116 KiB
| title | slug |
|---|---|
| Release 2023.10 | /releases/2023.10 |
Breaking changes
-
Requests with missing trailing slash are no longer redirected
In previous versions, requests to a path like
/api/v3/core/userswould be redirected to[...]/users/. This redirect would cause mutating requests (such as POST, PUT and PATCH) to fail as they would get redirected to[...]/users/. The redirect has been disabled, which will not have have an impact on a correctly configured setup. -
It is only possible to upgrade to 2023.10 from 2023.8. This is due to a bug in the migrations which will be fixed in a future release (#7326).
-
Warning: The first 2024.x version of this chart will see a rework that will include breaking changes. The breaking changes will be noted in the next Release notes.
New features
-
RBAC (preview)
With this release we're introducing the ability to finely configure permissions within authentik. These permissions can be used to delegate different tasks, such as user management, application creation and more to users without granting them full superuser permissions. With this system, a least-privilege system can also be implemented much more easily. See more info here
-
LDAP Provider improvements
The LDAP Provider now has an expanded schema, increasing the compatibility with clients that use the LDAP schema to parse data and .Net applications on Windows.
-
Improved Proxy provider logout
The proxy provider will now terminate all sessions when a user logs out of authentik or their session expires.
-
LDAP Source structure mirroring
The LDAP Source has a new default property mapping called
authentik default LDAP Mapping: DN to User Pathwhich will map the LDAP users' DN to the user path in authentik, keeping the same structure as the directory the source syncs from. -
OAuth Source OIDC auto-refresh
OAuth sources that have a OIDC Well-known URL or OIDC JWKS URL set will periodically be updated to use the correct configuration based on the configured URLs.
Upgrading
This release does not introduce any new requirements.
docker-compose
To upgrade, download the new docker-compose file and update the Docker stack with the new version, using these commands:
wget -O docker-compose.yml https://goauthentik.io/version/2023.10/docker-compose.yml
docker-compose up -d
The -O flag retains the downloaded file's name, overwriting any existing local file with the same name.
Kubernetes
Upgrade the Helm Chart to the new version, using the following commands:
helm repo update
helm upgrade authentik authentik/authentik -f values.yaml --version ^2023.10
Minor changes/fixes
- blueprints: fix mismatched user-login stage order (#7030)
- ci: test with postgres 16
- core/api: add uuid field to core api user http response (#7110)
- core: Initial RBAC (#6806)
- core: Use branding_title in the end session page (#7282)
- core: prevent self-impersonation (#6885)
- core: remove celery's duplicate max_tasks_per_child (#6840)
- events: fix error when storing events with date/time/datetime/etc (#7028)
- flows: remove need for post() wrapper by using dispatch (#6765)
- flows: stage_invalid() makes flow restart depending on invalid_response_action setting (#6780)
- outposts: use channel groups instead of saving channel names (#7183)
- policies/reputation: require either check to be enabled (#6764)
- policies: fix cached policy metric (#7068)
- providers/ldap: add windows adsi support (#7098)
- providers/proxy: improve SLO by backchannel logging out sessions (#7099)
- providers/radius: TOTP MFA support (#7217)
- providers/saml: add default RelayState value for IDP-initiated requests (#7100)
- providers/saml: set WantAuthnRequestsSigned in metadata (#6851)
- providers/scim: check that a provider exists before starting scim task (#6841)
- providers/scim: remove preview banner (#7166)
- root: add option to disable beat when running worker (#6849)
- root: connect to backend via socket (#6720)
- root: disable APPEND_SLASH (#6928)
- root: extended flow and policy metrics (#7067)
- root: handle SIGHUP and SIGUSR2, healthcheck gunicorn (#6630)
- root: make Celery worker concurrency configurable (#6837)
- root: replace boj/redistore with vendored version of rbcervilla/redisstore (#6988)
- sources/ldap: add default property mapping to mirror directory structure (#6990)
- sources/ldap: add lock to sync (#6930)
- sources/ldap: add warning when a property mapping returns None or bytes (#6913)
- sources/ldap: fix FreeIPA nsaccountlock sync (#6745)
- sources/ldap: fix attribute path resolution (#7090)
- sources/ldap: fix inverted interpretation of FreeIPA nsaccountlock (#6877)
- sources/ldap: fix task timeout for ldap_sync_all and ldap_sync_single (#6809)
- sources/oauth: fix oidc well-known parsing (#7248)
- sources/oauth: include default JWKS URLs for OAuth sources (#6992)
- sources/oauth: periodically update OAuth sources' OIDC configuration (#7245)
- stages/authenticator_sms: fix error when phone number from context already exists (#7264)
- stages/authenticator: vendor otp (#6741)
- stages/deny: add custom message (#7144)
- stages/email: Fix query parameters getting lost in Email links (#5376)
- stages/email: rework email templates (#7029)
- stages/invitation: fix mis-matched serializer class for invitation (#7018)
- stages/password: fix failed_attempts_before_cancel allowing one too many (#6763)
- web/admin: add additional Flow info (#7155)
- web/admin: fix application icon size (#6738)
- web/admin: fix flow-search not being able to unset (#6838)
- web/admin: fix not being able to unset certificates (#6767)
- web/admin: fix prompt form and codemirror mode (#7231)
- web/admin: fix webauthn label order, add raw value (#6905)
- web/admin: improve user email button labels (#7233)
- web/admin: invitation stage: default "continue without invitation" to false
- web/admin: use
<pre>for order field on bound elements (#7031) - web/admin: user details few tooltip buttons (#6899)
- web/flows: fix plex login not opening new tab on mobile safari (#7050)
- web/user: fix incorrect link to admin interface (#6993)
- web/user: fix unenrollment flow not being shown (#6972)
- web: change 'Attributes' to 'Custom attributes' on Invitation Field (#7145)
- web: the return of pseudolocalization (#7190)
Fixed in 2023.10.1
- lifecycle: fix otp merge migration (#7315)
Fixed in 2023.10.2
- *: fix GHSA-rjvp-29xq-f62w, Reported by @devSparkle
- blueprints: fix entries with state: absent not being deleted if their serializer has errors (#7345)
- crypto: fix race conditions when creating self-signed certificates on startup (#7344)
- lifecycle: rework otp_merge migration (#7359)
- providers/proxy: to fix duplicate cookie (#7324)
- rbac: handle lookup error (#7341)
- stages/email: fix sending emails from task (#7325)
- web/admin: fix @change handler for ak-radio elements (#7348)
- web/admin: fix role form reacting to enter (#7330)
Fixed in 2023.10.3
- ci: explicitly give write permissions to packages (cherry-pick #7428) (#7430)
- core: fix worker beat toggle inverted (cherry-pick #7508) (#7509)
- events: fix gdpr compliance always running (cherry-pick #7491) (#7505)
- providers/oauth2: set auth_via for token and other endpoints (cherry-pick #7417) (#7427)
- providers/proxy: fix closed redis client (cherry-pick #7385) (#7429)
- root: Improve multi arch Docker image build speed (cherry-pick #7355) (#7426)
- sources/oauth: fix patreon (cherry-pick #7454) (#7456)
- stages/email: fix duplicate querystring encoding (cherry-pick #7386) (#7425)
- web: bugfix: broken backchannel selector (cherry-pick #7480) (#7507)
- web/admin: fix html error on oauth2 provider page (cherry-pick #7384) (#7424)
- web/flows: attempt to fix bitwareden android compatibility (cherry-pick #7455) (#7457)
Fixed in 2023.10.4
- ci: fix permissions for release pipeline to publish binaries (cherry-pick #7512) (#7621)
- core: bump golang from 1.21.3-bookworm to 1.21.4-bookworm (cherry-pick #7483) (#7622)
- events: don't update internal service accounts unless needed (cherry-pick #7611) (#7640)
- events: fix missing model_* events when not directly authenticated (cherry-pick #7588) (#7597)
- events: sanitize functions (cherry-pick #7587) (#7589)
- providers/proxy: Fix duplicate cookies when using file system store. (cherry-pick #7541) (#7544)
- providers/scim: fix missing schemas attribute for User and Group (cherry-pick #7477) (#7596)
- root: specify node and python versions in respective config files, deduplicate in CI (#7620)
- security: fix CVE-2023-48228, Reported by @Sapd (#7666)
- stages/email: use uuid for email confirmation token instead of username (cherry-pick #7581) (#7584)
- web/admin: fix admins not able to delete MFA devices (#7660)
API Changes
What's New
PUT /core/transactional/applications/
GET /rbac/permissions/
GET /rbac/permissions/{id}/
GET /rbac/permissions/assigned_by_roles/
POST /rbac/permissions/assigned_by_roles/{uuid}/assign/
PATCH /rbac/permissions/assigned_by_roles/{uuid}/unassign/
GET /rbac/permissions/assigned_by_users/
POST /rbac/permissions/assigned_by_users/{id}/assign/
PATCH /rbac/permissions/assigned_by_users/{id}/unassign/
GET /rbac/permissions/roles/
GET /rbac/permissions/users/
GET /rbac/roles/
POST /rbac/roles/
GET /rbac/roles/{uuid}/
PUT /rbac/roles/{uuid}/
DELETE /rbac/roles/{uuid}/
PATCH /rbac/roles/{uuid}/
GET /rbac/roles/{uuid}/used_by/
What's Changed
GET /authenticators/admin/totp/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this TOTP Device.
PUT /authenticators/admin/totp/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this TOTP Device.
DELETE /authenticators/admin/totp/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this TOTP Device.
PATCH /authenticators/admin/totp/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this TOTP Device.
GET /authenticators/totp/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this TOTP Device.
PUT /authenticators/totp/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this TOTP Device.
DELETE /authenticators/totp/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this TOTP Device.
PATCH /authenticators/totp/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this TOTP Device.
POST /core/groups/{group_uuid}/add_user/
Parameters:
Changed: group_uuid in path
A UUID string identifying this Group.
POST /core/groups/{group_uuid}/remove_user/
Parameters:
Changed: group_uuid in path
A UUID string identifying this Group.
GET /enterprise/license/{license_uuid}/
Parameters:
Changed: license_uuid in path
A UUID string identifying this License.
PUT /enterprise/license/{license_uuid}/
Parameters:
Changed: license_uuid in path
A UUID string identifying this License.
DELETE /enterprise/license/{license_uuid}/
Parameters:
Changed: license_uuid in path
A UUID string identifying this License.
PATCH /enterprise/license/{license_uuid}/
Parameters:
Changed: license_uuid in path
A UUID string identifying this License.
GET /outposts/instances/{uuid}/health/
Parameters:
Changed: uuid in path
A UUID string identifying this Outpost.
GET /outposts/radius/{id}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json- Added property
mfa_support(boolean)When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
- Added property
GET /policies/event_matcher/{policy_uuid}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
app(string)authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticator
-
Changed property
model(string)authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.license
-
PUT /policies/event_matcher/{policy_uuid}/
Request:
Changed content type : application/json
-
Changed property
app(string)authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticator
-
Changed property
model(string)authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.license
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
app(string)authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticator
-
Changed property
model(string)authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.license
-
PATCH /policies/event_matcher/{policy_uuid}/
Request:
Changed content type : application/json
-
Changed property
app(string)authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticator
-
Changed property
model(string)authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.license
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
app(string)authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticator
-
Changed property
model(string)authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.license
-
GET /providers/radius/{id}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json- Added property
mfa_support(boolean)When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
- Added property
PUT /providers/radius/{id}/
Request:
Changed content type : application/json
- Added property
mfa_support(boolean)When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json- Added property
mfa_support(boolean)When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
- Added property
PATCH /providers/radius/{id}/
Request:
Changed content type : application/json
- Added property
mfa_support(boolean)When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json- Added property
mfa_support(boolean)When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
- Added property
GET /sources/oauth/source_types/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/jsonChanged items (object): > Serializer for SourceType
New required properties:
oidc_jwks_urloidc_well_known_url
-
Added property
oidc_well_known_url(string) -
Added property
oidc_jwks_url(string)
DELETE /authenticators/admin/static/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this Static Device.
GET /authenticators/admin/static/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this Static Device.
PUT /authenticators/admin/static/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this Static Device.
PATCH /authenticators/admin/static/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this Static Device.
DELETE /authenticators/static/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this Static Device.
GET /authenticators/static/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this Static Device.
PUT /authenticators/static/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this Static Device.
PATCH /authenticators/static/{id}/
Parameters:
Changed: id in path
A unique integer value identifying this Static Device.
GET /authenticators/static/{id}/used_by/
Parameters:
Changed: id in path
A unique integer value identifying this Static Device.
GET /authenticators/totp/{id}/used_by/
Parameters:
Changed: id in path
A unique integer value identifying this TOTP Device.
DELETE /core/groups/{group_uuid}/
Parameters:
Changed: group_uuid in path
A UUID string identifying this Group.
GET /core/groups/{group_uuid}/
Parameters:
Changed: group_uuid in path
A UUID string identifying this Group.
Return Type:
Changed response : 200 OK
-
Changed content type :
application/jsonNew required properties:
roles_obj
-
Added property
roles(array)Items (string):
-
Added property
roles_obj(array)Items (object): > Role serializer
-
Property
pk(string) -
Property
name(string)
-
PUT /core/groups/{group_uuid}/
Parameters:
Changed: group_uuid in path
A UUID string identifying this Group.
Request:
Changed content type : application/json
- Added property
roles(array)
Return Type:
Changed response : 200 OK
-
Changed content type :
application/jsonNew required properties:
roles_obj
-
Added property
roles(array) -
Added property
roles_obj(array)
PATCH /core/groups/{group_uuid}/
Parameters:
Changed: group_uuid in path
A UUID string identifying this Group.
Request:
Changed content type : application/json
- Added property
roles(array)
Return Type:
Changed response : 200 OK
-
Changed content type :
application/jsonNew required properties:
roles_obj
-
Added property
roles(array) -
Added property
roles_obj(array)
GET /core/groups/{group_uuid}/used_by/
Parameters:
Changed: group_uuid in path
A UUID string identifying this Group.
GET /core/tokens/{identifier}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
user_obj(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
PUT /core/tokens/{identifier}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
user_obj(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
PATCH /core/tokens/{identifier}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
user_obj(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
GET /core/users/{id}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/jsonNew required properties:
uuid
- Added property
uuid(string)
PUT /core/users/{id}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/jsonNew required properties:
uuid
- Added property
uuid(string)
PATCH /core/users/{id}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/jsonNew required properties:
uuid
- Added property
uuid(string)
GET /enterprise/license/{license_uuid}/used_by/
Parameters:
Changed: license_uuid in path
A UUID string identifying this License.
GET /events/rules/{pbm_uuid}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
group_obj(object)Group Serializer
New required properties:
roles_obj
-
Added property
roles(array) -
Added property
roles_obj(array)
-
PUT /events/rules/{pbm_uuid}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
group_obj(object)Group Serializer
New required properties:
roles_obj
-
Added property
roles(array) -
Added property
roles_obj(array)
-
PATCH /events/rules/{pbm_uuid}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
group_obj(object)Group Serializer
New required properties:
roles_obj
-
Added property
roles(array) -
Added property
roles_obj(array)
-
DELETE /outposts/instances/{uuid}/
Parameters:
Changed: uuid in path
A UUID string identifying this Outpost.
GET /outposts/instances/{uuid}/
Parameters:
Changed: uuid in path
A UUID string identifying this Outpost.
PUT /outposts/instances/{uuid}/
Parameters:
Changed: uuid in path
A UUID string identifying this Outpost.
PATCH /outposts/instances/{uuid}/
Parameters:
Changed: uuid in path
A UUID string identifying this Outpost.
GET /outposts/instances/{uuid}/used_by/
Parameters:
Changed: uuid in path
A UUID string identifying this Outpost.
GET /outposts/radius/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > RadiusProvider Serializer
- Added property
mfa_support(boolean)When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
- Added property
-
GET /policies/bindings/{policy_binding_uuid}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Added property
failure_result(boolean)Result if the Policy execution fails.
-
Changed property
timeout(integer)Timeout after which Policy execution is terminated.
-
Changed property
group_obj(object)Group Serializer
New required properties:
roles_obj
-
Added property
roles(array) -
Added property
roles_obj(array)
-
Changed property
user_obj(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
PUT /policies/bindings/{policy_binding_uuid}/
Request:
Changed content type : application/json
-
Added property
failure_result(boolean)Result if the Policy execution fails.
-
Changed property
timeout(integer)Timeout after which Policy execution is terminated.
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Added property
failure_result(boolean)Result if the Policy execution fails.
-
Changed property
timeout(integer)Timeout after which Policy execution is terminated.
-
Changed property
group_obj(object)Group Serializer
New required properties:
roles_obj
-
Added property
roles(array) -
Added property
roles_obj(array)
-
Changed property
user_obj(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
PATCH /policies/bindings/{policy_binding_uuid}/
Request:
Changed content type : application/json
-
Added property
failure_result(boolean)Result if the Policy execution fails.
-
Changed property
timeout(integer)Timeout after which Policy execution is terminated.
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Added property
failure_result(boolean)Result if the Policy execution fails.
-
Changed property
timeout(integer)Timeout after which Policy execution is terminated.
-
Changed property
group_obj(object)Group Serializer
New required properties:
roles_obj
-
Added property
roles(array) -
Added property
roles_obj(array)
-
Changed property
user_obj(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
POST /policies/event_matcher/
Request:
Changed content type : application/json
-
Changed property
app(string)authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticator
-
Changed property
model(string)authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.license
Return Type:
Changed response : 201 Created
-
Changed content type :
application/json-
Changed property
app(string)authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticator
-
Changed property
model(string)authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.license
-
GET /policies/event_matcher/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > Event Matcher Policy Serializer
-
Changed property
app(string)authentik.admin- authentik Adminauthentik.api- authentik APIauthentik.crypto- authentik Cryptoauthentik.events- authentik Eventsauthentik.flows- authentik Flowsauthentik.outposts- authentik Outpostauthentik.policies.dummy- authentik Policies.Dummyauthentik.policies.event_matcher- authentik Policies.Event Matcherauthentik.policies.expiry- authentik Policies.Expiryauthentik.policies.expression- authentik Policies.Expressionauthentik.policies.password- authentik Policies.Passwordauthentik.policies.reputation- authentik Policies.Reputationauthentik.policies- authentik Policiesauthentik.providers.ldap- authentik Providers.LDAPauthentik.providers.oauth2- authentik Providers.OAuth2authentik.providers.proxy- authentik Providers.Proxyauthentik.providers.radius- authentik Providers.Radiusauthentik.providers.saml- authentik Providers.SAMLauthentik.providers.scim- authentik Providers.SCIMauthentik.rbac- authentik RBACauthentik.recovery- authentik Recoveryauthentik.sources.ldap- authentik Sources.LDAPauthentik.sources.oauth- authentik Sources.OAuthauthentik.sources.plex- authentik Sources.Plexauthentik.sources.saml- authentik Sources.SAMLauthentik.stages.authenticator- authentik Stages.Authenticatorauthentik.stages.authenticator_duo- authentik Stages.Authenticator.Duoauthentik.stages.authenticator_sms- authentik Stages.Authenticator.SMSauthentik.stages.authenticator_static- authentik Stages.Authenticator.Staticauthentik.stages.authenticator_totp- authentik Stages.Authenticator.TOTPauthentik.stages.authenticator_validate- authentik Stages.Authenticator.Validateauthentik.stages.authenticator_webauthn- authentik Stages.Authenticator.WebAuthnauthentik.stages.captcha- authentik Stages.Captchaauthentik.stages.consent- authentik Stages.Consentauthentik.stages.deny- authentik Stages.Denyauthentik.stages.dummy- authentik Stages.Dummyauthentik.stages.email- authentik Stages.Emailauthentik.stages.identification- authentik Stages.Identificationauthentik.stages.invitation- authentik Stages.User Invitationauthentik.stages.password- authentik Stages.Passwordauthentik.stages.prompt- authentik Stages.Promptauthentik.stages.user_delete- authentik Stages.User Deleteauthentik.stages.user_login- authentik Stages.User Loginauthentik.stages.user_logout- authentik Stages.User Logoutauthentik.stages.user_write- authentik Stages.User Writeauthentik.tenants- authentik Tenantsauthentik.blueprints- authentik Blueprintsauthentik.core- authentik Coreauthentik.enterprise- authentik Enterprise
Added enum values:
authentik.rbacauthentik.stages.authenticator
-
Changed property
model(string)authentik_crypto.certificatekeypair- Certificate-Key Pairauthentik_events.event- Eventauthentik_events.notificationtransport- Notification Transportauthentik_events.notification- Notificationauthentik_events.notificationrule- Notification Ruleauthentik_events.notificationwebhookmapping- Webhook Mappingauthentik_flows.flow- Flowauthentik_flows.flowstagebinding- Flow Stage Bindingauthentik_outposts.dockerserviceconnection- Docker Service-Connectionauthentik_outposts.kubernetesserviceconnection- Kubernetes Service-Connectionauthentik_outposts.outpost- Outpostauthentik_policies_dummy.dummypolicy- Dummy Policyauthentik_policies_event_matcher.eventmatcherpolicy- Event Matcher Policyauthentik_policies_expiry.passwordexpirypolicy- Password Expiry Policyauthentik_policies_expression.expressionpolicy- Expression Policyauthentik_policies_password.passwordpolicy- Password Policyauthentik_policies_reputation.reputationpolicy- Reputation Policyauthentik_policies_reputation.reputation- Reputation Scoreauthentik_policies.policybinding- Policy Bindingauthentik_providers_ldap.ldapprovider- LDAP Providerauthentik_providers_oauth2.scopemapping- Scope Mappingauthentik_providers_oauth2.oauth2provider- OAuth2/OpenID Providerauthentik_providers_oauth2.authorizationcode- Authorization Codeauthentik_providers_oauth2.accesstoken- OAuth2 Access Tokenauthentik_providers_oauth2.refreshtoken- OAuth2 Refresh Tokenauthentik_providers_proxy.proxyprovider- Proxy Providerauthentik_providers_radius.radiusprovider- Radius Providerauthentik_providers_saml.samlprovider- SAML Providerauthentik_providers_saml.samlpropertymapping- SAML Property Mappingauthentik_providers_scim.scimprovider- SCIM Providerauthentik_providers_scim.scimmapping- SCIM Mappingauthentik_rbac.role- Roleauthentik_sources_ldap.ldapsource- LDAP Sourceauthentik_sources_ldap.ldappropertymapping- LDAP Property Mappingauthentik_sources_oauth.oauthsource- OAuth Sourceauthentik_sources_oauth.useroauthsourceconnection- User OAuth Source Connectionauthentik_sources_plex.plexsource- Plex Sourceauthentik_sources_plex.plexsourceconnection- User Plex Source Connectionauthentik_sources_saml.samlsource- SAML Sourceauthentik_sources_saml.usersamlsourceconnection- User SAML Source Connectionauthentik_stages_authenticator_duo.authenticatorduostage- Duo Authenticator Setup Stageauthentik_stages_authenticator_duo.duodevice- Duo Deviceauthentik_stages_authenticator_sms.authenticatorsmsstage- SMS Authenticator Setup Stageauthentik_stages_authenticator_sms.smsdevice- SMS Deviceauthentik_stages_authenticator_static.authenticatorstaticstage- Static Authenticator Stageauthentik_stages_authenticator_static.staticdevice- Static Deviceauthentik_stages_authenticator_totp.authenticatortotpstage- TOTP Authenticator Setup Stageauthentik_stages_authenticator_totp.totpdevice- TOTP Deviceauthentik_stages_authenticator_validate.authenticatorvalidatestage- Authenticator Validation Stageauthentik_stages_authenticator_webauthn.authenticatewebauthnstage- WebAuthn Authenticator Setup Stageauthentik_stages_authenticator_webauthn.webauthndevice- WebAuthn Deviceauthentik_stages_captcha.captchastage- Captcha Stageauthentik_stages_consent.consentstage- Consent Stageauthentik_stages_consent.userconsent- User Consentauthentik_stages_deny.denystage- Deny Stageauthentik_stages_dummy.dummystage- Dummy Stageauthentik_stages_email.emailstage- Email Stageauthentik_stages_identification.identificationstage- Identification Stageauthentik_stages_invitation.invitationstage- Invitation Stageauthentik_stages_invitation.invitation- Invitationauthentik_stages_password.passwordstage- Password Stageauthentik_stages_prompt.prompt- Promptauthentik_stages_prompt.promptstage- Prompt Stageauthentik_stages_user_delete.userdeletestage- User Delete Stageauthentik_stages_user_login.userloginstage- User Login Stageauthentik_stages_user_logout.userlogoutstage- User Logout Stageauthentik_stages_user_write.userwritestage- User Write Stageauthentik_tenants.tenant- Tenantauthentik_blueprints.blueprintinstance- Blueprint Instanceauthentik_core.group- Groupauthentik_core.user- Userauthentik_core.application- Applicationauthentik_core.token- Tokenauthentik_enterprise.license- License
Added enum values:
authentik_rbac.roleauthentik_stages_authenticator_static.staticdeviceauthentik_stages_authenticator_totp.totpdeviceauthentik_enterprise.license
-
-
POST /providers/radius/
Request:
Changed content type : application/json
- Added property
mfa_support(boolean)When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
Return Type:
Changed response : 201 Created
-
Changed content type :
application/json- Added property
mfa_support(boolean)When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
- Added property
GET /providers/radius/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > RadiusProvider Serializer
- Added property
mfa_support(boolean)When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
- Added property
-
GET /providers/saml/{id}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json- Added property
default_relay_state(string)Default relay_state value for IDP-initiated logins
- Added property
PUT /providers/saml/{id}/
Request:
Changed content type : application/json
- Added property
default_relay_state(string)Default relay_state value for IDP-initiated logins
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json- Added property
default_relay_state(string)Default relay_state value for IDP-initiated logins
- Added property
PATCH /providers/saml/{id}/
Request:
Changed content type : application/json
- Added property
default_relay_state(string)Default relay_state value for IDP-initiated logins
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json- Added property
default_relay_state(string)Default relay_state value for IDP-initiated logins
- Added property
GET /sources/oauth/{slug}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
type(object)Serializer for SourceType
New required properties:
oidc_jwks_urloidc_well_known_url
-
Added property
oidc_well_known_url(string) -
Added property
oidc_jwks_url(string)
-
PUT /sources/oauth/{slug}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
type(object)Serializer for SourceType
New required properties:
oidc_jwks_urloidc_well_known_url
-
Added property
oidc_well_known_url(string) -
Added property
oidc_jwks_url(string)
-
PATCH /sources/oauth/{slug}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
type(object)Serializer for SourceType
New required properties:
oidc_jwks_urloidc_well_known_url
-
Added property
oidc_well_known_url(string) -
Added property
oidc_jwks_url(string)
-
POST /core/groups/
Request:
Changed content type : application/json
- Added property
roles(array)
Return Type:
Changed response : 201 Created
-
Changed content type :
application/jsonNew required properties:
roles_obj
-
Added property
roles(array) -
Added property
roles_obj(array)
GET /core/groups/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > Group Serializer
New required properties:
roles_obj
-
Added property
roles(array) -
Added property
roles_obj(array)
-
POST /core/tokens/
Return Type:
Changed response : 201 Created
-
Changed content type :
application/json-
Changed property
user_obj(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
GET /core/tokens/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > Token Serializer
-
Changed property
user_obj(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
-
GET /core/user_consent/{id}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
user(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
POST /core/users/
Return Type:
Changed response : 201 Created
-
Changed content type :
application/jsonNew required properties:
uuid
- Added property
uuid(string)
GET /core/users/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
GET /core/users/me/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
user(object)User Serializer for information a user can retrieve about themselves
New required properties:
system_permissions
-
Added property
system_permissions(array)Get all system permissions assigned to the user
Items (string):
-
POST /events/rules/
Return Type:
Changed response : 201 Created
-
Changed content type :
application/json-
Changed property
group_obj(object)Group Serializer
New required properties:
roles_obj
-
Added property
roles(array) -
Added property
roles_obj(array)
-
GET /events/rules/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > NotificationRule Serializer
-
Changed property
group_obj(object)Group Serializer
New required properties:
roles_obj
-
Added property
roles(array) -
Added property
roles_obj(array)
-
-
GET /oauth2/access_tokens/{id}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
user(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
GET /oauth2/authorization_codes/{id}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
user(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
GET /oauth2/refresh_tokens/{id}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
user(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
POST /policies/bindings/
Request:
Changed content type : application/json
-
Added property
failure_result(boolean)Result if the Policy execution fails.
-
Changed property
timeout(integer)Timeout after which Policy execution is terminated.
Return Type:
Changed response : 201 Created
-
Changed content type :
application/json-
Added property
failure_result(boolean)Result if the Policy execution fails.
-
Changed property
timeout(integer)Timeout after which Policy execution is terminated.
-
Changed property
group_obj(object)Group Serializer
New required properties:
roles_obj
-
Added property
roles(array) -
Added property
roles_obj(array)
-
Changed property
user_obj(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
GET /policies/bindings/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > PolicyBinding Serializer
-
Added property
failure_result(boolean)Result if the Policy execution fails.
-
Changed property
timeout(integer)Timeout after which Policy execution is terminated.
-
Changed property
group_obj(object)Group Serializer
New required properties:
roles_obj
-
Added property
roles(array) -
Added property
roles_obj(array)
-
Changed property
user_obj(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
-
POST /providers/saml/
Request:
Changed content type : application/json
- Added property
default_relay_state(string)Default relay_state value for IDP-initiated logins
Return Type:
Changed response : 201 Created
-
Changed content type :
application/json- Added property
default_relay_state(string)Default relay_state value for IDP-initiated logins
- Added property
GET /providers/saml/
Parameters:
Added: default_relay_state in query
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > SAMLProvider Serializer
- Added property
default_relay_state(string)Default relay_state value for IDP-initiated logins
- Added property
-
POST /sources/oauth/
Return Type:
Changed response : 201 Created
-
Changed content type :
application/json-
Changed property
type(object)Serializer for SourceType
New required properties:
oidc_jwks_urloidc_well_known_url
-
Added property
oidc_well_known_url(string) -
Added property
oidc_jwks_url(string)
-
GET /sources/oauth/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > OAuth Source Serializer
-
Changed property
type(object)Serializer for SourceType
New required properties:
oidc_jwks_urloidc_well_known_url
-
Added property
oidc_well_known_url(string) -
Added property
oidc_jwks_url(string)
-
-
GET /stages/authenticator/sms/{stage_uuid}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json- Changed property
verify_only(boolean)When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
- Changed property
PUT /stages/authenticator/sms/{stage_uuid}/
Request:
Changed content type : application/json
- Changed property
verify_only(boolean)When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json- Changed property
verify_only(boolean)When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
- Changed property
PATCH /stages/authenticator/sms/{stage_uuid}/
Request:
Changed content type : application/json
- Changed property
verify_only(boolean)When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json- Changed property
verify_only(boolean)When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
- Changed property
GET /stages/deny/{stage_uuid}/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json- Added property
deny_message(string)
- Added property
PUT /stages/deny/{stage_uuid}/
Request:
Changed content type : application/json
- Added property
deny_message(string)
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json- Added property
deny_message(string)
- Added property
PATCH /stages/deny/{stage_uuid}/
Request:
Changed content type : application/json
- Added property
deny_message(string)
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json- Added property
deny_message(string)
- Added property
GET /core/user_consent/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > UserConsent Serializer
-
Changed property
user(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
-
GET /oauth2/access_tokens/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > Serializer for BaseGrantModel and RefreshToken
-
Changed property
user(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
-
GET /oauth2/authorization_codes/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > Serializer for BaseGrantModel and ExpiringBaseGrant
-
Changed property
user(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
-
GET /oauth2/refresh_tokens/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > Serializer for BaseGrantModel and RefreshToken
-
Changed property
user(object)User Serializer
New required properties:
uuid
- Added property
uuid(string)
-
-
POST /stages/authenticator/sms/
Request:
Changed content type : application/json
- Changed property
verify_only(boolean)When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
Return Type:
Changed response : 201 Created
-
Changed content type :
application/json- Changed property
verify_only(boolean)When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
- Changed property
GET /stages/authenticator/sms/
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > AuthenticatorSMSStage Serializer
- Changed property
verify_only(boolean)When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
- Changed property
-
POST /stages/deny/
Request:
Changed content type : application/json
- Added property
deny_message(string)
Return Type:
Changed response : 201 Created
-
Changed content type :
application/json- Added property
deny_message(string)
- Added property
GET /stages/deny/
Parameters:
Added: deny_message in query
Return Type:
Changed response : 200 OK
-
Changed content type :
application/json-
Changed property
results(array)Changed items (object): > DenyStage Serializer
- Added property
deny_message(string)
- Added property
-