providers: fix authorization_flow not required in API (#4932)

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

authentik/providers/ldap/api.py

@@ -26,6 +26,7 @@ class LDAPProviderSerializer(ProviderSerializer):
             "search_mode",
             "bind_mode",
         ]
+        extra_kwargs = ProviderSerializer.Meta.extra_kwargs
 
 
 class LDAPProviderViewSet(UsedByMixin, ModelViewSet):

authentik/providers/oauth2/api/providers.py

@@ -39,6 +39,7 @@ class OAuth2ProviderSerializer(ProviderSerializer):
             "issuer_mode",
             "jwks_sources",
         ]
+        extra_kwargs = ProviderSerializer.Meta.extra_kwargs
 
 
 class OAuth2ProviderSetupURLs(PassiveSerializer):

authentik/providers/proxy/api.py

@@ -95,6 +95,7 @@ class ProxyProviderSerializer(ProviderSerializer):
             "refresh_token_validity",
             "outpost_set",
         ]
+        extra_kwargs = ProviderSerializer.Meta.extra_kwargs
 
 
 class ProxyProviderViewSet(UsedByMixin, ModelViewSet):

authentik/providers/saml/api/providers.py

@@ -154,6 +154,7 @@ class SAMLProviderSerializer(ProviderSerializer):
             "url_slo_post",
             "url_slo_redirect",
         ]
+        extra_kwargs = ProviderSerializer.Meta.extra_kwargs
 
 
 class SAMLMetadataSerializer(PassiveSerializer):

schema.yml

@@ -30195,7 +30195,6 @@ components:
         authorization_flow:
           type: string
           format: uuid
-          nullable: true
           description: Flow used when authorizing this provider.
         property_mappings:
           type: array
@@ -30268,6 +30267,7 @@ components:
       required:
       - assigned_application_name
       - assigned_application_slug
+      - authorization_flow
       - component
       - meta_model_name
       - name
@@ -30285,7 +30285,6 @@ components:
         authorization_flow:
           type: string
           format: uuid
-          nullable: true
           description: Flow used when authorizing this provider.
         property_mappings:
           type: array
@@ -30328,6 +30327,7 @@ components:
         bind_mode:
           $ref: '#/components/schemas/LDAPAPIAccessMode'
       required:
+      - authorization_flow
       - name
     LDAPSource:
       type: object
@@ -30927,7 +30927,6 @@ components:
         authorization_flow:
           type: string
           format: uuid
-          nullable: true
           description: Flow used when authorizing this provider.
         property_mappings:
           type: array
@@ -31027,6 +31026,7 @@ components:
       required:
       - assigned_application_name
       - assigned_application_slug
+      - authorization_flow
       - component
       - meta_model_name
       - name
@@ -31043,7 +31043,6 @@ components:
         authorization_flow:
           type: string
           format: uuid
-          nullable: true
           description: Flow used when authorizing this provider.
         property_mappings:
           type: array
@@ -31121,6 +31120,7 @@ components:
               authenticate.
           title: Any JWT signed by the JWK of the selected source can be used to authenticate.
       required:
+      - authorization_flow
       - name
     OAuth2ProviderSetupURLs:
       type: object
@@ -35608,7 +35608,6 @@ components:
         authorization_flow:
           type: string
           format: uuid
-          nullable: true
           description: Flow used when authorizing this provider.
         property_mappings:
           type: array
@@ -35838,7 +35837,6 @@ components:
         authorization_flow:
           type: string
           format: uuid
-          nullable: true
           description: Flow used when authorizing this provider.
         property_mappings:
           type: array
@@ -36299,7 +36297,6 @@ components:
         authorization_flow:
           type: string
           format: uuid
-          nullable: true
           description: Flow used when authorizing this provider.
         property_mappings:
           type: array
@@ -36426,7 +36423,6 @@ components:
         authorization_flow:
           type: string
           format: uuid
-          nullable: true
           description: Flow used when authorizing this provider.
         property_mappings:
           type: array
@@ -37873,7 +37869,6 @@ components:
         authorization_flow:
           type: string
           format: uuid
-          nullable: true
           description: Flow used when authorizing this provider.
         property_mappings:
           type: array
@@ -37981,6 +37976,7 @@ components:
       required:
       - assigned_application_name
       - assigned_application_slug
+      - authorization_flow
       - client_id
       - component
       - external_host
@@ -38001,7 +37997,6 @@ components:
         authorization_flow:
           type: string
           format: uuid
-          nullable: true
           description: Flow used when authorizing this provider.
         property_mappings:
           type: array
@@ -38075,6 +38070,7 @@ components:
           description: 'Tokens not valid on or after current time + this value (Format:
             hours=1;minutes=2;seconds=3).'
       required:
+      - authorization_flow
       - external_host
       - name
     RedirectChallenge:
@@ -38315,7 +38311,6 @@ components:
         authorization_flow:
           type: string
           format: uuid
-          nullable: true
           description: Flow used when authorizing this provider.
         property_mappings:
           type: array
@@ -38431,6 +38426,7 @@ components:
       - acs_url
       - assigned_application_name
       - assigned_application_slug
+      - authorization_flow
       - component
       - meta_model_name
       - name
@@ -38471,7 +38467,6 @@ components:
         authorization_flow:
           type: string
           format: uuid
-          nullable: true
           description: Flow used when authorizing this provider.
         property_mappings:
           type: array
@@ -38542,6 +38537,7 @@ components:
             * `post` - Post
       required:
       - acs_url
+      - authorization_flow
       - name
     SAMLSource:
       type: object