diff --git a/.bumpversion.cfg b/.bumpversion.cfg index bb2356e3b..582895915 100644 --- a/.bumpversion.cfg +++ b/.bumpversion.cfg @@ -1,5 +1,5 @@ [bumpversion] -current_version = 2023.8.3 +current_version = 2023.10.1 tag = True commit = True parse = (?P\d+)\.(?P\d+)\.(?P\d+) diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml index 297d266d5..e1a024786 100644 --- a/.github/workflows/release-publish.yml +++ b/.github/workflows/release-publish.yml @@ -27,8 +27,10 @@ jobs: registry: ghcr.io username: ${{ github.repository_owner }} password: ${{ secrets.GITHUB_TOKEN }} - - name: make empty ts client - run: mkdir -p ./gen-ts-client + - name: make empty clients + run: | + mkdir -p ./gen-ts-api + mkdir -p ./gen-go-api - name: Build Docker Image uses: docker/build-push-action@v5 with: @@ -69,6 +71,10 @@ jobs: - name: prepare variables uses: ./.github/actions/docker-push-variables id: ev + - name: make empty clients + run: | + mkdir -p ./gen-ts-api + mkdir -p ./gen-go-api - name: Docker Login Registry uses: docker/login-action@v3 with: @@ -93,6 +99,7 @@ jobs: ghcr.io/goauthentik/${{ matrix.type }}:latest file: ${{ matrix.type }}.Dockerfile platforms: linux/amd64,linux/arm64 + context: . build-args: | VERSION=${{ steps.ev.outputs.version }} VERSION_FAMILY=${{ steps.ev.outputs.versionFamily }} diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml index 21e5a0c44..2365145b4 100644 --- a/.github/workflows/release-tag.yml +++ b/.github/workflows/release-tag.yml @@ -16,6 +16,7 @@ jobs: echo "PG_PASS=$(openssl rand -base64 32)" >> .env echo "AUTHENTIK_SECRET_KEY=$(openssl rand -base64 32)" >> .env docker buildx install + mkdir -p ./gen-ts-api docker build -t testing:latest . echo "AUTHENTIK_IMAGE=testing" >> .env echo "AUTHENTIK_TAG=latest" >> .env diff --git a/authentik/__init__.py b/authentik/__init__.py index a08d2bfe9..2a9fc00e3 100644 --- a/authentik/__init__.py +++ b/authentik/__init__.py @@ -2,7 +2,7 @@ from os import environ from typing import Optional -__version__ = "2023.8.3" +__version__ = "2023.10.1" ENV_GIT_HASH_KEY = "GIT_BUILD_HASH" diff --git a/authentik/blueprints/v1/common.py b/authentik/blueprints/v1/common.py index 6d41ac988..997fecc6f 100644 --- a/authentik/blueprints/v1/common.py +++ b/authentik/blueprints/v1/common.py @@ -584,12 +584,17 @@ class EntryInvalidError(SentryIgnoredException): entry_model: Optional[str] entry_id: Optional[str] validation_error: Optional[ValidationError] + serializer: Optional[Serializer] = None - def __init__(self, *args: object, validation_error: Optional[ValidationError] = None) -> None: + def __init__( + self, *args: object, validation_error: Optional[ValidationError] = None, **kwargs + ) -> None: super().__init__(*args) self.entry_model = None self.entry_id = None self.validation_error = validation_error + for key, value in kwargs.items(): + setattr(self, key, value) @staticmethod def from_entry( diff --git a/authentik/blueprints/v1/importer.py b/authentik/blueprints/v1/importer.py index f2191548e..eb4942958 100644 --- a/authentik/blueprints/v1/importer.py +++ b/authentik/blueprints/v1/importer.py @@ -255,7 +255,10 @@ class Importer: try: full_data = self.__update_pks_for_attrs(entry.get_attrs(self._import)) except ValueError as exc: - raise EntryInvalidError.from_entry(exc, entry) from exc + raise EntryInvalidError.from_entry( + exc, + entry, + ) from exc always_merger.merge(full_data, updated_identifiers) serializer_kwargs["data"] = full_data @@ -272,6 +275,7 @@ class Importer: f"Serializer errors {serializer.errors}", validation_error=exc, entry=entry, + serializer=serializer, ) from exc return serializer @@ -300,16 +304,18 @@ class Importer: ) return False # Validate each single entry + serializer = None try: serializer = self._validate_single(entry) except EntryInvalidError as exc: # For deleting objects we don't need the serializer to be valid if entry.get_state(self._import) == BlueprintEntryDesiredState.ABSENT: - continue - self.logger.warning(f"entry invalid: {exc}", entry=entry, error=exc) - if raise_errors: - raise exc - return False + serializer = exc.serializer + else: + self.logger.warning(f"entry invalid: {exc}", entry=entry, error=exc) + if raise_errors: + raise exc + return False if not serializer: continue diff --git a/authentik/blueprints/v1/tasks.py b/authentik/blueprints/v1/tasks.py index 194a01748..8ff86c996 100644 --- a/authentik/blueprints/v1/tasks.py +++ b/authentik/blueprints/v1/tasks.py @@ -82,7 +82,7 @@ class BlueprintEventHandler(FileSystemEventHandler): path = Path(event.src_path) root = Path(CONFIG.get("blueprints_dir")).absolute() rel_path = str(path.relative_to(root)) - for instance in BlueprintInstance.objects.filter(path=rel_path): + for instance in BlueprintInstance.objects.filter(path=rel_path, enabled=True): LOGGER.debug("modified blueprint file, starting apply", instance=instance) apply_blueprint.delay(instance.pk.hex) diff --git a/authentik/core/api/applications.py b/authentik/core/api/applications.py index 478181c28..cb4c01e76 100644 --- a/authentik/core/api/applications.py +++ b/authentik/core/api/applications.py @@ -98,6 +98,7 @@ class ApplicationSerializer(ModelSerializer): class ApplicationViewSet(UsedByMixin, ModelViewSet): """Application Viewset""" + # pylint: disable=no-member queryset = Application.objects.all().prefetch_related("provider") serializer_class = ApplicationSerializer search_fields = [ diff --git a/authentik/core/api/groups.py b/authentik/core/api/groups.py index 4c6a8b509..21ba19974 100644 --- a/authentik/core/api/groups.py +++ b/authentik/core/api/groups.py @@ -139,6 +139,7 @@ class UserAccountSerializer(PassiveSerializer): class GroupViewSet(UsedByMixin, ModelViewSet): """Group Viewset""" + # pylint: disable=no-member queryset = Group.objects.all().select_related("parent").prefetch_related("users") serializer_class = GroupSerializer search_fields = ["name", "is_superuser"] diff --git a/authentik/core/sources/flow_manager.py b/authentik/core/sources/flow_manager.py index a452f04d9..0fb038d90 100644 --- a/authentik/core/sources/flow_manager.py +++ b/authentik/core/sources/flow_manager.py @@ -97,6 +97,7 @@ class SourceFlowManager: if self.request.user.is_authenticated: new_connection.user = self.request.user new_connection = self.update_connection(new_connection, **kwargs) + # pylint: disable=no-member new_connection.save() return Action.LINK, new_connection diff --git a/authentik/crypto/apps.py b/authentik/crypto/apps.py index 559ca3db5..bed1ab811 100644 --- a/authentik/crypto/apps.py +++ b/authentik/crypto/apps.py @@ -1,13 +1,10 @@ """authentik crypto app config""" from datetime import datetime -from typing import TYPE_CHECKING, Optional +from typing import Optional from authentik.blueprints.apps import ManagedAppConfig from authentik.lib.generators import generate_id -if TYPE_CHECKING: - from authentik.crypto.models import CertificateKeyPair - MANAGED_KEY = "goauthentik.io/crypto/jwt-managed" @@ -23,33 +20,37 @@ class AuthentikCryptoConfig(ManagedAppConfig): """Load crypto tasks""" self.import_module("authentik.crypto.tasks") - def _create_update_cert(self, cert: Optional["CertificateKeyPair"] = None): + def _create_update_cert(self): from authentik.crypto.builder import CertificateBuilder from authentik.crypto.models import CertificateKeyPair - builder = CertificateBuilder("authentik Internal JWT Certificate") + common_name = "authentik Internal JWT Certificate" + builder = CertificateBuilder(common_name) builder.build( subject_alt_names=["goauthentik.io"], validity_days=360, ) - if not cert: - cert = CertificateKeyPair() - builder.cert = cert - builder.cert.managed = MANAGED_KEY - builder.save() + CertificateKeyPair.objects.update_or_create( + managed=MANAGED_KEY, + defaults={ + "name": common_name, + "certificate_data": builder.certificate, + "key_data": builder.private_key, + }, + ) def reconcile_managed_jwt_cert(self): """Ensure managed JWT certificate""" from authentik.crypto.models import CertificateKeyPair - certs = CertificateKeyPair.objects.filter(managed=MANAGED_KEY) - if not certs.exists(): - self._create_update_cert() - return - cert: CertificateKeyPair = certs.first() + cert: Optional[CertificateKeyPair] = CertificateKeyPair.objects.filter( + managed=MANAGED_KEY + ).first() now = datetime.now() - if now < cert.certificate.not_valid_before or now > cert.certificate.not_valid_after: - self._create_update_cert(cert) + if not cert or ( + now < cert.certificate.not_valid_before or now > cert.certificate.not_valid_after + ): + self._create_update_cert() def reconcile_self_signed(self): """Create self-signed keypair""" @@ -61,4 +62,10 @@ class AuthentikCryptoConfig(ManagedAppConfig): return builder = CertificateBuilder(name) builder.build(subject_alt_names=[f"{generate_id()}.self-signed.goauthentik.io"]) - builder.save() + CertificateKeyPair.objects.get_or_create( + name=name, + defaults={ + "certificate_data": builder.certificate, + "key_data": builder.private_key, + }, + ) diff --git a/authentik/rbac/api/rbac.py b/authentik/rbac/api/rbac.py index 3f468f483..2ce5b8d33 100644 --- a/authentik/rbac/api/rbac.py +++ b/authentik/rbac/api/rbac.py @@ -32,13 +32,19 @@ class PermissionSerializer(ModelSerializer): def get_app_label_verbose(self, instance: Permission) -> str: """Human-readable app label""" - return apps.get_app_config(instance.content_type.app_label).verbose_name + try: + return apps.get_app_config(instance.content_type.app_label).verbose_name + except LookupError: + return f"{instance.content_type.app_label}.{instance.content_type.model}" def get_model_verbose(self, instance: Permission) -> str: """Human-readable model name""" - return apps.get_model( - instance.content_type.app_label, instance.content_type.model - )._meta.verbose_name + try: + return apps.get_model( + instance.content_type.app_label, instance.content_type.model + )._meta.verbose_name + except LookupError: + return f"{instance.content_type.app_label}.{instance.content_type.model}" class Meta: model = Permission diff --git a/authentik/rbac/api/rbac_roles.py b/authentik/rbac/api/rbac_roles.py index 162a3225b..1c48169a2 100644 --- a/authentik/rbac/api/rbac_roles.py +++ b/authentik/rbac/api/rbac_roles.py @@ -28,9 +28,12 @@ class ExtraRoleObjectPermissionSerializer(RoleObjectPermissionSerializer): def get_model_verbose(self, instance: GroupObjectPermission) -> str: """Get model label from permission's model""" - return apps.get_model( - instance.content_type.app_label, instance.content_type.model - )._meta.verbose_name + try: + return apps.get_model( + instance.content_type.app_label, instance.content_type.model + )._meta.verbose_name + except LookupError: + return f"{instance.content_type.app_label}.{instance.content_type.model}" def get_object_description(self, instance: GroupObjectPermission) -> Optional[str]: """Get model description from attached model. This operation takes at least @@ -38,7 +41,10 @@ class ExtraRoleObjectPermissionSerializer(RoleObjectPermissionSerializer): view_ permission on the object""" app_label = instance.content_type.app_label model = instance.content_type.model - model_class = apps.get_model(app_label, model) + try: + model_class = apps.get_model(app_label, model) + except LookupError: + return None objects = get_objects_for_group(instance.group, f"{app_label}.view_{model}", model_class) obj = objects.first() if not obj: diff --git a/authentik/rbac/api/rbac_users.py b/authentik/rbac/api/rbac_users.py index 04f3fcabd..636b327f3 100644 --- a/authentik/rbac/api/rbac_users.py +++ b/authentik/rbac/api/rbac_users.py @@ -28,9 +28,12 @@ class ExtraUserObjectPermissionSerializer(UserObjectPermissionSerializer): def get_model_verbose(self, instance: UserObjectPermission) -> str: """Get model label from permission's model""" - return apps.get_model( - instance.content_type.app_label, instance.content_type.model - )._meta.verbose_name + try: + return apps.get_model( + instance.content_type.app_label, instance.content_type.model + )._meta.verbose_name + except LookupError: + return f"{instance.content_type.app_label}.{instance.content_type.model}" def get_object_description(self, instance: UserObjectPermission) -> Optional[str]: """Get model description from attached model. This operation takes at least @@ -38,7 +41,10 @@ class ExtraUserObjectPermissionSerializer(UserObjectPermissionSerializer): view_ permission on the object""" app_label = instance.content_type.app_label model = instance.content_type.model - model_class = apps.get_model(app_label, model) + try: + model_class = apps.get_model(app_label, model) + except LookupError: + return None objects = get_objects_for_user(instance.user, f"{app_label}.view_{model}", model_class) obj = objects.first() if not obj: diff --git a/authentik/stages/email/tasks.py b/authentik/stages/email/tasks.py index 02011d7f7..6f0b6e104 100644 --- a/authentik/stages/email/tasks.py +++ b/authentik/stages/email/tasks.py @@ -13,6 +13,7 @@ from authentik.events.models import Event, EventAction from authentik.events.monitored_tasks import MonitoredTask, TaskResult, TaskResultStatus from authentik.root.celery import CELERY_APP from authentik.stages.email.models import EmailStage +from authentik.stages.email.utils import logo_data LOGGER = get_logger() @@ -81,6 +82,10 @@ def send_mail(self: MonitoredTask, message: dict[Any, Any], email_stage_pk: Opti # Because we use the Message-ID as UID for the task, manually assign it message_object.extra_headers["Message-ID"] = message_id + # Add the logo (we can't add it in the previous message since MIMEImage + # can't be converted to json) + message_object.attach(logo_data()) + LOGGER.debug("Sending mail", to=message_object.to) backend.send_messages([message_object]) Event.new( diff --git a/authentik/stages/email/utils.py b/authentik/stages/email/utils.py index 5422ec43a..a6edd4609 100644 --- a/authentik/stages/email/utils.py +++ b/authentik/stages/email/utils.py @@ -1,6 +1,7 @@ """email utils""" from email.mime.image import MIMEImage from functools import lru_cache +from pathlib import Path from django.core.mail import EmailMultiAlternatives from django.template.loader import render_to_string @@ -8,9 +9,12 @@ from django.utils import translation @lru_cache() -def logo_data(): +def logo_data() -> MIMEImage: """Get logo as MIME Image for emails""" - with open("web/icons/icon_left_brand.png", "rb") as _logo_file: + path = Path("web/icons/icon_left_brand.png") + if not path.exists(): + path = Path("web/dist/assets/icons/icon_left_brand.png") + with open(path, "rb") as _logo_file: logo = MIMEImage(_logo_file.read()) logo.add_header("Content-ID", "logo.png") return logo @@ -25,5 +29,4 @@ class TemplateEmailMessage(EmailMultiAlternatives): super().__init__(**kwargs) self.content_subtype = "html" self.mixed_subtype = "related" - self.attach(logo_data()) self.attach_alternative(html_content, "text/html") diff --git a/authentik/stages/user_write/api.py b/authentik/stages/user_write/api.py index 4cf0f17d2..1abca9e9f 100644 --- a/authentik/stages/user_write/api.py +++ b/authentik/stages/user_write/api.py @@ -15,6 +15,7 @@ class UserWriteStageSerializer(StageSerializer): "user_creation_mode", "create_users_as_inactive", "create_users_group", + "user_type", "user_path_template", ] diff --git a/authentik/stages/user_write/migrations/0008_userwritestage_user_type.py b/authentik/stages/user_write/migrations/0008_userwritestage_user_type.py new file mode 100644 index 000000000..e0761b551 --- /dev/null +++ b/authentik/stages/user_write/migrations/0008_userwritestage_user_type.py @@ -0,0 +1,25 @@ +# Generated by Django 4.2.6 on 2023-10-25 15:19 + +from django.db import migrations, models + + +class Migration(migrations.Migration): + dependencies = [ + ("authentik_stages_user_write", "0007_remove_userwritestage_can_create_users_and_more"), + ] + + operations = [ + migrations.AddField( + model_name="userwritestage", + name="user_type", + field=models.TextField( + choices=[ + ("internal", "Internal"), + ("external", "External"), + ("service_account", "Service Account"), + ("internal_service_account", "Internal Service Account"), + ], + default="external", + ), + ), + ] diff --git a/authentik/stages/user_write/models.py b/authentik/stages/user_write/models.py index ca50951a3..eb1dfd2c7 100644 --- a/authentik/stages/user_write/models.py +++ b/authentik/stages/user_write/models.py @@ -5,7 +5,7 @@ from django.utils.translation import gettext_lazy as _ from django.views import View from rest_framework.serializers import BaseSerializer -from authentik.core.models import Group +from authentik.core.models import Group, UserTypes from authentik.flows.models import Stage @@ -39,6 +39,10 @@ class UserWriteStage(Stage): help_text=_("Optionally add newly created users to this group."), ) + user_type = models.TextField( + choices=UserTypes.choices, + default=UserTypes.EXTERNAL, + ) user_path_template = models.TextField( default="", blank=True, diff --git a/authentik/stages/user_write/stage.py b/authentik/stages/user_write/stage.py index 5a4c80974..5117f0358 100644 --- a/authentik/stages/user_write/stage.py +++ b/authentik/stages/user_write/stage.py @@ -9,7 +9,7 @@ from django.utils.translation import gettext as _ from rest_framework.exceptions import ValidationError from authentik.core.middleware import SESSION_KEY_IMPERSONATE_USER -from authentik.core.models import USER_ATTRIBUTE_SOURCES, User, UserSourceConnection +from authentik.core.models import USER_ATTRIBUTE_SOURCES, User, UserSourceConnection, UserTypes from authentik.core.sources.stage import PLAN_CONTEXT_SOURCES_CONNECTION from authentik.flows.planner import PLAN_CONTEXT_PENDING_USER from authentik.flows.stage import StageView @@ -22,6 +22,7 @@ from authentik.stages.user_write.models import UserCreationMode from authentik.stages.user_write.signals import user_write PLAN_CONTEXT_GROUPS = "groups" +PLAN_CONTEXT_USER_TYPE = "user_type" PLAN_CONTEXT_USER_PATH = "user_path" @@ -55,6 +56,19 @@ class UserWriteStageView(StageView): ) if path == "": path = User.default_path() + + try: + user_type = UserTypes( + self.executor.plan.context.get( + PLAN_CONTEXT_USER_TYPE, + self.executor.current_stage.user_type, + ) + ) + except ValueError: + user_type = self.executor.current_stage.user_type + if user_type == UserTypes.INTERNAL_SERVICE_ACCOUNT: + user_type = UserTypes.SERVICE_ACCOUNT + if not self.request.user.is_anonymous: self.executor.plan.context.setdefault(PLAN_CONTEXT_PENDING_USER, self.request.user) if ( @@ -66,6 +80,7 @@ class UserWriteStageView(StageView): self.executor.plan.context[PLAN_CONTEXT_PENDING_USER] = User( is_active=not self.executor.current_stage.create_users_as_inactive, path=path, + type=user_type, ) self.executor.plan.context[PLAN_CONTEXT_AUTHENTICATION_BACKEND] = BACKEND_INBUILT self.logger.debug( diff --git a/blueprints/schema.json b/blueprints/schema.json index deb177e4d..6fe11e20a 100644 --- a/blueprints/schema.json +++ b/blueprints/schema.json @@ -8368,6 +8368,16 @@ "title": "Create users group", "description": "Optionally add newly created users to this group." }, + "user_type": { + "type": "string", + "enum": [ + "internal", + "external", + "service_account", + "internal_service_account" + ], + "title": "User type" + }, "user_path_template": { "type": "string", "title": "User path template" diff --git a/docker-compose.yml b/docker-compose.yml index 8cbf644d5..a262103c9 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -32,7 +32,7 @@ services: volumes: - redis:/data server: - image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.8.3} + image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.10.1} restart: unless-stopped command: server environment: @@ -53,7 +53,7 @@ services: - postgresql - redis worker: - image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.8.3} + image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.10.1} restart: unless-stopped command: worker environment: diff --git a/go.mod b/go.mod index 11bcc47d9..f472bf97a 100644 --- a/go.mod +++ b/go.mod @@ -12,7 +12,7 @@ require ( github.com/go-openapi/runtime v0.26.0 github.com/go-openapi/strfmt v0.21.7 github.com/golang-jwt/jwt v3.2.2+incompatible - github.com/google/uuid v1.3.1 + github.com/google/uuid v1.4.0 github.com/gorilla/handlers v1.5.1 github.com/gorilla/mux v1.8.0 github.com/gorilla/securecookie v1.1.1 @@ -27,7 +27,7 @@ require ( github.com/sirupsen/logrus v1.9.3 github.com/spf13/cobra v1.7.0 github.com/stretchr/testify v1.8.4 - goauthentik.io/api/v3 v3.2023083.10 + goauthentik.io/api/v3 v3.2023101.1 golang.org/x/exp v0.0.0-20230210204819-062eb4c674ab golang.org/x/oauth2 v0.13.0 golang.org/x/sync v0.4.0 diff --git a/go.sum b/go.sum index 3b404b83a..78e06b582 100644 --- a/go.sum +++ b/go.sum @@ -211,8 +211,9 @@ github.com/google/pprof v0.0.0-20200430221834-fc25d7d30c6d/go.mod h1:ZgVRPoUq/hf github.com/google/pprof v0.0.0-20200708004538-1a94d8640e99/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM= github.com/google/renameio v0.1.0/go.mod h1:KWCgfxg9yswjAJkECMjeO8J8rahYeXnNhOm40UhjYkI= github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= -github.com/google/uuid v1.3.1 h1:KjJaJ9iWZ3jOFZIf1Lqf4laDRCasjl0BCmnEGxkdLb4= github.com/google/uuid v1.3.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= +github.com/google/uuid v1.4.0 h1:MtMxsa51/r9yyhkyLsVeVt0B+BGQZzpQiTQ4eHZ8bc4= +github.com/google/uuid v1.4.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/googleapis/gax-go/v2 v2.0.4/go.mod h1:0Wqv26UfaUD9n4G6kQubkQ+KchISgw+vpHVxEJEs9eg= github.com/googleapis/gax-go/v2 v2.0.5/go.mod h1:DWXyrwAJ9X0FpwwEdw+IPEYBICEFu5mhpdKc/us6bOk= github.com/gorilla/handlers v1.5.1 h1:9lRY6j8DEeeBT10CvO9hGW0gmky0BprnvDI5vfhUHH4= @@ -355,8 +356,8 @@ go.opentelemetry.io/otel/trace v1.14.0 h1:wp2Mmvj41tDsyAJXiWDWpfNsOiIyd38fy85pyK go.opentelemetry.io/otel/trace v1.14.0/go.mod h1:8avnQLK+CG77yNLUae4ea2JDQ6iT+gozhnZjy/rw9G8= go.uber.org/goleak v1.2.1 h1:NBol2c7O1ZokfZ0LEU9K6Whx/KnwvepVetCUhtKja4A= go.uber.org/goleak v1.2.1/go.mod h1:qlT2yGI9QafXHhZZLxlSuNsMw3FFLxBr+tBRlmO1xH4= -goauthentik.io/api/v3 v3.2023083.10 h1:mMCOfsqjouSSxedSkCK4k0Cwtt68CWzQgR7Um6ooOQs= -goauthentik.io/api/v3 v3.2023083.10/go.mod h1:zz+mEZg8rY/7eEjkMGWJ2DnGqk+zqxuybGCGrR2O4Kw= +goauthentik.io/api/v3 v3.2023101.1 h1:KIQ4wmxjE+geAVB0wBfmxW9Uzo/tA0dbd2hSUJ7YJ3M= +goauthentik.io/api/v3 v3.2023101.1/go.mod h1:zz+mEZg8rY/7eEjkMGWJ2DnGqk+zqxuybGCGrR2O4Kw= golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= golang.org/x/crypto v0.0.0-20190422162423-af44ce270edf/go.mod h1:WFFai1msRO1wXaEeE5yQxYXgSfI8pQAWXbQop6sCtWE= diff --git a/internal/constants/constants.go b/internal/constants/constants.go index a32e8622f..d49e2fc33 100644 --- a/internal/constants/constants.go +++ b/internal/constants/constants.go @@ -29,4 +29,4 @@ func UserAgent() string { return fmt.Sprintf("authentik@%s", FullVersion()) } -const VERSION = "2023.8.3" +const VERSION = "2023.10.1" diff --git a/internal/outpost/proxyv2/application/session.go b/internal/outpost/proxyv2/application/session.go index f89f0315a..ec46d02ff 100644 --- a/internal/outpost/proxyv2/application/session.go +++ b/internal/outpost/proxyv2/application/session.go @@ -50,7 +50,7 @@ func (a *Application) getStore(p api.ProxyOutpostConfig, externalHost *url.URL) Domain: *p.CookieDomain, SameSite: http.SameSiteLaxMode, MaxAge: maxAge, - Path: externalHost.Path, + Path: "/", }) a.log.Trace("using redis session backend") diff --git a/lifecycle/system_migrations/otp_merge.py b/lifecycle/system_migrations/otp_merge.py index 013818606..6e6a1970c 100644 --- a/lifecycle/system_migrations/otp_merge.py +++ b/lifecycle/system_migrations/otp_merge.py @@ -2,6 +2,7 @@ from lifecycle.migrate import BaseMigration SQL_STATEMENT = """ +BEGIN TRANSACTION; DELETE FROM django_migrations WHERE app = 'otp_static'; DELETE FROM django_migrations WHERE app = 'otp_totp'; -- Rename tables (static) @@ -12,6 +13,7 @@ ALTER SEQUENCE otp_static_staticdevice_id_seq RENAME TO authentik_stages_authent -- Rename tables (totp) ALTER TABLE otp_totp_totpdevice RENAME TO authentik_stages_authenticator_totp_totpdevice; ALTER SEQUENCE otp_totp_totpdevice_id_seq RENAME TO authentik_stages_authenticator_totp_totpdevice_id_seq; +COMMIT; """ diff --git a/poetry.lock b/poetry.lock index 201b243ae..473a95429 100644 --- a/poetry.lock +++ b/poetry.lock @@ -1359,13 +1359,13 @@ files = [ [[package]] name = "duo-client" -version = "5.1.0" +version = "5.2.0" description = "Reference client for Duo Security APIs" optional = false python-versions = "*" files = [ - {file = "duo_client-5.1.0-py2.py3-none-any.whl", hash = "sha256:5dd6e7a526ea79952c078e5a5be93a1d70d36e685fad9478188156587e85b571"}, - {file = "duo_client-5.1.0.tar.gz", hash = "sha256:0dd8b7223a105beca4fdbfa71d400e813d9f33250c3da5fd63e437fb571b55f2"}, + {file = "duo_client-5.2.0-py3-none-any.whl", hash = "sha256:da3237e34300665c40ba5215f1e6656fec1a0136295917541aa973e7fcbf027e"}, + {file = "duo_client-5.2.0.tar.gz", hash = "sha256:f82361740792b06303f9721e7ba593916080461769396b4f73c0502c0bfcee44"}, ] [package.dependencies] @@ -2780,13 +2780,13 @@ typing-extensions = ">=4.6.0,<4.7.0 || >4.7.0" [[package]] name = "pydantic-scim" -version = "0.0.7" +version = "0.0.8" description = "Pydantic types for SCIM" optional = false python-versions = ">=3.8.0" files = [ - {file = "pydantic-scim-0.0.7.tar.gz", hash = "sha256:bc043da51c346051dfd372f12d1837c0846b815236340156d663a8514cba5761"}, - {file = "pydantic_scim-0.0.7-py3-none-any.whl", hash = "sha256:058eb195f75ef32d04eaf6369c125d5fb7052891694686f8e55e04d184ab1360"}, + {file = "pydantic-scim-0.0.8.tar.gz", hash = "sha256:b6c62031126e8c54f0fc7df837678e63934a5b068533fc52e5dfb6cfc24d59e9"}, + {file = "pydantic_scim-0.0.8-py3-none-any.whl", hash = "sha256:407b3bf55240947155c77a6dd839881d63368c61d64076d6b167ef124ceac79a"}, ] [package.dependencies] @@ -3374,28 +3374,28 @@ pyasn1 = ">=0.1.3" [[package]] name = "ruff" -version = "0.1.2" +version = "0.1.3" description = "An extremely fast Python linter, written in Rust." optional = false python-versions = ">=3.7" files = [ - {file = "ruff-0.1.2-py3-none-macosx_10_7_x86_64.whl", hash = "sha256:0d3ee66b825b713611f89aa35d16de984f76f26c50982a25d52cd0910dff3923"}, - {file = "ruff-0.1.2-py3-none-macosx_10_9_x86_64.macosx_11_0_arm64.macosx_10_9_universal2.whl", hash = "sha256:f85f850a320ff532b8f93e8d1da6a36ef03698c446357c8c43b46ef90bb321eb"}, - {file = "ruff-0.1.2-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:809c6d4e45683696d19ca79e4c6bd3b2e9204fe9546923f2eb3b126ec314b0dc"}, - {file = "ruff-0.1.2-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:46005e4abb268e93cad065244e17e2ea16b6fcb55a5c473f34fbc1fd01ae34cb"}, - {file = "ruff-0.1.2-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:10cdb302f519664d5e2cf954562ac86c9d20ca05855e5b5c2f9d542228f45da4"}, - {file = "ruff-0.1.2-py3-none-manylinux_2_17_ppc64.manylinux2014_ppc64.whl", hash = "sha256:f89ebcbe57a1eab7d7b4ceb57ddf0af9ed13eae24e443a7c1dc078000bd8cc6b"}, - {file = "ruff-0.1.2-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:7344eaca057d4c32373c9c3a7afb7274f56040c225b6193dd495fcf69453b436"}, - {file = "ruff-0.1.2-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:dffa25f6e03c4950b6ac6f216bc0f98a4be9719cb0c5260c8e88d1bac36f1683"}, - {file = "ruff-0.1.2-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:42ddaea52cb7ba7c785e8593a7532866c193bc774fe570f0e4b1ccedd95b83c5"}, - {file = "ruff-0.1.2-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:a8533efda625bbec0bf27da2886bd641dae0c209104f6c39abc4be5b7b22de2a"}, - {file = "ruff-0.1.2-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:b0b1b82221ba7c50e03b7a86b983157b5d3f4d8d4f16728132bdf02c6d651f77"}, - {file = "ruff-0.1.2-py3-none-musllinux_1_2_i686.whl", hash = "sha256:6c1362eb9288f8cc95535294cb03bd4665c8cef86ec32745476a4e5c6817034c"}, - {file = "ruff-0.1.2-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:ffa7ef5ded0563329a35bd5a1cfdae40f05a75c0cc2dd30f00b1320b1fb461fc"}, - {file = "ruff-0.1.2-py3-none-win32.whl", hash = "sha256:6e8073f85e47072256e2e1909f1ae515cf61ff5a4d24730a63b8b4ac24b6704a"}, - {file = "ruff-0.1.2-py3-none-win_amd64.whl", hash = "sha256:b836ddff662a45385948ee0878b0a04c3a260949905ad861a37b931d6ee1c210"}, - {file = "ruff-0.1.2-py3-none-win_arm64.whl", hash = "sha256:b0c42d00db5639dbd5f7f9923c63648682dd197bf5de1151b595160c96172691"}, - {file = "ruff-0.1.2.tar.gz", hash = "sha256:afd4785ae060ce6edcd52436d0c197628a918d6d09e3107a892a1bad6a4c6608"}, + {file = "ruff-0.1.3-py3-none-macosx_10_7_x86_64.whl", hash = "sha256:b46d43d51f7061652eeadb426a9e3caa1e0002470229ab2fc19de8a7b0766901"}, + {file = "ruff-0.1.3-py3-none-macosx_10_9_x86_64.macosx_11_0_arm64.macosx_10_9_universal2.whl", hash = "sha256:b8afeb9abd26b4029c72adc9921b8363374f4e7edb78385ffaa80278313a15f9"}, + {file = "ruff-0.1.3-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:ca3cf365bf32e9ba7e6db3f48a4d3e2c446cd19ebee04f05338bc3910114528b"}, + {file = "ruff-0.1.3-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:4874c165f96c14a00590dcc727a04dca0cfd110334c24b039458c06cf78a672e"}, + {file = "ruff-0.1.3-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:eec2dd31eed114e48ea42dbffc443e9b7221976554a504767ceaee3dd38edeb8"}, + {file = "ruff-0.1.3-py3-none-manylinux_2_17_ppc64.manylinux2014_ppc64.whl", hash = "sha256:dc3ec4edb3b73f21b4aa51337e16674c752f1d76a4a543af56d7d04e97769613"}, + {file = "ruff-0.1.3-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:2e3de9ed2e39160800281848ff4670e1698037ca039bda7b9274f849258d26ce"}, + {file = "ruff-0.1.3-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:1c595193881922cc0556a90f3af99b1c5681f0c552e7a2a189956141d8666fe8"}, + {file = "ruff-0.1.3-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:0f75e670d529aa2288cd00fc0e9b9287603d95e1536d7a7e0cafe00f75e0dd9d"}, + {file = "ruff-0.1.3-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:76dd49f6cd945d82d9d4a9a6622c54a994689d8d7b22fa1322983389b4892e20"}, + {file = "ruff-0.1.3-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:918b454bc4f8874a616f0d725590277c42949431ceb303950e87fef7a7d94cb3"}, + {file = "ruff-0.1.3-py3-none-musllinux_1_2_i686.whl", hash = "sha256:d8859605e729cd5e53aa38275568dbbdb4fe882d2ea2714c5453b678dca83784"}, + {file = "ruff-0.1.3-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:0b6c55f5ef8d9dd05b230bb6ab80bc4381ecb60ae56db0330f660ea240cb0d4a"}, + {file = "ruff-0.1.3-py3-none-win32.whl", hash = "sha256:3e7afcbdcfbe3399c34e0f6370c30f6e529193c731b885316c5a09c9e4317eef"}, + {file = "ruff-0.1.3-py3-none-win_amd64.whl", hash = "sha256:7a18df6638cec4a5bd75350639b2bb2a2366e01222825562c7346674bdceb7ea"}, + {file = "ruff-0.1.3-py3-none-win_arm64.whl", hash = "sha256:12fd53696c83a194a2db7f9a46337ce06445fb9aa7d25ea6f293cf75b21aca9f"}, + {file = "ruff-0.1.3.tar.gz", hash = "sha256:3ba6145369a151401d5db79f0a47d50e470384d0d89d0d6f7fab0b589ad07c34"}, ] [[package]] @@ -4332,4 +4332,4 @@ files = [ [metadata] lock-version = "2.0" python-versions = "^3.11" -content-hash = "e6b1df989cb5c50609540c1229d05d8458ef1cc343fb5868402db8b7679ad73c" +content-hash = "2fc746976187f4674f04575cffd6a367744723bf78c356b6951c2370bc47ceae" diff --git a/pyproject.toml b/pyproject.toml index 1b8258785..14c2dd09d 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -113,7 +113,7 @@ filterwarnings = [ [tool.poetry] name = "authentik" -version = "2023.8.3" +version = "2023.10.1" description = "" authors = ["authentik Team "] @@ -152,7 +152,7 @@ paramiko = "*" psycopg = { extras = ["c"], version = "*" } pycryptodome = "*" pydantic = "<3.0.0" -pydantic-scim = "^0.0.7" +pydantic-scim = "^0.0.8" pyjwt = "*" python = "^3.11" pyyaml = "*" diff --git a/schema.yml b/schema.yml index 5a6a347ab..903a01bf2 100644 --- a/schema.yml +++ b/schema.yml @@ -1,7 +1,7 @@ openapi: 3.0.3 info: title: authentik - version: 2023.8.3 + version: 2023.10.1 description: Making authentication simple. contact: email: hello@goauthentik.io @@ -27494,6 +27494,20 @@ paths: name: user_path_template schema: type: string + - in: query + name: user_type + schema: + type: string + enum: + - external + - internal + - internal_service_account + - service_account + description: |- + * `internal` - Internal + * `external` - External + * `service_account` - Service Account + * `internal_service_account` - Internal Service Account tags: - stages security: @@ -38052,6 +38066,8 @@ components: format: uuid nullable: true description: Optionally add newly created users to this group. + user_type: + $ref: '#/components/schemas/UserTypeEnum' user_path_template: type: string PatchedWebAuthnDeviceRequest: @@ -42422,6 +42438,8 @@ components: format: uuid nullable: true description: Optionally add newly created users to this group. + user_type: + $ref: '#/components/schemas/UserTypeEnum' user_path_template: type: string required: @@ -42452,6 +42470,8 @@ components: format: uuid nullable: true description: Optionally add newly created users to this group. + user_type: + $ref: '#/components/schemas/UserTypeEnum' user_path_template: type: string required: diff --git a/web/package-lock.json b/web/package-lock.json index 02f324432..1b8168963 100644 --- a/web/package-lock.json +++ b/web/package-lock.json @@ -17,15 +17,15 @@ "@codemirror/theme-one-dark": "^6.1.2", "@formatjs/intl-listformat": "^7.5.0", "@fortawesome/fontawesome-free": "^6.4.2", - "@goauthentik/api": "^2023.8.3-1697813667", + "@goauthentik/api": "^2023.10.1-1698348102", "@lit-labs/context": "^0.4.1", "@lit-labs/task": "^3.1.0", "@lit/localize": "^0.11.4", "@open-wc/lit-helpers": "^0.6.0", "@patternfly/elements": "^2.4.0", "@patternfly/patternfly": "^4.224.2", - "@sentry/browser": "^7.75.0", - "@sentry/tracing": "^7.75.0", + "@sentry/browser": "^7.75.1", + "@sentry/tracing": "^7.75.1", "@webcomponents/webcomponentsjs": "^2.8.0", "base64-js": "^1.5.1", "chart.js": "^4.4.0", @@ -34,9 +34,9 @@ "construct-style-sheets-polyfill": "^3.1.0", "core-js": "^3.33.1", "country-flag-icons": "^1.5.7", - "fuse.js": "^6.6.2", + "fuse.js": "^7.0.0", "lit": "^2.8.0", - "mermaid": "^10.5.1", + "mermaid": "^10.6.0", "rapidoc": "^9.3.4", "style-mod": "^4.1.0", "webcomponent-qr-code": "^1.2.0", @@ -81,7 +81,7 @@ "eslint-plugin-lit": "^1.10.1", "eslint-plugin-sonarjs": "^0.21.0", "eslint-plugin-storybook": "^0.6.15", - "lit-analyzer": "^1.2.1", + "lit-analyzer": "^2.0.1", "npm-run-all": "^4.1.5", "prettier": "^3.0.3", "pseudolocale": "^2.0.0", @@ -94,7 +94,7 @@ "rollup-plugin-postcss-lit": "^2.1.0", "storybook": "^7.5.1", "storybook-addon-mock": "^4.3.0", - "ts-lit-plugin": "^1.2.1", + "ts-lit-plugin": "^2.0.0", "tslib": "^2.6.2", "turnstile-types": "^1.1.3", "typescript": "^5.2.2", @@ -2883,9 +2883,9 @@ } }, "node_modules/@goauthentik/api": { - "version": "2023.8.3-1697813667", - "resolved": "https://registry.npmjs.org/@goauthentik/api/-/api-2023.8.3-1697813667.tgz", - "integrity": "sha512-ZzAThGkJVp/MKVll5cnnVx3Eq0k3K57QmYNPIGdOaVX/bLqMHB/d/y+FsBS0LnJrFFixtHej2UjWo6a3xlT5qA==" + "version": "2023.10.1-1698348102", + "resolved": "https://registry.npmjs.org/@goauthentik/api/-/api-2023.10.1-1698348102.tgz", + "integrity": "sha512-Melx4hoHOLbgAOHREGzx83uN5BKvgql4qIUloxh/abvNeGLlfKL49caiU8++ANUaERr1vb8X2tHFwiwxtqXKeQ==" }, "node_modules/@hcaptcha/types": { "version": "1.0.3", @@ -3583,25 +3583,6 @@ "react": ">=16" } }, - "node_modules/@mrmlnc/readdir-enhanced": { - "version": "2.2.1", - "resolved": "https://registry.npmjs.org/@mrmlnc/readdir-enhanced/-/readdir-enhanced-2.2.1.tgz", - "integrity": "sha512-bPHp6Ji8b41szTOcaP63VlnbbO5Ny6dwAATtY6JTjh5N2OLrb5Qk/Th5cRkRQhkWCt+EJsYrNB0MiL+Gpn6e3g==", - "dev": true, - "dependencies": { - "call-me-maybe": "^1.0.1", - "glob-to-regexp": "^0.3.0" - }, - "engines": { - "node": ">=4" - } - }, - "node_modules/@mrmlnc/readdir-enhanced/node_modules/glob-to-regexp": { - "version": "0.3.0", - "resolved": "https://registry.npmjs.org/glob-to-regexp/-/glob-to-regexp-0.3.0.tgz", - "integrity": "sha512-Iozmtbqv0noj0uDDqoL0zNq0VBEfK2YFoMAZoxJe4cwphvLR+JskfF30QhXHOR4m3KrE6NLRYw+U9MRXvifyig==", - "dev": true - }, "node_modules/@ndelangen/get-tarball": { "version": "3.0.9", "resolved": "https://registry.npmjs.org/@ndelangen/get-tarball/-/get-tarball-3.0.9.tgz", @@ -4714,84 +4695,84 @@ ] }, "node_modules/@sentry-internal/tracing": { - "version": "7.75.0", - "resolved": "https://registry.npmjs.org/@sentry-internal/tracing/-/tracing-7.75.0.tgz", - "integrity": "sha512-/j4opF/jB9j8qnSiQK75/lFLtkfqXS5/MoOKc2KWK/pOaf15W+6uJzGQ8jRBHLYd9dDg6AyqsF48Wqy561/mNg==", + "version": "7.75.1", + "resolved": "https://registry.npmjs.org/@sentry-internal/tracing/-/tracing-7.75.1.tgz", + "integrity": "sha512-nynV+7iVcF8k3CqhvI2K7iA8h4ovJhgYHKnXR8RDDevQOqNG2AEX9+hjCj9fZM4MhKHYFqf1od2oO9lTr38kwg==", "dependencies": { - "@sentry/core": "7.75.0", - "@sentry/types": "7.75.0", - "@sentry/utils": "7.75.0" + "@sentry/core": "7.75.1", + "@sentry/types": "7.75.1", + "@sentry/utils": "7.75.1" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/browser": { - "version": "7.75.0", - "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-7.75.0.tgz", - "integrity": "sha512-DXH/69vzp2j8xjydX+lrUYasrk7a1mpbXFGA9GtnII7shMCy55+QkVxpa6cLojYUaG2K/8yFDMcrP9N395LnWg==", + "version": "7.75.1", + "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-7.75.1.tgz", + "integrity": "sha512-0+jPfPA5P9HVYYRQraDokGCY2NiMknSfz11dggClK4VmjvG+hOXiEyf73SFVwLFnv/hwrkWySjoIrVCX65xXQA==", "dependencies": { - "@sentry-internal/tracing": "7.75.0", - "@sentry/core": "7.75.0", - "@sentry/replay": "7.75.0", - "@sentry/types": "7.75.0", - "@sentry/utils": "7.75.0" + "@sentry-internal/tracing": "7.75.1", + "@sentry/core": "7.75.1", + "@sentry/replay": "7.75.1", + "@sentry/types": "7.75.1", + "@sentry/utils": "7.75.1" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/core": { - "version": "7.75.0", - "resolved": "https://registry.npmjs.org/@sentry/core/-/core-7.75.0.tgz", - "integrity": "sha512-vXg3cdJgwzP24oTS9zFCgLW4MgTkMZqXx+ESRq7gTD9qJTpcmAmYT+Ckmvebg8K6DBThV6+0v61r50na2+XdrA==", + "version": "7.75.1", + "resolved": "https://registry.npmjs.org/@sentry/core/-/core-7.75.1.tgz", + "integrity": "sha512-Kw4KyKBxbxbh8OKO0S11Tm0gWP+6AaXXYrsq3hp8H338l/wOmIzyckmCbUrc/XJeoRqaFLJbdcCrcUEDZUvsVQ==", "dependencies": { - "@sentry/types": "7.75.0", - "@sentry/utils": "7.75.0" + "@sentry/types": "7.75.1", + "@sentry/utils": "7.75.1" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/replay": { - "version": "7.75.0", - "resolved": "https://registry.npmjs.org/@sentry/replay/-/replay-7.75.0.tgz", - "integrity": "sha512-TAAlj7JCMF6hFFL71RmPzVX89ltyPYFWR+t4SuWaBmU6HmTliI2eJvK+M36oE+N7s3CkyRVTaXXRe0YMwRMuZQ==", + "version": "7.75.1", + "resolved": "https://registry.npmjs.org/@sentry/replay/-/replay-7.75.1.tgz", + "integrity": "sha512-MKQTDWNYs9QXCJ+irGX5gu8Kxdk/Ds5puhILy8+DnCoXgXuPFRMGob1Sxt8qXmbQmcGeogsx221MNTselsRS6g==", "dependencies": { - "@sentry-internal/tracing": "7.75.0", - "@sentry/core": "7.75.0", - "@sentry/types": "7.75.0", - "@sentry/utils": "7.75.0" + "@sentry-internal/tracing": "7.75.1", + "@sentry/core": "7.75.1", + "@sentry/types": "7.75.1", + "@sentry/utils": "7.75.1" }, "engines": { "node": ">=12" } }, "node_modules/@sentry/tracing": { - "version": "7.75.0", - "resolved": "https://registry.npmjs.org/@sentry/tracing/-/tracing-7.75.0.tgz", - "integrity": "sha512-EHvkQZdZApESVCwbZoUepjF79LQm2IYC/axj7k2bY5ImTAabS323I5YPwifPAWbtqvjqxakgbKUNjaTMGeSGNg==", + "version": "7.75.1", + "resolved": "https://registry.npmjs.org/@sentry/tracing/-/tracing-7.75.1.tgz", + "integrity": "sha512-hy8MQB9TAYdvuO6O6Lotmi/xMkhseM5E3ecY6yjgkbQwzjJV+dBBW4xsCXowMQQQ1qN+E/n95p/gUPvbfe2mgQ==", "dependencies": { - "@sentry-internal/tracing": "7.75.0" + "@sentry-internal/tracing": "7.75.1" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/types": { - "version": "7.75.0", - "resolved": "https://registry.npmjs.org/@sentry/types/-/types-7.75.0.tgz", - "integrity": "sha512-xG8OLADxG7HpGhMxrF4v4tKq/v/gqmLsTZ858R51pz0xCWM8SK6ZSWOKudkAGBIpRjI6RUHMnkBtRAN2aKDOkQ==", + "version": "7.75.1", + "resolved": "https://registry.npmjs.org/@sentry/types/-/types-7.75.1.tgz", + "integrity": "sha512-km+ygqgMDaFfTrbQwdhrptFqx0Oq15jZABqIoIpbaOCkCAMm+tyCqrFS8dTfaq5wpCktqWOy2qU/DOpppO99Cg==", "engines": { "node": ">=8" } }, "node_modules/@sentry/utils": { - "version": "7.75.0", - "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-7.75.0.tgz", - "integrity": "sha512-UHWKeevhUNRp+mAWDbMVFOMgseoq8t/xFgdUywO/2PC14qZKRBH+0k1BKoNkp5sOzDT06ETj2w6wYoYhy6i+dA==", + "version": "7.75.1", + "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-7.75.1.tgz", + "integrity": "sha512-QzW2eRjY20epD//9/tQ0FTNwdAL6XZi+LyJNUQIeK3NMnc5NgHrgpxId87gmFq8cNx47utH1Blub8RuMbKqiwQ==", "dependencies": { - "@sentry/types": "7.75.0" + "@sentry/types": "7.75.1" }, "engines": { "node": ">=8" @@ -10758,6 +10739,12 @@ "integrity": "sha512-zuVdFrMJiuCDQUMCzQaD6KL28MjnqqN8XnAqiEq9PNm/hCPTSGfrXCOfwj1ow4LFb/tNymJPwsNbVePc1xFqrQ==", "dev": true }, + "node_modules/@vscode/web-custom-data": { + "version": "0.4.8", + "resolved": "https://registry.npmjs.org/@vscode/web-custom-data/-/web-custom-data-0.4.8.tgz", + "integrity": "sha512-rRiEeEX49wipCeGZo65mQJUEuCY3IXd6bet90eY6cMMQ9jBe2g3Njw/2ctbaxuACPnEKXTdW0dB7umxDln3Rzg==", + "dev": true + }, "node_modules/@webcomponents/webcomponentsjs": { "version": "2.8.0", "resolved": "https://registry.npmjs.org/@webcomponents/webcomponentsjs/-/webcomponentsjs-2.8.0.tgz", @@ -11017,33 +11004,6 @@ "node": ">=10" } }, - "node_modules/arr-diff": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/arr-diff/-/arr-diff-4.0.0.tgz", - "integrity": "sha512-YVIQ82gZPGBebQV/a8dar4AitzCQs0jjXwMPZllpXMaGjXPYVUawSxQrRsjhjupyVxEvbHgUmIhKVlND+j02kA==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/arr-flatten": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz", - "integrity": "sha512-L3hKV5R/p5o81R7O02IGnwpDmkp6E982XhtbuwSe3O4qOtMMMtodicASA1Cny2U+aCXcNpml+m4dPsvsJ3jatg==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/arr-union": { - "version": "3.1.0", - "resolved": "https://registry.npmjs.org/arr-union/-/arr-union-3.1.0.tgz", - "integrity": "sha512-sKpyeERZ02v1FeCZT8lrfJq5u6goHCtpTAzPwJYe7c8SPFOboNjNg1vz2L4VTn9T4PQxEx13TbXLmYUcS6Ug7Q==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/array-buffer-byte-length": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/array-buffer-byte-length/-/array-buffer-byte-length-1.0.0.tgz", @@ -11072,15 +11032,6 @@ "node": ">=8" } }, - "node_modules/array-unique": { - "version": "0.3.2", - "resolved": "https://registry.npmjs.org/array-unique/-/array-unique-0.3.2.tgz", - "integrity": "sha512-SleRWjh9JUud2wH1hPs9rZBZ33H6T9HOiL0uwGnGx9FpE6wKGyfWugmbkEOIs6qWrZhg0LWeLziLrEwQJhs5mQ==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/arraybuffer.prototype.slice": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/arraybuffer.prototype.slice/-/arraybuffer.prototype.slice-1.0.2.tgz", @@ -11115,15 +11066,6 @@ "util": "^0.12.5" } }, - "node_modules/assign-symbols": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/assign-symbols/-/assign-symbols-1.0.0.tgz", - "integrity": "sha512-Q+JC7Whu8HhmTdBph/Tq59IoRtoy6KAm5zzPv00WdujX82lbAL8K7WVjne7vdCsAmbF4AYaDOPyO3k0kl8qIrw==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/ast-types": { "version": "0.16.1", "resolved": "https://registry.npmjs.org/ast-types/-/ast-types-0.16.1.tgz", @@ -11153,18 +11095,6 @@ "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz", "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==" }, - "node_modules/atob": { - "version": "2.1.2", - "resolved": "https://registry.npmjs.org/atob/-/atob-2.1.2.tgz", - "integrity": "sha512-Wm6ukoaOGJi/73p/cl2GvLjTI5JM1k/O14isD73YML8StrH/7/lRFgmg8nICZgD3bZZvjwCGxtMOD3wWNAu8cg==", - "dev": true, - "bin": { - "atob": "bin/atob.js" - }, - "engines": { - "node": ">= 4.5.0" - } - }, "node_modules/available-typed-arrays": { "version": "1.0.5", "resolved": "https://registry.npmjs.org/available-typed-arrays/-/available-typed-arrays-1.0.5.tgz", @@ -11293,36 +11223,6 @@ "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==" }, - "node_modules/base": { - "version": "0.11.2", - "resolved": "https://registry.npmjs.org/base/-/base-0.11.2.tgz", - "integrity": "sha512-5T6P4xPgpp0YDFvSWwEZ4NoE3aM4QBQXDzmVbraCkFj8zHM+mba8SyqB5DbZWyR7mYHo6Y7BdQo3MoA4m0TeQg==", - "dev": true, - "dependencies": { - "cache-base": "^1.0.1", - "class-utils": "^0.3.5", - "component-emitter": "^1.2.1", - "define-property": "^1.0.0", - "isobject": "^3.0.1", - "mixin-deep": "^1.2.0", - "pascalcase": "^0.1.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/base/node_modules/define-property": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/define-property/-/define-property-1.0.0.tgz", - "integrity": "sha512-cZTYKFWspt9jZsMscWo8sc/5lbPC9Q0N5nBLgb+Yd915iL3udB1uFgS3B8YCx66UVHq018DAVFoee7x+gxggeA==", - "dev": true, - "dependencies": { - "is-descriptor": "^1.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/base64-arraybuffer": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-1.0.2.tgz", @@ -11633,26 +11533,6 @@ "node": ">= 0.8" } }, - "node_modules/cache-base": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/cache-base/-/cache-base-1.0.1.tgz", - "integrity": "sha512-AKcdTnFSWATd5/GCPRxr2ChwIJ85CeyrEyjRHlKxQ56d4XJMGym0uAiKn0xbLOGOl3+yRpOTi484dVCEc5AUzQ==", - "dev": true, - "dependencies": { - "collection-visit": "^1.0.0", - "component-emitter": "^1.2.1", - "get-value": "^2.0.6", - "has-value": "^1.0.0", - "isobject": "^3.0.1", - "set-value": "^2.0.0", - "to-object-path": "^0.3.0", - "union-value": "^1.0.0", - "unset-value": "^1.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/call-bind": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz", @@ -11665,12 +11545,6 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/call-me-maybe": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/call-me-maybe/-/call-me-maybe-1.0.2.tgz", - "integrity": "sha512-HpX65o1Hnr9HH25ojC1YGs7HCQLq0GCOibSaWER0eNpgJ/Z1MZv2mTc7+xh6WOPxbRVcmgbv4hGU+uSQ/2xFZQ==", - "dev": true - }, "node_modules/callsites": { "version": "3.1.0", "resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz", @@ -11815,110 +11689,6 @@ "node": ">=8" } }, - "node_modules/class-utils": { - "version": "0.3.6", - "resolved": "https://registry.npmjs.org/class-utils/-/class-utils-0.3.6.tgz", - "integrity": "sha512-qOhPa/Fj7s6TY8H8esGu5QNpMMQxz79h+urzrNYN6mn+9BnxlDGf5QZ+XeCDsxSjPqsSR56XOZOJmpeurnLMeg==", - "dev": true, - "dependencies": { - "arr-union": "^3.1.0", - "define-property": "^0.2.5", - "isobject": "^3.0.0", - "static-extend": "^0.1.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/class-utils/node_modules/define-property": { - "version": "0.2.5", - "resolved": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz", - "integrity": "sha512-Rr7ADjQZenceVOAKop6ALkkRAmH1A4Gx9hV/7ZujPUN2rkATqFO0JZLZInbAjpZYoJ1gUx8MRMQVkYemcbMSTA==", - "dev": true, - "dependencies": { - "is-descriptor": "^0.1.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/class-utils/node_modules/is-accessor-descriptor": { - "version": "0.1.6", - "resolved": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz", - "integrity": "sha512-e1BM1qnDbMRG3ll2U9dSK0UMHuWOs3pY3AtcFsmvwPtKL3MML/Q86i+GilLfvqEs4GW+ExB91tQ3Ig9noDIZ+A==", - "dev": true, - "dependencies": { - "kind-of": "^3.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/class-utils/node_modules/is-accessor-descriptor/node_modules/kind-of": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz", - "integrity": "sha512-NOW9QQXMoZGg/oqnVNoNTTIFEIid1627WCffUBJEdMxYApq7mNE7CpzucIPc+ZQg25Phej7IJSmX3hO+oblOtQ==", - "dev": true, - "dependencies": { - "is-buffer": "^1.1.5" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/class-utils/node_modules/is-buffer": { - "version": "1.1.6", - "resolved": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz", - "integrity": "sha512-NcdALwpXkTm5Zvvbk7owOUSvVvBKDgKP5/ewfXEznmQFfs4ZRmanOeKBTjRVjka3QFoN6XJ+9F3USqfHqTaU5w==", - "dev": true - }, - "node_modules/class-utils/node_modules/is-data-descriptor": { - "version": "0.1.4", - "resolved": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz", - "integrity": "sha512-+w9D5ulSoBNlmw9OHn3U2v51SyoCd0he+bB3xMl62oijhrspxowjU+AIcDY0N3iEJbUEkB15IlMASQsxYigvXg==", - "dev": true, - "dependencies": { - "kind-of": "^3.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/class-utils/node_modules/is-data-descriptor/node_modules/kind-of": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz", - "integrity": "sha512-NOW9QQXMoZGg/oqnVNoNTTIFEIid1627WCffUBJEdMxYApq7mNE7CpzucIPc+ZQg25Phej7IJSmX3hO+oblOtQ==", - "dev": true, - "dependencies": { - "is-buffer": "^1.1.5" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/class-utils/node_modules/is-descriptor": { - "version": "0.1.6", - "resolved": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.6.tgz", - "integrity": "sha512-avDYr0SB3DwO9zsMov0gKCESFYqCnE4hq/4z3TdUlukEy5t9C0YRq7HLrsN52NAcqXKaepeCD0n+B0arnVG3Hg==", - "dev": true, - "dependencies": { - "is-accessor-descriptor": "^0.1.6", - "is-data-descriptor": "^0.1.4", - "kind-of": "^5.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/class-utils/node_modules/kind-of": { - "version": "5.1.0", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-5.1.0.tgz", - "integrity": "sha512-NGEErnH6F2vUuXDh+OlbcKW7/wOcfdRHaZ7VWtqCztfHri/++YKmP51OdWeGPuqCOba6kk2OTe5d02VmTB80Pw==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/clean-stack": { "version": "2.2.0", "resolved": "https://registry.npmjs.org/clean-stack/-/clean-stack-2.2.0.tgz", @@ -11968,14 +11738,17 @@ } }, "node_modules/cliui": { - "version": "6.0.0", - "resolved": "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz", - "integrity": "sha512-t6wbgtoCXvAzst7QgXxJYqPt0usEfbgQdftEPbLL/cvv6HPE5VgvqCuAIDR0NgU52ds6rFwqrgakNLrHEjCbrQ==", + "version": "8.0.1", + "resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz", + "integrity": "sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==", "dev": true, "dependencies": { "string-width": "^4.2.0", - "strip-ansi": "^6.0.0", - "wrap-ansi": "^6.2.0" + "strip-ansi": "^6.0.1", + "wrap-ansi": "^7.0.0" + }, + "engines": { + "node": ">=12" } }, "node_modules/clone": { @@ -12027,19 +11800,6 @@ "@codemirror/view": "^6.0.0" } }, - "node_modules/collection-visit": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/collection-visit/-/collection-visit-1.0.0.tgz", - "integrity": "sha512-lNkKvzEeMBBjUGHZ+q6z9pSJla0KWAQPvtzhEV9+iGyQYG+pBpl7xKDhxoNSOZH2hhv0v5k0y2yAM4o4SjoSkw==", - "dev": true, - "dependencies": { - "map-visit": "^1.0.0", - "object-visit": "^1.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/color-convert": { "version": "2.0.1", "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz", @@ -12089,12 +11849,6 @@ "integrity": "sha512-W9pAhw0ja1Edb5GVdIF1mjZw/ASI0AlShXM83UUGe2DVr5TdAPEA1OA8m/g8zWp9x6On7gqufY+FatDbC3MDQg==", "dev": true }, - "node_modules/component-emitter": { - "version": "1.3.0", - "resolved": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.3.0.tgz", - "integrity": "sha512-Rd3se6QB+sO1TwqZjscQrurpEPIfO0/yYnSin6Q/rD3mOutHvUrCAhJub3r90uNb+SESBuE0QYoB90YdfatsRg==", - "dev": true - }, "node_modules/compressible": { "version": "2.0.18", "resolved": "https://registry.npmjs.org/compressible/-/compressible-2.0.18.tgz", @@ -12257,15 +12011,6 @@ "integrity": "sha512-QADzlaHc8icV8I7vbaJXJwod9HWYp8uCqf1xa4OfNu1T7JVxQIrUgOWtHdNDtPiywmFbiS12VjotIXLrKM3orQ==", "dev": true }, - "node_modules/copy-descriptor": { - "version": "0.1.1", - "resolved": "https://registry.npmjs.org/copy-descriptor/-/copy-descriptor-0.1.1.tgz", - "integrity": "sha512-XgZ0pFcakEUlbwQEVNg3+QAis1FyTL3Qel9FYy8pSkQqoG3PNoT0bOCQtOXcOkur21r2Eq2kI+IE+gsmAEVlYw==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/core-js": { "version": "3.33.1", "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.33.1.tgz", @@ -12902,15 +12647,6 @@ } } }, - "node_modules/decamelize": { - "version": "1.2.0", - "resolved": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz", - "integrity": "sha512-z2S+W9X73hAUUki+N+9Za2lBlun89zigOyGrsax+KUQ6wKW4ZoWpEYBkGhQjwAjjDCkWxhY0VKEhk8wzY7F5cA==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/decode-named-character-reference": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/decode-named-character-reference/-/decode-named-character-reference-1.0.2.tgz", @@ -12923,15 +12659,6 @@ "url": "https://github.com/sponsors/wooorm" } }, - "node_modules/decode-uri-component": { - "version": "0.2.2", - "resolved": "https://registry.npmjs.org/decode-uri-component/-/decode-uri-component-0.2.2.tgz", - "integrity": "sha512-FqUYQ+8o158GyGTrMFJms9qh3CqTKvAqgqsTnkLI8sKu0028orqBhxNMFkFen0zGyg6epACD32pjVk58ngIErQ==", - "dev": true, - "engines": { - "node": ">=0.10" - } - }, "node_modules/decompress-response": { "version": "6.0.0", "resolved": "https://registry.npmjs.org/decompress-response/-/decompress-response-6.0.0.tgz", @@ -13023,19 +12750,6 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/define-property": { - "version": "2.0.2", - "resolved": "https://registry.npmjs.org/define-property/-/define-property-2.0.2.tgz", - "integrity": "sha512-jwK2UV4cnPpbcG7+VRARKTZPUWowwXA8bzH5NP6ud0oeAxyYPuGZUAC7hMugpCdz4BeSZl2Dl9k66CHJ/46ZYQ==", - "dev": true, - "dependencies": { - "is-descriptor": "^1.0.2", - "isobject": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/defu": { "version": "6.1.2", "resolved": "https://registry.npmjs.org/defu/-/defu-6.1.2.tgz", @@ -14101,128 +13815,6 @@ "url": "https://github.com/sindresorhus/execa?sponsor=1" } }, - "node_modules/expand-brackets": { - "version": "2.1.4", - "resolved": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-2.1.4.tgz", - "integrity": "sha512-w/ozOKR9Obk3qoWeY/WDi6MFta9AoMR+zud60mdnbniMcBxRuFJyDt2LdX/14A1UABeqk+Uk+LDfUpvoGKppZA==", - "dev": true, - "dependencies": { - "debug": "^2.3.3", - "define-property": "^0.2.5", - "extend-shallow": "^2.0.1", - "posix-character-classes": "^0.1.0", - "regex-not": "^1.0.0", - "snapdragon": "^0.8.1", - "to-regex": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/expand-brackets/node_modules/debug": { - "version": "2.6.9", - "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz", - "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==", - "dev": true, - "dependencies": { - "ms": "2.0.0" - } - }, - "node_modules/expand-brackets/node_modules/define-property": { - "version": "0.2.5", - "resolved": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz", - "integrity": "sha512-Rr7ADjQZenceVOAKop6ALkkRAmH1A4Gx9hV/7ZujPUN2rkATqFO0JZLZInbAjpZYoJ1gUx8MRMQVkYemcbMSTA==", - "dev": true, - "dependencies": { - "is-descriptor": "^0.1.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/expand-brackets/node_modules/is-accessor-descriptor": { - "version": "0.1.6", - "resolved": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz", - "integrity": "sha512-e1BM1qnDbMRG3ll2U9dSK0UMHuWOs3pY3AtcFsmvwPtKL3MML/Q86i+GilLfvqEs4GW+ExB91tQ3Ig9noDIZ+A==", - "dev": true, - "dependencies": { - "kind-of": "^3.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/expand-brackets/node_modules/is-accessor-descriptor/node_modules/kind-of": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz", - "integrity": "sha512-NOW9QQXMoZGg/oqnVNoNTTIFEIid1627WCffUBJEdMxYApq7mNE7CpzucIPc+ZQg25Phej7IJSmX3hO+oblOtQ==", - "dev": true, - "dependencies": { - "is-buffer": "^1.1.5" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/expand-brackets/node_modules/is-buffer": { - "version": "1.1.6", - "resolved": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz", - "integrity": "sha512-NcdALwpXkTm5Zvvbk7owOUSvVvBKDgKP5/ewfXEznmQFfs4ZRmanOeKBTjRVjka3QFoN6XJ+9F3USqfHqTaU5w==", - "dev": true - }, - "node_modules/expand-brackets/node_modules/is-data-descriptor": { - "version": "0.1.4", - "resolved": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz", - "integrity": "sha512-+w9D5ulSoBNlmw9OHn3U2v51SyoCd0he+bB3xMl62oijhrspxowjU+AIcDY0N3iEJbUEkB15IlMASQsxYigvXg==", - "dev": true, - "dependencies": { - "kind-of": "^3.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/expand-brackets/node_modules/is-data-descriptor/node_modules/kind-of": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz", - "integrity": "sha512-NOW9QQXMoZGg/oqnVNoNTTIFEIid1627WCffUBJEdMxYApq7mNE7CpzucIPc+ZQg25Phej7IJSmX3hO+oblOtQ==", - "dev": true, - "dependencies": { - "is-buffer": "^1.1.5" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/expand-brackets/node_modules/is-descriptor": { - "version": "0.1.6", - "resolved": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.6.tgz", - "integrity": "sha512-avDYr0SB3DwO9zsMov0gKCESFYqCnE4hq/4z3TdUlukEy5t9C0YRq7HLrsN52NAcqXKaepeCD0n+B0arnVG3Hg==", - "dev": true, - "dependencies": { - "is-accessor-descriptor": "^0.1.6", - "is-data-descriptor": "^0.1.4", - "kind-of": "^5.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/expand-brackets/node_modules/kind-of": { - "version": "5.1.0", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-5.1.0.tgz", - "integrity": "sha512-NGEErnH6F2vUuXDh+OlbcKW7/wOcfdRHaZ7VWtqCztfHri/++YKmP51OdWeGPuqCOba6kk2OTe5d02VmTB80Pw==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/expand-brackets/node_modules/ms": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz", - "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==", - "dev": true - }, "node_modules/expand-template": { "version": "2.0.3", "resolved": "https://registry.npmjs.org/expand-template/-/expand-template-2.0.3.tgz", @@ -14342,37 +13934,6 @@ "node": ">=0.10.0" } }, - "node_modules/extglob": { - "version": "2.0.4", - "resolved": "https://registry.npmjs.org/extglob/-/extglob-2.0.4.tgz", - "integrity": "sha512-Nmb6QXkELsuBr24CJSkilo6UHHgbekK5UiZgfE6UHD3Eb27YC6oD+bhcT+tJ6cl8dmsgdQxnWlcry8ksBIBLpw==", - "dev": true, - "dependencies": { - "array-unique": "^0.3.2", - "define-property": "^1.0.0", - "expand-brackets": "^2.1.4", - "extend-shallow": "^2.0.1", - "fragment-cache": "^0.2.1", - "regex-not": "^1.0.0", - "snapdragon": "^0.8.1", - "to-regex": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/extglob/node_modules/define-property": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/define-property/-/define-property-1.0.0.tgz", - "integrity": "sha512-cZTYKFWspt9jZsMscWo8sc/5lbPC9Q0N5nBLgb+Yd915iL3udB1uFgS3B8YCx66UVHq018DAVFoee7x+gxggeA==", - "dev": true, - "dependencies": { - "is-descriptor": "^1.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/extract-zip": { "version": "1.7.0", "resolved": "https://registry.npmjs.org/extract-zip/-/extract-zip-1.7.0.tgz", @@ -14752,15 +14313,6 @@ "is-callable": "^1.1.3" } }, - "node_modules/for-in": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz", - "integrity": "sha512-7EwmXrOjyL+ChxMhmG5lnW9MPt1aIeZEwKhQzoBUdTV0N3zuwWDZYVJatDvZ2OyzPUvdIAZDsCetk3coyMfcnQ==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/foreground-child": { "version": "3.1.1", "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.1.1.tgz", @@ -14829,18 +14381,6 @@ "node": ">= 0.6" } }, - "node_modules/fragment-cache": { - "version": "0.2.1", - "resolved": "https://registry.npmjs.org/fragment-cache/-/fragment-cache-0.2.1.tgz", - "integrity": "sha512-GMBAbW9antB8iZRHLoGw0b3HANt57diZYFO/HL1JGIC1MjKrdmhxvrJbupnVvpys0zsz7yBApXdQyfepKly2kA==", - "dev": true, - "dependencies": { - "map-cache": "^0.2.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/fresh": { "version": "0.5.2", "resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz", @@ -14953,9 +14493,9 @@ } }, "node_modules/fuse.js": { - "version": "6.6.2", - "resolved": "https://registry.npmjs.org/fuse.js/-/fuse.js-6.6.2.tgz", - "integrity": "sha512-cJaJkxCCxC8qIIcPBF9yGxY0W/tVZS3uEISDxhYIdtk8OL93pe+6Zj7LjCqVV4dzbqcriOZ+kQ/NE4RXZHsIGA==", + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/fuse.js/-/fuse.js-7.0.0.tgz", + "integrity": "sha512-14F4hBIxqKvD4Zz/XjDc3y94mNZN6pRv3U13Udo0lNLCWRBUsrMv2xwcF/y/Z5sV6+FQW+/ow68cHpm4sunt8Q==", "engines": { "node": ">=10" } @@ -15059,15 +14599,6 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/get-value": { - "version": "2.0.6", - "resolved": "https://registry.npmjs.org/get-value/-/get-value-2.0.6.tgz", - "integrity": "sha512-Ln0UQDlxH1BapMu3GPtf7CuYNwRZf2gwCuPqbyG6pB8WfmFpzqcy4xtAaAMUhnNqjMKTiCPZG2oMT3YSx8U2NA==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/giget": { "version": "1.1.3", "resolved": "https://registry.npmjs.org/giget/-/giget-1.1.3.tgz", @@ -15388,75 +14919,6 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/has-value": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/has-value/-/has-value-1.0.0.tgz", - "integrity": "sha512-IBXk4GTsLYdQ7Rvt+GRBrFSVEkmuOUy4re0Xjd9kJSUQpnTrWR4/y9RpfexN9vkAPMFuQoeWKwqzPozRTlasGw==", - "dev": true, - "dependencies": { - "get-value": "^2.0.6", - "has-values": "^1.0.0", - "isobject": "^3.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/has-values": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/has-values/-/has-values-1.0.0.tgz", - "integrity": "sha512-ODYZC64uqzmtfGMEAX/FvZiRyWLpAC3vYnNunURUnkGVTS+mI0smVsWaPydRBsE3g+ok7h960jChO8mFcWlHaQ==", - "dev": true, - "dependencies": { - "is-number": "^3.0.0", - "kind-of": "^4.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/has-values/node_modules/is-buffer": { - "version": "1.1.6", - "resolved": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz", - "integrity": "sha512-NcdALwpXkTm5Zvvbk7owOUSvVvBKDgKP5/ewfXEznmQFfs4ZRmanOeKBTjRVjka3QFoN6XJ+9F3USqfHqTaU5w==", - "dev": true - }, - "node_modules/has-values/node_modules/is-number": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz", - "integrity": "sha512-4cboCqIpliH+mAvFNegjZQ4kgKc3ZUhQVr3HvWbSh5q3WH2v82ct+T2Y1hdU5Gdtorx/cLifQjqCbL7bpznLTg==", - "dev": true, - "dependencies": { - "kind-of": "^3.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/has-values/node_modules/is-number/node_modules/kind-of": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz", - "integrity": "sha512-NOW9QQXMoZGg/oqnVNoNTTIFEIid1627WCffUBJEdMxYApq7mNE7CpzucIPc+ZQg25Phej7IJSmX3hO+oblOtQ==", - "dev": true, - "dependencies": { - "is-buffer": "^1.1.5" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/has-values/node_modules/kind-of": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz", - "integrity": "sha512-24XsCxmEbRwEDbz/qz3stgin8TTzZ1ESR56OMCN0ujYg+vRutNSiOj9bHH9u85DKgXguraugV5sFuvbD4FW/hw==", - "dev": true, - "dependencies": { - "is-buffer": "^1.1.5" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/heap": { "version": "0.2.7", "resolved": "https://registry.npmjs.org/heap/-/heap-0.2.7.tgz", @@ -15666,18 +15128,6 @@ "node": ">=8" } }, - "node_modules/is-accessor-descriptor": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-1.0.0.tgz", - "integrity": "sha512-m5hnHTkcVsPfqx3AKlyttIPb7J+XykHvJP2B9bZDjlhLIoEq4XoK64Vg7boZlVWYK6LUY94dYPEE7Lh0ZkZKcQ==", - "dev": true, - "dependencies": { - "kind-of": "^6.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/is-arguments": { "version": "1.1.1", "resolved": "https://registry.npmjs.org/is-arguments/-/is-arguments-1.1.1.tgz", @@ -15816,18 +15266,6 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/is-data-descriptor": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-1.0.0.tgz", - "integrity": "sha512-jbRXy1FmtAoCjQkVmIVYwuuqDFUbaOeDjmed1tOGPrsMhtJA4rD9tkgA0F1qJ3gRFRXcHYVkdeaP50Q5rE/jLQ==", - "dev": true, - "dependencies": { - "kind-of": "^6.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/is-date-object": { "version": "1.0.5", "resolved": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.5.tgz", @@ -15849,20 +15287,6 @@ "integrity": "sha512-YDoFpuZWu1VRXlsnlYMzKyVRITXj7Ej/V9gXQ2/pAe7X1J7M/RNOqaIYi6qUn+B7nGyB9pDXrv02dsB58d2ZAQ==", "dev": true }, - "node_modules/is-descriptor": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-1.0.2.tgz", - "integrity": "sha512-2eis5WqQGV7peooDyLmNEPUrps9+SXX5c9pL3xEB+4e9HnGuDa7mB7kHxHw4CbqS9k1T2hOH3miL8n8WtiYVtg==", - "dev": true, - "dependencies": { - "is-accessor-descriptor": "^1.0.0", - "is-data-descriptor": "^1.0.0", - "kind-of": "^6.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/is-docker": { "version": "2.2.1", "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz", @@ -16153,15 +15577,6 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/is-windows": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.2.tgz", - "integrity": "sha512-eXK1UInq2bPmjyX6e3VHIzMLobc4J94i4AWn+Hpq3OU5KkrRC96OAcR3PRJ/pGu6m8TRnBHP9dkXQVsT/COVIA==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/is-wsl": { "version": "2.2.0", "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz", @@ -16763,218 +16178,31 @@ } }, "node_modules/lit-analyzer": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/lit-analyzer/-/lit-analyzer-1.2.1.tgz", - "integrity": "sha512-OEARBhDidyaQENavLbzpTKbEmu5rnAI+SdYsH4ia1BlGlLiqQXoym7uH1MaRPtwtUPbkhUfT4OBDZ+74VHc3Cg==", + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/lit-analyzer/-/lit-analyzer-2.0.1.tgz", + "integrity": "sha512-4bHJLCbxywMHd9bnVkLDkCSHXs/KrlwUks75EhYtJNdzH07O5BSVdZdadbw4T2AvuYxb0xRO4ZjqgQJCkp8Kjg==", "dev": true, "dependencies": { + "@vscode/web-custom-data": "^0.4.2", "chalk": "^2.4.2", "didyoumean2": "4.1.0", - "fast-glob": "^2.2.6", + "fast-glob": "^3.2.11", "parse5": "5.1.0", - "ts-simple-type": "~1.0.5", + "ts-simple-type": "~2.0.0-next.0", "vscode-css-languageservice": "4.3.0", "vscode-html-languageservice": "3.1.0", - "web-component-analyzer": "~1.1.1" + "web-component-analyzer": "^2.0.0" }, "bin": { "lit-analyzer": "cli.js" } }, - "node_modules/lit-analyzer/node_modules/@nodelib/fs.stat": { - "version": "1.1.3", - "resolved": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-1.1.3.tgz", - "integrity": "sha512-shAmDyaQC4H92APFoIaVDHCx5bStIocgvbwQyxPRrbUY20V1EYTbSDchWbuwlMG3V17cprZhA6+78JfB+3DTPw==", - "dev": true, - "engines": { - "node": ">= 6" - } - }, - "node_modules/lit-analyzer/node_modules/braces": { - "version": "2.3.2", - "resolved": "https://registry.npmjs.org/braces/-/braces-2.3.2.tgz", - "integrity": "sha512-aNdbnj9P8PjdXU4ybaWLK2IF3jc/EoDYbC7AazW6to3TRsfXxscC9UXOB5iDiEQrkyIbWp2SLQda4+QAa7nc3w==", - "dev": true, - "dependencies": { - "arr-flatten": "^1.1.0", - "array-unique": "^0.3.2", - "extend-shallow": "^2.0.1", - "fill-range": "^4.0.0", - "isobject": "^3.0.1", - "repeat-element": "^1.1.2", - "snapdragon": "^0.8.1", - "snapdragon-node": "^2.0.1", - "split-string": "^3.0.2", - "to-regex": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/lit-analyzer/node_modules/fast-glob": { - "version": "2.2.7", - "resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-2.2.7.tgz", - "integrity": "sha512-g1KuQwHOZAmOZMuBtHdxDtju+T2RT8jgCC9aANsbpdiDDTSnjgfuVsIBNKbUeJI3oKMRExcfNDtJl4OhbffMsw==", - "dev": true, - "dependencies": { - "@mrmlnc/readdir-enhanced": "^2.2.1", - "@nodelib/fs.stat": "^1.1.2", - "glob-parent": "^3.1.0", - "is-glob": "^4.0.0", - "merge2": "^1.2.3", - "micromatch": "^3.1.10" - }, - "engines": { - "node": ">=4.0.0" - } - }, - "node_modules/lit-analyzer/node_modules/fill-range": { - "version": "4.0.0", - "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-4.0.0.tgz", - "integrity": "sha512-VcpLTWqWDiTerugjj8e3+esbg+skS3M9e54UuR3iCeIDMXCLTsAH8hTSzDQU/X6/6t3eYkOKoZSef2PlU6U1XQ==", - "dev": true, - "dependencies": { - "extend-shallow": "^2.0.1", - "is-number": "^3.0.0", - "repeat-string": "^1.6.1", - "to-regex-range": "^2.1.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/lit-analyzer/node_modules/glob-parent": { - "version": "3.1.0", - "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-3.1.0.tgz", - "integrity": "sha512-E8Ak/2+dZY6fnzlR7+ueWvhsH1SjHr4jjss4YS/h4py44jY9MhK/VFdaZJAWDz6BbL21KeteKxFSFpq8OS5gVA==", - "dev": true, - "dependencies": { - "is-glob": "^3.1.0", - "path-dirname": "^1.0.0" - } - }, - "node_modules/lit-analyzer/node_modules/glob-parent/node_modules/is-glob": { - "version": "3.1.0", - "resolved": "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz", - "integrity": "sha512-UFpDDrPgM6qpnFNI+rh/p3bUaq9hKLZN8bMUWzxmcnZVS3omf4IPK+BrewlnWjO1WmUsMYuSjKh4UJuV4+Lqmw==", - "dev": true, - "dependencies": { - "is-extglob": "^2.1.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/lit-analyzer/node_modules/is-buffer": { - "version": "1.1.6", - "resolved": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz", - "integrity": "sha512-NcdALwpXkTm5Zvvbk7owOUSvVvBKDgKP5/ewfXEznmQFfs4ZRmanOeKBTjRVjka3QFoN6XJ+9F3USqfHqTaU5w==", - "dev": true - }, - "node_modules/lit-analyzer/node_modules/is-extendable": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz", - "integrity": "sha512-arnXMxT1hhoKo9k1LZdmlNyJdDDfy2v0fXjFlmok4+i8ul/6WlbVge9bhM74OpNPQPMGUToDtz+KXa1PneJxOA==", - "dev": true, - "dependencies": { - "is-plain-object": "^2.0.4" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/lit-analyzer/node_modules/is-number": { - "version": "3.0.0", - "resolved": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz", - "integrity": "sha512-4cboCqIpliH+mAvFNegjZQ4kgKc3ZUhQVr3HvWbSh5q3WH2v82ct+T2Y1hdU5Gdtorx/cLifQjqCbL7bpznLTg==", - "dev": true, - "dependencies": { - "kind-of": "^3.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/lit-analyzer/node_modules/is-number/node_modules/kind-of": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz", - "integrity": "sha512-NOW9QQXMoZGg/oqnVNoNTTIFEIid1627WCffUBJEdMxYApq7mNE7CpzucIPc+ZQg25Phej7IJSmX3hO+oblOtQ==", - "dev": true, - "dependencies": { - "is-buffer": "^1.1.5" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/lit-analyzer/node_modules/is-plain-object": { - "version": "2.0.4", - "resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz", - "integrity": "sha512-h5PpgXkWitc38BBMYawTYMWJHFZJVnBquFE57xFpjB8pJFiF6gZ+bU+WyI/yqXiFR5mdLsgYNaPe8uao6Uv9Og==", - "dev": true, - "dependencies": { - "isobject": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/lit-analyzer/node_modules/micromatch": { - "version": "3.1.10", - "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.10.tgz", - "integrity": "sha512-MWikgl9n9M3w+bpsY3He8L+w9eF9338xRl8IAO5viDizwSzziFEyUzo2xrrloB64ADbTf8uA8vRqqttDTOmccg==", - "dev": true, - "dependencies": { - "arr-diff": "^4.0.0", - "array-unique": "^0.3.2", - "braces": "^2.3.1", - "define-property": "^2.0.2", - "extend-shallow": "^3.0.2", - "extglob": "^2.0.4", - "fragment-cache": "^0.2.1", - "kind-of": "^6.0.2", - "nanomatch": "^1.2.9", - "object.pick": "^1.3.0", - "regex-not": "^1.0.0", - "snapdragon": "^0.8.1", - "to-regex": "^3.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/lit-analyzer/node_modules/micromatch/node_modules/extend-shallow": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-3.0.2.tgz", - "integrity": "sha512-BwY5b5Ql4+qZoefgMj2NUmx+tehVTH/Kf4k1ZEtOHNFcm2wSxMRo992l6X3TIgni2eZVTZ85xMOjF31fwZAj6Q==", - "dev": true, - "dependencies": { - "assign-symbols": "^1.0.0", - "is-extendable": "^1.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/lit-analyzer/node_modules/parse5": { "version": "5.1.0", "resolved": "https://registry.npmjs.org/parse5/-/parse5-5.1.0.tgz", "integrity": "sha512-fxNG2sQjHvlVAYmzBZS9YlDp6PTSSDwa98vkD4QgVDDCAo84z5X1t5XyJQ62ImdLXx5NdIIfihey6xpum9/gRQ==", "dev": true }, - "node_modules/lit-analyzer/node_modules/to-regex-range": { - "version": "2.1.1", - "resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-2.1.1.tgz", - "integrity": "sha512-ZZWNfCjUokXXDGXFpZehJIkZqq91BcULFq/Pi7M5i4JnxXdhMKAK682z8bCW3o8Hj1wuuzoKcW3DfVzaP6VuNg==", - "dev": true, - "dependencies": { - "is-number": "^3.0.0", - "repeat-string": "^1.6.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/lit-element": { "version": "3.3.3", "resolved": "https://registry.npmjs.org/lit-element/-/lit-element-3.3.3.tgz", @@ -17189,33 +16417,12 @@ "tmpl": "1.0.5" } }, - "node_modules/map-cache": { - "version": "0.2.2", - "resolved": "https://registry.npmjs.org/map-cache/-/map-cache-0.2.2.tgz", - "integrity": "sha512-8y/eV9QQZCiyn1SprXSrCmqJN0yNRATe+PO8ztwqrvrbdRLA3eYJF0yaR0YayLWkMbsQSKWS9N2gPcGEc4UsZg==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/map-or-similar": { "version": "1.5.0", "resolved": "https://registry.npmjs.org/map-or-similar/-/map-or-similar-1.5.0.tgz", "integrity": "sha512-0aF7ZmVon1igznGI4VS30yugpduQW3y3GkcgGJOp7d8x8QrizhigUxjI/m2UojsXXto+jLAH3KSz+xOJTiORjg==", "dev": true }, - "node_modules/map-visit": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/map-visit/-/map-visit-1.0.0.tgz", - "integrity": "sha512-4y7uGv8bd2WdM9vpQsiQNo41Ln1NvhvDRuVt0k2JZQ+ezN2uaQes7lZeZ+QQUHOLQAtDaBJ+7wCbi+ab/KFs+w==", - "dev": true, - "dependencies": { - "object-visit": "^1.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/markdown-to-jsx": { "version": "7.3.2", "resolved": "https://registry.npmjs.org/markdown-to-jsx/-/markdown-to-jsx-7.3.2.tgz", @@ -17354,9 +16561,9 @@ } }, "node_modules/mermaid": { - "version": "10.5.1", - "resolved": "https://registry.npmjs.org/mermaid/-/mermaid-10.5.1.tgz", - "integrity": "sha512-+4mkGW5PptHDSae4YZ/Jw1pEOf0irrB/aCL6BwZcJPhr5+84UJBrQnHTvyPqCUz67tXkrDvSzWv4B+J2hLO78g==", + "version": "10.6.0", + "resolved": "https://registry.npmjs.org/mermaid/-/mermaid-10.6.0.tgz", + "integrity": "sha512-Hcti+Q2NiWnb2ZCijSX89Bn2i7TCUwosBdIn/d+u63Sz7y40XU6EKMctT4UX4qZuZGfKGZpfOeim2/KTrdR7aQ==", "dependencies": { "@braintree/sanitize-url": "^6.0.1", "@types/d3-scale": "^4.0.3", @@ -17947,43 +17154,6 @@ "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==", "dev": true }, - "node_modules/mixin-deep": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/mixin-deep/-/mixin-deep-1.3.2.tgz", - "integrity": "sha512-WRoDn//mXBiJ1H40rqa3vH0toePwSsGb45iInWlTySa+Uu4k3tYUSxa2v1KqAiLtvlrSzaExqS1gtk96A9zvEA==", - "dev": true, - "dependencies": { - "for-in": "^1.0.2", - "is-extendable": "^1.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/mixin-deep/node_modules/is-extendable": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz", - "integrity": "sha512-arnXMxT1hhoKo9k1LZdmlNyJdDDfy2v0fXjFlmok4+i8ul/6WlbVge9bhM74OpNPQPMGUToDtz+KXa1PneJxOA==", - "dev": true, - "dependencies": { - "is-plain-object": "^2.0.4" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/mixin-deep/node_modules/is-plain-object": { - "version": "2.0.4", - "resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz", - "integrity": "sha512-h5PpgXkWitc38BBMYawTYMWJHFZJVnBquFE57xFpjB8pJFiF6gZ+bU+WyI/yqXiFR5mdLsgYNaPe8uao6Uv9Og==", - "dev": true, - "dependencies": { - "isobject": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/mkdirp": { "version": "0.5.6", "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz", @@ -18137,65 +17307,6 @@ "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1" } }, - "node_modules/nanomatch": { - "version": "1.2.13", - "resolved": "https://registry.npmjs.org/nanomatch/-/nanomatch-1.2.13.tgz", - "integrity": "sha512-fpoe2T0RbHwBTBUOftAfBPaDEi06ufaUai0mE6Yn1kacc3SnTErfb/h+X94VXzI64rKFHYImXSvdwGGCmwOqCA==", - "dev": true, - "dependencies": { - "arr-diff": "^4.0.0", - "array-unique": "^0.3.2", - "define-property": "^2.0.2", - "extend-shallow": "^3.0.2", - "fragment-cache": "^0.2.1", - "is-windows": "^1.0.2", - "kind-of": "^6.0.2", - "object.pick": "^1.3.0", - "regex-not": "^1.0.0", - "snapdragon": "^0.8.1", - "to-regex": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/nanomatch/node_modules/extend-shallow": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-3.0.2.tgz", - "integrity": "sha512-BwY5b5Ql4+qZoefgMj2NUmx+tehVTH/Kf4k1ZEtOHNFcm2wSxMRo992l6X3TIgni2eZVTZ85xMOjF31fwZAj6Q==", - "dev": true, - "dependencies": { - "assign-symbols": "^1.0.0", - "is-extendable": "^1.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/nanomatch/node_modules/is-extendable": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz", - "integrity": "sha512-arnXMxT1hhoKo9k1LZdmlNyJdDDfy2v0fXjFlmok4+i8ul/6WlbVge9bhM74OpNPQPMGUToDtz+KXa1PneJxOA==", - "dev": true, - "dependencies": { - "is-plain-object": "^2.0.4" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/nanomatch/node_modules/is-plain-object": { - "version": "2.0.4", - "resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz", - "integrity": "sha512-h5PpgXkWitc38BBMYawTYMWJHFZJVnBquFE57xFpjB8pJFiF6gZ+bU+WyI/yqXiFR5mdLsgYNaPe8uao6Uv9Og==", - "dev": true, - "dependencies": { - "isobject": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/napi-build-utils": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/napi-build-utils/-/napi-build-utils-1.0.2.tgz", @@ -18489,97 +17600,6 @@ "node": ">=0.10.0" } }, - "node_modules/object-copy": { - "version": "0.1.0", - "resolved": "https://registry.npmjs.org/object-copy/-/object-copy-0.1.0.tgz", - "integrity": "sha512-79LYn6VAb63zgtmAteVOWo9Vdj71ZVBy3Pbse+VqxDpEP83XuujMrGqHIwAXJ5I/aM0zU7dIyIAhifVTPrNItQ==", - "dev": true, - "dependencies": { - "copy-descriptor": "^0.1.0", - "define-property": "^0.2.5", - "kind-of": "^3.0.3" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/object-copy/node_modules/define-property": { - "version": "0.2.5", - "resolved": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz", - "integrity": "sha512-Rr7ADjQZenceVOAKop6ALkkRAmH1A4Gx9hV/7ZujPUN2rkATqFO0JZLZInbAjpZYoJ1gUx8MRMQVkYemcbMSTA==", - "dev": true, - "dependencies": { - "is-descriptor": "^0.1.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/object-copy/node_modules/is-accessor-descriptor": { - "version": "0.1.6", - "resolved": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz", - "integrity": "sha512-e1BM1qnDbMRG3ll2U9dSK0UMHuWOs3pY3AtcFsmvwPtKL3MML/Q86i+GilLfvqEs4GW+ExB91tQ3Ig9noDIZ+A==", - "dev": true, - "dependencies": { - "kind-of": "^3.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/object-copy/node_modules/is-buffer": { - "version": "1.1.6", - "resolved": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz", - "integrity": "sha512-NcdALwpXkTm5Zvvbk7owOUSvVvBKDgKP5/ewfXEznmQFfs4ZRmanOeKBTjRVjka3QFoN6XJ+9F3USqfHqTaU5w==", - "dev": true - }, - "node_modules/object-copy/node_modules/is-data-descriptor": { - "version": "0.1.4", - "resolved": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz", - "integrity": "sha512-+w9D5ulSoBNlmw9OHn3U2v51SyoCd0he+bB3xMl62oijhrspxowjU+AIcDY0N3iEJbUEkB15IlMASQsxYigvXg==", - "dev": true, - "dependencies": { - "kind-of": "^3.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/object-copy/node_modules/is-descriptor": { - "version": "0.1.6", - "resolved": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.6.tgz", - "integrity": "sha512-avDYr0SB3DwO9zsMov0gKCESFYqCnE4hq/4z3TdUlukEy5t9C0YRq7HLrsN52NAcqXKaepeCD0n+B0arnVG3Hg==", - "dev": true, - "dependencies": { - "is-accessor-descriptor": "^0.1.6", - "is-data-descriptor": "^0.1.4", - "kind-of": "^5.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/object-copy/node_modules/is-descriptor/node_modules/kind-of": { - "version": "5.1.0", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-5.1.0.tgz", - "integrity": "sha512-NGEErnH6F2vUuXDh+OlbcKW7/wOcfdRHaZ7VWtqCztfHri/++YKmP51OdWeGPuqCOba6kk2OTe5d02VmTB80Pw==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/object-copy/node_modules/kind-of": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz", - "integrity": "sha512-NOW9QQXMoZGg/oqnVNoNTTIFEIid1627WCffUBJEdMxYApq7mNE7CpzucIPc+ZQg25Phej7IJSmX3hO+oblOtQ==", - "dev": true, - "dependencies": { - "is-buffer": "^1.1.5" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/object-inspect": { "version": "1.12.3", "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.12.3.tgz", @@ -18613,18 +17633,6 @@ "node": ">= 0.4" } }, - "node_modules/object-visit": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/object-visit/-/object-visit-1.0.1.tgz", - "integrity": "sha512-GBaMwwAVK9qbQN3Scdo0OyvgPW7l3lnaVMj84uTOZlswkX0KpF6fyDBJhtTthf7pymztoN36/KEr1DyhF96zEA==", - "dev": true, - "dependencies": { - "isobject": "^3.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/object.assign": { "version": "4.1.4", "resolved": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.4.tgz", @@ -18643,18 +17651,6 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/object.pick": { - "version": "1.3.0", - "resolved": "https://registry.npmjs.org/object.pick/-/object.pick-1.3.0.tgz", - "integrity": "sha512-tqa/UMy/CCoYmj+H5qc07qvSL9dqcs/WZENZ1JbtWBlATP+iVOe778gE6MSijnyCnORzDuX6hU+LA4SZ09YjFQ==", - "dev": true, - "dependencies": { - "isobject": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/on-finished": { "version": "2.4.1", "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz", @@ -18923,21 +17919,6 @@ "node": ">= 0.8" } }, - "node_modules/pascalcase": { - "version": "0.1.1", - "resolved": "https://registry.npmjs.org/pascalcase/-/pascalcase-0.1.1.tgz", - "integrity": "sha512-XHXfu/yOQRy9vYOtUDVMN60OEJjW013GoObG1o+xwQTpB9eYJX/BjXMsdW13ZDPruFhYYn0AG22w0xgQMwl3Nw==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/path-dirname": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/path-dirname/-/path-dirname-1.0.2.tgz", - "integrity": "sha512-ALzNPpyNq9AqXMBjeymIjFDAkAFH06mHJH/cSBHAgU0s4vfpBn6b2nf8tiRLvagKD8RbTpq2FKTBg7cl9l3c7Q==", - "dev": true - }, "node_modules/path-exists": { "version": "4.0.0", "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz", @@ -19106,15 +18087,6 @@ "node": ">=10" } }, - "node_modules/posix-character-classes": { - "version": "0.1.1", - "resolved": "https://registry.npmjs.org/posix-character-classes/-/posix-character-classes-0.1.1.tgz", - "integrity": "sha512-xTgYBc3fuo7Yt7JbiuFxSYGToMoz8fLoE6TC9Wx1P/u+LfeThMOAqmuyECnlBaaJb+u1m9hHiXUEtwW4OzfUJg==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/postcss": { "version": "8.4.31", "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.31.tgz", @@ -19926,56 +18898,6 @@ "@babel/runtime": "^7.8.4" } }, - "node_modules/regex-not": { - "version": "1.0.2", - "resolved": "https://registry.npmjs.org/regex-not/-/regex-not-1.0.2.tgz", - "integrity": "sha512-J6SDjUgDxQj5NusnOtdFxDwN/+HWykR8GELwctJ7mdqhcyy1xEc4SRFHUXvxTp661YaVKAjfRLZ9cCqS6tn32A==", - "dev": true, - "dependencies": { - "extend-shallow": "^3.0.2", - "safe-regex": "^1.1.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/regex-not/node_modules/extend-shallow": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-3.0.2.tgz", - "integrity": "sha512-BwY5b5Ql4+qZoefgMj2NUmx+tehVTH/Kf4k1ZEtOHNFcm2wSxMRo992l6X3TIgni2eZVTZ85xMOjF31fwZAj6Q==", - "dev": true, - "dependencies": { - "assign-symbols": "^1.0.0", - "is-extendable": "^1.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/regex-not/node_modules/is-extendable": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz", - "integrity": "sha512-arnXMxT1hhoKo9k1LZdmlNyJdDDfy2v0fXjFlmok4+i8ul/6WlbVge9bhM74OpNPQPMGUToDtz+KXa1PneJxOA==", - "dev": true, - "dependencies": { - "is-plain-object": "^2.0.4" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/regex-not/node_modules/is-plain-object": { - "version": "2.0.4", - "resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz", - "integrity": "sha512-h5PpgXkWitc38BBMYawTYMWJHFZJVnBquFE57xFpjB8pJFiF6gZ+bU+WyI/yqXiFR5mdLsgYNaPe8uao6Uv9Og==", - "dev": true, - "dependencies": { - "isobject": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/regexp.prototype.flags": { "version": "1.5.0", "resolved": "https://registry.npmjs.org/regexp.prototype.flags/-/regexp.prototype.flags-1.5.0.tgz", @@ -20073,15 +18995,6 @@ "url": "https://opencollective.com/unified" } }, - "node_modules/repeat-element": { - "version": "1.1.4", - "resolved": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.4.tgz", - "integrity": "sha512-LFiNfRcSu7KK3evMyYOuCzv3L10TW7yC1G2/+StMjK8Y6Vqd2MG7r/Qjw4ghtuCOjFvlnms/iMmLqpvW/ES/WQ==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/repeat-string": { "version": "1.6.1", "resolved": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz", @@ -20099,12 +19012,6 @@ "node": ">=0.10.0" } }, - "node_modules/require-main-filename": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz", - "integrity": "sha512-NKN5kMDylKuldxYLSUfrbo5Tuzh4hd+2E8NPPX02mZtn1VuREQToYe/ZdlJy+J3uCpfaiGF05e7B8W0iXbQHmg==", - "dev": true - }, "node_modules/requireindex": { "version": "1.2.0", "resolved": "https://registry.npmjs.org/requireindex/-/requireindex-1.2.0.tgz", @@ -20140,13 +19047,6 @@ "node": ">=8" } }, - "node_modules/resolve-url": { - "version": "0.2.1", - "resolved": "https://registry.npmjs.org/resolve-url/-/resolve-url-0.2.1.tgz", - "integrity": "sha512-ZuF55hVUQaaczgOIwqWzkEcEidmlD/xl44x1UZnhOXcYuFN2S6+rcxpG+C1N3So0wvNI3DmJICUFfu2SxhBmvg==", - "deprecated": "https://github.com/lydell/resolve-url#deprecated", - "dev": true - }, "node_modules/restore-cursor": { "version": "3.1.0", "resolved": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-3.1.0.tgz", @@ -20160,15 +19060,6 @@ "node": ">=8" } }, - "node_modules/ret": { - "version": "0.1.15", - "resolved": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz", - "integrity": "sha512-TTlYpa+OL+vMMNG24xSlQGEJ3B/RzEfUlLct7b5G/ytav+wPrplCpVMFuwzXbkecJrb6IYo1iFb0S9v37754mg==", - "dev": true, - "engines": { - "node": ">=0.12" - } - }, "node_modules/reusify": { "version": "1.0.4", "resolved": "https://registry.npmjs.org/reusify/-/reusify-1.0.4.tgz", @@ -20444,15 +19335,6 @@ "integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==", "devOptional": true }, - "node_modules/safe-regex": { - "version": "1.1.0", - "resolved": "https://registry.npmjs.org/safe-regex/-/safe-regex-1.1.0.tgz", - "integrity": "sha512-aJXcif4xnaNUzvUuC5gcb46oTS7zvg4jpMTnuqtrEPlR3vFr4pxtdTwaF1Qs3Enjn9HK+ZlwQui+a7z0SywIzg==", - "dev": true, - "dependencies": { - "ret": "~0.1.10" - } - }, "node_modules/safe-regex-test": { "version": "1.0.0", "resolved": "https://registry.npmjs.org/safe-regex-test/-/safe-regex-test-1.0.0.tgz", @@ -20572,39 +19454,6 @@ "node": ">= 0.8.0" } }, - "node_modules/set-blocking": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", - "integrity": "sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==", - "dev": true - }, - "node_modules/set-value": { - "version": "2.0.1", - "resolved": "https://registry.npmjs.org/set-value/-/set-value-2.0.1.tgz", - "integrity": "sha512-JxHc1weCN68wRY0fhCoXpyK55m/XPHafOmK4UWD7m2CI14GMcFypt4w/0+NV5f/ZMby2F6S2wwA7fgynh9gWSw==", - "dev": true, - "dependencies": { - "extend-shallow": "^2.0.1", - "is-extendable": "^0.1.1", - "is-plain-object": "^2.0.3", - "split-string": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/set-value/node_modules/is-plain-object": { - "version": "2.0.4", - "resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz", - "integrity": "sha512-h5PpgXkWitc38BBMYawTYMWJHFZJVnBquFE57xFpjB8pJFiF6gZ+bU+WyI/yqXiFR5mdLsgYNaPe8uao6Uv9Og==", - "dev": true, - "dependencies": { - "isobject": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/setprototypeof": { "version": "1.2.0", "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz", @@ -20817,194 +19666,6 @@ "integrity": "sha512-MqR3fVulhjWuRNSMydnTlweu38UhQ0HXM4buStD/S3mc/BzX3CuM9OmhyQpmtYCvoYdl5ris6TI0ZqH355Ymqg==", "dev": true }, - "node_modules/snapdragon": { - "version": "0.8.2", - "resolved": "https://registry.npmjs.org/snapdragon/-/snapdragon-0.8.2.tgz", - "integrity": "sha512-FtyOnWN/wCHTVXOMwvSv26d+ko5vWlIDD6zoUJ7LW8vh+ZBC8QdljveRP+crNrtBwioEUWy/4dMtbBjA4ioNlg==", - "dev": true, - "dependencies": { - "base": "^0.11.1", - "debug": "^2.2.0", - "define-property": "^0.2.5", - "extend-shallow": "^2.0.1", - "map-cache": "^0.2.2", - "source-map": "^0.5.6", - "source-map-resolve": "^0.5.0", - "use": "^3.1.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/snapdragon-node": { - "version": "2.1.1", - "resolved": "https://registry.npmjs.org/snapdragon-node/-/snapdragon-node-2.1.1.tgz", - "integrity": "sha512-O27l4xaMYt/RSQ5TR3vpWCAB5Kb/czIcqUFOM/C4fYcLnbZUc1PkjTAMjof2pBWaSTwOUd6qUHcFGVGj7aIwnw==", - "dev": true, - "dependencies": { - "define-property": "^1.0.0", - "isobject": "^3.0.0", - "snapdragon-util": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/snapdragon-node/node_modules/define-property": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/define-property/-/define-property-1.0.0.tgz", - "integrity": "sha512-cZTYKFWspt9jZsMscWo8sc/5lbPC9Q0N5nBLgb+Yd915iL3udB1uFgS3B8YCx66UVHq018DAVFoee7x+gxggeA==", - "dev": true, - "dependencies": { - "is-descriptor": "^1.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/snapdragon-util": { - "version": "3.0.1", - "resolved": "https://registry.npmjs.org/snapdragon-util/-/snapdragon-util-3.0.1.tgz", - "integrity": "sha512-mbKkMdQKsjX4BAL4bRYTj21edOf8cN7XHdYUJEe+Zn99hVEYcMvKPct1IqNe7+AZPirn8BCDOQBHQZknqmKlZQ==", - "dev": true, - "dependencies": { - "kind-of": "^3.2.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/snapdragon-util/node_modules/is-buffer": { - "version": "1.1.6", - "resolved": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz", - "integrity": "sha512-NcdALwpXkTm5Zvvbk7owOUSvVvBKDgKP5/ewfXEznmQFfs4ZRmanOeKBTjRVjka3QFoN6XJ+9F3USqfHqTaU5w==", - "dev": true - }, - "node_modules/snapdragon-util/node_modules/kind-of": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz", - "integrity": "sha512-NOW9QQXMoZGg/oqnVNoNTTIFEIid1627WCffUBJEdMxYApq7mNE7CpzucIPc+ZQg25Phej7IJSmX3hO+oblOtQ==", - "dev": true, - "dependencies": { - "is-buffer": "^1.1.5" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/snapdragon/node_modules/debug": { - "version": "2.6.9", - "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz", - "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==", - "dev": true, - "dependencies": { - "ms": "2.0.0" - } - }, - "node_modules/snapdragon/node_modules/define-property": { - "version": "0.2.5", - "resolved": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz", - "integrity": "sha512-Rr7ADjQZenceVOAKop6ALkkRAmH1A4Gx9hV/7ZujPUN2rkATqFO0JZLZInbAjpZYoJ1gUx8MRMQVkYemcbMSTA==", - "dev": true, - "dependencies": { - "is-descriptor": "^0.1.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/snapdragon/node_modules/is-accessor-descriptor": { - "version": "0.1.6", - "resolved": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz", - "integrity": "sha512-e1BM1qnDbMRG3ll2U9dSK0UMHuWOs3pY3AtcFsmvwPtKL3MML/Q86i+GilLfvqEs4GW+ExB91tQ3Ig9noDIZ+A==", - "dev": true, - "dependencies": { - "kind-of": "^3.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/snapdragon/node_modules/is-accessor-descriptor/node_modules/kind-of": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz", - "integrity": "sha512-NOW9QQXMoZGg/oqnVNoNTTIFEIid1627WCffUBJEdMxYApq7mNE7CpzucIPc+ZQg25Phej7IJSmX3hO+oblOtQ==", - "dev": true, - "dependencies": { - "is-buffer": "^1.1.5" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/snapdragon/node_modules/is-buffer": { - "version": "1.1.6", - "resolved": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz", - "integrity": "sha512-NcdALwpXkTm5Zvvbk7owOUSvVvBKDgKP5/ewfXEznmQFfs4ZRmanOeKBTjRVjka3QFoN6XJ+9F3USqfHqTaU5w==", - "dev": true - }, - "node_modules/snapdragon/node_modules/is-data-descriptor": { - "version": "0.1.4", - "resolved": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz", - "integrity": "sha512-+w9D5ulSoBNlmw9OHn3U2v51SyoCd0he+bB3xMl62oijhrspxowjU+AIcDY0N3iEJbUEkB15IlMASQsxYigvXg==", - "dev": true, - "dependencies": { - "kind-of": "^3.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/snapdragon/node_modules/is-data-descriptor/node_modules/kind-of": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz", - "integrity": "sha512-NOW9QQXMoZGg/oqnVNoNTTIFEIid1627WCffUBJEdMxYApq7mNE7CpzucIPc+ZQg25Phej7IJSmX3hO+oblOtQ==", - "dev": true, - "dependencies": { - "is-buffer": "^1.1.5" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/snapdragon/node_modules/is-descriptor": { - "version": "0.1.6", - "resolved": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.6.tgz", - "integrity": "sha512-avDYr0SB3DwO9zsMov0gKCESFYqCnE4hq/4z3TdUlukEy5t9C0YRq7HLrsN52NAcqXKaepeCD0n+B0arnVG3Hg==", - "dev": true, - "dependencies": { - "is-accessor-descriptor": "^0.1.6", - "is-data-descriptor": "^0.1.4", - "kind-of": "^5.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/snapdragon/node_modules/kind-of": { - "version": "5.1.0", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-5.1.0.tgz", - "integrity": "sha512-NGEErnH6F2vUuXDh+OlbcKW7/wOcfdRHaZ7VWtqCztfHri/++YKmP51OdWeGPuqCOba6kk2OTe5d02VmTB80Pw==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/snapdragon/node_modules/ms": { - "version": "2.0.0", - "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz", - "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==", - "dev": true - }, - "node_modules/snapdragon/node_modules/source-map": { - "version": "0.5.7", - "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz", - "integrity": "sha512-LbrmJOMUSdEVxIKvdcJzQC+nQhe8FUZQTXQy6+I75skNgn3OoQ0DZA8YnFa7gp8tqtL3KPf1kmo0R5DoApeSGQ==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/source-map": { "version": "0.6.1", "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz", @@ -21024,20 +19685,6 @@ "node": ">=0.10.0" } }, - "node_modules/source-map-resolve": { - "version": "0.5.3", - "resolved": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.5.3.tgz", - "integrity": "sha512-Htz+RnsXWk5+P2slx5Jh3Q66vhQj1Cllm0zvnaY98+NFx+Dv2CF/f5O/t8x+KaNdrdIAsruNzoh/KpialbqAnw==", - "deprecated": "See https://github.com/lydell/source-map-resolve#deprecated", - "dev": true, - "dependencies": { - "atob": "^2.1.2", - "decode-uri-component": "^0.2.0", - "resolve-url": "^0.2.1", - "source-map-url": "^0.4.0", - "urix": "^0.1.0" - } - }, "node_modules/source-map-support": { "version": "0.5.21", "resolved": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz", @@ -21048,13 +19695,6 @@ "source-map": "^0.6.0" } }, - "node_modules/source-map-url": { - "version": "0.4.1", - "resolved": "https://registry.npmjs.org/source-map-url/-/source-map-url-0.4.1.tgz", - "integrity": "sha512-cPiFOTLUKvJFIg4SKVScy4ilPPW6rFgMgfuZJPNoDuMs3nC1HbMUycBoJw77xFIp6z1UJQJOfx6C9GMH80DiTw==", - "deprecated": "See https://github.com/lydell/source-map-url#deprecated", - "dev": true - }, "node_modules/sourcemap-codec": { "version": "1.4.8", "resolved": "https://registry.npmjs.org/sourcemap-codec/-/sourcemap-codec-1.4.8.tgz", @@ -21104,55 +19744,6 @@ "integrity": "sha512-XkD+zwiqXHikFZm4AX/7JSCXA98U5Db4AFd5XUg/+9UNtnH75+Z9KxtpYiJZx36mUDVOwH83pl7yvCer6ewM3w==", "dev": true }, - "node_modules/split-string": { - "version": "3.1.0", - "resolved": "https://registry.npmjs.org/split-string/-/split-string-3.1.0.tgz", - "integrity": "sha512-NzNVhJDYpwceVVii8/Hu6DKfD2G+NrQHlS/V/qgv763EYudVwEcMQNxd2lh+0VrUByXN/oJkl5grOhYWvQUYiw==", - "dev": true, - "dependencies": { - "extend-shallow": "^3.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/split-string/node_modules/extend-shallow": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-3.0.2.tgz", - "integrity": "sha512-BwY5b5Ql4+qZoefgMj2NUmx+tehVTH/Kf4k1ZEtOHNFcm2wSxMRo992l6X3TIgni2eZVTZ85xMOjF31fwZAj6Q==", - "dev": true, - "dependencies": { - "assign-symbols": "^1.0.0", - "is-extendable": "^1.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/split-string/node_modules/is-extendable": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz", - "integrity": "sha512-arnXMxT1hhoKo9k1LZdmlNyJdDDfy2v0fXjFlmok4+i8ul/6WlbVge9bhM74OpNPQPMGUToDtz+KXa1PneJxOA==", - "dev": true, - "dependencies": { - "is-plain-object": "^2.0.4" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/split-string/node_modules/is-plain-object": { - "version": "2.0.4", - "resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz", - "integrity": "sha512-h5PpgXkWitc38BBMYawTYMWJHFZJVnBquFE57xFpjB8pJFiF6gZ+bU+WyI/yqXiFR5mdLsgYNaPe8uao6Uv9Og==", - "dev": true, - "dependencies": { - "isobject": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/sprintf-js": { "version": "1.0.3", "resolved": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz", @@ -21164,108 +19755,6 @@ "resolved": "https://registry.npmjs.org/stampit/-/stampit-4.3.2.tgz", "integrity": "sha512-pE2org1+ZWQBnIxRPrBM2gVupkuDD0TTNIo1H6GdT/vO82NXli2z8lRE8cu/nBIHrcOCXFBAHpb9ZldrB2/qOA==" }, - "node_modules/static-extend": { - "version": "0.1.2", - "resolved": "https://registry.npmjs.org/static-extend/-/static-extend-0.1.2.tgz", - "integrity": "sha512-72E9+uLc27Mt718pMHt9VMNiAL4LMsmDbBva8mxWUCkT07fSzEGMYUCk0XWY6lp0j6RBAG4cJ3mWuZv2OE3s0g==", - "dev": true, - "dependencies": { - "define-property": "^0.2.5", - "object-copy": "^0.1.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/static-extend/node_modules/define-property": { - "version": "0.2.5", - "resolved": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz", - "integrity": "sha512-Rr7ADjQZenceVOAKop6ALkkRAmH1A4Gx9hV/7ZujPUN2rkATqFO0JZLZInbAjpZYoJ1gUx8MRMQVkYemcbMSTA==", - "dev": true, - "dependencies": { - "is-descriptor": "^0.1.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/static-extend/node_modules/is-accessor-descriptor": { - "version": "0.1.6", - "resolved": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz", - "integrity": "sha512-e1BM1qnDbMRG3ll2U9dSK0UMHuWOs3pY3AtcFsmvwPtKL3MML/Q86i+GilLfvqEs4GW+ExB91tQ3Ig9noDIZ+A==", - "dev": true, - "dependencies": { - "kind-of": "^3.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/static-extend/node_modules/is-accessor-descriptor/node_modules/kind-of": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz", - "integrity": "sha512-NOW9QQXMoZGg/oqnVNoNTTIFEIid1627WCffUBJEdMxYApq7mNE7CpzucIPc+ZQg25Phej7IJSmX3hO+oblOtQ==", - "dev": true, - "dependencies": { - "is-buffer": "^1.1.5" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/static-extend/node_modules/is-buffer": { - "version": "1.1.6", - "resolved": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz", - "integrity": "sha512-NcdALwpXkTm5Zvvbk7owOUSvVvBKDgKP5/ewfXEznmQFfs4ZRmanOeKBTjRVjka3QFoN6XJ+9F3USqfHqTaU5w==", - "dev": true - }, - "node_modules/static-extend/node_modules/is-data-descriptor": { - "version": "0.1.4", - "resolved": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz", - "integrity": "sha512-+w9D5ulSoBNlmw9OHn3U2v51SyoCd0he+bB3xMl62oijhrspxowjU+AIcDY0N3iEJbUEkB15IlMASQsxYigvXg==", - "dev": true, - "dependencies": { - "kind-of": "^3.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/static-extend/node_modules/is-data-descriptor/node_modules/kind-of": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz", - "integrity": "sha512-NOW9QQXMoZGg/oqnVNoNTTIFEIid1627WCffUBJEdMxYApq7mNE7CpzucIPc+ZQg25Phej7IJSmX3hO+oblOtQ==", - "dev": true, - "dependencies": { - "is-buffer": "^1.1.5" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/static-extend/node_modules/is-descriptor": { - "version": "0.1.6", - "resolved": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.6.tgz", - "integrity": "sha512-avDYr0SB3DwO9zsMov0gKCESFYqCnE4hq/4z3TdUlukEy5t9C0YRq7HLrsN52NAcqXKaepeCD0n+B0arnVG3Hg==", - "dev": true, - "dependencies": { - "is-accessor-descriptor": "^0.1.6", - "is-data-descriptor": "^0.1.4", - "kind-of": "^5.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/static-extend/node_modules/kind-of": { - "version": "5.1.0", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-5.1.0.tgz", - "integrity": "sha512-NGEErnH6F2vUuXDh+OlbcKW7/wOcfdRHaZ7VWtqCztfHri/++YKmP51OdWeGPuqCOba6kk2OTe5d02VmTB80Pw==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/statuses": { "version": "2.0.1", "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz", @@ -22065,51 +20554,6 @@ "node": ">=4" } }, - "node_modules/to-object-path": { - "version": "0.3.0", - "resolved": "https://registry.npmjs.org/to-object-path/-/to-object-path-0.3.0.tgz", - "integrity": "sha512-9mWHdnGRuh3onocaHzukyvCZhzvr6tiflAy/JRFXcJX0TjgfWA9pk9t8CMbzmBE4Jfw58pXbkngtBtqYxzNEyg==", - "dev": true, - "dependencies": { - "kind-of": "^3.0.2" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/to-object-path/node_modules/is-buffer": { - "version": "1.1.6", - "resolved": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz", - "integrity": "sha512-NcdALwpXkTm5Zvvbk7owOUSvVvBKDgKP5/ewfXEznmQFfs4ZRmanOeKBTjRVjka3QFoN6XJ+9F3USqfHqTaU5w==", - "dev": true - }, - "node_modules/to-object-path/node_modules/kind-of": { - "version": "3.2.2", - "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz", - "integrity": "sha512-NOW9QQXMoZGg/oqnVNoNTTIFEIid1627WCffUBJEdMxYApq7mNE7CpzucIPc+ZQg25Phej7IJSmX3hO+oblOtQ==", - "dev": true, - "dependencies": { - "is-buffer": "^1.1.5" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/to-regex": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/to-regex/-/to-regex-3.0.2.tgz", - "integrity": "sha512-FWtleNAtZ/Ki2qtqej2CXTOayOH9bHDQF+Q48VpWyDXjbYxA4Yz8iDB31zXOBUlOHHKidDbqGVrTUvQMPmBGBw==", - "dev": true, - "dependencies": { - "define-property": "^2.0.2", - "extend-shallow": "^3.0.2", - "regex-not": "^1.0.2", - "safe-regex": "^1.1.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/to-regex-range": { "version": "5.0.1", "resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz", @@ -22122,43 +20566,6 @@ "node": ">=8.0" } }, - "node_modules/to-regex/node_modules/extend-shallow": { - "version": "3.0.2", - "resolved": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-3.0.2.tgz", - "integrity": "sha512-BwY5b5Ql4+qZoefgMj2NUmx+tehVTH/Kf4k1ZEtOHNFcm2wSxMRo992l6X3TIgni2eZVTZ85xMOjF31fwZAj6Q==", - "dev": true, - "dependencies": { - "assign-symbols": "^1.0.0", - "is-extendable": "^1.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/to-regex/node_modules/is-extendable": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz", - "integrity": "sha512-arnXMxT1hhoKo9k1LZdmlNyJdDDfy2v0fXjFlmok4+i8ul/6WlbVge9bhM74OpNPQPMGUToDtz+KXa1PneJxOA==", - "dev": true, - "dependencies": { - "is-plain-object": "^2.0.4" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/to-regex/node_modules/is-plain-object": { - "version": "2.0.4", - "resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz", - "integrity": "sha512-h5PpgXkWitc38BBMYawTYMWJHFZJVnBquFE57xFpjB8pJFiF6gZ+bU+WyI/yqXiFR5mdLsgYNaPe8uao6Uv9Og==", - "dev": true, - "dependencies": { - "isobject": "^3.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/tocbot": { "version": "4.21.1", "resolved": "https://registry.npmjs.org/tocbot/-/tocbot-4.21.1.tgz", @@ -22263,18 +20670,19 @@ } }, "node_modules/ts-lit-plugin": { - "version": "1.2.1", - "resolved": "https://registry.npmjs.org/ts-lit-plugin/-/ts-lit-plugin-1.2.1.tgz", - "integrity": "sha512-k/Me+aT1N9ckC/KuJCAlAJgCHFezOxuOGOzBE0q42xnKbJnUMNl08WqWF6C7OKecCPHIMRk5Wj5o6MDsmt9+qA==", + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/ts-lit-plugin/-/ts-lit-plugin-2.0.0.tgz", + "integrity": "sha512-NPQ235pyUSqBTve/SkPIiIqmfGiR08ov7D2WeEtu/3WpsZyKHhxK7BSMoFQi+LzgCx/2Gr6nd+0Iv5DvlrJXow==", "dev": true, "dependencies": { - "lit-analyzer": "1.2.1" + "lit-analyzer": "^2.0.0", + "web-component-analyzer": "^2.0.0" } }, "node_modules/ts-simple-type": { - "version": "1.0.7", - "resolved": "https://registry.npmjs.org/ts-simple-type/-/ts-simple-type-1.0.7.tgz", - "integrity": "sha512-zKmsCQs4dZaeSKjEA7pLFDv7FHHqAFLPd0Mr//OIJvu8M+4p4bgSFJwZSEBEg3ec9W7RzRz1vi8giiX0+mheBQ==", + "version": "2.0.0-next.0", + "resolved": "https://registry.npmjs.org/ts-simple-type/-/ts-simple-type-2.0.0-next.0.tgz", + "integrity": "sha512-A+hLX83gS+yH6DtzNAhzZbPfU+D9D8lHlTSd7GeoMRBjOt3GRylDqLTYbdmjA4biWvq2xSfpqfIDj2l0OA/BVg==", "dev": true }, "node_modules/ts-toolbelt": { @@ -22543,21 +20951,6 @@ "node": ">=4" } }, - "node_modules/union-value": { - "version": "1.0.1", - "resolved": "https://registry.npmjs.org/union-value/-/union-value-1.0.1.tgz", - "integrity": "sha512-tJfXmxMeWYnczCVs7XAEvIV7ieppALdyepWMkHkwciRpZraG/xwT+s2JN8+pr1+8jCRf80FFzvr+MpQeeoF4Xg==", - "dev": true, - "dependencies": { - "arr-union": "^3.1.0", - "get-value": "^2.0.6", - "is-extendable": "^0.1.1", - "set-value": "^2.0.1" - }, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/unique-string": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/unique-string/-/unique-string-2.0.0.tgz", @@ -22656,60 +21049,6 @@ "resolved": "https://registry.npmjs.org/unraw/-/unraw-3.0.0.tgz", "integrity": "sha512-08/DA66UF65OlpUDIQtbJyrqTR0jTAlJ+jsnkQ4jxR7+K5g5YG1APZKQSMCE1vqqmD+2pv6+IdEjmopFatacvg==" }, - "node_modules/unset-value": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/unset-value/-/unset-value-1.0.0.tgz", - "integrity": "sha512-PcA2tsuGSF9cnySLHTLSh2qrQiJ70mn+r+Glzxv2TWZblxsxCC52BDlZoPCsz7STd9pN7EZetkWZBAvk4cgZdQ==", - "dev": true, - "dependencies": { - "has-value": "^0.3.1", - "isobject": "^3.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/unset-value/node_modules/has-value": { - "version": "0.3.1", - "resolved": "https://registry.npmjs.org/has-value/-/has-value-0.3.1.tgz", - "integrity": "sha512-gpG936j8/MzaeID5Yif+577c17TxaDmhuyVgSwtnL/q8UUTySg8Mecb+8Cf1otgLoD7DDH75axp86ER7LFsf3Q==", - "dev": true, - "dependencies": { - "get-value": "^2.0.3", - "has-values": "^0.1.4", - "isobject": "^2.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/unset-value/node_modules/has-value/node_modules/isobject": { - "version": "2.1.0", - "resolved": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz", - "integrity": "sha512-+OUdGJlgjOBZDfxnDjYYG6zp487z0JGNQq3cYQYg5f5hKR+syHMsaztzGeml/4kGG55CSpKSpWTY+jYGgsHLgA==", - "dev": true, - "dependencies": { - "isarray": "1.0.0" - }, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/unset-value/node_modules/has-values": { - "version": "0.1.4", - "resolved": "https://registry.npmjs.org/has-values/-/has-values-0.1.4.tgz", - "integrity": "sha512-J8S0cEdWuQbqD9//tlZxiMuMNmxB8PlEwvYwuxsTmR1G5RXUePEX/SJn7aD0GMLieuZYSwNH0cQuJGwnYunXRQ==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, - "node_modules/unset-value/node_modules/isarray": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz", - "integrity": "sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==", - "dev": true - }, "node_modules/untildify": { "version": "4.0.0", "resolved": "https://registry.npmjs.org/untildify/-/untildify-4.0.0.tgz", @@ -22758,13 +21097,6 @@ "punycode": "^2.1.0" } }, - "node_modules/urix": { - "version": "0.1.0", - "resolved": "https://registry.npmjs.org/urix/-/urix-0.1.0.tgz", - "integrity": "sha512-Am1ousAhSLBeB9cG/7k7r2R0zj50uDRlZHPGbazid5s9rlF1F/QKYObEKSIunSjIOkJZqwRRLpvewjEkM7pSqg==", - "deprecated": "Please see https://github.com/lydell/urix#deprecated", - "dev": true - }, "node_modules/url": { "version": "0.11.2", "resolved": "https://registry.npmjs.org/url/-/url-0.11.2.tgz", @@ -22779,15 +21111,6 @@ "resolved": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz", "integrity": "sha512-jmYNElW7yvO7TV33CjSmvSiE2yco3bV2czu/OzDKdMNVZQWfxCblURLhf+47syQRBntjfLdd/H0egrzIG+oaFQ==" }, - "node_modules/use": { - "version": "3.1.1", - "resolved": "https://registry.npmjs.org/use/-/use-3.1.1.tgz", - "integrity": "sha512-cwESVXlO3url9YWlFW/TA9cshCEhtu7IKJ/p5soJ/gGpj7vbvFrAY/eIioQ6Dw23KjZhYgiIo8HOs1nQ2vr/oQ==", - "dev": true, - "engines": { - "node": ">=0.10.0" - } - }, "node_modules/use-callback-ref": { "version": "1.3.0", "resolved": "https://registry.npmjs.org/use-callback-ref/-/use-callback-ref-1.3.0.tgz", @@ -23101,34 +21424,21 @@ } }, "node_modules/web-component-analyzer": { - "version": "1.1.7", - "resolved": "https://registry.npmjs.org/web-component-analyzer/-/web-component-analyzer-1.1.7.tgz", - "integrity": "sha512-SqCqN4nU9fU+j0CKXJQ8E4cslLsaezhagY6xoi+hoNPPd55GzR6MY1r5jkoJUVu+g4Wy4uB+JglTt7au4vQ1uA==", + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/web-component-analyzer/-/web-component-analyzer-2.0.0.tgz", + "integrity": "sha512-UEvwfpD+XQw99sLKiH5B1T4QwpwNyWJxp59cnlRwFfhUW6JsQpw5jMeMwi7580sNou8YL3kYoS7BWLm+yJ/jVQ==", "dev": true, "dependencies": { "fast-glob": "^3.2.2", - "ts-simple-type": "~1.0.5", - "typescript": "^3.8.3", - "yargs": "^15.3.1" + "ts-simple-type": "2.0.0-next.0", + "typescript": "~5.2.0", + "yargs": "^17.7.2" }, "bin": { "wca": "cli.js", "web-component-analyzer": "cli.js" } }, - "node_modules/web-component-analyzer/node_modules/typescript": { - "version": "3.9.10", - "resolved": "https://registry.npmjs.org/typescript/-/typescript-3.9.10.tgz", - "integrity": "sha512-w6fIxVE/H1PkLKcCPsFqKE7Kv7QUwhU8qQY2MueZXWx5cPZdwFupLgKK3vntcK98BtNHZtAF4LA/yl2a7k8R6Q==", - "dev": true, - "bin": { - "tsc": "bin/tsc", - "tsserver": "bin/tsserver" - }, - "engines": { - "node": ">=4.2.0" - } - }, "node_modules/web-streams-polyfill": { "version": "4.0.0-beta.3", "resolved": "https://registry.npmjs.org/web-streams-polyfill/-/web-streams-polyfill-4.0.0-beta.3.tgz", @@ -23222,12 +21532,6 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/which-module": { - "version": "2.0.1", - "resolved": "https://registry.npmjs.org/which-module/-/which-module-2.0.1.tgz", - "integrity": "sha512-iBdZ57RDvnOR9AGBhML2vFZf7h8vmBjhoaZqODJBFWHVtKkDmKuHai3cx5PgVMrX5YDNp27AofYbAwctSS+vhQ==", - "dev": true - }, "node_modules/which-typed-array": { "version": "1.1.11", "resolved": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.11.tgz", @@ -23254,9 +21558,9 @@ "dev": true }, "node_modules/wrap-ansi": { - "version": "6.2.0", - "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz", - "integrity": "sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==", + "version": "7.0.0", + "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz", + "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==", "dev": true, "dependencies": { "ansi-styles": "^4.0.0", @@ -23264,7 +21568,10 @@ "strip-ansi": "^6.0.0" }, "engines": { - "node": ">=8" + "node": ">=10" + }, + "funding": { + "url": "https://github.com/chalk/wrap-ansi?sponsor=1" } }, "node_modules/wrap-ansi-cjs": { @@ -23373,10 +21680,13 @@ } }, "node_modules/y18n": { - "version": "4.0.3", - "resolved": "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz", - "integrity": "sha512-JKhqTOwSrqNA1NY5lSztJ1GrBiUodLMmIZuLiDaMRJ+itFd+ABVE8XBjOvIWL+rSqNDC74LCSFmlb/U4UZ4hJQ==", - "dev": true + "version": "5.0.8", + "resolved": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz", + "integrity": "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==", + "dev": true, + "engines": { + "node": ">=10" + } }, "node_modules/yallist": { "version": "3.1.1", @@ -23393,90 +21703,30 @@ } }, "node_modules/yargs": { - "version": "15.4.1", - "resolved": "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz", - "integrity": "sha512-aePbxDmcYW++PaqBsJ+HYUFwCdv4LVvdnhBy78E57PIor8/OVvhMrADFFEDh8DHDFRv/O9i3lPhsENjO7QX0+A==", + "version": "17.7.2", + "resolved": "https://registry.npmjs.org/yargs/-/yargs-17.7.2.tgz", + "integrity": "sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==", "dev": true, "dependencies": { - "cliui": "^6.0.0", - "decamelize": "^1.2.0", - "find-up": "^4.1.0", - "get-caller-file": "^2.0.1", + "cliui": "^8.0.1", + "escalade": "^3.1.1", + "get-caller-file": "^2.0.5", "require-directory": "^2.1.1", - "require-main-filename": "^2.0.0", - "set-blocking": "^2.0.0", - "string-width": "^4.2.0", - "which-module": "^2.0.0", - "y18n": "^4.0.0", - "yargs-parser": "^18.1.2" + "string-width": "^4.2.3", + "y18n": "^5.0.5", + "yargs-parser": "^21.1.1" }, "engines": { - "node": ">=8" + "node": ">=12" } }, "node_modules/yargs-parser": { - "version": "18.1.3", - "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz", - "integrity": "sha512-o50j0JeToy/4K6OZcaQmW6lyXXKhq7csREXcDwk2omFPJEwUNOVtJKvmDr9EI1fAJZUyZcRF7kxGBWmRXudrCQ==", + "version": "21.1.1", + "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz", + "integrity": "sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==", "dev": true, - "dependencies": { - "camelcase": "^5.0.0", - "decamelize": "^1.2.0" - }, "engines": { - "node": ">=6" - } - }, - "node_modules/yargs/node_modules/find-up": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz", - "integrity": "sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==", - "dev": true, - "dependencies": { - "locate-path": "^5.0.0", - "path-exists": "^4.0.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/yargs/node_modules/locate-path": { - "version": "5.0.0", - "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz", - "integrity": "sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==", - "dev": true, - "dependencies": { - "p-locate": "^4.1.0" - }, - "engines": { - "node": ">=8" - } - }, - "node_modules/yargs/node_modules/p-limit": { - "version": "2.3.0", - "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz", - "integrity": "sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==", - "dev": true, - "dependencies": { - "p-try": "^2.0.0" - }, - "engines": { - "node": ">=6" - }, - "funding": { - "url": "https://github.com/sponsors/sindresorhus" - } - }, - "node_modules/yargs/node_modules/p-locate": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz", - "integrity": "sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==", - "dev": true, - "dependencies": { - "p-limit": "^2.2.0" - }, - "engines": { - "node": ">=8" + "node": ">=12" } }, "node_modules/yauzl": { diff --git a/web/package.json b/web/package.json index 1cda15837..c4b4c04b7 100644 --- a/web/package.json +++ b/web/package.json @@ -38,15 +38,15 @@ "@codemirror/theme-one-dark": "^6.1.2", "@formatjs/intl-listformat": "^7.5.0", "@fortawesome/fontawesome-free": "^6.4.2", - "@goauthentik/api": "^2023.8.3-1697813667", + "@goauthentik/api": "^2023.10.1-1698348102", "@lit-labs/context": "^0.4.1", "@lit-labs/task": "^3.1.0", "@lit/localize": "^0.11.4", "@open-wc/lit-helpers": "^0.6.0", "@patternfly/elements": "^2.4.0", "@patternfly/patternfly": "^4.224.2", - "@sentry/browser": "^7.75.0", - "@sentry/tracing": "^7.75.0", + "@sentry/browser": "^7.75.1", + "@sentry/tracing": "^7.75.1", "@webcomponents/webcomponentsjs": "^2.8.0", "base64-js": "^1.5.1", "chart.js": "^4.4.0", @@ -55,9 +55,9 @@ "construct-style-sheets-polyfill": "^3.1.0", "core-js": "^3.33.1", "country-flag-icons": "^1.5.7", - "fuse.js": "^6.6.2", + "fuse.js": "^7.0.0", "lit": "^2.8.0", - "mermaid": "^10.5.1", + "mermaid": "^10.6.0", "rapidoc": "^9.3.4", "style-mod": "^4.1.0", "webcomponent-qr-code": "^1.2.0", @@ -102,7 +102,7 @@ "eslint-plugin-lit": "^1.10.1", "eslint-plugin-sonarjs": "^0.21.0", "eslint-plugin-storybook": "^0.6.15", - "lit-analyzer": "^1.2.1", + "lit-analyzer": "^2.0.1", "npm-run-all": "^4.1.5", "prettier": "^3.0.3", "pseudolocale": "^2.0.0", @@ -115,7 +115,7 @@ "rollup-plugin-postcss-lit": "^2.1.0", "storybook": "^7.5.1", "storybook-addon-mock": "^4.3.0", - "ts-lit-plugin": "^1.2.1", + "ts-lit-plugin": "^2.0.0", "tslib": "^2.6.2", "turnstile-types": "^1.1.3", "typescript": "^5.2.2", diff --git a/web/src/admin/applications/wizard/methods/oauth/ak-application-wizard-authentication-by-oauth.ts b/web/src/admin/applications/wizard/methods/oauth/ak-application-wizard-authentication-by-oauth.ts index 44c71b0a3..62893a6af 100644 --- a/web/src/admin/applications/wizard/methods/oauth/ak-application-wizard-authentication-by-oauth.ts +++ b/web/src/admin/applications/wizard/methods/oauth/ak-application-wizard-authentication-by-oauth.ts @@ -114,8 +114,8 @@ export class ApplicationWizardAuthenticationByOauth extends BaseProviderPanel { label=${msg("Client type")} .value=${provider?.clientType} required - @change=${(ev: CustomEvent) => { - this.showClientSecret = ev.detail !== ClientTypeEnum.Public; + @change=${(ev: CustomEvent<{ value: ClientTypeEnum }>) => { + this.showClientSecret = ev.detail.value !== ClientTypeEnum.Public; }} .options=${clientTypeOptions} > diff --git a/web/src/admin/events/TransportForm.ts b/web/src/admin/events/TransportForm.ts index 46fce43cb..1554d7007 100644 --- a/web/src/admin/events/TransportForm.ts +++ b/web/src/admin/events/TransportForm.ts @@ -78,8 +78,8 @@ export class TransportForm extends ModelForm { ) => { - this.onModeChange(ev.detail); + @change=${(ev: CustomEvent<{ value: NotificationTransportModeEnum }>) => { + this.onModeChange(ev.detail.value); }} .options=${[ { diff --git a/web/src/admin/providers/oauth2/OAuth2ProviderForm.ts b/web/src/admin/providers/oauth2/OAuth2ProviderForm.ts index 95bb9fdae..c98ae860f 100644 --- a/web/src/admin/providers/oauth2/OAuth2ProviderForm.ts +++ b/web/src/admin/providers/oauth2/OAuth2ProviderForm.ts @@ -210,8 +210,8 @@ export class OAuth2ProviderFormPage extends ModelForm { label=${msg("Client type")} .value=${provider?.clientType} required - @change=${(ev: CustomEvent) => { - this.showClientSecret = ev.detail !== ClientTypeEnum.Public; + @change=${(ev: CustomEvent<{ value: ClientTypeEnum }>) => { + this.showClientSecret = ev.detail.value !== ClientTypeEnum.Public; }} .options=${clientTypeOptions} > diff --git a/web/src/admin/roles/RoleForm.ts b/web/src/admin/roles/RoleForm.ts index 48b886b82..7d4778469 100644 --- a/web/src/admin/roles/RoleForm.ts +++ b/web/src/admin/roles/RoleForm.ts @@ -42,15 +42,13 @@ export class RoleForm extends ModelForm { } renderForm(): TemplateResult { - return html`
- - - -
`; + return html` + + `; } } diff --git a/web/src/admin/roles/RoleListPage.ts b/web/src/admin/roles/RoleListPage.ts index 2bf8bf64e..328acb186 100644 --- a/web/src/admin/roles/RoleListPage.ts +++ b/web/src/admin/roles/RoleListPage.ts @@ -10,8 +10,11 @@ import { TablePage } from "@goauthentik/elements/table/TablePage"; import "@patternfly/elements/pf-tooltip/pf-tooltip.js"; import { msg } from "@lit/localize"; -import { TemplateResult, html } from "lit"; +import { CSSResult, TemplateResult, html } from "lit"; import { customElement, property } from "lit/decorators.js"; +import { ifDefined } from "lit/directives/if-defined.js"; + +import PFBanner from "@patternfly/patternfly/components/Banner/banner.css"; import { RbacApi, Role } from "@goauthentik/api"; @@ -34,6 +37,10 @@ export class RoleListPage extends TablePage { @property() order = "name"; + static get styles(): CSSResult[] { + return [...super.styles, PFBanner]; + } + async apiEndpoint(page: number): Promise> { return new RbacApi(DEFAULT_CONFIG).rbacRolesList({ ordering: this.order, @@ -69,6 +76,22 @@ export class RoleListPage extends TablePage { `; } + render(): TemplateResult { + return html` + +
+ ${msg("RBAC is in preview.")} + ${msg("Send us feedback!")} +
+
+
${this.renderTable()}
+
`; + } + row(item: Role): TemplateResult[] { return [ html`${item.name}`, diff --git a/web/src/admin/roles/RoleViewPage.ts b/web/src/admin/roles/RoleViewPage.ts index b9a77fac4..8cc2e5d08 100644 --- a/web/src/admin/roles/RoleViewPage.ts +++ b/web/src/admin/roles/RoleViewPage.ts @@ -15,6 +15,7 @@ import { msg, str } from "@lit/localize"; import { CSSResult, TemplateResult, css, html } from "lit"; import { customElement, property, state } from "lit/decorators.js"; +import PFBanner from "@patternfly/patternfly/components/Banner/banner.css"; import PFButton from "@patternfly/patternfly/components/Button/button.css"; import PFCard from "@patternfly/patternfly/components/Card/card.css"; import PFContent from "@patternfly/patternfly/components/Content/content.css"; @@ -52,6 +53,7 @@ export class RoleViewPage extends AKElement { PFContent, PFCard, PFDescriptionList, + PFBanner, css` .pf-c-description-list__description ak-action-button { margin-right: 6px; @@ -85,60 +87,69 @@ export class RoleViewPage extends AKElement { if (!this._role) { return html``; } - return html` -
-
-
-
${msg("Role Info")}
-
-
-
-
- ${msg("Name")} -
-
-
- ${this._role.name} -
-
-
-
+ return html`
+ ${msg("RBAC is in preview.")} + ${msg("Send us feedback!")} +
+ +
+
+
+
${msg("Role Info")}
+
+
+
+
+ ${msg("Name")} +
+
+
+ ${this._role.name} +
+
+
+
+
+
+
+
+ ${msg("Assigned global permissions")} +
+
+ +
+
+
+
+ ${msg("Assigned object permissions")} +
+
+ +
-
-
${msg("Assigned global permissions")}
-
- -
-
-
-
${msg("Assigned object permissions")}
-
- -
-
-
-
- - `; + + + `; } } diff --git a/web/src/admin/stages/user_write/UserWriteStageForm.ts b/web/src/admin/stages/user_write/UserWriteStageForm.ts index 0cfefc57c..3ef5185cd 100644 --- a/web/src/admin/stages/user_write/UserWriteStageForm.ts +++ b/web/src/admin/stages/user_write/UserWriteStageForm.ts @@ -12,7 +12,14 @@ import { TemplateResult, html } from "lit"; import { customElement } from "lit/decorators.js"; import { ifDefined } from "lit/directives/if-defined.js"; -import { CoreApi, CoreGroupsListRequest, Group, StagesApi, UserWriteStage } from "@goauthentik/api"; +import { + CoreApi, + CoreGroupsListRequest, + Group, + StagesApi, + UserTypeEnum, + UserWriteStage, +} from "@goauthentik/api"; @customElement("ak-stage-user-write-form") export class UserWriteStageForm extends ModelForm { @@ -111,6 +118,42 @@ export class UserWriteStageForm extends ModelForm { ${msg("Mark newly created users as inactive.")}

+ + + +

+ ${msg("User type used for newly created users.")} +

+ { diff --git a/web/src/admin/users/UserViewPage.ts b/web/src/admin/users/UserViewPage.ts index d91ea4386..d752f645a 100644 --- a/web/src/admin/users/UserViewPage.ts +++ b/web/src/admin/users/UserViewPage.ts @@ -33,6 +33,7 @@ import { msg, str } from "@lit/localize"; import { css, html, nothing } from "lit"; import { customElement, property, state } from "lit/decorators.js"; +import PFBanner from "@patternfly/patternfly/components/Banner/banner.css"; import PFButton from "@patternfly/patternfly/components/Button/button.css"; import PFCard from "@patternfly/patternfly/components/Card/card.css"; import PFContent from "@patternfly/patternfly/components/Content/content.css"; @@ -86,6 +87,7 @@ export class UserViewPage extends AKElement { PFCard, PFDescriptionList, PFSizing, + PFBanner, css` .ak-button-collection { display: flex; @@ -465,28 +467,38 @@ export class UserViewPage extends AKElement { model=${RbacPermissionsAssignedByUsersListModelEnum.CoreUser} objectPk=${this.user.pk} > -
-
-
-
${msg("Assigned global permissions")}
-
- - -
-
-
-
${msg("Assigned object permissions")}
-
- - -
-
+
+ ${msg("RBAC is in preview.")} + ${msg("Send us feedback!")}
-
+
+
+
+
+ ${msg("Assigned global permissions")} +
+
+ + +
+
+
+
+ ${msg("Assigned object permissions")} +
+
+ + +
+
+
+
+ `; } } diff --git a/web/src/common/constants.ts b/web/src/common/constants.ts index 1e58a838a..13671883b 100644 --- a/web/src/common/constants.ts +++ b/web/src/common/constants.ts @@ -3,7 +3,7 @@ export const SUCCESS_CLASS = "pf-m-success"; export const ERROR_CLASS = "pf-m-danger"; export const PROGRESS_CLASS = "pf-m-in-progress"; export const CURRENT_CLASS = "pf-m-current"; -export const VERSION = "2023.8.3"; +export const VERSION = "2023.10.1"; export const TITLE_DEFAULT = "authentik"; export const ROUTE_SEPARATOR = ";"; diff --git a/web/src/elements/forms/Form.ts b/web/src/elements/forms/Form.ts index 5728634f1..0c4590fac 100644 --- a/web/src/elements/forms/Form.ts +++ b/web/src/elements/forms/Form.ts @@ -31,6 +31,93 @@ export interface KeyUnknown { [key: string]: unknown; } +/** + * Recursively assign `value` into `json` while interpreting the dot-path of `element.name` + */ +function assignValue(element: HTMLInputElement, value: unknown, json: KeyUnknown): void { + let parent = json; + if (!element.name?.includes(".")) { + parent[element.name] = value; + return; + } + const nameElements = element.name.split("."); + for (let index = 0; index < nameElements.length - 1; index++) { + const nameEl = nameElements[index]; + // Ensure all nested structures exist + if (!(nameEl in parent)) parent[nameEl] = {}; + parent = parent[nameEl] as { [key: string]: unknown }; + } + parent[nameElements[nameElements.length - 1]] = value; +} + +/** + * Convert the elements of the form to JSON.[4] + * + */ +export function serializeForm( + elements: NodeListOf, +): T | undefined { + const json: { [key: string]: unknown } = {}; + elements.forEach((element) => { + element.requestUpdate(); + const inputElement = element.querySelector("[name]"); + if (element.hidden || !inputElement) { + return; + } + // Skip elements that are writeOnly where the user hasn't clicked on the value + if (element.writeOnly && !element.writeOnlyActivated) { + return; + } + if ( + inputElement.tagName.toLowerCase() === "select" && + "multiple" in inputElement.attributes + ) { + const selectElement = inputElement as unknown as HTMLSelectElement; + assignValue( + inputElement, + Array.from(selectElement.selectedOptions).map((v) => v.value), + json, + ); + } else if (inputElement.tagName.toLowerCase() === "input" && inputElement.type === "date") { + assignValue(inputElement, inputElement.valueAsDate, json); + } else if ( + inputElement.tagName.toLowerCase() === "input" && + inputElement.type === "datetime-local" + ) { + assignValue(inputElement, new Date(inputElement.valueAsNumber), json); + } else if ( + inputElement.tagName.toLowerCase() === "input" && + "type" in inputElement.dataset && + inputElement.dataset["type"] === "datetime-local" + ) { + // Workaround for Firefox <93, since 92 and older don't support + // datetime-local fields + assignValue(inputElement, new Date(inputElement.value), json); + } else if ( + inputElement.tagName.toLowerCase() === "input" && + inputElement.type === "checkbox" + ) { + assignValue(inputElement, inputElement.checked, json); + } else if ("selectedFlow" in inputElement) { + assignValue(inputElement, inputElement.value, json); + } else if (inputElement.tagName.toLowerCase() === "ak-search-select") { + const select = inputElement as unknown as SearchSelect; + try { + const value = select.toForm(); + assignValue(inputElement, value, json); + } catch (exc) { + if (exc instanceof PreventFormSubmit) { + throw new PreventFormSubmit(exc.message, element); + } + throw exc; + } + } else { + assignValue(inputElement, inputElement.value, json); + } + }); + return json as unknown as T; +} + /** * Form * @@ -177,95 +264,13 @@ export abstract class Form extends AKElement { * */ serializeForm(): T | undefined { - const elements = - this.shadowRoot?.querySelectorAll( - "ak-form-element-horizontal", - ) || []; - const json: { [key: string]: unknown } = {}; - elements.forEach((element) => { - element.requestUpdate(); - const inputElement = element.querySelector("[name]"); - if (element.hidden || !inputElement) { - return; - } - // Skip elements that are writeOnly where the user hasn't clicked on the value - if (element.writeOnly && !element.writeOnlyActivated) { - return; - } - if ( - inputElement.tagName.toLowerCase() === "select" && - "multiple" in inputElement.attributes - ) { - const selectElement = inputElement as unknown as HTMLSelectElement; - this.assignValue( - inputElement, - Array.from(selectElement.selectedOptions).map((v) => v.value), - json, - ); - } else if ( - inputElement.tagName.toLowerCase() === "input" && - inputElement.type === "date" - ) { - this.assignValue(inputElement, inputElement.valueAsDate, json); - } else if ( - inputElement.tagName.toLowerCase() === "input" && - inputElement.type === "datetime-local" - ) { - this.assignValue(inputElement, new Date(inputElement.valueAsNumber), json); - } else if ( - inputElement.tagName.toLowerCase() === "input" && - "type" in inputElement.dataset && - inputElement.dataset["type"] === "datetime-local" - ) { - // Workaround for Firefox <93, since 92 and older don't support - // datetime-local fields - this.assignValue(inputElement, new Date(inputElement.value), json); - } else if ( - inputElement.tagName.toLowerCase() === "input" && - inputElement.type === "checkbox" - ) { - this.assignValue(inputElement, inputElement.checked, json); - } else if ("selectedFlow" in inputElement) { - this.assignValue(inputElement, inputElement.value, json); - } else if (inputElement.tagName.toLowerCase() === "ak-search-select") { - const select = inputElement as unknown as SearchSelect; - try { - const value = select.toForm(); - this.assignValue(inputElement, value, json); - } catch (exc) { - if (exc instanceof PreventFormSubmit) { - throw new PreventFormSubmit(exc.message, element); - } - throw exc; - } - } else { - this.assignValue(inputElement, inputElement.value, json); - } - }); - return json as unknown as T; - } - - /** - * Recursively assign `value` into `json` while interpreting the dot-path of `element.name` - */ - private assignValue( - element: HTMLInputElement, - value: unknown, - json: { [key: string]: unknown }, - ): void { - let parent = json; - if (!element.name?.includes(".")) { - parent[element.name] = value; - return; + const elements = this.shadowRoot?.querySelectorAll( + "ak-form-element-horizontal", + ); + if (!elements) { + return {} as T; } - const nameElements = element.name.split("."); - for (let index = 0; index < nameElements.length - 1; index++) { - const nameEl = nameElements[index]; - // Ensure all nested structures exist - if (!(nameEl in parent)) parent[nameEl] = {}; - parent = parent[nameEl] as { [key: string]: unknown }; - } - parent[nameElements[nameElements.length - 1]] = value; + return serializeForm(elements) as T; } /** diff --git a/web/src/elements/rbac/ObjectPermissionModal.ts b/web/src/elements/rbac/ObjectPermissionModal.ts index 596b2b2c5..e50be6b82 100644 --- a/web/src/elements/rbac/ObjectPermissionModal.ts +++ b/web/src/elements/rbac/ObjectPermissionModal.ts @@ -7,6 +7,7 @@ import { msg } from "@lit/localize"; import { CSSResult, TemplateResult, html } from "lit"; import { customElement, property } from "lit/decorators.js"; +import PFBanner from "@patternfly/patternfly/components/Banner/banner.css"; import PFButton from "@patternfly/patternfly/components/Button/button.css"; import PFBase from "@patternfly/patternfly/patternfly-base.css"; @@ -51,13 +52,17 @@ export class ObjectPermissionModal extends AKElement { objectPk?: string | number; static get styles(): CSSResult[] { - return [PFBase, PFButton]; + return [PFBase, PFButton, PFBanner]; } render(): TemplateResult { return html` ${msg("Update Permissions")} +
+ ${msg("RBAC is in preview.")} + ${msg("Send us feedback!")} +
-
-
-
-
User Object Permissions
-
- - + return html`${this.showBanner + ? html`
+ ${msg("RBAC is in preview.")} + ${msg("Send us feedback!")} +
` + : html``} + +
+
+
+
User Object Permissions
+
+ + +
-
-
-
-
-
-
Role Object Permissions
-
- - +
+
+
+
+
Role Object Permissions
+
+ + +
- -
- `; + + `; } } diff --git a/web/src/user/LibraryPage/ApplicationSearch.ts b/web/src/user/LibraryPage/ApplicationSearch.ts index 8f732eaf7..07fca5d47 100644 --- a/web/src/user/LibraryPage/ApplicationSearch.ts +++ b/web/src/user/LibraryPage/ApplicationSearch.ts @@ -1,6 +1,7 @@ import { AKElement } from "@goauthentik/elements/Base"; import { getURLParam, updateURLParams } from "@goauthentik/elements/router/RouteMatch"; import Fuse from "fuse.js"; +import { FuseResult } from "fuse.js"; import { msg } from "@lit/localize"; import { css, html } from "lit"; @@ -66,7 +67,7 @@ export class LibraryPageApplicationList extends AKElement { }); } - onSelected(apps: Fuse.FuseResult[]) { + onSelected(apps: FuseResult[]) { this.dispatchEvent( customEvent(SEARCH_UPDATED, { apps: apps.map((app) => app.item), diff --git a/web/xliff/de.xlf b/web/xliff/de.xlf index 60f3b1aaf..1e95e6975 100644 --- a/web/xliff/de.xlf +++ b/web/xliff/de.xlf @@ -5798,12 +5798,6 @@ Bindings to groups/users are checked against the user of the event. For transparent reverse proxies with required authentication - - For nginx's auth_request or traefik's forwardAuth - - - For nginx's auth_request or traefik's forwardAuth per root domain - Configure SAML provider manually @@ -6031,6 +6025,18 @@ Bindings to groups/users are checked against the user of the event. <No name set> + + + For nginx's auth_request or traefik's forwardAuth + + + For nginx's auth_request or traefik's forwardAuth per root domain + + + RBAC is in preview. + + + User type used for newly created users. diff --git a/web/xliff/en.xlf b/web/xliff/en.xlf index c62336b17..586eba0c0 100644 --- a/web/xliff/en.xlf +++ b/web/xliff/en.xlf @@ -6079,12 +6079,6 @@ Bindings to groups/users are checked against the user of the event. For transparent reverse proxies with required authentication - - For nginx's auth_request or traefik's forwardAuth - - - For nginx's auth_request or traefik's forwardAuth per root domain - Configure SAML provider manually @@ -6312,6 +6306,18 @@ Bindings to groups/users are checked against the user of the event. <No name set> + + + For nginx's auth_request or traefik's forwardAuth + + + For nginx's auth_request or traefik's forwardAuth per root domain + + + RBAC is in preview. + + + User type used for newly created users. diff --git a/web/xliff/es.xlf b/web/xliff/es.xlf index d83f50117..b6d3cd312 100644 --- a/web/xliff/es.xlf +++ b/web/xliff/es.xlf @@ -5713,12 +5713,6 @@ Bindings to groups/users are checked against the user of the event. For transparent reverse proxies with required authentication - - For nginx's auth_request or traefik's forwardAuth - - - For nginx's auth_request or traefik's forwardAuth per root domain - Configure SAML provider manually @@ -5946,6 +5940,18 @@ Bindings to groups/users are checked against the user of the event. <No name set> + + + For nginx's auth_request or traefik's forwardAuth + + + For nginx's auth_request or traefik's forwardAuth per root domain + + + RBAC is in preview. + + + User type used for newly created users. diff --git a/web/xliff/fr.xlf b/web/xliff/fr.xlf index d56dbd71a..fc8e3966d 100644 --- a/web/xliff/fr.xlf +++ b/web/xliff/fr.xlf @@ -4,1608 +4,1608 @@ English Anglais - + French Français - + Turkish Turque - + Spanish Espagnol - + Polish Polonais - + Taiwanese Mandarin Mandarin taïwanais - + Chinese (simplified) Chinois (simplifié) - + Chinese (traditional) Chinois (traditionnel) - + German Allemand - + Loading... Chargement en cours... - + Application Application - + Logins Connexions - + Show less Montrer moins - + Show more Montrer plus - + UID UID - + Name Nom - + App App - + Model Name Nom du modèle - + Message Message - + Subject Sujet - + From De - + To À - + Context Contexte - + User Utilisateur - + Affected model: Modèle affecté : - + Authorized application: Application autorisée : - + Using flow Utilisation du flux - + Email info: Information courriel : - + Secret: Secret : - + Open issue on GitHub... Ouvrir un ticket sur GitHub... - + Exception Exception - + Expression Expression - + Binding Liaison - + Request Requête - + Object Objet - + Result Résultat - + Passing Réussite - + Messages Messages - + Using source Utilisation de la source - + Attempted to log in as - Tentative de connexion en tant que + Tentative de connexion en tant que - + No additional data available. Aucune donnée additionnelle disponible. - + Click to change value Cliquer pour changer la valeur - + Select an object. Sélectionnez un objet. - + Loading options... Chargement des options... - + Connection error, reconnecting... Erreur de connexion, nouvelle tentative... - + Login Connexion - + Failed login Échec de la connexion - + Logout Déconnexion - + User was written to L'utilisateur a été écrit vers - + Suspicious request Requête suspecte - + Password set Mot de passe défini - + Secret was viewed Le secret a été vu - + Secret was rotated Rotation du secret effectuée - + Invitation used Invitation utilisée - + Application authorized Application autorisé - + Source linked Source liée - + Impersonation started Début de l'appropriation utilisateur - + Impersonation ended Fin de l'appropriation utilisateur - + Flow execution Exécution du flux - + Policy execution Exécution de politique - + Policy exception Exception de politique - + Property Mapping exception Erreur de mappage de propriété - + System task execution Exécution de tâche système - + System task exception Erreur de tâche système - + General system exception Exception générale du systèm - + Configuration error Erreur de configuration - + Model created Modèle créé - + Model updated Modèle mis à jour - + Model deleted Modèle supprimé - + Email sent Courriel envoyé - + Update available Mise à jour disponibl - + Unknown severity Sévérité inconnue - + Alert Alerte - + Notice Note - + Warning Avertissement - + no tabs defined aucun onglet défini - + - of - - + - sur - + Go to previous page Aller à la page précédente - + Go to next page Aller à la page suivante - + Search... Rechercher... - + Loading Chargement en cours - + No objects found. Aucun objet trouvé. - + Failed to fetch objects. Impossible de récupérer les objets. - + Refresh Rafraîchir - + Select all rows Sélectionner toutes les lignes - + Action Action - + Creation Date Date de création - + Client IP Adresse IP client - + Tenant Tenant - + Recent events Événements récents - + On behalf of - Au nom de + Au nom de - + - - - + No Events found. Aucun événement trouvé. - + No matching events could be found. Aucun événement correspondant n'a été trouvé. - + Embedded outpost is not configured correctly. L'avant poste intégré n'est pas configuré correctement - + Check outposts. Vérifier les avant-postes. - + HTTPS is not detected correctly HTTP n'est pas détecté correctement - + Server and client are further than 5 seconds apart. Le serveur et le client sont distants de plus de 5 secondes - + OK OK - + Everything is ok. Tout va bien. - + System status Statut du système - + Based on - Basé sur + Basé sur - + is available! est disponible ! - + Up-to-date! À jour ! - + Version Version - + Workers Workers - + No workers connected. Background tasks will not run. Aucun worker connecté. Les tâches de fond ne tourneront pas. - + hour(s) ago Il y a heure(s) - + day(s) ago Il y a jour(s) - + Authorizations Autorisations - + Failed Logins Connexions échouées - + Successful Logins Connexions réussies - + : - : + : - + Cancel Annuler - + LDAP Source Source LDAP - + SCIM Provider Fournisseur SCIM - + Healthy Sain - + Healthy outposts Avant-postes sains - + Admin Administrateur - + Not found Pas trouvé - + The URL "" was not found. - L'URL " + L'URL " " n'a pas été trouvée. - + Return home Retourner à l’accueil - + General system status État général du système - + Welcome, . - Bienvenue, + Bienvenue, . - + Quick actions Actions rapides - + Create a new application Créer une nouvelle application - + Check the logs Vérifiez les journaux - + Explore integrations Explorer les intégrations - + Manage users Gérer les utilisateurs - + Outpost status Statut de l'avant-poste - + Sync status Synchroniser les statuts - + Logins and authorizations over the last week (per 8 hours) Connexions et autorisations au cours de la dernière semaine (par 8 heures) - + Apps with most usage Apps les plus utilisées - + days ago il y a jours - + Objects created Objets créés - + Users created per day in the last month Utilisateurs créés par jour durant le mois dernier - + Logins per day in the last month Connections par jour le mois dernier - + Failed Logins per day in the last month Connexions échouées par jour au cours du dernier mois - + Clear search Vider la recherche - + System Tasks Tâches du système - + Long-running operations which authentik executes in the background. Opérations de longue durée qu'authentik exécute en arrière-plan. - + Identifier Identifiant - + Description Description - + Last run Dernière exécution - + Status Statut - + Actions Actions - + Successful Réussite - + Error Erreur - + Unknown Inconnu - + Duration Durée - + seconds secondes - + Authentication Authentification - + Authorization Authorisation - + Enrollment Inscription - + Invalidation Invalidation - + Recovery Récupération - + Stage Configuration Configuration de l'étape - + Unenrollment Désinscription - + Unknown designation Désignation inconnue - + Stacked Empilé - + Content left Contenu gauche - + Content right Contenu droit - + Sidebar left Sidebar gauche - + Sidebar right Sidebar droite - + Unknown layout Disposition inconnue - + Successfully updated provider. Fournisseur mis à jour avec succès - + Successfully created provider. Fournisseur créé avec succès - + Bind flow Lier un flux - + Flow used for users to authenticate. Flux utilisé pour que les utilisateurs s'authentifient - + Search group Rechercher un groupe - + Users in the selected group can do search queries. If no group is selected, no LDAP Searches are allowed. Les utilisateurs de ce groupe peuvent effectuer des recherches. Si aucun groupe n'est sélectionné, aucune recherche LDAP n'est autorisée. - + Bind mode Lier un mode - + Cached binding Liaison en cache - + Flow is executed and session is cached in memory. Flow is executed when session expires Le flux est exécuté et la session est mise en cache en mémoire. Le flux est exécuté lorsque la session expire - + Direct binding Liaison directe - + Always execute the configured bind flow to authenticate the user Toujours exécuter la liaison de flux configurée pour authentifier l'utilisateur - + Configure how the outpost authenticates requests. Configure comment les avant-postes authentifient les requêtes. - + Search mode Mode de Recherche - + Cached querying Requête en cache - + The outpost holds all users and groups in-memory and will refresh every 5 Minutes L'avant-poste conserve tous les utilisateurs et groupes en mémoire et se rafraîchira toutes les 5 minutes. - + Direct querying Requête directe - + Always returns the latest data, but slower than cached querying Fournit toujours les données les plus récentes, mais plus lent que les recherches en cache. - + Configure how the outpost queries the core authentik server's users. Configure comment les avant-postes requêtent les utilisateurs du serveur cœur d’authentik. - + Protocol settings Paramètres du protocole - + Base DN DN racine - + LDAP DN under which bind requests and search requests can be made. DN LDAP avec lequel les connexions et recherches sont effectuées. - + Certificate Certificat - + UID start number Numéro de départ d'UID - + The start for uidNumbers, this number is added to the user.Pk to make sure that the numbers aren't too low for POSIX users. Default is 2000 to ensure that we don't collide with local users uidNumber Ce nombre est ajouté au nombre généré à partir de user.Pk pour s'assurer que ceux-ci ne sont pas trop bas pour les utilisateurs POSIX. La valeur par défaut est 2000 pour éviter des collisions avec les uidNumber des utilisateurs locaux. - + GID start number Numéro de départ du GID - + The start for gidNumbers, this number is added to a number generated from the group.Pk to make sure that the numbers aren't too low for POSIX groups. Default is 4000 to ensure that we don't collide with local groups or users primary groups gidNumber Ce nombre est ajouté au nombre généré à partir de group.Pk pour s'assurer que ceux-ci ne sont pas trop bas pour les groupes POSIX. La valeur par défaut est 4000 pour éviter des collisions avec les groupes locaux ou les groupes primaires. - + (Format: hours=-1;minutes=-2;seconds=-3). (Format : hours=-1;minutes=-2;seconds=-3). - + (Format: hours=1;minutes=2;seconds=3). (Format : hours=1;minutes=2;seconds=3). - + The following keywords are supported: Les mots clés suivants sont supportés : - + Authentication flow Flux d'authentification - + Flow used when a user access this provider and is not authenticated. Flux utilisé lorsqu'un utilisateur accède à ce fournisseur et n'est pas authentifié. - + Authorization flow Flux d'autorisation - + Flow used when authorizing this provider. Flux utilisé lors de l'autorisation de ce fournisseur. - + Client type Type du client - + Confidential Confidentiel - + Confidential clients are capable of maintaining the confidentiality of their credentials such as client secrets Les clients confidentiels sont capables de préserver la confidentialité de leurs données d'identification, telles que les secrets du client. - + Public Public - + Public clients are incapable of maintaining the confidentiality and should use methods like PKCE. Les clients publics sont incapables de maintenir la confidentialité et devraient utiliser des méthodes comme le PKCE. - + Client ID ID client - + Client Secret Secret du client - + Redirect URIs/Origins (RegEx) URI/Origines de redirection (RegEx) - + Valid redirect URLs after a successful authorization flow. Also specify any origins here for Implicit flows. URLs de redirection autorisées après un flux d'autorisation réussi. Indiquez également toute origine ici pour les flux implicites. - + If no explicit redirect URIs are specified, the first successfully used redirect URI will be saved. Si aucune URI de redirection explicite n'est spécifiée, la première URI de redirection utilisée avec succès sera enregistrée. - + To allow any redirect URI, set this value to ".*". Be aware of the possible security implications this can have. Pour permettre n'importe quelle URI de redirection, définissez cette valeur sur ".*". Soyez conscient des possibles implications de sécurité que cela peut avoir. - + Signing Key Clé de signature - + Key used to sign the tokens. Clé utilisée pour signer les jetons. - + Advanced protocol settings Paramètres avancés du protocole - + Access code validity Validité du code d'accès - + Configure how long access codes are valid for. Configure la durée de validité des codes d'accès. - + Access Token validity Validité du jeton d'accès - + Configure how long access tokens are valid for. Configure la durée de validité des jetons d'accès. - + Refresh Token validity Validité du jeton de rafraîchissement - + Configure how long refresh tokens are valid for. Configurer la durée de validité des jetons de rafraîchissement. - + Scopes Portées - + Select which scopes can be used by the client. The client still has to specify the scope to access the data. Sélectionnez les portées utilisables par le client. Le client doit toujours spécifier la portée pour accéder aux données. - + Hold control/command to select multiple items. Garder ctrl/command enfoncé pour sélectionner de multiples éléments - + Subject mode Mode subject - + Based on the User's hashed ID Basé sur l'identifiant haché de l'utilisateur - + Based on the User's ID Basé sur l'identifiant de l'utilisateur - + Based on the User's UUID Basé sur l'UUID de l'utilisateur - + Based on the User's username Basé sur le nom d'utilisateur - + Based on the User's Email Basé sur l'adresse courriel de l'utilisateur - + This is recommended over the UPN mode. Ceci est recommandé par rapport au mode UPN. - + Based on the User's UPN Basé sur l'UPN de l'utilisateur. - + Requires the user to have a 'upn' attribute set, and falls back to hashed user ID. Use this mode only if you have different UPN and Mail domains. Cela exige que l'utilisateur possède un attribut 'UPN' défini, sinon en dernier recours il utilise l'ID haché de l'utilisateur. Utilisez ce mode seulement si vous avez un domaine courriel différent de l'UPN. - + Configure what data should be used as unique User Identifier. For most cases, the default should be fine. Configure quelle donnée utiliser pour l'identifiant unique utilisateur. La valeur par défaut devrait être correcte dans la plupart des cas. - + Include claims in id_token Include les demandes utilisateurs dans id_token - + Include User claims from scopes in the id_token, for applications that don't access the userinfo endpoint. Inclure depuis la portée les demandes utilisateurs dans id_token, pour les applications qui n'accèdent pas au point de terminaison userinfo. - + Issuer mode Mode de l'émetteur - + Each provider has a different issuer, based on the application slug Chaque fournisseur a un émetteur différent, basé sur le slug de l'application. - + Same identifier is used for all providers Le même identifiant est utilisé pour tous les fournisseurs - + Configure how the issuer field of the ID Token should be filled. Configure comment le champ émetteur du jeton ID sera rempli. - + Machine-to-Machine authentication settings Paramètres d'authentification machine à machine - + Trusted OIDC Sources Sources OIDC de confiance - + JWTs signed by certificates configured in the selected sources can be used to authenticate to this provider. Les JWT signés par des certificats configurés par les sources sélectionnées peuvent être utilisés pour s'authentifier auprès de ce fournisseur. - + HTTP-Basic Username Key Clé de l'utilisateur HTTP-Basic - + User/Group Attribute used for the user part of the HTTP-Basic Header. If not set, the user's Email address is used. Attribut d'utilisateur/groupe utilisé pour le champ utilisateur de l'en-tête HTTP-Basic. S'il n'est pas défini, le courriel de l'utilisateur est utilisée. - + HTTP-Basic Password Key Clé du mot de passe HTTP-Basic - + User/Group Attribute used for the password part of the HTTP-Basic Header. Attribut d'utilisateur/groupe utilisé pour la champ mot de passe de l'en-tête HTTP-Basic. - + Proxy Proxy - + Forward auth (single application) Transférer l'authentification (application unique) - + Forward auth (domain level) Transférer l'authentification (niveau domaine) - + This provider will behave like a transparent reverse-proxy, except requests must be authenticated. If your upstream application uses HTTPS, make sure to connect to the outpost using HTTPS as well. Ce fournisseur se comporte comme un reverse-proxy transparent, sauf que les demandes doivent être authentifiées. Si votre application en amont utilise HTTPS, assurez-vous de vous connecter à l'avant-poste en utilisant également HTTPS. - + External host Hôte externe - + The external URL you'll access the application at. Include any non-standard port. L'URL externe par laquelle vous accéderez à l'application. Incluez un port non-standard si besoin. - + Internal host Hôte interne - + Upstream host that the requests are forwarded to. Hôte amont où transférer les requêtes. - + Internal host SSL Validation Validation SSL de l'hôte interne - + Validate SSL Certificates of upstream servers. Valider les certificats SSL des serveurs amonts. - + Use this provider with nginx's auth_request or traefik's forwardAuth. Only a single provider is required per root domain. You can't do per-application authorization, but you don't have to create a provider for each application. Utilisez ce fournisseur avec auth_request de nginx ou forwardAuth de traefik. Un seul fournisseur est nécessaire par domaine racine. Vous ne pouvez pas faire d'autorisation par application, mais vous n'avez pas besoin de créer un fournisseur pour chaque application. - + An example setup can look like this: Un exemple de configuration peut ressembler à ceci : - + authentik running on auth.example.com authentik en cours d'exécution sur auth.example.com - + app1 running on app1.example.com app1 en cours d'exécution sur app1.example.com - + In this case, you'd set the Authentication URL to auth.example.com and Cookie domain to example.com. Dans ce cas, vous devez définir l'URL d'authentification sur auth.example.com et le domaine des cookies sur example.com. - + Authentication URL URL d'authentification - + The external URL you'll authenticate at. The authentik core server should be reachable under this URL. L'URL externe à laquelle vous allez vous authentifier. Le serveur authentik core devrait être accessible à cette URL. - + Cookie domain Domaine des cookies - + Set this to the domain you wish the authentication to be valid for. Must be a parent domain of the URL above. If you're running applications as app1.domain.tld, app2.domain.tld, set this to 'domain.tld'. Définissez ceci sur le domaine pour lequel vous souhaitez que l'authentification soit valide. Il doit être un domaine parent de l'URL ci-dessus. Si vous exécutez des applications sous app1.domain.tld, app2.domain.tld, définissez ceci sur 'domain.tld'. - + Unknown proxy mode Mode proxy inconnu - + Token validity Validité du jeton - + Configure how long tokens are valid for. Configure la durée de validité des jetons d'accès. - + Additional scopes Portées additionnelles - + Additional scope mappings, which are passed to the proxy. Mappages de portée additionnelle, qui sont passés au proxy. - + Unauthenticated URLs URLs non-authentifiés - + Unauthenticated Paths Chemins non-authentifiés - + Regular expressions for which authentication is not required. Each new line is interpreted as a new expression. Expressions régulières pour lesquelles l'authentification n'est pas requise. Chaque ligne est interprétée comme une nouvelle expression. - + When using proxy or forward auth (single application) mode, the requested URL Path is checked against the regular expressions. When using forward auth (domain mode), the full requested URL including scheme and host is matched against the regular expressions. Lors de l'utilisation du mode proxy ou de l'authentification directe (application unique), le chemin d'accès à l'URL demandée est vérifié par rapport aux expressions régulières. Lors de l'utilisation de l'authentification directe (mode domaine), l'URL complète et le schéma est demandée et l'hôte est comparée aux expressions régulières. - + Authentication settings Paramètres d'authentification - + Intercept header authentication Intercepter l'en-tête d'authentification - + When enabled, authentik will intercept the Authorization header to authenticate the request. Lorsque cette option est activée, authentik intercepte l'en-tête Authorization pour authentifier la demande. - + Send HTTP-Basic Authentication Envoyer l'authentification HTTP-Basic - + Send a custom HTTP-Basic Authentication header based on values from authentik. Envoyer un en-tête d'authentification HTTP-Basic personnalisé basé sur les valeurs de authentik. - + ACS URL ACS URL - + Issuer Émetteur - + Also known as EntityID. Également appelé EntityID. - + Service Provider Binding Liaison du fournisseur de services - + Redirect Redirection - + Post Appliquer - + Determines how authentik sends the response back to the Service Provider. Détermine comment authentik renvoie la réponse au fournisseur de services. - + Audience Audience - + Signing Certificate Certificat de signature - + Certificate used to sign outgoing Responses going to the Service Provider. Certificat utilisé pour signer les réponses sortantes vers le Service Provider. - + Verification Certificate Certificat de validation - + When selected, incoming assertion's Signatures will be validated against this certificate. To allow unsigned Requests, leave on default. Si activée, les signatures des assertions entrantes seront validées par rapport à ce certificat. Pour autoriser les requêtes non signées, laissez la valeur par défaut. - + Property mappings Mappages de propriété - + NameID Property Mapping Mappage de la propriété NameID - + Configure how the NameID value will be created. When left empty, the NameIDPolicy of the incoming request will be respected. Configure la façon dont NameID sera créé. Si vide, la politique NameIDPolicy de la requête entrante sera appliquée. - + Assertion valid not before Assertion non valide avant - + Configure the maximum allowed time drift for an assertion. Configurer la durée maximale autorisée pour une assertion. - + Assertion valid not on or after Assertion non valide le ou après - + Assertion not valid on or after current time + this value. Assertion non valide à partir de l'heure actuelle + cette valeur. - + Session valid not on or after Session non valide à partir de - + Session not valid on or after current time + this value. Session non valide à partir de l'heure actuelle + cette valeur. - + Digest algorithm Algorithme d'empreinte - + Signature algorithm Algorithme de signature - + Successfully imported provider. Fournisseur importé avec succès - + Metadata Métadonnées - + Apply changes Appliquer les changements - + Close Fermer - + Finish Terminer - + Back Retour - + No form found Aucun formulaire trouvé - + Form didn't return a promise for submitting Le formulaire n'a pas retourné de promesse de soumission - + Select type Sélectionnez le type - + Try the new application wizard Essayez le nouvel l'assistant d'application - + The new application wizard greatly simplifies the steps required to create applications and providers. Le nouvel assistant d'application simplifie grandement les étapes nécessaires à la création d'applications et de fournisseurs. - + Try it now Essayer maintenant - + Create Créer - + New provider Nouveau fournisseur - + Create a new provider. Créer un nouveau fournisseur. - + Create Créer - + Shared secret Secret partagé - + Client Networks Réseaux du client - + List of CIDRs (comma-seperated) that clients can connect from. A more specific @@ -1616,104 +1616,104 @@ Il y a jour(s) URL URL - + SCIM base url, usually ends in /v2. URL de base SCIM, se termine généralement par /v2. - + Token Jeton - + Token to authenticate with. Currently only bearer authentication is supported. Jeton d'authentification à utiliser. Actuellement, seule l'authentification "bearer authentication" est prise en charge. - + User filtering Filtrage utilisateurs - + Exclude service accounts Exclure les comptes de service - + Group Group - + Only sync users within the selected group. Synchroniser uniquement les utilisateurs appartenant au groupe sélectionné. - + Attribute mapping Mappage des attributs - + User Property Mappings Mappage des propriétés utilisateur - + Property mappings used to user mapping. Mappages de propriété utilisés pour la correspondance des utilisateurs. - + Group Property Mappings Mappage des propriétés de groupe - + Property mappings used to group creation. Mappages de propriétés utilisés lors de la création des groupe - + Not used by any other object. Pas utilisé par un autre objet. - + object will be DELETED l'objet sera SUPPRIMÉ - + connection will be deleted la connexion sera supprimée - + reference will be reset to default value la référence sera réinitialisée à sa valeur par défaut - + reference will be set to an empty value la référence sera réinitialisée à une valeur vide - + () - ( + ( ) - + ID ID - + Successfully deleted @@ -1721,16 +1721,16 @@ Il y a jour(s) Failed to delete : - Échec de la suppression - : + Échec de la suppression + : - + Delete - Supprimer + Supprimer - + Are you sure you want to delete ? @@ -1739,898 +1739,898 @@ Il y a jour(s) Delete Supprimer - + Providers Fournisseurs - + Provide support for protocols like SAML and OAuth to assigned applications. Assure la prise en charge de protocoles tels que SAML et OAuth aux applications attribuées. - + Type Type - + Provider(s) Fournisseur(s) - + Assigned to application Assigné à l'application - + Assigned to application (backchannel) Assigné à l'application (backchannel). - + Warning: Provider not assigned to any application. Avertissement : le fournisseur n'est assigné à aucune application. - + Update Mettre à jour - + Update - Mettre à jour + Mettre à jour - + Select providers to add to application Sélectionnez les fournisseurs à ajouter à l'application. - + Add Ajouter - + Either input a full URL, a relative path, or use 'fa://fa-test' to use the Font Awesome icon "fa-test". Entrez une URL complète, un chemin relatif ou utilisez 'fa://fa-test' pour utiliser l'icône Font Awesome "fa-test". - + Path template for users created. Use placeholders like `%(slug)s` to insert the source slug. Modèle de chemin pour les utilisateurs créés. Utilisez des espaces réservés comme `%(slug)s` pour insérer le slug de la source. - + Successfully updated application. Application mise à jour avec succès - + Successfully created application. Application créée avec succès - + Application's display Name. Nom d'affichage de l'application - + Slug Slug - + Optionally enter a group name. Applications with identical groups are shown grouped together. Optionnellement, entrez un nom de groupe. Les applications avec les mêmes groupes seront affichées ensemble. - + Provider Fournisseur - + Select a provider that this application should use. Sélectionnez un fournisseur que cette application doit utiliser. - + Select backchannel providers which augment the functionality of the main provider. Sélectionner des fournisseurs backchannel qui augmentent la fonctionnalité du fournisseur principal. - + Policy engine mode Mode d'application des politiques - + Any policy must match to grant access N'importe quelle politique doit correspondre pour accorder l'accès - + All policies must match to grant access Toutes les politiques doivent correspondre pour accorder l'accès - + UI settings Paramètres d'UI - + Launch URL URL de lancement - + If left empty, authentik will try to extract the launch URL based on the selected provider. Si laissé vide, authentik essaiera d'extraire l'URL de lancement en se basant sur le fournisseur sélectionné. - + Open in new tab Ouvrir dans un nouvel onglet - + If checked, the launch URL will open in a new browser tab or window from the user's application library. Si cette case est cochée, l'URL de lancement s'ouvrira dans un nouvel onglet ou une nouvelle fenêtre du navigateur à partir de la bibliothèque d'applications de l'utilisateur. - + Icon Icône - + Currently set to: Actuellement fixé à : - + Clear icon Supprimer l'icône - + Publisher Éditeur - + Create Application Créer une application - + Overview Vue d'ensemble - + Changelog Journal des modification - + Warning: Provider is not used by any Outpost. Attention : ce fournisseur n’est utilisé par aucun avant-poste. - + Assigned to application Assigné à l'application - + Update LDAP Provider Mettre à jour le fournisseur LDAP - + Edit Éditer - + How to connect Comment se connecter - + Connect to the LDAP Server on port 389: Se connecter au serveur LDAP sur le port 389 : - + Check the IP of the Kubernetes service, or Vérifier l'IP du service Kubernetes, ou - + The Host IP of the docker host L'IP de l'hôte de docker - + Bind DN Bind DN - + Bind Password Mot de passe - + Search base Base de recherche - + Preview Prévisualisation - + Warning: Provider is not used by an Application. Avertissement : Le fournisseur n'est pas utilisé par une application. - + Redirect URIs URIs de redirection - + Update OAuth2 Provider Mettre à jour le fournisseur OAuth2 - + OpenID Configuration URL URL de configuration OpenID - + OpenID Configuration Issuer Émetteur de la configuration OpenID - + Authorize URL URL d'authorisation - + Token URL URL du jeton - + Userinfo URL URL Userinfo - + Logout URL URL de déconnexion - + JWKS URL URL JWKS - + Example JWT payload (for currently authenticated user) Exemple de charge utile JWT (pour l'utilisateur actuellement authentifié) - + Forward auth (domain-level) Transférer l'authentification (niveau domaine) - + Nginx (Ingress) Nginx (Ingress) - + Nginx (Proxy Manager) Nginx (Proxy Manager) - + Nginx (standalone) Nginx (standalone) - + Traefik (Ingress) Traefik (Ingress) - + Traefik (Compose) Traefik (Compose) - + Traefik (Standalone) Traefik (Standalone) - + Caddy (Standalone) Caddy (Standalone) - + Internal Host Hôte interne - + External Host Hôte externe - + Basic-Auth Basic-Auth - + Yes Oui - + Mode Mode - + Update Proxy Provider Mettre à jour le fournisseur de Proxy - + Protocol Settings Paramètres du protocole - + Allowed Redirect URIs URIs de redirection autorisés - + Setup Configuration - + No additional setup is required. Aucune configuration supplémentaire n'est nécessaire. - + Update Radius Provider Mettre à jour le fournisseur Radius - + Download Télécharger - + Copy download URL Copier l'URL de téléchargement - + Download signing certificate Télécharger le certificat de signature - + Related objects Objets apparentés - + Update SAML Provider Mettre à jour le fournisseur SAML - + SAML Configuration Configuration SAML - + EntityID/Issuer EntitéID/Émetteur - + SSO URL (Post) URL SSO (Post) - + SSO URL (Redirect) URL SSO (Redirect) - + SSO URL (IdP-initiated Login) URL SSO (IdP-initiated Login) - + SLO URL (Post) URL SLO (Post) - + SLO URL (Redirect) URL SLO (Redirect) - + SAML Metadata Métadonnée SAML - + Example SAML attributes Exemple d'attributs SAML - + NameID attribute Attribut NameID - + Warning: Provider is not assigned to an application as backchannel provider. Avertissement : Le fournisseur n'est pas assigné à une application en tant que fournisseur backchannel. - + Update SCIM Provider Mettre à jour le fournisseur SCIM - + Sync not run yet. La synchronisation n'a pas encore été lancée. - + Run sync again Relancer la synchro - + Modern applications, APIs and Single-page applications. Applications modernes, API et applications à page unique. - + LDAP LDAP - + Provide an LDAP interface for applications and users to authenticate against. Fournir une interface LDAP permettant aux applications et aux utilisateurs de s'authentifier. - + New application Nouvelle application - + Applications Applications - + Provider Type Type de fournisseur - + Application(s) Application(s) - + Application Icon Icône d'application - + Update Application Mettre à jour l'application - + Successfully sent test-request. Requête-test envoyée avec succès - + Log messages Messages de Journal - + No log messages. Aucun message de journal. - + Active Actif - + Last login Dernière connexion - + Select users to add Sélectionnez les utilisateurs à ajouter - + Successfully updated group. Groupe mis à jour avec succès - + Successfully created group. Groupe créé avec succès - + Is superuser Est superutilisateur - + Users added to this group will be superusers. Les utilisateurs ajoutés à ce groupe seront des super-utilisateurs. - + Parent Parent - + Attributes Attributs - + Set custom attributes using YAML or JSON. Définissez des attributs personnalisés via YAML ou JSON. - + Successfully updated binding. Liaison mise à jour avec succès - + Successfully created binding. Liaison créée avec succès - + Policy Politique - + Group mappings can only be checked if a user is already logged in when trying to access this source. Les mappages de groupes ne peuvent être vérifiés que si un utilisateur est déjà connecté lorsqu'il essaie d'accéder à cette source. - + User mappings can only be checked if a user is already logged in when trying to access this source. Les mappages d'utilisateurs ne peuvent être vérifiés que si un utilisateur est déjà connecté lorsqu'il essaie d'accéder à cette source. - + Enabled Activé - + Negate result Inverser le résultat - + Negates the outcome of the binding. Messages are unaffected. Inverse le résultat de la liaison. Les messages ne sont pas affectés. - + Order Tri - + Timeout Timeout - + Successfully updated policy. Politique mise à jour avec succès - + Successfully created policy. Politique créée avec succès - + A policy used for testing. Always returns the same result as specified below after waiting a random duration. Une politique utilisée pour les tests. Retourne toujours la même valeur telle qu'indiquée ci-dessous après une attente aléatoire. - + Execution logging Journalisation de l'exécution - + When this option is enabled, all executions of this policy will be logged. By default, only execution errors are logged. Si activée, toutes les exécutions de cette politique seront enregistrées. Par défaut, seules les erreurs d'exécution sont consignées. - + Policy-specific settings Paramètres spécifiques à la politique - + Pass policy? Réussir la politique ? - + Wait (min) Attente (min) - + The policy takes a random time to execute. This controls the minimum time it will take. La politique prend un certain temps à s'exécuter. Ceci contrôle la durée minimale. - + Wait (max) Attente (max) - + Matches an event against a set of criteria. If any of the configured values match, the policy passes. Fait correspondre un évènement à un certain nombre de critères. Si une des valeur configurée correspond, la politique réussit. - + Match created events with this action type. When left empty, all action types will be matched. Inclure les événements créés avec ce type d'action. S'il est laissé vide, tous les types d'action seront inclus. - + Matches Event's Client IP (strict matching, for network matching use an Expression Policy. Inclure l'adresse IP du client de l'évènement (correspondante stricte, pour un correspondance sur le réseau utiliser une politique d'expression) - + Match events created by selected application. When left empty, all applications are matched. Inclure les évènements créés par cette application. S'il est laissé vide, toutes les applications seront incluses. - + Checks if the request's user's password has been changed in the last x days, and denys based on settings. Vérifie si le mot de passe de l'usager a été changé dans les X derniers jours et refuse l'accès en fonction du paramétrage. - + Maximum age (in days) Âge maximum (en jours) - + Only fail the policy, don't invalidate user's password Seulement faire échouer la politique, ne pas invalider le mot de passe de l'utilisateur. - + Executes the python snippet to determine whether to allow or deny a request. Exécute le fragment de code python pour décider d'autoriser ou non la demande. - + Expression using Python. Expression en python - + See documentation for a list of all variables. Consultez la documentation pour la liste de toutes les variables. - + Static rules Règles Statiques - + Minimum length Longueur minimale - + Minimum amount of Uppercase Characters Nombre minimum de caractères majuscules - + Minimum amount of Lowercase Characters Nombre minimum de caractères minuscules - + Minimum amount of Digits Nombre minimum de chiffres - + Minimum amount of Symbols Characters Nombre minimum de symboles - + Error message Message d'erreur - + Symbol charset Set de symboles - + Characters which are considered as symbols. Caractères considérés comme des symboles. - + HaveIBeenPwned settings Paramètres de HaveIBeenPwned - + Allowed count Total autorisé - + Allow up to N occurrences in the HIBP database. Autoriser jusqu'à N occurrences dans la base de données HIBP - + zxcvbn settings Paramètres de zxcvbn - + Score threshold Seuil du score - + If the password's score is less than or equal this value, the policy will fail. Si le score du mot de passe est inférieur ou égal à cette valeur, la politique échoue. - + 0: Too guessable: risky password. (guesses < 10^3) 0: Trop prévisible: mot de passe risqué. (essais < 10^3) - + 1: Very guessable: protection from throttled online attacks. (guesses < 10^6) 1: Très prévisible: protection contre les attaques en ligne limitées. (essais < 10^6) - + 2: Somewhat guessable: protection from unthrottled online attacks. (guesses < 10^8) 2: Quelque peu prévisible: protection contre les attaques en ligne non limitées. (essais < 10^8) - + 3: Safely unguessable: moderate protection from offline slow-hash scenario. (guesses < 10^10) 3: Sûrement imprévisible: protection modérée contre les attaques de hash-lent hors ligne. (essais < 10^10) - + 4: Very unguessable: strong protection from offline slow-hash scenario. (guesses >= 10^10) 4: Très imprévisible: forte protection control les attaques de hash-lent hors ligne. (essais >= 10^10) - + Checks the value from the policy request against several rules, mostly used to ensure password strength. Vérifie la valeur de la requête via plusieurs règles, principalement utilisé pour s'assurer de la robustesse des mots de passe. - + Password field Champ mot de passe - + Field key to check, field keys defined in Prompt stages are available. Clé de champ à vérifier ; les clés de champ définies dans les étapes de d'invite sont disponibles. - + Check static rules Vérifier les règles statiques - + Check haveibeenpwned.com Vérifier haveibeenpwned.com - + For more info see: Pour plus d'informations, voir : - + Check zxcvbn Vérifier zxcvbn - + Password strength estimator created by Dropbox, see: Estimateur de force de mot de passe créé par Dropbox, voir : - + Allows/denys requests based on the users and/or the IPs reputation. Autorise/bloque les requêtes selon la réputation de l'utilisateur et/ou de l'adresse IP - + Invalid login attempts will decrease the score for the client's IP, and the @@ -2645,782 +2645,782 @@ doesn't pass when either or both of the selected options are equal or above the Check IP Vérifier l'adresse IP - + Check Username Vérifier le nom d'utilisateur - + Threshold Seuil - + New policy Nouvelle politique - + Create a new policy. Créer une nouvelle politique. - + Create Binding Créer une liaison - + Superuser Super-utilisateur - + Members Membres - + Select groups to add user to Sélectionnez les groupes à ajouter à l'utilisateur - + Warning: Adding the user to the selected group(s) will give them superuser permissions. Attention : L'ajout de l'utilisateur au(x) groupe(s) sélectionné(s) lui confère des droits de superutilisateur. - + Successfully updated user. Utilisateur mis à jour avec succès - + Successfully created user. Utilisateur créé avec succès - + Username Nom d'utilisateur - + User's primary identifier. 150 characters or fewer. Identifiant principal de l'utilisateur. 150 caractères ou moins. - + User's display name. Nom d'affichage de l'utilisateur - + Email Courriel - + Is active Est actif - + Designates whether this user should be treated as active. Unselect this instead of deleting accounts. Indique si cet utilisateur doit être traité comme actif. Désélectionnez cette option au lieu de supprimer les comptes. - + Path Chemin - + Policy / User / Group Politique / Utilisateur / Groupe - + Policy Politique - + Group Groupe - + User Utilisateur - + Edit Policy Éditer la politique - + Update Group Mettre à jour le groupe - + Edit Group Éditer le groupe - + Update User Mettre à jour l'utilisateur - + Edit User Éditer l'utilisateur - + Policy binding(s) Liaison(s) de politique - + Update Binding Mettre à jour la liaison - + Edit Binding Éditer la liaison - + No Policies bound. Aucune politique liée. - + No policies are currently bound to this object. Aucune politique n'est actuellement lié à cet objet. - + Bind existing policy Lier une politique existante - + Warning: Application is not used by any Outpost. Attention : cette application n’est utilisée par aucun avant-poste. - + Related Lié - + Backchannel Providers Fournisseurs backchannel - + Check access Vérifier l'accès - + Check Vérifier - + Check Application access Vérifier l'accès de l'application - + Test Test - + Launch Lancer - + Logins over the last week (per 8 hours) Connexions au cours de la semaine écoulée (par tranche de 8 heures) - + Policy / Group / User Bindings Politique / Groupe / Liaisons utilisateur - + These policies control which users can access this application. Ces politiques contrôlent les autorisations d'accès des utilisateurs à cette application. - + Successfully updated source. Source mise à jour avec succès - + Successfully created source. Source créée avec succès - + Sync users Synchroniser les utilisateurs - + User password writeback Réécriture du mot de passe utilisateur - + Login password is synced from LDAP into authentik automatically. Enable this option only to write password changes in authentik back to LDAP. Le mot de passe de connexion est synchronisé depuis LDAP vers authentik automatiquement. Activez cette option seulement pour enregistrer les changements de mots de passe dans authentik jusqu'au LDAP. - + Sync groups Synchroniser les groupes - + Connection settings Paramètres de connexion - + Server URI URI du serveur - + Specify multiple server URIs by separating them with a comma. Spécifiez plusieurs URIs de serveurs en les séparant par une virgule. - + Enable StartTLS Activer StartTLS - + To use SSL instead, use 'ldaps://' and disable this option. Pour utiliser SSL à la base, utilisez "ldaps://" et désactviez cette option. - + TLS Verification Certificate Certificat de vérification TLS - + When connecting to an LDAP Server with TLS, certificates are not checked by default. Specify a keypair to validate the remote certificate. Lors de la connexion avec un serveur LDAP avec TLS, les certificats ne sont pas vérifiés par défaut. Spécifiez une paire de clés pour vérifier le certificat distant. - + Bind CN Bind DN - + LDAP Attribute mapping Mappage des attributs LDAP - + Property mappings used to user creation. Mappages de propriété utilisés lors de la création d'utilisateurs - + Additional settings Paramètres additionnels - + Parent group for all the groups imported from LDAP. Groupe parent pour tous les groupes LDAP - + User path Chemin utilisateur - + Addition User DN Préfixe DN utilisateurs - + Additional user DN, prepended to the Base DN. DN à préfixer au DN de base pour les utilisateurs - + Addition Group DN Préfixe DN groupes - + Additional group DN, prepended to the Base DN. DN à préfixer au DN de base pour les groupes - + User object filter Filtre des objets utilisateur - + Consider Objects matching this filter to be Users. Les objets appliqués à ce filtre seront des utilisateurs. - + Group object filter Filtre d'objets de groupe - + Consider Objects matching this filter to be Groups. Les objets appliqués à ce filtre seront des groupes. - + Group membership field Champ d'appartenance au groupe - + Field which contains members of a group. Note that if using the "memberUid" field, the value is assumed to contain a relative distinguished name. e.g. 'memberUid=some-user' instead of 'memberUid=cn=some-user,ou=groups,...' Champ qui contient les membres d'un groupe. Si vous utilisez le champ "memberUid", la valeur est censée contenir un nom distinctif relatif, par exemple 'memberUid=un-utilisateur' au lieu de 'memberUid=cn=un-utilisateur,ou=groups,...' - + Object uniqueness field Champ d'unicité de l'objet - + Field which contains a unique Identifier. Champ qui contient un identifiant unique. - + Link users on unique identifier Lier les utilisateurs sur base d'un identifiant unique - + Link to a user with identical email address. Can have security implications when a source doesn't validate email addresses Lier à un utilisateur avec la même adresse courriel. Peut avoir des implications de sécurité lorsqu'une source ne valide pas les adresses courriel. - + Use the user's email address, but deny enrollment when the email address already exists Utiliser l'adresse courriel de l'utilisateur, mais refuser l'inscription si l'adresse courriel existe déjà. - + Link to a user with identical username. Can have security implications when a username is used with another source Lien vers un utilisateur ayant un nom d'utilisateur identique. Cela peut avoir des implications en termes de sécurité lorsqu'un nom d'utilisateur est utilisé avec une autre source. - + Use the user's username, but deny enrollment when the username already exists Utiliser le nom d'utilisateur de l'utilisateur, mais refuser l'inscription si le nom d'utilisateur existe déjà. - + Unknown user matching mode Mode de correspondance d'utilisateur inconnu - + URL settings Paramètres d'URL - + Authorization URL URL d'autorisation - + URL the user is redirect to to consent the authorization. URL vers laquelle l'utilisateur est redirigé pour consentir l'autorisation. - + Access token URL URL du jeton d'accès - + URL used by authentik to retrieve tokens. URL utilisée par authentik pour récupérer les jetons. - + Profile URL URL de profil - + URL used by authentik to get user information. URL utilisée par authentik pour obtenir des informations sur l'utilisateur. - + Request token URL URL du jeton de requête - + URL used to request the initial token. This URL is only required for OAuth 1. URL utilisée pour demander le jeton initial. Cette URL est uniquement requise pour OAuth 1. - + OIDC Well-known URL OIDC Well-known URL - + OIDC well-known configuration URL. Can be used to automatically configure the URLs above. URL de configuration well-known de OIDC. Peut être utilisé pour configurer automatiquement les URL ci-dessus. - + OIDC JWKS URL OIDC JWKS URL - + JSON Web Key URL. Keys from the URL will be used to validate JWTs from this source. URL de la clé Web JSON. Les clés de l'URL seront utilisées pour valider les JWTs de cette source. - + OIDC JWKS OIDC JWKS - + Raw JWKS data. Données JWKS brutes. - + User matching mode Mode de correspondance utilisateur - + Delete currently set icon. Supprimer l'icône actuellement définie - + Consumer key Clé consumer - + Consumer secret Secret consumer - + Additional scopes to be passed to the OAuth Provider, separated by space. To replace existing scopes, prefix with *. Champs supplémentaires à transmettre au fournisseur OAuth, séparés par des espaces. Pour remplacer les champs existants, préfixez-les par *. - + Flow settings Paramètres du flux - + Flow to use when authenticating existing users. Flux à utiliser pour authentifier les utilisateurs existants. - + Enrollment flow Flux d'inscription - + Flow to use when enrolling new users. Flux à utiliser pour inscrire les nouveaux utilisateurs. - + Load servers Charger les serveurs - + Re-authenticate with plex Se ré-authentifier avec Plex - + Allow friends to authenticate via Plex, even if you don't share any servers Autoriser les amis à s'authentifier via Plex, même si vous ne partagez aucun serveur - + Allowed servers Serveurs autorisés - + Select which server a user has to be a member of to be allowed to authenticate. Sélectionnez de quel serveur un utilisateur doit être un membre pour être autorisé à s'authentifier. - + SSO URL URL SSO - + URL that the initial Login request is sent to. URL de destination de la requête initiale de login. - + SLO URL URL SLO - + Optional URL if the IDP supports Single-Logout. URL optionnelle si le fournisseur d'identité supporte Single-Logout. - + Also known as Entity ID. Defaults the Metadata URL. Aussi appelé Entity ID. URL de métadonnée par défaut. - + Binding Type Type de liaison - + Redirect binding Redirection - + Post-auto binding Liaison Post-automatique - + Post binding but the request is automatically sent and the user doesn't have to confirm. Liaison Post mais la demande est automatiquement envoyée et l'utilisateur n'a pas à confirmer. - + Post binding Post - + Signing keypair Paire de clés de signature - + Keypair which is used to sign outgoing requests. Leave empty to disable signing. Paire de clés utilisée pour signer le requêtes sortantes. Laisser vide pour désactiver la signature. - + Allow IDP-initiated logins Autoriser les connexions initiées par IDP - + Allows authentication flows initiated by the IdP. This can be a security risk, as no validation of the request ID is done. Autoriser les flux d'authentification initiés par l'IdP. Cela peut présenter un risque de sécurité, aucune validation de l'ID de la requête n'est effectuée. - + NameID Policy Politique NameID - + Persistent Persistant - + Email address Adresse courriel - + Windows Fenêtres - + X509 Subject Sujet X509 - + Transient Transitoire - + Delete temporary users after Supprimer les utilisateurs temporaires après - + Time offset when temporary users should be deleted. This only applies if your IDP uses the NameID Format 'transient', and the user doesn't log out manually. Moment où les utilisateurs temporaires doivent être supprimés. Cela ne s'applique que si votre IDP utilise le format NameID "transient" et que l'utilisateur ne se déconnecte pas manuellement. - + Pre-authentication flow Flux de pré-authentification - + Flow used before authentication. Flux à utiliser avant authentification. - + New source Nouvelle source - + Create a new source. Créer une nouvelle source. - + Sources of identities, which can either be synced into authentik's database, or can be used by users to authenticate and enroll themselves. Sources d'identités, qui peuvent soit être synchronisées dans la base de données d'authentik, soit être utilisées par les utilisateurs pour s'authentifier et s'inscrire. - + Source(s) Source(s) - + Disabled Désactivé - + Built-in Intégré - + Update LDAP Source Mettre à jour la source LDAP - + Not synced yet. Pas encore synchronisé. - + Task finished with warnings Tâche terminée avec avertissements - + Task finished with errors Tâche terminée avec erreurs - + Last sync: - Dernière synchro : + Dernière synchro : - + OAuth Source Source OAuth - + Generic OpenID Connect Connection OpenID Générique - + Unknown provider type Type de fournisseur inconnu - + Details Détails - + Callback URL URL de rappel - + Access Key Clé d'accès - + Update OAuth Source Mettre à jour la source OAuth - + Diagram Diagramme - + Policy Bindings Liaisons des politiques - + These bindings control which users can access this source. @@ -3431,478 +3431,478 @@ doesn't pass when either or both of the selected options are equal or above the Update Plex Source Mettre à jour la source Plex - + Update SAML Source Mettre à jour la source SAML - + Successfully updated mapping. Mappage mis à jour avec succès. - + Successfully created mapping. Mappage créé avec succès - + Object field Champ d'objet - + Field of the user object this value is written to. Champ de l'objet utilisateur dans lequel cette valeur est écrite. - + SAML Attribute Name Nom d'attribut SAML - + Attribute name used for SAML Assertions. Can be a URN OID, a schema reference, or a any other string. If this property mapping is used for NameID Property, this field is discarded. Nom de l'attribut utilisé pour les assertions SAML. Peut être un OID URN, une référence à un schéma ou tout autre valeur. Si ce mappage de propriété est utilisé pour la propriété NameID, cette valeur est ignorée. - + Friendly Name Nom amical - + Optionally set the 'FriendlyName' value of the Assertion attribute. Indiquer la valeur "FriendlyName" de l'attribut d'assertion (optionnel) - + Scope name Nom de la portée - + Scope which the client can specify to access these properties. Portée que le client peut spécifier pour accéder à ces propriétés. - + Description shown to the user when consenting. If left empty, the user won't be informed. Description montrée à l'utilisateur lors de l'approbation. Aucune information présentée à l'utilisateur si laissé vide. - + Example context data Exemple contextuel de données - + Active Directory User Utilisateur Active Directory - + Active Directory Group Groupe Active Directory - + New property mapping Nouveau mappage de propriété - + Create a new property mapping. Créer un nouveau mappage de propriétés. - + Property Mappings Mappages de propriété - + Control how authentik exposes and interprets information. Contrôle comment authentik expose et interprète les informations - + Property Mapping(s) Mappage(s) de propriété - + Test Property Mapping Tester le mappage de propriété - + Hide managed mappings Cacher les mappages gérés - + Successfully updated token. Jeton mis à jour avec succès - + Successfully created token. Jeton créé avec succès - + Unique identifier the token is referenced by. Identifiant unique par lequel le jeton est référencé. - + Intent Intention - + API Token Jeton API - + Used to access the API programmatically Utilisé pour accéder à l'API de manière programmatique - + App password. Mot de passe de l'application. - + Used to login using a flow executor Utilisé pour se connecter à l'aide d'un exécuteur de flux - + Expiring Expiration - + If this is selected, the token will expire. Upon expiration, the token will be rotated. Si cette option est sélectionnée, le jeton expirera. À son expiration, le jeton fera l'objet d'une rotation. - + Expires on Expire le - + API Access Accès à l'API - + App password Mot de passe de l'App - + Verification Vérification - + Unknown intent Intention inconnue - + Tokens Jetons - + Tokens are used throughout authentik for Email validation stages, Recovery keys and API access. Les jetons sont utilisés dans authentik pour les étapes de validation des courriels, les clés de récupération et l'accès aux API. - + Expires? Expire ? - + Expiry date Date d'expiration - + Token(s) Jeton(s) - + Create Token Créer un jeton - + Token is managed by authentik. Jeton géré par authentik - + Update Token Mettre à jour le jeton - + Successfully updated tenant. Tenant mis à jour avec succès - + Successfully created tenant. Tenant créé avec succès - + Domain Domaine - + Matching is done based on domain suffix, so if you enter domain.tld, foo.domain.tld will still match. La correspondante est effectuée sur le suffixe du domaine ; si vous entrez domain.tld, foo.domain.tld sera également inclus. - + Default Par défaut - + Use this tenant for each domain that doesn't have a dedicated tenant. Utilisez ce locataire pour chaque domaine qui ne dispose pas d'un locataire dédié. - + Branding settings Paramètres de marque - + Title Titre - + Branding shown in page title and several other places. Image de marque utilisée dans le titre de la page et dans d'autres endroits - + Logo Logo - + Icon shown in sidebar/header and flow executor. Icône affichée dans la barre latérale, l'en-tête et dans l'exécuteur de flux. - + Favicon Favicon - + Icon shown in the browser tab. Icône affichée dans l'onglet du navigateur. - + Default flows Flux par défaut - + Flow used to authenticate users. If left empty, the first applicable flow sorted by the slug is used. Flux utilisé pour authentifier les utilisateurs. S'il est laissé vide, le premier flux applicable trié par le slug est utilisé. - + Invalidation flow Flux d'invalidation - + Flow used to logout. If left empty, the first applicable flow sorted by the slug is used. Flux utilisé pour la déconnexion. S'il est laissé vide, le premier flux applicable trié par le slug est utilisé. - + Recovery flow Flux de récupération - + Recovery flow. If left empty, the first applicable flow sorted by the slug is used. Flux de récupération. Si laissé vide, le premier flux applicable trié par slug sera utilisé. - + Unenrollment flow Flux de désinscription - + If set, users are able to unenroll themselves using this flow. If no flow is set, option is not shown. Si défini, les utilisateurs peuvent se désinscrire à l'aide de ce flux. Si aucun flux n'est défini, l'option n'est pas affichée. - + User settings flow Flux de paramètres utilisateur - + If set, users are able to configure details of their profile. Si défini, les utilisateurs sont capables de modifier les informations de leur profil. - + Device code flow Flux de code de l'appareil - + If set, the OAuth Device Code profile can be used, and the selected flow will be used to enter the code. S'il est activé, le profil OAuth Device Code peut être utilisé et le flux sélectionné sera utilisé pour saisir le code. - + Other global settings Autres paramètres globaux - + Web Certificate Certificat Web - + Event retention Rétention d'évènement - + Duration after which events will be deleted from the database. Expiration des évènements à l'issue de laquelle ils seront supprimés de la base de donnée. - + When using an external logging solution for archiving, this can be set to "minutes=5". En cas d'utilisation d'une solution de journalisation externe pour l'archivage, cette valeur peut être fixée à "minutes=5". - + This setting only affects new Events, as the expiration is saved per-event. Ce paramètre n'affecte que les nouveaux événements, l'expiration étant enregistrée pour chaque événement. - + Format: "weeks=3;days=2;hours=3,seconds=2". Format : "weeks=3;days=2;hours=3,seconds=2". - + Set custom attributes using YAML or JSON. Any attributes set here will be inherited by users, if the request is handled by this tenant. Définir des attributs personnalisés en utilisant YAML ou JSON. Tous les attributs définis ici seront hérités par les utilisateurs, si la demande est traitée par ce tenant. - + Tenants Tenants - + Configure visual settings and defaults for different domains. Configure le paramètres visuels et par défaut des différents domaines. - + Default? Par défaut ? - + Tenant(s) Tenant(s) - + Update Tenant Mettre à jour le tenant - + Create Tenant - Créer un locataire - + Créer un tenant + Policies Politiques - + Allow users to use Applications based on properties, enforce Password Criteria and selectively apply Stages. Permettre aux usagers l'utilisation d'applications sur la base de leurs propriétés, appliquer les critères de robustesse des mots de passe et sélectionner les flux applicables. - + Assigned to object(s). - Assigné à + Assigné à objet(s). - + Warning: Policy is not assigned. Avertissement : la politique n'est pas assignée. - + Test Policy Tester la politique - + Policy / Policies Politique/s - + Successfully cleared policy cache Cache de politique vidé avec succès - + Failed to delete policy cache Impossible de vider le cache de politique - + Clear cache Vider le cache - + Clear Policy cache Vider le cache de politique - + Are you sure you want to clear the policy cache? This will cause all policies to be re-evaluated on their next usage. @@ -3911,93 +3911,93 @@ doesn't pass when either or both of the selected options are equal or above the Reputation scores Scores de Réputation - + Reputation for IP and user identifiers. Scores are decreased for each failed login and increased for each successful login. Réputations pour chaque IP et identifiant utilisateur. Les scores sont décrémentés à chaque connexion échouée et incrémentés pour chaque connexion réussie. - + IP IP - + Score Note - + Updated Mis à Jour - + Reputation Réputation - + Groups Groupes - + Group users together and give them permissions based on the membership. Regroupez les utilisateurs et donnez-leur des autorisations en fonction de leur appartenance. - + Superuser privileges? Privilèges de super-utilisateur ? - + Group(s) Groupe(s) - + Create Group Créer un groupe - + Create group Créer un groupe - + Enabling this toggle will create a group named after the user, with the user as member. Activer cette option va créer un groupe du même nom que l'utilisateur dont il sera membre. - + Use the username and password below to authenticate. The password can be retrieved later on the Tokens page. Utilisez le nom d'utilisateur et le mot de passe ci-dessous pour vous authentifier. Le mot de passe peut être récupéré plus tard sur la page Jetons. - + Password Mot de passe - + Valid for 360 days, after which the password will automatically rotate. You can copy the password from the Token List. Valide pendant 360 jours, après quoi le mot de passe sera alterné automatiquement. Vous pouvez copier le mot de passe depuis la liste des jetons. - + The following objects use - The following objects use + The following objects use - + connecting object will be deleted L'objet connecté sera supprimé - + Successfully updated @@ -4005,625 +4005,625 @@ doesn't pass when either or both of the selected options are equal or above the Failed to update : - Échec de la mise à jour - : + Échec de la mise à jour + : - + Are you sure you want to update ""? - Êtes-vous sûr de vouloir mettre à jour - " + Êtes-vous sûr de vouloir mettre à jour + " " ? - + Successfully updated password. Le mot de passe a été mis à jour avec succès. - + Successfully sent email. Courriel envoyé avec succès - + Email stage Étape courriel - + Successfully added user(s). L'ajout d'utilisateur(s) a été effectué avec succès. - + Users to add Utilisateurs à ajouter - + User(s) Utilisateur(s) - + Remove Users(s) Retirer le/les utilisateur(s) - + Are you sure you want to remove the selected users from the group ? - Êtes-vous sûr de vouloir supprimer les utilisateurs sélectionnés du groupe + Êtes-vous sûr de vouloir supprimer les utilisateurs sélectionnés du groupe ? - + Remove Retirer - + Impersonate Se faire passer pour - + User status Statut utilisateur - + Change status Changer le statut - + Deactivate Désactiver - + Update password Mettre à Jour le mot de passe - + Set password Définir le mot de passe - + Successfully generated recovery link Lien de récupération généré avec succès - + No recovery flow is configured. Aucun flux de récupération n'est configuré. - + Copy recovery link Copier le lien de récupération - + Send link Envoyer un lien - + Send recovery link to user Envoyer le lien de récupération à l'utilisateur - + Email recovery link Lien de récupération courriel - + Recovery link cannot be emailed, user has no email address saved. Le lien de récupération ne peut pas être envoyé par courriel, l'utilisateur n'a aucune adresse courriel enregistrée. - + To let a user directly reset a their password, configure a recovery flow on the currently active tenant. Pour laisser les utilisateurs réinitialiser leur mot de passe, configurez un flux de récupération sur le locataire actuel. - + Add User Ajouter un utilisateur - + Warning: This group is configured with superuser access. Added users will have superuser access. Avertissement : Ce groupe est configuré avec un accès superutilisateur. Les utilisateurs ajoutés auront un accès superutilisateur. - + Add existing user Ajouter un utilisateur existant - + Create user Créer un utilisateur - + Create User Créer un utilisateur - + Create Service account Créer un compte de service - + Hide service-accounts Cacher les comptes de service - + Group Info Informations de Groupe - + Notes Notes - + Edit the notes attribute of this group to add notes here. Modifiez l'attribut notes de ce groupe pour ajouter des notes ici. - + Users Utilisateurs - + Root Racine - + Warning: You're about to delete the user you're logged in as (). Proceed at your own risk. - Avertissement : Vous êtes sur le point de supprimer l'utilisateur sous lequel vous êtes connecté ( + Avertissement : Vous êtes sur le point de supprimer l'utilisateur sous lequel vous êtes connecté ( ). Poursuivez à vos propres risques. - + Hide deactivated user Cacher l'utilisateur désactivé - + User folders Dossiers utilisateurs - + Successfully added user to group(s). L'utilisateur a été ajouté avec succès au(x) groupe(s). - + Groups to add Groupes à ajouter - + Remove from Group(s) Retirer du/des Groupe(s) - + Are you sure you want to remove user from the following groups? - Êtes-vous sûr de vouloir retirer l'utilisateur + Êtes-vous sûr de vouloir retirer l'utilisateur des groupes suivants ? - + Add Group Ajouter un groupe - + Add to existing group Ajouter à un groupe existant - + Add new group Ajouter un nouveau groupe - + Application authorizations Autorisations de l'application - + Revoked? Révoqué ? - + Expires Expire - + ID Token ID du jeton - + Refresh Tokens(s) Rafraîchir le(s) jeton(s) - + Last IP Dernière IP - + Session(s) Session(s) - + Expiry Expiration - + (Current session) (Session actuelle) - + Permissions Permissions - + Consent(s) Approbation(s) - + Successfully updated device. Appareil mis à jour avec succès - + Static tokens Jetons statiques - + TOTP Device Appareil TOTP - + Enroll S'inscrire - + Device(s) Appareil(s) - + Update Device Mettre à Jour l'Appareil - + Confirmed Confirmé - + User Info Info utilisateur - + Actions over the last week (per 8 hours) Actions au cours de la semaine écoulée (par tranche de 8 heures) - + Edit the notes attribute of this user to add notes here. Éditer l'attribut notes de cet utilisateur pour ajouter des notes ici. - + Sessions Sessions - + User events Événements de l'utilisateur - + Explicit Consent Approbation explicite - + OAuth Refresh Tokens Jetons de rafraîchissement OAuth - + MFA Authenticators Authentificateurs MFA - + Successfully updated invitation. Invitation mise à jour avec succès - + Successfully created invitation. Invitation créée avec succès - + Flow Flux - + When selected, the invite will only be usable with the flow. By default the invite is accepted on all flows with invitation stages. Si sélectionné, l'invitation ne sera utilisable que dans ce flux. Par défaut l'invitation est acceptée sur tous les flux avec des étapes d'invitation. - + Optional data which is loaded into the flow's 'prompt_data' context variable. YAML or JSON. Données optionnelles chargées dans la variable contextuelle 'prompt_data' du flux. YAML ou JSON. - + Single use Usage unique - + When enabled, the invitation will be deleted after usage. Si activée, l'invitation sera supprimée après utilisation. - + Select an enrollment flow Sélectionnez un flux d'inscription - + Link to use the invitation. Lien pour utiliser l'invitation. - + Invitations Invitations - + Create Invitation Links to enroll Users, and optionally force specific attributes of their account. Créer des liens d'invitation pour inscrire des utilisateurs et éventuellement imposer certains attributs de leurs compte. - + Created by Créé par - + Invitation(s) Invitation(s) - + Invitation not limited to any flow, and can be used with any enrollment flow. L'invitation n'est limitée à aucun flux, et peut être utilisée avec n'importe quel flux d'inscription. - + Update Invitation Mettre à Jour l'invitation - + Create Invitation Créer une invitation - + Warning: No invitation stage is bound to any flow. Invitations will not work as expected. Attention : aucune étape d’invitation n’a été ajoutée à aucun flux. Les invitations ne fonctionneront pas comme attendu. - + Auto-detect (based on your browser) Détection automatique (basée sur votre navigateur) - + Required. Obligatoire. - + Continue Continuer - + Successfully updated prompt. Invite mise à jour avec succès. - + Successfully created prompt. Invite créée avec succès. - + Text: Simple Text input Texte : simple champ texte - + Text Area: Multiline text input Zone de Texte : Entrée de Texte multiligne - + Text (read-only): Simple Text input, but cannot be edited. Texte (lecture seule) : Texte Simple, mais ne peut être édité. - + Text Area (read-only): Multiline text input, but cannot be edited. Zone de Texte (lecture seule) : Entrée de Texte multiligne, mais ne peut pas être édité. - + Username: Same as Text input, but checks for and prevents duplicate usernames. Nom d'utilisateur : Identique à la saisie de texte, mais vérifie et empêche les noms d'utilisateur en double. - + Email: Text field with Email type. Courriel : champ texte de type adresse courriel - + Password: Masked input, multiple inputs of this type on the same prompt need to be identical. Mot de Passe : Entrée masquée, plusieurs entrées de ce type sur une même page odivent être identiques. - + Number Nombre - + Checkbox Case à cocher - + Radio Button Group (fixed choice) Group de boutons radio (choix fixe) - + Dropdown (fixed choice) Menu déroulant (choix fixe) - + Date Date - + Date Time Date et heure - + File Fichier - + Separator: Static Separator Line Séparateur : Ligne de séparation statique - + Hidden: Hidden field, can be used to insert data into form. Caché : champ caché, peut être utilisé pour insérer des données dans le formulaire. - + Static: Static value, displayed as-is. Statique : valeur statique, affichée comme telle. - + authentik: Locale: Displays a list of locales authentik supports. authentik: Locales: Affiche la liste des locales supportées par authentik. - + Preview errors Prévisualisation des erreurs - + Data preview Prévisualisation des données - + Unique name of this field, used for selecting fields in prompt stages. Nom unique de ce champ, utilisé pour sélectionner les champs dans les étapes de demande - + Field Key Clé du champ - + Name of the form field, also used to store the value. Nom du champ de formulaire utilisé pour enregistrer la valeur - + When used in conjunction with a User Write stage, use attributes.foo to write attributes. Lorsqu’utilisé avec une étape Écriture Utilisateur, utilise attributes.foo pour écrire les attributs. - + Label Libellé - + Label shown next to/above the prompt. Libellé affiché à côté/au-dessus du champ. - + Required Obligatoire - + Interpret placeholder as expression Interpréter le placeholder comme une expression - + When checked, the placeholder will be evaluated in the same way a property mapping is. @@ -4634,7 +4634,7 @@ doesn't pass when either or both of the selected options are equal or above the Placeholder Par défaut - + Optionally provide a short hint that describes the expected input value. @@ -4647,7 +4647,7 @@ doesn't pass when either or both of the selected options are equal or above the Interpret initial value as expression Interpréter la valeur initiale comme une expression - + When checked, the initial value will be evaluated in the same way a property mapping is. @@ -4658,7 +4658,7 @@ doesn't pass when either or both of the selected options are equal or above the Initial value Valeur initiale - + Optionally pre-fill the input with an initial value. @@ -4671,152 +4671,152 @@ doesn't pass when either or both of the selected options are equal or above the Help text Texte d'aide - + Any HTML can be used. N'importe quel HTML peut être utilisé. - + Prompts Invites - + Single Prompts that can be used for Prompt Stages. Invites simples qui peuvent être utilisés pour les étapes d'invite. - + Field Champ - + Stages Étapes - + Prompt(s) Invite(s) - + Update Prompt Mettre à jour l'invite - + Create Prompt Créer une invite - + Target Cible - + Stage Étape - + Evaluate when flow is planned Évaluer quand le flux est planifié - + Evaluate policies during the Flow planning process. Évaluer les politiques pendant le processus de planification du flux - + Evaluate when stage is run Évaluer quand l'étape est exécutée - + Evaluate policies before the Stage is present to the user. Évaluer les politiques avant la présentation de l'étape à l'utilisateur - + Invalid response behavior Comportement de réponse invalide - + Returns the error message and a similar challenge to the executor Retourne le message d'erreur et un défi similaire à l'exécuteur - + Restarts the flow from the beginning Redémarre le flux depuis le début - + Restarts the flow from the beginning, while keeping the flow context Redémarre le flux depuis le début, en gardant le contexte du flux - + Configure how the flow executor should handle an invalid response to a challenge given by this bound stage. Configurer comment l'exécuteur de flux doit gérer une réponse invalide à un défi donné par cette étape d'assignation - + Successfully updated stage. Étape mise à jour avec succès - + Successfully created stage. Étape créée avec succès - + Stage used to configure a duo-based authenticator. This stage should be used for configuration flows. Étape de configuration d'un authentificateur Duo. Cette étape devrait être utilisée en flux de configuration. - + Authenticator type name Nom du type d'authentificateur - + Display name of this authenticator, used by users when they enroll an authenticator. Affiche le nom de cet authentificateur, utilisé par les utilisateurs quand ils inscrivent un authentificateur. - + API Hostname Nom d'hôte de l'API - + Duo Auth API API d'Authentification Duo - + Integration key Clé d'intégration - + Secret key Clé secrète - + Duo Admin API (optional) API Administrateur Duo (optionnel) - + When using a Duo MFA, Access or Beyond plan, an Admin API application can be created. @@ -4827,630 +4827,630 @@ doesn't pass when either or both of the selected options are equal or above the Stage-specific settings Paramètres propres à l'étape - + Configuration flow Flux de configuration - + Flow used by an authenticated user to configure this Stage. If empty, user will not be able to configure this stage. Flux utilisé par un utilisateur authentifié pour configurer cette étape. S'il est vide, l'utilisateur ne sera pas en mesure de le configurer. - + Twilio Account SID SID de Compte Twilio - + Get this value from https://console.twilio.com Obtenez cette valeur depuis https://console.twilio.com - + Twilio Auth Token Jeton d'Authentification Twilio - + Authentication Type Type d'authentification - + Basic Auth Authentification Basique - + Bearer Token Bearer Token - + External API URL URL d'API externe - + This is the full endpoint to send POST requests to. Ceci est le point de terminaison complet vers lequel il faut envoyer des requêtes POST - + API Auth Username Nom d'utilisateur de l'API d'Authentification - + This is the username to be used with basic auth or the token when used with bearer token Ceci est le nom d'utilisateur à utiliser pour de l'authentification basique ou le token à utiliser en avec Bearer token - + API Auth password Mot de passe de l'API d'Authentification - + This is the password to be used with basic auth Ceci est le mot de passe à utiliser pour l'authentification basique - + Mapping Mappage - + Modify the payload sent to the custom provider. Modifier le contenu envoyé aux fournisseurs personnalisés. - + Stage used to configure an SMS-based TOTP authenticator. Étape utilisée pour configurer un authentificateur TOTP par SMS. - + Twilio Twilio - + Generic Générique - + From number Numéro Expéditeur - + Number the SMS will be sent from. Numéro depuis lequel le SMS sera envoyé. - + Hash phone number Hacher le numéro de téléphone - + If enabled, only a hash of the phone number will be saved. This can be done for data-protection reasons. Devices created from a stage with this enabled cannot be used with the authenticator validation stage. Si activé, seul un hash du numéro de téléphone sera sauvegarder. Cela peut être fait pour des raisons de protection des données personnelles. Les appareils créés depuis une étape ayant cette option activée ne peuvent pas être utilisés avec l'étape de validation d'authentificateur. - + Stage used to configure a static authenticator (i.e. static tokens). This stage should be used for configuration flows. Étape de configuration d'un authentificateur statique (jetons statiques). Cette étape devrait être utilisée en flux de configuration. - + Token count Compteur jeton - + Stage used to configure a TOTP authenticator (i.e. Authy/Google Authenticator). Étape utilisée pour configurer un authentificateur TOTP (comme Authy ou Google Authenticator).L - + Digits Chiffres - + 6 digits, widely compatible 6 chiffres, largement compatible - + 8 digits, not compatible with apps like Google Authenticator 8 chiffres, incompatible avec certaines applications telles que Google Authenticator - + Stage used to validate any authenticator. This stage should be used during authentication or authorization flows. Étape utilisée pour valider tout type d'authentificateur. Cette étape devrait être utilisée en flux d'authentification ou d'autorisation. - + Device classes Classes d'équipement - + Static Tokens Jetons statiques - + TOTP Authenticators Authentificateur TOTP - + WebAuthn Authenticators Authentificateurs WebAuthn - + Duo Authenticators Authentificateurs Duo - + SMS-based Authenticators Authenticatificateurs basé sur SMS - + Device classes which can be used to authenticate. Classe d'équipement qui peut être utilisé pour s'authentifier - + Last validation threshold Seuil de dernière validation - + If any of the devices user of the types selected above have been used within this duration, this stage will be skipped. Si l’utilisateur a utilisé n’importe lequel des appareils du type sélectionné ci-dessus pendant cette période, cette étape sera ignorée. - + Not configured action Action non configurée - + Force the user to configure an authenticator Obliger l'utilisateur à configurer un authentificateur - + Deny the user access Refuser l'accès à l'utilisateur - + WebAuthn User verification Vérification Utilisateur WebAuthn - + User verification must occur. La vérification utilisateur doit avoir lieu. - + User verification is preferred if available, but not required. La vérification utilisateur est préférée si disponible, mais non obligatoire. - + User verification should not occur. La vérification utilisateur ne doit pas avoir lieu. - + Configuration stages Étapes de Configuration - + Stages used to configure Authenticator when user doesn't have any compatible devices. After this configuration Stage passes, the user is not prompted again. Étapes utilisées pour configurer Authentifcateur (Authenticator) lorsque l’utilisateur n’a pas d’appareil compatible. Une fois cette étape passée, l’utilisateur ne sera pas sollicité de nouveau. - + When multiple stages are selected, the user can choose which one they want to enroll. Lorsque plusieurs étapes sont sélectionnées, les utilisateurs peuvent choisir celle qu’ils souhaient utiliser pour s’enrôler. - + User verification Vérification Utilisateur - + Resident key requirement Exigence de clé résidente - + Authenticator Attachment Lien à l'authentificateur - + No preference is sent Aucune préférence n'est envoyée - + A non-removable authenticator, like TouchID or Windows Hello Un authentificateur inamovible, comme TouchID ou Windows Hello - + A "roaming" authenticator, like a YubiKey Un authentificateur "itinérant", comme une YubiKey - + This stage checks the user's current session against the Google reCaptcha (or compatible) service. Cette étape vérifie la session actuelle de l'utilisateur sur le service reCaptcha de Google (ou service compatible). - + Public Key Clé publique - + Public key, acquired from https://www.google.com/recaptcha/intro/v3.html. Clé publique, obtenue depuis https://www.google.com/recaptcha/intro/v3.html. - + Private Key Clé privée - + Private key, acquired from https://www.google.com/recaptcha/intro/v3.html. Clé privée, acquise auprès de https://www.google.com/recaptcha/intro/v3.html. - + Advanced settings Paramètres avancés - + JS URL URL du JS - + URL to fetch JavaScript from, defaults to recaptcha. Can be replaced with any compatible alternative. URL où télécharger le JavaScript, recaptcha par défaut. Peut être remplacé par une alternative compatible. - + API URL URL d'API - + URL used to validate captcha response, defaults to recaptcha. Can be replaced with any compatible alternative. URL utilisée pour valider la réponse captcha, recaptcha par défault. Peut être remplacé par une alternative compatible. - + Prompt for the user's consent. The consent can either be permanent or expire in a defined amount of time. Demander le consentement de l'utilisateur. Celui-ci peut être permanent ou expirer dans un délai défini. - + Always require consent Toujours exiger l'approbation - + Consent given last indefinitely L'approbation dure indéfiniment - + Consent expires. L'approbation expire. - + Consent expires in L'approbation expire dans - + Offset after which consent expires. Décalage après lequel le consentement expire. - + Dummy stage used for testing. Shows a simple continue button and always passes. Étape factice utilisée pour les tests. Montre un simple bouton continuer et réussit toujours. - + Throw error? Renvoyer une erreur ? - + SMTP Host Hôte SMTP - + SMTP Port Port SMTP - + SMTP Username Utilisateur SMTP - + SMTP Password Mot de passe SMTP - + Use TLS Utiliser TLS - + Use SSL Utiliser SSL - + From address Adresse d'origine - + Verify the user's email address by sending them a one-time-link. Can also be used for recovery to verify the user's authenticity. Vérifier le courriel de l'utilisateur en lui envoyant un lien à usage unique. Peut également être utilisé lors de la récupération afin de vérifier l'authenticité de l'utilisateur. - + Activate pending user on success Activer l'utilisateur en attente en cas de réussite - + When a user returns from the email successfully, their account will be activated. Lorsqu'un utilisateur revient du courriel avec succès, son compte sera activé. - + Use global settings Utiliser les paramètres globaux - + When enabled, global Email connection settings will be used and connection settings below will be ignored. Si activé, les paramètres globaux de connexion courriel seront utilisés et les paramètres de connexion ci-dessous seront ignorés. - + Token expiry Expiration du jeton - + Time in minutes the token sent is valid. Temps en minutes durant lequel le jeton envoyé est valide. - + Template Modèle - + Let the user identify themselves with their username or Email address. Laisser l'utilisateur s'identifier lui-même avec son nom d'utilisateur ou son adresse courriel. - + User fields Champs de l'utilisateur - + UPN UPN - + Fields a user can identify themselves with. If no fields are selected, the user will only be able to use sources. Champs avec lesquels un utilisateur peut s'identifier. Si aucun champ n'est sélectionné, l'utilisateur ne pourra utiliser que des sources. - + Password stage Étape de mot de passe - + When selected, a password field is shown on the same page instead of a separate page. This prevents username enumeration attacks. Si activée, un champ de mot de passe est affiché sur la même page au lieu d'une page séparée. Cela permet d'éviter les attaques par énumération de noms d'utilisateur. - + Case insensitive matching Correspondance insensible à la casse - + When enabled, user fields are matched regardless of their casing. Si activé, les champs de l'utilisateur sont mis en correspondance en ignorant leur casse. - + Show matched user Afficher l'utilisateur correspondant - + When a valid username/email has been entered, and this option is enabled, the user's username and avatar will be shown. Otherwise, the text that the user entered will be shown. Lorsqu'un nom d'utilisateur/adresse courriel valide a été saisi, et si cette option est active, le nom d'utilisateur et l'avatar de l'utilisateur seront affichés. Sinon, le texte que l'utilisateur a saisi sera affiché. - + Source settings Paramètres de la source - + Sources Sources - + Select sources should be shown for users to authenticate with. This only affects web-based sources, not LDAP. Sélectionnez les sources à afficher aux utilisateurs pour s'authentifier. Cela affecte uniquement les sources web, pas LDAP. - + Show sources' labels Afficher les étiquettes des sources - + By default, only icons are shown for sources. Enable this to show their full names. Par défaut, seuls les icônes sont affichés pour les sources, activez cette option pour afficher leur nom complet. - + Passwordless flow Flux sans mot de passe - + Optional passwordless flow, which is linked at the bottom of the page. When configured, users can use this flow to authenticate with a WebAuthn authenticator, without entering any details. Flux sans mot de passe facultatif, qui sera accessible en bas de page. Lorsque configuré, les utilisateurs peuvent utiliser ce flux pour s'authentifier avec un authentificateur WebAuthn, sans entrer de détails. - + Optional enrollment flow, which is linked at the bottom of the page. Flux d'inscription facultatif, qui sera accessible en bas de page. - + Optional recovery flow, which is linked at the bottom of the page. Flux de récupération facultatif, qui sera accessible en bas de page. - + This stage can be included in enrollment flows to accept invitations. Cette étape peut être incluse dans les flux d'inscription pour accepter les invitations. - + Continue flow without invitation Continuer le flux sans invitation - + If this flag is set, this Stage will jump to the next Stage when no Invitation is given. By default this Stage will cancel the Flow when no invitation is given. Si activé, cette étape passera à l'étape suivante si aucune invitation n'est donnée. Par défaut, cette étape annule le flux en l'absence d'invitation. - + Validate the user's password against the selected backend(s). Valider le mot de passe de l'utilisateur sur le(s) backend(s) sélectionné(s). - + Backends Backends - + User database + standard password Base de données utilisateurs + mots de passe standards - + User database + app passwords Base de données utilisateurs + mots de passes applicatifs - + User database + LDAP password Base de données utilisateurs + mot de passe LDAP - + Selection of backends to test the password against. Sélection de backends pour tester le mot de passe. - + Flow used by an authenticated user to configure their password. If empty, user will not be able to configure change their password. Flux utilisé par un utilisateur authentifié pour configurer son mot de passe. S'il est vide, l'utilisateur ne sera pas en mesure de changer son mot de passe. - + Failed attempts before cancel Échecs avant annulation - + How many attempts a user has before the flow is canceled. To lock the user out, use a reputation policy and a user_write stage. Nombre de tentatives dont dispose un utilisateur avant que le flux ne soit annulé. Pour verrouiller l'utilisateur, utilisez une politique de réputation et une étape user_write. - + Show arbitrary input fields to the user, for example during enrollment. Data is saved in the flow context under the 'prompt_data' variable. Afficher des champs de saisie arbitraires à l'utilisateur, par exemple pendant l'inscription. Les données sont enregistrées dans le contexte du flux sous la variable "prompt_data". - + Fields Champs - + ("", of type ) - (" - ", de type + (" + ", de type ) - + Validation Policies Politiques de validation - + Selected policies are executed when the stage is submitted to validate the data. Les politiques sélectionnées sont exécutées lorsque l'étape est soumise pour valider les données. - + Delete the currently pending user. CAUTION, this stage does not ask for confirmation. Use a consent stage to ensure the user is aware of their actions. @@ -5459,52 +5459,52 @@ doesn't pass when either or both of the selected options are equal or above the Log the currently pending user in. Ouvre la session de l'utilisateur courant. - + Session duration Durée de la session - + Determines how long a session lasts. Default of 0 seconds means that the sessions lasts until the browser is closed. Détermine la durée de la session. La valeur par défaut de 0 seconde signifie que la session dure jusqu'à la fermeture du navigateur. - + Different browsers handle session cookies differently, and might not remove them even when the browser is closed. Différents navigateurs gèrent les cookies de session différemment et peuvent ne pas les supprimer même lorsque le navigateur est fermé. - + See here. Voir ici. - + Stay signed in offset Rester connecté en décalage - + If set to a duration above 0, the user will have the option to choose to "stay signed in", which will extend their session by the time specified here. Si défini à une durée supérieure à 0, l'utilisateur aura la possibilité de choisir de "rester connecté", ce qui prolongera sa session jusqu'à la durée spécifiée ici. - + Terminate other sessions Terminer les autres sessions - + When enabled, all previous sessions of the user will be terminated. Lorsqu'activé, toutes les sessions précédentes de l'utilisateur seront terminées. - + Remove the user from the current session. Supprimer l'utilisateur de la session actuelle. - + Write any data from the flow's context's 'prompt_data' to the currently pending user. If no user @@ -5515,308 +5515,308 @@ doesn't pass when either or both of the selected options are equal or above the Never create users Ne jamais créer d'utilisateurs - + When no user is present in the flow context, the stage will fail. Si aucun utilisateur n'est présent dans le contexte du flux, l'étape va échouer. - + Create users when required Créer des utilisateurs si nécessaire - + When no user is present in the the flow context, a new user is created. Si aucun utilisateur n'est présent dans le contexte du flux, un nouvel utilisateur est créé. - + Always create new users Toujours créer de nouveaux utilisateurs - + Create a new user even if a user is in the flow context. Créer un nouvel utilisateur même si un utilisateur est déjà présent dans le contexte du flux. - + Create users as inactive Créer des utilisateurs inactifs - + Mark newly created users as inactive. Marquer les utilisateurs nouvellements créés comme inactifs. - + User path template Modèle de chemin des utilisateurs - + Path new users will be created under. If left blank, the default path will be used. Chemin sous lequel les nouveaux utilisateurs seront créés. Si laissé vide, le chemin par défaut sera utilisé. - + Newly created users are added to this group, if a group is selected. Les utilisateurs nouvellement créés sont ajoutés à ce groupe, si un groupe est sélectionné. - + New stage Nouvelle étape - + Create a new stage. Créer une nouvelle étape. - + Successfully imported device. Appareil importé avec succès. - + The user in authentik this device will be assigned to. L'utilistateur authentik auquel cet appareil sera assigné. - + Duo User ID ID Utilisateur Duo - + The user ID in Duo, can be found in the URL after clicking on a user. L'ID utilisateur Duo, peut être trouvé dans l'URL en cliquant sur un utilisateur, - + Automatic import Importation automatique - + Successfully imported devices. - Import réussi de + Import réussi de appareils. - + Start automatic import Démarrer l'importation automatique - + Or manually import Ou importer manuellement - + Stages are single steps of a Flow that a user is guided through. A stage can only be executed from within a flow. Les étapes sont des étapes simples d'un flux au travers duquel un utilisateur est guidé. Une étape peut être uniquement exécutée à l'intérieur d'un flux. - + Flows Flux - + Stage(s) Étape(s) - + Import Importer - + Import Duo device Importer un appareil Duo - + Successfully updated flow. Flux mis à jour avec succès - + Successfully created flow. Flux créé avec succès - + Shown as the Title in Flow pages. Afficher comme Titre dans les pages de Flux. - + Visible in the URL. Visible dans l'URL - + Designation Désignation - + Decides what this Flow is used for. For example, the Authentication flow is redirect to when an un-authenticated user visits authentik. Détermine l'usage de ce flux. Par exemple, un flux d'authentification est la destination d'un visiteur d'authentik non authentifié. - + No requirement Aucun prérequis - + Require authentication Requiert une authentification - + Require no authentication. Requiert l'absence d'authentification - + Require superuser. Requiert un super-utilisateur - + Required authentication level for this flow. Niveau d'authentification requis pour ce flux. - + Behavior settings Paramètres de comportement - + Compatibility mode Mode de compatibilité - + Increases compatibility with password managers and mobile devices. Augmente la compatibilité avec les gestionnaires de mots de passe et les appareils mobiles - + Denied action Action refusée - + Will follow the ?next parameter if set, otherwise show a message Suivra le paramètre ?next si défini, sinon affichera un message - + Will either follow the ?next parameter or redirect to the default interface Suivra le paramètre ?next ou redirigera vers l'interface par défaut - + Will notify the user the flow isn't applicable Notifiera l'utilisateur que le flux ne s'applique pas - + Decides the response when a policy denies access to this flow for a user. Décider de la réponse quand une politique refuse l'accès à ce flux pour un utilisateur. - + Appearance settings Paramètres d'apparence - + Layout Organisation - + Background Arrière-plan - + Background shown during execution. Arrière-plan utilisé durant l'exécution. - + Clear background Fond vide - + Delete currently set background image. Supprimer l'arrière plan actuellement défini - + Successfully imported flow. Flux importé avec succès - + .yaml files, which can be found on goauthentik.io and can be exported by authentik. Fichiers .yaml, qui peuvent être trouvés sur goauthentik.io et exportés par authentik. - + Flows describe a chain of Stages to authenticate, enroll or recover a user. Stages are chosen based on policies applied to them. Les flux décrivent une succession d'étapes pour authentifier, inscrire ou récupérer un utilisateur. Les étapes sont choisies en fonction des politiques qui leur sont appliquées. - + Flow(s) Flux - + Update Flow Mettre à jour le flux - + Create Flow Créer un flux - + Import Flow Importer un flux - + Successfully cleared flow cache Cache de flux vidé avec succès - + Failed to delete flow cache Impossible de vider le cache de flux - + Clear Flow cache Vider le cache de flux - + Are you sure you want to clear the flow cache? @@ -5827,258 +5827,258 @@ doesn't pass when either or both of the selected options are equal or above the Stage binding(s) Liaison(s) de l'étape - + Stage type Type d'étape - + Edit Stage Éditer l'étape - + Update Stage binding Mettre à jour la liaison de l'étape - + These bindings control if this stage will be applied to the flow. Ces liaisons contrôlent si cette étape sera appliquée au flux. - + No Stages bound Aucune étape liée - + No stages are currently bound to this flow. Aucune étape n'est actuellement liée à ce flux. - + Create Stage binding Créer une liaison d'étap - + Bind stage Lier une étape - + Bind existing stage Lier une étape existante - + Flow Overview Aperçu du flux - + Related actions Actions apparentées - + Execute flow Exécuter le flux - + Normal Normal - + with current user avec l'utilisateur actuel - + with inspector avec inspecteur - + Export flow Exporter le flux - + Export Exporter - + Stage Bindings Liaisons de l'étape - + These bindings control which users can access this flow. Ces liaisons contrôlent les utilisateurs qui peuvent accéder à ce flux. - + Event Log Journal d'évènements - + Event - Évènement + Évènement - + Event info Information d'évèvement - + Created Créé - + Successfully updated transport. Transport mis à jour avec succès - + Successfully created transport. Transport créé avec succès - + Local (notifications will be created within authentik) Local (les notifications seront créées dans authentik) - + Webhook (generic) Webhook (générique) - + Webhook (Slack/Discord) Webhook (Slack/Discord) - + Webhook URL URL Webhoo - + Webhook Mapping Mappage de Webhook - + Send once Envoyer une seule fois - + Only send notification once, for example when sending a webhook into a chat channel. Envoyer une seule fois la notification, par exemple lors de l'envoi d'un webhook dans un canal de discussion. - + Notification Transports Transports de notification - + Define how notifications are sent to users, like Email or Webhook. Définit les méthodes d'envoi des notifications aux utilisateurs, telles que courriel ou webhook. - + Notification transport(s) Transport(s) de notification - + Update Notification Transport Mettre à jour le transport de notification - + Create Notification Transport Créer une notification de transport - + Successfully updated rule. Règle mise à jour avec succès - + Successfully created rule. Règle créée avec succès - + Select the group of users which the alerts are sent to. If no group is selected the rule is disabled. Sélectionner le groupe d'utilisateurs à qui les alertes seront envoyées. Si aucun groupe n'est sélectionné, cette règle est désactivée. - + Transports Transports - + Select which transports should be used to notify the user. If none are selected, the notification will only be shown in the authentik UI. Sélectionnez les transports à utiliser pour notifier l'utilisateur. À défaut, la notification sera simplement affichée dans l'interface utilisateur authentik. - + Severity Sévérité - + Notification Rules Règles de notification - + Send notifications whenever a specific Event is created and matched by policies. Envoyez des notifications chaque fois qu'un événement spécifique est créé et correspond à des politiques. - + Sent to group Envoyé au groupe - + Notification rule(s) Règle(s) de notification - + None (rule disabled) Aucun (règle désactivée) - + Update Notification Rule Mettre à jour la règle de notification - + Create Notification Rule Créer une règles de notification - + These bindings control upon which events this rule triggers. @@ -6089,964 +6089,964 @@ Les liaisons avec les groupes/utilisateurs sont vérifiées par rapport à l'uti Outpost Deployment Info Info de déploiement de l'avant-poste - + View deployment documentation Voir la documentation de déploiement - + Click to copy token Cliquer pour copier le jeton - + If your authentik Instance is using a self-signed certificate, set this value. Activer cette option si votre instance authentik utilise un certificat auto-signé. - + If your authentik_host setting does not match the URL you want to login with, add this setting. Ajouter cette option si le paramètre authentik_host ne correspond pas à l'URL sur laquelle vous voulez ouvrir une session. - + Successfully updated outpost. Avant-poste mis à jour avec succès - + Successfully created outpost. Avant-poste créé avec succès - + Radius Rayon - + Integration Intégration - + Selecting an integration enables the management of the outpost by authentik. La sélection d'une intégration permet la gestion de l'avant-poste par authentik. - + You can only select providers that match the type of the outpost. Vous pouvez uniquement sélectionner des fournisseurs qui correspondent au type d'avant-poste. - + Configuration Configuration - + See more here: Voir plus ici: - + Documentation Documentation - + Last seen Vu pour la dernière fois - + , should be - , devrait être + , devrait être - + Hostname Nom d'hôte - + Not available Indisponible - + Last seen: - Vu pour la dernière fois : + Vu pour la dernière fois : - + Unknown type Type inconnu - + Outposts Avant-postes - + Outposts are deployments of authentik components to support different environments and protocols, like reverse proxies. Les avant-postes sont des déploiements de composants authentik pour supporter différents environnements et protocoles, comme des reverse proxies. - + Health and Version État et version - + Warning: authentik Domain is not configured, authentication will not work. Avertissement : le domaine d'authentik n'est pas configuré, l'authentification ne fonctionnera pas. - + Logging in via . - Connexion avec + Connexion avec . - + No integration active Aucune intégration active - + Update Outpost Mettre à jour l'avant-poste - + View Deployment Info Afficher les informations de déploiement - + Detailed health (one instance per column, data is cached so may be out of date) État détaillé (une instance par colonne, les données sont mises en cache et peuvent donc être périmées) - + Outpost(s) Avant-poste(s) - + Create Outpost Créer un avant-poste - + Successfully updated integration. Intégration mise à jour avec succès - + Successfully created integration. Intégration créé avec succès - + Local Local - + If enabled, use the local connection. Required Docker socket/Kubernetes Integration. Si activé, utiliser la connexion locale. Intégration Docker socket/Kubernetes requise. - + Docker URL URL Docker - + Can be in the format of 'unix://' when connecting to a local docker daemon, using 'ssh://' to connect via SSH, or 'https://:2376' when connecting to a remote system. Peut être au format "unix://" pour une connexion à un service docker local, "ssh://" pour une connexion via SSH, ou "https://:2376" pour une connexion à un système distant. - + CA which the endpoint's Certificate is verified against. Can be left empty for no validation. AC auprès de laquelle le certificat du terminal est vérifié. Peut être laissé vide en l'absence de validation. - + TLS Authentication Certificate/SSH Keypair Certificat TLS d'authentification/Pair de clé SSH - + Certificate/Key used for authentication. Can be left empty for no authentication. Certificat et clé utilisés pour l'authentification. Peut être laissé vide si pas d'authentification. - + When connecting via SSH, this keypair is used for authentication. Lors de la connexion SSH, cette paire de clé sera utilisée pour s'authentifier. - + Kubeconfig Kubeconfig - + Verify Kubernetes API SSL Certificate Vérifier le certificat SSL de l'API Kubernetes - + New outpost integration Nouvelle intégration d’avant-poste - + Create a new outpost integration. Créer une nouvelle intégration d’avant-poste. - + State État - + Unhealthy Malade - + Outpost integration(s) Intégration(s) d'avant-postes - + Successfully generated certificate-key pair. Paire clé/certificat générée avec succès. - + Common Name Nom Commun - + Subject-alt name Nom alternatif subject - + Optional, comma-separated SubjectAlt Names. Liste optionnelle de noms alternatifs (SubjetAlt Names), séparés par des virgules. - + Validity days Jours de validité - + Successfully updated certificate-key pair. Paire clé/certificat mise à jour avec succès. - + Successfully created certificate-key pair. Paire clé/certificat créée avec succès. - + PEM-encoded Certificate data. Données du certificat au format PEM - + Optional Private Key. If this is set, you can use this keypair for encryption. Clé privée optionnelle. Si définie, vous pouvez utiliser pour le chiffrement. - + Certificate-Key Pairs Paires de clé/certificat - + Import certificates of external providers or create certificates to sign requests with. Importer les certificats des fournisseurs externes ou créer des certificats pour signer les demandes. - + Private key available? Clé privée disponible ? - + Certificate-Key Pair(s) Paire(s) de clé/certificat - + Managed by authentik Géré par authentik - + Managed by authentik (Discovered) Géré par authentik (Découvert) - + Yes () - Oui ( + Oui ( ) - + No Non - + Update Certificate-Key Pair Mettre à jour la paire clé/certificat - + Certificate Fingerprint (SHA1) Empreinte du certificat (SHA1) - + Certificate Fingerprint (SHA256) Empreinte du certificat (SHA256) - + Certificate Subject Sujet du certificat - + Download Certificate Télécharger le certificat - + Download Private key Télécharger la clé privée - + Create Certificate-Key Pair Créer une paire clé/certificat - + Generate Générer - + Generate Certificate-Key Pair Générer une paire clé/certificat - + Successfully updated instance. Instance mise à jour avec succès. - + Successfully created instance. Instance créée avec succès. - + Disabled blueprints are never applied. Les plans désactivés ne sont jamais appliqués. - + Local path Chemin local - + OCI Registry Registre OCI - + Internal Interne - + OCI URL, in the format of oci://registry.domain.tld/path/to/manifest. URL OCI, au format oci://registry.domain.tld/path/to/manifest. - + See more about OCI support here: Voir plus à propos du support OCI ici : - + Blueprint Plan - + Configure the blueprint context, used for templating. Configurer le contexte du plan, utilisé pour modéliser. - + Orphaned Orphelin - + Blueprints Plans - + Automate and template configuration within authentik. Automatiser et modéliser la configuration au sein d'authentik. - + Last applied Dernière application - + Blueprint(s) Plan(s) - + Update Blueprint Mettre à jour le plan - + Create Blueprint Instance Créer une instance du plan - + API Requests Requêtes d'API - + Open API Browser Ouvrir le navigateur API - + Notifications Notifications - + unread non-lu - + Successfully cleared notifications Notifications effacées avec succès - + Clear all Tout vider - + A newer version of the frontend is available. Une nouvelle version de l'interface est disponible. - + You're currently impersonating . Click to stop. - Vous vous faites actuellement passer pour + Vous vous faites actuellement passer pour . Cliquer pour arrêter. - + User interface Interface utilisateur - + Dashboards Tableaux de bord - + Events Évènements - + Logs Logs - + Customisation Personalisation - + Directory Répertoire - + System Système - + Certificates Certificats - + Outpost Integrations Intégration d’avant-postes - + API request failed Requête d'API échouée - + User's avatar Avatar de l'utilisateu - + Something went wrong! Please try again later. Une erreur s'est produite ! Veuillez réessayer plus tard. - + Request ID ID de requête - + You may close this page now. Vous pouvez maintenant fermer cette page. - + You're about to be redirect to the following URL. Vous allez être redirigé vers l'URL suivante. - + Follow redirect Suivre la redirection - + Request has been denied. La requête a été refusée. - + Not you? Pas vous ? - + Need an account? Besoin d'un compte ? - + Sign up. S'enregistrer. - + Forgot username or password? Mot de passe ou nom d'utilisateur oublié ? - + Select one of the sources below to login. Sélectionnez l'une des sources ci-dessous pour se connecter. - + Or Ou - + Use a security key Utiliser une clé de sécurité - + Login to continue to . - Connectez-vous pour continuer sur + Connectez-vous pour continuer sur . - + Please enter your password Veuillez saisir votre mot de passe - + Forgot password? Mot de passe oublié ? - + Application requires following permissions: Cette application requiert les permissions suivantes : - + Application already has access to the following permissions: L’application a déjà accès aux permissions suivantes : - + Application requires following new permissions: Cette application requiert de nouvelles permissions : - + Check your Inbox for a verification email. Vérifiez votre boite de réception pour un courriel de vérification. - + Send Email again. Renvoyer le courriel. - + Successfully copied TOTP Config. Configuration TOTP copiée avec succès - + Copy Copier - + Code Code - + Please enter your TOTP Code Veuillez saisir votre code TOTP - + Duo activation QR code Code QR d'activation Duo - + Alternatively, if your current device has Duo installed, click on this link: Sinon, si Duo est installé sur cet appareil, cliquez sur ce lien : - + Duo activation Activation Duo - + Check status Vérifier le statut - + Make sure to keep these tokens in a safe place. Veuillez à conserver ces jetons dans un endroit sûr. - + Phone number Numéro de téléphone - + Please enter your Phone number. Veuillez entrer votre numéro de téléphone - + Please enter the code you received via SMS Veuillez entrer le code que vous avez reçu par SMS - + A code has been sent to you via SMS. Un code vous a été envoyé par SMS. - + Open your two-factor authenticator app to view your authentication code. Ouvrez votre application d'authentification à deux facteurs pour afficher votre code d'authentification. - + Static token Jeton statique - + Authentication code Code d'authentification - + Please enter your code Veuillez saisir votre code - + Return to device picker Retourner à la sélection d'appareil - + Sending Duo push notification Envoi de notifications push Duo - + Assertions is empty L'assertion est vide - + Error when creating credential: - Erreur lors de la création des identifiants : + Erreur lors de la création des identifiants : - + Error when validating assertion on server: - Erreur lors de la validation de l'assertion sur le serveur : + Erreur lors de la validation de l'assertion sur le serveur : - + Retry authentication Réessayer l'authentification - + Duo push-notifications Notification push Duo - + Receive a push notification on your device. Recevoir une notification push sur votre appareil. - + Authenticator Authentificateur - + Use a security key to prove your identity. Utilisez une clé de sécurité pour prouver votre identité. - + Traditional authenticator Authentificateur traditionnel - + Use a code-based authenticator. Utiliser un authentifieur à code. - + Recovery keys Clés de récupération - + In case you can't access any other method. Au cas où aucune autre méthode ne soit disponible. - + SMS SMS - + Tokens sent via SMS. Jeton envoyé par SMS - + Select an authentication method. Sélectionnez une méthode d'authentification - + Stay signed in? Rester connecté ? - + Select Yes to reduce the number of times you're asked to sign in. Sélectionnez Oui pour réduire le nombre de fois où l'on vous demande de vous connecter. - + Authenticating with Plex... Authentification avec Plex... - + Waiting for authentication... En attente de l'authentification... - + If no Plex popup opens, click the button below. Si aucune fenêtre contextuelle Plex ne s'ouvre, cliquez sur le bouton ci-dessous. - + Open login Ouvrir la connexion - + Authenticating with Apple... Authentification avec Apple... - + Retry Recommencer - + Enter the code shown on your device. Saisissez le code indiqué sur votre appareil. - + Please enter your Code Veuillez entrer votre code - + You've successfully authenticated your device. Vous avez authentifié votre appareil avec succès. - + Flow inspector Inspecteur de flux - + Next stage Étape suivante - + Stage name Nom de l'étape - + Stage kind Type d'étap - + Stage object Objet étap - + This flow is completed. Ce flux est terminé. - + Plan history Historique du plan - + Current plan context Contexte du plan courant - + Session ID ID de session - + Powered by authentik Propulsé par authentik - + Background image Image d'arrière-plan - + Error creating credential: - Erreur lors de la création des identifiants : + Erreur lors de la création des identifiants : - + Server validation of credential failed: - Erreur lors de la validation des identifiants par le serveur : + Erreur lors de la validation des identifiants par le serveur : - + Register device Enregistrer un appareil - + Refer to documentation @@ -7055,7 +7055,7 @@ Les liaisons avec les groupes/utilisateurs sont vérifiées par rapport à l'uti No Applications available. Aucune Application disponible. - + Either no applications are defined, or you don’t have access to any. @@ -7064,186 +7064,186 @@ Les liaisons avec les groupes/utilisateurs sont vérifiées par rapport à l'uti My Applications Mes Applications - + My applications Mes applications - + Change your password Changer votre mot de passe - + Change password Changer le mot de passe - + - + Save Enregistrer - + Delete account Supprimer le compte - + Successfully updated details Détails mis à jour avec succès - + Open settings Ouvrir les paramètres - + No settings flow configured. Aucun flux de paramètres n'est configuré. - + Update details Détails de la mise à jour - + Successfully disconnected source Source déconnectée avec succès - + Failed to disconnected source: - Erreur de la déconnexion source : + Erreur de la déconnexion source : - + Disconnect Déconnecter - + Connect Connecter - + Error: unsupported source settings: - Erreur : configuration de la source non-supportée : + Erreur : configuration de la source non-supportée : - + Connect your user account to the services listed below, to allow you to login using the service instead of traditional credentials. Connectez votre compte aux service listés ci-dessous, cela vous permettra de les utiliser pour vous connecter au lieu des identifiants traditionnels. - + No services available. Aucun service disponible - + Create App password Créer un mot de passe App - + User details Détails de l'utilisateur - + Consent Approbation - + MFA Devices Appareils de MFA - + Connected services Services connectés - + Tokens and App passwords Jetons et mots de passe d'application - + Unread notifications Notifications non lues - + Admin interface Interface d'administration - + Stop impersonation Arrêter l'appropriation utilisateu - + Avatar image Image d'avatar - + Failed Échoué - + Unsynced / N/A Non synchronisé / N/A - + Outdated outposts Avant-postes périmés - + Unhealthy outposts Avant-postes malades - + Next Suivant - + Inactive Inactif - + Regular user Utilisateur normal - + Activate Activer - + Use Server URI for SNI verification @@ -7597,60 +7597,71 @@ Les liaisons avec les groupes/utilisateurs sont vérifiées par rapport à l'uti Stage used to configure a WebAuthn authenticator (i.e. Yubikey, FaceID/Windows Hello). Étape de configuration d'un authentificateur WebAuthn (Yubikey, FaceID/Windows Hello). -<<<<<<< HEAD Internal application name used in URLs. + Nom de l'application interne utilisé dans les URLs. Submit + Soumettre UI Settings + Paramètres d'UI Transparent Reverse Proxy + Reverse Proxy Transparent For transparent reverse proxies with required authentication - - - For nginx's auth_request or traefik's forwardAuth - - - For nginx's auth_request or traefik's forwardAuth per root domain + Pour les reverses proxy transparents avec authentification requise Configure SAML provider manually + Configurer le fournisseur SAML manuellement Configure RADIUS provider manually + Configurer le fournisseur RADIUS manuellement Configure SCIM provider manually + Configurer le fournisseur SCIM manuellement Saving Application... + Enregistrement de l'application... Authentik was unable to save this application: + authentik n'a pas pu sauvegarder cette application : Your application has been saved + L'application a été sauvegardée In the Application: + Dans l'application : In the Provider: + Dans le fournisseur : Method's display Name. + Nom d'affichage de la méthode. Use this provider with nginx's auth_request or traefik's forwardAuth. Each application/domain needs its own provider. Additionally, on each domain, /outpost.goauthentik.io must be routed to the outpost (when using a managed outpost, this is done for you). + Utiliser ce fournisseur avec nginx auth_request ou traefik + forwardAuth. Chaque application/domaine a besoin de son fournisseur. + De plus, sur chaque domaine, /outpost.goauthentik.io doit être + routé vers l'avant-post (lors de l'utilisation d'un avant-poste managé, cela est fait automatiquement). Custom attributes @@ -7802,87 +7813,127 @@ Les liaisons avec les groupes/utilisateurs sont vérifiées par rapport à l'uti Pseudolocale (for testing) + Pseudolocale (pour tests) Create With Wizard + Créer avec l'assistant One hint, 'New Application Wizard', is currently hidden + Un indice, l'assistant nouvelle application est actuellement caché External applications that use authentik as an identity provider via protocols like OAuth2 and SAML. All applications are shown here, even ones you cannot access. + Applications externes qui utilisent authentik comme fournisseur d'identité, en utilisant des protocoles comme OAuth2 et SAML. Toutes les applications sont affichées ici, même celles auxquelles vous n'avez pas accès. Deny message + Message de refus Message shown when this stage is run. + Message affiché lorsque cette étape est exécutée. Open Wizard + Lancer l'assistant Demo Wizard + Assistant de démo Run the demo wizard + Lancer l'assistant de démo OAuth2/OIDC (Open Authorization/OpenID Connect) + OAuth2/OIDC (Open Authorization/OpenID Connect) LDAP (Lightweight Directory Access Protocol) + LDAP (Lightweight Directory Access Protocol) Forward Auth (Single Application) + Transférer l'authentification (application unique) Forward Auth (Domain Level) + Transférer l'authentification (niveau domaine) SAML (Security Assertion Markup Language) + SAML (Security Assertion Markup Language) RADIUS (Remote Authentication Dial-In User Service) + RADIUS (Remote Authentication Dial-In User Service) SCIM (System for Cross-domain Identity Management) + SCIM (System for Cross-domain Identity Management) The token has been copied to your clipboard + Le jeton a été copié dans le presse-paper The token was displayed because authentik does not have permission to write to the clipboard + Le jeton a été affiché car authentik n'a pas la permission d'écrire dans le presse-papier A copy of this recovery link has been placed in your clipboard + Une copie de ce lien de récupération a été placée dans le presse-papier The current tenant must have a recovery flow configured to use a recovery link + Le tenant actuel doit avoir un flux de récupération configuré pour utiliser un lien de récupération Create recovery link + Créer un lien de récupération Create Recovery Link + Créer un lien de récupération External + Externe Service account + Compte de service Service account (internal) + Compte de service (interne) Check the release notes + Voir les notes de version User Statistics + Statistiques Utilisateur <No name set> + <No name set> + + + User type used for newly created users. + + + For nginx's auth_request or traefik's forwardAuth + + + For nginx's auth_request or traefik's forwardAuth per root domain + + + RBAC is in preview. diff --git a/web/xliff/pl.xlf b/web/xliff/pl.xlf index 1cf15b38d..4adcffad0 100644 --- a/web/xliff/pl.xlf +++ b/web/xliff/pl.xlf @@ -5921,12 +5921,6 @@ Bindings to groups/users are checked against the user of the event. For transparent reverse proxies with required authentication - - For nginx's auth_request or traefik's forwardAuth - - - For nginx's auth_request or traefik's forwardAuth per root domain - Configure SAML provider manually @@ -6154,6 +6148,18 @@ Bindings to groups/users are checked against the user of the event. <No name set> + + + For nginx's auth_request or traefik's forwardAuth + + + For nginx's auth_request or traefik's forwardAuth per root domain + + + RBAC is in preview. + + + User type used for newly created users. diff --git a/web/xliff/pseudo-LOCALE.xlf b/web/xliff/pseudo-LOCALE.xlf index fa150bd11..ea95aff17 100644 --- a/web/xliff/pseudo-LOCALE.xlf +++ b/web/xliff/pseudo-LOCALE.xlf @@ -7557,14 +7557,6 @@ Bindings to groups/users are checked against the user of the event. For transparent reverse proxies with required authentication Ƒōŕ ţŕàńśƥàŕēńţ ŕēvēŕśē ƥŕōxĩēś ŵĩţĥ ŕēǫũĩŕēď àũţĥēńţĩćàţĩōń - - For nginx's auth_request or traefik's forwardAuth - Ƒōŕ ńĝĩńx'ś àũţĥ_ŕēǫũēśţ ōŕ ţŕàēƒĩx'ś ƒōŕŵàŕďÀũţĥ - - - For nginx's auth_request or traefik's forwardAuth per root domain - Ƒōŕ ńĝĩńx'ś àũţĥ_ŕēǫũēśţ ōŕ ţŕàēƒĩx'ś ƒōŕŵàŕďÀũţĥ ƥēŕ ŕōōţ ďōmàĩń - Configure SAML provider manually Ćōńƒĩĝũŕē ŚÀMĹ ƥŕōvĩďēŕ màńũàĺĺŷ @@ -7844,4 +7836,16 @@ Bindings to groups/users are checked against the user of the event. <No name set> + + For nginx's auth_request or traefik's forwardAuth + + + For nginx's auth_request or traefik's forwardAuth per root domain + + + RBAC is in preview. + + + User type used for newly created users. + diff --git a/web/xliff/tr.xlf b/web/xliff/tr.xlf index 775f403d2..ce5e8e6f1 100644 --- a/web/xliff/tr.xlf +++ b/web/xliff/tr.xlf @@ -5706,12 +5706,6 @@ Bindings to groups/users are checked against the user of the event. For transparent reverse proxies with required authentication - - For nginx's auth_request or traefik's forwardAuth - - - For nginx's auth_request or traefik's forwardAuth per root domain - Configure SAML provider manually @@ -5939,6 +5933,18 @@ Bindings to groups/users are checked against the user of the event. <No name set> + + + For nginx's auth_request or traefik's forwardAuth + + + For nginx's auth_request or traefik's forwardAuth per root domain + + + RBAC is in preview. + + + User type used for newly created users. diff --git a/web/xliff/zh-Hans.xlf b/web/xliff/zh-Hans.xlf index 48317264f..1359fd684 100644 --- a/web/xliff/zh-Hans.xlf +++ b/web/xliff/zh-Hans.xlf @@ -7620,14 +7620,6 @@ Bindings to groups/users are checked against the user of the event. For transparent reverse proxies with required authentication 适用于需要验证身份的透明反向代理 - - For nginx's auth_request or traefik's forwardAuth - 适用于 nginx 的 auth_request 或 traefik 的 forwardAuth - - - For nginx's auth_request or traefik's forwardAuth per root domain - 适用于按根域名配置的 nginx 的 auth_request 或 traefik 的 forwardAuth - Configure SAML provider manually 手动配置 SAML 提供程序 @@ -7912,21 +7904,39 @@ Bindings to groups/users are checked against the user of the event. External + 外部 Service account + 服务账户 Service account (internal) + 服务账户（内部） Check the release notes + 查看发行日志 User Statistics + 用户统计 <No name set> + <未设置名称> + + + For nginx's auth_request or traefik's forwardAuth + + + For nginx's auth_request or traefik's forwardAuth per root domain + + + RBAC is in preview. + + + User type used for newly created users. diff --git a/web/xliff/zh-Hant.xlf b/web/xliff/zh-Hant.xlf index 03c3d535a..635ce3b63 100644 --- a/web/xliff/zh-Hant.xlf +++ b/web/xliff/zh-Hant.xlf @@ -5754,12 +5754,6 @@ Bindings to groups/users are checked against the user of the event. For transparent reverse proxies with required authentication - - For nginx's auth_request or traefik's forwardAuth - - - For nginx's auth_request or traefik's forwardAuth per root domain - Configure SAML provider manually @@ -5987,6 +5981,18 @@ Bindings to groups/users are checked against the user of the event. <No name set> + + + For nginx's auth_request or traefik's forwardAuth + + + For nginx's auth_request or traefik's forwardAuth per root domain + + + RBAC is in preview. + + + User type used for newly created users. diff --git a/web/xliff/zh_CN.xlf b/web/xliff/zh_CN.xlf index 0d331a345..b92624ef2 100644 --- a/web/xliff/zh_CN.xlf +++ b/web/xliff/zh_CN.xlf @@ -658,11 +658,6 @@ Manage users 管理用户 - - - Check release notes - 查看发行日志 - Outpost status @@ -694,11 +689,6 @@ Objects created 已创建对象 - - - User statistics - 用户统计 - Users created per day in the last month @@ -7919,6 +7909,30 @@ Bindings to groups/users are checked against the user of the event. Create Recovery Link 创建恢复链接 + + + External + 外部 + + + Service account + 服务账户 + + + Service account (internal) + 服务账户（内部） + + + Check the release notes + 查看发行日志 + + + User Statistics + 用户统计 + + + <No name set> + <未设置名称> diff --git a/web/xliff/zh_TW.xlf b/web/xliff/zh_TW.xlf index ed8957fe9..50b7d138f 100644 --- a/web/xliff/zh_TW.xlf +++ b/web/xliff/zh_TW.xlf @@ -5753,12 +5753,6 @@ Bindings to groups/users are checked against the user of the event. For transparent reverse proxies with required authentication - - For nginx's auth_request or traefik's forwardAuth - - - For nginx's auth_request or traefik's forwardAuth per root domain - Configure SAML provider manually @@ -5986,6 +5980,18 @@ Bindings to groups/users are checked against the user of the event. <No name set> + + + For nginx's auth_request or traefik's forwardAuth + + + For nginx's auth_request or traefik's forwardAuth per root domain + + + RBAC is in preview. + + + User type used for newly created users. diff --git a/website/blog/2023-10-26-you-might-be-doing-containers-wrong/item.md b/website/blog/2023-10-26-you-might-be-doing-containers-wrong/item.md new file mode 100644 index 000000000..77680e685 --- /dev/null +++ b/website/blog/2023-10-26-you-might-be-doing-containers-wrong/item.md @@ -0,0 +1,130 @@ +--- +title: 3 ways you (might be) doing containers wrong +description: “Using containers is not a best practice in itself. Here are some mistakes beginners make with containers, and how we set them up correctly at authentik.” +authors: + - name: Jens Langhammer + title: CTO at Authentik Security Inc + url: https://github.com/BeryJu + image_url: https://github.com/BeryJu.png +tags: + - application + - runtime + - SSO + - Docker + - containers + - :latest + - identity provider + - security + - authentication +hide_table_of_contents: false +--- + +_authentik is an open source Identity Provider that unifies your identity needs into a single platform, replacing Okta, Active Directory, and Auth0. Authentik Security is a [public benefit company](https://github.com/OpenCoreVentures/ocv-public-benefit-company/blob/main/ocv-public-benefit-company-charter.md) building on top of the open source project._ + +--- + +There are two ways to judge an application: + +1. Does it do what it’s supposed to do? +2. Is it easy to run? + +This post is about the second. + +Using containers is not a best practice in itself. As an infrastructure engineer by background, I’m pretty opinionated about how to set up containers properly. Doing things the “right” way makes things easier not just for you, but for your users as well. + +Below are some common mistakes that I see beginners make with containers: + +1. Using one container per application +2. Installing things at runtime +3. Writing logs to files instead of stdout + +## Mistake #1: One container per application + +There tend to be two mindsets when approaching setting up containers: + +- The inexperienced usually think 1 container = 1 application +- The other option is 1 container = 1 service + +Your application usually consists of multiple services, and to my mind these should always be separated into their own containers (in keeping with the [Single Responsibility Principle](https://en.wikipedia.org/wiki/Single-responsibility_principle)). + +For example, authentik consists of four components (services): + +- Server +- Worker +- Database +- Cache + +With our deployment, that means you get four different containers because they each run one of those four services. + +### Why you should use one container per _service_ + +At the point where you need to scale, or need High Availability, having different processes in separate containers enables horizontal scaling. Because of how authentik deploys, if we need to handle more traffic we can scale up to 50 servers, rather than having to scale up _everything_. This wouldn’t work if all those components were all bundled together. + +Additionally, if you’re using a container orchestrator (whether that’s Kubernetes or something simpler like [Docker Compose](https://goauthentik.io/docs/installation/docker-compose)), if it’s all bundled together, the orchestrator can’t distinguish between components because they’re all in the black box of your container. + +Say you want to start up processes in a specific order. This isn’t possible if they’re in a single container (unless you rebuild the entire image). If those processes are separate, you can just tell Docker Compose to start them up in the order you want, or you can run specific components on specific servers. + +Of course, your application architecture and deployment model need to support this setup, which is why it’s critical to think about these things when you’re starting out. If you’re reading this and thinking, I have a small-scale, hobby project, this doesn’t apply to me—let me put it this way: you will never regret setting things up the “right” way. It’s not going to come back to bite you if your situation changes later. It also gives users who install the application a lot more freedom and flexibility in how _they_ want to run it. + +## Mistake #2: Installing things at runtime + +Your container image should be complete in itself: it should contain all code and dependencies—everything it needs to run. This is the point of a container—it’s self contained. + +I’ve seen people set up their container to download an application from the vendor and install it into the container on startup. While this does work, what happens if you don’t have internet access? What if the vendor shut down and that URL now points to a malicious bit of code? + +If you have 100 instances downloading files at startup (or end up scaling to that point), this can lead to rate limiting, failed downloads, or your internet connection getting saturated—it’s just inefficient and causes problems that can be avoided. + +### Also, don’t use :latest + +This leads me to a different but related bad practice: using the `:latest` tag. It’s a common pitfall for folks who use containers but don’t necessarily build them themselves. + +It’s easy to get started with the `:latest` tag and it’s understandable to want the latest version without having to go into files and manually edit everything. But what can happen is that you update and suddenly it’s pointing to a new version and breaking things. + +I’ve seen this happen where you’re just running something on a local server and your disk is full, so you empty out your Docker images. The next time you pull, it’s with a new version which now no longer works and you’re stuck trying to figure out what version you were on before. + +### Instead: Pin your dependencies + +You should be pinning your dependencies to a specific version, and updating to newer versions intentionally rather than by default. + +The most reliable way to do this is with a process called GitOps: + +- In the context of Kubernetes, all the YAML files you deploy with Kubernetes are stored in the central Git repository. +- You have software in your Kubernetes cluster that automatically pulls the files from your Git repo and installs them into the cluster. +- Then you can use a tool like [Dependabot](https://github.com/dependabot) or [Renovate](https://github.com/renovatebot/renovate) to automatically create PRs with a new version (if there is one) so you can test and approve it, and it’s all captured in your Git history. + +GitOps might be a bit excessive if you’re only running a small hobby project on a single server, but in any case you should still pin a version. + +For a long time, authentik purposefully didn’t have a `:latest` tag, because people would use it inadvertently (sometimes not realizing they had an auto-updater running). Suddenly something wouldn’t work and there wasn’t really a way to downgrade. + +We have since added it due to popular request. This is how authentik’s version tags work: + +- Our version number is 3 digits reflecting the date of the release, so the latest currently is [2023.10.1](https://goauthentik.io/docs/releases/2023.10). + - You can either use 2023.10.1 as the tag, pinning to that specific version + - You can pin to 2023.10, which you means that you always get the latest patch version, or + - You can use 2023, which means you always get the latest version within that year. + +The principle is roughly the same with any project using [SemVer](https://semver.org/): you could just lock to v1, which means you get the latest v1 with all minor patches and fixes, without breaking updates. Then you switch to v2 when you’re ready. + +With this approach you are putting some trust in the developer not to publish any breaking changes with the wrong version number (but you’re technically always putting trust in some developer when using someone else’s software!). + +## Mistake #3: Writing logs to files instead of stdout + +This is another issue on the infrastructure side that mainly happens when you put legacy applications into containers. It used to be standard that applications put their log output into a file, and you’d probably have a system daemon set up to rotate those files and archive the old ones. This was great when everything ran on the same server without containers. + +A lot of software still logs to files by default, but this makes collecting and aggregating your services logs much harder. Docker (and containers in general) expect that you log to standard output so your orchestration platform can route the logs to your monitoring tool of choice. + +Docker puts the logs into a JSON file that it can read itself and see the timestamps and which container the log refers to. You can set up log forwarding with both Docker and Kubernetes. If you have a central logging server, the plugin gets the standard output of a container and sends it to that server. + +Not logging to `stdout` just makes it harder for everyone, including making it harder to debug: Instead of just running `docker logs` + the name of the container, you need to `exec` into the container, go to find the files, then look at the files to start debugging. + +### This bad practice is arguably the easiest one to work around + +As an engineer you can easily redirect the logs back from a file into the standard output, but there’s no real reason not to do it the “correct” way. + +There aren’t many use cases where there’s an advantage to writing your logs directly to a file instead of stdout—in fact the main one is for when you’re making the first mistake (having your whole application in one container)! If you’re running multiple services in one container, then you’ll have logs from multiple different processes in one place, which _could_ be easier to work with in a file vs stdout. + +Even if you specifically want your logs to exist in a file, by default if you run `docker logs` it just reads a JSON file that it adds the logs to, so you’re not losing anything by logging to stdout. You can configure Docker to just put the logs into a plain text file wherever you want to. + +It’s a little simplistic, but I’d encourage you to check out [The Twelve-Factor App](https://12factor.net/) which outlines good practices for making software that’s easy to run. + +Are you doing containers differently and is it working for you? Let us know in the comments, or send us an email at hello@goauthentik.io! diff --git a/website/docs/expressions/_functions.md b/website/docs/expressions/_functions.md index ceddc916c..da3b524e3 100644 --- a/website/docs/expressions/_functions.md +++ b/website/docs/expressions/_functions.md @@ -66,7 +66,7 @@ return ak_is_group_member(request.user, name="test_group") Fetch a user matching `**filters`. -Returns "None" if no user was found, otherwise returns the [User](/docs/user-group/user) object. +Returns "None" if no user was found, otherwise returns the [User](/docs/user-group-role/user) object. Example: diff --git a/website/docs/expressions/_user.md b/website/docs/expressions/_user.md index 250e15400..f38484bae 100644 --- a/website/docs/expressions/_user.md +++ b/website/docs/expressions/_user.md @@ -1,4 +1,4 @@ -- `user`: The current user. This may be `None` if there is no contextual user. See [User](../user-group/user/user_ref.md#object-properties). +- `user`: The current user. This may be `None` if there is no contextual user. See [User](../user-group-role/user/user_ref.md#object-properties). Example: diff --git a/website/docs/flow/context/index.md b/website/docs/flow/context/index.md index e98e4d30d..c092f3471 100644 --- a/website/docs/flow/context/index.md +++ b/website/docs/flow/context/index.md @@ -22,7 +22,7 @@ Keys prefixed with `goauthentik.io` are used internally by authentik and are sub ### Common keys -#### `pending_user` ([User object](../../user-group/user/user_ref.md#object-properties)) +#### `pending_user` ([User object](../../user-group-role/user/user_ref.md#object-properties)) `pending_user` is used by multiple stages. In the context of most flow executions, it represents the data of the user that is executing the flow. This value is not set automatically, it is set via the [Identification stage](../stages/identification/). @@ -110,9 +110,9 @@ Optionally overwrite the deny message shown, has a higher priority than the mess #### User write stage -##### `groups` (List of [Group objects](../../user-group/group.md)) +##### `groups` (List of [Group objects](../../user-group-role/groups/index.mdx)) -See [Group](../../user-group/group.md). If set in the flow context, the `pending_user` will be added to all the groups in this list. +See [Group](../../user-group-role/groups/index.mdx). If set in the flow context, the `pending_user` will be added to all the groups in this list. If set, this must be a list of group objects and not group names. @@ -120,6 +120,14 @@ If set, this must be a list of group objects and not group names. Path the `pending_user` will be written to. If not set in the flow, falls back to the value set in the user_write stage, and otherwise to the `users` path. +##### `user_type` (string) + +:::info +Requires authentik 2023.10 +::: + +Type the `pending_user` will be created as. Must be one of `internal`, `external` or `service_account`. + #### Password stage ##### `user_backend` (string) diff --git a/website/docs/policies/expression.mdx b/website/docs/policies/expression.mdx index cf59dccfd..2200cc96f 100644 --- a/website/docs/policies/expression.mdx +++ b/website/docs/policies/expression.mdx @@ -41,7 +41,7 @@ import Objects from "../expressions/_objects.md"; - `request`: A PolicyRequest object, which has the following properties: - - `request.user`: The current user, against which the policy is applied. See [User](../user-group/user/user_ref.md#object-properties) + - `request.user`: The current user, against which the policy is applied. See [User](../user-group-role/user/user_ref.md#object-properties) :::caution When a policy is executed in the context of a flow, this will be set to the user initiaing request, and will only be changed by a `user_login` stage. For that reason, using this value in authentication flow policies may not return the expected user. Use `context['pending_user']` instead; User Identification and other stages update this value during flow execution. @@ -77,7 +77,7 @@ This includes the following: - `context['prompt_data']`: Data which has been saved from a prompt stage or an external source. (Optional) - `context['application']`: The application the user is in the process of authorizing. (Optional) - `context['source']`: The source the user is authenticating/enrolling with. (Optional) -- `context['pending_user']`: The currently pending user, see [User](../user-group/user/user_ref.md#object-properties) +- `context['pending_user']`: The currently pending user, see [User](../user-group-role/user/user_ref.md#object-properties) - `context['is_restored']`: Contains the flow token when the flow plan was restored from a link, for example the user clicked a link to a flow which was sent by an email stage. (Optional) - `context['auth_method']`: Authentication method (this value is set by password stages) (Optional) diff --git a/website/docs/releases/2023/v2023.10.md b/website/docs/releases/2023/v2023.10.md new file mode 100644 index 000000000..0a181f9a0 --- /dev/null +++ b/website/docs/releases/2023/v2023.10.md @@ -0,0 +1,2897 @@ +--- +title: Release 2023.10 +slug: "/releases/2023.10" +--- + +## Breaking changes + +- It is only possible to upgrade to 2023.10 from 2023.8. This is due to a bug in the migrations which will be fixed in a future release (#7326). + +## New features + +- RBAC (preview) + + With this release we're introducing the ability to finely configure permissions within authentik. These permissions can be used to delegate different tasks, such as user management, application creation and more to users without granting them full superuser permissions. With this system, a least-privilege system can also be implemented much more easily. See more info [here](../../user-group-role/access-control/index.mdx) + +- LDAP Provider improvements + + The LDAP Provider now has an expanded schema, increasing the compatibility with clients that use the LDAP schema to parse data and .net applications on Windows. + +- Improved Proxy provider logout + + The proxy provider will now terminate all sessions when a user logs out of authentik or their session expires. + +- LDAP Source structure mirroring + + The LDAP Source has a new default property mapping called `authentik default LDAP Mapping: DN to User Path` which will map the LDAP users' DN to the user path in authentik, keeping the same structure as the directory the source syncs from. + +- OAuth Source OIDC auto-refresh + + OAuth sources that have a _OIDC Well-known URL_ or _OIDC JWKS URL_ set will periodically be updated to use the correct configuration based on the configured URLs. + +## Upgrading + +This release does not introduce any new requirements. + +### docker-compose + +To upgrade, download the new docker-compose file and update the Docker stack with the new version, using these commands: + +``` +wget -O docker-compose.yml https://goauthentik.io/version/2023.10/docker-compose.yml +docker-compose up -d +``` + +The `-O` flag retains the downloaded file's name, overwriting any existing local file with the same name. + +### Kubernetes + +Upgrade the Helm Chart to the new version, using the following commands: + +```shell +helm repo update +helm upgrade authentik authentik/authentik -f values.yaml --version ^2023.10 +``` + +## Minor changes/fixes + +- blueprints: fix mismatched user-login stage order (#7030) +- ci: test with postgres 16 +- core/api: add uuid field to core api user http response (#7110) +- core: Initial RBAC (#6806) +- core: Use branding_title in the end session page (#7282) +- core: prevent self-impersonation (#6885) +- core: remove celery's duplicate max_tasks_per_child (#6840) +- events: fix error when storing events with date/time/datetime/etc (#7028) +- flows: remove need for post() wrapper by using dispatch (#6765) +- flows: stage_invalid() makes flow restart depending on invalid_response_action setting (#6780) +- outposts: use channel groups instead of saving channel names (#7183) +- policies/reputation: require either check to be enabled (#6764) +- policies: fix cached policy metric (#7068) +- providers/ldap: add windows adsi support (#7098) +- providers/proxy: improve SLO by backchannel logging out sessions (#7099) +- providers/radius: TOTP MFA support (#7217) +- providers/saml: add default RelayState value for IDP-initiated requests (#7100) +- providers/saml: set WantAuthnRequestsSigned in metadata (#6851) +- providers/scim: check that a provider exists before starting scim task (#6841) +- providers/scim: remove preview banner (#7166) +- root: add option to disable beat when running worker (#6849) +- root: connect to backend via socket (#6720) +- root: disable APPEND_SLASH (#6928) +- root: extended flow and policy metrics (#7067) +- root: handle SIGHUP and SIGUSR2, healthcheck gunicorn (#6630) +- root: make Celery worker concurrency configurable (#6837) +- root: replace boj/redistore with vendored version of rbcervilla/redisstore (#6988) +- sources/ldap: add default property mapping to mirror directory structure (#6990) +- sources/ldap: add lock to sync (#6930) +- sources/ldap: add warning when a property mapping returns None or bytes (#6913) +- sources/ldap: fix FreeIPA nsaccountlock sync (#6745) +- sources/ldap: fix attribute path resolution (#7090) +- sources/ldap: fix inverted interpretation of FreeIPA nsaccountlock (#6877) +- sources/ldap: fix task timeout for ldap_sync_all and ldap_sync_single (#6809) +- sources/oauth: fix oidc well-known parsing (#7248) +- sources/oauth: include default JWKS URLs for OAuth sources (#6992) +- sources/oauth: periodically update OAuth sources' OIDC configuration (#7245) +- stages/authenticator_sms: fix error when phone number from context already exists (#7264) +- stages/authenticator: vendor otp (#6741) +- stages/deny: add custom message (#7144) +- stages/email: Fix query parameters getting lost in Email links (#5376) +- stages/email: rework email templates (#7029) +- stages/invitation: fix mis-matched serializer class for invitation (#7018) +- stages/password: fix failed_attempts_before_cancel allowing one too many (#6763) +- web/admin: add additional Flow info (#7155) +- web/admin: fix application icon size (#6738) +- web/admin: fix flow-search not being able to unset (#6838) +- web/admin: fix not being able to unset certificates (#6767) +- web/admin: fix prompt form and codemirror mode (#7231) +- web/admin: fix webauthn label order, add raw value (#6905) +- web/admin: improve user email button labels (#7233) +- web/admin: invitation stage: default "continue without invitation" to false +- web/admin: use `
` for order field on bound elements (#7031)
+-   web/admin: user details few tooltip buttons (#6899)
+-   web/flows: fix plex login not opening new tab on mobile safari (#7050)
+-   web/user: fix incorrect link to admin interface (#6993)
+-   web/user: fix unenrollment flow not being shown (#6972)
+-   web: change 'Attributes' to 'Custom attributes' on Invitation Field (#7145)
+-   web: the return of pseudolocalization (#7190)
+
+## Fixed in 2023.10.1
+
+-   lifecycle: fix otp merge migration (#7315)
+
+## API Changes
+
+#### What's New
+
+---
+
+##### `PUT` /core/transactional/applications/
+
+##### `GET` /rbac/permissions/
+
+##### `GET` /rbac/permissions/{id}/
+
+##### `GET` /rbac/permissions/assigned_by_roles/
+
+##### `POST` /rbac/permissions/assigned_by_roles/{uuid}/assign/
+
+##### `PATCH` /rbac/permissions/assigned_by_roles/{uuid}/unassign/
+
+##### `GET` /rbac/permissions/assigned_by_users/
+
+##### `POST` /rbac/permissions/assigned_by_users/{id}/assign/
+
+##### `PATCH` /rbac/permissions/assigned_by_users/{id}/unassign/
+
+##### `GET` /rbac/permissions/roles/
+
+##### `GET` /rbac/permissions/users/
+
+##### `GET` /rbac/roles/
+
+##### `POST` /rbac/roles/
+
+##### `GET` /rbac/roles/{uuid}/
+
+##### `PUT` /rbac/roles/{uuid}/
+
+##### `DELETE` /rbac/roles/{uuid}/
+
+##### `PATCH` /rbac/roles/{uuid}/
+
+##### `GET` /rbac/roles/{uuid}/used_by/
+
+#### What's Changed
+
+---
+
+##### `GET` /authenticators/admin/totp/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this TOTP Device.
+
+##### `PUT` /authenticators/admin/totp/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this TOTP Device.
+
+##### `DELETE` /authenticators/admin/totp/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this TOTP Device.
+
+##### `PATCH` /authenticators/admin/totp/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this TOTP Device.
+
+##### `GET` /authenticators/totp/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this TOTP Device.
+
+##### `PUT` /authenticators/totp/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this TOTP Device.
+
+##### `DELETE` /authenticators/totp/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this TOTP Device.
+
+##### `PATCH` /authenticators/totp/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this TOTP Device.
+
+##### `POST` /core/groups/{group_uuid}/add_user/
+
+###### Parameters:
+
+Changed: `group_uuid` in `path`
+
+> A UUID string identifying this Group.
+
+##### `POST` /core/groups/{group_uuid}/remove_user/
+
+###### Parameters:
+
+Changed: `group_uuid` in `path`
+
+> A UUID string identifying this Group.
+
+##### `GET` /enterprise/license/{license_uuid}/
+
+###### Parameters:
+
+Changed: `license_uuid` in `path`
+
+> A UUID string identifying this License.
+
+##### `PUT` /enterprise/license/{license_uuid}/
+
+###### Parameters:
+
+Changed: `license_uuid` in `path`
+
+> A UUID string identifying this License.
+
+##### `DELETE` /enterprise/license/{license_uuid}/
+
+###### Parameters:
+
+Changed: `license_uuid` in `path`
+
+> A UUID string identifying this License.
+
+##### `PATCH` /enterprise/license/{license_uuid}/
+
+###### Parameters:
+
+Changed: `license_uuid` in `path`
+
+> A UUID string identifying this License.
+
+##### `GET` /outposts/instances/{uuid}/health/
+
+###### Parameters:
+
+Changed: `uuid` in `path`
+
+> A UUID string identifying this Outpost.
+
+##### `GET` /outposts/radius/{id}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `mfa_support` (boolean)
+        > When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
+
+##### `GET` /policies/event_matcher/{policy_uuid}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `app` (string)
+
+        > -   `authentik.admin` - authentik Admin
+        > -   `authentik.api` - authentik API
+        > -   `authentik.crypto` - authentik Crypto
+        > -   `authentik.events` - authentik Events
+        > -   `authentik.flows` - authentik Flows
+        > -   `authentik.outposts` - authentik Outpost
+        > -   `authentik.policies.dummy` - authentik Policies.Dummy
+        > -   `authentik.policies.event_matcher` - authentik Policies.Event Matcher
+        > -   `authentik.policies.expiry` - authentik Policies.Expiry
+        > -   `authentik.policies.expression` - authentik Policies.Expression
+        > -   `authentik.policies.password` - authentik Policies.Password
+        > -   `authentik.policies.reputation` - authentik Policies.Reputation
+        > -   `authentik.policies` - authentik Policies
+        > -   `authentik.providers.ldap` - authentik Providers.LDAP
+        > -   `authentik.providers.oauth2` - authentik Providers.OAuth2
+        > -   `authentik.providers.proxy` - authentik Providers.Proxy
+        > -   `authentik.providers.radius` - authentik Providers.Radius
+        > -   `authentik.providers.saml` - authentik Providers.SAML
+        > -   `authentik.providers.scim` - authentik Providers.SCIM
+        > -   `authentik.rbac` - authentik RBAC
+        > -   `authentik.recovery` - authentik Recovery
+        > -   `authentik.sources.ldap` - authentik Sources.LDAP
+        > -   `authentik.sources.oauth` - authentik Sources.OAuth
+        > -   `authentik.sources.plex` - authentik Sources.Plex
+        > -   `authentik.sources.saml` - authentik Sources.SAML
+        > -   `authentik.stages.authenticator` - authentik Stages.Authenticator
+        > -   `authentik.stages.authenticator_duo` - authentik Stages.Authenticator.Duo
+        > -   `authentik.stages.authenticator_sms` - authentik Stages.Authenticator.SMS
+        > -   `authentik.stages.authenticator_static` - authentik Stages.Authenticator.Static
+        > -   `authentik.stages.authenticator_totp` - authentik Stages.Authenticator.TOTP
+        > -   `authentik.stages.authenticator_validate` - authentik Stages.Authenticator.Validate
+        > -   `authentik.stages.authenticator_webauthn` - authentik Stages.Authenticator.WebAuthn
+        > -   `authentik.stages.captcha` - authentik Stages.Captcha
+        > -   `authentik.stages.consent` - authentik Stages.Consent
+        > -   `authentik.stages.deny` - authentik Stages.Deny
+        > -   `authentik.stages.dummy` - authentik Stages.Dummy
+        > -   `authentik.stages.email` - authentik Stages.Email
+        > -   `authentik.stages.identification` - authentik Stages.Identification
+        > -   `authentik.stages.invitation` - authentik Stages.User Invitation
+        > -   `authentik.stages.password` - authentik Stages.Password
+        > -   `authentik.stages.prompt` - authentik Stages.Prompt
+        > -   `authentik.stages.user_delete` - authentik Stages.User Delete
+        > -   `authentik.stages.user_login` - authentik Stages.User Login
+        > -   `authentik.stages.user_logout` - authentik Stages.User Logout
+        > -   `authentik.stages.user_write` - authentik Stages.User Write
+        > -   `authentik.tenants` - authentik Tenants
+        > -   `authentik.blueprints` - authentik Blueprints
+        > -   `authentik.core` - authentik Core
+        > -   `authentik.enterprise` - authentik Enterprise
+
+        Added enum values:
+
+        -   `authentik.rbac`
+        -   `authentik.stages.authenticator`
+
+    -   Changed property `model` (string)
+
+        > -   `authentik_crypto.certificatekeypair` - Certificate-Key Pair
+        > -   `authentik_events.event` - Event
+        > -   `authentik_events.notificationtransport` - Notification Transport
+        > -   `authentik_events.notification` - Notification
+        > -   `authentik_events.notificationrule` - Notification Rule
+        > -   `authentik_events.notificationwebhookmapping` - Webhook Mapping
+        > -   `authentik_flows.flow` - Flow
+        > -   `authentik_flows.flowstagebinding` - Flow Stage Binding
+        > -   `authentik_outposts.dockerserviceconnection` - Docker Service-Connection
+        > -   `authentik_outposts.kubernetesserviceconnection` - Kubernetes Service-Connection
+        > -   `authentik_outposts.outpost` - Outpost
+        > -   `authentik_policies_dummy.dummypolicy` - Dummy Policy
+        > -   `authentik_policies_event_matcher.eventmatcherpolicy` - Event Matcher Policy
+        > -   `authentik_policies_expiry.passwordexpirypolicy` - Password Expiry Policy
+        > -   `authentik_policies_expression.expressionpolicy` - Expression Policy
+        > -   `authentik_policies_password.passwordpolicy` - Password Policy
+        > -   `authentik_policies_reputation.reputationpolicy` - Reputation Policy
+        > -   `authentik_policies_reputation.reputation` - Reputation Score
+        > -   `authentik_policies.policybinding` - Policy Binding
+        > -   `authentik_providers_ldap.ldapprovider` - LDAP Provider
+        > -   `authentik_providers_oauth2.scopemapping` - Scope Mapping
+        > -   `authentik_providers_oauth2.oauth2provider` - OAuth2/OpenID Provider
+        > -   `authentik_providers_oauth2.authorizationcode` - Authorization Code
+        > -   `authentik_providers_oauth2.accesstoken` - OAuth2 Access Token
+        > -   `authentik_providers_oauth2.refreshtoken` - OAuth2 Refresh Token
+        > -   `authentik_providers_proxy.proxyprovider` - Proxy Provider
+        > -   `authentik_providers_radius.radiusprovider` - Radius Provider
+        > -   `authentik_providers_saml.samlprovider` - SAML Provider
+        > -   `authentik_providers_saml.samlpropertymapping` - SAML Property Mapping
+        > -   `authentik_providers_scim.scimprovider` - SCIM Provider
+        > -   `authentik_providers_scim.scimmapping` - SCIM Mapping
+        > -   `authentik_rbac.role` - Role
+        > -   `authentik_sources_ldap.ldapsource` - LDAP Source
+        > -   `authentik_sources_ldap.ldappropertymapping` - LDAP Property Mapping
+        > -   `authentik_sources_oauth.oauthsource` - OAuth Source
+        > -   `authentik_sources_oauth.useroauthsourceconnection` - User OAuth Source Connection
+        > -   `authentik_sources_plex.plexsource` - Plex Source
+        > -   `authentik_sources_plex.plexsourceconnection` - User Plex Source Connection
+        > -   `authentik_sources_saml.samlsource` - SAML Source
+        > -   `authentik_sources_saml.usersamlsourceconnection` - User SAML Source Connection
+        > -   `authentik_stages_authenticator_duo.authenticatorduostage` - Duo Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_duo.duodevice` - Duo Device
+        > -   `authentik_stages_authenticator_sms.authenticatorsmsstage` - SMS Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_sms.smsdevice` - SMS Device
+        > -   `authentik_stages_authenticator_static.authenticatorstaticstage` - Static Authenticator Stage
+        > -   `authentik_stages_authenticator_static.staticdevice` - Static Device
+        > -   `authentik_stages_authenticator_totp.authenticatortotpstage` - TOTP Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_totp.totpdevice` - TOTP Device
+        > -   `authentik_stages_authenticator_validate.authenticatorvalidatestage` - Authenticator Validation Stage
+        > -   `authentik_stages_authenticator_webauthn.authenticatewebauthnstage` - WebAuthn Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_webauthn.webauthndevice` - WebAuthn Device
+        > -   `authentik_stages_captcha.captchastage` - Captcha Stage
+        > -   `authentik_stages_consent.consentstage` - Consent Stage
+        > -   `authentik_stages_consent.userconsent` - User Consent
+        > -   `authentik_stages_deny.denystage` - Deny Stage
+        > -   `authentik_stages_dummy.dummystage` - Dummy Stage
+        > -   `authentik_stages_email.emailstage` - Email Stage
+        > -   `authentik_stages_identification.identificationstage` - Identification Stage
+        > -   `authentik_stages_invitation.invitationstage` - Invitation Stage
+        > -   `authentik_stages_invitation.invitation` - Invitation
+        > -   `authentik_stages_password.passwordstage` - Password Stage
+        > -   `authentik_stages_prompt.prompt` - Prompt
+        > -   `authentik_stages_prompt.promptstage` - Prompt Stage
+        > -   `authentik_stages_user_delete.userdeletestage` - User Delete Stage
+        > -   `authentik_stages_user_login.userloginstage` - User Login Stage
+        > -   `authentik_stages_user_logout.userlogoutstage` - User Logout Stage
+        > -   `authentik_stages_user_write.userwritestage` - User Write Stage
+        > -   `authentik_tenants.tenant` - Tenant
+        > -   `authentik_blueprints.blueprintinstance` - Blueprint Instance
+        > -   `authentik_core.group` - Group
+        > -   `authentik_core.user` - User
+        > -   `authentik_core.application` - Application
+        > -   `authentik_core.token` - Token
+        > -   `authentik_enterprise.license` - License
+
+        Added enum values:
+
+        -   `authentik_rbac.role`
+        -   `authentik_stages_authenticator_static.staticdevice`
+        -   `authentik_stages_authenticator_totp.totpdevice`
+        -   `authentik_enterprise.license`
+
+##### `PUT` /policies/event_matcher/{policy_uuid}/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Changed property `app` (string)
+
+    > -   `authentik.admin` - authentik Admin
+    > -   `authentik.api` - authentik API
+    > -   `authentik.crypto` - authentik Crypto
+    > -   `authentik.events` - authentik Events
+    > -   `authentik.flows` - authentik Flows
+    > -   `authentik.outposts` - authentik Outpost
+    > -   `authentik.policies.dummy` - authentik Policies.Dummy
+    > -   `authentik.policies.event_matcher` - authentik Policies.Event Matcher
+    > -   `authentik.policies.expiry` - authentik Policies.Expiry
+    > -   `authentik.policies.expression` - authentik Policies.Expression
+    > -   `authentik.policies.password` - authentik Policies.Password
+    > -   `authentik.policies.reputation` - authentik Policies.Reputation
+    > -   `authentik.policies` - authentik Policies
+    > -   `authentik.providers.ldap` - authentik Providers.LDAP
+    > -   `authentik.providers.oauth2` - authentik Providers.OAuth2
+    > -   `authentik.providers.proxy` - authentik Providers.Proxy
+    > -   `authentik.providers.radius` - authentik Providers.Radius
+    > -   `authentik.providers.saml` - authentik Providers.SAML
+    > -   `authentik.providers.scim` - authentik Providers.SCIM
+    > -   `authentik.rbac` - authentik RBAC
+    > -   `authentik.recovery` - authentik Recovery
+    > -   `authentik.sources.ldap` - authentik Sources.LDAP
+    > -   `authentik.sources.oauth` - authentik Sources.OAuth
+    > -   `authentik.sources.plex` - authentik Sources.Plex
+    > -   `authentik.sources.saml` - authentik Sources.SAML
+    > -   `authentik.stages.authenticator` - authentik Stages.Authenticator
+    > -   `authentik.stages.authenticator_duo` - authentik Stages.Authenticator.Duo
+    > -   `authentik.stages.authenticator_sms` - authentik Stages.Authenticator.SMS
+    > -   `authentik.stages.authenticator_static` - authentik Stages.Authenticator.Static
+    > -   `authentik.stages.authenticator_totp` - authentik Stages.Authenticator.TOTP
+    > -   `authentik.stages.authenticator_validate` - authentik Stages.Authenticator.Validate
+    > -   `authentik.stages.authenticator_webauthn` - authentik Stages.Authenticator.WebAuthn
+    > -   `authentik.stages.captcha` - authentik Stages.Captcha
+    > -   `authentik.stages.consent` - authentik Stages.Consent
+    > -   `authentik.stages.deny` - authentik Stages.Deny
+    > -   `authentik.stages.dummy` - authentik Stages.Dummy
+    > -   `authentik.stages.email` - authentik Stages.Email
+    > -   `authentik.stages.identification` - authentik Stages.Identification
+    > -   `authentik.stages.invitation` - authentik Stages.User Invitation
+    > -   `authentik.stages.password` - authentik Stages.Password
+    > -   `authentik.stages.prompt` - authentik Stages.Prompt
+    > -   `authentik.stages.user_delete` - authentik Stages.User Delete
+    > -   `authentik.stages.user_login` - authentik Stages.User Login
+    > -   `authentik.stages.user_logout` - authentik Stages.User Logout
+    > -   `authentik.stages.user_write` - authentik Stages.User Write
+    > -   `authentik.tenants` - authentik Tenants
+    > -   `authentik.blueprints` - authentik Blueprints
+    > -   `authentik.core` - authentik Core
+    > -   `authentik.enterprise` - authentik Enterprise
+
+    Added enum values:
+
+    -   `authentik.rbac`
+    -   `authentik.stages.authenticator`
+
+-   Changed property `model` (string)
+
+    > -   `authentik_crypto.certificatekeypair` - Certificate-Key Pair
+    > -   `authentik_events.event` - Event
+    > -   `authentik_events.notificationtransport` - Notification Transport
+    > -   `authentik_events.notification` - Notification
+    > -   `authentik_events.notificationrule` - Notification Rule
+    > -   `authentik_events.notificationwebhookmapping` - Webhook Mapping
+    > -   `authentik_flows.flow` - Flow
+    > -   `authentik_flows.flowstagebinding` - Flow Stage Binding
+    > -   `authentik_outposts.dockerserviceconnection` - Docker Service-Connection
+    > -   `authentik_outposts.kubernetesserviceconnection` - Kubernetes Service-Connection
+    > -   `authentik_outposts.outpost` - Outpost
+    > -   `authentik_policies_dummy.dummypolicy` - Dummy Policy
+    > -   `authentik_policies_event_matcher.eventmatcherpolicy` - Event Matcher Policy
+    > -   `authentik_policies_expiry.passwordexpirypolicy` - Password Expiry Policy
+    > -   `authentik_policies_expression.expressionpolicy` - Expression Policy
+    > -   `authentik_policies_password.passwordpolicy` - Password Policy
+    > -   `authentik_policies_reputation.reputationpolicy` - Reputation Policy
+    > -   `authentik_policies_reputation.reputation` - Reputation Score
+    > -   `authentik_policies.policybinding` - Policy Binding
+    > -   `authentik_providers_ldap.ldapprovider` - LDAP Provider
+    > -   `authentik_providers_oauth2.scopemapping` - Scope Mapping
+    > -   `authentik_providers_oauth2.oauth2provider` - OAuth2/OpenID Provider
+    > -   `authentik_providers_oauth2.authorizationcode` - Authorization Code
+    > -   `authentik_providers_oauth2.accesstoken` - OAuth2 Access Token
+    > -   `authentik_providers_oauth2.refreshtoken` - OAuth2 Refresh Token
+    > -   `authentik_providers_proxy.proxyprovider` - Proxy Provider
+    > -   `authentik_providers_radius.radiusprovider` - Radius Provider
+    > -   `authentik_providers_saml.samlprovider` - SAML Provider
+    > -   `authentik_providers_saml.samlpropertymapping` - SAML Property Mapping
+    > -   `authentik_providers_scim.scimprovider` - SCIM Provider
+    > -   `authentik_providers_scim.scimmapping` - SCIM Mapping
+    > -   `authentik_rbac.role` - Role
+    > -   `authentik_sources_ldap.ldapsource` - LDAP Source
+    > -   `authentik_sources_ldap.ldappropertymapping` - LDAP Property Mapping
+    > -   `authentik_sources_oauth.oauthsource` - OAuth Source
+    > -   `authentik_sources_oauth.useroauthsourceconnection` - User OAuth Source Connection
+    > -   `authentik_sources_plex.plexsource` - Plex Source
+    > -   `authentik_sources_plex.plexsourceconnection` - User Plex Source Connection
+    > -   `authentik_sources_saml.samlsource` - SAML Source
+    > -   `authentik_sources_saml.usersamlsourceconnection` - User SAML Source Connection
+    > -   `authentik_stages_authenticator_duo.authenticatorduostage` - Duo Authenticator Setup Stage
+    > -   `authentik_stages_authenticator_duo.duodevice` - Duo Device
+    > -   `authentik_stages_authenticator_sms.authenticatorsmsstage` - SMS Authenticator Setup Stage
+    > -   `authentik_stages_authenticator_sms.smsdevice` - SMS Device
+    > -   `authentik_stages_authenticator_static.authenticatorstaticstage` - Static Authenticator Stage
+    > -   `authentik_stages_authenticator_static.staticdevice` - Static Device
+    > -   `authentik_stages_authenticator_totp.authenticatortotpstage` - TOTP Authenticator Setup Stage
+    > -   `authentik_stages_authenticator_totp.totpdevice` - TOTP Device
+    > -   `authentik_stages_authenticator_validate.authenticatorvalidatestage` - Authenticator Validation Stage
+    > -   `authentik_stages_authenticator_webauthn.authenticatewebauthnstage` - WebAuthn Authenticator Setup Stage
+    > -   `authentik_stages_authenticator_webauthn.webauthndevice` - WebAuthn Device
+    > -   `authentik_stages_captcha.captchastage` - Captcha Stage
+    > -   `authentik_stages_consent.consentstage` - Consent Stage
+    > -   `authentik_stages_consent.userconsent` - User Consent
+    > -   `authentik_stages_deny.denystage` - Deny Stage
+    > -   `authentik_stages_dummy.dummystage` - Dummy Stage
+    > -   `authentik_stages_email.emailstage` - Email Stage
+    > -   `authentik_stages_identification.identificationstage` - Identification Stage
+    > -   `authentik_stages_invitation.invitationstage` - Invitation Stage
+    > -   `authentik_stages_invitation.invitation` - Invitation
+    > -   `authentik_stages_password.passwordstage` - Password Stage
+    > -   `authentik_stages_prompt.prompt` - Prompt
+    > -   `authentik_stages_prompt.promptstage` - Prompt Stage
+    > -   `authentik_stages_user_delete.userdeletestage` - User Delete Stage
+    > -   `authentik_stages_user_login.userloginstage` - User Login Stage
+    > -   `authentik_stages_user_logout.userlogoutstage` - User Logout Stage
+    > -   `authentik_stages_user_write.userwritestage` - User Write Stage
+    > -   `authentik_tenants.tenant` - Tenant
+    > -   `authentik_blueprints.blueprintinstance` - Blueprint Instance
+    > -   `authentik_core.group` - Group
+    > -   `authentik_core.user` - User
+    > -   `authentik_core.application` - Application
+    > -   `authentik_core.token` - Token
+    > -   `authentik_enterprise.license` - License
+
+    Added enum values:
+
+    -   `authentik_rbac.role`
+    -   `authentik_stages_authenticator_static.staticdevice`
+    -   `authentik_stages_authenticator_totp.totpdevice`
+    -   `authentik_enterprise.license`
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `app` (string)
+
+        > -   `authentik.admin` - authentik Admin
+        > -   `authentik.api` - authentik API
+        > -   `authentik.crypto` - authentik Crypto
+        > -   `authentik.events` - authentik Events
+        > -   `authentik.flows` - authentik Flows
+        > -   `authentik.outposts` - authentik Outpost
+        > -   `authentik.policies.dummy` - authentik Policies.Dummy
+        > -   `authentik.policies.event_matcher` - authentik Policies.Event Matcher
+        > -   `authentik.policies.expiry` - authentik Policies.Expiry
+        > -   `authentik.policies.expression` - authentik Policies.Expression
+        > -   `authentik.policies.password` - authentik Policies.Password
+        > -   `authentik.policies.reputation` - authentik Policies.Reputation
+        > -   `authentik.policies` - authentik Policies
+        > -   `authentik.providers.ldap` - authentik Providers.LDAP
+        > -   `authentik.providers.oauth2` - authentik Providers.OAuth2
+        > -   `authentik.providers.proxy` - authentik Providers.Proxy
+        > -   `authentik.providers.radius` - authentik Providers.Radius
+        > -   `authentik.providers.saml` - authentik Providers.SAML
+        > -   `authentik.providers.scim` - authentik Providers.SCIM
+        > -   `authentik.rbac` - authentik RBAC
+        > -   `authentik.recovery` - authentik Recovery
+        > -   `authentik.sources.ldap` - authentik Sources.LDAP
+        > -   `authentik.sources.oauth` - authentik Sources.OAuth
+        > -   `authentik.sources.plex` - authentik Sources.Plex
+        > -   `authentik.sources.saml` - authentik Sources.SAML
+        > -   `authentik.stages.authenticator` - authentik Stages.Authenticator
+        > -   `authentik.stages.authenticator_duo` - authentik Stages.Authenticator.Duo
+        > -   `authentik.stages.authenticator_sms` - authentik Stages.Authenticator.SMS
+        > -   `authentik.stages.authenticator_static` - authentik Stages.Authenticator.Static
+        > -   `authentik.stages.authenticator_totp` - authentik Stages.Authenticator.TOTP
+        > -   `authentik.stages.authenticator_validate` - authentik Stages.Authenticator.Validate
+        > -   `authentik.stages.authenticator_webauthn` - authentik Stages.Authenticator.WebAuthn
+        > -   `authentik.stages.captcha` - authentik Stages.Captcha
+        > -   `authentik.stages.consent` - authentik Stages.Consent
+        > -   `authentik.stages.deny` - authentik Stages.Deny
+        > -   `authentik.stages.dummy` - authentik Stages.Dummy
+        > -   `authentik.stages.email` - authentik Stages.Email
+        > -   `authentik.stages.identification` - authentik Stages.Identification
+        > -   `authentik.stages.invitation` - authentik Stages.User Invitation
+        > -   `authentik.stages.password` - authentik Stages.Password
+        > -   `authentik.stages.prompt` - authentik Stages.Prompt
+        > -   `authentik.stages.user_delete` - authentik Stages.User Delete
+        > -   `authentik.stages.user_login` - authentik Stages.User Login
+        > -   `authentik.stages.user_logout` - authentik Stages.User Logout
+        > -   `authentik.stages.user_write` - authentik Stages.User Write
+        > -   `authentik.tenants` - authentik Tenants
+        > -   `authentik.blueprints` - authentik Blueprints
+        > -   `authentik.core` - authentik Core
+        > -   `authentik.enterprise` - authentik Enterprise
+
+        Added enum values:
+
+        -   `authentik.rbac`
+        -   `authentik.stages.authenticator`
+
+    -   Changed property `model` (string)
+
+        > -   `authentik_crypto.certificatekeypair` - Certificate-Key Pair
+        > -   `authentik_events.event` - Event
+        > -   `authentik_events.notificationtransport` - Notification Transport
+        > -   `authentik_events.notification` - Notification
+        > -   `authentik_events.notificationrule` - Notification Rule
+        > -   `authentik_events.notificationwebhookmapping` - Webhook Mapping
+        > -   `authentik_flows.flow` - Flow
+        > -   `authentik_flows.flowstagebinding` - Flow Stage Binding
+        > -   `authentik_outposts.dockerserviceconnection` - Docker Service-Connection
+        > -   `authentik_outposts.kubernetesserviceconnection` - Kubernetes Service-Connection
+        > -   `authentik_outposts.outpost` - Outpost
+        > -   `authentik_policies_dummy.dummypolicy` - Dummy Policy
+        > -   `authentik_policies_event_matcher.eventmatcherpolicy` - Event Matcher Policy
+        > -   `authentik_policies_expiry.passwordexpirypolicy` - Password Expiry Policy
+        > -   `authentik_policies_expression.expressionpolicy` - Expression Policy
+        > -   `authentik_policies_password.passwordpolicy` - Password Policy
+        > -   `authentik_policies_reputation.reputationpolicy` - Reputation Policy
+        > -   `authentik_policies_reputation.reputation` - Reputation Score
+        > -   `authentik_policies.policybinding` - Policy Binding
+        > -   `authentik_providers_ldap.ldapprovider` - LDAP Provider
+        > -   `authentik_providers_oauth2.scopemapping` - Scope Mapping
+        > -   `authentik_providers_oauth2.oauth2provider` - OAuth2/OpenID Provider
+        > -   `authentik_providers_oauth2.authorizationcode` - Authorization Code
+        > -   `authentik_providers_oauth2.accesstoken` - OAuth2 Access Token
+        > -   `authentik_providers_oauth2.refreshtoken` - OAuth2 Refresh Token
+        > -   `authentik_providers_proxy.proxyprovider` - Proxy Provider
+        > -   `authentik_providers_radius.radiusprovider` - Radius Provider
+        > -   `authentik_providers_saml.samlprovider` - SAML Provider
+        > -   `authentik_providers_saml.samlpropertymapping` - SAML Property Mapping
+        > -   `authentik_providers_scim.scimprovider` - SCIM Provider
+        > -   `authentik_providers_scim.scimmapping` - SCIM Mapping
+        > -   `authentik_rbac.role` - Role
+        > -   `authentik_sources_ldap.ldapsource` - LDAP Source
+        > -   `authentik_sources_ldap.ldappropertymapping` - LDAP Property Mapping
+        > -   `authentik_sources_oauth.oauthsource` - OAuth Source
+        > -   `authentik_sources_oauth.useroauthsourceconnection` - User OAuth Source Connection
+        > -   `authentik_sources_plex.plexsource` - Plex Source
+        > -   `authentik_sources_plex.plexsourceconnection` - User Plex Source Connection
+        > -   `authentik_sources_saml.samlsource` - SAML Source
+        > -   `authentik_sources_saml.usersamlsourceconnection` - User SAML Source Connection
+        > -   `authentik_stages_authenticator_duo.authenticatorduostage` - Duo Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_duo.duodevice` - Duo Device
+        > -   `authentik_stages_authenticator_sms.authenticatorsmsstage` - SMS Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_sms.smsdevice` - SMS Device
+        > -   `authentik_stages_authenticator_static.authenticatorstaticstage` - Static Authenticator Stage
+        > -   `authentik_stages_authenticator_static.staticdevice` - Static Device
+        > -   `authentik_stages_authenticator_totp.authenticatortotpstage` - TOTP Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_totp.totpdevice` - TOTP Device
+        > -   `authentik_stages_authenticator_validate.authenticatorvalidatestage` - Authenticator Validation Stage
+        > -   `authentik_stages_authenticator_webauthn.authenticatewebauthnstage` - WebAuthn Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_webauthn.webauthndevice` - WebAuthn Device
+        > -   `authentik_stages_captcha.captchastage` - Captcha Stage
+        > -   `authentik_stages_consent.consentstage` - Consent Stage
+        > -   `authentik_stages_consent.userconsent` - User Consent
+        > -   `authentik_stages_deny.denystage` - Deny Stage
+        > -   `authentik_stages_dummy.dummystage` - Dummy Stage
+        > -   `authentik_stages_email.emailstage` - Email Stage
+        > -   `authentik_stages_identification.identificationstage` - Identification Stage
+        > -   `authentik_stages_invitation.invitationstage` - Invitation Stage
+        > -   `authentik_stages_invitation.invitation` - Invitation
+        > -   `authentik_stages_password.passwordstage` - Password Stage
+        > -   `authentik_stages_prompt.prompt` - Prompt
+        > -   `authentik_stages_prompt.promptstage` - Prompt Stage
+        > -   `authentik_stages_user_delete.userdeletestage` - User Delete Stage
+        > -   `authentik_stages_user_login.userloginstage` - User Login Stage
+        > -   `authentik_stages_user_logout.userlogoutstage` - User Logout Stage
+        > -   `authentik_stages_user_write.userwritestage` - User Write Stage
+        > -   `authentik_tenants.tenant` - Tenant
+        > -   `authentik_blueprints.blueprintinstance` - Blueprint Instance
+        > -   `authentik_core.group` - Group
+        > -   `authentik_core.user` - User
+        > -   `authentik_core.application` - Application
+        > -   `authentik_core.token` - Token
+        > -   `authentik_enterprise.license` - License
+
+        Added enum values:
+
+        -   `authentik_rbac.role`
+        -   `authentik_stages_authenticator_static.staticdevice`
+        -   `authentik_stages_authenticator_totp.totpdevice`
+        -   `authentik_enterprise.license`
+
+##### `PATCH` /policies/event_matcher/{policy_uuid}/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Changed property `app` (string)
+
+    > -   `authentik.admin` - authentik Admin
+    > -   `authentik.api` - authentik API
+    > -   `authentik.crypto` - authentik Crypto
+    > -   `authentik.events` - authentik Events
+    > -   `authentik.flows` - authentik Flows
+    > -   `authentik.outposts` - authentik Outpost
+    > -   `authentik.policies.dummy` - authentik Policies.Dummy
+    > -   `authentik.policies.event_matcher` - authentik Policies.Event Matcher
+    > -   `authentik.policies.expiry` - authentik Policies.Expiry
+    > -   `authentik.policies.expression` - authentik Policies.Expression
+    > -   `authentik.policies.password` - authentik Policies.Password
+    > -   `authentik.policies.reputation` - authentik Policies.Reputation
+    > -   `authentik.policies` - authentik Policies
+    > -   `authentik.providers.ldap` - authentik Providers.LDAP
+    > -   `authentik.providers.oauth2` - authentik Providers.OAuth2
+    > -   `authentik.providers.proxy` - authentik Providers.Proxy
+    > -   `authentik.providers.radius` - authentik Providers.Radius
+    > -   `authentik.providers.saml` - authentik Providers.SAML
+    > -   `authentik.providers.scim` - authentik Providers.SCIM
+    > -   `authentik.rbac` - authentik RBAC
+    > -   `authentik.recovery` - authentik Recovery
+    > -   `authentik.sources.ldap` - authentik Sources.LDAP
+    > -   `authentik.sources.oauth` - authentik Sources.OAuth
+    > -   `authentik.sources.plex` - authentik Sources.Plex
+    > -   `authentik.sources.saml` - authentik Sources.SAML
+    > -   `authentik.stages.authenticator` - authentik Stages.Authenticator
+    > -   `authentik.stages.authenticator_duo` - authentik Stages.Authenticator.Duo
+    > -   `authentik.stages.authenticator_sms` - authentik Stages.Authenticator.SMS
+    > -   `authentik.stages.authenticator_static` - authentik Stages.Authenticator.Static
+    > -   `authentik.stages.authenticator_totp` - authentik Stages.Authenticator.TOTP
+    > -   `authentik.stages.authenticator_validate` - authentik Stages.Authenticator.Validate
+    > -   `authentik.stages.authenticator_webauthn` - authentik Stages.Authenticator.WebAuthn
+    > -   `authentik.stages.captcha` - authentik Stages.Captcha
+    > -   `authentik.stages.consent` - authentik Stages.Consent
+    > -   `authentik.stages.deny` - authentik Stages.Deny
+    > -   `authentik.stages.dummy` - authentik Stages.Dummy
+    > -   `authentik.stages.email` - authentik Stages.Email
+    > -   `authentik.stages.identification` - authentik Stages.Identification
+    > -   `authentik.stages.invitation` - authentik Stages.User Invitation
+    > -   `authentik.stages.password` - authentik Stages.Password
+    > -   `authentik.stages.prompt` - authentik Stages.Prompt
+    > -   `authentik.stages.user_delete` - authentik Stages.User Delete
+    > -   `authentik.stages.user_login` - authentik Stages.User Login
+    > -   `authentik.stages.user_logout` - authentik Stages.User Logout
+    > -   `authentik.stages.user_write` - authentik Stages.User Write
+    > -   `authentik.tenants` - authentik Tenants
+    > -   `authentik.blueprints` - authentik Blueprints
+    > -   `authentik.core` - authentik Core
+    > -   `authentik.enterprise` - authentik Enterprise
+
+    Added enum values:
+
+    -   `authentik.rbac`
+    -   `authentik.stages.authenticator`
+
+-   Changed property `model` (string)
+
+    > -   `authentik_crypto.certificatekeypair` - Certificate-Key Pair
+    > -   `authentik_events.event` - Event
+    > -   `authentik_events.notificationtransport` - Notification Transport
+    > -   `authentik_events.notification` - Notification
+    > -   `authentik_events.notificationrule` - Notification Rule
+    > -   `authentik_events.notificationwebhookmapping` - Webhook Mapping
+    > -   `authentik_flows.flow` - Flow
+    > -   `authentik_flows.flowstagebinding` - Flow Stage Binding
+    > -   `authentik_outposts.dockerserviceconnection` - Docker Service-Connection
+    > -   `authentik_outposts.kubernetesserviceconnection` - Kubernetes Service-Connection
+    > -   `authentik_outposts.outpost` - Outpost
+    > -   `authentik_policies_dummy.dummypolicy` - Dummy Policy
+    > -   `authentik_policies_event_matcher.eventmatcherpolicy` - Event Matcher Policy
+    > -   `authentik_policies_expiry.passwordexpirypolicy` - Password Expiry Policy
+    > -   `authentik_policies_expression.expressionpolicy` - Expression Policy
+    > -   `authentik_policies_password.passwordpolicy` - Password Policy
+    > -   `authentik_policies_reputation.reputationpolicy` - Reputation Policy
+    > -   `authentik_policies_reputation.reputation` - Reputation Score
+    > -   `authentik_policies.policybinding` - Policy Binding
+    > -   `authentik_providers_ldap.ldapprovider` - LDAP Provider
+    > -   `authentik_providers_oauth2.scopemapping` - Scope Mapping
+    > -   `authentik_providers_oauth2.oauth2provider` - OAuth2/OpenID Provider
+    > -   `authentik_providers_oauth2.authorizationcode` - Authorization Code
+    > -   `authentik_providers_oauth2.accesstoken` - OAuth2 Access Token
+    > -   `authentik_providers_oauth2.refreshtoken` - OAuth2 Refresh Token
+    > -   `authentik_providers_proxy.proxyprovider` - Proxy Provider
+    > -   `authentik_providers_radius.radiusprovider` - Radius Provider
+    > -   `authentik_providers_saml.samlprovider` - SAML Provider
+    > -   `authentik_providers_saml.samlpropertymapping` - SAML Property Mapping
+    > -   `authentik_providers_scim.scimprovider` - SCIM Provider
+    > -   `authentik_providers_scim.scimmapping` - SCIM Mapping
+    > -   `authentik_rbac.role` - Role
+    > -   `authentik_sources_ldap.ldapsource` - LDAP Source
+    > -   `authentik_sources_ldap.ldappropertymapping` - LDAP Property Mapping
+    > -   `authentik_sources_oauth.oauthsource` - OAuth Source
+    > -   `authentik_sources_oauth.useroauthsourceconnection` - User OAuth Source Connection
+    > -   `authentik_sources_plex.plexsource` - Plex Source
+    > -   `authentik_sources_plex.plexsourceconnection` - User Plex Source Connection
+    > -   `authentik_sources_saml.samlsource` - SAML Source
+    > -   `authentik_sources_saml.usersamlsourceconnection` - User SAML Source Connection
+    > -   `authentik_stages_authenticator_duo.authenticatorduostage` - Duo Authenticator Setup Stage
+    > -   `authentik_stages_authenticator_duo.duodevice` - Duo Device
+    > -   `authentik_stages_authenticator_sms.authenticatorsmsstage` - SMS Authenticator Setup Stage
+    > -   `authentik_stages_authenticator_sms.smsdevice` - SMS Device
+    > -   `authentik_stages_authenticator_static.authenticatorstaticstage` - Static Authenticator Stage
+    > -   `authentik_stages_authenticator_static.staticdevice` - Static Device
+    > -   `authentik_stages_authenticator_totp.authenticatortotpstage` - TOTP Authenticator Setup Stage
+    > -   `authentik_stages_authenticator_totp.totpdevice` - TOTP Device
+    > -   `authentik_stages_authenticator_validate.authenticatorvalidatestage` - Authenticator Validation Stage
+    > -   `authentik_stages_authenticator_webauthn.authenticatewebauthnstage` - WebAuthn Authenticator Setup Stage
+    > -   `authentik_stages_authenticator_webauthn.webauthndevice` - WebAuthn Device
+    > -   `authentik_stages_captcha.captchastage` - Captcha Stage
+    > -   `authentik_stages_consent.consentstage` - Consent Stage
+    > -   `authentik_stages_consent.userconsent` - User Consent
+    > -   `authentik_stages_deny.denystage` - Deny Stage
+    > -   `authentik_stages_dummy.dummystage` - Dummy Stage
+    > -   `authentik_stages_email.emailstage` - Email Stage
+    > -   `authentik_stages_identification.identificationstage` - Identification Stage
+    > -   `authentik_stages_invitation.invitationstage` - Invitation Stage
+    > -   `authentik_stages_invitation.invitation` - Invitation
+    > -   `authentik_stages_password.passwordstage` - Password Stage
+    > -   `authentik_stages_prompt.prompt` - Prompt
+    > -   `authentik_stages_prompt.promptstage` - Prompt Stage
+    > -   `authentik_stages_user_delete.userdeletestage` - User Delete Stage
+    > -   `authentik_stages_user_login.userloginstage` - User Login Stage
+    > -   `authentik_stages_user_logout.userlogoutstage` - User Logout Stage
+    > -   `authentik_stages_user_write.userwritestage` - User Write Stage
+    > -   `authentik_tenants.tenant` - Tenant
+    > -   `authentik_blueprints.blueprintinstance` - Blueprint Instance
+    > -   `authentik_core.group` - Group
+    > -   `authentik_core.user` - User
+    > -   `authentik_core.application` - Application
+    > -   `authentik_core.token` - Token
+    > -   `authentik_enterprise.license` - License
+
+    Added enum values:
+
+    -   `authentik_rbac.role`
+    -   `authentik_stages_authenticator_static.staticdevice`
+    -   `authentik_stages_authenticator_totp.totpdevice`
+    -   `authentik_enterprise.license`
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `app` (string)
+
+        > -   `authentik.admin` - authentik Admin
+        > -   `authentik.api` - authentik API
+        > -   `authentik.crypto` - authentik Crypto
+        > -   `authentik.events` - authentik Events
+        > -   `authentik.flows` - authentik Flows
+        > -   `authentik.outposts` - authentik Outpost
+        > -   `authentik.policies.dummy` - authentik Policies.Dummy
+        > -   `authentik.policies.event_matcher` - authentik Policies.Event Matcher
+        > -   `authentik.policies.expiry` - authentik Policies.Expiry
+        > -   `authentik.policies.expression` - authentik Policies.Expression
+        > -   `authentik.policies.password` - authentik Policies.Password
+        > -   `authentik.policies.reputation` - authentik Policies.Reputation
+        > -   `authentik.policies` - authentik Policies
+        > -   `authentik.providers.ldap` - authentik Providers.LDAP
+        > -   `authentik.providers.oauth2` - authentik Providers.OAuth2
+        > -   `authentik.providers.proxy` - authentik Providers.Proxy
+        > -   `authentik.providers.radius` - authentik Providers.Radius
+        > -   `authentik.providers.saml` - authentik Providers.SAML
+        > -   `authentik.providers.scim` - authentik Providers.SCIM
+        > -   `authentik.rbac` - authentik RBAC
+        > -   `authentik.recovery` - authentik Recovery
+        > -   `authentik.sources.ldap` - authentik Sources.LDAP
+        > -   `authentik.sources.oauth` - authentik Sources.OAuth
+        > -   `authentik.sources.plex` - authentik Sources.Plex
+        > -   `authentik.sources.saml` - authentik Sources.SAML
+        > -   `authentik.stages.authenticator` - authentik Stages.Authenticator
+        > -   `authentik.stages.authenticator_duo` - authentik Stages.Authenticator.Duo
+        > -   `authentik.stages.authenticator_sms` - authentik Stages.Authenticator.SMS
+        > -   `authentik.stages.authenticator_static` - authentik Stages.Authenticator.Static
+        > -   `authentik.stages.authenticator_totp` - authentik Stages.Authenticator.TOTP
+        > -   `authentik.stages.authenticator_validate` - authentik Stages.Authenticator.Validate
+        > -   `authentik.stages.authenticator_webauthn` - authentik Stages.Authenticator.WebAuthn
+        > -   `authentik.stages.captcha` - authentik Stages.Captcha
+        > -   `authentik.stages.consent` - authentik Stages.Consent
+        > -   `authentik.stages.deny` - authentik Stages.Deny
+        > -   `authentik.stages.dummy` - authentik Stages.Dummy
+        > -   `authentik.stages.email` - authentik Stages.Email
+        > -   `authentik.stages.identification` - authentik Stages.Identification
+        > -   `authentik.stages.invitation` - authentik Stages.User Invitation
+        > -   `authentik.stages.password` - authentik Stages.Password
+        > -   `authentik.stages.prompt` - authentik Stages.Prompt
+        > -   `authentik.stages.user_delete` - authentik Stages.User Delete
+        > -   `authentik.stages.user_login` - authentik Stages.User Login
+        > -   `authentik.stages.user_logout` - authentik Stages.User Logout
+        > -   `authentik.stages.user_write` - authentik Stages.User Write
+        > -   `authentik.tenants` - authentik Tenants
+        > -   `authentik.blueprints` - authentik Blueprints
+        > -   `authentik.core` - authentik Core
+        > -   `authentik.enterprise` - authentik Enterprise
+
+        Added enum values:
+
+        -   `authentik.rbac`
+        -   `authentik.stages.authenticator`
+
+    -   Changed property `model` (string)
+
+        > -   `authentik_crypto.certificatekeypair` - Certificate-Key Pair
+        > -   `authentik_events.event` - Event
+        > -   `authentik_events.notificationtransport` - Notification Transport
+        > -   `authentik_events.notification` - Notification
+        > -   `authentik_events.notificationrule` - Notification Rule
+        > -   `authentik_events.notificationwebhookmapping` - Webhook Mapping
+        > -   `authentik_flows.flow` - Flow
+        > -   `authentik_flows.flowstagebinding` - Flow Stage Binding
+        > -   `authentik_outposts.dockerserviceconnection` - Docker Service-Connection
+        > -   `authentik_outposts.kubernetesserviceconnection` - Kubernetes Service-Connection
+        > -   `authentik_outposts.outpost` - Outpost
+        > -   `authentik_policies_dummy.dummypolicy` - Dummy Policy
+        > -   `authentik_policies_event_matcher.eventmatcherpolicy` - Event Matcher Policy
+        > -   `authentik_policies_expiry.passwordexpirypolicy` - Password Expiry Policy
+        > -   `authentik_policies_expression.expressionpolicy` - Expression Policy
+        > -   `authentik_policies_password.passwordpolicy` - Password Policy
+        > -   `authentik_policies_reputation.reputationpolicy` - Reputation Policy
+        > -   `authentik_policies_reputation.reputation` - Reputation Score
+        > -   `authentik_policies.policybinding` - Policy Binding
+        > -   `authentik_providers_ldap.ldapprovider` - LDAP Provider
+        > -   `authentik_providers_oauth2.scopemapping` - Scope Mapping
+        > -   `authentik_providers_oauth2.oauth2provider` - OAuth2/OpenID Provider
+        > -   `authentik_providers_oauth2.authorizationcode` - Authorization Code
+        > -   `authentik_providers_oauth2.accesstoken` - OAuth2 Access Token
+        > -   `authentik_providers_oauth2.refreshtoken` - OAuth2 Refresh Token
+        > -   `authentik_providers_proxy.proxyprovider` - Proxy Provider
+        > -   `authentik_providers_radius.radiusprovider` - Radius Provider
+        > -   `authentik_providers_saml.samlprovider` - SAML Provider
+        > -   `authentik_providers_saml.samlpropertymapping` - SAML Property Mapping
+        > -   `authentik_providers_scim.scimprovider` - SCIM Provider
+        > -   `authentik_providers_scim.scimmapping` - SCIM Mapping
+        > -   `authentik_rbac.role` - Role
+        > -   `authentik_sources_ldap.ldapsource` - LDAP Source
+        > -   `authentik_sources_ldap.ldappropertymapping` - LDAP Property Mapping
+        > -   `authentik_sources_oauth.oauthsource` - OAuth Source
+        > -   `authentik_sources_oauth.useroauthsourceconnection` - User OAuth Source Connection
+        > -   `authentik_sources_plex.plexsource` - Plex Source
+        > -   `authentik_sources_plex.plexsourceconnection` - User Plex Source Connection
+        > -   `authentik_sources_saml.samlsource` - SAML Source
+        > -   `authentik_sources_saml.usersamlsourceconnection` - User SAML Source Connection
+        > -   `authentik_stages_authenticator_duo.authenticatorduostage` - Duo Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_duo.duodevice` - Duo Device
+        > -   `authentik_stages_authenticator_sms.authenticatorsmsstage` - SMS Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_sms.smsdevice` - SMS Device
+        > -   `authentik_stages_authenticator_static.authenticatorstaticstage` - Static Authenticator Stage
+        > -   `authentik_stages_authenticator_static.staticdevice` - Static Device
+        > -   `authentik_stages_authenticator_totp.authenticatortotpstage` - TOTP Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_totp.totpdevice` - TOTP Device
+        > -   `authentik_stages_authenticator_validate.authenticatorvalidatestage` - Authenticator Validation Stage
+        > -   `authentik_stages_authenticator_webauthn.authenticatewebauthnstage` - WebAuthn Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_webauthn.webauthndevice` - WebAuthn Device
+        > -   `authentik_stages_captcha.captchastage` - Captcha Stage
+        > -   `authentik_stages_consent.consentstage` - Consent Stage
+        > -   `authentik_stages_consent.userconsent` - User Consent
+        > -   `authentik_stages_deny.denystage` - Deny Stage
+        > -   `authentik_stages_dummy.dummystage` - Dummy Stage
+        > -   `authentik_stages_email.emailstage` - Email Stage
+        > -   `authentik_stages_identification.identificationstage` - Identification Stage
+        > -   `authentik_stages_invitation.invitationstage` - Invitation Stage
+        > -   `authentik_stages_invitation.invitation` - Invitation
+        > -   `authentik_stages_password.passwordstage` - Password Stage
+        > -   `authentik_stages_prompt.prompt` - Prompt
+        > -   `authentik_stages_prompt.promptstage` - Prompt Stage
+        > -   `authentik_stages_user_delete.userdeletestage` - User Delete Stage
+        > -   `authentik_stages_user_login.userloginstage` - User Login Stage
+        > -   `authentik_stages_user_logout.userlogoutstage` - User Logout Stage
+        > -   `authentik_stages_user_write.userwritestage` - User Write Stage
+        > -   `authentik_tenants.tenant` - Tenant
+        > -   `authentik_blueprints.blueprintinstance` - Blueprint Instance
+        > -   `authentik_core.group` - Group
+        > -   `authentik_core.user` - User
+        > -   `authentik_core.application` - Application
+        > -   `authentik_core.token` - Token
+        > -   `authentik_enterprise.license` - License
+
+        Added enum values:
+
+        -   `authentik_rbac.role`
+        -   `authentik_stages_authenticator_static.staticdevice`
+        -   `authentik_stages_authenticator_totp.totpdevice`
+        -   `authentik_enterprise.license`
+
+##### `GET` /providers/radius/{id}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `mfa_support` (boolean)
+        > When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
+
+##### `PUT` /providers/radius/{id}/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `mfa_support` (boolean)
+    > When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `mfa_support` (boolean)
+        > When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
+
+##### `PATCH` /providers/radius/{id}/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `mfa_support` (boolean)
+    > When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `mfa_support` (boolean)
+        > When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
+
+##### `GET` /sources/oauth/source_types/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    Changed items (object): > Serializer for SourceType
+
+    New required properties:
+
+    -   `oidc_jwks_url`
+    -   `oidc_well_known_url`
+
+    *   Added property `oidc_well_known_url` (string)
+
+    *   Added property `oidc_jwks_url` (string)
+
+##### `DELETE` /authenticators/admin/static/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this Static Device.
+
+##### `GET` /authenticators/admin/static/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this Static Device.
+
+##### `PUT` /authenticators/admin/static/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this Static Device.
+
+##### `PATCH` /authenticators/admin/static/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this Static Device.
+
+##### `DELETE` /authenticators/static/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this Static Device.
+
+##### `GET` /authenticators/static/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this Static Device.
+
+##### `PUT` /authenticators/static/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this Static Device.
+
+##### `PATCH` /authenticators/static/{id}/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this Static Device.
+
+##### `GET` /authenticators/static/{id}/used_by/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this Static Device.
+
+##### `GET` /authenticators/totp/{id}/used_by/
+
+###### Parameters:
+
+Changed: `id` in `path`
+
+> A unique integer value identifying this TOTP Device.
+
+##### `DELETE` /core/groups/{group_uuid}/
+
+###### Parameters:
+
+Changed: `group_uuid` in `path`
+
+> A UUID string identifying this Group.
+
+##### `GET` /core/groups/{group_uuid}/
+
+###### Parameters:
+
+Changed: `group_uuid` in `path`
+
+> A UUID string identifying this Group.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `roles_obj`
+
+    *   Added property `roles` (array)
+
+        Items (string):
+
+    *   Added property `roles_obj` (array)
+
+        Items (object): > Role serializer
+
+        -   Property `pk` (string)
+
+        -   Property `name` (string)
+
+##### `PUT` /core/groups/{group_uuid}/
+
+###### Parameters:
+
+Changed: `group_uuid` in `path`
+
+> A UUID string identifying this Group.
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `roles` (array)
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `roles_obj`
+
+    *   Added property `roles` (array)
+
+    *   Added property `roles_obj` (array)
+
+##### `PATCH` /core/groups/{group_uuid}/
+
+###### Parameters:
+
+Changed: `group_uuid` in `path`
+
+> A UUID string identifying this Group.
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `roles` (array)
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `roles_obj`
+
+    *   Added property `roles` (array)
+
+    *   Added property `roles_obj` (array)
+
+##### `GET` /core/groups/{group_uuid}/used_by/
+
+###### Parameters:
+
+Changed: `group_uuid` in `path`
+
+> A UUID string identifying this Group.
+
+##### `GET` /core/tokens/{identifier}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `user_obj` (object)
+
+        > User Serializer
+
+        New required properties:
+
+        -   `uuid`
+
+        *   Added property `uuid` (string)
+
+##### `PUT` /core/tokens/{identifier}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `user_obj` (object)
+
+        > User Serializer
+
+        New required properties:
+
+        -   `uuid`
+
+        *   Added property `uuid` (string)
+
+##### `PATCH` /core/tokens/{identifier}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `user_obj` (object)
+
+        > User Serializer
+
+        New required properties:
+
+        -   `uuid`
+
+        *   Added property `uuid` (string)
+
+##### `GET` /core/users/{id}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `uuid`
+
+    *   Added property `uuid` (string)
+
+##### `PUT` /core/users/{id}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `uuid`
+
+    *   Added property `uuid` (string)
+
+##### `PATCH` /core/users/{id}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `uuid`
+
+    *   Added property `uuid` (string)
+
+##### `GET` /enterprise/license/{license_uuid}/used_by/
+
+###### Parameters:
+
+Changed: `license_uuid` in `path`
+
+> A UUID string identifying this License.
+
+##### `GET` /events/rules/{pbm_uuid}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `group_obj` (object)
+
+        > Group Serializer
+
+        New required properties:
+
+        -   `roles_obj`
+
+        *   Added property `roles` (array)
+
+        *   Added property `roles_obj` (array)
+
+##### `PUT` /events/rules/{pbm_uuid}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `group_obj` (object)
+
+        > Group Serializer
+
+        New required properties:
+
+        -   `roles_obj`
+
+        *   Added property `roles` (array)
+
+        *   Added property `roles_obj` (array)
+
+##### `PATCH` /events/rules/{pbm_uuid}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `group_obj` (object)
+
+        > Group Serializer
+
+        New required properties:
+
+        -   `roles_obj`
+
+        *   Added property `roles` (array)
+
+        *   Added property `roles_obj` (array)
+
+##### `DELETE` /outposts/instances/{uuid}/
+
+###### Parameters:
+
+Changed: `uuid` in `path`
+
+> A UUID string identifying this Outpost.
+
+##### `GET` /outposts/instances/{uuid}/
+
+###### Parameters:
+
+Changed: `uuid` in `path`
+
+> A UUID string identifying this Outpost.
+
+##### `PUT` /outposts/instances/{uuid}/
+
+###### Parameters:
+
+Changed: `uuid` in `path`
+
+> A UUID string identifying this Outpost.
+
+##### `PATCH` /outposts/instances/{uuid}/
+
+###### Parameters:
+
+Changed: `uuid` in `path`
+
+> A UUID string identifying this Outpost.
+
+##### `GET` /outposts/instances/{uuid}/used_by/
+
+###### Parameters:
+
+Changed: `uuid` in `path`
+
+> A UUID string identifying this Outpost.
+
+##### `GET` /outposts/radius/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > RadiusProvider Serializer
+
+        -   Added property `mfa_support` (boolean)
+            > When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
+
+##### `GET` /policies/bindings/{policy_binding_uuid}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `failure_result` (boolean)
+
+        > Result if the Policy execution fails.
+
+    -   Changed property `timeout` (integer)
+
+        > Timeout after which Policy execution is terminated.
+
+    -   Changed property `group_obj` (object)
+
+        > Group Serializer
+
+        New required properties:
+
+        -   `roles_obj`
+
+        *   Added property `roles` (array)
+
+        *   Added property `roles_obj` (array)
+
+    -   Changed property `user_obj` (object)
+
+        > User Serializer
+
+        New required properties:
+
+        -   `uuid`
+
+        *   Added property `uuid` (string)
+
+##### `PUT` /policies/bindings/{policy_binding_uuid}/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `failure_result` (boolean)
+
+    > Result if the Policy execution fails.
+
+-   Changed property `timeout` (integer)
+    > Timeout after which Policy execution is terminated.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `failure_result` (boolean)
+
+        > Result if the Policy execution fails.
+
+    -   Changed property `timeout` (integer)
+
+        > Timeout after which Policy execution is terminated.
+
+    -   Changed property `group_obj` (object)
+
+        > Group Serializer
+
+        New required properties:
+
+        -   `roles_obj`
+
+        *   Added property `roles` (array)
+
+        *   Added property `roles_obj` (array)
+
+    -   Changed property `user_obj` (object)
+
+        > User Serializer
+
+        New required properties:
+
+        -   `uuid`
+
+        *   Added property `uuid` (string)
+
+##### `PATCH` /policies/bindings/{policy_binding_uuid}/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `failure_result` (boolean)
+
+    > Result if the Policy execution fails.
+
+-   Changed property `timeout` (integer)
+    > Timeout after which Policy execution is terminated.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `failure_result` (boolean)
+
+        > Result if the Policy execution fails.
+
+    -   Changed property `timeout` (integer)
+
+        > Timeout after which Policy execution is terminated.
+
+    -   Changed property `group_obj` (object)
+
+        > Group Serializer
+
+        New required properties:
+
+        -   `roles_obj`
+
+        *   Added property `roles` (array)
+
+        *   Added property `roles_obj` (array)
+
+    -   Changed property `user_obj` (object)
+
+        > User Serializer
+
+        New required properties:
+
+        -   `uuid`
+
+        *   Added property `uuid` (string)
+
+##### `POST` /policies/event_matcher/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Changed property `app` (string)
+
+    > -   `authentik.admin` - authentik Admin
+    > -   `authentik.api` - authentik API
+    > -   `authentik.crypto` - authentik Crypto
+    > -   `authentik.events` - authentik Events
+    > -   `authentik.flows` - authentik Flows
+    > -   `authentik.outposts` - authentik Outpost
+    > -   `authentik.policies.dummy` - authentik Policies.Dummy
+    > -   `authentik.policies.event_matcher` - authentik Policies.Event Matcher
+    > -   `authentik.policies.expiry` - authentik Policies.Expiry
+    > -   `authentik.policies.expression` - authentik Policies.Expression
+    > -   `authentik.policies.password` - authentik Policies.Password
+    > -   `authentik.policies.reputation` - authentik Policies.Reputation
+    > -   `authentik.policies` - authentik Policies
+    > -   `authentik.providers.ldap` - authentik Providers.LDAP
+    > -   `authentik.providers.oauth2` - authentik Providers.OAuth2
+    > -   `authentik.providers.proxy` - authentik Providers.Proxy
+    > -   `authentik.providers.radius` - authentik Providers.Radius
+    > -   `authentik.providers.saml` - authentik Providers.SAML
+    > -   `authentik.providers.scim` - authentik Providers.SCIM
+    > -   `authentik.rbac` - authentik RBAC
+    > -   `authentik.recovery` - authentik Recovery
+    > -   `authentik.sources.ldap` - authentik Sources.LDAP
+    > -   `authentik.sources.oauth` - authentik Sources.OAuth
+    > -   `authentik.sources.plex` - authentik Sources.Plex
+    > -   `authentik.sources.saml` - authentik Sources.SAML
+    > -   `authentik.stages.authenticator` - authentik Stages.Authenticator
+    > -   `authentik.stages.authenticator_duo` - authentik Stages.Authenticator.Duo
+    > -   `authentik.stages.authenticator_sms` - authentik Stages.Authenticator.SMS
+    > -   `authentik.stages.authenticator_static` - authentik Stages.Authenticator.Static
+    > -   `authentik.stages.authenticator_totp` - authentik Stages.Authenticator.TOTP
+    > -   `authentik.stages.authenticator_validate` - authentik Stages.Authenticator.Validate
+    > -   `authentik.stages.authenticator_webauthn` - authentik Stages.Authenticator.WebAuthn
+    > -   `authentik.stages.captcha` - authentik Stages.Captcha
+    > -   `authentik.stages.consent` - authentik Stages.Consent
+    > -   `authentik.stages.deny` - authentik Stages.Deny
+    > -   `authentik.stages.dummy` - authentik Stages.Dummy
+    > -   `authentik.stages.email` - authentik Stages.Email
+    > -   `authentik.stages.identification` - authentik Stages.Identification
+    > -   `authentik.stages.invitation` - authentik Stages.User Invitation
+    > -   `authentik.stages.password` - authentik Stages.Password
+    > -   `authentik.stages.prompt` - authentik Stages.Prompt
+    > -   `authentik.stages.user_delete` - authentik Stages.User Delete
+    > -   `authentik.stages.user_login` - authentik Stages.User Login
+    > -   `authentik.stages.user_logout` - authentik Stages.User Logout
+    > -   `authentik.stages.user_write` - authentik Stages.User Write
+    > -   `authentik.tenants` - authentik Tenants
+    > -   `authentik.blueprints` - authentik Blueprints
+    > -   `authentik.core` - authentik Core
+    > -   `authentik.enterprise` - authentik Enterprise
+
+    Added enum values:
+
+    -   `authentik.rbac`
+    -   `authentik.stages.authenticator`
+
+-   Changed property `model` (string)
+
+    > -   `authentik_crypto.certificatekeypair` - Certificate-Key Pair
+    > -   `authentik_events.event` - Event
+    > -   `authentik_events.notificationtransport` - Notification Transport
+    > -   `authentik_events.notification` - Notification
+    > -   `authentik_events.notificationrule` - Notification Rule
+    > -   `authentik_events.notificationwebhookmapping` - Webhook Mapping
+    > -   `authentik_flows.flow` - Flow
+    > -   `authentik_flows.flowstagebinding` - Flow Stage Binding
+    > -   `authentik_outposts.dockerserviceconnection` - Docker Service-Connection
+    > -   `authentik_outposts.kubernetesserviceconnection` - Kubernetes Service-Connection
+    > -   `authentik_outposts.outpost` - Outpost
+    > -   `authentik_policies_dummy.dummypolicy` - Dummy Policy
+    > -   `authentik_policies_event_matcher.eventmatcherpolicy` - Event Matcher Policy
+    > -   `authentik_policies_expiry.passwordexpirypolicy` - Password Expiry Policy
+    > -   `authentik_policies_expression.expressionpolicy` - Expression Policy
+    > -   `authentik_policies_password.passwordpolicy` - Password Policy
+    > -   `authentik_policies_reputation.reputationpolicy` - Reputation Policy
+    > -   `authentik_policies_reputation.reputation` - Reputation Score
+    > -   `authentik_policies.policybinding` - Policy Binding
+    > -   `authentik_providers_ldap.ldapprovider` - LDAP Provider
+    > -   `authentik_providers_oauth2.scopemapping` - Scope Mapping
+    > -   `authentik_providers_oauth2.oauth2provider` - OAuth2/OpenID Provider
+    > -   `authentik_providers_oauth2.authorizationcode` - Authorization Code
+    > -   `authentik_providers_oauth2.accesstoken` - OAuth2 Access Token
+    > -   `authentik_providers_oauth2.refreshtoken` - OAuth2 Refresh Token
+    > -   `authentik_providers_proxy.proxyprovider` - Proxy Provider
+    > -   `authentik_providers_radius.radiusprovider` - Radius Provider
+    > -   `authentik_providers_saml.samlprovider` - SAML Provider
+    > -   `authentik_providers_saml.samlpropertymapping` - SAML Property Mapping
+    > -   `authentik_providers_scim.scimprovider` - SCIM Provider
+    > -   `authentik_providers_scim.scimmapping` - SCIM Mapping
+    > -   `authentik_rbac.role` - Role
+    > -   `authentik_sources_ldap.ldapsource` - LDAP Source
+    > -   `authentik_sources_ldap.ldappropertymapping` - LDAP Property Mapping
+    > -   `authentik_sources_oauth.oauthsource` - OAuth Source
+    > -   `authentik_sources_oauth.useroauthsourceconnection` - User OAuth Source Connection
+    > -   `authentik_sources_plex.plexsource` - Plex Source
+    > -   `authentik_sources_plex.plexsourceconnection` - User Plex Source Connection
+    > -   `authentik_sources_saml.samlsource` - SAML Source
+    > -   `authentik_sources_saml.usersamlsourceconnection` - User SAML Source Connection
+    > -   `authentik_stages_authenticator_duo.authenticatorduostage` - Duo Authenticator Setup Stage
+    > -   `authentik_stages_authenticator_duo.duodevice` - Duo Device
+    > -   `authentik_stages_authenticator_sms.authenticatorsmsstage` - SMS Authenticator Setup Stage
+    > -   `authentik_stages_authenticator_sms.smsdevice` - SMS Device
+    > -   `authentik_stages_authenticator_static.authenticatorstaticstage` - Static Authenticator Stage
+    > -   `authentik_stages_authenticator_static.staticdevice` - Static Device
+    > -   `authentik_stages_authenticator_totp.authenticatortotpstage` - TOTP Authenticator Setup Stage
+    > -   `authentik_stages_authenticator_totp.totpdevice` - TOTP Device
+    > -   `authentik_stages_authenticator_validate.authenticatorvalidatestage` - Authenticator Validation Stage
+    > -   `authentik_stages_authenticator_webauthn.authenticatewebauthnstage` - WebAuthn Authenticator Setup Stage
+    > -   `authentik_stages_authenticator_webauthn.webauthndevice` - WebAuthn Device
+    > -   `authentik_stages_captcha.captchastage` - Captcha Stage
+    > -   `authentik_stages_consent.consentstage` - Consent Stage
+    > -   `authentik_stages_consent.userconsent` - User Consent
+    > -   `authentik_stages_deny.denystage` - Deny Stage
+    > -   `authentik_stages_dummy.dummystage` - Dummy Stage
+    > -   `authentik_stages_email.emailstage` - Email Stage
+    > -   `authentik_stages_identification.identificationstage` - Identification Stage
+    > -   `authentik_stages_invitation.invitationstage` - Invitation Stage
+    > -   `authentik_stages_invitation.invitation` - Invitation
+    > -   `authentik_stages_password.passwordstage` - Password Stage
+    > -   `authentik_stages_prompt.prompt` - Prompt
+    > -   `authentik_stages_prompt.promptstage` - Prompt Stage
+    > -   `authentik_stages_user_delete.userdeletestage` - User Delete Stage
+    > -   `authentik_stages_user_login.userloginstage` - User Login Stage
+    > -   `authentik_stages_user_logout.userlogoutstage` - User Logout Stage
+    > -   `authentik_stages_user_write.userwritestage` - User Write Stage
+    > -   `authentik_tenants.tenant` - Tenant
+    > -   `authentik_blueprints.blueprintinstance` - Blueprint Instance
+    > -   `authentik_core.group` - Group
+    > -   `authentik_core.user` - User
+    > -   `authentik_core.application` - Application
+    > -   `authentik_core.token` - Token
+    > -   `authentik_enterprise.license` - License
+
+    Added enum values:
+
+    -   `authentik_rbac.role`
+    -   `authentik_stages_authenticator_static.staticdevice`
+    -   `authentik_stages_authenticator_totp.totpdevice`
+    -   `authentik_enterprise.license`
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `app` (string)
+
+        > -   `authentik.admin` - authentik Admin
+        > -   `authentik.api` - authentik API
+        > -   `authentik.crypto` - authentik Crypto
+        > -   `authentik.events` - authentik Events
+        > -   `authentik.flows` - authentik Flows
+        > -   `authentik.outposts` - authentik Outpost
+        > -   `authentik.policies.dummy` - authentik Policies.Dummy
+        > -   `authentik.policies.event_matcher` - authentik Policies.Event Matcher
+        > -   `authentik.policies.expiry` - authentik Policies.Expiry
+        > -   `authentik.policies.expression` - authentik Policies.Expression
+        > -   `authentik.policies.password` - authentik Policies.Password
+        > -   `authentik.policies.reputation` - authentik Policies.Reputation
+        > -   `authentik.policies` - authentik Policies
+        > -   `authentik.providers.ldap` - authentik Providers.LDAP
+        > -   `authentik.providers.oauth2` - authentik Providers.OAuth2
+        > -   `authentik.providers.proxy` - authentik Providers.Proxy
+        > -   `authentik.providers.radius` - authentik Providers.Radius
+        > -   `authentik.providers.saml` - authentik Providers.SAML
+        > -   `authentik.providers.scim` - authentik Providers.SCIM
+        > -   `authentik.rbac` - authentik RBAC
+        > -   `authentik.recovery` - authentik Recovery
+        > -   `authentik.sources.ldap` - authentik Sources.LDAP
+        > -   `authentik.sources.oauth` - authentik Sources.OAuth
+        > -   `authentik.sources.plex` - authentik Sources.Plex
+        > -   `authentik.sources.saml` - authentik Sources.SAML
+        > -   `authentik.stages.authenticator` - authentik Stages.Authenticator
+        > -   `authentik.stages.authenticator_duo` - authentik Stages.Authenticator.Duo
+        > -   `authentik.stages.authenticator_sms` - authentik Stages.Authenticator.SMS
+        > -   `authentik.stages.authenticator_static` - authentik Stages.Authenticator.Static
+        > -   `authentik.stages.authenticator_totp` - authentik Stages.Authenticator.TOTP
+        > -   `authentik.stages.authenticator_validate` - authentik Stages.Authenticator.Validate
+        > -   `authentik.stages.authenticator_webauthn` - authentik Stages.Authenticator.WebAuthn
+        > -   `authentik.stages.captcha` - authentik Stages.Captcha
+        > -   `authentik.stages.consent` - authentik Stages.Consent
+        > -   `authentik.stages.deny` - authentik Stages.Deny
+        > -   `authentik.stages.dummy` - authentik Stages.Dummy
+        > -   `authentik.stages.email` - authentik Stages.Email
+        > -   `authentik.stages.identification` - authentik Stages.Identification
+        > -   `authentik.stages.invitation` - authentik Stages.User Invitation
+        > -   `authentik.stages.password` - authentik Stages.Password
+        > -   `authentik.stages.prompt` - authentik Stages.Prompt
+        > -   `authentik.stages.user_delete` - authentik Stages.User Delete
+        > -   `authentik.stages.user_login` - authentik Stages.User Login
+        > -   `authentik.stages.user_logout` - authentik Stages.User Logout
+        > -   `authentik.stages.user_write` - authentik Stages.User Write
+        > -   `authentik.tenants` - authentik Tenants
+        > -   `authentik.blueprints` - authentik Blueprints
+        > -   `authentik.core` - authentik Core
+        > -   `authentik.enterprise` - authentik Enterprise
+
+        Added enum values:
+
+        -   `authentik.rbac`
+        -   `authentik.stages.authenticator`
+
+    -   Changed property `model` (string)
+
+        > -   `authentik_crypto.certificatekeypair` - Certificate-Key Pair
+        > -   `authentik_events.event` - Event
+        > -   `authentik_events.notificationtransport` - Notification Transport
+        > -   `authentik_events.notification` - Notification
+        > -   `authentik_events.notificationrule` - Notification Rule
+        > -   `authentik_events.notificationwebhookmapping` - Webhook Mapping
+        > -   `authentik_flows.flow` - Flow
+        > -   `authentik_flows.flowstagebinding` - Flow Stage Binding
+        > -   `authentik_outposts.dockerserviceconnection` - Docker Service-Connection
+        > -   `authentik_outposts.kubernetesserviceconnection` - Kubernetes Service-Connection
+        > -   `authentik_outposts.outpost` - Outpost
+        > -   `authentik_policies_dummy.dummypolicy` - Dummy Policy
+        > -   `authentik_policies_event_matcher.eventmatcherpolicy` - Event Matcher Policy
+        > -   `authentik_policies_expiry.passwordexpirypolicy` - Password Expiry Policy
+        > -   `authentik_policies_expression.expressionpolicy` - Expression Policy
+        > -   `authentik_policies_password.passwordpolicy` - Password Policy
+        > -   `authentik_policies_reputation.reputationpolicy` - Reputation Policy
+        > -   `authentik_policies_reputation.reputation` - Reputation Score
+        > -   `authentik_policies.policybinding` - Policy Binding
+        > -   `authentik_providers_ldap.ldapprovider` - LDAP Provider
+        > -   `authentik_providers_oauth2.scopemapping` - Scope Mapping
+        > -   `authentik_providers_oauth2.oauth2provider` - OAuth2/OpenID Provider
+        > -   `authentik_providers_oauth2.authorizationcode` - Authorization Code
+        > -   `authentik_providers_oauth2.accesstoken` - OAuth2 Access Token
+        > -   `authentik_providers_oauth2.refreshtoken` - OAuth2 Refresh Token
+        > -   `authentik_providers_proxy.proxyprovider` - Proxy Provider
+        > -   `authentik_providers_radius.radiusprovider` - Radius Provider
+        > -   `authentik_providers_saml.samlprovider` - SAML Provider
+        > -   `authentik_providers_saml.samlpropertymapping` - SAML Property Mapping
+        > -   `authentik_providers_scim.scimprovider` - SCIM Provider
+        > -   `authentik_providers_scim.scimmapping` - SCIM Mapping
+        > -   `authentik_rbac.role` - Role
+        > -   `authentik_sources_ldap.ldapsource` - LDAP Source
+        > -   `authentik_sources_ldap.ldappropertymapping` - LDAP Property Mapping
+        > -   `authentik_sources_oauth.oauthsource` - OAuth Source
+        > -   `authentik_sources_oauth.useroauthsourceconnection` - User OAuth Source Connection
+        > -   `authentik_sources_plex.plexsource` - Plex Source
+        > -   `authentik_sources_plex.plexsourceconnection` - User Plex Source Connection
+        > -   `authentik_sources_saml.samlsource` - SAML Source
+        > -   `authentik_sources_saml.usersamlsourceconnection` - User SAML Source Connection
+        > -   `authentik_stages_authenticator_duo.authenticatorduostage` - Duo Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_duo.duodevice` - Duo Device
+        > -   `authentik_stages_authenticator_sms.authenticatorsmsstage` - SMS Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_sms.smsdevice` - SMS Device
+        > -   `authentik_stages_authenticator_static.authenticatorstaticstage` - Static Authenticator Stage
+        > -   `authentik_stages_authenticator_static.staticdevice` - Static Device
+        > -   `authentik_stages_authenticator_totp.authenticatortotpstage` - TOTP Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_totp.totpdevice` - TOTP Device
+        > -   `authentik_stages_authenticator_validate.authenticatorvalidatestage` - Authenticator Validation Stage
+        > -   `authentik_stages_authenticator_webauthn.authenticatewebauthnstage` - WebAuthn Authenticator Setup Stage
+        > -   `authentik_stages_authenticator_webauthn.webauthndevice` - WebAuthn Device
+        > -   `authentik_stages_captcha.captchastage` - Captcha Stage
+        > -   `authentik_stages_consent.consentstage` - Consent Stage
+        > -   `authentik_stages_consent.userconsent` - User Consent
+        > -   `authentik_stages_deny.denystage` - Deny Stage
+        > -   `authentik_stages_dummy.dummystage` - Dummy Stage
+        > -   `authentik_stages_email.emailstage` - Email Stage
+        > -   `authentik_stages_identification.identificationstage` - Identification Stage
+        > -   `authentik_stages_invitation.invitationstage` - Invitation Stage
+        > -   `authentik_stages_invitation.invitation` - Invitation
+        > -   `authentik_stages_password.passwordstage` - Password Stage
+        > -   `authentik_stages_prompt.prompt` - Prompt
+        > -   `authentik_stages_prompt.promptstage` - Prompt Stage
+        > -   `authentik_stages_user_delete.userdeletestage` - User Delete Stage
+        > -   `authentik_stages_user_login.userloginstage` - User Login Stage
+        > -   `authentik_stages_user_logout.userlogoutstage` - User Logout Stage
+        > -   `authentik_stages_user_write.userwritestage` - User Write Stage
+        > -   `authentik_tenants.tenant` - Tenant
+        > -   `authentik_blueprints.blueprintinstance` - Blueprint Instance
+        > -   `authentik_core.group` - Group
+        > -   `authentik_core.user` - User
+        > -   `authentik_core.application` - Application
+        > -   `authentik_core.token` - Token
+        > -   `authentik_enterprise.license` - License
+
+        Added enum values:
+
+        -   `authentik_rbac.role`
+        -   `authentik_stages_authenticator_static.staticdevice`
+        -   `authentik_stages_authenticator_totp.totpdevice`
+        -   `authentik_enterprise.license`
+
+##### `GET` /policies/event_matcher/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > Event Matcher Policy Serializer
+
+        -   Changed property `app` (string)
+
+            > -   `authentik.admin` - authentik Admin
+            > -   `authentik.api` - authentik API
+            > -   `authentik.crypto` - authentik Crypto
+            > -   `authentik.events` - authentik Events
+            > -   `authentik.flows` - authentik Flows
+            > -   `authentik.outposts` - authentik Outpost
+            > -   `authentik.policies.dummy` - authentik Policies.Dummy
+            > -   `authentik.policies.event_matcher` - authentik Policies.Event Matcher
+            > -   `authentik.policies.expiry` - authentik Policies.Expiry
+            > -   `authentik.policies.expression` - authentik Policies.Expression
+            > -   `authentik.policies.password` - authentik Policies.Password
+            > -   `authentik.policies.reputation` - authentik Policies.Reputation
+            > -   `authentik.policies` - authentik Policies
+            > -   `authentik.providers.ldap` - authentik Providers.LDAP
+            > -   `authentik.providers.oauth2` - authentik Providers.OAuth2
+            > -   `authentik.providers.proxy` - authentik Providers.Proxy
+            > -   `authentik.providers.radius` - authentik Providers.Radius
+            > -   `authentik.providers.saml` - authentik Providers.SAML
+            > -   `authentik.providers.scim` - authentik Providers.SCIM
+            > -   `authentik.rbac` - authentik RBAC
+            > -   `authentik.recovery` - authentik Recovery
+            > -   `authentik.sources.ldap` - authentik Sources.LDAP
+            > -   `authentik.sources.oauth` - authentik Sources.OAuth
+            > -   `authentik.sources.plex` - authentik Sources.Plex
+            > -   `authentik.sources.saml` - authentik Sources.SAML
+            > -   `authentik.stages.authenticator` - authentik Stages.Authenticator
+            > -   `authentik.stages.authenticator_duo` - authentik Stages.Authenticator.Duo
+            > -   `authentik.stages.authenticator_sms` - authentik Stages.Authenticator.SMS
+            > -   `authentik.stages.authenticator_static` - authentik Stages.Authenticator.Static
+            > -   `authentik.stages.authenticator_totp` - authentik Stages.Authenticator.TOTP
+            > -   `authentik.stages.authenticator_validate` - authentik Stages.Authenticator.Validate
+            > -   `authentik.stages.authenticator_webauthn` - authentik Stages.Authenticator.WebAuthn
+            > -   `authentik.stages.captcha` - authentik Stages.Captcha
+            > -   `authentik.stages.consent` - authentik Stages.Consent
+            > -   `authentik.stages.deny` - authentik Stages.Deny
+            > -   `authentik.stages.dummy` - authentik Stages.Dummy
+            > -   `authentik.stages.email` - authentik Stages.Email
+            > -   `authentik.stages.identification` - authentik Stages.Identification
+            > -   `authentik.stages.invitation` - authentik Stages.User Invitation
+            > -   `authentik.stages.password` - authentik Stages.Password
+            > -   `authentik.stages.prompt` - authentik Stages.Prompt
+            > -   `authentik.stages.user_delete` - authentik Stages.User Delete
+            > -   `authentik.stages.user_login` - authentik Stages.User Login
+            > -   `authentik.stages.user_logout` - authentik Stages.User Logout
+            > -   `authentik.stages.user_write` - authentik Stages.User Write
+            > -   `authentik.tenants` - authentik Tenants
+            > -   `authentik.blueprints` - authentik Blueprints
+            > -   `authentik.core` - authentik Core
+            > -   `authentik.enterprise` - authentik Enterprise
+
+            Added enum values:
+
+            -   `authentik.rbac`
+            -   `authentik.stages.authenticator`
+
+        -   Changed property `model` (string)
+
+            > -   `authentik_crypto.certificatekeypair` - Certificate-Key Pair
+            > -   `authentik_events.event` - Event
+            > -   `authentik_events.notificationtransport` - Notification Transport
+            > -   `authentik_events.notification` - Notification
+            > -   `authentik_events.notificationrule` - Notification Rule
+            > -   `authentik_events.notificationwebhookmapping` - Webhook Mapping
+            > -   `authentik_flows.flow` - Flow
+            > -   `authentik_flows.flowstagebinding` - Flow Stage Binding
+            > -   `authentik_outposts.dockerserviceconnection` - Docker Service-Connection
+            > -   `authentik_outposts.kubernetesserviceconnection` - Kubernetes Service-Connection
+            > -   `authentik_outposts.outpost` - Outpost
+            > -   `authentik_policies_dummy.dummypolicy` - Dummy Policy
+            > -   `authentik_policies_event_matcher.eventmatcherpolicy` - Event Matcher Policy
+            > -   `authentik_policies_expiry.passwordexpirypolicy` - Password Expiry Policy
+            > -   `authentik_policies_expression.expressionpolicy` - Expression Policy
+            > -   `authentik_policies_password.passwordpolicy` - Password Policy
+            > -   `authentik_policies_reputation.reputationpolicy` - Reputation Policy
+            > -   `authentik_policies_reputation.reputation` - Reputation Score
+            > -   `authentik_policies.policybinding` - Policy Binding
+            > -   `authentik_providers_ldap.ldapprovider` - LDAP Provider
+            > -   `authentik_providers_oauth2.scopemapping` - Scope Mapping
+            > -   `authentik_providers_oauth2.oauth2provider` - OAuth2/OpenID Provider
+            > -   `authentik_providers_oauth2.authorizationcode` - Authorization Code
+            > -   `authentik_providers_oauth2.accesstoken` - OAuth2 Access Token
+            > -   `authentik_providers_oauth2.refreshtoken` - OAuth2 Refresh Token
+            > -   `authentik_providers_proxy.proxyprovider` - Proxy Provider
+            > -   `authentik_providers_radius.radiusprovider` - Radius Provider
+            > -   `authentik_providers_saml.samlprovider` - SAML Provider
+            > -   `authentik_providers_saml.samlpropertymapping` - SAML Property Mapping
+            > -   `authentik_providers_scim.scimprovider` - SCIM Provider
+            > -   `authentik_providers_scim.scimmapping` - SCIM Mapping
+            > -   `authentik_rbac.role` - Role
+            > -   `authentik_sources_ldap.ldapsource` - LDAP Source
+            > -   `authentik_sources_ldap.ldappropertymapping` - LDAP Property Mapping
+            > -   `authentik_sources_oauth.oauthsource` - OAuth Source
+            > -   `authentik_sources_oauth.useroauthsourceconnection` - User OAuth Source Connection
+            > -   `authentik_sources_plex.plexsource` - Plex Source
+            > -   `authentik_sources_plex.plexsourceconnection` - User Plex Source Connection
+            > -   `authentik_sources_saml.samlsource` - SAML Source
+            > -   `authentik_sources_saml.usersamlsourceconnection` - User SAML Source Connection
+            > -   `authentik_stages_authenticator_duo.authenticatorduostage` - Duo Authenticator Setup Stage
+            > -   `authentik_stages_authenticator_duo.duodevice` - Duo Device
+            > -   `authentik_stages_authenticator_sms.authenticatorsmsstage` - SMS Authenticator Setup Stage
+            > -   `authentik_stages_authenticator_sms.smsdevice` - SMS Device
+            > -   `authentik_stages_authenticator_static.authenticatorstaticstage` - Static Authenticator Stage
+            > -   `authentik_stages_authenticator_static.staticdevice` - Static Device
+            > -   `authentik_stages_authenticator_totp.authenticatortotpstage` - TOTP Authenticator Setup Stage
+            > -   `authentik_stages_authenticator_totp.totpdevice` - TOTP Device
+            > -   `authentik_stages_authenticator_validate.authenticatorvalidatestage` - Authenticator Validation Stage
+            > -   `authentik_stages_authenticator_webauthn.authenticatewebauthnstage` - WebAuthn Authenticator Setup Stage
+            > -   `authentik_stages_authenticator_webauthn.webauthndevice` - WebAuthn Device
+            > -   `authentik_stages_captcha.captchastage` - Captcha Stage
+            > -   `authentik_stages_consent.consentstage` - Consent Stage
+            > -   `authentik_stages_consent.userconsent` - User Consent
+            > -   `authentik_stages_deny.denystage` - Deny Stage
+            > -   `authentik_stages_dummy.dummystage` - Dummy Stage
+            > -   `authentik_stages_email.emailstage` - Email Stage
+            > -   `authentik_stages_identification.identificationstage` - Identification Stage
+            > -   `authentik_stages_invitation.invitationstage` - Invitation Stage
+            > -   `authentik_stages_invitation.invitation` - Invitation
+            > -   `authentik_stages_password.passwordstage` - Password Stage
+            > -   `authentik_stages_prompt.prompt` - Prompt
+            > -   `authentik_stages_prompt.promptstage` - Prompt Stage
+            > -   `authentik_stages_user_delete.userdeletestage` - User Delete Stage
+            > -   `authentik_stages_user_login.userloginstage` - User Login Stage
+            > -   `authentik_stages_user_logout.userlogoutstage` - User Logout Stage
+            > -   `authentik_stages_user_write.userwritestage` - User Write Stage
+            > -   `authentik_tenants.tenant` - Tenant
+            > -   `authentik_blueprints.blueprintinstance` - Blueprint Instance
+            > -   `authentik_core.group` - Group
+            > -   `authentik_core.user` - User
+            > -   `authentik_core.application` - Application
+            > -   `authentik_core.token` - Token
+            > -   `authentik_enterprise.license` - License
+
+            Added enum values:
+
+            -   `authentik_rbac.role`
+            -   `authentik_stages_authenticator_static.staticdevice`
+            -   `authentik_stages_authenticator_totp.totpdevice`
+            -   `authentik_enterprise.license`
+
+##### `POST` /providers/radius/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `mfa_support` (boolean)
+    > When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    -   Added property `mfa_support` (boolean)
+        > When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
+
+##### `GET` /providers/radius/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > RadiusProvider Serializer
+
+        -   Added property `mfa_support` (boolean)
+            > When enabled, code-based multi-factor authentication can be used by appending a semicolon and the TOTP code to the password. This should only be enabled if all users that will bind to this provider have a TOTP device configured, as otherwise a password may incorrectly be rejected if it contains a semicolon.
+
+##### `GET` /providers/saml/{id}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `default_relay_state` (string)
+        > Default relay_state value for IDP-initiated logins
+
+##### `PUT` /providers/saml/{id}/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `default_relay_state` (string)
+    > Default relay_state value for IDP-initiated logins
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `default_relay_state` (string)
+        > Default relay_state value for IDP-initiated logins
+
+##### `PATCH` /providers/saml/{id}/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `default_relay_state` (string)
+    > Default relay_state value for IDP-initiated logins
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `default_relay_state` (string)
+        > Default relay_state value for IDP-initiated logins
+
+##### `GET` /sources/oauth/{slug}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `type` (object)
+
+        > Serializer for SourceType
+
+        New required properties:
+
+        -   `oidc_jwks_url`
+        -   `oidc_well_known_url`
+
+        *   Added property `oidc_well_known_url` (string)
+
+        *   Added property `oidc_jwks_url` (string)
+
+##### `PUT` /sources/oauth/{slug}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `type` (object)
+
+        > Serializer for SourceType
+
+        New required properties:
+
+        -   `oidc_jwks_url`
+        -   `oidc_well_known_url`
+
+        *   Added property `oidc_well_known_url` (string)
+
+        *   Added property `oidc_jwks_url` (string)
+
+##### `PATCH` /sources/oauth/{slug}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `type` (object)
+
+        > Serializer for SourceType
+
+        New required properties:
+
+        -   `oidc_jwks_url`
+        -   `oidc_well_known_url`
+
+        *   Added property `oidc_well_known_url` (string)
+
+        *   Added property `oidc_jwks_url` (string)
+
+##### `POST` /core/groups/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `roles` (array)
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `roles_obj`
+
+    *   Added property `roles` (array)
+
+    *   Added property `roles_obj` (array)
+
+##### `GET` /core/groups/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > Group Serializer
+
+        New required properties:
+
+        -   `roles_obj`
+
+        *   Added property `roles` (array)
+
+        *   Added property `roles_obj` (array)
+
+##### `POST` /core/tokens/
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `user_obj` (object)
+
+        > User Serializer
+
+        New required properties:
+
+        -   `uuid`
+
+        *   Added property `uuid` (string)
+
+##### `GET` /core/tokens/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > Token Serializer
+
+        -   Changed property `user_obj` (object)
+
+            > User Serializer
+
+            New required properties:
+
+            -   `uuid`
+
+            *   Added property `uuid` (string)
+
+##### `GET` /core/user_consent/{id}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `user` (object)
+
+        > User Serializer
+
+        New required properties:
+
+        -   `uuid`
+
+        *   Added property `uuid` (string)
+
+##### `POST` /core/users/
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    New required properties:
+
+    -   `uuid`
+
+    *   Added property `uuid` (string)
+
+##### `GET` /core/users/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > User Serializer
+
+        New required properties:
+
+        -   `uuid`
+
+        *   Added property `uuid` (string)
+
+##### `GET` /core/users/me/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `user` (object)
+
+        > User Serializer for information a user can retrieve about themselves
+
+        New required properties:
+
+        -   `system_permissions`
+
+        *   Added property `system_permissions` (array)
+
+            > Get all system permissions assigned to the user
+
+            Items (string):
+
+##### `POST` /events/rules/
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `group_obj` (object)
+
+        > Group Serializer
+
+        New required properties:
+
+        -   `roles_obj`
+
+        *   Added property `roles` (array)
+
+        *   Added property `roles_obj` (array)
+
+##### `GET` /events/rules/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > NotificationRule Serializer
+
+        -   Changed property `group_obj` (object)
+
+            > Group Serializer
+
+            New required properties:
+
+            -   `roles_obj`
+
+            *   Added property `roles` (array)
+
+            *   Added property `roles_obj` (array)
+
+##### `GET` /oauth2/access_tokens/{id}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `user` (object)
+
+        > User Serializer
+
+        New required properties:
+
+        -   `uuid`
+
+        *   Added property `uuid` (string)
+
+##### `GET` /oauth2/authorization_codes/{id}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `user` (object)
+
+        > User Serializer
+
+        New required properties:
+
+        -   `uuid`
+
+        *   Added property `uuid` (string)
+
+##### `GET` /oauth2/refresh_tokens/{id}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `user` (object)
+
+        > User Serializer
+
+        New required properties:
+
+        -   `uuid`
+
+        *   Added property `uuid` (string)
+
+##### `POST` /policies/bindings/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `failure_result` (boolean)
+
+    > Result if the Policy execution fails.
+
+-   Changed property `timeout` (integer)
+    > Timeout after which Policy execution is terminated.
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    -   Added property `failure_result` (boolean)
+
+        > Result if the Policy execution fails.
+
+    -   Changed property `timeout` (integer)
+
+        > Timeout after which Policy execution is terminated.
+
+    -   Changed property `group_obj` (object)
+
+        > Group Serializer
+
+        New required properties:
+
+        -   `roles_obj`
+
+        *   Added property `roles` (array)
+
+        *   Added property `roles_obj` (array)
+
+    -   Changed property `user_obj` (object)
+
+        > User Serializer
+
+        New required properties:
+
+        -   `uuid`
+
+        *   Added property `uuid` (string)
+
+##### `GET` /policies/bindings/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > PolicyBinding Serializer
+
+        -   Added property `failure_result` (boolean)
+
+            > Result if the Policy execution fails.
+
+        -   Changed property `timeout` (integer)
+
+            > Timeout after which Policy execution is terminated.
+
+        -   Changed property `group_obj` (object)
+
+            > Group Serializer
+
+            New required properties:
+
+            -   `roles_obj`
+
+            *   Added property `roles` (array)
+
+            *   Added property `roles_obj` (array)
+
+        -   Changed property `user_obj` (object)
+
+            > User Serializer
+
+            New required properties:
+
+            -   `uuid`
+
+            *   Added property `uuid` (string)
+
+##### `POST` /providers/saml/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `default_relay_state` (string)
+    > Default relay_state value for IDP-initiated logins
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    -   Added property `default_relay_state` (string)
+        > Default relay_state value for IDP-initiated logins
+
+##### `GET` /providers/saml/
+
+###### Parameters:
+
+Added: `default_relay_state` in `query`
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > SAMLProvider Serializer
+
+        -   Added property `default_relay_state` (string)
+            > Default relay_state value for IDP-initiated logins
+
+##### `POST` /sources/oauth/
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `type` (object)
+
+        > Serializer for SourceType
+
+        New required properties:
+
+        -   `oidc_jwks_url`
+        -   `oidc_well_known_url`
+
+        *   Added property `oidc_well_known_url` (string)
+
+        *   Added property `oidc_jwks_url` (string)
+
+##### `GET` /sources/oauth/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > OAuth Source Serializer
+
+        -   Changed property `type` (object)
+
+            > Serializer for SourceType
+
+            New required properties:
+
+            -   `oidc_jwks_url`
+            -   `oidc_well_known_url`
+
+            *   Added property `oidc_well_known_url` (string)
+
+            *   Added property `oidc_jwks_url` (string)
+
+##### `GET` /stages/authenticator/sms/{stage_uuid}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `verify_only` (boolean)
+        > When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
+
+##### `PUT` /stages/authenticator/sms/{stage_uuid}/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Changed property `verify_only` (boolean)
+    > When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `verify_only` (boolean)
+        > When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
+
+##### `PATCH` /stages/authenticator/sms/{stage_uuid}/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Changed property `verify_only` (boolean)
+    > When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `verify_only` (boolean)
+        > When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
+
+##### `GET` /stages/deny/{stage_uuid}/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `deny_message` (string)
+
+##### `PUT` /stages/deny/{stage_uuid}/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `deny_message` (string)
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `deny_message` (string)
+
+##### `PATCH` /stages/deny/{stage_uuid}/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `deny_message` (string)
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Added property `deny_message` (string)
+
+##### `GET` /core/user_consent/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > UserConsent Serializer
+
+        -   Changed property `user` (object)
+
+            > User Serializer
+
+            New required properties:
+
+            -   `uuid`
+
+            *   Added property `uuid` (string)
+
+##### `GET` /oauth2/access_tokens/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > Serializer for BaseGrantModel and RefreshToken
+
+        -   Changed property `user` (object)
+
+            > User Serializer
+
+            New required properties:
+
+            -   `uuid`
+
+            *   Added property `uuid` (string)
+
+##### `GET` /oauth2/authorization_codes/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > Serializer for BaseGrantModel and ExpiringBaseGrant
+
+        -   Changed property `user` (object)
+
+            > User Serializer
+
+            New required properties:
+
+            -   `uuid`
+
+            *   Added property `uuid` (string)
+
+##### `GET` /oauth2/refresh_tokens/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > Serializer for BaseGrantModel and RefreshToken
+
+        -   Changed property `user` (object)
+
+            > User Serializer
+
+            New required properties:
+
+            -   `uuid`
+
+            *   Added property `uuid` (string)
+
+##### `POST` /stages/authenticator/sms/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Changed property `verify_only` (boolean)
+    > When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `verify_only` (boolean)
+        > When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
+
+##### `GET` /stages/authenticator/sms/
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > AuthenticatorSMSStage Serializer
+
+        -   Changed property `verify_only` (boolean)
+            > When enabled, the Phone number is only used during enrollment to verify the users authenticity. Only a hash of the phone number is saved to ensure it is not reused in the future.
+
+##### `POST` /stages/deny/
+
+###### Request:
+
+Changed content type : `application/json`
+
+-   Added property `deny_message` (string)
+
+###### Return Type:
+
+Changed response : **201 Created**
+
+-   Changed content type : `application/json`
+
+    -   Added property `deny_message` (string)
+
+##### `GET` /stages/deny/
+
+###### Parameters:
+
+Added: `deny_message` in `query`
+
+###### Return Type:
+
+Changed response : **200 OK**
+
+-   Changed content type : `application/json`
+
+    -   Changed property `results` (array)
+
+        Changed items (object): > DenyStage Serializer
+
+        -   Added property `deny_message` (string)
diff --git a/website/docs/user-group-role/access-control/flow-page.png b/website/docs/user-group-role/access-control/flow-page.png
new file mode 100644
index 000000000..fcf4e8318
Binary files /dev/null and b/website/docs/user-group-role/access-control/flow-page.png differ
diff --git a/website/docs/user-group-role/access-control/index.mdx b/website/docs/user-group-role/access-control/index.mdx
new file mode 100644
index 000000000..720a49424
--- /dev/null
+++ b/website/docs/user-group-role/access-control/index.mdx
@@ -0,0 +1,16 @@
+---
+title: About access control
+---
+
+import DocCardList from "@theme/DocCardList";
+import { useCurrentSidebarCategory } from "@docusaurus/theme-common";
+
+To comply with important regulations such as PCI-DSS, HIPAA, SOC 2, and GDPR, it's necessary to have the ability to control which users have access to specific areas of the system, what [permissions](./permissions.md) they have globally and on certain objects, and a way to monitor [events](../../events) related to user activity.
+
+In authentik, we provide role-based access control (RBAC), an industry standard for managing access control. By carefully designing roles with appropriate permissions, and then assigning those roles to groups, RBAC provides a fine-tuned approach to controlling user access.
+
+RBAC is a way of ensuring the well-known [principal of least privilege](https://en.wikipedia.org/wiki/Principle_of_least_privilege) whereby "every module (such as a process, a user, or a program, depending on the subject) must be able to access only the information and resources that are necessary for its legitimate purpose."
+
+To learn more about access control with authentik, refer to these topics:
+
+
diff --git a/website/docs/user-group-role/access-control/manage_permissions.md b/website/docs/user-group-role/access-control/manage_permissions.md
new file mode 100644
index 000000000..c4a924c38
--- /dev/null
+++ b/website/docs/user-group-role/access-control/manage_permissions.md
@@ -0,0 +1,118 @@
+---
+title: "Manage permissions"
+description: "Learn how to use global and object permissions in authentik."
+---
+
+Refer to the following topics for instructions to view and manage permissions.
+
+## View permissions
+
+You can view all permissions that are assigned to a user, group, role, flow, or stage.
+
+### View user, group, and role permissions
+
+To view _object_ permissions for a specific user, role, or group:
+
+1. Go to the Admin interface and navigate to **Directory**.
+2. Select either **Users**, **Groups**, or **Roles**
+3. Select a specific user/group/role by clicking on the name (this opens the details page).
+4. Click the **Assigned Permissions** tab at the top of the page (to the right of the **Permissions** tab).
+5. Scroll down to see both the global and object-level permissions.
+
+:::info
+Note that groups do not have global permissions.
+:::
+
+### View flow permissions
+
+1. Go to the Admin interface and navigate to **Flows and Stages -> Flows**.
+2. Click the name of the flow (this opens the details page).
+3. Click the **Permissions** tab at the top of the page.
+4. View the assigned permissions using the **User Object Permissions** and the **Role Object Permissions** tabs.
+
+### View stage permissions
+
+1. Go to the Admin interface and navigate to **Flows and Stages -> Stagess**.
+2. On the row for the specific stage whose permissions you want to view, click the lock icon.
+3. On the **Update Permissions** tab, you can view the assigned permissions using the **User Object Permissions** and the **Role Object Permissions** tabs.
+
+## Manage permissions
+
+You can assign or remove permissions to a user, role, group, flow, or stage.
+
+### Assign, modify, or remove permissions for a user
+
+To assign or remove _object_ permissions for a specific user:
+
+1. Go to the Admin interface and navigate to **Directory -> Users**.
+2. Select a specific user by clicking on the user's name.
+3. Click the **Permissions** tab at the top of the page.
+4. To assign or remove permissions that another _user_ has on this specific user:
+    1. Click the **User Object Permissions** tab, click **Assign to new user**.
+    2. In the **User** drop-down, select the user object.
+    3. Use the toggles to set which permissions on that selected user object you want to grant to (or remove from) the specific user.
+    4. Click **Assign** to save your settings and close the modal.
+5. To assign or remove permissions that another _role_ has on this specific user:
+   Click the **Role Object Permissions** tab, click **Assign to new role**. 2. In the **User** drop-down, select the user object. 3. Use the toggles to set which permissions you want to grant to (or remove from) the selected role. 4. Click **Assign** to save your settings and close the modal.
+
+To assign or remove _global_ permissions for a user:
+
+1. Go to the Admin interface and navigate to **Directory -> Users**.
+2. Select a specific user the clicking on the user's name.
+3. Click the **Assigned Permissions** tab at the top of the page (to the right of the **Permissions** tab).
+4. In the **Assigned Global Permissions** area, click **Assign Permission**.
+5. In the **Assign permissions to user** modal, click the plus sign (**+**) and then click the checkbox beside each permission that you want to assign to the user. To remove permissions, deselect the checkbox.
+6. Click **Add**, and then click **Assign** to save your changes and close the modal.
+
+### Assign or remove permissions on a specific group
+
+:::info
+Note that groups themselves do not have permissions. Rather, users and roles have permissions assigned that allow them to create, modify, delete, etc., a group.
+Also there are no global permissions for groups.
+:::
+
+To assign or remove _object_ permissions on a specific group by users and roles:
+
+1. Go to the Admin interface and navigate to **Directory -> Groups**.
+2. Select a specific group by clicking the the group's name.
+3. Click the **Permissions** tab at the top of the page.
+   To assign or remove permissions that another _user_ has on this specific group:
+    1. Click the **User Object Permissions** tab, click **Assign to new user**.
+    2. In the **User** drop-down, select the user object.
+    3. Use the toggles to set which permissions on that selected group you want to grant to (or remove from) the specific user.
+    4. Click **Assign** to save your settings and close the modal.
+4. To assign or remove permissions that another _role_ has on this specific group:
+   Click the **Role Object Permissions** tab, click **Assign to new role**. 2. In the **Role** drop-down, select the role. 3. Use the toggles to set which permissions you want to grant to (or remove from ) the selected role. 4. Click **Assign** to save your settings and close the modal.
+
+### Assign or remove permissions for a specific role
+
+To assign or remove _object_ permissions for a specific role:
+
+1. Go to the Admin interface and navigate to **Directory -> Roles**.
+2. Select a specific role the clicking on the role's name.
+3. Click the **Permissions** tab at the top of the page.
+   To assign or remove permissions that another _user_ has on this specific role: 1. Click the **User Object Permissions** tab, click **Assign to new user**. 2. In the **User** drop-down, select the user object. 3. Use the toggles to set which permissions on that role you want to grant to (or remove from) the selected user. 4. Click **Assign** to save your settings and close the modal.
+4. To assign or remove permissions that another _role_ has on this specific group:
+   Click the **Role Object Permissions** tab, click **Assign to new role**. 2. In the **Role** drop-down, select the role. 3. Use the toggles to set which permissions you want to grant to (or remove from) the selected role. 4. Click **Assign** to save your settings and close the modal.
+
+To assign or remove _global_ permissions for a role:
+
+1. Go to the Admin interface and navigate to **Directory -> Roles**.
+2. Select a specific role by clicking on the role's name.
+3. The **Overview** tab at the top of the page displays all assigned global permissions for the role.
+4. In the **Assigned Global Permissions** area, click **Assign Permission**.
+5. In the **Assign permissions to role** modal, click the plus sign (**+**) and then click the checkbox beside each permission that you want to assign to the role. To remove permissions, deselect the checkbox.
+6. Click **Assign** to save your changes and close the modal.
+
+### Assign or remove flow permissions
+
+1. Go to the Admin interface and navigate to **Flows and Stages -> Flows**.
+2. Click the name of the flow (this opens the details page).
+3. Click the **Permissions** tab at the top of the page.
+4. Add or remove permissions using the **User Object Permissions** and the **Role Object Permissions** tabs.
+
+### Assign or remove stage permissions
+
+1. Go to the Admin interface and navigate to **Flows and Stages -> Stagess**.
+2. On the row for the specific stage that you want to manage permissions, click the lock icon.
+3. On the **Update Permissions** tab, you can add or remove the assigned permissions using the **User Object Permissions** and the **Role Object Permissions** tabs.
diff --git a/website/docs/user-group-role/access-control/permissions.md b/website/docs/user-group-role/access-control/permissions.md
new file mode 100644
index 000000000..57c0f7ae8
--- /dev/null
+++ b/website/docs/user-group-role/access-control/permissions.md
@@ -0,0 +1,44 @@
+---
+title: "About permissions"
+description: "Learn about global and object permissions in authentik."
+---
+
+Permissions are the central components in all access control systems, the lowest-level components, the controlling pieces of access data. Permissions are assigned to (or removed from!) to define exactly WHO can do WHAT to WHICH part of the overall software system.
+
+:::info
+Note that global and object permissions only apply to objects within authentik, and not to who can access certain applications (which are access-controlled using [policies](../../policies/index.md).
+:::
+
+## Fundamentals of authentik permissions
+
+There are two main types of permissions in authentik:
+
+-   [**Global permissions**](#global-permissions)
+-   [**Object permissions**](#object-permissions)
+
+### Global permissions
+
+Global permissions define who can do what on a global level across the entire system. Some examples in authentik are the ability to add new [flows](../../flow/index.md) or to create a URL for users to recover their login credentials.
+
+You can assign _global permissions_ to individual [users](../user/index.mdx) or to [roles](../roles/index.mdx). The most common and best practice is to assign permissions to roles.
+
+### Object permissions
+
+Object permissions have two categories:
+
+-   **_User_ object permissions**: defines WHO (which user) can change the **_object_**
+-   **_Role_ object permissions**: defines which ROLE can change the **_object_**
+
+Object permissions are assigned, as the name indicates, to an object (users, [groups](../groups/index.mdx), roles, flows, and stages), and the assigned permissions state exactly what a user or role can do TO the object (i.e. what permissions does the user or role have on that object).
+
+When working with object permissions, it is important to understand that when you are viewing the page for an object the permissions table shows which users or roles have permissions ON that object. Those permissions describe what those users or roles can do TO the object detailed on the page.
+
+For example, the UI below shows a user page for the user named Peter.
+
+![](./user-page.png)
+
+You can see in the **User Object Permissions** table that another user, roberto, has permissions on Peter (that is, on the user object Peter).
+
+Looking at another example, with a flow object called `default-recovery-flow` you can see that the Admin user (akadmin) has all object permissions on the flow, but roberto only has a few permissions on that flow.
+
+![](./flow-page.png)
diff --git a/website/docs/user-group-role/access-control/user-page.png b/website/docs/user-group-role/access-control/user-page.png
new file mode 100644
index 000000000..904062b97
Binary files /dev/null and b/website/docs/user-group-role/access-control/user-page.png differ
diff --git a/website/docs/user-group/group.md b/website/docs/user-group-role/groups/index.mdx
similarity index 86%
rename from website/docs/user-group/group.md
rename to website/docs/user-group-role/groups/index.mdx
index a251ce18c..ea934547b 100644
--- a/website/docs/user-group/group.md
+++ b/website/docs/user-group-role/groups/index.mdx
@@ -1,5 +1,6 @@
 ---
-title: Group
+title: About groups
+description: Learn about groups in authentik
 ---
 
 ## Hierarchy
diff --git a/website/docs/user-group-role/groups/manage_groups.md b/website/docs/user-group-role/groups/manage_groups.md
new file mode 100644
index 000000000..96c468360
--- /dev/null
+++ b/website/docs/user-group-role/groups/manage_groups.md
@@ -0,0 +1,45 @@
+---
+title: Manage groups
+description: "Learn how to work with groups in authentik."
+---
+
+A group is a collection of users. Refer to the following sections to learn how to create and manage groups, assign users and roles to groups, and how [permissions](../access-control/manage_permissions.md) work on a group level.
+
+## Create a group
+
+To create a new group, follow these steps:
+
+1. In the Admin interface, navigate to **Directory > Groups**.
+2. Click **Create** at the top of the Groups page.
+3. In the Create modal, define the following:
+    - name of the group
+    - whether or not users in that group will all be superusers (means anyone in that group has all permissions on everything)
+    - the parent group
+    - any custom attributes
+4. Click **Create**.
+
+## Modify a group
+
+To edit the group's name, parent group, whether or not the group is for superusers, associated roles, and any custom attributes, click the Edit icon beside the role's name. Make the changes, and then click **Update**.
+
+To [add or remove users](../user/user_basic_operations.md#add-a-user-to-a-group) from the group, or to manage permissions assigned to the group, click on the name of the group to go to the group's detail page.
+
+For more information about permissions, refer to ["Assign or remove permissions for a specific group"](../access-control/manage_permissions.md#assign-or-remove-permissions-for-a-specific-group).
+
+## Delete a group
+
+To delete a group, follow these steps:
+
+1. In the Admin interface, navigate to **Directory > Groups**.
+2. Select the checkbox beside the name of the group that you want to delete.
+3. Click **Delete**.
+
+## Assign, modify, or remove permissions for a group
+
+You can grant a group specific global or object-level permissions. Any user who is a member of a group inherits all of the group's permissions.
+
+For more information, review ["Permissions"](../access-control/permissions.md).
+
+## Assign a role to a group
+
+You can assign a role to a group, and then all users in the group inherit the permissions assigned to that role. For instructions and more information, see ["Assign a role to a group"](../roles/manage_roles.md#assign-a-role-to-a-group).
diff --git a/website/docs/user-group-role/roles/index.mdx b/website/docs/user-group-role/roles/index.mdx
new file mode 100644
index 000000000..19d179780
--- /dev/null
+++ b/website/docs/user-group-role/roles/index.mdx
@@ -0,0 +1,20 @@
+---
+title: About roles
+---
+
+import DocCardList from "@theme/DocCardList";
+import { useCurrentSidebarCategory } from "@docusaurus/theme-common";
+
+Roles are a way to simplify the assignment of permissions. Roles are also the backbone of role-based access control (RBAC), an industry standard for managing [access control](../access-control). In authentik, RBAC is how you manage access to system components and specific objects such as flows, stages, users, etc.
+
+Think of roles as a collection of permissions. A role, along with its "bucket" of assigned permissions, can then be assigned to a group, which means that every user who is a part of that group will inherit all of the permissions in that role's "bucket".
+
+For example, let's take a look at the following scenario:
+
+> You need to add 5 new users, all new hires, to authentik, your identity management system. These users will be the first team members on the brand new Security team, so they will need some high-level permissions, with object permissions to create and remove other users, revoke permissions, and send recovery emails. They will also need [global permissions](../access-control/permissions#fundamentals-of-authentik-permissions) to control access to flows and stages.
+
+The easiest workflow for setting up these new users involves [creating a role](./manage_roles.md#create-a-role) specifically for their type of work, and then [assigning that role to a group](./manage_roles.md#assign-a-role-to-a-group) to which all of the users belong.
+
+To learn more about working with roles in authentik, refer to the following topics:
+
+
diff --git a/website/docs/user-group-role/roles/manage_roles.md b/website/docs/user-group-role/roles/manage_roles.md
new file mode 100644
index 000000000..452fbb648
--- /dev/null
+++ b/website/docs/user-group-role/roles/manage_roles.md
@@ -0,0 +1,48 @@
+---
+title: "Manage roles"
+description: "Learn how to work with roles and permissions in authentik."
+---
+
+Roles are a collection of permissions, which can then be assigned, en masse, to a group. Using roles is a way to quickly grant permissions; by adding a user to the group with the appropriate assigned roles, any user in that group then inherits all of those permissions that are assigned to the role.
+
+:::info
+In authentik, we assign roles to groups, not to individual users.
+:::
+
+## Create a role
+
+To create a new role, follow these steps:
+
+1. In the Admin interface, navigate to **Directory > Roles**.
+2. Click **Create**, enter the name of the role, and then click **Create** in the modal.
+3. Next, [assign permissions to the role](../access-control/permissions.md#assign-or-remove-permissions-for-a-specific-role).
+
+## Modify a role
+
+To modify a role, follow these steps:
+
+-   To edit the name of the role, click the Edit icon beside the role's name.
+
+-   To modify the permissions that are assigned to the role click on the role's name to go to the role's detail page. There you can add, modify, or remove permissions. For more information, refer to ["Assign or remove permissions for a specific role"](../access-control/permissions.md#assign-or-remove-permissions-for-a-specific-role).
+
+## Delete a role
+
+To delete a role, follow these steps:
+
+1. In the Admin interface, navigate to **Directory > Roles**.
+2. Select the checkbox beside the name of the role that you want to delete.
+3. Click **Delete**.
+
+## Assign a role to a group
+
+In authentik, roles are assigned to [groups](../groups/index.mdx), not to individual users.
+
+1.  To assign the role to a group, navigate to **Directory -> Groups**.
+2.  Click the name of the group to which you want to add a role.
+3.  On the group's detail page, on the Overview tab, click **Edit** in the **Group Info** area.
+4.  On the **Update Group** modal, in the **Roles** field, scroll through the list of existent roles, and click to select the one you want to add to the group. (You can select multiple roles at once by holding the Control and Command keys while selecting the roles.)
+5.  Click **Update** to add the role(s) and close the modal.
+
+:::info
+To remove a role from a group, hold the Command key and click the name of the role that you want to remove from the group. This desepcts the role. Then click **Update**.
+:::
diff --git a/website/docs/user-group/user/create_invite.png b/website/docs/user-group-role/user/create_invite.png
similarity index 100%
rename from website/docs/user-group/user/create_invite.png
rename to website/docs/user-group-role/user/create_invite.png
diff --git a/website/docs/user-group/user/index.mdx b/website/docs/user-group-role/user/index.mdx
similarity index 100%
rename from website/docs/user-group/user/index.mdx
rename to website/docs/user-group-role/user/index.mdx
diff --git a/website/docs/user-group/user/invitations.md b/website/docs/user-group-role/user/invitations.md
similarity index 100%
rename from website/docs/user-group/user/invitations.md
rename to website/docs/user-group-role/user/invitations.md
diff --git a/website/docs/user-group/user/user_basic_operations.md b/website/docs/user-group-role/user/user_basic_operations.md
similarity index 83%
rename from website/docs/user-group/user/user_basic_operations.md
rename to website/docs/user-group-role/user/user_basic_operations.md
index 73a834252..3955b5304 100644
--- a/website/docs/user-group/user/user_basic_operations.md
+++ b/website/docs/user-group-role/user/user_basic_operations.md
@@ -9,11 +9,8 @@ The following topics are for the basic management of users: how to create, modif
 > If you want to automate user creation, you can do that either by [invitations](./invitations.md), [`user_write` stage](../../flow/stages/user_write), or [using the API](/developer-docs/api/browser).
 
 1. In the Admin interface of your authentik instance, select **Directory > Users** in the left side menu.
-
 2. Select the folder where you want to create a user.
-
 3. Click **Create** (for a default user).
-
 4. Fill in the required fields:
 
 -   **Username**: This value must be unique across your user folders.
@@ -22,8 +19,8 @@ The following topics are for the basic management of users: how to create, modif
 5. Fill the **_optional_** fields if needed:
 
 -   **Name**: The display name of the user.
--   **Email**: The email address of the user. That will be used if there is a [notification rule](../../events/notifications) triggered or for [email stages](../../flow/stages/email).
--   **Is active**: Define is the newly created user account is active. Selected by default.
+-   **Email**: The email address of the user. Email addresses are used in [email stages](../../flow/stages/email) and to receive [notifications](../../events/notifications), if configured.
+-   **Is active**: Define if the newly created user account is active. Selected by default.
 -   **Attributes**: Custom attributes definition for the user, in YAML or JSON format. These attributes can be used to enforce additional prompts on authentication stages or define conditions to enforce specific policies if the current implementation does not fit your use case. The value is an empty dictionary by default.
 
 6. Click **Create**
@@ -43,7 +40,7 @@ To view details about a specific user:
 2. To see further details, click any of the other tabs:
 
 -   **Session** shows the active sessions established by the user. If there is any need, you can clean up the connected devices for a user by selecting the device(s) and then clicking **Delete**. This forces the user to authenticate again on the deleted devices.
--   **Groups** allows you to manage the group membership of the user. You can find more details on [groups](../group).
+-   **Groups** allows you to manage the group membership of the user. You can find more details on [groups](../groups/index.mdx).
 -   **User events** displays all the events generated by the user during a session, such as login, logout, application authorisation, password reset, user info update, etc.
 -   **Explicit consent** lists all the permissions the user has given explicitly to an application. Entries will only appear if the user is validating an [explicit consent flow in an OAuth2 provider](../../providers/oauth2/). If you want to delete the explicit consent (because the application is requiring new permissions, or the user has explicitly asked to reset his consent on third-party apps), select the applications and click **Delete**. The user will be asked to again give explicit consent to share information with the application.
 -   **OAuth Refresh Tokens** lists all the OAuth tokens currently distributed. You can remove the tokens by selecting the applications and then clicking **Delete**.
@@ -53,32 +50,38 @@ To view details about a specific user:
 
 After the creation of the user, you can edit any parameter defined during the creation.
 
-To modify a user object, go to **Directory > Users**, and click the edit icon beside the name.
+To modify a user object, go to **Directory > Users**, and click the edit icon beside the name. You can also go into [user details](#view-user-details), and click **Edit**.
 
-You can also go into [user details](#view-user-details), and click **Edit**.
+### Assign, modify, or remove permissions for a user
 
-## User recovery
+You can grant a user specific global or object-level permissions. Alternatively, you can add a user to a group that has the appropriate permissions, and the user inherits all of the group's permissions.
+
+For more information, review ["Permissions"](../access-control/permissions.md).
+
+## Add a user to a group
+
+1. To add a user to a group, navigate to **Directory > Users** to display all users.
+2. Click the name of the user to display the full user details page.
+3. Click the **Groups** tab, and then click either **Add to existing group** or **Add to new group**.
+
+## User credentials recovery
 
 If a user has lost their credentials, there are several options.
 
 ### Email them a recovery link
 
 1. In the Admin interface, navigate to **Directory > Users** to display all users.
-
-2. Either click the name of the user to display the full User details page, or click the chevron (the › symbol) beside their name to expand the toptions.
-
+2. Either click the name of the user to display the full User details page, or click the chevron (the › symbol) beside their name to expand the options.
 3. To generate a recovery link, which you can then copy and paste into an email, click **View recovery link**.
 
-    A pop-up will appear on your browser with the link for you to copy and to send to the user.
+A pop-up will appear on your browser with the link for you to copy and to send to the user.
 
 ### Automate email to a user
 
 You can use our automated email to send a link with the URL for the user to reset their password. This option will only work if you have properly [configured a SMTP server during the installation](../../installation/docker-compose#email-configuration-optional-but-recommended) and set an email address for the user.
 
 1. In the Admin interface, navigate to **Directory > Users** to display all users.
-
 2. Either click the name of the user to display the full User details page, or click the chevron beside their name to expand the toptions.
-
 3. To send the automated email to the user, click **Email recovery link**.
 
 If the user does not receive the email, check if the mail server parameters [are properly configured](../../troubleshooting/emails).
@@ -88,9 +91,7 @@ If the user does not receive the email, check if the mail server parameters [are
 As an Admin, you can simply reset the password for the user.
 
 1. In the Admin interface, navigate to **Directory > Users** to display all users.
-
 2. Either click the name of the user to display the full User details page, or click the chevron beside their name to expand the toptions.
-
 3. To reset the user's password, click **Reset password**, and then define the new value.
 
 ## Deactivate or Delete user
@@ -98,7 +99,6 @@ As an Admin, you can simply reset the password for the user.
 #### To deactivate a user:
 
 1. Go into the user list or detail, and click **Deactivate**.
-
 2. Review the changes and click **Update**.
 
 The active sessions are revoked and the authentication of the user blocked. You can reactivate the account by following the same procedure.
@@ -111,7 +111,6 @@ You may instead deactivate the account to preserve identity data.
 :::
 
 1. Go into the user list and select one (or multiple users) to delete and click **Delete** on the top-right of the page.
-
 2. Review the changes and click **Delete**.
 
 The user list refreshes and no longer displays the removed users.
diff --git a/website/docs/user-group/user/user_ref.md b/website/docs/user-group-role/user/user_ref.md
similarity index 100%
rename from website/docs/user-group/user/user_ref.md
rename to website/docs/user-group-role/user/user_ref.md
diff --git a/website/integrations/services/minio/index.md b/website/integrations/services/minio/index.md
index 11c664186..f2ea99217 100644
--- a/website/integrations/services/minio/index.md
+++ b/website/integrations/services/minio/index.md
@@ -43,7 +43,7 @@ elif ak_is_group_member(request.user, name="Minio users"):
 return None
 ```
 
-Note that you can assign multiple policies to a user by returning a list, and returning `None` will map no policies to the user, resulting in no access to the MinIO instance. For more information on writing expressions, see [Expressions](../../../docs/property-mappings/expression) and [User](../../../docs/user-group/user#object-attributes) docs.
+Note that you can assign multiple policies to a user by returning a list, and returning `None` will map no policies to the user, resulting in no access to the MinIO instance. For more information on writing expressions, see [Expressions](../../../docs/property-mappings/expression) and [User](../../../docs/user-group-role/user/user_ref#object-properties) docs.
 
 ### Creating application and provider
 
diff --git a/website/sidebars.js b/website/sidebars.js
index 902194492..e03cd39d9 100644
--- a/website/sidebars.js
+++ b/website/sidebars.js
@@ -13,7 +13,7 @@ const docsSidebar = {
         {
             type: "category",
             label: "Installation",
-            collapsed: false,
+            collapsed: true,
             link: {
                 type: "doc",
                 id: "installation/index",
@@ -259,22 +259,51 @@ const docsSidebar = {
         },
         {
             type: "category",
-            label: "Users & Groups",
+            label: "Users, Groups, & Roles",
             items: [
                 {
                     type: "category",
                     label: "Users",
                     link: {
                         type: "doc",
-                        id: "user-group/user/index",
+                        id: "user-group-role/user/index",
                     },
                     items: [
-                        "user-group/user/user_basic_operations",
-                        "user-group/user/user_ref",
-                        "user-group/user/invitations",
+                        "user-group-role/user/user_basic_operations",
+                        "user-group-role/user/user_ref",
+                        "user-group-role/user/invitations",
+                    ],
+                },
+                {
+                    type: "category",
+                    label: "Groups",
+                    link: {
+                        type: "doc",
+                        id: "user-group-role/groups/index",
+                    },
+                    items: ["user-group-role/groups/manage_groups"],
+                },
+                {
+                    type: "category",
+                    label: "Roles",
+                    link: {
+                        type: "doc",
+                        id: "user-group-role/roles/index",
+                    },
+                    items: ["user-group-role/roles/manage_roles"],
+                },
+                {
+                    type: "category",
+                    label: "Access control",
+                    link: {
+                        type: "doc",
+                        id: "user-group-role/access-control/index",
+                    },
+                    items: [
+                        "user-group-role/access-control/permissions",
+                        "user-group-role/access-control/manage_permissions",
                     ],
                 },
-                "user-group/group",
             ],
         },
         {
@@ -287,13 +316,14 @@ const docsSidebar = {
                 description: "Release notes for recent authentik versions",
             },
             items: [
+                "releases/2023/v2023.10",
                 "releases/2023/v2023.8",
                 "releases/2023/v2023.6",
-                "releases/2023/v2023.5",
                 {
                     type: "category",
                     label: "Previous versions",
                     items: [
+                        "releases/2023/v2023.5",
                         "releases/2023/v2023.4",
                         "releases/2023/v2023.3",
                         "releases/2023/v2023.2",