web: fixing styling correspondence

web: clean up group displays and type correspondence.
Fix user errors; builds without failure now.
2024-07-08 09:16:41 -07:00 · 2024-07-08 09:13:07 -07:00 · 2024-07-08 08:53:49 -07:00 · 2024-07-08 08:50:03 -07:00 · 2024-07-08 08:40:44 -07:00 · 2024-07-05 16:00:57 -07:00
71 changed files with 5196 additions and 732 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -21,7 +21,10 @@ updates:
    labels:
      - dependencies
  - package-ecosystem: npm
-    directory: "/web"
+    directories:
+      - "/web"
+      - "/tests/wdio"
+      - "/web/sfe"
    schedule:
      interval: daily
      time: "04:00"
@ -30,7 +33,6 @@ updates:
    open-pull-requests-limit: 10
    commit-message:
      prefix: "web:"
-    # TODO: deduplicate these groups
    groups:
      sentry:
        patterns:
@ -56,38 +58,6 @@ updates:
        patterns:
          - "@rollup/*"
          - "rollup-*"
-  - package-ecosystem: npm
-    directory: "/tests/wdio"
-    schedule:
-      interval: daily
-      time: "04:00"
-    labels:
-      - dependencies
-    open-pull-requests-limit: 10
-    commit-message:
-      prefix: "web:"
-    # TODO: deduplicate these groups
-    groups:
-      sentry:
-        patterns:
-          - "@sentry/*"
-          - "@spotlightjs/*"
-      babel:
-        patterns:
-          - "@babel/*"
-          - "babel-*"
-      eslint:
-        patterns:
-          - "@typescript-eslint/*"
-          - "eslint"
-          - "eslint-*"
-      storybook:
-        patterns:
-          - "@storybook/*"
-          - "*storybook*"
-      esbuild:
-        patterns:
-          - "@esbuild/*"
      wdio:
        patterns:
          - "@wdio/*"
--- a/.github/workflows/api-ts-publish.yml
+++ b/.github/workflows/api-ts-publish.yml
@ -31,7 +31,12 @@ jobs:
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
      - name: Upgrade /web
-        working-directory: web/
+        working-directory: web
+        run: |
+          export VERSION=`node -e 'console.log(require("../gen-ts-api/package.json").version)'`
+          npm i @goauthentik/api@$VERSION
+      - name: Upgrade /web/sfe
+        working-directory: web/sfe
        run: |
          export VERSION=`node -e 'console.log(require("../gen-ts-api/package.json").version)'`
          npm i @goauthentik/api@$VERSION
--- a/.github/workflows/ci-main.yml
+++ b/.github/workflows/ci-main.yml
@ -219,7 +219,7 @@ jobs:
        with:
          ref: ${{ github.event.pull_request.head.sha }}
      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3.0.0
+        uses: docker/setup-qemu-action@v3.1.0
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: prepare variables
--- a/.github/workflows/ci-outpost.yml
+++ b/.github/workflows/ci-outpost.yml
@ -76,7 +76,7 @@ jobs:
        with:
          ref: ${{ github.event.pull_request.head.sha }}
      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3.0.0
+        uses: docker/setup-qemu-action@v3.1.0
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: prepare variables
--- a/.github/workflows/ci-web.yml
+++ b/.github/workflows/ci-web.yml
@ -26,6 +26,10 @@ jobs:
          - web
          - tests/wdio
        include:
+          - command: tsc
+            project: web
+            extra_setup: |
+              cd sfe/ && npm ci
          - command: lit-analyse
            project: web
            extra_setup: |
--- a/.github/workflows/release-publish.yml
+++ b/.github/workflows/release-publish.yml
@ -14,7 +14,7 @@ jobs:
    steps:
      - uses: actions/checkout@v4
      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3.0.0
+        uses: docker/setup-qemu-action@v3.1.0
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: prepare variables
@ -68,7 +68,7 @@ jobs:
        with:
          go-version-file: "go.mod"
      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3.0.0
+        uses: docker/setup-qemu-action@v3.1.0
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: prepare variables
--- a/8
+++ b/8
@ -30,8 +30,12 @@ WORKDIR /work/web

 RUN --mount=type=bind,target=/work/web/package.json,src=./web/package.json \
    --mount=type=bind,target=/work/web/package-lock.json,src=./web/package-lock.json \
+    --mount=type=bind,target=/work/web/sfe/package.json,src=./web/sfe/package.json \
+    --mount=type=bind,target=/work/web/sfe/package-lock.json,src=./web/sfe/package-lock.json \
    --mount=type=bind,target=/work/web/scripts,src=./web/scripts \
    --mount=type=cache,id=npm-web,sharing=shared,target=/root/.npm \
+    npm ci --include=dev && \
+    cd sfe && \
    npm ci --include=dev

 COPY ./package.json /work
@ -39,7 +43,9 @@ COPY ./web /work/web/
 COPY ./website /work/website/
 COPY ./gen-ts-api /work/web/node_modules/@goauthentik/api

-RUN npm run build
+RUN npm run build && \
+    cd sfe && \
+    npm run build

 # Stage 3: Build go proxy
 FROM --platform=${BUILDPLATFORM} mcr.microsoft.com/oss/go/microsoft/golang:1.22-fips-bookworm AS go-builder
--- a/authentik/brands/api.py
+++ b/authentik/brands/api.py
@ -24,7 +24,7 @@ from authentik.tenants.utils import get_current_tenant
 class FooterLinkSerializer(PassiveSerializer):
    """Links returned in Config API"""

-    href = CharField(read_only=True)
+    href = CharField(read_only=True, allow_null=True)
    name = CharField(read_only=True)


--- a/authentik/core/api/applications.py
+++ b/authentik/core/api/applications.py
@ -147,13 +147,6 @@ class ApplicationViewSet(UsedByMixin, ModelViewSet):
                applications.append(application)
        return applications

-    def _filter_applications_with_launch_url(self, pagined_apps: Iterator[Application]) -> list[Application]:
-        applications = []
-        for app in pagined_apps:
-            if app.get_launch_url():
-                applications.append(app)
-        return applications
-
    @extend_schema(
        parameters=[
            OpenApiParameter(
@ -211,11 +204,6 @@ class ApplicationViewSet(UsedByMixin, ModelViewSet):
                location=OpenApiParameter.QUERY,
                type=OpenApiTypes.INT,
            ),
-            OpenApiParameter(
-                name="only_with_launch_url",
-                location=OpenApiParameter.QUERY,
-                type=OpenApiTypes.BOOL,
-            ),
        ]
    )
    def list(self, request: Request) -> Response:
@ -228,8 +216,6 @@ class ApplicationViewSet(UsedByMixin, ModelViewSet):
        if superuser_full_list and request.user.is_superuser:
            return super().list(request)

-        only_with_launch_url = str(request.query_params.get("only_with_launch_url", "false")).lower()
-
        queryset = self._filter_queryset_for_list(self.get_queryset())
        paginator: Pagination = self.paginator
        paginated_apps = paginator.paginate_queryset(queryset, request)
@ -265,10 +251,6 @@ class ApplicationViewSet(UsedByMixin, ModelViewSet):
                    allowed_applications,
                    timeout=86400,
                )
-
-        if only_with_launch_url == "true":
-            allowed_applications = self._filter_applications_with_launch_url(allowed_applications)
-
        serializer = self.get_serializer(allowed_applications, many=True)
        return self.get_paginated_response(serializer.data)

--- a/authentik/core/api/user_directory.py
+++ b/authentik/core/api/user_directory.py
@ -0,0 +1,99 @@
+"""User directory API Views"""
+
+from typing import Any
+
+from drf_spectacular.utils import extend_schema, inline_serializer
+from guardian.shortcuts import get_anonymous_user
+from rest_framework.decorators import action
+from rest_framework.fields import SerializerMethodField
+from rest_framework.serializers import CharField, DictField, ListField, ModelSerializer
+from rest_framework.views import Request, Response
+from rest_framework.viewsets import ReadOnlyModelViewSet
+from structlog.stdlib import get_logger
+
+from authentik.core.models import User
+from authentik.rbac.permissions import HasPermission
+from authentik.tenants.utils import get_current_tenant
+
+LOGGER = get_logger()
+
+
+class UserDirectorySerializer(ModelSerializer):
+    """User Directory Serializer"""
+
+    user_fields = SerializerMethodField()
+    attributes = SerializerMethodField()
+
+    class Meta:
+        model = User
+        fields = [
+            "pk",
+            "user_fields",
+            "attributes",
+        ]
+
+    def get_user_fields(self, obj: User) -> dict[str, Any]:
+        """Get directory fields"""
+        fields = {}
+        user_directory_fields = get_current_tenant().user_directory_fields
+        for f in ("name", "username", "email", "avatar"):
+            if f in user_directory_fields:
+                fields[f] = getattr(obj, f)
+        if "groups" in user_directory_fields:
+            fields["groups"] = [g.name for g in obj.all_groups().order_by("name")]
+        return fields
+
+    def get_attributes(self, obj: User) -> dict[str, Any]:
+        """Get directory attributes"""
+        attributes = {}
+        for field in get_current_tenant().user_directory_attributes:
+            path = field.get("attribute", None)
+            if path is not None:
+                attributes[path] = obj.attributes.get(path, None)
+        return attributes
+
+
+class UserDirectoryViewSet(ReadOnlyModelViewSet):
+    """User Directory Viewset"""
+
+    queryset = User.objects.none()
+    ordering = ["username"]
+    ordering_fields = ["username", "email", "name"]
+    serializer_class = UserDirectorySerializer
+    permission_classes = [HasPermission("authentik_rbac.view_user_directory")]
+
+    def get_queryset(self):
+        return User.objects.all().exclude(pk=get_anonymous_user().pk).filter(is_active=True)
+
+    @property
+    def search_fields(self):
+        """Get search fields"""
+        current_tenant = get_current_tenant()
+        return list(
+            f for f in current_tenant.user_directory_fields if f not in ("avatar", "groups")
+        ) + list(
+            f"attributes__{attr['attribute']}"
+            for attr in current_tenant.user_directory_attributes
+            if "attribute" in attr
+        )
+
+    @extend_schema(
+        responses={
+            200: inline_serializer(
+                "UserDirectoryFieldsSerializer",
+                {
+                    "fields": ListField(child=CharField()),
+                    "attributes": ListField(child=DictField(child=CharField())),
+                },
+            )
+        },
+    )
+    @action(detail=False, pagination_class=None)
+    def fields(self, request: Request) -> Response:
+        """Get user directory fields"""
+        return Response(
+            {
+                "fields": request.tenant.user_directory_fields,
+                "attributes": request.tenant.user_directory_attributes,
+            }
+        )
--- a/authentik/core/models.py
+++ b/authentik/core/models.py
@ -1,7 +1,6 @@
 """authentik core models"""

 from datetime import datetime
-from functools import lru_cache
 from hashlib import sha256
 from typing import Any, Optional, Self
 from uuid import uuid4
@ -476,10 +475,6 @@ class Application(SerializerModel, PolicyBindingModel):
            return self.meta_icon.name
        return self.meta_icon.url

-    # maxsize is set as 2 since that is called once to check
-    # if we should return applications with a launch URL
-    # and a second time to actually get the launch_url
-    @lru_cache(maxsize=2)
    def get_launch_url(self, user: Optional["User"] = None) -> str | None:
        """Get launch URL if set, otherwise attempt to get launch URL based on provider."""
        url = None
--- a/authentik/core/sources/flow_manager.py
+++ b/authentik/core/sources/flow_manager.py
@ -309,7 +309,7 @@ class SourceFlowManager:
        # When request isn't authenticated we jump straight to auth
        if not self.request.user.is_authenticated:
            return self.handle_auth(connection)
-        # Connection has already been saved
+        connection.save()
        Event.new(
            EventAction.SOURCE_LINKED,
            message="Linked Source",
--- a/authentik/core/templates/base/header_js.html
+++ b/authentik/core/templates/base/header_js.html
@ -10,7 +10,7 @@
        versionSubdomain: "{{ version_subdomain }}",
        build: "{{ build }}",
    };
-    window.addEventListener("DOMContentLoaded", () => {
+    window.addEventListener("DOMContentLoaded", function () {
        {% for message in messages %}
        window.dispatchEvent(
            new CustomEvent("ak-message", {
--- a/authentik/core/templates/login/base_full.html
+++ b/authentik/core/templates/login/base_full.html
@ -71,9 +71,9 @@
                </li>
                {% endfor %}
                <li>
-                    <a rel="noopener noreferrer" target="_blank" href="https://goauthentik.io?utm_source=authentik">
+                    <span>
                        {% trans 'Powered by authentik' %}
-                    </a>
+                    </span>
                </li>
            </ul>
        </footer>
--- a/authentik/core/urls.py
+++ b/authentik/core/urls.py
@ -17,11 +17,13 @@ from authentik.core.api.providers import ProviderViewSet
 from authentik.core.api.sources import SourceViewSet, UserSourceConnectionViewSet
 from authentik.core.api.tokens import TokenViewSet
 from authentik.core.api.transactional_applications import TransactionalApplicationView
+from authentik.core.api.user_directory import UserDirectoryViewSet
 from authentik.core.api.users import UserViewSet
 from authentik.core.views import apps
 from authentik.core.views.debug import AccessDeniedView
-from authentik.core.views.interface import FlowInterfaceView, InterfaceView
+from authentik.core.views.interface import InterfaceView
 from authentik.core.views.session import EndSessionView
+from authentik.flows.views.interface import FlowInterfaceView
 from authentik.root.asgi_middleware import SessionMiddleware
 from authentik.root.messages.consumer import MessageConsumer
 from authentik.root.middleware import ChannelsLoggingMiddleware
@ -53,6 +55,8 @@ urlpatterns = [
    ),
    path(
        "if/flow/<slug:flow_slug>/",
+        # FIXME: move this url to the flows app...also will cause all
+        # of the reverse calls to be adjusted
        ensure_csrf_cookie(FlowInterfaceView.as_view()),
        name="if-flow",
    ),
@ -79,6 +83,7 @@ api_urlpatterns = [
    ),
    ("core/groups", GroupViewSet),
    ("core/users", UserViewSet),
+    ("core/user_directory", UserDirectoryViewSet),
    ("core/tokens", TokenViewSet),
    ("sources/all", SourceViewSet),
    ("sources/user_connections/all", UserSourceConnectionViewSet),
--- a/authentik/core/views/interface.py
+++ b/authentik/core/views/interface.py
@ -3,7 +3,6 @@
 from json import dumps
 from typing import Any

-from django.shortcuts import get_object_or_404
 from django.views.generic.base import TemplateView
 from rest_framework.request import Request

@ -11,7 +10,6 @@ from authentik import get_build_hash
 from authentik.admin.tasks import LOCAL_VERSION
 from authentik.api.v3.config import ConfigView
 from authentik.brands.api import CurrentBrandSerializer
-from authentik.flows.models import Flow


 class InterfaceView(TemplateView):
@ -25,14 +23,3 @@ class InterfaceView(TemplateView):
        kwargs["build"] = get_build_hash()
        kwargs["url_kwargs"] = self.kwargs
        return super().get_context_data(**kwargs)
-
-
-class FlowInterfaceView(InterfaceView):
-    """Flow interface"""
-
-    template_name = "if/flow.html"
-
-    def get_context_data(self, **kwargs: Any) -> dict[str, Any]:
-        kwargs["flow"] = get_object_or_404(Flow, slug=self.kwargs.get("flow_slug"))
-        kwargs["inspector"] = "inspector" in self.request.GET
-        return super().get_context_data(**kwargs)
--- a/authentik/flows/templates/if/flow-sfe.html
+++ b/authentik/flows/templates/if/flow-sfe.html
@ -0,0 +1,54 @@
+{% load static %}
+{% load i18n %}
+{% load authentik_core %}
+
+<!DOCTYPE html>
+
+<html lang="en">
+    <head>
+        <meta charset="UTF-8">
+        <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
+        <title>{% block title %}{% trans title|default:brand.branding_title %}{% endblock %}</title>
+        <link rel="icon" href="{{ brand.branding_favicon }}">
+        <link rel="shortcut icon" href="{{ brand.branding_favicon }}">
+        {% block head_before %}
+        {% endblock %}
+        <link rel="stylesheet" type="text/css" href="{% static 'dist/sfe/bootstrap.min.css' %}">
+        <meta name="sentry-trace" content="{{ sentry_trace }}" />
+        {% include "base/header_js.html" %}
+        <style>
+          html,
+          body {
+            height: 100%;
+          }
+          body {
+            background-image: url("{{ flow.background_url }}");
+            background-repeat: no-repeat;
+            background-size: cover;
+          }
+          .card {
+            padding: 3rem;
+          }
+
+          .form-signin {
+            max-width: 330px;
+            padding: 1rem;
+          }
+
+          .form-signin .form-floating:focus-within {
+            z-index: 2;
+          }
+          .brand-icon {
+            max-width: 100%;
+          }
+        </style>
+    </head>
+    <body class="d-flex align-items-center py-4 bg-body-tertiary">
+      <div class="card m-auto">
+        <main class="form-signin w-100 m-auto" id="flow-sfe-container">
+        </main>
+        <span class="mt-3 mb-0 text-muted text-center">{% trans 'Powered by authentik' %}</span>
+      </div>
+      <script src="{% static 'dist/sfe/index.js' %}"></script>
+    </body>
+</html>
--- a/authentik/flows/templates/if/flow.html
+++ b/authentik/flows/templates/if/flow.html
--- a/authentik/flows/views/interface.py
+++ b/authentik/flows/views/interface.py
@ -0,0 +1,41 @@
+"""Interface views"""
+
+from typing import Any
+
+from django.shortcuts import get_object_or_404
+from ua_parser.user_agent_parser import Parse
+
+from authentik.core.views.interface import InterfaceView
+from authentik.flows.models import Flow
+
+
+class FlowInterfaceView(InterfaceView):
+    """Flow interface"""
+
+    def get_context_data(self, **kwargs: Any) -> dict[str, Any]:
+        kwargs["flow"] = get_object_or_404(Flow, slug=self.kwargs.get("flow_slug"))
+        kwargs["inspector"] = "inspector" in self.request.GET
+        return super().get_context_data(**kwargs)
+
+    def compat_needs_sfe(self) -> bool:
+        """Check if we need to use the simplified flow executor for compatibility"""
+        ua = Parse(self.request.META.get("HTTP_USER_AGENT", ""))
+        if ua["user_agent"]["family"] == "IE":
+            return True
+        # Only use SFE for Edge 18 and older, after Edge 18 MS switched to chromium which supports
+        # the default flow executor
+        if (
+            ua["user_agent"]["family"] == "Edge"
+            and int(ua["user_agent"]["major"]) <= 18  # noqa: PLR2004
+        ):  # noqa: PLR2004
+            return True
+        # https://github.com/AzureAD/microsoft-authentication-library-for-objc
+        # Used by Microsoft Teams/Office on macOS, and also uses a very outdated browser engine
+        if "PKeyAuth" in ua["string"]:
+            return True
+        return False
+
+    def get_template_names(self) -> list[str]:
+        if self.compat_needs_sfe() or "sfe" in self.request.GET:
+            return ["if/flow-sfe.html"]
+        return ["if/flow.html"]
--- a/authentik/outposts/api/outposts.py
+++ b/authentik/outposts/api/outposts.py
@ -20,6 +20,7 @@ from authentik.core.api.utils import JSONDictField, ModelSerializer, PassiveSeri
 from authentik.core.models import Provider
 from authentik.enterprise.license import LicenseKey
 from authentik.enterprise.providers.rac.models import RACProvider
+from authentik.lib.utils.time import timedelta_from_string, timedelta_string_validator
 from authentik.outposts.api.service_connections import ServiceConnectionSerializer
 from authentik.outposts.apps import MANAGED_OUTPOST, MANAGED_OUTPOST_NAME
 from authentik.outposts.models import (
@ -49,6 +50,10 @@ class OutpostSerializer(ModelSerializer):
    service_connection_obj = ServiceConnectionSerializer(
        source="service_connection", read_only=True
    )
+    refresh_interval_s = SerializerMethodField()
+
+    def get_refresh_interval_s(self, obj: Outpost) -> int:
+        return int(timedelta_from_string(obj.config.refresh_interval).total_seconds())

    def validate_name(self, name: str) -> str:
        """Validate name (especially for embedded outpost)"""
@ -84,7 +89,8 @@ class OutpostSerializer(ModelSerializer):
    def validate_config(self, config) -> dict:
        """Check that the config has all required fields"""
        try:
-            from_dict(OutpostConfig, config)
+            parsed = from_dict(OutpostConfig, config)
+            timedelta_string_validator(parsed.refresh_interval)
        except DaciteError as exc:
            raise ValidationError(f"Failed to validate config: {str(exc)}") from exc
        return config
@ -99,6 +105,7 @@ class OutpostSerializer(ModelSerializer):
            "providers_obj",
            "service_connection",
            "service_connection_obj",
+            "refresh_interval_s",
            "token_identifier",
            "config",
            "managed",
--- a/authentik/outposts/models.py
+++ b/authentik/outposts/models.py
@ -61,6 +61,7 @@ class OutpostConfig:

    log_level: str = CONFIG.get("log_level")
    object_naming_template: str = field(default="ak-outpost-%(name)s")
+    refresh_interval: str = "minutes=5"

    container_image: str | None = field(default=None)

--- a/authentik/rbac/migrations/0004_alter_systempermission_options.py
+++ b/authentik/rbac/migrations/0004_alter_systempermission_options.py
@ -4,7 +4,6 @@ from django.db import migrations


 class Migration(migrations.Migration):
-
    dependencies = [
        ("authentik_rbac", "0003_alter_systempermission_options"),
    ]
@ -17,6 +16,9 @@ class Migration(migrations.Migration):
                "managed": False,
                "permissions": [
                    ("view_system_info", "Can view system info"),
+                    ("view_system_tasks", "Can view system tasks"),
+                    ("view_user_directory", "Can view users in the user directory"),
+                    ("run_system_tasks", "Can run system tasks"),
                    ("access_admin_interface", "Can access admin interface"),
                    ("view_system_settings", "Can view system settings"),
                    ("edit_system_settings", "Can edit system settings"),
--- a/authentik/rbac/models.py
+++ b/authentik/rbac/models.py
@ -67,6 +67,9 @@ class SystemPermission(models.Model):
        verbose_name_plural = _("System permissions")
        permissions = [
            ("view_system_info", _("Can view system info")),
+            ("view_system_tasks", _("Can view system tasks")),
+            ("view_user_directory", _("Can view users in the user directory")),
+            ("run_system_tasks", _("Can run system tasks")),
            ("access_admin_interface", _("Can access admin interface")),
            ("view_system_settings", _("Can view system settings")),
            ("edit_system_settings", _("Can edit system settings")),
--- a/authentik/stages/authenticator_validate/stage.py
+++ b/authentik/stages/authenticator_validate/stage.py
@ -325,7 +325,7 @@ class AuthenticatorValidateStageView(ChallengeStageView):
            serializer = SelectableStageSerializer(
                data={
                    "pk": stage.pk,
-                    "name": stage.friendly_name or stage.name,
+                    "name": getattr(stage, "friendly_name", stage.name),
                    "verbose_name": str(stage._meta.verbose_name)
                    .replace("Setup Stage", "")
                    .strip(),
--- a/authentik/tenants/api/settings.py
+++ b/authentik/tenants/api/settings.py
@ -23,6 +23,8 @@ class SettingsSerializer(ModelSerializer):
            "footer_links",
            "gdpr_compliance",
            "impersonation",
+            "user_directory_fields",
+            "user_directory_attributes",
            "default_token_duration",
            "default_token_length",
        ]
--- a/authentik/tenants/migrations/0002_tenant_user_directory_and_more.py
+++ b/authentik/tenants/migrations/0002_tenant_user_directory_and_more.py
@ -0,0 +1,30 @@
+# Generated by Django 5.0.1 on 2024-01-24 14:27
+
+from django.db import migrations, models
+
+import authentik.tenants.models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("authentik_tenants", "0001_initial"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="tenant",
+            name="user_directory_attributes",
+            field=models.JSONField(
+                blank=True, default=list, help_text="Attributes to show in the user directory."
+            ),
+        ),
+        migrations.AddField(
+            model_name="tenant",
+            name="user_directory_fields",
+            field=models.JSONField(
+                blank=True,
+                default=authentik.tenants.models._default_user_directory_fields,
+                help_text="Fields to show in the user directory.",
+            ),
+        ),
+    ]
--- a/authentik/tenants/migrations/0004_merge_20240524_1807.py
+++ b/authentik/tenants/migrations/0004_merge_20240524_1807.py
@ -0,0 +1,13 @@
+# Generated by Django 5.0.6 on 2024-05-24 18:07
+
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("authentik_tenants", "0002_tenant_user_directory_and_more"),
+        ("authentik_tenants", "0003_alter_tenant_default_token_duration"),
+    ]
+
+    operations = []
--- a/authentik/tenants/models.py
+++ b/authentik/tenants/models.py
@ -37,6 +37,10 @@ def _validate_schema_name(name):
        )


+def _default_user_directory_fields():
+    return ["avatar", "name", "username", "email", "groups"]
+
+
 class Tenant(TenantMixin, SerializerModel):
    """Tenant"""

@ -85,6 +89,14 @@ class Tenant(TenantMixin, SerializerModel):
    impersonation = models.BooleanField(
        help_text=_("Globally enable/disable impersonation."), default=True
    )
+    user_directory_fields = models.JSONField(
+        help_text=_("Fields to show in the user directory."),
+        default=_default_user_directory_fields,
+        blank=True,
+    )
+    user_directory_attributes = models.JSONField(
+        help_text=_("Attributes to show in the user directory."), default=list, blank=True
+    )
    default_token_duration = models.TextField(
        help_text=_("Default token duration"),
        default=DEFAULT_TOKEN_DURATION,
--- a/go.mod
+++ b/go.mod
@ -28,7 +28,7 @@ require (
 	github.com/spf13/cobra v1.8.1
 	github.com/stretchr/testify v1.9.0
 	github.com/wwt/guac v1.3.2
-	goauthentik.io/api/v3 v3.2024060.2
+	goauthentik.io/api/v3 v3.2024060.5
 	golang.org/x/exp v0.0.0-20230210204819-062eb4c674ab
 	golang.org/x/oauth2 v0.21.0
 	golang.org/x/sync v0.7.0
--- a/go.sum
+++ b/go.sum
@ -294,8 +294,8 @@ go.opentelemetry.io/otel/trace v1.24.0 h1:CsKnnL4dUAr/0llH9FKuc698G04IrpWV0MQA/Y
 go.opentelemetry.io/otel/trace v1.24.0/go.mod h1:HPc3Xr/cOApsBI154IU0OI0HJexz+aw5uPdbs3UCjNU=
 go.uber.org/goleak v1.2.1 h1:NBol2c7O1ZokfZ0LEU9K6Whx/KnwvepVetCUhtKja4A=
 go.uber.org/goleak v1.2.1/go.mod h1:qlT2yGI9QafXHhZZLxlSuNsMw3FFLxBr+tBRlmO1xH4=
-goauthentik.io/api/v3 v3.2024060.2 h1:rnZlHFzuHJQ5sU1V7XVZhWRtlSuvrf2QLzBSNtLexi8=
-goauthentik.io/api/v3 v3.2024060.2/go.mod h1:zz+mEZg8rY/7eEjkMGWJ2DnGqk+zqxuybGCGrR2O4Kw=
+goauthentik.io/api/v3 v3.2024060.5 h1:AjvPUZoObk7a86ZZaz2tmruteY+1vAEfVzIOzQpWSXM=
+goauthentik.io/api/v3 v3.2024060.5/go.mod h1:zz+mEZg8rY/7eEjkMGWJ2DnGqk+zqxuybGCGrR2O4Kw=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
--- a/internal/outpost/ak/api_ws.go
+++ b/internal/outpost/ak/api_ws.go
@ -183,7 +183,7 @@ func (ac *APIController) startWSHealth() {

 func (ac *APIController) startIntervalUpdater() {
 	logger := ac.logger.WithField("loop", "interval-updater")
-	ticker := time.NewTicker(5 * time.Minute)
+	ticker := time.NewTicker(time.Duration(ac.Outpost.RefreshIntervalS) * time.Second)
 	for ; true; <-ticker.C {
 		logger.Debug("Running interval update")
 		err := ac.OnRefresh()
@ -198,6 +198,7 @@ func (ac *APIController) startIntervalUpdater() {
 				"build":        constants.BUILD("tagged"),
 			}).SetToCurrentTime()
 		}
+		ticker.Reset(time.Duration(ac.Outpost.RefreshIntervalS) * time.Second)
 	}
 }

--- a/internal/outpost/proxyv2/templates/error.html
+++ b/internal/outpost/proxyv2/templates/error.html
@ -48,9 +48,9 @@
                <footer class="pf-c-login__footer">
                    <ul class="pf-c-list pf-m-inline">
                        <li>
-                            <a rel="noopener noreferrer" target="_blank" href="https://goauthentik.io?utm_source=authentik_outpost&utm_campaign=proxy_error">
+                            <span>
                                Powered by authentik
-                            </a>
+                            </span>
                        </li>
                    </ul>
                </footer>
--- a/poetry.lock
+++ b/poetry.lock
@ -3391,19 +3391,19 @@ files = [

 [[package]]
 name = "pydantic"
-version = "2.8.0"
+version = "2.8.2"
 description = "Data validation using Python type hints"
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "pydantic-2.8.0-py3-none-any.whl", hash = "sha256:ead4f3a1e92386a734ca1411cb25d94147cf8778ed5be6b56749047676d6364e"},
-    {file = "pydantic-2.8.0.tar.gz", hash = "sha256:d970ffb9d030b710795878940bd0489842c638e7252fc4a19c3ae2f7da4d6141"},
+    {file = "pydantic-2.8.2-py3-none-any.whl", hash = "sha256:73ee9fddd406dc318b885c7a2eab8a6472b68b8fb5ba8150949fc3db939f23c8"},
+    {file = "pydantic-2.8.2.tar.gz", hash = "sha256:6f62c13d067b0755ad1c21a34bdd06c0c12625a22b0fc09c6b149816604f7c2a"},
 ]

 [package.dependencies]
 annotated-types = ">=0.4.0"
 email-validator = {version = ">=2.0.0", optional = true, markers = "extra == \"email\""}
-pydantic-core = "2.20.0"
+pydantic-core = "2.20.1"
 typing-extensions = {version = ">=4.6.1", markers = "python_version < \"3.13\""}

 [package.extras]
@ -3411,99 +3411,100 @@ email = ["email-validator (>=2.0.0)"]

 [[package]]
 name = "pydantic-core"
-version = "2.20.0"
+version = "2.20.1"
 description = "Core functionality for Pydantic validation and serialization"
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "pydantic_core-2.20.0-cp310-cp310-macosx_10_12_x86_64.whl", hash = "sha256:e9dcd7fb34f7bfb239b5fa420033642fff0ad676b765559c3737b91f664d4fa9"},
-    {file = "pydantic_core-2.20.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:649a764d9b0da29816889424697b2a3746963ad36d3e0968784ceed6e40c6355"},
-    {file = "pydantic_core-2.20.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:7701df088d0b05f3460f7ba15aec81ac8b0fb5690367dfd072a6c38cf5b7fdb5"},
-    {file = "pydantic_core-2.20.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:ab760f17c3e792225cdaef31ca23c0aea45c14ce80d8eff62503f86a5ab76bff"},
-    {file = "pydantic_core-2.20.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:cb1ad5b4d73cde784cf64580166568074f5ccd2548d765e690546cff3d80937d"},
-    {file = "pydantic_core-2.20.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:b81ec2efc04fc1dbf400647d4357d64fb25543bae38d2d19787d69360aad21c9"},
-    {file = "pydantic_core-2.20.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:c4a9732a5cad764ba37f3aa873dccb41b584f69c347a57323eda0930deec8e10"},
-    {file = "pydantic_core-2.20.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:6dc85b9e10cc21d9c1055f15684f76fa4facadddcb6cd63abab702eb93c98943"},
-    {file = "pydantic_core-2.20.0-cp310-cp310-musllinux_1_1_aarch64.whl", hash = "sha256:21d9f7e24f63fdc7118e6cc49defaab8c1d27570782f7e5256169d77498cf7c7"},
-    {file = "pydantic_core-2.20.0-cp310-cp310-musllinux_1_1_x86_64.whl", hash = "sha256:8b315685832ab9287e6124b5d74fc12dda31e6421d7f6b08525791452844bc2d"},
-    {file = "pydantic_core-2.20.0-cp310-none-win32.whl", hash = "sha256:c3dc8ec8b87c7ad534c75b8855168a08a7036fdb9deeeed5705ba9410721c84d"},
-    {file = "pydantic_core-2.20.0-cp310-none-win_amd64.whl", hash = "sha256:85770b4b37bb36ef93a6122601795231225641003e0318d23c6233c59b424279"},
-    {file = "pydantic_core-2.20.0-cp311-cp311-macosx_10_12_x86_64.whl", hash = "sha256:58e251bb5a5998f7226dc90b0b753eeffa720bd66664eba51927c2a7a2d5f32c"},
-    {file = "pydantic_core-2.20.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:78d584caac52c24240ef9ecd75de64c760bbd0e20dbf6973631815e3ef16ef8b"},
-    {file = "pydantic_core-2.20.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:5084ec9721f82bef5ff7c4d1ee65e1626783abb585f8c0993833490b63fe1792"},
-    {file = "pydantic_core-2.20.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:6d0f52684868db7c218437d260e14d37948b094493f2646f22d3dda7229bbe3f"},
-    {file = "pydantic_core-2.20.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:1def125d59a87fe451212a72ab9ed34c118ff771e5473fef4f2f95d8ede26d75"},
-    {file = "pydantic_core-2.20.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:b34480fd6778ab356abf1e9086a4ced95002a1e195e8d2fd182b0def9d944d11"},
-    {file = "pydantic_core-2.20.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:d42669d319db366cb567c3b444f43caa7ffb779bf9530692c6f244fc635a41eb"},
-    {file = "pydantic_core-2.20.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:53b06aea7a48919a254b32107647be9128c066aaa6ee6d5d08222325f25ef175"},
-    {file = "pydantic_core-2.20.0-cp311-cp311-musllinux_1_1_aarch64.whl", hash = "sha256:1f038156b696a1c39d763b2080aeefa87ddb4162c10aa9fabfefffc3dd8180fa"},
-    {file = "pydantic_core-2.20.0-cp311-cp311-musllinux_1_1_x86_64.whl", hash = "sha256:3f0f3a4a23717280a5ee3ac4fb1f81d6fde604c9ec5100f7f6f987716bb8c137"},
-    {file = "pydantic_core-2.20.0-cp311-none-win32.whl", hash = "sha256:316fe7c3fec017affd916a0c83d6f1ec697cbbbdf1124769fa73328e7907cc2e"},
-    {file = "pydantic_core-2.20.0-cp311-none-win_amd64.whl", hash = "sha256:2d06a7fa437f93782e3f32d739c3ec189f82fca74336c08255f9e20cea1ed378"},
-    {file = "pydantic_core-2.20.0-cp312-cp312-macosx_10_12_x86_64.whl", hash = "sha256:d6f8c49657f3eb7720ed4c9b26624063da14937fc94d1812f1e04a2204db3e17"},
-    {file = "pydantic_core-2.20.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:ad1bd2f377f56fec11d5cfd0977c30061cd19f4fa199bf138b200ec0d5e27eeb"},
-    {file = "pydantic_core-2.20.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:ed741183719a5271f97d93bbcc45ed64619fa38068aaa6e90027d1d17e30dc8d"},
-    {file = "pydantic_core-2.20.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:d82e5ed3a05f2dcb89c6ead2fd0dbff7ac09bc02c1b4028ece2d3a3854d049ce"},
-    {file = "pydantic_core-2.20.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:b2ba34a099576234671f2e4274e5bc6813b22e28778c216d680eabd0db3f7dad"},
-    {file = "pydantic_core-2.20.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:879ae6bb08a063b3e1b7ac8c860096d8fd6b48dd9b2690b7f2738b8c835e744b"},
-    {file = "pydantic_core-2.20.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:0b0eefc7633a04c0694340aad91fbfd1986fe1a1e0c63a22793ba40a18fcbdc8"},
-    {file = "pydantic_core-2.20.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:73deadd6fd8a23e2f40b412b3ac617a112143c8989a4fe265050fd91ba5c0608"},
-    {file = "pydantic_core-2.20.0-cp312-cp312-musllinux_1_1_aarch64.whl", hash = "sha256:35681445dc85446fb105943d81ae7569aa7e89de80d1ca4ac3229e05c311bdb1"},
-    {file = "pydantic_core-2.20.0-cp312-cp312-musllinux_1_1_x86_64.whl", hash = "sha256:0f6dd3612a3b9f91f2e63924ea18a4476656c6d01843ca20a4c09e00422195af"},
-    {file = "pydantic_core-2.20.0-cp312-none-win32.whl", hash = "sha256:7e37b6bb6e90c2b8412b06373c6978d9d81e7199a40e24a6ef480e8acdeaf918"},
-    {file = "pydantic_core-2.20.0-cp312-none-win_amd64.whl", hash = "sha256:7d4df13d1c55e84351fab51383520b84f490740a9f1fec905362aa64590b7a5d"},
-    {file = "pydantic_core-2.20.0-cp313-cp313-macosx_10_12_x86_64.whl", hash = "sha256:d43e7ab3b65e4dc35a7612cfff7b0fd62dce5bc11a7cd198310b57f39847fd6c"},
-    {file = "pydantic_core-2.20.0-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:7b6a24d7b5893392f2b8e3b7a0031ae3b14c6c1942a4615f0d8794fdeeefb08b"},
-    {file = "pydantic_core-2.20.0-cp313-cp313-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:b2f13c3e955a087c3ec86f97661d9f72a76e221281b2262956af381224cfc243"},
-    {file = "pydantic_core-2.20.0-cp313-cp313-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:72432fd6e868c8d0a6849869e004b8bcae233a3c56383954c228316694920b38"},
-    {file = "pydantic_core-2.20.0-cp313-cp313-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:d70a8ff2d4953afb4cbe6211f17268ad29c0b47e73d3372f40e7775904bc28fc"},
-    {file = "pydantic_core-2.20.0-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:8e49524917b8d3c2f42cd0d2df61178e08e50f5f029f9af1f402b3ee64574392"},
-    {file = "pydantic_core-2.20.0-cp313-cp313-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:a4f0f71653b1c1bad0350bc0b4cc057ab87b438ff18fa6392533811ebd01439c"},
-    {file = "pydantic_core-2.20.0-cp313-cp313-musllinux_1_1_aarch64.whl", hash = "sha256:16197e6f4fdecb9892ed2436e507e44f0a1aa2cff3b9306d1c879ea2f9200997"},
-    {file = "pydantic_core-2.20.0-cp313-cp313-musllinux_1_1_x86_64.whl", hash = "sha256:763602504bf640b3ded3bba3f8ed8a1cc2fc6a87b8d55c1c5689f428c49c947e"},
-    {file = "pydantic_core-2.20.0-cp313-none-win32.whl", hash = "sha256:a3f243f318bd9523277fa123b3163f4c005a3e8619d4b867064de02f287a564d"},
-    {file = "pydantic_core-2.20.0-cp313-none-win_amd64.whl", hash = "sha256:03aceaf6a5adaad3bec2233edc5a7905026553916615888e53154807e404545c"},
-    {file = "pydantic_core-2.20.0-cp38-cp38-macosx_10_12_x86_64.whl", hash = "sha256:d6f2d8b8da1f03f577243b07bbdd3412eee3d37d1f2fd71d1513cbc76a8c1239"},
-    {file = "pydantic_core-2.20.0-cp38-cp38-macosx_11_0_arm64.whl", hash = "sha256:a272785a226869416c6b3c1b7e450506152d3844207331f02f27173562c917e0"},
-    {file = "pydantic_core-2.20.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:efbb412d55a4ffe73963fed95c09ccb83647ec63b711c4b3752be10a56f0090b"},
-    {file = "pydantic_core-2.20.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:1e4f46189d8740561b43655263a41aac75ff0388febcb2c9ec4f1b60a0ec12f3"},
-    {file = "pydantic_core-2.20.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:87d3df115f4a3c8c5e4d5acf067d399c6466d7e604fc9ee9acbe6f0c88a0c3cf"},
-    {file = "pydantic_core-2.20.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:a340d2bdebe819d08f605e9705ed551c3feb97e4fd71822d7147c1e4bdbb9508"},
-    {file = "pydantic_core-2.20.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:616b9c2f882393d422ba11b40e72382fe975e806ad693095e9a3b67c59ea6150"},
-    {file = "pydantic_core-2.20.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:25c46bb2ff6084859bbcfdf4f1a63004b98e88b6d04053e8bf324e115398e9e7"},
-    {file = "pydantic_core-2.20.0-cp38-cp38-musllinux_1_1_aarch64.whl", hash = "sha256:23425eccef8f2c342f78d3a238c824623836c6c874d93c726673dbf7e56c78c0"},
-    {file = "pydantic_core-2.20.0-cp38-cp38-musllinux_1_1_x86_64.whl", hash = "sha256:52527e8f223ba29608d999d65b204676398009725007c9336651c2ec2d93cffc"},
-    {file = "pydantic_core-2.20.0-cp38-none-win32.whl", hash = "sha256:1c3c5b7f70dd19a6845292b0775295ea81c61540f68671ae06bfe4421b3222c2"},
-    {file = "pydantic_core-2.20.0-cp38-none-win_amd64.whl", hash = "sha256:8093473d7b9e908af1cef30025609afc8f5fd2a16ff07f97440fd911421e4432"},
-    {file = "pydantic_core-2.20.0-cp39-cp39-macosx_10_12_x86_64.whl", hash = "sha256:ee7785938e407418795e4399b2bf5b5f3cf6cf728077a7f26973220d58d885cf"},
-    {file = "pydantic_core-2.20.0-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:0e75794883d635071cf6b4ed2a5d7a1e50672ab7a051454c76446ef1ebcdcc91"},
-    {file = "pydantic_core-2.20.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:344e352c96e53b4f56b53d24728217c69399b8129c16789f70236083c6ceb2ac"},
-    {file = "pydantic_core-2.20.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:978d4123ad1e605daf1ba5e01d4f235bcf7b6e340ef07e7122e8e9cfe3eb61ab"},
-    {file = "pydantic_core-2.20.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:3c05eaf6c863781eb834ab41f5963604ab92855822a2062897958089d1335dad"},
-    {file = "pydantic_core-2.20.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:bc7e43b4a528ffca8c9151b6a2ca34482c2fdc05e6aa24a84b7f475c896fc51d"},
-    {file = "pydantic_core-2.20.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:658287a29351166510ebbe0a75c373600cc4367a3d9337b964dada8d38bcc0f4"},
-    {file = "pydantic_core-2.20.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:1dacf660d6de692fe351e8c806e7efccf09ee5184865893afbe8e59be4920b4a"},
-    {file = "pydantic_core-2.20.0-cp39-cp39-musllinux_1_1_aarch64.whl", hash = "sha256:3e147fc6e27b9a487320d78515c5f29798b539179f7777018cedf51b7749e4f4"},
-    {file = "pydantic_core-2.20.0-cp39-cp39-musllinux_1_1_x86_64.whl", hash = "sha256:c867230d715a3dd1d962c8d9bef0d3168994ed663e21bf748b6e3a529a129aab"},
-    {file = "pydantic_core-2.20.0-cp39-none-win32.whl", hash = "sha256:22b813baf0dbf612752d8143a2dbf8e33ccb850656b7850e009bad2e101fc377"},
-    {file = "pydantic_core-2.20.0-cp39-none-win_amd64.whl", hash = "sha256:3a7235b46c1bbe201f09b6f0f5e6c36b16bad3d0532a10493742f91fbdc8035f"},
-    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-macosx_10_12_x86_64.whl", hash = "sha256:cafde15a6f7feaec2f570646e2ffc5b73412295d29134a29067e70740ec6ee20"},
-    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl", hash = "sha256:2aec8eeea0b08fd6bc2213d8e86811a07491849fd3d79955b62d83e32fa2ad5f"},
-    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:840200827984f1c4e114008abc2f5ede362d6e11ed0b5931681884dd41852ff1"},
-    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:f8ea1d8b7df522e5ced34993c423c3bf3735c53df8b2a15688a2f03a7d678800"},
-    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:d5b8376a867047bf08910573deb95d3c8dfb976eb014ee24f3b5a61ccc5bee1b"},
-    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-musllinux_1_1_aarch64.whl", hash = "sha256:d08264b4460326cefacc179fc1411304d5af388a79910832835e6f641512358b"},
-    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-musllinux_1_1_x86_64.whl", hash = "sha256:7a3639011c2e8a9628466f616ed7fb413f30032b891898e10895a0a8b5857d6c"},
-    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-win_amd64.whl", hash = "sha256:05e83ce2f7eba29e627dd8066aa6c4c0269b2d4f889c0eba157233a353053cea"},
-    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-macosx_10_12_x86_64.whl", hash = "sha256:603a843fea76a595c8f661cd4da4d2281dff1e38c4a836a928eac1a2f8fe88e4"},
-    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl", hash = "sha256:ac76f30d5d3454f4c28826d891fe74d25121a346c69523c9810ebba43f3b1cec"},
-    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:22e3b1d4b1b3f6082849f9b28427ef147a5b46a6132a3dbaf9ca1baa40c88609"},
-    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:2761f71faed820e25ec62eacba670d1b5c2709bb131a19fcdbfbb09884593e5a"},
-    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:a0586cddbf4380e24569b8a05f234e7305717cc8323f50114dfb2051fcbce2a3"},
-    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-musllinux_1_1_aarch64.whl", hash = "sha256:b8c46a8cf53e849eea7090f331ae2202cd0f1ceb090b00f5902c423bd1e11805"},
-    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-musllinux_1_1_x86_64.whl", hash = "sha256:b4a085bd04af7245e140d1b95619fe8abb445a3d7fdf219b3f80c940853268ef"},
-    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-win_amd64.whl", hash = "sha256:116b326ac82c8b315e7348390f6d30bcfe6e688a7d3f1de50ff7bcc2042a23c2"},
-    {file = "pydantic_core-2.20.0.tar.gz", hash = "sha256:366be8e64e0cb63d87cf79b4e1765c0703dd6313c729b22e7b9e378db6b96877"},
+    {file = "pydantic_core-2.20.1-cp310-cp310-macosx_10_12_x86_64.whl", hash = "sha256:3acae97ffd19bf091c72df4d726d552c473f3576409b2a7ca36b2f535ffff4a3"},
+    {file = "pydantic_core-2.20.1-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:41f4c96227a67a013e7de5ff8f20fb496ce573893b7f4f2707d065907bffdbd6"},
+    {file = "pydantic_core-2.20.1-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:5f239eb799a2081495ea659d8d4a43a8f42cd1fe9ff2e7e436295c38a10c286a"},
+    {file = "pydantic_core-2.20.1-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:53e431da3fc53360db73eedf6f7124d1076e1b4ee4276b36fb25514544ceb4a3"},
+    {file = "pydantic_core-2.20.1-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:f1f62b2413c3a0e846c3b838b2ecd6c7a19ec6793b2a522745b0869e37ab5bc1"},
+    {file = "pydantic_core-2.20.1-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:5d41e6daee2813ecceea8eda38062d69e280b39df793f5a942fa515b8ed67953"},
+    {file = "pydantic_core-2.20.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:3d482efec8b7dc6bfaedc0f166b2ce349df0011f5d2f1f25537ced4cfc34fd98"},
+    {file = "pydantic_core-2.20.1-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:e93e1a4b4b33daed65d781a57a522ff153dcf748dee70b40c7258c5861e1768a"},
+    {file = "pydantic_core-2.20.1-cp310-cp310-musllinux_1_1_aarch64.whl", hash = "sha256:e7c4ea22b6739b162c9ecaaa41d718dfad48a244909fe7ef4b54c0b530effc5a"},
+    {file = "pydantic_core-2.20.1-cp310-cp310-musllinux_1_1_x86_64.whl", hash = "sha256:4f2790949cf385d985a31984907fecb3896999329103df4e4983a4a41e13e840"},
+    {file = "pydantic_core-2.20.1-cp310-none-win32.whl", hash = "sha256:5e999ba8dd90e93d57410c5e67ebb67ffcaadcea0ad973240fdfd3a135506250"},
+    {file = "pydantic_core-2.20.1-cp310-none-win_amd64.whl", hash = "sha256:512ecfbefef6dac7bc5eaaf46177b2de58cdf7acac8793fe033b24ece0b9566c"},
+    {file = "pydantic_core-2.20.1-cp311-cp311-macosx_10_12_x86_64.whl", hash = "sha256:d2a8fa9d6d6f891f3deec72f5cc668e6f66b188ab14bb1ab52422fe8e644f312"},
+    {file = "pydantic_core-2.20.1-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:175873691124f3d0da55aeea1d90660a6ea7a3cfea137c38afa0a5ffabe37b88"},
+    {file = "pydantic_core-2.20.1-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:37eee5b638f0e0dcd18d21f59b679686bbd18917b87db0193ae36f9c23c355fc"},
+    {file = "pydantic_core-2.20.1-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:25e9185e2d06c16ee438ed39bf62935ec436474a6ac4f9358524220f1b236e43"},
+    {file = "pydantic_core-2.20.1-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:150906b40ff188a3260cbee25380e7494ee85048584998c1e66df0c7a11c17a6"},
+    {file = "pydantic_core-2.20.1-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:8ad4aeb3e9a97286573c03df758fc7627aecdd02f1da04516a86dc159bf70121"},
+    {file = "pydantic_core-2.20.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:d3f3ed29cd9f978c604708511a1f9c2fdcb6c38b9aae36a51905b8811ee5cbf1"},
+    {file = "pydantic_core-2.20.1-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:b0dae11d8f5ded51699c74d9548dcc5938e0804cc8298ec0aa0da95c21fff57b"},
+    {file = "pydantic_core-2.20.1-cp311-cp311-musllinux_1_1_aarch64.whl", hash = "sha256:faa6b09ee09433b87992fb5a2859efd1c264ddc37280d2dd5db502126d0e7f27"},
+    {file = "pydantic_core-2.20.1-cp311-cp311-musllinux_1_1_x86_64.whl", hash = "sha256:9dc1b507c12eb0481d071f3c1808f0529ad41dc415d0ca11f7ebfc666e66a18b"},
+    {file = "pydantic_core-2.20.1-cp311-none-win32.whl", hash = "sha256:fa2fddcb7107e0d1808086ca306dcade7df60a13a6c347a7acf1ec139aa6789a"},
+    {file = "pydantic_core-2.20.1-cp311-none-win_amd64.whl", hash = "sha256:40a783fb7ee353c50bd3853e626f15677ea527ae556429453685ae32280c19c2"},
+    {file = "pydantic_core-2.20.1-cp312-cp312-macosx_10_12_x86_64.whl", hash = "sha256:595ba5be69b35777474fa07f80fc260ea71255656191adb22a8c53aba4479231"},
+    {file = "pydantic_core-2.20.1-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:a4f55095ad087474999ee28d3398bae183a66be4823f753cd7d67dd0153427c9"},
+    {file = "pydantic_core-2.20.1-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:f9aa05d09ecf4c75157197f27cdc9cfaeb7c5f15021c6373932bf3e124af029f"},
+    {file = "pydantic_core-2.20.1-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:e97fdf088d4b31ff4ba35db26d9cc472ac7ef4a2ff2badeabf8d727b3377fc52"},
+    {file = "pydantic_core-2.20.1-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:bc633a9fe1eb87e250b5c57d389cf28998e4292336926b0b6cdaee353f89a237"},
+    {file = "pydantic_core-2.20.1-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:d573faf8eb7e6b1cbbcb4f5b247c60ca8be39fe2c674495df0eb4318303137fe"},
+    {file = "pydantic_core-2.20.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:26dc97754b57d2fd00ac2b24dfa341abffc380b823211994c4efac7f13b9e90e"},
+    {file = "pydantic_core-2.20.1-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:33499e85e739a4b60c9dac710c20a08dc73cb3240c9a0e22325e671b27b70d24"},
+    {file = "pydantic_core-2.20.1-cp312-cp312-musllinux_1_1_aarch64.whl", hash = "sha256:bebb4d6715c814597f85297c332297c6ce81e29436125ca59d1159b07f423eb1"},
+    {file = "pydantic_core-2.20.1-cp312-cp312-musllinux_1_1_x86_64.whl", hash = "sha256:516d9227919612425c8ef1c9b869bbbee249bc91912c8aaffb66116c0b447ebd"},
+    {file = "pydantic_core-2.20.1-cp312-none-win32.whl", hash = "sha256:469f29f9093c9d834432034d33f5fe45699e664f12a13bf38c04967ce233d688"},
+    {file = "pydantic_core-2.20.1-cp312-none-win_amd64.whl", hash = "sha256:035ede2e16da7281041f0e626459bcae33ed998cca6a0a007a5ebb73414ac72d"},
+    {file = "pydantic_core-2.20.1-cp313-cp313-macosx_10_12_x86_64.whl", hash = "sha256:0827505a5c87e8aa285dc31e9ec7f4a17c81a813d45f70b1d9164e03a813a686"},
+    {file = "pydantic_core-2.20.1-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:19c0fa39fa154e7e0b7f82f88ef85faa2a4c23cc65aae2f5aea625e3c13c735a"},
+    {file = "pydantic_core-2.20.1-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:4aa223cd1e36b642092c326d694d8bf59b71ddddc94cdb752bbbb1c5c91d833b"},
+    {file = "pydantic_core-2.20.1-cp313-cp313-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:c336a6d235522a62fef872c6295a42ecb0c4e1d0f1a3e500fe949415761b8a19"},
+    {file = "pydantic_core-2.20.1-cp313-cp313-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:7eb6a0587eded33aeefea9f916899d42b1799b7b14b8f8ff2753c0ac1741edac"},
+    {file = "pydantic_core-2.20.1-cp313-cp313-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:70c8daf4faca8da5a6d655f9af86faf6ec2e1768f4b8b9d0226c02f3d6209703"},
+    {file = "pydantic_core-2.20.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:e9fa4c9bf273ca41f940bceb86922a7667cd5bf90e95dbb157cbb8441008482c"},
+    {file = "pydantic_core-2.20.1-cp313-cp313-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:11b71d67b4725e7e2a9f6e9c0ac1239bbc0c48cce3dc59f98635efc57d6dac83"},
+    {file = "pydantic_core-2.20.1-cp313-cp313-musllinux_1_1_aarch64.whl", hash = "sha256:270755f15174fb983890c49881e93f8f1b80f0b5e3a3cc1394a255706cabd203"},
+    {file = "pydantic_core-2.20.1-cp313-cp313-musllinux_1_1_x86_64.whl", hash = "sha256:c81131869240e3e568916ef4c307f8b99583efaa60a8112ef27a366eefba8ef0"},
+    {file = "pydantic_core-2.20.1-cp313-none-win32.whl", hash = "sha256:b91ced227c41aa29c672814f50dbb05ec93536abf8f43cd14ec9521ea09afe4e"},
+    {file = "pydantic_core-2.20.1-cp313-none-win_amd64.whl", hash = "sha256:65db0f2eefcaad1a3950f498aabb4875c8890438bc80b19362cf633b87a8ab20"},
+    {file = "pydantic_core-2.20.1-cp38-cp38-macosx_10_12_x86_64.whl", hash = "sha256:4745f4ac52cc6686390c40eaa01d48b18997cb130833154801a442323cc78f91"},
+    {file = "pydantic_core-2.20.1-cp38-cp38-macosx_11_0_arm64.whl", hash = "sha256:a8ad4c766d3f33ba8fd692f9aa297c9058970530a32c728a2c4bfd2616d3358b"},
+    {file = "pydantic_core-2.20.1-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:41e81317dd6a0127cabce83c0c9c3fbecceae981c8391e6f1dec88a77c8a569a"},
+    {file = "pydantic_core-2.20.1-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:04024d270cf63f586ad41fff13fde4311c4fc13ea74676962c876d9577bcc78f"},
+    {file = "pydantic_core-2.20.1-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:eaad4ff2de1c3823fddf82f41121bdf453d922e9a238642b1dedb33c4e4f98ad"},
+    {file = "pydantic_core-2.20.1-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:26ab812fa0c845df815e506be30337e2df27e88399b985d0bb4e3ecfe72df31c"},
+    {file = "pydantic_core-2.20.1-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:3c5ebac750d9d5f2706654c638c041635c385596caf68f81342011ddfa1e5598"},
+    {file = "pydantic_core-2.20.1-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:2aafc5a503855ea5885559eae883978c9b6d8c8993d67766ee73d82e841300dd"},
+    {file = "pydantic_core-2.20.1-cp38-cp38-musllinux_1_1_aarch64.whl", hash = "sha256:4868f6bd7c9d98904b748a2653031fc9c2f85b6237009d475b1008bfaeb0a5aa"},
+    {file = "pydantic_core-2.20.1-cp38-cp38-musllinux_1_1_x86_64.whl", hash = "sha256:aa2f457b4af386254372dfa78a2eda2563680d982422641a85f271c859df1987"},
+    {file = "pydantic_core-2.20.1-cp38-none-win32.whl", hash = "sha256:225b67a1f6d602de0ce7f6c1c3ae89a4aa25d3de9be857999e9124f15dab486a"},
+    {file = "pydantic_core-2.20.1-cp38-none-win_amd64.whl", hash = "sha256:6b507132dcfc0dea440cce23ee2182c0ce7aba7054576efc65634f080dbe9434"},
+    {file = "pydantic_core-2.20.1-cp39-cp39-macosx_10_12_x86_64.whl", hash = "sha256:b03f7941783b4c4a26051846dea594628b38f6940a2fdc0df00b221aed39314c"},
+    {file = "pydantic_core-2.20.1-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:1eedfeb6089ed3fad42e81a67755846ad4dcc14d73698c120a82e4ccf0f1f9f6"},
+    {file = "pydantic_core-2.20.1-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:635fee4e041ab9c479e31edda27fcf966ea9614fff1317e280d99eb3e5ab6fe2"},
+    {file = "pydantic_core-2.20.1-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:77bf3ac639c1ff567ae3b47f8d4cc3dc20f9966a2a6dd2311dcc055d3d04fb8a"},
+    {file = "pydantic_core-2.20.1-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:7ed1b0132f24beeec5a78b67d9388656d03e6a7c837394f99257e2d55b461611"},
+    {file = "pydantic_core-2.20.1-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:c6514f963b023aeee506678a1cf821fe31159b925c4b76fe2afa94cc70b3222b"},
+    {file = "pydantic_core-2.20.1-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:10d4204d8ca33146e761c79f83cc861df20e7ae9f6487ca290a97702daf56006"},
+    {file = "pydantic_core-2.20.1-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:2d036c7187b9422ae5b262badb87a20a49eb6c5238b2004e96d4da1231badef1"},
+    {file = "pydantic_core-2.20.1-cp39-cp39-musllinux_1_1_aarch64.whl", hash = "sha256:9ebfef07dbe1d93efb94b4700f2d278494e9162565a54f124c404a5656d7ff09"},
+    {file = "pydantic_core-2.20.1-cp39-cp39-musllinux_1_1_x86_64.whl", hash = "sha256:6b9d9bb600328a1ce523ab4f454859e9d439150abb0906c5a1983c146580ebab"},
+    {file = "pydantic_core-2.20.1-cp39-none-win32.whl", hash = "sha256:784c1214cb6dd1e3b15dd8b91b9a53852aed16671cc3fbe4786f4f1db07089e2"},
+    {file = "pydantic_core-2.20.1-cp39-none-win_amd64.whl", hash = "sha256:d2fe69c5434391727efa54b47a1e7986bb0186e72a41b203df8f5b0a19a4f669"},
+    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-macosx_10_12_x86_64.whl", hash = "sha256:a45f84b09ac9c3d35dfcf6a27fd0634d30d183205230a0ebe8373a0e8cfa0906"},
+    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-macosx_11_0_arm64.whl", hash = "sha256:d02a72df14dfdbaf228424573a07af10637bd490f0901cee872c4f434a735b94"},
+    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:d2b27e6af28f07e2f195552b37d7d66b150adbaa39a6d327766ffd695799780f"},
+    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:084659fac3c83fd674596612aeff6041a18402f1e1bc19ca39e417d554468482"},
+    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:242b8feb3c493ab78be289c034a1f659e8826e2233786e36f2893a950a719bb6"},
+    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-musllinux_1_1_aarch64.whl", hash = "sha256:38cf1c40a921d05c5edc61a785c0ddb4bed67827069f535d794ce6bcded919fc"},
+    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-musllinux_1_1_x86_64.whl", hash = "sha256:e0bbdd76ce9aa5d4209d65f2b27fc6e5ef1312ae6c5333c26db3f5ade53a1e99"},
+    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-win_amd64.whl", hash = "sha256:254ec27fdb5b1ee60684f91683be95e5133c994cc54e86a0b0963afa25c8f8a6"},
+    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-macosx_10_12_x86_64.whl", hash = "sha256:407653af5617f0757261ae249d3fba09504d7a71ab36ac057c938572d1bc9331"},
+    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-macosx_11_0_arm64.whl", hash = "sha256:c693e916709c2465b02ca0ad7b387c4f8423d1db7b4649c551f27a529181c5ad"},
+    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:5b5ff4911aea936a47d9376fd3ab17e970cc543d1b68921886e7f64bd28308d1"},
+    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:177f55a886d74f1808763976ac4efd29b7ed15c69f4d838bbd74d9d09cf6fa86"},
+    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:964faa8a861d2664f0c7ab0c181af0bea66098b1919439815ca8803ef136fc4e"},
+    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-musllinux_1_1_aarch64.whl", hash = "sha256:4dd484681c15e6b9a977c785a345d3e378d72678fd5f1f3c0509608da24f2ac0"},
+    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-musllinux_1_1_x86_64.whl", hash = "sha256:f6d6cff3538391e8486a431569b77921adfcdef14eb18fbf19b7c0a5294d4e6a"},
+    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-win_amd64.whl", hash = "sha256:a6d511cc297ff0883bc3708b465ff82d7560193169a8b93260f74ecb0a5e08a7"},
+    {file = "pydantic_core-2.20.1.tar.gz", hash = "sha256:26ca695eeee5f9f1aeeb211ffc12f10bcb6f71e2989988fda61dabd65db878d4"},
 ]

 [package.dependencies]
--- a/schema.yml
+++ b/schema.yml
@ -2682,10 +2682,6 @@ paths:
        name: name
        schema:
          type: string
-      - in: query
-        name: only_with_launch_url
-        schema:
-          type: boolean
      - name: ordering
        required: false
        in: query
@ -4541,6 +4537,119 @@ paths:
              schema:
                $ref: '#/components/schemas/GenericError'
          description: ''
+  /core/user_directory/:
+    get:
+      operationId: core_user_directory_list
+      description: User Directory Viewset
+      parameters:
+      - name: ordering
+        required: false
+        in: query
+        description: Which field to use when ordering the results.
+        schema:
+          type: string
+      - name: page
+        required: false
+        in: query
+        description: A page number within the paginated result set.
+        schema:
+          type: integer
+      - name: page_size
+        required: false
+        in: query
+        description: Number of results to return per page.
+        schema:
+          type: integer
+      - name: search
+        required: false
+        in: query
+        description: A search term.
+        schema:
+          type: string
+      tags:
+      - core
+      security:
+      - authentik: []
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/PaginatedUserDirectoryList'
+          description: ''
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ValidationError'
+          description: ''
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/GenericError'
+          description: ''
+  /core/user_directory/{id}/:
+    get:
+      operationId: core_user_directory_retrieve
+      description: User Directory Viewset
+      parameters:
+      - in: path
+        name: id
+        schema:
+          type: integer
+        description: A unique integer value identifying this User.
+        required: true
+      tags:
+      - core
+      security:
+      - authentik: []
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/UserDirectory'
+          description: ''
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ValidationError'
+          description: ''
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/GenericError'
+          description: ''
+  /core/user_directory/fields/:
+    get:
+      operationId: core_user_directory_fields_retrieve
+      description: Get user directory fields
+      tags:
+      - core
+      security:
+      - authentik: []
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/UserDirectoryFields'
+          description: ''
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ValidationError'
+          description: ''
+        '403':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/GenericError'
+          description: ''
  /core/users/:
    get:
      operationId: core_users_list
@ -36638,6 +36747,7 @@ components:
        href:
          type: string
          readOnly: true
+          nullable: true
        name:
          type: string
          readOnly: true
@ -39501,6 +39611,9 @@ components:
          allOf:
          - $ref: '#/components/schemas/ServiceConnection'
          readOnly: true
+        refresh_interval_s:
+          type: integer
+          readOnly: true
        token_identifier:
          type: string
          description: Get Token identifier
@ -39522,6 +39635,7 @@ components:
      - pk
      - providers
      - providers_obj
+      - refresh_interval_s
      - service_connection_obj
      - token_identifier
      - type
@ -40858,6 +40972,18 @@ components:
      required:
      - pagination
      - results
+    PaginatedUserDirectoryList:
+      type: object
+      properties:
+        pagination:
+          $ref: '#/components/schemas/Pagination'
+        results:
+          type: array
+          items:
+            $ref: '#/components/schemas/UserDirectory'
+      required:
+      - pagination
+      - results
    PaginatedUserList:
      type: object
      properties:
@ -43613,6 +43739,10 @@ components:
        impersonation:
          type: boolean
          description: Globally enable/disable impersonation.
+        user_directory_fields:
+          description: Fields to show in the user directory.
+        user_directory_attributes:
+          description: Attributes to show in the user directory.
        default_token_duration:
          type: string
          minLength: 1
@ -46900,6 +47030,10 @@ components:
        impersonation:
          type: boolean
          description: Globally enable/disable impersonation.
+        user_directory_fields:
+          description: Fields to show in the user directory.
+        user_directory_attributes:
+          description: Attributes to show in the user directory.
        default_token_duration:
          type: string
          description: Default token duration
@ -46939,6 +47073,10 @@ components:
        impersonation:
          type: boolean
          description: Globally enable/disable impersonation.
+        user_directory_fields:
+          description: Fields to show in the user directory.
+        user_directory_attributes:
+          description: Attributes to show in the user directory.
        default_token_duration:
          type: string
          minLength: 1
@ -48031,6 +48169,44 @@ components:
            $ref: '#/components/schemas/FlowSetRequest'
      required:
      - name
+    UserDirectory:
+      type: object
+      description: User Directory Serializer
+      properties:
+        pk:
+          type: integer
+          readOnly: true
+          title: ID
+        user_fields:
+          type: object
+          additionalProperties: {}
+          description: Get directory fields
+          readOnly: true
+        attributes:
+          type: object
+          additionalProperties: {}
+          description: Get directory attributes
+          readOnly: true
+      required:
+      - attributes
+      - pk
+      - user_fields
+    UserDirectoryFields:
+      type: object
+      properties:
+        fields:
+          type: array
+          items:
+            type: string
+        attributes:
+          type: array
+          items:
+            type: object
+            additionalProperties:
+              type: string
+      required:
+      - attributes
+      - fields
    UserFieldsEnum:
      enum:
      - email
--- a/tests/e2e/test_source_oauth_oauth2.py
+++ b/tests/e2e/test_source_oauth_oauth2.py
@ -1,5 +1,6 @@
 """test OAuth Source"""

+from json import loads
 from pathlib import Path
 from time import sleep
 from typing import Any
@ -194,3 +195,41 @@ class TestSourceOAuth2(SeleniumTestCase):
        self.driver.get(self.if_user_url("/settings"))

        self.assert_user(User(username="foo", name="admin", email="admin@example.com"))
+
+    @retry()
+    @apply_blueprint(
+        "default/flow-default-authentication-flow.yaml",
+        "default/flow-default-invalidation-flow.yaml",
+    )
+    @apply_blueprint(
+        "default/flow-default-source-authentication.yaml",
+        "default/flow-default-source-enrollment.yaml",
+        "default/flow-default-source-pre-authentication.yaml",
+    )
+    def test_oauth_link(self):
+        """test OAuth Source link OIDC"""
+        self.create_objects()
+        self.driver.get(self.live_server_url)
+        self.login()
+
+        self.driver.get(
+            self.url("authentik_sources_oauth:oauth-client-login", source_slug=self.slug)
+        )
+
+        # Now we should be at the IDP, wait for the login field
+        self.wait.until(ec.presence_of_element_located((By.ID, "login")))
+        self.driver.find_element(By.ID, "login").send_keys("admin@example.com")
+        self.driver.find_element(By.ID, "password").send_keys("password")
+        self.driver.find_element(By.ID, "password").send_keys(Keys.ENTER)
+
+        # Wait until we're logged in
+        self.wait.until(ec.presence_of_element_located((By.CSS_SELECTOR, "button[type=submit]")))
+        self.driver.find_element(By.CSS_SELECTOR, "button[type=submit]").click()
+
+        self.driver.get(self.url("authentik_api:usersourceconnection-list") + "?format=json")
+        body_json = loads(self.driver.find_element(By.CSS_SELECTOR, "pre").text)
+        results = body_json["results"]
+        self.assertEqual(len(results), 1)
+        connection = results[0]
+        self.assertEqual(connection["source"]["slug"], self.slug)
+        self.assertEqual(connection["user"], self.user.pk)
--- a/tests/wdio/package-lock.json
+++ b/tests/wdio/package-lock.json
@ -12,8 +12,8 @@
                "@trivago/prettier-plugin-sort-imports": "^4.3.0",
                "@typescript-eslint/eslint-plugin": "^7.5.0",
                "@typescript-eslint/parser": "^7.5.0",
-                "@wdio/cli": "^8.39.0",
-                "@wdio/local-runner": "^8.39.0",
+                "@wdio/cli": "^8.39.1",
+                "@wdio/local-runner": "^8.39.1",
                "@wdio/mocha-framework": "^8.39.0",
                "@wdio/spec-reporter": "^8.39.0",
                "eslint": "^8.57.0",
@ -1189,15 +1189,15 @@
            }
        },
        "node_modules/@wdio/cli": {
-            "version": "8.39.0",
-            "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-8.39.0.tgz",
-            "integrity": "sha512-kAd+8TYjJWRN6gZaRGiSu6Yj3k4+ULRt2NWAgNtGhnr0/Rwlr3j9bjAIhXGL574VqrH+rSnrevDdeGuLcZa1xg==",
+            "version": "8.39.1",
+            "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-8.39.1.tgz",
+            "integrity": "sha512-CUze/nbOMzgSEp+Qo27dnM5IhlOPAiBJCPX3xO85/kjweqqxmAB1QBKww1Mz9YlNIXineaHrkgqlUQIvEqOJdQ==",
            "dev": true,
            "dependencies": {
                "@types/node": "^20.1.1",
                "@vitest/snapshot": "^1.2.1",
                "@wdio/config": "8.39.0",
-                "@wdio/globals": "8.39.0",
+                "@wdio/globals": "8.39.1",
                "@wdio/logger": "8.38.0",
                "@wdio/protocols": "8.38.0",
                "@wdio/types": "8.39.0",
@ -1216,7 +1216,7 @@
                "lodash.union": "^4.6.0",
                "read-pkg-up": "10.0.0",
                "recursive-readdir": "^2.2.3",
-                "webdriverio": "8.39.0",
+                "webdriverio": "8.39.1",
                "yargs": "^17.7.2"
            },
            "bin": {
@ -1257,28 +1257,28 @@
            }
        },
        "node_modules/@wdio/globals": {
-            "version": "8.39.0",
-            "resolved": "https://registry.npmjs.org/@wdio/globals/-/globals-8.39.0.tgz",
-            "integrity": "sha512-qZo6JjRCIOtdvba6fdSqj6b91TnWXD6rmamyud93FTqbcspnhBvr8lmgOs5wnslTKeeTTigCjpsT310b4/AyHA==",
+            "version": "8.39.1",
+            "resolved": "https://registry.npmjs.org/@wdio/globals/-/globals-8.39.1.tgz",
+            "integrity": "sha512-kNb1TlxI8Le/tsOiw7CMQcG0+ZGyxk9ZDO/PQLxkJvjo/q2QmiBcgaNMPuf+j1ABETcQK4bI7QtiT5uZ+f2AGA==",
            "dev": true,
            "engines": {
                "node": "^16.13 || >=18"
            },
            "optionalDependencies": {
                "expect-webdriverio": "^4.11.2",
-                "webdriverio": "8.39.0"
+                "webdriverio": "8.39.1"
            }
        },
        "node_modules/@wdio/local-runner": {
-            "version": "8.39.0",
-            "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-8.39.0.tgz",
-            "integrity": "sha512-TSGJVVWqshH7IO13OKw7G/364q3FczZDEh4h6bYe+GAs91KpZrEhZanyALgjh5F3crWtlffX+GA2HUwpi8X0sA==",
+            "version": "8.39.1",
+            "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-8.39.1.tgz",
+            "integrity": "sha512-VYRD7pSkl5JTsYXroM65yb+vJVn9pFJf0XZMB7Xj+WVUqGXuVkZ+XybsQetUlhruXvHIsPdiFj12V1tMyaUHrQ==",
            "dev": true,
            "dependencies": {
                "@types/node": "^20.1.0",
                "@wdio/logger": "8.38.0",
                "@wdio/repl": "8.24.12",
-                "@wdio/runner": "8.39.0",
+                "@wdio/runner": "8.39.1",
                "@wdio/types": "8.39.0",
                "async-exit-hook": "^2.0.1",
                "split2": "^4.1.0",
@ -1367,14 +1367,14 @@
            }
        },
        "node_modules/@wdio/runner": {
-            "version": "8.39.0",
-            "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-8.39.0.tgz",
-            "integrity": "sha512-M1ixrrCtuwxHVzwsOKGMWBZCteafV0ztoS9+evMWGQtj0ZEsmhjAhWR3n2nZftt24vWOs+eNLGe2p+IO9Sm9bA==",
+            "version": "8.39.1",
+            "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-8.39.1.tgz",
+            "integrity": "sha512-hCGI+TSAyb14UtdDjswI5AAdW1CZMi6di+rDZ6ml43hQyHc6sw+74CXI8dwoJ29dcTzbg7QCJZZXV1qMn0kh2w==",
            "dev": true,
            "dependencies": {
                "@types/node": "^20.11.28",
                "@wdio/config": "8.39.0",
-                "@wdio/globals": "8.39.0",
+                "@wdio/globals": "8.39.1",
                "@wdio/logger": "8.38.0",
                "@wdio/types": "8.39.0",
                "@wdio/utils": "8.39.0",
@ -1382,7 +1382,7 @@
                "expect-webdriverio": "^4.12.0",
                "gaze": "^1.1.3",
                "webdriver": "8.39.0",
-                "webdriverio": "8.39.0"
+                "webdriverio": "8.39.1"
            },
            "engines": {
                "node": "^16.13 || >=18"
@ -8991,9 +8991,9 @@
            }
        },
        "node_modules/webdriverio": {
-            "version": "8.39.0",
-            "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-8.39.0.tgz",
-            "integrity": "sha512-pDpGu0V+TL1LkXPode67m3s+IPto4TcmcOzMpzFgu2oeLMBornoLN3yQSFR1fjZd1gK4UfnG3lJ4poTGOfbWfw==",
+            "version": "8.39.1",
+            "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-8.39.1.tgz",
+            "integrity": "sha512-dPwLgLNtP+l4vnybz+YFxxH8nBKOP7j6VVzKtfDyTLDQg9rz3U8OA4xMMQCBucnrVXy3KcKxGqlnMa+c4IfWCQ==",
            "dev": true,
            "dependencies": {
                "@types/node": "^20.1.0",
--- a/tests/wdio/package.json
+++ b/tests/wdio/package.json
@ -6,8 +6,8 @@
        "@trivago/prettier-plugin-sort-imports": "^4.3.0",
        "@typescript-eslint/eslint-plugin": "^7.5.0",
        "@typescript-eslint/parser": "^7.5.0",
-        "@wdio/cli": "^8.39.0",
-        "@wdio/local-runner": "^8.39.0",
+        "@wdio/cli": "^8.39.1",
+        "@wdio/local-runner": "^8.39.1",
        "@wdio/mocha-framework": "^8.39.0",
        "@wdio/spec-reporter": "^8.39.0",
        "eslint": "^8.57.0",
--- a/web/package-lock.json
+++ b/web/package-lock.json
@ -18,7 +18,7 @@
                "@codemirror/theme-one-dark": "^6.1.2",
                "@formatjs/intl-listformat": "^7.5.7",
                "@fortawesome/fontawesome-free": "^6.5.2",
-                "@goauthentik/api": "^2024.6.0-1720022184",
+                "@goauthentik/api": "^2024.6.0-1720200294",
                "@lit/context": "^1.1.2",
                "@lit/localize": "^0.12.1",
                "@lit/reactive-element": "^2.0.4",
@ -26,7 +26,7 @@
                "@open-wc/lit-helpers": "^0.7.0",
                "@patternfly/elements": "^3.0.2",
                "@patternfly/patternfly": "^4.224.2",
-                "@sentry/browser": "^8.13.0",
+                "@sentry/browser": "^8.15.0",
                "@webcomponents/webcomponentsjs": "^2.8.0",
                "base64-js": "^1.5.1",
                "chart.js": "^4.4.3",
@ -76,8 +76,8 @@
                "@types/showdown": "^2.0.6",
                "@typescript-eslint/eslint-plugin": "^7.14.0",
                "@typescript-eslint/parser": "^7.14.0",
-                "@wdio/browser-runner": "^8.36.1",
-                "@wdio/cli": "^8.36.1",
+                "@wdio/browser-runner": "^8.39.1",
+                "@wdio/cli": "^8.39.1",
                "@wdio/mocha-framework": "^8.36.1",
                "@wdio/spec-reporter": "^8.36.1",
                "babel-plugin-macros": "^3.1.0",
@ -2798,9 +2798,9 @@
            }
        },
        "node_modules/@goauthentik/api": {
-            "version": "2024.6.0-1720022184",
-            "resolved": "https://registry.npmjs.org/@goauthentik/api/-/api-2024.6.0-1720022184.tgz",
-            "integrity": "sha512-7eFfZ2AmE1ejHJBuLhZJXJYASA/X+WlzFCzfSo1vmU3Vfz568o6I1PSck3gQLQqtoPIUD5QZQvi8sGEinbmFBQ=="
+            "version": "2024.6.0-1720200294",
+            "resolved": "https://registry.npmjs.org/@goauthentik/api/-/api-2024.6.0-1720200294.tgz",
+            "integrity": "sha512-qGpI+0BpsHWlO8waj89q+6SWjVVuRtYqdmpSIrKFsZt9GLNXCvIAvgS5JI1Sq2z1uWK/8kLNZKDocI/XagqMPQ=="
        },
        "node_modules/@hcaptcha/types": {
            "version": "1.0.3",
@ -5229,102 +5229,102 @@
            ]
        },
        "node_modules/@sentry-internal/browser-utils": {
-            "version": "8.13.0",
-            "resolved": "https://registry.npmjs.org/@sentry-internal/browser-utils/-/browser-utils-8.13.0.tgz",
-            "integrity": "sha512-lqq8BYbbs9KTlDuyB5NjdZB6P/llqQs32KUgaCQ/k5DFB4Zf56+BFHXObnMHxwx375X1uixtnEphagWZa+nsLQ==",
+            "version": "8.15.0",
+            "resolved": "https://registry.npmjs.org/@sentry-internal/browser-utils/-/browser-utils-8.15.0.tgz",
+            "integrity": "sha512-DquySUQRnmMyRbfHH9t/JDwPMsVaCOCzV/6XmMb7s4FDYTWSCSpumJEYfiyJCuI9NeebPHZWF7LZCHH4glSAJQ==",
            "dependencies": {
-                "@sentry/core": "8.13.0",
-                "@sentry/types": "8.13.0",
-                "@sentry/utils": "8.13.0"
+                "@sentry/core": "8.15.0",
+                "@sentry/types": "8.15.0",
+                "@sentry/utils": "8.15.0"
            },
            "engines": {
                "node": ">=14.18"
            }
        },
        "node_modules/@sentry-internal/feedback": {
-            "version": "8.13.0",
-            "resolved": "https://registry.npmjs.org/@sentry-internal/feedback/-/feedback-8.13.0.tgz",
-            "integrity": "sha512-YyJ6SzpTonixvguAg0H9vkEp7Jq8ZeVY8M4n47ClR0+TtaAUp04ZhcJpHKF7PwBIAzc7DRr2XP112tmWgiVEcg==",
+            "version": "8.15.0",
+            "resolved": "https://registry.npmjs.org/@sentry-internal/feedback/-/feedback-8.15.0.tgz",
+            "integrity": "sha512-W6XiLpw7fL1A0KaHxIH45nbC2M8uagrMoBnMZ1NcqE4AoSe7VtoDqPsLvQ7MgMXwsBYiPu2AItRnKoGFS/dUBA==",
            "dependencies": {
-                "@sentry/core": "8.13.0",
-                "@sentry/types": "8.13.0",
-                "@sentry/utils": "8.13.0"
+                "@sentry/core": "8.15.0",
+                "@sentry/types": "8.15.0",
+                "@sentry/utils": "8.15.0"
            },
            "engines": {
                "node": ">=14.18"
            }
        },
        "node_modules/@sentry-internal/replay": {
-            "version": "8.13.0",
-            "resolved": "https://registry.npmjs.org/@sentry-internal/replay/-/replay-8.13.0.tgz",
-            "integrity": "sha512-DJ1jF/Pab0FH4SeCvSGCnGAu/s0wJvhBWM5VjQp7Jjmcfunp+R3vJibqU8gAVZU1nYRLaqprLdIXrSyP2Km8nQ==",
+            "version": "8.15.0",
+            "resolved": "https://registry.npmjs.org/@sentry-internal/replay/-/replay-8.15.0.tgz",
+            "integrity": "sha512-d4cA8pjr0CGHkTe8ulqMROYCX3bMHBAi/7DJBr11i4MdNCUl+/pndA9C5TiFv0sFzk/hDZQZS3J+MfGp56ZQHw==",
            "dependencies": {
-                "@sentry-internal/browser-utils": "8.13.0",
-                "@sentry/core": "8.13.0",
-                "@sentry/types": "8.13.0",
-                "@sentry/utils": "8.13.0"
+                "@sentry-internal/browser-utils": "8.15.0",
+                "@sentry/core": "8.15.0",
+                "@sentry/types": "8.15.0",
+                "@sentry/utils": "8.15.0"
            },
            "engines": {
                "node": ">=14.18"
            }
        },
        "node_modules/@sentry-internal/replay-canvas": {
-            "version": "8.13.0",
-            "resolved": "https://registry.npmjs.org/@sentry-internal/replay-canvas/-/replay-canvas-8.13.0.tgz",
-            "integrity": "sha512-lPlfWVIHX+gW4S8a/UOVutuqMyQhlkNUAay0W21MVhZJT5Mtj0p21D/Cz7nrOQRDIiLNq90KAGK2tLxx5NkiWA==",
+            "version": "8.15.0",
+            "resolved": "https://registry.npmjs.org/@sentry-internal/replay-canvas/-/replay-canvas-8.15.0.tgz",
+            "integrity": "sha512-gfezIuvf94wY748l5wSy4pRm+45GjiBm0Q/KLnXROLZKmbI7MTJrdQXA2Oxut848iISTQo4/LimecFnBDiaGtw==",
            "dependencies": {
-                "@sentry-internal/replay": "8.13.0",
-                "@sentry/core": "8.13.0",
-                "@sentry/types": "8.13.0",
-                "@sentry/utils": "8.13.0"
+                "@sentry-internal/replay": "8.15.0",
+                "@sentry/core": "8.15.0",
+                "@sentry/types": "8.15.0",
+                "@sentry/utils": "8.15.0"
            },
            "engines": {
                "node": ">=14.18"
            }
        },
        "node_modules/@sentry/browser": {
-            "version": "8.13.0",
-            "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-8.13.0.tgz",
-            "integrity": "sha512-/tp7HZ5qjwDLtwooPMoexdAi2PG7gMNY0bHeMlwy20hs8mclC8RW8ZiJA6czXHfgnbmvxfrHaY53IJyz//JnlA==",
+            "version": "8.15.0",
+            "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-8.15.0.tgz",
+            "integrity": "sha512-Tx4eFgAqa8tedg30+Cgr7qFocWHise8p3jb/RSNs+TCEBXLVtQidHHVZMO71FWUAC86D7woo5hMKTt+UmB8pgg==",
            "dependencies": {
-                "@sentry-internal/browser-utils": "8.13.0",
-                "@sentry-internal/feedback": "8.13.0",
-                "@sentry-internal/replay": "8.13.0",
-                "@sentry-internal/replay-canvas": "8.13.0",
-                "@sentry/core": "8.13.0",
-                "@sentry/types": "8.13.0",
-                "@sentry/utils": "8.13.0"
+                "@sentry-internal/browser-utils": "8.15.0",
+                "@sentry-internal/feedback": "8.15.0",
+                "@sentry-internal/replay": "8.15.0",
+                "@sentry-internal/replay-canvas": "8.15.0",
+                "@sentry/core": "8.15.0",
+                "@sentry/types": "8.15.0",
+                "@sentry/utils": "8.15.0"
            },
            "engines": {
                "node": ">=14.18"
            }
        },
        "node_modules/@sentry/core": {
-            "version": "8.13.0",
-            "resolved": "https://registry.npmjs.org/@sentry/core/-/core-8.13.0.tgz",
-            "integrity": "sha512-N9Qg4ZGxZWp8eb2eUUHVVKgjBLtFIjS805nG92s6yJmkvOpKm6mLtcUaT/iDf3Hta6nG+xRkhbE3r+Z4cbXG8w==",
+            "version": "8.15.0",
+            "resolved": "https://registry.npmjs.org/@sentry/core/-/core-8.15.0.tgz",
+            "integrity": "sha512-RjuEq/34VjNmxlfzq+485jG63/Vst90svQapLwVgBZWgM8jxrLyCRXHU0wfBc7/1IhV/T9GYAplrJQAkG4J9Ow==",
            "dependencies": {
-                "@sentry/types": "8.13.0",
-                "@sentry/utils": "8.13.0"
+                "@sentry/types": "8.15.0",
+                "@sentry/utils": "8.15.0"
            },
            "engines": {
                "node": ">=14.18"
            }
        },
        "node_modules/@sentry/types": {
-            "version": "8.13.0",
-            "resolved": "https://registry.npmjs.org/@sentry/types/-/types-8.13.0.tgz",
-            "integrity": "sha512-r63s/H5gvQnQM9tTGBXz2xErUbxZALh4e2Lg/1aHj4zIvGLBjA2z5qWsh6TEZYbpmgAyGShLDr6+rWeUVf9yBQ==",
+            "version": "8.15.0",
+            "resolved": "https://registry.npmjs.org/@sentry/types/-/types-8.15.0.tgz",
+            "integrity": "sha512-AZc9nSHKuNH8P/7ihmq5fbZBiQ7Gr35kJq9Tad9eVuOgL8D+2b6Vqu/61ljVVlMFI0tBGFsSkWJ/00PfBcVKWg==",
            "engines": {
                "node": ">=14.18"
            }
        },
        "node_modules/@sentry/utils": {
-            "version": "8.13.0",
-            "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-8.13.0.tgz",
-            "integrity": "sha512-PxV0v9VbGWH9zP37P5w2msLUFDr287nYjoY2XVF+RSolyiTs1CQNI5ZMUO3o4MsSac/dpXxjyrZXQd72t/jRYA==",
+            "version": "8.15.0",
+            "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-8.15.0.tgz",
+            "integrity": "sha512-1ISmyYFuRHJbGun0gUYscyz1aP6RfILUldNAUwQwF0Ycu8YOi4n8uwJRN0aov6cCi41tnZWOMBagSeLxbJiJgQ==",
            "dependencies": {
-                "@sentry/types": "8.13.0"
+                "@sentry/types": "8.15.0"
            },
            "engines": {
                "node": ">=14.18"
@ -9987,20 +9987,21 @@
            "license": "MIT"
        },
        "node_modules/@wdio/browser-runner": {
-            "version": "8.39.0",
+            "version": "8.39.1",
+            "resolved": "https://registry.npmjs.org/@wdio/browser-runner/-/browser-runner-8.39.1.tgz",
+            "integrity": "sha512-807kCVDVBRWp3r1f8mOBHDZbzH3h2aSM5KG0HKguBokBSK3iq3sYA8kCkf42ew7efMTBbQdYOTRFW4sIqrNDDQ==",
            "dev": true,
-            "license": "MIT",
            "dependencies": {
                "@babel/plugin-proposal-class-properties": "^7.18.6",
                "@originjs/vite-plugin-commonjs": "^1.0.3",
                "@types/istanbul-lib-source-maps": "^4.0.1",
                "@vitest/spy": "^1.0.1",
-                "@wdio/globals": "8.39.0",
-                "@wdio/local-runner": "8.39.0",
+                "@wdio/globals": "8.39.1",
+                "@wdio/local-runner": "8.39.1",
                "@wdio/logger": "8.38.0",
                "@wdio/mocha-framework": "8.39.0",
                "@wdio/protocols": "8.38.0",
-                "@wdio/runner": "8.39.0",
+                "@wdio/runner": "8.39.1",
                "@wdio/types": "8.39.0",
                "@wdio/utils": "8.39.0",
                "deepmerge-ts": "^5.0.0",
@ -10021,7 +10022,7 @@
                "vite-plugin-istanbul": "^6.0.0",
                "vite-plugin-top-level-await": "^1.3.0",
                "webdriver": "8.39.0",
-                "webdriverio": "8.39.0"
+                "webdriverio": "8.39.1"
            },
            "engines": {
                "node": "^16.13 || >=18"
@ -10500,14 +10501,15 @@
            }
        },
        "node_modules/@wdio/cli": {
-            "version": "8.39.0",
+            "version": "8.39.1",
+            "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-8.39.1.tgz",
+            "integrity": "sha512-CUze/nbOMzgSEp+Qo27dnM5IhlOPAiBJCPX3xO85/kjweqqxmAB1QBKww1Mz9YlNIXineaHrkgqlUQIvEqOJdQ==",
            "dev": true,
-            "license": "MIT",
            "dependencies": {
                "@types/node": "^20.1.1",
                "@vitest/snapshot": "^1.2.1",
                "@wdio/config": "8.39.0",
-                "@wdio/globals": "8.39.0",
+                "@wdio/globals": "8.39.1",
                "@wdio/logger": "8.38.0",
                "@wdio/protocols": "8.38.0",
                "@wdio/types": "8.39.0",
@ -10526,7 +10528,7 @@
                "lodash.union": "^4.6.0",
                "read-pkg-up": "10.0.0",
                "recursive-readdir": "^2.2.3",
-                "webdriverio": "8.39.0",
+                "webdriverio": "8.39.1",
                "yargs": "^17.7.2"
            },
            "bin": {
@ -10897,26 +10899,28 @@
            }
        },
        "node_modules/@wdio/globals": {
-            "version": "8.39.0",
+            "version": "8.39.1",
+            "resolved": "https://registry.npmjs.org/@wdio/globals/-/globals-8.39.1.tgz",
+            "integrity": "sha512-kNb1TlxI8Le/tsOiw7CMQcG0+ZGyxk9ZDO/PQLxkJvjo/q2QmiBcgaNMPuf+j1ABETcQK4bI7QtiT5uZ+f2AGA==",
            "dev": true,
-            "license": "MIT",
            "engines": {
                "node": "^16.13 || >=18"
            },
            "optionalDependencies": {
                "expect-webdriverio": "^4.11.2",
-                "webdriverio": "8.39.0"
+                "webdriverio": "8.39.1"
            }
        },
        "node_modules/@wdio/local-runner": {
-            "version": "8.39.0",
+            "version": "8.39.1",
+            "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-8.39.1.tgz",
+            "integrity": "sha512-VYRD7pSkl5JTsYXroM65yb+vJVn9pFJf0XZMB7Xj+WVUqGXuVkZ+XybsQetUlhruXvHIsPdiFj12V1tMyaUHrQ==",
            "dev": true,
-            "license": "MIT",
            "dependencies": {
                "@types/node": "^20.1.0",
                "@wdio/logger": "8.38.0",
                "@wdio/repl": "8.24.12",
-                "@wdio/runner": "8.39.0",
+                "@wdio/runner": "8.39.1",
                "@wdio/types": "8.39.0",
                "async-exit-hook": "^2.0.1",
                "split2": "^4.1.0",
@ -10999,13 +11003,14 @@
            }
        },
        "node_modules/@wdio/runner": {
-            "version": "8.39.0",
+            "version": "8.39.1",
+            "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-8.39.1.tgz",
+            "integrity": "sha512-hCGI+TSAyb14UtdDjswI5AAdW1CZMi6di+rDZ6ml43hQyHc6sw+74CXI8dwoJ29dcTzbg7QCJZZXV1qMn0kh2w==",
            "dev": true,
-            "license": "MIT",
            "dependencies": {
                "@types/node": "^20.11.28",
                "@wdio/config": "8.39.0",
-                "@wdio/globals": "8.39.0",
+                "@wdio/globals": "8.39.1",
                "@wdio/logger": "8.38.0",
                "@wdio/types": "8.39.0",
                "@wdio/utils": "8.39.0",
@ -11013,7 +11018,7 @@
                "expect-webdriverio": "^4.12.0",
                "gaze": "^1.1.3",
                "webdriver": "8.39.0",
-                "webdriverio": "8.39.0"
+                "webdriverio": "8.39.1"
            },
            "engines": {
                "node": "^16.13 || >=18"
@ -15971,8 +15976,9 @@
        },
        "node_modules/gaze": {
            "version": "1.1.3",
+            "resolved": "https://registry.npmjs.org/gaze/-/gaze-1.1.3.tgz",
+            "integrity": "sha512-BRdNm8hbWzFzWHERTrejLqwHDfS4GibPoq5wjTPIoJHoBtKGPg3xAFfxmM+9ztbXelxcf2hwQcaz1PtmFeue8g==",
            "dev": true,
-            "license": "MIT",
            "dependencies": {
                "globule": "^1.0.0"
            },
@ -16315,8 +16321,9 @@
        },
        "node_modules/globule": {
            "version": "1.3.4",
+            "resolved": "https://registry.npmjs.org/globule/-/globule-1.3.4.tgz",
+            "integrity": "sha512-OPTIfhMBh7JbBYDpa5b+Q5ptmMWKwcNcFSR/0c6t8V4f3ZAVBEsKNY37QdVqmLRYSMhOUGYrY0QhSoEpzGr/Eg==",
            "dev": true,
-            "license": "MIT",
            "dependencies": {
                "glob": "~7.1.1",
                "lodash": "^4.17.21",
@ -16328,8 +16335,9 @@
        },
        "node_modules/globule/node_modules/brace-expansion": {
            "version": "1.1.11",
+            "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
+            "integrity": "sha512-iCuPHDFgrHX7H2vEI/5xpz07zSHB00TpugqhmYtVmMO6518mCuRMoOYFldEBl0g187ufozdaHgWKcYFb61qGiA==",
            "dev": true,
-            "license": "MIT",
            "dependencies": {
                "balanced-match": "^1.0.0",
                "concat-map": "0.0.1"
@ -16337,8 +16345,10 @@
        },
        "node_modules/globule/node_modules/glob": {
            "version": "7.1.7",
+            "resolved": "https://registry.npmjs.org/glob/-/glob-7.1.7.tgz",
+            "integrity": "sha512-OvD9ENzPLbegENnYP5UUfJIirTg4+XwMWGaQfQTY0JenxNvvIKP3U3/tAQSPIu/lHxXYSZmpXlUHeqAIdKzBLQ==",
+            "deprecated": "Glob versions prior to v9 are no longer supported",
            "dev": true,
-            "license": "ISC",
            "dependencies": {
                "fs.realpath": "^1.0.0",
                "inflight": "^1.0.4",
@ -16356,8 +16366,9 @@
        },
        "node_modules/globule/node_modules/minimatch": {
            "version": "3.0.8",
+            "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.8.tgz",
+            "integrity": "sha512-6FsRAQsxQ61mw+qP1ZzbL9Bc78x2p5OqNgNpnoAFLTrX8n5Kxph0CsnhmKKNXTWjXqU5L0pGPR7hYk+XWZr60Q==",
            "dev": true,
-            "license": "ISC",
            "dependencies": {
                "brace-expansion": "^1.1.7"
            },
@ -22755,8 +22766,9 @@
        },
        "node_modules/stream-buffers": {
            "version": "3.0.3",
+            "resolved": "https://registry.npmjs.org/stream-buffers/-/stream-buffers-3.0.3.tgz",
+            "integrity": "sha512-pqMqwQCso0PBJt2PQmDO0cFj0lyqmiwOMiMSkVtRokl7e+ZTRYgDHKnuZNbqjiJXgsg4nuqtD/zxuo9KqTp0Yw==",
            "dev": true,
-            "license": "Unlicense",
            "engines": {
                "node": ">= 0.10.0"
            }
@ -24943,9 +24955,10 @@
            }
        },
        "node_modules/webdriverio": {
-            "version": "8.39.0",
+            "version": "8.39.1",
+            "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-8.39.1.tgz",
+            "integrity": "sha512-dPwLgLNtP+l4vnybz+YFxxH8nBKOP7j6VVzKtfDyTLDQg9rz3U8OA4xMMQCBucnrVXy3KcKxGqlnMa+c4IfWCQ==",
            "dev": true,
-            "license": "MIT",
            "dependencies": {
                "@types/node": "^20.1.0",
                "@wdio/config": "8.39.0",
--- a/web/package.json
+++ b/web/package.json
@ -43,7 +43,7 @@
        "@codemirror/theme-one-dark": "^6.1.2",
        "@formatjs/intl-listformat": "^7.5.7",
        "@fortawesome/fontawesome-free": "^6.5.2",
-        "@goauthentik/api": "^2024.6.0-1720022184",
+        "@goauthentik/api": "^2024.6.0-1720200294",
        "@lit/context": "^1.1.2",
        "@lit/localize": "^0.12.1",
        "@lit/reactive-element": "^2.0.4",
@ -51,7 +51,7 @@
        "@open-wc/lit-helpers": "^0.7.0",
        "@patternfly/elements": "^3.0.2",
        "@patternfly/patternfly": "^4.224.2",
-        "@sentry/browser": "^8.13.0",
+        "@sentry/browser": "^8.15.0",
        "@webcomponents/webcomponentsjs": "^2.8.0",
        "base64-js": "^1.5.1",
        "chart.js": "^4.4.3",
@ -101,8 +101,8 @@
        "@types/showdown": "^2.0.6",
        "@typescript-eslint/eslint-plugin": "^7.14.0",
        "@typescript-eslint/parser": "^7.14.0",
-        "@wdio/browser-runner": "^8.36.1",
-        "@wdio/cli": "^8.36.1",
+        "@wdio/browser-runner": "^8.39.1",
+        "@wdio/cli": "^8.39.1",
        "@wdio/mocha-framework": "^8.36.1",
        "@wdio/spec-reporter": "^8.36.1",
        "babel-plugin-macros": "^3.1.0",
--- a/web/sfe/index.ts
+++ b/web/sfe/index.ts
@ -0,0 +1,529 @@
+import { fromByteArray } from "base64-js";
+import "formdata-polyfill";
+import $ from "jquery";
+import "weakmap-polyfill";
+
+import {
+    type AuthenticatorValidationChallenge,
+    type AutosubmitChallenge,
+    type ChallengeTypes,
+    ChallengeTypesFromJSON,
+    type ContextualFlowInfo,
+    type DeviceChallenge,
+    type ErrorDetail,
+    type IdentificationChallenge,
+    type PasswordChallenge,
+    type RedirectChallenge,
+} from "@goauthentik/api";
+
+interface GlobalAuthentik {
+    brand: {
+        branding_logo: string;
+    };
+}
+
+function ak(): GlobalAuthentik {
+    return (
+        window as unknown as {
+            authentik: GlobalAuthentik;
+        }
+    ).authentik;
+}
+
+class SimpleFlowExecutor {
+    challenge?: ChallengeTypes;
+    flowSlug: string;
+    container: HTMLDivElement;
+
+    constructor(container: HTMLDivElement) {
+        this.flowSlug = window.location.pathname.split("/")[3];
+        this.container = container;
+    }
+
+    get apiURL() {
+        return `/api/v3/flows/executor/${this.flowSlug}/?query=${encodeURIComponent(window.location.search.substring(1))}`;
+    }
+
+    start() {
+        $.ajax({
+            type: "GET",
+            url: this.apiURL,
+            success: (data) => {
+                this.challenge = ChallengeTypesFromJSON(data);
+                this.renderChallenge();
+            },
+        });
+    }
+
+    submit(data: { [key: string]: unknown } | FormData) {
+        $("button[type=submit]").addClass("disabled")
+            .html(`<span class="spinner-border spinner-border-sm" aria-hidden="true"></span>
+                <span role="status">Loading...</span>`);
+        let finalData: { [key: string]: unknown } = {};
+        if (data instanceof FormData) {
+            finalData = {};
+            data.forEach((value, key) => {
+                finalData[key] = value;
+            });
+        } else {
+            finalData = data;
+        }
+        $.ajax({
+            type: "POST",
+            url: this.apiURL,
+            data: JSON.stringify(finalData),
+            success: (data) => {
+                this.challenge = ChallengeTypesFromJSON(data);
+                this.renderChallenge();
+            },
+            contentType: "application/json",
+            dataType: "json",
+        });
+    }
+
+    renderChallenge() {
+        switch (this.challenge?.component) {
+            case "ak-stage-identification":
+                new IdentificationStage(this, this.challenge).render();
+                return;
+            case "ak-stage-password":
+                new PasswordStage(this, this.challenge).render();
+                return;
+            case "xak-flow-redirect":
+                new RedirectStage(this, this.challenge).render();
+                return;
+            case "ak-stage-autosubmit":
+                new AutosubmitStage(this, this.challenge).render();
+                return;
+            case "ak-stage-authenticator-validate":
+                new AuthenticatorValidateStage(this, this.challenge).render();
+                return;
+            default:
+                this.container.innerText = "Unsupported stage: " + this.challenge?.component;
+                return;
+        }
+    }
+}
+
+export interface FlowInfoChallenge {
+    flowInfo?: ContextualFlowInfo;
+    responseErrors?: {
+        [key: string]: Array<ErrorDetail>;
+    };
+}
+
+class Stage<T extends FlowInfoChallenge> {
+    constructor(
+        public executor: SimpleFlowExecutor,
+        public challenge: T,
+    ) {}
+
+    error(fieldName: string) {
+        if (!this.challenge.responseErrors) {
+            return [];
+        }
+        return this.challenge.responseErrors[fieldName] || [];
+    }
+
+    renderInputError(fieldName: string) {
+        return `${this.error(fieldName)
+            .map((error) => {
+                return `<div class="invalid-feedback">
+                    ${error.string}
+                </div>`;
+            })
+            .join("")}`;
+    }
+
+    renderNonFieldErrors() {
+        return `${this.error("non_field_errors")
+            .map((error) => {
+                return `<div class="alert alert-danger" role="alert">
+                    ${error.string}
+                </div>`;
+            })
+            .join("")}`;
+    }
+
+    html(html: string) {
+        this.executor.container.innerHTML = html;
+    }
+
+    render() {
+        throw new Error("Abstract method");
+    }
+}
+
+class IdentificationStage extends Stage<IdentificationChallenge> {
+    render() {
+        this.html(`
+            <form id="ident-form">
+                <img class="mb-4 brand-icon" src="${ak().brand.branding_logo}" alt="">
+                <h1 class="h3 mb-3 fw-normal text-center">${this.challenge?.flowInfo?.title}</h1>
+                ${
+                    this.challenge.applicationPre
+                        ? `<p>
+                              Login to continue to ${this.challenge.applicationPre}.
+                          </p>`
+                        : ""
+                }
+                <div class="form-label-group my-3 has-validation">
+                    <input type="text" autofocus class="form-control" name="uid_field" placeholder="Email / Username">
+                </div>
+                ${
+                    this.challenge.passwordFields
+                        ? `<div class="form-label-group my-3 has-validation">
+                                <input type="password" class="form-control ${this.error("password").length > 0 ? "is-invalid" : ""}" name="password" placeholder="Password">
+                                ${this.renderInputError("password")}
+                        </div>`
+                        : ""
+                }
+                ${this.renderNonFieldErrors()}
+                <button class="btn btn-primary w-100 py-2" type="submit">${this.challenge.primaryAction}</button>
+            </form>`);
+        $("#ident-form input[name=uid_field]").trigger("focus");
+        $("#ident-form").on("submit", (ev) => {
+            ev.preventDefault();
+            const data = new FormData(ev.target as HTMLFormElement);
+            this.executor.submit(data);
+        });
+    }
+}
+
+class PasswordStage extends Stage<PasswordChallenge> {
+    render() {
+        this.html(`
+            <form id="password-form">
+                <img class="mb-4 brand-icon" src="${ak().brand.branding_logo}" alt="">
+                <h1 class="h3 mb-3 fw-normal text-center">${this.challenge?.flowInfo?.title}</h1>
+                <div class="form-label-group my-3 has-validation">
+                    <input type="password" autofocus class="form-control ${this.error("password").length > 0 ? "is-invalid" : ""}" name="password" placeholder="Password">
+                    ${this.renderInputError("password")}
+                </div>
+                <button class="btn btn-primary w-100 py-2" type="submit">Continue</button>
+            </form>`);
+        $("#password-form input").trigger("focus");
+        $("#password-form").on("submit", (ev) => {
+            ev.preventDefault();
+            const data = new FormData(ev.target as HTMLFormElement);
+            this.executor.submit(data);
+        });
+    }
+}
+
+class RedirectStage extends Stage<RedirectChallenge> {
+    render() {
+        window.location.assign(this.challenge.to);
+    }
+}
+
+class AutosubmitStage extends Stage<AutosubmitChallenge> {
+    render() {
+        this.html(`
+            <form id="autosubmit-form" action="${this.challenge.url}" method="POST">
+                <img class="mb-4 brand-icon" src="${ak().brand.branding_logo}" alt="">
+                <h1 class="h3 mb-3 fw-normal text-center">${this.challenge?.flowInfo?.title}</h1>
+                ${Object.entries(this.challenge.attrs).map(([key, value]) => {
+                    return `<input
+                            type="hidden"
+                            name="${key}"
+                            value="${value}"
+                        />`;
+                })}
+                <div class="d-flex justify-content-center">
+                    <div class="spinner-border" role="status">
+                        <span class="sr-only">Loading...</span>
+                    </div>
+                </div>
+            </form>`);
+        $("#autosubmit-form").submit();
+    }
+}
+
+export interface Assertion {
+    id: string;
+    rawId: string;
+    type: string;
+    registrationClientExtensions: string;
+    response: {
+        clientDataJSON: string;
+        attestationObject: string;
+    };
+}
+
+export interface AuthAssertion {
+    id: string;
+    rawId: string;
+    type: string;
+    assertionClientExtensions: string;
+    response: {
+        clientDataJSON: string;
+        authenticatorData: string;
+        signature: string;
+        userHandle: string | null;
+    };
+}
+
+class AuthenticatorValidateStage extends Stage<AuthenticatorValidationChallenge> {
+    deviceChallenge?: DeviceChallenge;
+
+    b64enc(buf: Uint8Array): string {
+        return fromByteArray(buf).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+    }
+
+    b64RawEnc(buf: Uint8Array): string {
+        return fromByteArray(buf).replace(/\+/g, "-").replace(/\//g, "_");
+    }
+
+    u8arr(input: string): Uint8Array {
+        return Uint8Array.from(atob(input.replace(/_/g, "/").replace(/-/g, "+")), (c) =>
+            c.charCodeAt(0),
+        );
+    }
+
+    checkWebAuthnSupport(): boolean {
+        if ("credentials" in navigator) {
+            return true;
+        }
+        if (window.location.protocol === "http:" && window.location.hostname !== "localhost") {
+            console.warn("WebAuthn requires this page to be accessed via HTTPS.");
+            return false;
+        }
+        console.warn("WebAuthn not supported by browser.");
+        return false;
+    }
+
+    /**
+     * Transforms items in the credentialCreateOptions generated on the server
+     * into byte arrays expected by the navigator.credentials.create() call
+     */
+    transformCredentialCreateOptions(
+        credentialCreateOptions: PublicKeyCredentialCreationOptions,
+        userId: string,
+    ): PublicKeyCredentialCreationOptions {
+        const user = credentialCreateOptions.user;
+        // Because json can't contain raw bytes, the server base64-encodes the User ID
+        // So to get the base64 encoded byte array, we first need to convert it to a regular
+        // string, then a byte array, re-encode it and wrap that in an array.
+        const stringId = decodeURIComponent(window.atob(userId));
+        user.id = this.u8arr(this.b64enc(this.u8arr(stringId)));
+        const challenge = this.u8arr(credentialCreateOptions.challenge.toString());
+
+        const transformedCredentialCreateOptions = Object.assign({}, credentialCreateOptions, {
+            challenge,
+            user,
+        });
+
+        return transformedCredentialCreateOptions;
+    }
+
+    /**
+     * Transforms the binary data in the credential into base64 strings
+     * for posting to the server.
+     * @param {PublicKeyCredential} newAssertion
+     */
+    transformNewAssertionForServer(newAssertion: PublicKeyCredential): Assertion {
+        const attObj = new Uint8Array(
+            (newAssertion.response as AuthenticatorAttestationResponse).attestationObject,
+        );
+        const clientDataJSON = new Uint8Array(newAssertion.response.clientDataJSON);
+        const rawId = new Uint8Array(newAssertion.rawId);
+
+        const registrationClientExtensions = newAssertion.getClientExtensionResults();
+        return {
+            id: newAssertion.id,
+            rawId: this.b64enc(rawId),
+            type: newAssertion.type,
+            registrationClientExtensions: JSON.stringify(registrationClientExtensions),
+            response: {
+                clientDataJSON: this.b64enc(clientDataJSON),
+                attestationObject: this.b64enc(attObj),
+            },
+        };
+    }
+
+    transformCredentialRequestOptions(
+        credentialRequestOptions: PublicKeyCredentialRequestOptions,
+    ): PublicKeyCredentialRequestOptions {
+        const challenge = this.u8arr(credentialRequestOptions.challenge.toString());
+
+        const allowCredentials = (credentialRequestOptions.allowCredentials || []).map(
+            (credentialDescriptor) => {
+                const id = this.u8arr(credentialDescriptor.id.toString());
+                return Object.assign({}, credentialDescriptor, { id });
+            },
+        );
+
+        const transformedCredentialRequestOptions = Object.assign({}, credentialRequestOptions, {
+            challenge,
+            allowCredentials,
+        });
+
+        return transformedCredentialRequestOptions;
+    }
+
+    /**
+     * Encodes the binary data in the assertion into strings for posting to the server.
+     * @param {PublicKeyCredential} newAssertion
+     */
+    transformAssertionForServer(newAssertion: PublicKeyCredential): AuthAssertion {
+        const response = newAssertion.response as AuthenticatorAssertionResponse;
+        const authData = new Uint8Array(response.authenticatorData);
+        const clientDataJSON = new Uint8Array(response.clientDataJSON);
+        const rawId = new Uint8Array(newAssertion.rawId);
+        const sig = new Uint8Array(response.signature);
+        const assertionClientExtensions = newAssertion.getClientExtensionResults();
+
+        return {
+            id: newAssertion.id,
+            rawId: this.b64enc(rawId),
+            type: newAssertion.type,
+            assertionClientExtensions: JSON.stringify(assertionClientExtensions),
+
+            response: {
+                clientDataJSON: this.b64RawEnc(clientDataJSON),
+                signature: this.b64RawEnc(sig),
+                authenticatorData: this.b64RawEnc(authData),
+                userHandle: null,
+            },
+        };
+    }
+
+    render() {
+        if (!this.deviceChallenge) {
+            return this.renderChallengePicker();
+        }
+        switch (this.deviceChallenge.deviceClass) {
+            case "static":
+            case "totp":
+                this.renderCodeInput();
+                break;
+            case "webauthn":
+                this.renderWebauthn();
+                break;
+            default:
+                break;
+        }
+    }
+
+    renderChallengePicker() {
+        const challenges = this.challenge.deviceChallenges.filter((challenge) => {
+            if (challenge.deviceClass === "webauthn") {
+                if (!this.checkWebAuthnSupport()) {
+                    return undefined;
+                }
+            }
+            return challenge;
+        });
+        this.html(`<form id="picker-form">
+                <img class="mb-4 brand-icon" src="${ak().brand.branding_logo}" alt="">
+                <h1 class="h3 mb-3 fw-normal text-center">${this.challenge?.flowInfo?.title}</h1>
+                ${
+                    challenges.length > 0
+                        ? "<p>Select an authentication method.</p>"
+                        : `
+                    <p>No compatible authentication method available</p>
+                    `
+                }
+                ${challenges
+                    .map((challenge) => {
+                        let label = undefined;
+                        switch (challenge.deviceClass) {
+                            case "static":
+                                label = "Recovery keys";
+                                break;
+                            case "totp":
+                                label = "Traditional authenticator";
+                                break;
+                            case "webauthn":
+                                label = "Security key";
+                                break;
+                        }
+                        if (!label) {
+                            return "";
+                        }
+                        return `<div class="form-label-group my-3 has-validation">
+                            <button id="${challenge.deviceClass}-${challenge.deviceUid}" class="btn btn-secondary w-100 py-2" type="button">
+                                ${label}
+                            </button>
+                        </div>`;
+                    })
+                    .join("")}
+            </form>`);
+        this.challenge.deviceChallenges.forEach((challenge) => {
+            $(`#picker-form button#${challenge.deviceClass}-${challenge.deviceUid}`).on(
+                "click",
+                () => {
+                    this.deviceChallenge = challenge;
+                    this.render();
+                },
+            );
+        });
+    }
+
+    renderCodeInput() {
+        this.html(`
+            <form id="totp-form">
+                <img class="mb-4 brand-icon" src="${ak().brand.branding_logo}" alt="">
+                <h1 class="h3 mb-3 fw-normal text-center">${this.challenge?.flowInfo?.title}</h1>
+                <div class="form-label-group my-3 has-validation">
+                    <input type="text" autofocus class="form-control ${this.error("code").length > 0 ? "is-invalid" : ""}" name="code" placeholder="Please enter your code" autocomplete="one-time-code">
+                    ${this.renderInputError("code")}
+                </div>
+                <button class="btn btn-primary w-100 py-2" type="submit">Continue</button>
+            </form>`);
+        $("#totp-form input").trigger("focus");
+        $("#totp-form").on("submit", (ev) => {
+            ev.preventDefault();
+            const data = new FormData(ev.target as HTMLFormElement);
+            this.executor.submit(data);
+        });
+    }
+
+    renderWebauthn() {
+        this.html(`
+            <form id="totp-form">
+                <img class="mb-4 brand-icon" src="${ak().brand.branding_logo}" alt="">
+                <h1 class="h3 mb-3 fw-normal text-center">${this.challenge?.flowInfo?.title}</h1>
+                <div class="d-flex justify-content-center">
+                    <div class="spinner-border" role="status">
+                        <span class="sr-only">Loading...</span>
+                    </div>
+                </div>
+            </form>
+            `);
+        navigator.credentials
+            .get({
+                publicKey: this.transformCredentialRequestOptions(
+                    this.deviceChallenge?.challenge as PublicKeyCredentialRequestOptions,
+                ),
+            })
+            .then((assertion) => {
+                if (!assertion) {
+                    throw new Error("No assertion");
+                }
+                try {
+                    // we now have an authentication assertion! encode the byte arrays contained
+                    // in the assertion data as strings for posting to the server
+                    const transformedAssertionForServer = this.transformAssertionForServer(
+                        assertion as PublicKeyCredential,
+                    );
+
+                    // post the assertion to the server for verification.
+                    this.executor.submit({
+                        webauthn: transformedAssertionForServer,
+                    });
+                } catch (err) {
+                    throw new Error(`Error when validating assertion on server: ${err}`);
+                }
+            })
+            .catch((error) => {
+                console.warn(error);
+                this.deviceChallenge = undefined;
+                this.render();
+            });
+    }
+}
+
+const sfe = new SimpleFlowExecutor($("#flow-sfe-container")[0] as HTMLDivElement);
+sfe.start();
--- a/web/sfe/package-lock.json
+++ b/web/sfe/package-lock.json
--- a/web/sfe/package.json
+++ b/web/sfe/package.json
@ -0,0 +1,28 @@
+{
+    "name": "@goauthentik/web-sfe",
+    "version": "0.0.0",
+    "private": true,
+    "license": "MIT",
+    "dependencies": {
+        "@goauthentik/api": "^2024.6.0-1719577139",
+        "base64-js": "^1.5.1",
+        "bootstrap": "^4.6.1",
+        "formdata-polyfill": "^4.0.10",
+        "jquery": "^3.7.1",
+        "weakmap-polyfill": "^2.0.4"
+    },
+    "scripts": {
+        "build": "rollup -c rollup.config.js --bundleConfigAsCjs",
+        "watch": "rollup -w -c rollup.config.js --bundleConfigAsCjs"
+    },
+    "devDependencies": {
+        "@rollup/plugin-commonjs": "^26.0.1",
+        "@rollup/plugin-node-resolve": "^15.2.3",
+        "@rollup/plugin-swc": "^0.3.1",
+        "@swc/cli": "^0.3.14",
+        "@swc/core": "^1.6.7",
+        "@types/jquery": "^3.5.30",
+        "rollup": "^4.18.0",
+        "rollup-plugin-copy": "^3.5.0"
+    }
+}
--- a/web/sfe/rollup.config.js
+++ b/web/sfe/rollup.config.js
@ -0,0 +1,40 @@
+import commonjs from "@rollup/plugin-commonjs";
+import resolve from "@rollup/plugin-node-resolve";
+import swc from "@rollup/plugin-swc";
+import copy from "rollup-plugin-copy";
+
+export default {
+    input: "index.ts",
+    output: {
+        dir: "../dist/sfe",
+        format: "cjs",
+    },
+    context: "window",
+    plugins: [
+        copy({
+            targets: [
+                { src: "node_modules/bootstrap/dist/css/bootstrap.min.css", dest: "../dist/sfe" },
+            ],
+        }),
+        resolve({ browser: true }),
+        commonjs(),
+        swc({
+            swc: {
+                jsc: {
+                    loose: false,
+                    externalHelpers: false,
+                    // Requires v1.2.50 or upper and requires target to be es2016 or upper.
+                    keepClassNames: false,
+                },
+                minify: false,
+                env: {
+                    targets: {
+                        edge: "17",
+                        ie: "11",
+                    },
+                    mode: "entry",
+                },
+            },
+        }),
+    ],
+};
--- a/web/sfe/tsconfig.json
+++ b/web/sfe/tsconfig.json
@ -0,0 +1,7 @@
+{
+    "compilerOptions": {
+        "types": ["jquery"],
+        "esModuleInterop": true,
+        "lib": ["DOM", "ES2015", "ES2017"]
+    },
+}
--- a/web/src/admin/admin-settings/AdminSettingsForm.ts
+++ b/web/src/admin/admin-settings/AdminSettingsForm.ts
@ -193,6 +193,42 @@ export class AdminSettingsForm extends Form<SettingsRequest> {
                help=${msg("Globally enable/disable impersonation.")}
            >
            </ak-switch-input>
+            <ak-form-element-horizontal
+                label=${msg("User directory fields")}
+                name="userDirectoryFields"
+            >
+                <ak-codemirror
+                    mode=${CodeMirrorMode.YAML}
+                    .value="${first(this._settings?.userDirectoryFields, [
+                        "name",
+                        "username",
+                        "email",
+                        "avatars",
+                        "groups",
+                    ])}"
+                ></ak-codemirror>
+                <p class="pf-c-form__helper-text">
+                    ${msg(
+                        "This option configures what user fields are shown in the user directory. It must be a valid JSON list and can be used as follows, with all possible values included:",
+                    )}
+                    <code>["name", "username", "email", "avatars", "groups"]</code>
+                </p>
+            </ak-form-element-horizontal>
+            <ak-form-element-horizontal
+                label=${msg("User directory attributes")}
+                name="userDirectoryAttributes"
+            >
+                <ak-codemirror
+                    mode=${CodeMirrorMode.YAML}
+                    .value="${first(this._settings?.userDirectoryAttributes, [])}"
+                ></ak-codemirror>
+                <p class="pf-c-form__helper-text">
+                    ${msg(
+                        "This option configures what user attributes are shown in the user directory. It must be a valid JSON list and can be used as follows:",
+                    )}
+                    <code>[{"attribute": "phone_number", "display_name": "Phone"}]</code>
+                </p>
+            </ak-form-element-horizontal>
            <ak-text-input
                name="defaultTokenDuration"
                label=${msg("Default token duration")}
--- a/web/src/admin/blueprints/BlueprintListPage.ts
+++ b/web/src/admin/blueprints/BlueprintListPage.ts
@ -53,7 +53,7 @@ export class BlueprintListPage extends TablePage<BlueprintInstance> {
        return msg("Automate and template configuration within authentik.");
    }
    pageIcon(): string {
-        return "pf-icon pf-icon-blueprint";
+        return "fa fa-user";
    }

    expandable = true;
--- a/web/src/elements/PageHeader.ts
+++ b/web/src/elements/PageHeader.ts
@ -141,6 +141,7 @@ export class PageHeader extends WithBrandConfig(AKElement) {
        return html` <ak-enterprise-status interface="admin"></ak-enterprise-status>
            <div class="bar">
                <button
+                    part="sidebar-trigger"
                    class="sidebar-trigger pf-c-button pf-m-plain"
                    @click=${() => {
                        this.dispatchEvent(
--- a/web/src/elements/table/TablePage.ts
+++ b/web/src/elements/table/TablePage.ts
@ -70,14 +70,17 @@ export abstract class TablePage<T> extends Table<T> {
        </button>`;
    }

-    render(): TemplateResult {
+    renderPageHeader(): TemplateResult {
        return html`<ak-page-header
-                icon=${this.pageIcon()}
-                header=${this.pageTitle()}
-                description=${ifDefined(this.pageDescription())}
-            >
-            </ak-page-header>
-            ${this.renderSectionBefore()}
+            icon=${this.pageIcon()}
+            header=${this.pageTitle()}
+            description=${ifDefined(this.pageDescription())}
+        >
+        </ak-page-header>`;
+    }
+
+    render(): TemplateResult {
+        return html`${this.renderPageHeader()} ${this.renderSectionBefore()}
            <section class="pf-c-page__main-section pf-m-no-padding-mobile">
                <div class="pf-c-sidebar pf-m-gutter">
                    <div class="pf-c-sidebar__main">
--- a/web/src/flow/FlowExecutor.ts
+++ b/web/src/flow/FlowExecutor.ts
@ -503,19 +503,17 @@ export class FlowExecutor extends Interface implements StageHost {
                                        <footer class="pf-c-login__footer">
                                            <ul class="pf-c-list pf-m-inline">
                                                ${this.brand?.uiFooterLinks?.map((link) => {
+                                                    if (link.href) {
+                                                        return html`<li>
+                                                            <a href="${link.href}">${link.name}</a>
+                                                        </li>`;
+                                                    }
                                                    return html`<li>
-                                                        <a href="${link.href || ""}"
-                                                            >${link.name}</a
-                                                        >
+                                                        <span>${link.name}</span>
                                                    </li>`;
                                                })}
                                                <li>
-                                                    <a
-                                                        href="https://goauthentik.io?utm_source=authentik&amp;utm_medium=flow"
-                                                        target="_blank"
-                                                        rel="noopener noreferrer"
-                                                        >${msg("Powered by authentik")}</a
-                                                    >
+                                                    <span>${msg("Powered by authentik")}</span>
                                                </li>
                                            </ul>
                                        </footer>
--- a/web/src/user/LibraryPage/ak-library.ts
+++ b/web/src/user/LibraryPage/ak-library.ts
@ -70,7 +70,6 @@ export class LibraryPage extends AKElement {
            ordering: "name",
            page,
            pageSize: 100,
-            onlyWithLaunchUrl: true,
        });

        const applicationListFetch = await coreApi().coreApplicationsList(applicationListParams(1));
--- a/web/src/user/Routes.ts
+++ b/web/src/user/Routes.ts
@ -8,6 +8,10 @@ export const ROUTES: Route[] = [
    new Route(new RegExp("^/$")).redirect("/library"),
    new Route(new RegExp("^#.*")).redirect("/library"),
    new Route(new RegExp("^/library$"), async () => html`<ak-library></ak-library>`),
+    new Route(new RegExp("^/directory"), async () => {
+        await import("@goauthentik/user/user-directory/UserDirectoryPage");
+        return html`<ak-user-directory></ak-user-directory>`;
+    }),
    new Route(new RegExp("^/settings$"), async () => {
        await import("@goauthentik/user/user-settings/UserSettingsPage");
        return html`<ak-user-settings></ak-user-settings>`;
--- a/web/src/user/UserInterface.ts
+++ b/web/src/user/UserInterface.ts
@ -159,6 +159,13 @@ class UserInterfacePresentation extends AKElement {
            .otherwise(() => this.me.user.username);
    }

+    get canAccessUserDirectory() {
+        return (
+            this.me.user.isSuperuser ||
+            this.me.user.systemPermissions.includes("can_view_user_directory")
+        );
+    }
+
    get canAccessAdmin() {
        return (
            this.me.user.isSuperuser ||
@ -204,6 +211,8 @@ class UserInterfacePresentation extends AKElement {
                            <!-- -->
                            ${this.renderNotificationDrawerTrigger()}
                            <!-- -->
+                            ${this.renderUserDirectory()}
+                            <!-- -->
                            ${this.renderSettings()}
                            <div class="pf-c-page__header-tools-item">
                                <a
@ -355,6 +364,20 @@ class UserInterfacePresentation extends AKElement {
        </a>`;
    }

+    renderUserDirectory() {
+        if (!this.canAccessUserDirectory) {
+            return nothing;
+        }
+
+        return html` <div class="pf-c-page__header-tools-item">
+            <a class="pf-c-button pf-m-plain" type="button" href="#/directory">
+                <pf-tooltip position="top" content=${msg("User directory")}>
+                    <i class="pf-icon pf-icon-project" aria-hidden="true"></i>
+                </pf-tooltip>
+            </a>
+        </div>`;
+    }
+
    renderImpersonation() {
        if (!this.me.original) {
            return nothing;
--- a/web/src/user/user-directory/UserDirectoryPage.ts
+++ b/web/src/user/user-directory/UserDirectoryPage.ts
@ -0,0 +1,131 @@
+import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
+import { renderDescriptionList } from "@goauthentik/components/DescriptionList.js";
+import { PaginatedResponse } from "@goauthentik/elements/table/Table";
+import { TableColumn } from "@goauthentik/elements/table/Table";
+import { TablePage } from "@goauthentik/elements/table/TablePage";
+
+import { msg } from "@lit/localize";
+import { css, html } from "lit";
+import { customElement, property, state } from "lit/decorators.js";
+
+import PFAlert from "@patternfly/patternfly/components/Alert/alert.css";
+import PFAvatar from "@patternfly/patternfly/components/Avatar/avatar.css";
+import PFCard from "@patternfly/patternfly/components/Card/card.css";
+import PFDescriptionList from "@patternfly/patternfly/components/DescriptionList/description-list.css";
+
+import { CoreApi, UserDirectory } from "@goauthentik/api";
+
+const knownFields: Record<string, string> = {
+    avatar: "",
+    username: msg("Username"),
+    name: msg("Name"),
+    email: msg("Email"),
+};
+
+type UserFieldAttributes = { display_name: string; attribute: string };
+
+@customElement("ak-user-directory")
+export class UserDirectoryPage extends TablePage<UserDirectory> {
+    expandable = true;
+
+    searchEnabled(): boolean {
+        return true;
+    }
+
+    pageTitle(): string {
+        return msg("User Directory");
+    }
+
+    pageDescription(): string {
+        return msg("Display a list of users on this system.");
+    }
+
+    pageIcon(): string {
+        return "pf-icon pf-icon-project";
+    }
+
+    @property()
+    order = "username";
+
+    @state()
+    fields?: string[];
+
+    @state()
+    userFieldAttributes?: object[] = [];
+
+    static get styles() {
+        return [
+            ...super.styles,
+            PFDescriptionList,
+            PFCard,
+            PFAlert,
+            PFAvatar,
+            css`
+                ak-page-header::part(sidebar-trigger) {
+                    display: none;
+                }
+            `,
+        ];
+    }
+
+    async apiEndpoint(): Promise<PaginatedResponse<UserDirectory>> {
+        const fields = await new CoreApi(DEFAULT_CONFIG).coreUserDirectoryFieldsRetrieve();
+        this.fields = fields.fields;
+        this.userFieldAttributes = fields.attributes;
+        return await new CoreApi(DEFAULT_CONFIG).coreUserDirectoryList(
+            await this.defaultEndpointConfig(),
+        );
+    }
+
+    columns() {
+        return (this.fields ?? [])
+            .filter((item) => item in knownFields)
+            .map((item) =>
+                item === "avatar"
+                    ? new TableColumn(knownFields[item])
+                    : new TableColumn(knownFields[item], item),
+            );
+    }
+
+    row(item: UserDirectory) {
+        return (this.fields ?? [])
+            .filter((field: string) => Object.hasOwn(knownFields, field))
+            .map((field: string) =>
+                field !== "avatar"
+                    ? html`${item.userFields[field]}`
+                    : html` <img
+                          class="pf-c-avatar"
+                          src=${item.userFields[field]}
+                          alt="${msg("Avatar image")}"
+                      />`,
+            );
+    }
+
+    renderExpanded(item: UserDirectory) {
+        const groupDescription =
+            this.fields?.includes("groups") && (item.userFields["groups"] ?? []).length > 0
+                ? [
+                      [msg("Groups")],
+                      item.userFields["groups"].map(
+                          (group: string) => html`
+                              <div class="pf-c-description-list__text">${group}</div>
+                          `,
+                      ),
+                  ]
+                : [];
+
+        const userDescriptions = ((this.userFieldAttributes ?? []) as UserFieldAttributes[])
+            .filter(({ attribute }) => attribute !== null)
+            .map(({ display_name, attribute }) => [display_name, item.attributes[attribute]]);
+
+        const toShow = [...groupDescription, ...userDescriptions];
+
+        return toShow.length > 1
+            ? html`<td role="cell" colspan="3">
+                  <div class="pf-c-table__expandable-row-content">
+                      ${renderDescriptionList(toShow)}
+                  </div>
+              </td>`
+            : html``;
+    }
+}
--- a/web/xliff/zh-Hans.xlf
+++ b/web/xliff/zh-Hans.xlf
@ -8821,36 +8821,47 @@ Bindings to groups/users are checked against the user of the event.</source>
 </trans-unit>
 <trans-unit id="se166e95fe447ebcd">
  <source>Close dialog</source>
+  <target>关闭对话框</target>
 </trans-unit>
 <trans-unit id="s3dc14a4b8129f989">
  <source>Pagination</source>
+  <target>分页</target>
 </trans-unit>
 <trans-unit id="s6d46b842e227be57">
  <source>Application Details</source>
+  <target>应用程序详情</target>
 </trans-unit>
 <trans-unit id="s76415a60e548cafe">
  <source>Provider Configuration</source>
+  <target>提供程序配置</target>
 </trans-unit>
 <trans-unit id="sde59c64619570b57">
  <source>Submit Application</source>
+  <target>提交应用程序</target>
 </trans-unit>
 <trans-unit id="sf2da0e95c78f2cb7">
  <source>Restore Application Wizard Hint</source>
+  <target>恢复应用程序向导提示</target>
 </trans-unit>
 <trans-unit id="s76dc6d0d1a7db8e2">
  <source>Your authentik password</source>
+  <target>您的 authentik 密码</target>
 </trans-unit>
 <trans-unit id="se3a34af2a05c5c98">
  <source>Internal Service account</source>
+  <target>内部服务账户</target>
 </trans-unit>
 <trans-unit id="s681c086b8f7afcae">
  <source>Global</source>
+  <target>全局</target>
 </trans-unit>
 <trans-unit id="s1b85e6ac2978a2c0">
  <source>Outpost integrations</source>
+  <target>前哨集成</target>
 </trans-unit>
 <trans-unit id="sec55a3a7f18615ec">
  <source>Outpost integrations define how authentik connects to external platforms to manage and deploy Outposts.</source>
+  <target>前哨集成定义了 authentik 如何连接到外部平台以管理和部署前哨。</target>
 </trans-unit>
    </body>
  </file>
--- a/web/xliff/zh_CN.xlf
+++ b/web/xliff/zh_CN.xlf
@ -8818,6 +8818,50 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="s7a64ac07061f85b2">
  <source>See documentation</source>
  <target>查看文档</target>
+</trans-unit>
+<trans-unit id="se166e95fe447ebcd">
+  <source>Close dialog</source>
+  <target>关闭对话框</target>
+</trans-unit>
+<trans-unit id="s3dc14a4b8129f989">
+  <source>Pagination</source>
+  <target>分页</target>
+</trans-unit>
+<trans-unit id="s6d46b842e227be57">
+  <source>Application Details</source>
+  <target>应用程序详情</target>
+</trans-unit>
+<trans-unit id="s76415a60e548cafe">
+  <source>Provider Configuration</source>
+  <target>提供程序配置</target>
+</trans-unit>
+<trans-unit id="sde59c64619570b57">
+  <source>Submit Application</source>
+  <target>提交应用程序</target>
+</trans-unit>
+<trans-unit id="sf2da0e95c78f2cb7">
+  <source>Restore Application Wizard Hint</source>
+  <target>恢复应用程序向导提示</target>
+</trans-unit>
+<trans-unit id="s76dc6d0d1a7db8e2">
+  <source>Your authentik password</source>
+  <target>您的 authentik 密码</target>
+</trans-unit>
+<trans-unit id="se3a34af2a05c5c98">
+  <source>Internal Service account</source>
+  <target>内部服务账户</target>
+</trans-unit>
+<trans-unit id="s681c086b8f7afcae">
+  <source>Global</source>
+  <target>全局</target>
+</trans-unit>
+<trans-unit id="s1b85e6ac2978a2c0">
+  <source>Outpost integrations</source>
+  <target>前哨集成</target>
+</trans-unit>
+<trans-unit id="sec55a3a7f18615ec">
+  <source>Outpost integrations define how authentik connects to external platforms to manage and deploy Outposts.</source>
+  <target>前哨集成定义了 authentik 如何连接到外部平台以管理和部署前哨。</target>
 </trans-unit>
    </body>
  </file>
--- a/website/developer-docs/api/flow-executor.md
+++ b/website/developer-docs/api/flow-executor.md
@ -4,7 +4,7 @@ title: Flow executor (backend)

 A big focus of authentik is the flows system, which allows you to combine and build complex conditional processes using stages and policies. Normally, these flows are automatically executed in the browser using authentik's [standard browser-based flow executor (/if/flows)](/docs/flow/executors/if-flow).

-However, any flow can be executed via an API from anywhere, in fact that is what the backend flow executor does. With a few requests you can execute flows from anywhere, and integrate authentik even better.
+However, any flow can be executed via an API from anywhere, in fact that is what every flow executor does. With a few requests you can execute flows from anywhere, and integrate authentik even better.

 :::info
 Because the flow executor stores its state in the HTTP Session, so you need to ensure that cookies between flow executor requests are persisted.
--- a/website/docs/core/settings.md
+++ b/website/docs/core/settings.md
@ -51,6 +51,8 @@ The setting can be used as follows:
 [{ "name": "Link Name", "href": "https://goauthentik.io" }]
 ```

+Starting with authentik 2024.6.1, the `href` attribute is optional, and this option can be used to add additional text to the flow executor pages.
+
 ### GDPR compliance

 When enabled, all the events caused by a user will be deleted upon the user's deletion. Defaults to `true`.
--- a/website/docs/flow/executors/headless.md
+++ b/website/docs/flow/executors/headless.md
@ -6,6 +6,6 @@ The headless flow executor is used by clients that don't have access to the web

 The following stages are supported:

-   [**identification**](../stages/identification/)
-   [**password**](../stages/password/)
-   [**authenticator_validate**](../stages/authenticator_validate/)
+-   [**Identification stage**](../stages/identification/)
+-   [**Password stage**](../stages/password/)
+-   [**Authenticator Validation Stage**](../stages/authenticator_validate/)
--- a/website/docs/flow/executors/if-flow.md
+++ b/website/docs/flow/executors/if-flow.md
@ -1,5 +1,9 @@
 ---
-title: Default (Web)
+title: Default
 ---

-This is the default, web-based environment flows are executed in. All stages are compatible with this environment and no limitations are imposed.
+This is the default, web-based environment that flows are executed in. All stages are compatible with this environment and no limitations are imposed.
+
+:::info
+All flow executors use the same [API](../../../developer-docs/api/flow-executor) which allows for the implementation of custom flow executors.
+:::
--- a/website/docs/flow/executors/sfe.md
+++ b/website/docs/flow/executors/sfe.md
@ -0,0 +1,31 @@
+---
+title: Simplified flow executor
+---
+
+<span class="badge badge--info">authentik 2024.8+</span>
+
+A simplified web-based flow executor that authentik automatically uses for older browsers that do not support modern web technologies.
+
+Currently this flow executor is automatically used for the following browsers:
+
+-   Internet Explorer
+-   Microsoft Edge (up to and including version 18)
+
+The following stages are supported:
+
+-   [**Identification stage**](../stages/identification/)
+
+    :::info
+    Only user identifier and user identifier + password stage configurations are supported; sources and passwordless configurations are not supported.
+    :::
+
+-   [**Password stage**](../stages/password/)
+-   [**Authenticator Validation Stage**](../stages/authenticator_validate/)
+
+Compared to the [default flow executor](./if-flow.md), this flow executor does _not_ support the following features:
+
+-   Localization
+-   Theming (Dark / light themes)
+-   Theming (Custom CSS)
+-   Stages not listed above
+-   Flow inspector
--- a/website/docs/flow/stages/authenticator_validate/index.md
+++ b/website/docs/flow/stages/authenticator_validate/index.md
@ -1,5 +1,5 @@
 ---
-title: Authenticator Validation Stage
+title: Authenticator validation stage
 ---

 This stage validates an already configured Authenticator Device. This device has to be configured using any of the other authenticator stages:
--- a/website/docs/outposts/_config.md
+++ b/website/docs/outposts/_config.md
@ -3,6 +3,11 @@
 # Allowed levels: trace, debug, info, warning, error
 # Applies to: non-embedded
 log_level: debug
+# Interval at which the outpost will refresh the providers
+# from authentik. For caching outposts (such as LDAP), the
+# cache will also be invalidated at that interval.
+# (Format: hours=1;minutes=2;seconds=3).
+refresh_interval: minutes=5
 ########################################
 # The settings below are only relevant when using a managed outpost
 ########################################
--- a/website/docs/property-mappings/index.md
+++ b/website/docs/property-mappings/index.md
@ -23,6 +23,8 @@ LDAP Property Mappings are used when you define a LDAP Source. These mappings de

 These are configured with most common LDAP setups.

+You can also configure [custom LDAP property mappings](../sources/ldap/index.md#custom-ldap-property-mapping).
+
 ## Scope Mapping

 Scope Mappings are used by the OAuth2 Provider to map information from authentik to OAuth2/OpenID Claims. Values returned by a Scope Mapping are added as custom claims to Access and ID tokens.
--- a/website/docs/sources/ldap/index.md
+++ b/website/docs/sources/ldap/index.md
@ -73,6 +73,20 @@ By default, authentik ships with [pre-configured mappings](../../property-mappin

 You can assign the value of a mapping to any user attribute, or save it as a custom attribute by prefixing the object field with `attribute.` Keep in mind though, data types from the LDAP server will be carried over. This means that with some implementations, where fields are stored as array in LDAP, they will be saved as array in authentik. To prevent this, use the built-in `list_flatten` function.

+### Custom LDAP Property Mapping
+
+If the default source mapping is not enough, you can set your own custom LDAP property mapping.
+
+Here are the steps:
+
+1. In authentik, open the Admin interface, and then navigate to **Customization -> Property Mappings**.
+2. Click **Create**, select **LDAP Property Mapping**, and then click **Next**.
+3. Type a unique and meaningful **Name**, such as `ldap-displayName-mapping:name`.
+4. In the**Object field** field, type the name of an existing authentik field, such as `name`. If you want to add more extended attributes, you can type `attributes.mobile` for example.
+5. In the **Expression** field enter Python expressions to retrieve the value from LDAP source. For example `return list_flatten(ldap.get("displayName"))`.
+
+`list_flatten(["input string array"])` will convert a string array to a single string. If you are not sure whether the LDAP field is an array or not, you can map the field to any `attributes.xxx` and then check the sync result in authentik UI.
+
 ## Password login

 By default, authentik doesn't update the password it stores for a user when they log in using their LDAP credentials. That means that if the LDAP server is not reachable by authentik, users will not be able to log in. This behavior can be turned on with the **Update internal password on login** setting on the LDAP source.
@ -83,9 +97,9 @@ Sources created prior to the 2024.2 release have this setting turned on by defau

 Be aware of the following security considerations when turning on this functionality:

-   Updating the LDAP password does not invalid the password stored in authentik, however for LDAP Servers like FreeIPA and Active Directory, authentik will lock its internal password during the next LDAP sync. For other LDAP servers, the old passwords will still be valid indefinitely.
+-   Updating the LDAP password does not invalidate the password stored in authentik; however for LDAP Servers like FreeIPA and Active Directory, authentik will lock its internal password during the next LDAP sync. For other LDAP servers, the old passwords will still be valid indefinitely.
 -   Logging in via LDAP credentials overwrites the password stored in authentik if users have different passwords in LDAP and authentik.
-   Custom security measures used to secure the password in LDAP may differ from the ones used in authentik. Depending on threat model and security requirements this could lead to unknowingly being non-compliant.
+-   Custom security measures that are used to secure the password in LDAP may differ from the ones used in authentik. Depending on threat model and security requirements this could lead to unknowingly being non-compliant.

 ## Troubleshooting

--- a/website/docs/troubleshooting/postgres/upgrade_docker.md
+++ b/website/docs/troubleshooting/postgres/upgrade_docker.md
@ -6,7 +6,7 @@ title: Upgrade PostgreSQL on Docker Compose

 Dump your existing database with `docker compose exec postgresql pg_dump -U authentik -d authentik -cC > upgrade_backup_12.sql`.

-Before continuing, ensure the SQL dump file `(upgrade_backup_12.sql`) includes all your database content.
+Before continuing, ensure the SQL dump file (`upgrade_backup_12.sql`) includes all your database content.

 ### Stop your authentik stack

--- a/website/integrations/services/apache-guacamole/index.mdx
+++ b/website/integrations/services/apache-guacamole/index.mdx
@ -19,20 +19,20 @@ The following placeholders will be used:

 Create an OAuth2/OpenID provider with the following parameters:

-   Client Type: `Confidential`
-   Redirect URIs: `https://guacamole.company/` (depending on your Tomcat setup, you might have to add `/guacamole/` if the application runs in a subfolder)
-   Scopes: OpenID, Email and Profile
+-   **Client Type**: `Confidential`
+-   **Redirect URIs**: `https://guacamole.company/` (depending on your Tomcat setup, you might have to add `/guacamole/` if the application runs in a subfolder)
+-   **Scopes**: OpenID, Email, and Profile

-Under _Advanced protocol settings_, set the following:
+Under **Advanced protocol settings**, set the following:

-   Token validity: Any value to configure how long the session should last. Guacamole will not accept any tokens valid longer than 300 Minutes.
-   Signing Key: Set the key as `authentik Self-signed Certificate`
+-   **Token validity**: Any value to configure how long the session should last. Guacamole will not accept any tokens valid longer than 300 Minutes.
+-   **Signing Key**: Set the key as `authentik Self-signed Certificate`

 Note the Client ID value. Create an application, using the provider you've created above.

 ## Guacamole

-It is recommended you configure an admin account in Guacamole before setting up SSO to make things easier. Create a user in Guacamole using the email address of your user in authentik and give them admin permissions. Without this you might loose access to the Guacamole admin settings and have to revert the settings below.
+It is recommended you configure an admin account in Guacamole before setting up SSO to make things easier. Create a user in Guacamole using the email address of your user in authentik and give them admin permissions. Without this, you might lose access to the Guacamole admin settings and have to revert the settings below.

 import Tabs from "@theme/Tabs";
 import TabItem from "@theme/TabItem";
@ -40,11 +40,11 @@ import TabItem from "@theme/TabItem";
 <Tabs
  defaultValue="docker"
  values={[
-    {label: 'Docker', value: 'docker'},
-    {label: 'Standalone', value: 'standalone'},
+    { label: 'Docker', value: 'docker' },
+    { label: 'Standalone', value: 'standalone' },
  ]}>
  <TabItem value="docker">
-    The docker containers are configured via environment variables. The following variables are required:
+    The Docker containers are configured via environment variables. The following variables are required:

 ```yaml
 OPENID_AUTHORIZATION_ENDPOINT: https://authentik.company/application/o/authorize/
--- a/website/integrations/services/aws/index.md
+++ b/website/integrations/services/aws/index.md
@ -12,37 +12,36 @@ title: Amazon Web Services

 ## Select your method

-There are two ways to perform the integration. The classic IAM SAML way, or the 'newer' IAM Identity Center way.
-This all depends on your preference and needs.
+There are two ways to perform the integration: the classic IAM SAML way, or the 'newer' IAM Identity Center way. This all depends on your preference and needs.

-# Method 1: Classic IAM
+## Method 1: Classic IAM

-## Preparation
+### Preparation

 Create an application in authentik and note the slug, as this will be used later. Create a SAML provider with the following parameters:

-   ACS URL: `https://signin.aws.amazon.com/saml`
-   Issuer: `authentik`
-   Binding: `Post`
-   Audience: `urn:amazon:webservices`
+-   **ACS URL**: `https://signin.aws.amazon.com/saml`
+-   **Issuer**: `authentik`
+-   **Binding**: `Post`
+-   **Audience**: `urn:amazon:webservices`

-You can of course use a custom signing certificate, and adjust durations.
+You can use a custom signing certificate and adjust durations as needed.

-## AWS
+### AWS

 Create a role with the permissions you desire, and note the ARN.

-After you've created the Property Mappings below, add them to the Provider.
+After configuring the Property Mappings, add them to the SAML Provider in AWS.

 Create an application, assign policies, and assign this provider.

-Export the metadata from authentik, and create an Identity Provider [here](https://console.aws.amazon.com/iam/home#/providers).
+Export the metadata from authentik and create a new Identity Provider [here](https://console.aws.amazon.com/iam/home#/providers).

 #### Role Mapping

 The Role mapping specifies the AWS ARN(s) of the identity provider, and the role the user should assume ([see](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_saml_assertions.html#saml_role-attribute)).

-This Mapping needs to have the SAML Name field set to "https://aws.amazon.com/SAML/Attributes/Role"
+This Mapping needs to have the SAML Name field set to `https://aws.amazon.com/SAML/Attributes/Role`.

 As expression, you can return a static ARN like so

@ -71,7 +70,7 @@ return [

 The RoleSessionMapping specifies what identifier will be shown at the top of the Management Console ([see](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_saml_assertions.html#saml_role-session-attribute)).

-This mapping needs to have the SAML Name field set to "https://aws.amazon.com/SAML/Attributes/RoleSessionName".
+This mapping needs to have the SAML Name field set to `https://aws.amazon.com/SAML/Attributes/RoleSessionName`.

 To use the user's username, use this snippet

@ -79,70 +78,69 @@ To use the user's username, use this snippet
 return user.username
 ```

-# Method 2: IAM Identity Center
+## Method 2: IAM Identity Center

-## Preparation
+### Preparation

 -   A certificate to sign SAML assertions is required. You can use authentik's default certificate, or provide/generate one yourself.
 -   You may pre-create an AWS application.

-## How to integrate with AWS
+### How to integrate with AWS

 In AWS:

-   In AWS navigate to: _IAM Identity Center_ -> _Settings_ -> _Identity Source (tab)_
-   On the right side click _Actions_ -> _Change identity source_
-   Select _External Identity Provider_
-   Under _Service Provider metadata_ download the metadata file.
+-   In AWS, navigate to: **IAM Identity Center -> Settings -> Identity Source (tab)**
+-   On the right side, click **Actions** -> **Change identity source**
+-   Select **External Identity Provider**
+-   Under **Service Provider metadata** download the metadata file.

 Now go to your authentik instance, and perform the following steps.

-   Under _Providers_ create a new _SAML Provider from metadata_. Give it a name, and upload the metadata file AWS gave you.
-   Click _Next_. Give it a name, and close the file.
+-   Under **Providers**, create a new **SAML Provider from metadata**. Give it a name, and upload the metadata file AWS gave you.
+-   Click **Next**. Give it a name, and close the file.
 -   If you haven't done so yet, create an application for AWS and connect the provider to it.
-   Navigate to the provider you've just created, and then select _Edit_
-   Copy the _Issuer URL_ to the _Audience_ field.
-   Under _Advanced Protocol Settings_ set a _Signing Certificate_
+-   Navigate to the provider you've just created, and then select **Edit**
+-   Copy the **Issuer URL** to the **Audience** field.
+-   Under **Advanced Protocol Settings** set a **Signing Certificate**
 -   Save and Close.
-   Under _Related Objects_ download the _Metadata file_, and the _Signing Certificate_
+-   Under **Related Objects**, download the **Metadata file** and the **Signing Certificate**

 Now go back to your AWS instance

-   Under _Identity provider metadata_ upload both the the _Metadata_ file and _Signing Certificate_ that authentik gave you.
-   Click _Next_.
-   In your settings pane, under the tab _Identity Source_, click _Actions_ -> _Manage Authentication_.
-   Take note of the _AWS access portal sign-in URL_ (this is especially important if you changed it from the default).
+-   Under **Identity provider metadata**, upload both the **Metadata** file and **Signing Certificate** that authentik gave you.
+-   Click **Next**.
+-   In your settings pane, under the tab **Identity Source**, click **Actions** -> **Manage Authentication**.
+-   Note the AWS access portal sign-in URL (especially if you have customized it).

 Now go back to your authentik instance.

-   Navigate to the Application that you created for AWS and click _Edit_.
-   Under _UI Settings_ make sure the _Start URL_ matches the _AWS access portal sign-in URL_
+-   Navigate to the Application that you created for AWS and click **Edit**.
+-   Under **UI Settings** make sure the **Start URL** matches the **AWS access portal sign-in URL**.

-## Caveats and Troubleshooting
+:::::info

-   Users need to already exist in AWS in order to use them through authentik. AWS will throw an error if it doesn't recognise the user.
-   In case you're stuck, you can see the SSO logs in Amazon CloudTrail -> Event History. Look for `ExtenalIdPDirectoryLogin`
-
-Note:
+-   Ensure users already exist in AWS for authentication through authentik. AWS will throw an error if the user is unrecognized.
+-   In case you're stuck, you can see the SSO logs in Amazon CloudTrail -> Event History. Look for `ExtenalIdPDirectoryLogin`.
+    :::::

 ## Optional: Automated provisioning with SCIM

-Some people may opt TO USE the automatic provisioning feature called SCIM (System for Cross-domain Identity Management).
+Some people may opt to use the automatic provisioning feature called SCIM (System for Cross-domain Identity Management).
 SCIM allows you to synchronize (part of) your directory to AWS's IAM, saving you the hassle of having to create users by hand.
-In order to do so, take the following steps in your AWS Identity Center:
+To do so, take the following steps in your AWS Identity Center:

-   In your _Settings_ pane, locate the _Automatic Provisioning_ information box. Click _Enable_.
-   AWS will give you an _SCIM Endpoint_ and a _Access Token_. Take note of these values.
+-   In your **Settings** pane, locate the **Automatic Provisioning** information box. Click **Enable**.
+-   AWS provides an SCIM Endpoint and an Access Token. Note these values.

 Go back to your authentik instance

-   Navigate to _Providers_ -> _Create_
-   Select _SCIM Provider_
-   Give it a name, under _URL_ enter the _SCIM Endpoint_, and then under _Token_ enter the _Access Token_ AWS provided you with.
-   Optionally, change the user filtering settings to your liking. Click _Finish_
+-   Navigate to **Providers** -> **Create**
+-   Select **SCIM Provider**
+-   Give it a name, under **URL** enter the **SCIM Endpoint**, and then under **Token** enter the **Access Token** AWS provided you with.
+-   Optionally, change the user filtering settings to your liking. Click **Finish**

-   Go to _Customization -> Property Mappings_
-   Click _Create -> SCIM Mapping_
+-   Go to **Customization -> Property Mappings**
+-   Click **Create -> SCIM Mapping**
 -   Make sure to give the mapping a name that's lexically lower than `authentik default`, for example `AWS SCIM User mapping`
 -   As the expression, enter:

@ -154,12 +152,12 @@ return {
 }
 ```

-   Click _Save_. Navigate back to your SCIM provider, click _Edit_
-   Under _User Property Mappings_ select the default mapping and the mapping that you just created.
-   Click _Update_
+-   Click **Save**. Navigate back to your SCIM provider, click **Edit**
+-   Under **User Property Mappings** select the default mapping and the mapping that you just created.
+-   Click **Update**

-   Navigate to your application, click _Edit_.
-   Under _Backchannel providers_ add the SCIM provider that you created.
-   Click _Update_
+-   Navigate to your application, click **Edit**.
+-   Under **Backchannel providers** add the SCIM provider that you created.
+-   Click **Update**

-The SCIM provider syncs automatically whenever you create/update/remove users, groups, or group membership. You can manually sync by going to your SCIM provider and clicking _Run sync again_. After the SCIM provider has synced, you should see the users and groups in your AWS IAM center.
+The SCIM provider syncs automatically whenever you create/update/remove users, groups, or group membership. You can manually sync by going to your SCIM provider and clicking **Run sync again**. After the SCIM provider has synced, you should see the users and groups in your AWS IAM center.
--- a/website/integrations/services/gitlab/index.md
+++ b/website/integrations/services/gitlab/index.md
@ -21,7 +21,6 @@ There are 2 ways to configure single sign on (SSO) for GitLab:
 -   [via SAML](#saml-auth)
 -   [via OIDC Connect (OAuth)](#openid-connect-auth)

-
 ### SAML auth

 #### Preparation
@ -42,11 +41,9 @@ Under _Advanced protocol settings_, set a certificate for _Signing Certificate_.

 #### GitLab Configuration

-
 Paste the following block in your `/etc/gitlab/gitlab.rb` file, after replacing the placeholder values from above.
 To get the value for `idp_cert_fingerprint`, navigate to the authentik Admin interface, expand the **System** section and select **Certificates**. Then, expand the selected certificate and copy the SHA1 Certificate Fingerprint.

-
 ```ruby
 gitlab_rails['omniauth_enabled'] = true
 gitlab_rails['omniauth_allow_single_sign_on'] = ['saml']
--- a/website/package-lock.json
+++ b/website/package-lock.json
@ -19,7 +19,7 @@
                "clsx": "^2.1.1",
                "disqus-react": "^1.1.5",
                "docusaurus-plugin-openapi-docs": "^3.0.0-beta.10",
-                "docusaurus-theme-openapi-docs": "^3.0.0-beta.10",
+                "docusaurus-theme-openapi-docs": "^3.0.1",
                "postcss": "^8.4.39",
                "prism-react-renderer": "^2.3.1",
                "react": "^18.3.1",
@ -27,7 +27,7 @@
                "react-dom": "^18.3.1",
                "react-feather": "^2.0.10",
                "react-toggle": "^4.1.3",
-                "react-tooltip": "^5.27.0",
+                "react-tooltip": "^5.27.1",
                "remark-github": "^12.0.0"
            },
            "devDependencies": {
@ -35,6 +35,7 @@
                "@docusaurus/tsconfig": "^3.4.0",
                "@docusaurus/types": "^3.3.2",
                "@types/react": "^18.3.3",
+                "cross-env": "^7.0.3",
                "lockfile-lint": "^4.14.0",
                "prettier": "3.3.2",
                "typescript": "~5.5.3"
@ -2639,6 +2640,11 @@
            "version": "1.3.0",
            "license": "MIT"
        },
+        "node_modules/@faker-js/faker": {
+            "version": "5.5.3",
+            "resolved": "https://registry.npmjs.org/@faker-js/faker/-/faker-5.5.3.tgz",
+            "integrity": "sha512-R11tGE6yIFwqpaIqcfkcg7AICXzFg14+5h5v0TfF/9+RMDL6jhzCy/pxHVOfbALGdtVYdt6JdR21tuxEgl34dw=="
+        },
        "node_modules/@floating-ui/core": {
            "version": "1.6.0",
            "license": "MIT",
@ -2872,153 +2878,6 @@
                "node": ">= 8"
            }
        },
-        "node_modules/@paloaltonetworks/openapi-to-postmanv2": {
-            "version": "3.1.0-hotfix.1",
-            "license": "Apache-2.0",
-            "dependencies": {
-                "@paloaltonetworks/postman-collection": "^4.1.0",
-                "ajv": "8.1.0",
-                "ajv-formats": "2.1.1",
-                "async": "3.2.1",
-                "commander": "2.20.3",
-                "js-yaml": "3.14.1",
-                "json-schema-merge-allof": "0.8.1",
-                "lodash": "4.17.21",
-                "oas-resolver-browser": "2.5.2",
-                "path-browserify": "1.0.1",
-                "yaml": "1.10.2"
-            },
-            "bin": {
-                "openapi2postmanv2": "bin/openapi2postmanv2.js"
-            },
-            "engines": {
-                "node": ">=8"
-            }
-        },
-        "node_modules/@paloaltonetworks/openapi-to-postmanv2/node_modules/ajv": {
-            "version": "8.1.0",
-            "license": "MIT",
-            "dependencies": {
-                "fast-deep-equal": "^3.1.1",
-                "json-schema-traverse": "^1.0.0",
-                "require-from-string": "^2.0.2",
-                "uri-js": "^4.2.2"
-            },
-            "funding": {
-                "type": "github",
-                "url": "https://github.com/sponsors/epoberezkin"
-            }
-        },
-        "node_modules/@paloaltonetworks/openapi-to-postmanv2/node_modules/argparse": {
-            "version": "1.0.10",
-            "license": "MIT",
-            "dependencies": {
-                "sprintf-js": "~1.0.2"
-            }
-        },
-        "node_modules/@paloaltonetworks/openapi-to-postmanv2/node_modules/commander": {
-            "version": "2.20.3",
-            "license": "MIT"
-        },
-        "node_modules/@paloaltonetworks/openapi-to-postmanv2/node_modules/js-yaml": {
-            "version": "3.14.1",
-            "license": "MIT",
-            "dependencies": {
-                "argparse": "^1.0.7",
-                "esprima": "^4.0.0"
-            },
-            "bin": {
-                "js-yaml": "bin/js-yaml.js"
-            }
-        },
-        "node_modules/@paloaltonetworks/postman-code-generators": {
-            "version": "1.1.15-patch.2",
-            "hasInstallScript": true,
-            "license": "Apache-2.0",
-            "dependencies": {
-                "@paloaltonetworks/postman-collection": "^4.1.0",
-                "async": "^3.2.4",
-                "path": "^0.12.7",
-                "shelljs": "^0.8.5"
-            },
-            "engines": {
-                "node": ">=6"
-            }
-        },
-        "node_modules/@paloaltonetworks/postman-code-generators/node_modules/async": {
-            "version": "3.2.5",
-            "license": "MIT"
-        },
-        "node_modules/@paloaltonetworks/postman-collection": {
-            "version": "4.1.1",
-            "license": "Apache-2.0",
-            "dependencies": {
-                "file-type": "3.9.0",
-                "http-reasons": "0.1.0",
-                "iconv-lite": "0.6.3",
-                "liquid-json": "0.3.1",
-                "lodash": "4.17.21",
-                "mime-format": "2.0.1",
-                "mime-types": "2.1.34",
-                "postman-url-encoder": "3.0.5",
-                "semver": "7.3.5",
-                "uuid": "8.3.2"
-            },
-            "engines": {
-                "node": ">=10"
-            }
-        },
-        "node_modules/@paloaltonetworks/postman-collection/node_modules/lru-cache": {
-            "version": "6.0.0",
-            "license": "ISC",
-            "dependencies": {
-                "yallist": "^4.0.0"
-            },
-            "engines": {
-                "node": ">=10"
-            }
-        },
-        "node_modules/@paloaltonetworks/postman-collection/node_modules/mime-db": {
-            "version": "1.51.0",
-            "license": "MIT",
-            "engines": {
-                "node": ">= 0.6"
-            }
-        },
-        "node_modules/@paloaltonetworks/postman-collection/node_modules/mime-types": {
-            "version": "2.1.34",
-            "license": "MIT",
-            "dependencies": {
-                "mime-db": "1.51.0"
-            },
-            "engines": {
-                "node": ">= 0.6"
-            }
-        },
-        "node_modules/@paloaltonetworks/postman-collection/node_modules/semver": {
-            "version": "7.3.5",
-            "license": "ISC",
-            "dependencies": {
-                "lru-cache": "^6.0.0"
-            },
-            "bin": {
-                "semver": "bin/semver.js"
-            },
-            "engines": {
-                "node": ">=10"
-            }
-        },
-        "node_modules/@paloaltonetworks/postman-collection/node_modules/uuid": {
-            "version": "8.3.2",
-            "license": "MIT",
-            "bin": {
-                "uuid": "dist/bin/uuid"
-            }
-        },
-        "node_modules/@paloaltonetworks/postman-collection/node_modules/yallist": {
-            "version": "4.0.0",
-            "license": "ISC"
-        },
        "node_modules/@pkgjs/parseargs": {
            "version": "0.11.0",
            "license": "MIT",
@ -3991,6 +3850,19 @@
                "url": "https://github.com/sponsors/epoberezkin"
            }
        },
+        "node_modules/ajv-draft-04": {
+            "version": "1.0.0",
+            "resolved": "https://registry.npmjs.org/ajv-draft-04/-/ajv-draft-04-1.0.0.tgz",
+            "integrity": "sha512-mv00Te6nmYbRp5DCwclxtt7yV/joXJPGS7nM+97GdxvuttCOfgI3K4U25zboyeX0O+myI8ERluxQe5wljMmVIw==",
+            "peerDependencies": {
+                "ajv": "^8.5.0"
+            },
+            "peerDependenciesMeta": {
+                "ajv": {
+                    "optional": true
+                }
+            }
+        },
        "node_modules/ajv-formats": {
            "version": "2.1.1",
            "license": "MIT",
@ -4169,8 +4041,9 @@
            }
        },
        "node_modules/async": {
-            "version": "3.2.1",
-            "license": "MIT"
+            "version": "3.2.4",
+            "resolved": "https://registry.npmjs.org/async/-/async-3.2.4.tgz",
+            "integrity": "sha512-iAB+JbDEGXhyIUavoDl9WP/Jj106Kz9DEn1DPgYw5ruDn0e3Wgi3sKFm55sASdGBNOQB8F59d9qQ7deqrHA8wQ=="
        },
        "node_modules/at-least-node": {
            "version": "1.0.0",
@ -4797,7 +4670,8 @@
        },
        "node_modules/charset": {
            "version": "1.0.1",
-            "license": "MIT",
+            "resolved": "https://registry.npmjs.org/charset/-/charset-1.0.1.tgz",
+            "integrity": "sha512-6dVyOOYjpfFcL1Y4qChrAoQLRHvj2ziyhcm0QJlhOcAhykL/k1kTUPbeo+87MNRTRdk2OIIsIXbuF3x2wi5EXg==",
            "engines": {
                "node": ">=4.0.0"
            }
@ -5136,6 +5010,8 @@
        },
        "node_modules/compute-gcd": {
            "version": "1.2.1",
+            "resolved": "https://registry.npmjs.org/compute-gcd/-/compute-gcd-1.2.1.tgz",
+            "integrity": "sha512-TwMbxBNz0l71+8Sc4czv13h4kEqnchV9igQZBi6QUaz09dnz13juGnnaWWJTRsP3brxOoxeB4SA2WELLw1hCtg==",
            "dependencies": {
                "validate.io-array": "^1.0.3",
                "validate.io-function": "^1.0.2",
@ -5144,6 +5020,8 @@
        },
        "node_modules/compute-lcm": {
            "version": "1.1.2",
+            "resolved": "https://registry.npmjs.org/compute-lcm/-/compute-lcm-1.1.2.tgz",
+            "integrity": "sha512-OFNPdQAXnQhDSKioX8/XYT6sdUlXwpeMjfd6ApxMJfyZ4GxmLR1xvMERctlYhlHwIiz6CSpBc2+qYKjHGZw4TQ==",
            "dependencies": {
                "compute-gcd": "^1.2.1",
                "validate.io-array": "^1.0.3",
@ -5395,6 +5273,24 @@
                "sha.js": "^2.4.8"
            }
        },
+        "node_modules/cross-env": {
+            "version": "7.0.3",
+            "resolved": "https://registry.npmjs.org/cross-env/-/cross-env-7.0.3.tgz",
+            "integrity": "sha512-+/HKd6EgcQCJGh2PSjZuUitQBQynKor4wrFbRg4DtAgS1aWO+gU52xpH7M9ScGgXSYmAVS9bIJ8EzuaGw0oNAw==",
+            "dev": true,
+            "dependencies": {
+                "cross-spawn": "^7.0.1"
+            },
+            "bin": {
+                "cross-env": "src/bin/cross-env.js",
+                "cross-env-shell": "src/bin/cross-env-shell.js"
+            },
+            "engines": {
+                "node": ">=10.14",
+                "npm": ">=6",
+                "yarn": ">=1"
+            }
+        },
        "node_modules/cross-spawn": {
            "version": "7.0.3",
            "license": "MIT",
@ -6141,13 +6037,6 @@
                }
            }
        },
-        "node_modules/decamelize": {
-            "version": "1.2.0",
-            "license": "MIT",
-            "engines": {
-                "node": ">=0.10.0"
-            }
-        },
        "node_modules/decode-named-character-reference": {
            "version": "1.0.2",
            "license": "MIT",
@ -6403,15 +6292,14 @@
            }
        },
        "node_modules/docusaurus-plugin-openapi-docs": {
-            "version": "3.0.0-beta.10",
-            "license": "MIT",
+            "version": "3.0.1",
+            "resolved": "https://registry.npmjs.org/docusaurus-plugin-openapi-docs/-/docusaurus-plugin-openapi-docs-3.0.1.tgz",
+            "integrity": "sha512-6SRqwey/TXMNu2G02mbWgxrifhpjGOjDr30N+58AR0Ytgc+HXMqlPAUIvTe+e7sOBfAtBbiNlmOWv5KSYIjf3w==",
            "dependencies": {
                "@apidevtools/json-schema-ref-parser": "^11.5.4",
                "@docusaurus/plugin-content-docs": "^3.0.1",
                "@docusaurus/utils": "^3.0.1",
                "@docusaurus/utils-validation": "^3.0.1",
-                "@paloaltonetworks/openapi-to-postmanv2": "3.1.0-hotfix.1",
-                "@paloaltonetworks/postman-collection": "^4.1.0",
                "@redocly/openapi-core": "^1.10.5",
                "chalk": "^4.1.2",
                "clsx": "^1.1.1",
@ -6421,6 +6309,8 @@
                "json5": "^2.2.3",
                "lodash": "^4.17.20",
                "mustache": "^4.2.0",
+                "openapi-to-postmanv2": "^4.21.0",
+                "postman-collection": "^4.4.0",
                "slugify": "^1.6.5",
                "swagger2openapi": "^7.0.8",
                "xml-formatter": "^2.6.1"
@ -6588,22 +6478,23 @@
            }
        },
        "node_modules/docusaurus-theme-openapi-docs": {
-            "version": "3.0.0-beta.10",
-            "license": "MIT",
+            "version": "3.0.1",
+            "resolved": "https://registry.npmjs.org/docusaurus-theme-openapi-docs/-/docusaurus-theme-openapi-docs-3.0.1.tgz",
+            "integrity": "sha512-tqypV91tC3wuWj9O+4n0M/e5AgHOeMT2nvPj1tjlPkC7/dLinZvpwQStT4YDUPYSoHRseqxd7lhivFQHcmlryg==",
            "dependencies": {
                "@docusaurus/theme-common": "^3.0.1",
                "@hookform/error-message": "^2.0.1",
-                "@paloaltonetworks/postman-code-generators": "1.1.15-patch.2",
-                "@paloaltonetworks/postman-collection": "^4.1.0",
                "@reduxjs/toolkit": "^1.7.1",
                "clsx": "^1.1.1",
                "copy-text-to-clipboard": "^3.1.0",
                "crypto-js": "^4.1.1",
-                "docusaurus-plugin-openapi-docs": "^3.0.0-beta.10",
+                "docusaurus-plugin-openapi-docs": "^3.0.1",
                "docusaurus-plugin-sass": "^0.2.3",
                "file-saver": "^2.0.5",
                "lodash": "^4.17.20",
                "node-polyfill-webpack-plugin": "^2.0.1",
+                "postman-code-generators": "^1.10.1",
+                "postman-collection": "^4.4.0",
                "prism-react-renderer": "^2.3.0",
                "react-hook-form": "^7.43.8",
                "react-live": "^4.0.0",
@ -7417,6 +7308,11 @@
                "node": ">=0.10.0"
            }
        },
+        "node_modules/faker": {
+            "version": "5.5.3",
+            "resolved": "https://registry.npmjs.org/faker/-/faker-5.5.3.tgz",
+            "integrity": "sha512-wLTv2a28wjUyWkbnX7u/ABZBkUkIF2fCd73V6P2oFqEGEktDfzWx4UxrSqtPRw0xPRAcjeAOIiJWqZm3pP4u3g=="
+        },
        "node_modules/fast-deep-equal": {
            "version": "3.1.3",
            "license": "MIT"
@ -7555,7 +7451,8 @@
        },
        "node_modules/file-type": {
            "version": "3.9.0",
-            "license": "MIT",
+            "resolved": "https://registry.npmjs.org/file-type/-/file-type-3.9.0.tgz",
+            "integrity": "sha512-RLoqTXE8/vPmMuTI88DAzhMYC99I8BWv7zYP4A1puo5HIjEJ5EX48ighy4ZyKMG9EDXxBgW6e++cn7d1xuFghA==",
            "engines": {
                "node": ">=0.10.0"
            }
@ -8097,6 +7994,14 @@
            "version": "4.2.11",
            "license": "ISC"
        },
+        "node_modules/graphlib": {
+            "version": "2.1.8",
+            "resolved": "https://registry.npmjs.org/graphlib/-/graphlib-2.1.8.tgz",
+            "integrity": "sha512-jcLLfkpoVGmH7/InMC/1hIvOPSUh38oJtGhvrOFGzioE1DZ+0YW16RgmOJhHiuWTvGiJQ9Z1Ik43JvkRPRvE+A==",
+            "dependencies": {
+                "lodash": "^4.17.15"
+            }
+        },
        "node_modules/gray-matter": {
            "version": "4.0.3",
            "license": "MIT",
@ -8669,7 +8574,8 @@
        },
        "node_modules/http-reasons": {
            "version": "0.1.0",
-            "license": "Apache-2.0"
+            "resolved": "https://registry.npmjs.org/http-reasons/-/http-reasons-0.1.0.tgz",
+            "integrity": "sha512-P6kYh0lKZ+y29T2Gqz+RlC9WBLhKe8kDmcJ+A+611jFfxdPsbMRQ5aNmFRM3lENqFkK+HTTL+tlQviAiv0AbLQ=="
        },
        "node_modules/http2-client": {
            "version": "1.3.5",
@ -9319,14 +9225,16 @@
        },
        "node_modules/json-schema-compare": {
            "version": "0.2.2",
-            "license": "MIT",
+            "resolved": "https://registry.npmjs.org/json-schema-compare/-/json-schema-compare-0.2.2.tgz",
+            "integrity": "sha512-c4WYmDKyJXhs7WWvAWm3uIYnfyWFoIp+JEoX34rctVvEkMYCPGhXtvmFFXiffBbxfZsvQ0RNnV5H7GvDF5HCqQ==",
            "dependencies": {
                "lodash": "^4.17.4"
            }
        },
        "node_modules/json-schema-merge-allof": {
            "version": "0.8.1",
-            "license": "MIT",
+            "resolved": "https://registry.npmjs.org/json-schema-merge-allof/-/json-schema-merge-allof-0.8.1.tgz",
+            "integrity": "sha512-CTUKmIlPJbsWfzRRnOXz+0MjIqvnleIXwFTzz+t9T86HnYX/Rozria6ZVGLktAU9e+NygNljveP+yxqtQp/Q4w==",
            "dependencies": {
                "compute-lcm": "^1.1.2",
                "json-schema-compare": "^0.2.2",
@ -9439,7 +9347,8 @@
        },
        "node_modules/liquid-json": {
            "version": "0.3.1",
-            "license": "Apache-2.0",
+            "resolved": "https://registry.npmjs.org/liquid-json/-/liquid-json-0.3.1.tgz",
+            "integrity": "sha512-wUayTU8MS827Dam6MxgD72Ui+KOSF+u/eIqpatOtjnvgJ0+mnDq33uC2M7J0tPK+upe/DpUAuK4JUU89iBoNKQ==",
            "engines": {
                "node": ">=4"
            }
@ -12198,7 +12107,8 @@
        },
        "node_modules/mime-format": {
            "version": "2.0.1",
-            "license": "Apache-2.0",
+            "resolved": "https://registry.npmjs.org/mime-format/-/mime-format-2.0.1.tgz",
+            "integrity": "sha512-XxU3ngPbEnrYnNbIX+lYSaYg0M01v6p2ntd2YaFksTu0vayaw5OJvbdRyWs07EYRlLED5qadUZ+xo+XhOvFhwg==",
            "dependencies": {
                "charset": "^1.0.0"
            }
@ -12558,15 +12468,16 @@
            }
        },
        "node_modules/oas-resolver-browser": {
-            "version": "2.5.2",
-            "license": "BSD-3-Clause",
+            "version": "2.5.6",
+            "resolved": "https://registry.npmjs.org/oas-resolver-browser/-/oas-resolver-browser-2.5.6.tgz",
+            "integrity": "sha512-Jw5elT/kwUJrnGaVuRWe1D7hmnYWB8rfDDjBnpQ+RYY/dzAewGXeTexXzt4fGEo6PUE4eqKqPWF79MZxxvMppA==",
            "dependencies": {
                "node-fetch-h2": "^2.3.0",
                "oas-kit-common": "^1.0.8",
                "path-browserify": "^1.0.1",
-                "reftools": "^1.1.6",
+                "reftools": "^1.1.9",
                "yaml": "^1.10.0",
-                "yargs": "^15.3.1"
+                "yargs": "^17.0.1"
            },
            "bin": {
                "resolve": "resolve.js"
@ -12575,136 +12486,6 @@
                "url": "https://github.com/Mermade/oas-kit?sponsor=1"
            }
        },
-        "node_modules/oas-resolver-browser/node_modules/camelcase": {
-            "version": "5.3.1",
-            "license": "MIT",
-            "engines": {
-                "node": ">=6"
-            }
-        },
-        "node_modules/oas-resolver-browser/node_modules/cliui": {
-            "version": "6.0.0",
-            "license": "ISC",
-            "dependencies": {
-                "string-width": "^4.2.0",
-                "strip-ansi": "^6.0.0",
-                "wrap-ansi": "^6.2.0"
-            }
-        },
-        "node_modules/oas-resolver-browser/node_modules/emoji-regex": {
-            "version": "8.0.0",
-            "license": "MIT"
-        },
-        "node_modules/oas-resolver-browser/node_modules/find-up": {
-            "version": "4.1.0",
-            "license": "MIT",
-            "dependencies": {
-                "locate-path": "^5.0.0",
-                "path-exists": "^4.0.0"
-            },
-            "engines": {
-                "node": ">=8"
-            }
-        },
-        "node_modules/oas-resolver-browser/node_modules/locate-path": {
-            "version": "5.0.0",
-            "license": "MIT",
-            "dependencies": {
-                "p-locate": "^4.1.0"
-            },
-            "engines": {
-                "node": ">=8"
-            }
-        },
-        "node_modules/oas-resolver-browser/node_modules/p-limit": {
-            "version": "2.3.0",
-            "license": "MIT",
-            "dependencies": {
-                "p-try": "^2.0.0"
-            },
-            "engines": {
-                "node": ">=6"
-            },
-            "funding": {
-                "url": "https://github.com/sponsors/sindresorhus"
-            }
-        },
-        "node_modules/oas-resolver-browser/node_modules/p-locate": {
-            "version": "4.1.0",
-            "license": "MIT",
-            "dependencies": {
-                "p-limit": "^2.2.0"
-            },
-            "engines": {
-                "node": ">=8"
-            }
-        },
-        "node_modules/oas-resolver-browser/node_modules/path-exists": {
-            "version": "4.0.0",
-            "license": "MIT",
-            "engines": {
-                "node": ">=8"
-            }
-        },
-        "node_modules/oas-resolver-browser/node_modules/string-width": {
-            "version": "4.2.3",
-            "license": "MIT",
-            "dependencies": {
-                "emoji-regex": "^8.0.0",
-                "is-fullwidth-code-point": "^3.0.0",
-                "strip-ansi": "^6.0.1"
-            },
-            "engines": {
-                "node": ">=8"
-            }
-        },
-        "node_modules/oas-resolver-browser/node_modules/wrap-ansi": {
-            "version": "6.2.0",
-            "license": "MIT",
-            "dependencies": {
-                "ansi-styles": "^4.0.0",
-                "string-width": "^4.1.0",
-                "strip-ansi": "^6.0.0"
-            },
-            "engines": {
-                "node": ">=8"
-            }
-        },
-        "node_modules/oas-resolver-browser/node_modules/y18n": {
-            "version": "4.0.3",
-            "license": "ISC"
-        },
-        "node_modules/oas-resolver-browser/node_modules/yargs": {
-            "version": "15.4.1",
-            "license": "MIT",
-            "dependencies": {
-                "cliui": "^6.0.0",
-                "decamelize": "^1.2.0",
-                "find-up": "^4.1.0",
-                "get-caller-file": "^2.0.1",
-                "require-directory": "^2.1.1",
-                "require-main-filename": "^2.0.0",
-                "set-blocking": "^2.0.0",
-                "string-width": "^4.2.0",
-                "which-module": "^2.0.0",
-                "y18n": "^4.0.0",
-                "yargs-parser": "^18.1.2"
-            },
-            "engines": {
-                "node": ">=8"
-            }
-        },
-        "node_modules/oas-resolver-browser/node_modules/yargs-parser": {
-            "version": "18.1.3",
-            "license": "ISC",
-            "dependencies": {
-                "camelcase": "^5.0.0",
-                "decamelize": "^1.2.0"
-            },
-            "engines": {
-                "node": ">=6"
-            }
-        },
        "node_modules/oas-schema-walker": {
            "version": "1.1.5",
            "license": "BSD-3-Clause",
@ -12740,7 +12521,6 @@
            "version": "3.0.0",
            "resolved": "https://registry.npmjs.org/object-hash/-/object-hash-3.0.0.tgz",
            "integrity": "sha512-RSn9F68PjH9HqtltsSnqYC1XXoWe9Bju5+213R98cNGttag9q9yAOTzdbsqvIa7aNm5WffBZFpWYr2aWrklWAw==",
-            "dev": true,
            "engines": {
                "node": ">= 6"
            }
@ -12845,6 +12625,103 @@
                "url": "https://github.com/sponsors/sindresorhus"
            }
        },
+        "node_modules/openapi-to-postmanv2": {
+            "version": "4.21.0",
+            "resolved": "https://registry.npmjs.org/openapi-to-postmanv2/-/openapi-to-postmanv2-4.21.0.tgz",
+            "integrity": "sha512-UyHf2xOjDfl4bIaYrUP6w4UiR894gsiOt1HR93cWOxv33Ucw4rGG0B6ewQczSGBpvFMgri+KSSykNEVjsmB55w==",
+            "dependencies": {
+                "ajv": "8.11.0",
+                "ajv-draft-04": "1.0.0",
+                "ajv-formats": "2.1.1",
+                "async": "3.2.4",
+                "commander": "2.20.3",
+                "graphlib": "2.1.8",
+                "js-yaml": "4.1.0",
+                "json-schema-merge-allof": "0.8.1",
+                "lodash": "4.17.21",
+                "oas-resolver-browser": "2.5.6",
+                "object-hash": "3.0.0",
+                "path-browserify": "1.0.1",
+                "postman-collection": "4.2.1",
+                "swagger2openapi": "7.0.8",
+                "traverse": "0.6.6",
+                "yaml": "1.10.2"
+            },
+            "bin": {
+                "openapi2postmanv2": "bin/openapi2postmanv2.js"
+            },
+            "engines": {
+                "node": ">=8"
+            }
+        },
+        "node_modules/openapi-to-postmanv2/node_modules/ajv": {
+            "version": "8.11.0",
+            "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.11.0.tgz",
+            "integrity": "sha512-wGgprdCvMalC0BztXvitD2hC04YffAvtsUn93JbGXYLAtCUO4xd17mCCZQxUOItiBwZvJScWo8NIvQMQ71rdpg==",
+            "dependencies": {
+                "fast-deep-equal": "^3.1.1",
+                "json-schema-traverse": "^1.0.0",
+                "require-from-string": "^2.0.2",
+                "uri-js": "^4.2.2"
+            },
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/epoberezkin"
+            }
+        },
+        "node_modules/openapi-to-postmanv2/node_modules/commander": {
+            "version": "2.20.3",
+            "resolved": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz",
+            "integrity": "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ=="
+        },
+        "node_modules/openapi-to-postmanv2/node_modules/mime-db": {
+            "version": "1.52.0",
+            "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
+            "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==",
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/openapi-to-postmanv2/node_modules/mime-types": {
+            "version": "2.1.35",
+            "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
+            "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
+            "dependencies": {
+                "mime-db": "1.52.0"
+            },
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/openapi-to-postmanv2/node_modules/postman-collection": {
+            "version": "4.2.1",
+            "resolved": "https://registry.npmjs.org/postman-collection/-/postman-collection-4.2.1.tgz",
+            "integrity": "sha512-DFLt3/yu8+ldtOTIzmBUctoupKJBOVK4NZO0t68K2lIir9smQg7OdQTBjOXYy+PDh7u0pSDvD66tm93eBHEPHA==",
+            "dependencies": {
+                "@faker-js/faker": "5.5.3",
+                "file-type": "3.9.0",
+                "http-reasons": "0.1.0",
+                "iconv-lite": "0.6.3",
+                "liquid-json": "0.3.1",
+                "lodash": "4.17.21",
+                "mime-format": "2.0.1",
+                "mime-types": "2.1.35",
+                "postman-url-encoder": "3.0.5",
+                "semver": "7.5.4",
+                "uuid": "8.3.2"
+            },
+            "engines": {
+                "node": ">=10"
+            }
+        },
+        "node_modules/openapi-to-postmanv2/node_modules/uuid": {
+            "version": "8.3.2",
+            "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
+            "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==",
+            "bin": {
+                "uuid": "dist/bin/uuid"
+            }
+        },
        "node_modules/opener": {
            "version": "1.5.2",
            "license": "(WTFPL OR MIT)",
@ -13055,7 +12932,8 @@
        },
        "node_modules/path": {
            "version": "0.12.7",
-            "license": "MIT",
+            "resolved": "https://registry.npmjs.org/path/-/path-0.12.7.tgz",
+            "integrity": "sha512-aXXC6s+1w7otVF9UletFkFcDsJeO7lSZBPUQhtb5O0xJe8LtYhj/GxldoL09bBj9+ZmE2hNoHqQSFMN5fikh4Q==",
            "dependencies": {
                "process": "^0.11.1",
                "util": "^0.10.3"
@ -13131,11 +13009,13 @@
        },
        "node_modules/path/node_modules/inherits": {
            "version": "2.0.3",
-            "license": "ISC"
+            "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz",
+            "integrity": "sha512-x00IRNXNy63jwGkJmzPigoySHbaqpNuzKbBOmzK+g2OdZpQ9w+sxCN+VSB3ja7IAge2OP2qpfxTjeNcyjmW1uw=="
        },
        "node_modules/path/node_modules/util": {
            "version": "0.10.4",
-            "license": "MIT",
+            "resolved": "https://registry.npmjs.org/util/-/util-0.10.4.tgz",
+            "integrity": "sha512-0Pm9hTQ3se5ll1XihRic3FDIku70C+iHUdT/W926rSgHV5QgXsYbKZN8MSC3tJtSkhuROzvsQjAaFENRXr+19A==",
            "dependencies": {
                "inherits": "2.0.3"
            }
@ -13807,9 +13687,176 @@
                "postcss": "^8.4.31"
            }
        },
+        "node_modules/postman-code-generators": {
+            "version": "1.10.1",
+            "resolved": "https://registry.npmjs.org/postman-code-generators/-/postman-code-generators-1.10.1.tgz",
+            "integrity": "sha512-VGjqIFezG6tZRP3GvSbYjLDq3bQtXUeNDnBrN5CUIbgc9siu5Ubkva9hZnFpk+/qfi+PXs3CUR5mvV+WzpMhsg==",
+            "hasInstallScript": true,
+            "dependencies": {
+                "async": "3.2.2",
+                "lodash": "4.17.21",
+                "path": "0.12.7",
+                "postman-collection": "4.0.0",
+                "shelljs": "0.8.5"
+            },
+            "engines": {
+                "node": ">=12"
+            }
+        },
+        "node_modules/postman-code-generators/node_modules/async": {
+            "version": "3.2.2",
+            "resolved": "https://registry.npmjs.org/async/-/async-3.2.2.tgz",
+            "integrity": "sha512-H0E+qZaDEfx/FY4t7iLRv1W2fFI6+pyCeTw1uN20AQPiwqwM6ojPxHxdLv4z8hi2DtnW9BOckSspLucW7pIE5g=="
+        },
+        "node_modules/postman-code-generators/node_modules/lru-cache": {
+            "version": "6.0.0",
+            "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz",
+            "integrity": "sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==",
+            "dependencies": {
+                "yallist": "^4.0.0"
+            },
+            "engines": {
+                "node": ">=10"
+            }
+        },
+        "node_modules/postman-code-generators/node_modules/mime-db": {
+            "version": "1.48.0",
+            "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.48.0.tgz",
+            "integrity": "sha512-FM3QwxV+TnZYQ2aRqhlKBMHxk10lTbMt3bBkMAp54ddrNeVSfcQYOOKuGuy3Ddrm38I04If834fOUSq1yzslJQ==",
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/postman-code-generators/node_modules/mime-types": {
+            "version": "2.1.31",
+            "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.31.tgz",
+            "integrity": "sha512-XGZnNzm3QvgKxa8dpzyhFTHmpP3l5YNusmne07VUOXxou9CqUqYa/HBy124RqtVh/O2pECas/MOcsDgpilPOPg==",
+            "dependencies": {
+                "mime-db": "1.48.0"
+            },
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/postman-code-generators/node_modules/postman-collection": {
+            "version": "4.0.0",
+            "resolved": "https://registry.npmjs.org/postman-collection/-/postman-collection-4.0.0.tgz",
+            "integrity": "sha512-vDrXG/dclSu6RMqPqBz4ZqoQBwcj/a80sJYsQZmzWJ6dWgXiudPhwu6Vm3C1Hy7zX5W8A6am1Z6vb/TB4eyURA==",
+            "dependencies": {
+                "faker": "5.5.3",
+                "file-type": "3.9.0",
+                "http-reasons": "0.1.0",
+                "iconv-lite": "0.6.3",
+                "liquid-json": "0.3.1",
+                "lodash": "4.17.21",
+                "mime-format": "2.0.1",
+                "mime-types": "2.1.31",
+                "postman-url-encoder": "3.0.1",
+                "semver": "7.3.5",
+                "uuid": "8.3.2"
+            },
+            "engines": {
+                "node": ">=10"
+            }
+        },
+        "node_modules/postman-code-generators/node_modules/postman-url-encoder": {
+            "version": "3.0.1",
+            "resolved": "https://registry.npmjs.org/postman-url-encoder/-/postman-url-encoder-3.0.1.tgz",
+            "integrity": "sha512-dMPqXnkDlstM2Eya+Gw4MIGWEan8TzldDcUKZIhZUsJ/G5JjubfQPhFhVWKzuATDMvwvrWbSjF+8VmAvbu6giw==",
+            "dependencies": {
+                "punycode": "^2.1.1"
+            },
+            "engines": {
+                "node": ">=10"
+            }
+        },
+        "node_modules/postman-code-generators/node_modules/punycode": {
+            "version": "2.3.1",
+            "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
+            "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==",
+            "engines": {
+                "node": ">=6"
+            }
+        },
+        "node_modules/postman-code-generators/node_modules/semver": {
+            "version": "7.3.5",
+            "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.5.tgz",
+            "integrity": "sha512-PoeGJYh8HK4BTO/a9Tf6ZG3veo/A7ZVsYrSA6J8ny9nb3B1VrpkuN+z9OE5wfE5p6H4LchYZsegiQgbJD94ZFQ==",
+            "dependencies": {
+                "lru-cache": "^6.0.0"
+            },
+            "bin": {
+                "semver": "bin/semver.js"
+            },
+            "engines": {
+                "node": ">=10"
+            }
+        },
+        "node_modules/postman-code-generators/node_modules/uuid": {
+            "version": "8.3.2",
+            "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
+            "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==",
+            "bin": {
+                "uuid": "dist/bin/uuid"
+            }
+        },
+        "node_modules/postman-code-generators/node_modules/yallist": {
+            "version": "4.0.0",
+            "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz",
+            "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="
+        },
+        "node_modules/postman-collection": {
+            "version": "4.4.0",
+            "resolved": "https://registry.npmjs.org/postman-collection/-/postman-collection-4.4.0.tgz",
+            "integrity": "sha512-2BGDFcUwlK08CqZFUlIC8kwRJueVzPjZnnokWPtJCd9f2J06HBQpGL7t2P1Ud1NEsK9NHq9wdipUhWLOPj5s/Q==",
+            "dependencies": {
+                "@faker-js/faker": "5.5.3",
+                "file-type": "3.9.0",
+                "http-reasons": "0.1.0",
+                "iconv-lite": "0.6.3",
+                "liquid-json": "0.3.1",
+                "lodash": "4.17.21",
+                "mime-format": "2.0.1",
+                "mime-types": "2.1.35",
+                "postman-url-encoder": "3.0.5",
+                "semver": "7.5.4",
+                "uuid": "8.3.2"
+            },
+            "engines": {
+                "node": ">=10"
+            }
+        },
+        "node_modules/postman-collection/node_modules/mime-db": {
+            "version": "1.52.0",
+            "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
+            "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==",
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/postman-collection/node_modules/mime-types": {
+            "version": "2.1.35",
+            "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
+            "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
+            "dependencies": {
+                "mime-db": "1.52.0"
+            },
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/postman-collection/node_modules/uuid": {
+            "version": "8.3.2",
+            "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
+            "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==",
+            "bin": {
+                "uuid": "dist/bin/uuid"
+            }
+        },
        "node_modules/postman-url-encoder": {
            "version": "3.0.5",
-            "license": "Apache-2.0",
+            "resolved": "https://registry.npmjs.org/postman-url-encoder/-/postman-url-encoder-3.0.5.tgz",
+            "integrity": "sha512-jOrdVvzUXBC7C+9gkIkpDJ3HIxOHTIqjpQ4C1EMt1ZGeMvSEpbFCKq23DEfgsj46vMnDgyQf+1ZLp2Wm+bKSsA==",
            "dependencies": {
                "punycode": "^2.1.1"
            },
@ -13819,7 +13866,8 @@
        },
        "node_modules/postman-url-encoder/node_modules/punycode": {
            "version": "2.3.1",
-            "license": "MIT",
+            "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
+            "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==",
            "engines": {
                "node": ">=6"
            }
@ -15035,9 +15083,9 @@
            }
        },
        "node_modules/react-tooltip": {
-            "version": "5.27.0",
-            "resolved": "https://registry.npmjs.org/react-tooltip/-/react-tooltip-5.27.0.tgz",
-            "integrity": "sha512-JXROcdfCEbCqkAkh8LyTSP3guQ0dG53iY2E2o4fw3D8clKzziMpE6QG6CclDaHELEKTzpMSeAOsdtg0ahoQosw==",
+            "version": "5.27.1",
+            "resolved": "https://registry.npmjs.org/react-tooltip/-/react-tooltip-5.27.1.tgz",
+            "integrity": "sha512-a+micPXcMOMt11CYlwJD4XShcqGziasHco4NPe1OFw298WBTILMyzUgNC1LAFViAe791JdHNVSJIpzhZm2MvDA==",
            "dependencies": {
                "@floating-ui/dom": "^1.6.1",
                "classnames": "^2.3.0"
@ -15453,10 +15501,6 @@
                "node": "*"
            }
        },
-        "node_modules/require-main-filename": {
-            "version": "2.0.0",
-            "license": "ISC"
-        },
        "node_modules/requires-port": {
            "version": "1.0.0",
            "license": "MIT"
@ -15921,10 +15965,6 @@
                "node": ">= 0.8.0"
            }
        },
-        "node_modules/set-blocking": {
-            "version": "2.0.0",
-            "license": "ISC"
-        },
        "node_modules/set-function-length": {
            "version": "1.2.2",
            "license": "MIT",
@ -16788,6 +16828,11 @@
            "version": "0.0.3",
            "license": "MIT"
        },
+        "node_modules/traverse": {
+            "version": "0.6.6",
+            "resolved": "https://registry.npmjs.org/traverse/-/traverse-0.6.6.tgz",
+            "integrity": "sha512-kdf4JKs8lbARxWdp7RKdNzoJBhGUcIalSYibuGyHJbmk40pOysQ0+QPvlkCOICOivDWU2IJo2rkrxyTK2AH4fw=="
+        },
        "node_modules/trim-lines": {
            "version": "3.0.1",
            "license": "MIT",
@ -17345,26 +17390,35 @@
        },
        "node_modules/validate.io-array": {
            "version": "1.0.6",
-            "license": "MIT"
+            "resolved": "https://registry.npmjs.org/validate.io-array/-/validate.io-array-1.0.6.tgz",
+            "integrity": "sha512-DeOy7CnPEziggrOO5CZhVKJw6S3Yi7e9e65R1Nl/RTN1vTQKnzjfvks0/8kQ40FP/dsjRAOd4hxmJ7uLa6vxkg=="
        },
        "node_modules/validate.io-function": {
-            "version": "1.0.2"
+            "version": "1.0.2",
+            "resolved": "https://registry.npmjs.org/validate.io-function/-/validate.io-function-1.0.2.tgz",
+            "integrity": "sha512-LlFybRJEriSuBnUhQyG5bwglhh50EpTL2ul23MPIuR1odjO7XaMLFV8vHGwp7AZciFxtYOeiSCT5st+XSPONiQ=="
        },
        "node_modules/validate.io-integer": {
            "version": "1.0.5",
+            "resolved": "https://registry.npmjs.org/validate.io-integer/-/validate.io-integer-1.0.5.tgz",
+            "integrity": "sha512-22izsYSLojN/P6bppBqhgUDjCkr5RY2jd+N2a3DCAUey8ydvrZ/OkGvFPR7qfOpwR2LC5p4Ngzxz36g5Vgr/hQ==",
            "dependencies": {
                "validate.io-number": "^1.0.3"
            }
        },
        "node_modules/validate.io-integer-array": {
            "version": "1.0.0",
+            "resolved": "https://registry.npmjs.org/validate.io-integer-array/-/validate.io-integer-array-1.0.0.tgz",
+            "integrity": "sha512-mTrMk/1ytQHtCY0oNO3dztafHYyGU88KL+jRxWuzfOmQb+4qqnWmI+gykvGp8usKZOM0H7keJHEbRaFiYA0VrA==",
            "dependencies": {
                "validate.io-array": "^1.0.3",
                "validate.io-integer": "^1.0.4"
            }
        },
        "node_modules/validate.io-number": {
-            "version": "1.0.3"
+            "version": "1.0.3",
+            "resolved": "https://registry.npmjs.org/validate.io-number/-/validate.io-number-1.0.3.tgz",
+            "integrity": "sha512-kRAyotcbNaSYoDnXvb4MHg/0a1egJdLwS6oJ38TJY7aw9n93Fl/3blIXdyYvPOp55CNxywooG/3BcrwNrBpcSg=="
        },
        "node_modules/value-equal": {
            "version": "1.0.1",
@ -17795,10 +17849,6 @@
                "node": ">= 8"
            }
        },
-        "node_modules/which-module": {
-            "version": "2.0.1",
-            "license": "ISC"
-        },
        "node_modules/which-typed-array": {
            "version": "1.1.15",
            "license": "MIT",
--- a/website/package.json
+++ b/website/package.json
@ -4,8 +4,8 @@
    "private": true,
    "license": "MIT",
    "scripts": {
-        "build": "cp ../docker-compose.yml static/docker-compose.yml && cp ../schema.yml static/schema.yaml && docusaurus gen-api-docs all && docusaurus build",
-        "build-bundled": "cp ../schema.yml static/schema.yaml && docusaurus gen-api-docs all && docusaurus build",
+        "build": "cp ../docker-compose.yml static/docker-compose.yml && cp ../schema.yml static/schema.yaml && docusaurus gen-api-docs all && cross-env NODE_OPTIONS='--max_old_space_size=65536' docusaurus build",
+        "build-bundled": "cp ../schema.yml static/schema.yaml && docusaurus gen-api-docs all && cross-env NODE_OPTIONS='--max_old_space_size=65536' docusaurus build",
        "deploy": "docusaurus deploy",
        "docusaurus": "docusaurus",
        "lint:lockfile": "lockfile-lint --path package.json --type npm --allowed-hosts npm --validate-https",
@ -27,7 +27,7 @@
        "clsx": "^2.1.1",
        "disqus-react": "^1.1.5",
        "docusaurus-plugin-openapi-docs": "^3.0.0-beta.10",
-        "docusaurus-theme-openapi-docs": "^3.0.0-beta.10",
+        "docusaurus-theme-openapi-docs": "^3.0.1",
        "postcss": "^8.4.39",
        "prism-react-renderer": "^2.3.1",
        "react": "^18.3.1",
@ -35,7 +35,7 @@
        "react-dom": "^18.3.1",
        "react-feather": "^2.0.10",
        "react-toggle": "^4.1.3",
-        "react-tooltip": "^5.27.0",
+        "react-tooltip": "^5.27.1",
        "remark-github": "^12.0.0"
    },
    "browserslist": {
@ -55,6 +55,7 @@
        "@docusaurus/tsconfig": "^3.4.0",
        "@docusaurus/types": "^3.3.2",
        "@types/react": "^18.3.3",
+        "cross-env": "^7.0.3",
        "lockfile-lint": "^4.14.0",
        "prettier": "3.3.2",
        "typescript": "~5.5.3"
--- a/website/sidebars.js
+++ b/website/sidebars.js
@ -253,6 +253,7 @@ const docsSidebar = {
                    label: "Executors",
                    items: [
                        "flow/executors/if-flow",
+                        "flow/executors/sfe",
                        "flow/executors/user-settings",
                        "flow/executors/headless",
                    ],