):
@@ -133,6 +137,7 @@ class PatchedKerberosSourceRequest(BaseModel):
             "name": obj.get("name"),
             "slug": obj.get("slug"),
             "enabled": obj.get("enabled"),
+            "promoted": obj.get("promoted"),
             "authentication_flow": obj.get("authentication_flow"),
             "enrollment_flow": obj.get("enrollment_flow"),
             "user_property_mappings": obj.get("user_property_mappings"),
@@ -140,6 +145,7 @@ class PatchedKerberosSourceRequest(BaseModel):
             "policy_engine_mode": obj.get("policy_engine_mode"),
             "user_matching_mode": obj.get("user_matching_mode"),
             "user_path_template": obj.get("user_path_template"),
+            "icon": obj.get("icon"),
             "group_matching_mode": obj.get("group_matching_mode"),
             "realm": obj.get("realm"),
             "krb5_conf": obj.get("krb5_conf"),
@@ -153,7 +159,8 @@ class PatchedKerberosSourceRequest(BaseModel):
             "spnego_server_name": obj.get("spnego_server_name"),
             "spnego_keytab": obj.get("spnego_keytab"),
             "spnego_ccache": obj.get("spnego_ccache"),
-            "password_login_update_internal_password": obj.get("password_login_update_internal_password")
+            "password_login_update_internal_password": obj.get("password_login_update_internal_password"),
+            "sync_outgoing_trigger_mode": obj.get("sync_outgoing_trigger_mode")
         })
         return _obj
 

authentik_client/models/patched_kubernetes_service_connection_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/patched_ldap_provider_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/patched_ldap_source_property_mapping_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/patched_ldap_source_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -23,6 +23,7 @@ from typing import Any, ClassVar, Dict, List, Optional
 from typing_extensions import Annotated
 from uuid import UUID
 from authentik_client.models.policy_engine_mode import PolicyEngineMode
+from authentik_client.models.sync_outgoing_trigger_mode_enum import SyncOutgoingTriggerModeEnum
 from authentik_client.models.user_matching_mode_enum import UserMatchingModeEnum
 from typing import Optional, Set
 from typing_extensions import Self
@@ -32,8 +33,9 @@ class PatchedLDAPSourceRequest(BaseModel):
     LDAP Source Serializer
     """ # noqa: E501
     name: Optional[Annotated[str, Field(min_length=1, strict=True)]] = Field(default=None, description="Source's display Name.")
-    slug: Optional[Annotated[str, Field(min_length=1, strict=True, max_length=50)]] = Field(default=None, description="Internal source name, used in URLs.")
+    slug: Optional[Annotated[str, Field(min_length=1, strict=True)]] = Field(default=None, description="Internal source name, used in URLs.")
     enabled: Optional[StrictBool] = None
+    promoted: Optional[StrictBool] = Field(default=None, description="When enabled, this source will be displayed as a prominent button on the login page, instead of a small icon.")
     authentication_flow: Optional[UUID] = Field(default=None, description="Flow to use when authenticating existing users.")
     enrollment_flow: Optional[UUID] = Field(default=None, description="Flow to use when enrolling new users.")
     user_property_mappings: Optional[List[UUID]] = None
@@ -41,6 +43,7 @@ class PatchedLDAPSourceRequest(BaseModel):
     policy_engine_mode: Optional[PolicyEngineMode] = None
     user_matching_mode: Optional[UserMatchingModeEnum] = Field(default=None, description="How the source determines if an existing user should be authenticated or a new user enrolled.")
     user_path_template: Optional[Annotated[str, Field(min_length=1, strict=True)]] = None
+    icon: Optional[StrictStr] = None
     server_uri: Optional[Annotated[str, Field(min_length=1, strict=True)]] = None
     peer_certificate: Optional[UUID] = Field(default=None, description="Optionally verify the LDAP Server's Certificate against the CA Chain in this keypair.")
     client_certificate: Optional[UUID] = Field(default=None, description="Client certificate to authenticate against the LDAP Server's Certificate.")
@@ -63,7 +66,8 @@ class PatchedLDAPSourceRequest(BaseModel):
     sync_parent_group: Optional[UUID] = None
     lookup_groups_from_user: Optional[StrictBool] = Field(default=None, description="Lookup group membership based on a user attribute instead of a group attribute. This allows nested group resolution on systems like FreeIPA and Active Directory")
     delete_not_found_objects: Optional[StrictBool] = Field(default=None, description="Delete authentik users and groups which were previously supplied by this source, but are now missing from it.")
-    __properties: ClassVar[List[str]] = ["name", "slug", "enabled", "authentication_flow", "enrollment_flow", "user_property_mappings", "group_property_mappings", "policy_engine_mode", "user_matching_mode", "user_path_template", "server_uri", "peer_certificate", "client_certificate", "bind_cn", "bind_password", "start_tls", "sni", "base_dn", "additional_user_dn", "additional_group_dn", "user_object_filter", "group_object_filter", "group_membership_field", "user_membership_attribute", "object_uniqueness_field", "password_login_update_internal_password", "sync_users", "sync_users_password", "sync_groups", "sync_parent_group", "lookup_groups_from_user", "delete_not_found_objects"]
+    sync_outgoing_trigger_mode: Optional[SyncOutgoingTriggerModeEnum] = Field(default=None, description="When to trigger sync for outgoing providers")
+    __properties: ClassVar[List[str]] = ["name", "slug", "enabled", "promoted", "authentication_flow", "enrollment_flow", "user_property_mappings", "group_property_mappings", "policy_engine_mode", "user_matching_mode", "user_path_template", "icon", "server_uri", "peer_certificate", "client_certificate", "bind_cn", "bind_password", "start_tls", "sni", "base_dn", "additional_user_dn", "additional_group_dn", "user_object_filter", "group_object_filter", "group_membership_field", "user_membership_attribute", "object_uniqueness_field", "password_login_update_internal_password", "sync_users", "sync_users_password", "sync_groups", "sync_parent_group", "lookup_groups_from_user", "delete_not_found_objects", "sync_outgoing_trigger_mode"]
 
     @field_validator('slug')
     def slug_validate_regular_expression(cls, value):
@@ -154,6 +158,7 @@ class PatchedLDAPSourceRequest(BaseModel):
             "name": obj.get("name"),
             "slug": obj.get("slug"),
             "enabled": obj.get("enabled"),
+            "promoted": obj.get("promoted"),
             "authentication_flow": obj.get("authentication_flow"),
             "enrollment_flow": obj.get("enrollment_flow"),
             "user_property_mappings": obj.get("user_property_mappings"),
@@ -161,6 +166,7 @@ class PatchedLDAPSourceRequest(BaseModel):
             "policy_engine_mode": obj.get("policy_engine_mode"),
             "user_matching_mode": obj.get("user_matching_mode"),
             "user_path_template": obj.get("user_path_template"),
+            "icon": obj.get("icon"),
             "server_uri": obj.get("server_uri"),
             "peer_certificate": obj.get("peer_certificate"),
             "client_certificate": obj.get("client_certificate"),
@@ -182,7 +188,8 @@ class PatchedLDAPSourceRequest(BaseModel):
             "sync_groups": obj.get("sync_groups"),
             "sync_parent_group": obj.get("sync_parent_group"),
             "lookup_groups_from_user": obj.get("lookup_groups_from_user"),
-            "delete_not_found_objects": obj.get("delete_not_found_objects")
+            "delete_not_found_objects": obj.get("delete_not_found_objects"),
+            "sync_outgoing_trigger_mode": obj.get("sync_outgoing_trigger_mode")
         })
         return _obj
 

authentik_client/models/patched_license_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/patched_microsoft_entra_provider_mapping_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 

authentik_client/models/patched_microsoft_entra_provider_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -40,8 +40,10 @@ class PatchedMicrosoftEntraProviderRequest(BaseModel):
     filter_group: Optional[UUID] = None
     user_delete_action: Optional[OutgoingSyncDeleteAction] = None
     group_delete_action: Optional[OutgoingSyncDeleteAction] = None
+    sync_page_size: Optional[Annotated[int, Field(le=2147483647, strict=True, ge=1)]] = Field(default=None, description="Controls the number of objects synced in a single task")
+    sync_page_timeout: Optional[Annotated[str, Field(min_length=1, strict=True)]] = Field(default=None, description="Timeout for synchronization of a single page")
     dry_run: Optional[StrictBool] = Field(default=None, description="When enabled, provider will not modify or create objects in the remote system.")
-    __properties: ClassVar[List[str]] = ["name", "property_mappings", "property_mappings_group", "client_id", "client_secret", "tenant_id", "exclude_users_service_account", "filter_group", "user_delete_action", "group_delete_action", "dry_run"]
+    __properties: ClassVar[List[str]] = ["name", "property_mappings", "property_mappings_group", "client_id", "client_secret", "tenant_id", "exclude_users_service_account", "filter_group", "user_delete_action", "group_delete_action", "sync_page_size", "sync_page_timeout", "dry_run"]
 
     model_config = ConfigDict(
         populate_by_name=True,
@@ -109,6 +111,8 @@ class PatchedMicrosoftEntraProviderRequest(BaseModel):
             "filter_group": obj.get("filter_group"),
             "user_delete_action": obj.get("user_delete_action"),
             "group_delete_action": obj.get("group_delete_action"),
+            "sync_page_size": obj.get("sync_page_size"),
+            "sync_page_timeout": obj.get("sync_page_timeout"),
             "dry_run": obj.get("dry_run")
         })
         return _obj

authentik_client/models/patched_mutual_tls_stage_request.py

@@ -5,7 +5,7 @@
 
     Making authentication simple.
 
-    The version of the OpenAPI document: 2025.10.3
+    The version of the OpenAPI document: 2025.12.0-rc1
     Contact: hello@goauthentik.io
     Generated by OpenAPI Generator (https://openapi-generator.tech)
 
@@ -23,8 +23,7 @@ from typing import Any, ClassVar, Dict, List, Optional
 from typing_extensions import Annotated
 from uuid import UUID
 from authentik_client.models.cert_attribute_enum import CertAttributeEnum
-from authentik_client.models.flow_set_request import FlowSetRequest
-from authentik_client.models.mutual_tls_stage_mode_enum import MutualTLSStageModeEnum
+from authentik_client.models.stage_mode_enum import StageModeEnum
 from authentik_client.models.user_attribute_enum import UserAttributeEnum
 from typing import Optional, Set
 from typing_extensions import Self
@@ -34,12 +33,11 @@ class PatchedMutualTLSStageRequest(BaseModel):
     MutualTLSStage Serializer
     """ # noqa: E501
     name: Optional[Annotated[str, Field(min_length=1, strict=True)]] = None
-    flow_set: Optional[List[FlowSetRequest]] = None
-    mode: Optional[MutualTLSStageModeEnum] = None
+    mode: Optional[StageModeEnum] = None
     certificate_authorities: Optional[List[UUID]] = Field(default=None, description="Configure certificate authorities to validate the certificate against. This option has a higher priority than the `client_certificate` option on `Brand`.")
     cert_attribute: Optional[CertAttributeEnum] = None
     user_attribute: Optional[UserAttributeEnum] = None
-    __properties: ClassVar[List[str]] = ["name", "flow_set", "mode", "certificate_authorities", "cert_attribute", "user_attribute"]
+    __properties: ClassVar[List[str]] = ["name", "mode", "certificate_authorities", "cert_attribute", "user_attribute"]
 
     model_config = ConfigDict(
         populate_by_name=True,
@@ -80,13 +78,6 @@ class PatchedMutualTLSStageRequest(BaseModel):
             exclude=excluded_fields,
             exclude_none=True,
         )
-        # override the default output from pydantic by calling `to_dict()` of each item in flow_set (list)
-        _items = []
-        if self.flow_set:
-            for _item_flow_set in self.flow_set:
-                if _item_flow_set:
-                    _items.append(_item_flow_set.to_dict())
-            _dict['flow_set'] = _items
         return _dict
 
     @classmethod
@@ -100,7 +91,6 @@ class PatchedMutualTLSStageRequest(BaseModel):
 
         _obj = cls.model_validate({
             "name": obj.get("name"),
-            "flow_set": [FlowSetRequest.from_dict(_item) for _item in obj["flow_set"]] if obj.get("flow_set") is not None else None,
             "mode": obj.get("mode"),
             "certificate_authorities": obj.get("certificate_authorities"),
             "cert_attribute": obj.get("cert_attribute"),