Altered directory

Merge remote-tracking branch 'origin/main' into website/docs--update-nginx-config
Language change
2025-06-12 18:26:04 +03:00 · 2025-06-12 17:58:42 +03:00 · 2025-06-12 17:58:29 +03:00 · 2025-06-12 14:24:03 +03:00
571 changed files with 9115 additions and 11149 deletions
--- a/2
+++ b/2
@ -75,7 +75,7 @@ RUN --mount=type=secret,id=GEOIPUPDATE_ACCOUNT_ID \
    /bin/sh -c "GEOIPUPDATE_LICENSE_KEY_FILE=/run/secrets/GEOIPUPDATE_LICENSE_KEY /usr/bin/entry.sh || echo 'Failed to get GeoIP database, disabling'; exit 0"

 # Stage 4: Download uv
-FROM ghcr.io/astral-sh/uv:0.7.13 AS uv
+FROM ghcr.io/astral-sh/uv:0.7.12 AS uv
 # Stage 5: Base python image
 FROM ghcr.io/goauthentik/fips-python:3.13.4-slim-bookworm-fips AS python-base

--- a/2
+++ b/2
@ -94,7 +94,7 @@ gen-build:  ## Extract the schema from the database
 	AUTHENTIK_DEBUG=true \
 		AUTHENTIK_TENANTS__ENABLED=true \
 		AUTHENTIK_OUTPOSTS__DISABLE_EMBEDDED_OUTPOST=true \
-		uv run ak make_blueprint_schema --file blueprints/schema.json
+		uv run ak make_blueprint_schema > blueprints/schema.json
 	AUTHENTIK_DEBUG=true \
 		AUTHENTIK_TENANTS__ENABLED=true \
 		AUTHENTIK_OUTPOSTS__DISABLE_EMBEDDED_OUTPOST=true \
--- a/authentik/blueprints/management/commands/make_blueprint_schema.py
+++ b/authentik/blueprints/management/commands/make_blueprint_schema.py
@ -72,33 +72,20 @@ class Command(BaseCommand):
                    "additionalProperties": True,
                },
                "entries": {
-                    "anyOf": [
-                        {
-                            "type": "array",
-                            "items": {"$ref": "#/$defs/blueprint_entry"},
-                        },
-                        {
-                            "type": "object",
-                            "additionalProperties": {
-                                "type": "array",
-                                "items": {"$ref": "#/$defs/blueprint_entry"},
-                            },
-                        },
-                    ],
+                    "type": "array",
+                    "items": {
+                        "oneOf": [],
+                    },
                },
            },
-            "$defs": {"blueprint_entry": {"oneOf": []}},
+            "$defs": {},
        }

-    def add_arguments(self, parser):
-        parser.add_argument("--file", type=str)
-
    @no_translations
-    def handle(self, *args, file: str, **options):
+    def handle(self, *args, **options):
        """Generate JSON Schema for blueprints"""
        self.build()
-        with open(file, "w") as _schema:
-            _schema.write(dumps(self.schema, indent=4, default=Command.json_default))
+        self.stdout.write(dumps(self.schema, indent=4, default=Command.json_default))

    @staticmethod
    def json_default(value: Any) -> Any:
@ -125,7 +112,7 @@ class Command(BaseCommand):
                }
            )
            model_path = f"{model._meta.app_label}.{model._meta.model_name}"
-            self.schema["$defs"]["blueprint_entry"]["oneOf"].append(
+            self.schema["properties"]["entries"]["items"]["oneOf"].append(
                self.template_entry(model_path, model, serializer)
            )

@ -147,7 +134,7 @@ class Command(BaseCommand):
                "id": {"type": "string"},
                "state": {
                    "type": "string",
-                    "enum": sorted([s.value for s in BlueprintEntryDesiredState]),
+                    "enum": [s.value for s in BlueprintEntryDesiredState],
                    "default": "present",
                },
                "conditions": {"type": "array", "items": {"type": "boolean"}},
@ -218,7 +205,7 @@ class Command(BaseCommand):
                "type": "object",
                "required": ["permission"],
                "properties": {
-                    "permission": {"type": "string", "enum": sorted(perms)},
+                    "permission": {"type": "string", "enum": perms},
                    "user": {"type": "integer"},
                    "role": {"type": "string"},
                },
--- a/authentik/blueprints/tests/fixtures/state_present.yaml
+++ b/authentik/blueprints/tests/fixtures/state_present.yaml
@ -1,11 +1,10 @@
 version: 1
 entries:
-  foo:
-      - identifiers:
-            name: "%(id)s"
-            slug: "%(id)s"
-        model: authentik_flows.flow
-        state: present
-        attrs:
-            designation: stage_configuration
-            title: foo
+    - identifiers:
+          name: "%(id)s"
+          slug: "%(id)s"
+      model: authentik_flows.flow
+      state: present
+      attrs:
+          designation: stage_configuration
+          title: foo
--- a/authentik/blueprints/v1/common.py
+++ b/authentik/blueprints/v1/common.py
@ -191,18 +191,11 @@ class Blueprint:
    """Dataclass used for a full export"""

    version: int = field(default=1)
-    entries: list[BlueprintEntry] | dict[str, list[BlueprintEntry]] = field(default_factory=list)
+    entries: list[BlueprintEntry] = field(default_factory=list)
    context: dict = field(default_factory=dict)

    metadata: BlueprintMetadata | None = field(default=None)

-    def iter_entries(self) -> Iterable[BlueprintEntry]:
-        if isinstance(self.entries, dict):
-            for _section, entries in self.entries.items():
-                yield from entries
-        else:
-            yield from self.entries
-

 class YAMLTag:
    """Base class for all YAML Tags"""
@ -233,7 +226,7 @@ class KeyOf(YAMLTag):
        self.id_from = node.value

    def resolve(self, entry: BlueprintEntry, blueprint: Blueprint) -> Any:
-        for _entry in blueprint.iter_entries():
+        for _entry in blueprint.entries:
            if _entry.id == self.id_from and _entry._state.instance:
                # Special handling for PolicyBindingModels, as they'll have a different PK
                # which is used when creating policy bindings
--- a/authentik/blueprints/v1/importer.py
+++ b/authentik/blueprints/v1/importer.py
@ -384,7 +384,7 @@ class Importer:
    def _apply_models(self, raise_errors=False) -> bool:
        """Apply (create/update) models yaml"""
        self.__pk_map = {}
-        for entry in self._import.iter_entries():
+        for entry in self._import.entries:
            model_app_label, model_name = entry.get_model(self._import).split(".")
            try:
                model: type[SerializerModel] = registry.get_model(model_app_label, model_name)
--- a/authentik/blueprints/v1/meta/registry.py
+++ b/authentik/blueprints/v1/meta/registry.py
@ -47,7 +47,7 @@ class MetaModelRegistry:
        models = apps.get_models()
        for _, value in self.models.items():
            models.append(value)
-        return sorted(models, key=str)
+        return models

    def get_model(self, app_label: str, model_id: str) -> type[Model]:
        """Get model checks if any virtual models are registered, and falls back
--- a/authentik/outposts/tests/test_ws.py
+++ b/authentik/outposts/tests/test_ws.py
@ -1,9 +1,11 @@
 """Websocket tests"""

 from dataclasses import asdict
+from unittest.mock import patch

 from channels.routing import URLRouter
 from channels.testing import WebsocketCommunicator
+from django.contrib.contenttypes.models import ContentType
 from django.test import TransactionTestCase

 from authentik import __version__
@ -14,6 +16,12 @@ from authentik.providers.proxy.models import ProxyProvider
 from authentik.root import websocket


+def patched__get_ct_cached(app_label, codename):
+    """Caches `ContentType` instances like its `QuerySet` does."""
+    return ContentType.objects.get(app_label=app_label, permission__codename=codename)
+
+
+@patch("guardian.shortcuts._get_ct_cached", patched__get_ct_cached)
 class TestOutpostWS(TransactionTestCase):
    """Websocket tests"""

--- a/authentik/providers/rac/views.py
+++ b/authentik/providers/rac/views.py
@ -20,9 +20,6 @@ from authentik.lib.utils.time import timedelta_from_string
 from authentik.policies.engine import PolicyEngine
 from authentik.policies.views import PolicyAccessView
 from authentik.providers.rac.models import ConnectionToken, Endpoint, RACProvider
-from authentik.stages.prompt.stage import PLAN_CONTEXT_PROMPT
-
-PLAN_CONNECTION_SETTINGS = "connection_settings"


 class RACStartView(PolicyAccessView):
@ -112,15 +109,10 @@ class RACFinalStage(RedirectStage):
        return super().dispatch(request, *args, **kwargs)

    def get_challenge(self, *args, **kwargs) -> RedirectChallenge:
-        settings = self.executor.plan.context.get(PLAN_CONNECTION_SETTINGS)
-        if not settings:
-            settings = self.executor.plan.context.get(PLAN_CONTEXT_PROMPT, {}).get(
-                PLAN_CONNECTION_SETTINGS
-            )
        token = ConnectionToken.objects.create(
            provider=self.provider,
            endpoint=self.endpoint,
-            settings=settings or {},
+            settings=self.executor.plan.context.get("connection_settings", {}),
            session=self.request.session["authenticatedsession"],
            expires=now() + timedelta_from_string(self.provider.connection_expiry),
            expiring=True,
--- a/authentik/root/test_runner.py
+++ b/authentik/root/test_runner.py
@ -3,38 +3,21 @@
 import os
 from argparse import ArgumentParser
 from unittest import TestCase
-from unittest.mock import patch

 import pytest
 from django.conf import settings
-from django.contrib.contenttypes.models import ContentType
 from django.test.runner import DiscoverRunner
 from structlog.stdlib import get_logger

 from authentik.lib.config import CONFIG
 from authentik.lib.sentry import sentry_init
 from authentik.root.signals import post_startup, pre_startup, startup
+from tests.e2e.utils import get_docker_tag

 # globally set maxDiff to none to show full assert error
 TestCase.maxDiff = None


-def get_docker_tag() -> str:
-    """Get docker-tag based off of CI variables"""
-    env_pr_branch = "GITHUB_HEAD_REF"
-    default_branch = "GITHUB_REF"
-    branch_name = os.environ.get(default_branch, "main")
-    if os.environ.get(env_pr_branch, "") != "":
-        branch_name = os.environ[env_pr_branch]
-    branch_name = branch_name.replace("refs/heads/", "").replace("/", "-")
-    return f"gh-{branch_name}"
-
-
-def patched__get_ct_cached(app_label, codename):
-    """Caches `ContentType` instances like its `QuerySet` does."""
-    return ContentType.objects.get(app_label=app_label, permission__codename=codename)
-
-
 class PytestTestRunner(DiscoverRunner):  # pragma: no cover
    """Runs pytest to discover and run tests."""

@ -166,9 +149,8 @@ class PytestTestRunner(DiscoverRunner):  # pragma: no cover
                return 1

        self.logger.info("Running tests", test_files=self.args)
-        with patch("guardian.shortcuts._get_ct_cached", patched__get_ct_cached):
-            try:
-                return pytest.main(self.args)
-            except Exception as e:
-                self.logger.error("Error running tests", error=str(e), test_files=self.args)
-                return 1
+        try:
+            return pytest.main(self.args)
+        except Exception as e:
+            self.logger.error("Error running tests", error=str(e), test_files=self.args)
+            return 1
--- a/authentik/stages/authenticator_webauthn/mds/blob.jwt
+++ b/authentik/stages/authenticator_webauthn/mds/blob.jwt
--- a/blueprints/schema.json
+++ b/blueprints/schema.json
--- a/lifecycle/aws/package-lock.json
+++ b/lifecycle/aws/package-lock.json
@ -9,7 +9,7 @@
            "version": "0.0.0",
            "license": "MIT",
            "devDependencies": {
-                "aws-cdk": "^2.1018.1",
+                "aws-cdk": "^2.1018.0",
                "cross-env": "^7.0.3"
            },
            "engines": {
@ -17,9 +17,9 @@
            }
        },
        "node_modules/aws-cdk": {
-            "version": "2.1018.1",
-            "resolved": "https://registry.npmjs.org/aws-cdk/-/aws-cdk-2.1018.1.tgz",
-            "integrity": "sha512-kFPRox5kSm+ktJ451o0ng9rD+60p5Kt1CZIWw8kXnvqbsxN2xv6qbmyWSXw7sGVXVwqrRKVj+71/JeDr+LMAZw==",
+            "version": "2.1018.0",
+            "resolved": "https://registry.npmjs.org/aws-cdk/-/aws-cdk-2.1018.0.tgz",
+            "integrity": "sha512-sppVsNtFJTW4wawS/PBudHCSNHb8xwaZ2WX1mpsfwaPNyTWm0eSUVJsRbRiRBu9O/Us8pgrd4woUjfM1lgD7Kw==",
            "dev": true,
            "license": "Apache-2.0",
            "bin": {
--- a/lifecycle/aws/package.json
+++ b/lifecycle/aws/package.json
@ -10,7 +10,7 @@
        "node": ">=20"
    },
    "devDependencies": {
-        "aws-cdk": "^2.1018.1",
+        "aws-cdk": "^2.1018.0",
        "cross-env": "^7.0.3"
    }
 }
--- a/locale/es/LC_MESSAGES/django.po
+++ b/locale/es/LC_MESSAGES/django.po
@ -6,18 +6,18 @@
 # Translators:
 # jcamat, 2022
 # Angel, 2024
+# Iamanaws, 2024
 # Marcelo Elizeche Landó, 2025
 # Jens L. <jens@goauthentik.io>, 2025
-# Iamanaws, 2025
 # 
 #, fuzzy
 msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-06-04 00:12+0000\n"
+"POT-Creation-Date: 2025-05-28 11:25+0000\n"
 "PO-Revision-Date: 2022-09-26 16:47+0000\n"
-"Last-Translator: Iamanaws, 2025\n"
+"Last-Translator: Jens L. <jens@goauthentik.io>, 2025\n"
 "Language-Team: Spanish (https://app.transifex.com/authentik/teams/119923/es/)\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
@ -111,7 +111,7 @@ msgstr "Certificado Web usado por el servidor web Core de authentik"

 #: authentik/brands/models.py
 msgid "Certificates used for client authentication."
-msgstr "Certificados utilizados para la autenticación del cliente."
+msgstr ""

 #: authentik/brands/models.py
 msgid "Brand"
@ -131,7 +131,7 @@ msgstr "Descripción adicional no disponible."

 #: authentik/core/api/groups.py
 msgid "Cannot set group as parent of itself."
-msgstr "No se puede establecer un grupo como su propio padre."
+msgstr "No se puede establecer el grupo como padre de sí mismo."

 #: authentik/core/api/providers.py
 msgid ""
@ -183,11 +183,11 @@ msgstr "Remueve usuario del grupo"

 #: authentik/core/models.py
 msgid "Enable superuser status"
-msgstr "Habilitar el estado de superusuario"
+msgstr "Habiliar estado de \"superusuario\""

 #: authentik/core/models.py
 msgid "Disable superuser status"
-msgstr "Deshabilitar el estado de superusuario"
+msgstr "Deshabiliar estado de \"superusuario\""

 #: authentik/core/models.py
 msgid "User's display name."
@ -241,7 +241,7 @@ msgstr "Flujo utilizado al autorizar a este proveedor."

 #: authentik/core/models.py
 msgid "Flow used ending the session from a provider."
-msgstr "Flujo utilizado para finalizar la sesión desde un proveedor."
+msgstr "Flujo usado para terminar la sesión de un proveedor."

 #: authentik/core/models.py
 msgid ""
@ -273,11 +273,11 @@ msgstr "Aplicaciones"

 #: authentik/core/models.py
 msgid "Application Entitlement"
-msgstr "Derecho de Aplicación"
+msgstr ""

 #: authentik/core/models.py
 msgid "Application Entitlements"
-msgstr "Derechos de Aplicación"
+msgstr ""

 #: authentik/core/models.py
 msgid "Use the source-specific identifier"
@ -288,9 +288,9 @@ msgid ""
 "Link to a user with identical email address. Can have security implications "
 "when a source doesn't validate email addresses."
 msgstr ""
-"Enlace a un usuario con la misma dirección de correo electrónico. Puede "
-"tener implicaciones de seguridad cuando una fuente no valida las direcciones"
-" de correo electrónico."
+"Apunta a un usuario con una dirección de correo electrónico idéntica. Puede "
+"tener implicaciones de seguridad cuando una fuente no valida la dirección de"
+" correo electrónico."

 #: authentik/core/models.py
 msgid ""
@ -305,8 +305,8 @@ msgid ""
 "Link to a user with identical username. Can have security implications when "
 "a username is used with another source."
 msgstr ""
-"Enlace a un usuario con el mismo nombre de usuario. Puede tener "
-"implicaciones de seguridad cuando un nombre de usuario se utiliza con otra "
+"Enlace a un usuario con un nombre de usuario idéntico. Puede tener "
+"implicaciones de seguridad cuando se usa un nombre de usuario con otra "
 "fuente."

 #: authentik/core/models.py
@ -322,8 +322,8 @@ msgid ""
 "Link to a group with identical name. Can have security implications when a "
 "group name is used with another source."
 msgstr ""
-"Enlace a un grupo con el mismo nombre. Puede tener implicaciones de "
-"seguridad cuando un nombre de grupo se utiliza con otra fuente."
+"Enlace a un grupo con un nombre idéntico. Puede tener implicaciones de "
+"seguridad cuando se utiliza un nombre de grupo con otra fuente."

 #: authentik/core/models.py
 msgid "Use the group name, but deny enrollment when the name already exists."
@ -385,7 +385,7 @@ msgstr "Asignaciones de Propiedades"

 #: authentik/core/models.py
 msgid "session data"
-msgstr "datos de sesión"
+msgstr ""

 #: authentik/core/models.py
 msgid "Session"
@ -424,7 +424,7 @@ msgstr "¡Autenticado exitosamente con {source}!"
 #: authentik/core/sources/flow_manager.py
 #, python-brace-format
 msgid "Successfully linked {source}!"
-msgstr "¡{source} enlazado correctamente!"
+msgstr "¡{source} vinculado exitosamente!"

 #: authentik/core/sources/flow_manager.py
 msgid "Source is not configured for enrollment."
@ -476,11 +476,11 @@ msgstr ""

 #: authentik/crypto/models.py
 msgid "Certificate-Key Pair"
-msgstr "Par Certificado-Clave"
+msgstr "Par de claves de certificado"

 #: authentik/crypto/models.py
 msgid "Certificate-Key Pairs"
-msgstr "Pares Certificado-Clave"
+msgstr "Pares de claves de certificado"

 #: authentik/enterprise/api.py
 msgid "Enterprise is required to create/update this object."
@ -511,7 +511,7 @@ msgstr ""

 #: authentik/enterprise/policies/unique_password/models.py
 msgid "Number of passwords to check against."
-msgstr "Número de contraseñas contra las que verificar."
+msgstr ""

 #: authentik/enterprise/policies/unique_password/models.py
 #: authentik/policies/password/models.py
@ -521,20 +521,18 @@ msgstr "La contraseña no se ha establecido en contexto"
 #: authentik/enterprise/policies/unique_password/models.py
 msgid "This password has been used previously. Please choose a different one."
 msgstr ""
-"Esta contraseña se ha utilizado anteriormente. Por favor, elija una "
-"diferente."

 #: authentik/enterprise/policies/unique_password/models.py
 msgid "Password Uniqueness Policy"
-msgstr "Política de Unicidad de Contraseñas"
+msgstr ""

 #: authentik/enterprise/policies/unique_password/models.py
 msgid "Password Uniqueness Policies"
-msgstr "Políticas de Unicidad de Contraseñas"
+msgstr ""

 #: authentik/enterprise/policies/unique_password/models.py
 msgid "User Password History"
-msgstr "Historial de Contraseñas del Usuario"
+msgstr ""

 #: authentik/enterprise/policy.py
 msgid "Enterprise required to access this feature."
@ -619,39 +617,39 @@ msgstr "Clave de firma"

 #: authentik/enterprise/providers/ssf/models.py
 msgid "Key used to sign the SSF Events."
-msgstr "Clave utilizada para firmar los eventos SSF."
+msgstr ""

 #: authentik/enterprise/providers/ssf/models.py
 msgid "Shared Signals Framework Provider"
-msgstr "Proveedor del Marco de Señales Compartidas"
+msgstr ""

 #: authentik/enterprise/providers/ssf/models.py
 msgid "Shared Signals Framework Providers"
-msgstr "Proveedores del Marco de Señales Compartidas"
+msgstr ""

 #: authentik/enterprise/providers/ssf/models.py
 msgid "Add stream to SSF provider"
-msgstr "Agregar flujo de datos al proveedor SSF"
+msgstr ""

 #: authentik/enterprise/providers/ssf/models.py
 msgid "SSF Stream"
-msgstr "Flujo de Datos SSF"
+msgstr ""

 #: authentik/enterprise/providers/ssf/models.py
 msgid "SSF Streams"
-msgstr "Flujos de Datos SSF"
+msgstr ""

 #: authentik/enterprise/providers/ssf/models.py
 msgid "SSF Stream Event"
-msgstr "Evento de Flujo de Datos SSF"
+msgstr ""

 #: authentik/enterprise/providers/ssf/models.py
 msgid "SSF Stream Events"
-msgstr "Eventos de Flujos de Datos SSF"
+msgstr ""

 #: authentik/enterprise/providers/ssf/tasks.py
 msgid "Failed to send request"
-msgstr "Error al enviar la solicitud"
+msgstr "Falló envio de petición"

 #: authentik/enterprise/stages/authenticator_endpoint_gdtc/models.py
 msgid "Endpoint Authenticator Google Device Trust Connector Stage"
@ -683,29 +681,26 @@ msgid ""
 "option has a higher priority than the `client_certificate` option on "
 "`Brand`."
 msgstr ""
-"Configura las autoridades certificadoras para validar el certificado. Esta "
-"opción tiene una prioridad mayor que la opción `client_certificate` en "
-"`Brand`."

 #: authentik/enterprise/stages/mtls/models.py
 msgid "Mutual TLS Stage"
-msgstr "Etapa de TLS mutuo"
+msgstr ""

 #: authentik/enterprise/stages/mtls/models.py
 msgid "Mutual TLS Stages"
-msgstr "Etapas de TLS mutuo"
+msgstr ""

 #: authentik/enterprise/stages/mtls/models.py
 msgid "Permissions to pass Certificates for outposts."
-msgstr "Permisos para pasar Certificados a los puestos avanzados."
+msgstr ""

 #: authentik/enterprise/stages/mtls/stage.py
 msgid "Certificate required but no certificate was given."
-msgstr "Se requiere certificado, pero no se proporcionó ninguno."
+msgstr ""

 #: authentik/enterprise/stages/mtls/stage.py
 msgid "No user found for certificate."
-msgstr "No se encontró usuario para el certificado."
+msgstr ""

 #: authentik/enterprise/stages/source/models.py
 msgid ""
@ -758,16 +753,12 @@ msgid ""
 "Customize the body of the request. Mapping should return data that is JSON-"
 "serializable."
 msgstr ""
-"Personaliza el cuerpo de la solicitud. El mapeo debe devolver datos que sean"
-" serializables en JSON."

 #: authentik/events/models.py
 msgid ""
 "Configure additional headers to be sent. Mapping should return a dictionary "
 "of key-value pairs"
 msgstr ""
-"Configura encabezados adicionales para enviar. El mapeo debe devolver un "
-"diccionario de pares clave-valor"

 #: authentik/events/models.py
 msgid ""
@ -795,7 +786,7 @@ msgstr "Transporte de notificaciones"

 #: authentik/events/models.py
 msgid "Notification Transports"
-msgstr "Medios de Notificación"
+msgstr "Transportes de notificación"

 #: authentik/events/models.py
 msgid "Notice"
@ -822,9 +813,9 @@ msgid ""
 "Select which transports should be used to notify the user. If none are "
 "selected, the notification will only be shown in the authentik UI."
 msgstr ""
-"Selecciona qué medios se deben usar para notificar al usuario. Si no se "
-"selecciona ninguno, la notificación solo se mostrará en la interfaz de "
-"authentik."
+"Seleccione qué transportes se deben usar para notificar al usuario. Si no se"
+" selecciona ninguno, la notificación solo se mostrará en la interfaz de "
+"usuario de authentik."

 #: authentik/events/models.py
 msgid "Controls which severity level the created notifications will have."
@ -996,7 +987,7 @@ msgstr "Evalúa políticas durante el proceso de planeación del Flujo."

 #: authentik/flows/models.py
 msgid "Evaluate policies when the Stage is presented to the user."
-msgstr "Evaluar las políticas cuando la Etapa se presenta al usuario."
+msgstr ""

 #: authentik/flows/models.py
 msgid ""
@ -1043,8 +1034,6 @@ msgid ""
 "When enabled, provider will not modify or create objects in the remote "
 "system."
 msgstr ""
-"Cuando está habilitado, el proveedor no modificará ni creará objetos en el "
-"sistema remoto."

 #: authentik/lib/sync/outgoing/tasks.py
 msgid "Starting full provider sync"
@ -1052,21 +1041,20 @@ msgstr "Iniciando sincronización completa de proveedor"

 #: authentik/lib/sync/outgoing/tasks.py
 msgid "Syncing users"
-msgstr "Sincronizando usuarios"
+msgstr ""

 #: authentik/lib/sync/outgoing/tasks.py
 msgid "Syncing groups"
-msgstr "Sincronizando grupos"
+msgstr ""

 #: authentik/lib/sync/outgoing/tasks.py
 #, python-brace-format
-msgid "Syncing page {page} of {object_type}"
-msgstr "Sincronizando página {page} de {object_type}"
+msgid "Syncing page {page} of groups"
+msgstr "Sincronizando página {page} de grupos"

 #: authentik/lib/sync/outgoing/tasks.py
 msgid "Dropping mutating request due to dry run"
 msgstr ""
-"Descartando solicitud de mutación debido a ejecución en modo de simulación"

 #: authentik/lib/sync/outgoing/tasks.py
 #, python-brace-format
@ -1245,7 +1233,7 @@ msgstr ""

 #: authentik/policies/expiry/models.py
 msgid "Password has expired."
-msgstr "La contraseña ha expirado."
+msgstr "La contraseña ha caducado."

 #: authentik/policies/expiry/models.py
 msgid "Password Expiry Policy"
@ -1283,7 +1271,7 @@ msgstr "La IP del cliente no está en un país permitido."

 #: authentik/policies/geoip/models.py
 msgid "Distance from previous authentication is larger than threshold."
-msgstr "La distancia desde la autenticación anterior es mayor que el umbral."
+msgstr "La distancia desde la autenticación previa es mayor que el límite."

 #: authentik/policies/geoip/models.py
 msgid "Distance is further than possible."
@ -1332,7 +1320,7 @@ msgstr "Vinculación de Políticas"

 #: authentik/policies/models.py
 msgid "Policy Bindings"
-msgstr "Vinculaciones de Políticas"
+msgstr "Vinculaciones de políticas"

 #: authentik/policies/models.py
 msgid ""
@ -1606,11 +1594,11 @@ msgstr "ES256 (Encriptación Asimétrica)"

 #: authentik/providers/oauth2/models.py
 msgid "ES384 (Asymmetric Encryption)"
-msgstr "ES384 (Encriptación Asimétrica)"
+msgstr ""

 #: authentik/providers/oauth2/models.py
 msgid "ES512 (Asymmetric Encryption)"
-msgstr "ES512 (Encriptación Asimétrica)"
+msgstr ""

 #: authentik/providers/oauth2/models.py
 msgid "Scope used by the client"
@ -1825,7 +1813,7 @@ msgstr "Valida Certificados SSL de servidores de origen"

 #: authentik/providers/proxy/models.py
 msgid "Internal host SSL Validation"
-msgstr "Validación SSL del host interno"
+msgstr "Validación SSL de host interno"

 #: authentik/providers/proxy/models.py
 msgid ""
@ -2039,7 +2027,7 @@ msgstr ""

 #: authentik/providers/saml/models.py
 msgid "AuthnContextClassRef Property Mapping"
-msgstr "Asignación de Propiedades de AuthnContextClassRef"
+msgstr ""

 #: authentik/providers/saml/models.py
 msgid ""
@ -2047,9 +2035,6 @@ msgid ""
 "empty, the AuthnContextClassRef will be set based on which authentication "
 "methods the user used to authenticate."
 msgstr ""
-"Configura cómo se creará el valor de AuthnContextClassRef. Si se deja vacío,"
-" el AuthnContextClassRef se establecerá según los métodos de autenticación "
-"que el usuario haya utilizado para autenticarse."

 #: authentik/providers/saml/models.py
 msgid ""
@ -2199,11 +2184,11 @@ msgstr "Predeterminado"

 #: authentik/providers/scim/models.py
 msgid "AWS"
-msgstr "AWS"
+msgstr ""

 #: authentik/providers/scim/models.py
 msgid "Slack"
-msgstr "Slack"
+msgstr ""

 #: authentik/providers/scim/models.py
 msgid "Base URL to SCIM requests, usually ends in /v2"
@ -2215,13 +2200,11 @@ msgstr "Token de Autenticación"

 #: authentik/providers/scim/models.py
 msgid "SCIM Compatibility Mode"
-msgstr "Modo de Compatibilidad SCIM"
+msgstr ""

 #: authentik/providers/scim/models.py
 msgid "Alter authentik behavior for vendor-specific SCIM implementations."
 msgstr ""
-"Modificar el comportamiento de authentik para implementaciones SCIM "
-"específicas de proveedores."

 #: authentik/providers/scim/models.py
 msgid "SCIM Provider"
@ -2249,7 +2232,7 @@ msgstr "Roles"

 #: authentik/rbac/models.py
 msgid "Initial Permissions"
-msgstr "Permisos Iniciales"
+msgstr ""

 #: authentik/rbac/models.py
 msgid "System permission"
@ -2287,7 +2270,7 @@ msgstr ""

 #: authentik/recovery/views.py
 msgid "Used recovery-link to authenticate."
-msgstr "Se utilizó un enlace de recuperación para autenticarse."
+msgstr "Se usó el enlace de recuperación para autenticarse."

 #: authentik/sources/kerberos/models.py
 msgid "Kerberos realm"
@ -2299,7 +2282,7 @@ msgstr "krb5.conf personalizado a usar. Usa el del sistema por defecto."

 #: authentik/sources/kerberos/models.py
 msgid "KAdmin server type"
-msgstr "Tipo de servidor KAdmin"
+msgstr ""

 #: authentik/sources/kerberos/models.py
 msgid "Sync users from Kerberos into authentik"
@ -2307,24 +2290,23 @@ msgstr "Sincronizar usuarios desde Kerberos hacia Authentik"

 #: authentik/sources/kerberos/models.py
 msgid "When a user changes their password, sync it back to Kerberos"
-msgstr ""
-"Cuando un usuario cambie su contraseña, sincronizarla de vuelta a Kerberos."
+msgstr "Cuando un usuario cambia su contraseña, sincronizarlo hacia Kerberos"

 #: authentik/sources/kerberos/models.py
 msgid "Principal to authenticate to kadmin for sync."
-msgstr "Principal para autenticarse en kadmin para la sincronización."
+msgstr "Principal para autenticarse como kadmin para la sincronización."

 #: authentik/sources/kerberos/models.py
 msgid "Password to authenticate to kadmin for sync"
-msgstr "Contraseña para autenticarse en kadmin para la sincronización"
+msgstr "Contraseña para autenticarse como kadmin para la sincronización"

 #: authentik/sources/kerberos/models.py
 msgid ""
 "Keytab to authenticate to kadmin for sync. Must be base64-encoded or in the "
 "form TYPE:residual"
 msgstr ""
-"Keytab para autenticarse en kadmin para la sincronización. Debe estar "
-"codificado en base64 o en el formato TIPO:residuo"
+"Keytab para autenticarse como kadmin para la sincronización. Debe estar "
+"codificado en base64 o en el formato TIPO:residual"

 #: authentik/sources/kerberos/models.py
 msgid ""
@ -2340,7 +2322,7 @@ msgid ""
 "HTTP@hostname"
 msgstr ""
 "Forzar el uso de un nombre de servidor específico para SPNEGO. Debe estar en"
-" el formato HTTP@nombre_de_host"
+" el formato HTTP@nombredelservidor"

 #: authentik/sources/kerberos/models.py
 msgid "SPNEGO keytab base64-encoded or path to keytab in the form FILE:path"
@ -2357,8 +2339,8 @@ msgid ""
 "If enabled, the authentik-stored password will be updated upon login with "
 "the Kerberos password backend"
 msgstr ""
-"Si está habilitado, la contraseña almacenada en authentik se actualizará al "
-"iniciar sesión con el backend de contraseñas de Kerberos."
+"Si está habilitado, la contraseña almacenada por authentik será actualizada "
+"al iniciar sesión con el backend de contraseñas Kerberos"

 #: authentik/sources/kerberos/models.py
 msgid "Kerberos Source"
@ -2406,7 +2388,7 @@ msgid ""
 msgstr ""
 "\n"
 "                    Asegúrate de que tienes entradas válidas\n"
-"                    (obtenibles mediante kinit) \n"
+"                    (se obtienen a través de kinit) \n"
 "                    y de haber configurado correctamente el navegador.\n"
 "                    Por favor, contacta a tu administrador.\n"
 "                "
@ -2471,10 +2453,6 @@ msgstr "DN de grupo de adición"
 msgid "Consider Objects matching this filter to be Users."
 msgstr "Considere que los objetos que coinciden con este filtro son usuarios."

-#: authentik/sources/ldap/models.py
-msgid "Attribute which matches the value of `group_membership_field`."
-msgstr "Atributo que coincide con el valor de `group_membership_field`."
-
 #: authentik/sources/ldap/models.py
 msgid "Field which contains members of a group."
 msgstr "Campo que contiene los miembros de un grupo."
@ -2507,17 +2485,12 @@ msgid ""
 "attribute. This allows nested group resolution on systems like FreeIPA and "
 "Active Directory"
 msgstr ""
-"Buscar la pertenencia a grupos basándose en un atributo del usuario en lugar"
-" de un atributo del grupo. Esto permite la resolución de grupos anidados en "
-"sistemas como FreeIPA y Active Directory"

 #: authentik/sources/ldap/models.py
 msgid ""
 "Delete authentik users and groups which were previously supplied by this "
 "source, but are now missing from it."
 msgstr ""
-"Eliminar usuarios y grupos de authentik que fueron proporcionados "
-"previamente por esta fuente, pero que ahora están ausentes."

 #: authentik/sources/ldap/models.py
 msgid "LDAP Source"
@ -2539,24 +2512,22 @@ msgstr "Asignaciones de Propiedades de Fuente de LDAP"
 msgid ""
 "Unique ID used while checking if this object still exists in the directory."
 msgstr ""
-"ID único utilizado para verificar si este objeto aún existe en el "
-"directorio."

 #: authentik/sources/ldap/models.py
 msgid "User LDAP Source Connection"
-msgstr "Conexión de Fuente LDAP de Usuario"
+msgstr ""

 #: authentik/sources/ldap/models.py
 msgid "User LDAP Source Connections"
-msgstr "Conexiones de Fuente LDAP de Usuario"
+msgstr ""

 #: authentik/sources/ldap/models.py
 msgid "Group LDAP Source Connection"
-msgstr "Conexión de Fuente LDAP de Grupo"
+msgstr ""

 #: authentik/sources/ldap/models.py
 msgid "Group LDAP Source Connections"
-msgstr "Conexiones de Fuente LDAP de Grupo"
+msgstr ""

 #: authentik/sources/ldap/signals.py
 msgid "Password does not match Active Directory Complexity."
@ -2568,11 +2539,11 @@ msgstr "No se recibió ningún token."

 #: authentik/sources/oauth/models.py
 msgid "HTTP Basic Authentication"
-msgstr "Autenticación Básica HTTP"
+msgstr ""

 #: authentik/sources/oauth/models.py
 msgid "Include the client ID and secret as request parameters"
-msgstr "Incluir el ID de cliente y el secreto como parámetros de la solicitud"
+msgstr ""

 #: authentik/sources/oauth/models.py
 msgid "Request Token URL"
@ -2619,8 +2590,6 @@ msgid ""
 "How to perform authentication during an authorization_code token request "
 "flow"
 msgstr ""
-"Cómo realizar la autenticación durante un flujo de solicitud de token con "
-"authorization_code"

 #: authentik/sources/oauth/models.py
 msgid "OAuth Source"
@ -2938,7 +2907,7 @@ msgstr "Conexiones de Fuente de SAML de Grupo"
 #: authentik/sources/saml/views.py
 #, python-brace-format
 msgid "Continue to {source_name}"
-msgstr "Continuar a {source_name}"
+msgstr ""

 #: authentik/sources/scim/models.py
 msgid "SCIM Source"
@ -2974,7 +2943,7 @@ msgstr "Dispositivos Duo"

 #: authentik/stages/authenticator_email/models.py
 msgid "Email OTP"
-msgstr "OTP por Correo Electrónico"
+msgstr ""

 #: authentik/stages/authenticator_email/models.py
 #: authentik/stages/email/models.py
@ -2995,11 +2964,11 @@ msgstr ""

 #: authentik/stages/authenticator_email/models.py
 msgid "Email Authenticator Setup Stage"
-msgstr "Etapa de Configuración del Autenticador de Correo Electrónico"
+msgstr ""

 #: authentik/stages/authenticator_email/models.py
 msgid "Email Authenticator Setup Stages"
-msgstr "Etapas de Configuración del Autenticador de Correo Electrónico"
+msgstr ""

 #: authentik/stages/authenticator_email/models.py
 #: authentik/stages/authenticator_email/stage.py
@ -3010,11 +2979,11 @@ msgstr ""

 #: authentik/stages/authenticator_email/models.py
 msgid "Email Device"
-msgstr "Dispositivo de correo electrónico"
+msgstr "Dispositivo de Email"

 #: authentik/stages/authenticator_email/models.py
 msgid "Email Devices"
-msgstr "Dispositivos de correo electrónico"
+msgstr "Dispositivos de Email"

 #: authentik/stages/authenticator_email/stage.py
 #: authentik/stages/authenticator_sms/stage.py
@ -3024,7 +2993,7 @@ msgstr "El código no coincide"

 #: authentik/stages/authenticator_email/stage.py
 msgid "Invalid email"
-msgstr "Correo electrónico inválido"
+msgstr "Email Inválido"

 #: authentik/stages/authenticator_email/templates/email/email_otp.html
 #: authentik/stages/email/templates/email/password_reset.html
@ -3044,9 +3013,6 @@ msgid ""
 "          Email MFA code.\n"
 "          "
 msgstr ""
-"\n"
-"          Código MFA por correo electrónico.\n"
-"          "

 #: authentik/stages/authenticator_email/templates/email/email_otp.html
 #, python-format
@ -3056,8 +3022,7 @@ msgid ""
 "    "
 msgstr ""
 "\n"
-"    Si no solicitaste este código, por favor ignora este correo. El código anterior es válido por %(expires)s.\n"
-"    "
+"Si no solicitaste este código, por favor ignora este correo. El código anterior es válido por %(expires)s."

 #: authentik/stages/authenticator_email/templates/email/email_otp.txt
 #: authentik/stages/email/templates/email/password_reset.txt
@ -3070,8 +3035,6 @@ msgid ""
 "\n"
 "Email MFA code\n"
 msgstr ""
-"\n"
-"Código MFA por correo electrónico\n"

 #: authentik/stages/authenticator_email/templates/email/email_otp.txt
 #, python-format
@ -3313,8 +3276,8 @@ msgstr "No se pudo validar el token"
 msgid ""
 "Offset after which consent expires. (Format: hours=1;minutes=2;seconds=3)."
 msgstr ""
-"Desfase después del cual expira el consentimiento. (Formato: "
-"hours=1;minutes=2;seconds=3)."
+"Compensación después de la cual caduca el consentimiento. (Formato: horas = "
+"1; minutos = 2; segundos = 3)."

 #: authentik/stages/consent/models.py
 msgid "Consent Stage"
@ -3334,7 +3297,7 @@ msgstr "Consentimientos del usuario"

 #: authentik/stages/consent/stage.py
 msgid "Invalid consent token, re-showing prompt"
-msgstr "Token de consentimiento inválido, mostrando el aviso nuevamente"
+msgstr ""

 #: authentik/stages/deny/models.py
 msgid "Deny Stage"
@ -3354,11 +3317,11 @@ msgstr "Etapas ficticias"

 #: authentik/stages/email/flow.py
 msgid "Continue to confirm this email address."
-msgstr "Continúa para confirmar esta dirección de correo electrónico."
+msgstr ""

 #: authentik/stages/email/flow.py
 msgid "Link was already used, please request a new link."
-msgstr "El enlace ya fue utilizado, por favor, solícita uno nuevo."
+msgstr ""

 #: authentik/stages/email/models.py
 msgid "Password Reset"
@ -3482,8 +3445,7 @@ msgid ""
 "    "
 msgstr ""
 "\n"
-"    Si no solicitaste un cambio de contraseña, por favor ignora este correo. El enlace anterior es válido por %(expires)s.\n"
-"    "
+"Si no solicitaste un cambio de contraseña, por favor ignora este correo. El enlace anterior es válido por %(expires)s."

 #: authentik/stages/email/templates/email/password_reset.txt
 msgid ""
@ -3567,26 +3529,24 @@ msgid ""
 "Show the user the 'Remember me on this device' toggle, allowing repeat users"
 " to skip straight to entering their password."
 msgstr ""
-"Mostrar al usuario la opción \"Recordarme en este dispositivo\", permitiendo"
-" que los usuarios recurrentes pasen directamente a ingresar su contraseña."

 #: authentik/stages/identification/models.py
 msgid "Optional enrollment flow, which is linked at the bottom of the page."
 msgstr ""
-"Flujo de inscripción opcional, que se enlaza en la parte inferior de la "
-"página."
+"Flujo de inscripción opcional, que está vinculado en la parte inferior de la"
+" página."

 #: authentik/stages/identification/models.py
 msgid "Optional recovery flow, which is linked at the bottom of the page."
 msgstr ""
-"Flujo de recuperación opcional, que se enlaza en la parte inferior de la "
-"página."
+"Flujo de recuperación opcional, que está vinculado en la parte inferior de "
+"la página."

 #: authentik/stages/identification/models.py
 msgid "Optional passwordless flow, which is linked at the bottom of the page."
 msgstr ""
-"Flujo opcional sin contraseña, que se enlaza en la parte inferior de la "
-"página."
+"Flujo sin contraseña opcional, el cual está vinculado en la parte inferior "
+"de la página."

 #: authentik/stages/identification/models.py
 msgid "Specify which sources should be shown."
@ -3820,11 +3780,11 @@ msgstr "Las contraseñas no coinciden."

 #: authentik/stages/redirect/api.py
 msgid "Target URL should be present when mode is Static."
-msgstr "La URL de destino debe estar presente cuando el modo es Estático."
+msgstr ""

 #: authentik/stages/redirect/api.py
 msgid "Target Flow should be present when mode is Flow."
-msgstr "El Flujo de Destino debe estar presente cuando el modo es Flujo."
+msgstr ""

 #: authentik/stages/redirect/models.py
 msgid "Redirect Stage"
@ -3881,6 +3841,10 @@ msgstr "Etapas de inicio de"
 msgid "No Pending user to login."
 msgstr "Ningún usuario pendiente para iniciar sesión."

+#: authentik/stages/user_login/stage.py
+msgid "Successfully logged in!"
+msgstr "¡Se ha iniciado sesión correctamente!"
+
 #: authentik/stages/user_logout/models.py
 msgid "User Logout Stage"
 msgstr "Etapa de cierre de sesión del usuario"
@ -3956,12 +3920,10 @@ msgstr ""
 #: authentik/tenants/models.py
 msgid "Reputation cannot decrease lower than this value. Zero or negative."
 msgstr ""
-"La reputación no puede disminuir por debajo de este valor. Cero o negativo."

 #: authentik/tenants/models.py
 msgid "Reputation cannot increase higher than this value. Zero or positive."
 msgstr ""
-"La reputación no puede aumentar por encima de este valor. Cero o positivo."

 #: authentik/tenants/models.py
 msgid "The option configures the footer links on the flow executor pages."
@ -3984,8 +3946,8 @@ msgstr "Personificación habilitada/deshabilitada globalmente."
 #: authentik/tenants/models.py
 msgid "Require administrators to provide a reason for impersonating a user."
 msgstr ""
-"Requerir que los administradores proporcionen una razón para personificar a "
-"un usuario."
+"Requerir a los administradores proporcionar una razón para suplantar un "
+"usuario."

 #: authentik/tenants/models.py
 msgid "Default token duration"
@ -3997,7 +3959,7 @@ msgstr "Longitud predeterminada del token"

 #: authentik/tenants/models.py
 msgid "Tenant"
-msgstr "Inquilino"
+msgstr "inquilino"

 #: authentik/tenants/models.py
 msgid "Tenants"
--- a/packages/eslint-config/package-lock.json
+++ b/packages/eslint-config/package-lock.json
@ -17,7 +17,7 @@
                "eslint-plugin-wc": "^3.0.1"
            },
            "devDependencies": {
-                "@goauthentik/prettier-config": "^2.0.0",
+                "@goauthentik/prettier-config": "^1.0.1",
                "@goauthentik/tsconfig": "^1.0.1",
                "@types/eslint": "^9.6.1",
                "typescript": "^5.8.3",
@ -308,9 +308,9 @@
            }
        },
        "node_modules/@goauthentik/prettier-config": {
-            "version": "2.0.0",
-            "resolved": "https://registry.npmjs.org/@goauthentik/prettier-config/-/prettier-config-2.0.0.tgz",
-            "integrity": "sha512-W+PAea+pH511lC4omoyeNGkFS+/AytrCMdtN7dIUJhaufMppYHLagyvurhyb5mUCg/j4DphCcunguj6dkiRVRw==",
+            "version": "1.0.5",
+            "resolved": "https://registry.npmjs.org/@goauthentik/prettier-config/-/prettier-config-1.0.5.tgz",
+            "integrity": "sha512-3W1uJvhzBPerDao53hSXhNzB7Ev8DbGYh+gVkuku1FaUZGBpiwD/6U3ah4sny8NoRiObGQ1geF4dhNLtlRbC/Q==",
            "dev": true,
            "license": "MIT",
            "engines": {
--- a/packages/eslint-config/package.json
+++ b/packages/eslint-config/package.json
@ -35,7 +35,7 @@
        "eslint-plugin-wc": "^3.0.1"
    },
    "devDependencies": {
-        "@goauthentik/prettier-config": "^2.0.0",
+        "@goauthentik/prettier-config": "^1.0.1",
        "@goauthentik/tsconfig": "^1.0.1",
        "@types/eslint": "^9.6.1",
        "typescript": "^5.8.3",
--- a/pyproject.toml
+++ b/pyproject.toml
@ -40,7 +40,7 @@ dependencies = [
    "gunicorn==23.0.0",
    "jsonpatch==1.33",
    "jwcrypto==1.5.6",
-    "kubernetes==33.1.0",
+    "kubernetes==32.0.1",
    "ldap3==2.9.1",
    "lxml==5.4.0",
    "msgraph-sdk==1.33.0",
@ -56,13 +56,13 @@ dependencies = [
    "pyyaml==6.0.2",
    "requests-oauthlib==2.0.0",
    "scim2-filter-parser==0.7.0",
-    "sentry-sdk==2.30.0",
+    "sentry-sdk==2.29.1",
    "service-identity==24.2.0",
    "setproctitle==1.3.6",
    "structlog==25.4.0",
    "swagger-spec-validator==3.0.4",
    "tenant-schemas-celery==3.0.0",
-    "twilio==9.6.3",
+    "twilio==9.6.2",
    "ua-parser==1.0.1",
    "unidecode==1.4.0",
    "urllib3<3",
--- a/tests/e2e/test_provider_ldap.py
+++ b/tests/e2e/test_provider_ldap.py
@ -2,6 +2,7 @@

 from dataclasses import asdict
 from time import sleep
+from unittest.mock import patch

 from guardian.shortcuts import assign_perm
 from ldap3 import ALL, ALL_ATTRIBUTES, ALL_OPERATIONAL_ATTRIBUTES, SUBTREE, Connection, Server
@ -15,10 +16,12 @@ from authentik.flows.models import Flow
 from authentik.lib.generators import generate_id
 from authentik.outposts.apps import MANAGED_OUTPOST
 from authentik.outposts.models import Outpost, OutpostConfig, OutpostType
+from authentik.outposts.tests.test_ws import patched__get_ct_cached
 from authentik.providers.ldap.models import APIAccessMode, LDAPProvider
 from tests.e2e.utils import SeleniumTestCase, retry


+@patch("guardian.shortcuts._get_ct_cached", patched__get_ct_cached)
 class TestProviderLDAP(SeleniumTestCase):
    """LDAP and Outpost e2e tests"""

--- a/tests/e2e/test_provider_proxy.py
+++ b/tests/e2e/test_provider_proxy.py
@ -6,6 +6,7 @@ from json import loads
 from sys import platform
 from time import sleep
 from unittest.case import skip, skipUnless
+from unittest.mock import patch

 from channels.testing import ChannelsLiveServerTestCase
 from jwt import decode
@ -17,10 +18,12 @@ from authentik.flows.models import Flow
 from authentik.lib.generators import generate_id
 from authentik.outposts.models import DockerServiceConnection, Outpost, OutpostConfig, OutpostType
 from authentik.outposts.tasks import outpost_connection_discovery
+from authentik.outposts.tests.test_ws import patched__get_ct_cached
 from authentik.providers.proxy.models import ProxyProvider
 from tests.e2e.utils import SeleniumTestCase, retry


+@patch("guardian.shortcuts._get_ct_cached", patched__get_ct_cached)
 class TestProviderProxy(SeleniumTestCase):
    """Proxy and Outpost e2e tests"""

--- a/tests/e2e/test_provider_proxy_forward.py
+++ b/tests/e2e/test_provider_proxy_forward.py
@ -4,6 +4,7 @@ from json import loads
 from pathlib import Path
 from time import sleep
 from unittest import skip
+from unittest.mock import patch

 from selenium.webdriver.common.by import By

@ -12,10 +13,12 @@ from authentik.core.models import Application
 from authentik.flows.models import Flow
 from authentik.lib.generators import generate_id
 from authentik.outposts.models import Outpost, OutpostType
+from authentik.outposts.tests.test_ws import patched__get_ct_cached
 from authentik.providers.proxy.models import ProxyMode, ProxyProvider
 from tests.e2e.utils import SeleniumTestCase, retry


+@patch("guardian.shortcuts._get_ct_cached", patched__get_ct_cached)
 class TestProviderProxyForward(SeleniumTestCase):
    """Proxy and Outpost e2e tests"""

--- a/tests/e2e/test_provider_radius.py
+++ b/tests/e2e/test_provider_radius.py
@ -2,6 +2,7 @@

 from dataclasses import asdict
 from time import sleep
+from unittest.mock import patch

 from pyrad.client import Client
 from pyrad.dictionary import Dictionary
@ -12,10 +13,12 @@ from authentik.core.models import Application, User
 from authentik.flows.models import Flow
 from authentik.lib.generators import generate_id, generate_key
 from authentik.outposts.models import Outpost, OutpostConfig, OutpostType
+from authentik.outposts.tests.test_ws import patched__get_ct_cached
 from authentik.providers.radius.models import RadiusProvider
 from tests.e2e.utils import SeleniumTestCase, retry


+@patch("guardian.shortcuts._get_ct_cached", patched__get_ct_cached)
 class TestProviderRadius(SeleniumTestCase):
    """Radius Outpost e2e tests"""

--- a/tests/e2e/utils.py
+++ b/tests/e2e/utils.py
@ -1,6 +1,7 @@
 """authentik e2e testing utilities"""

 import json
+import os
 import socket
 from collections.abc import Callable
 from functools import lru_cache, wraps
@ -36,12 +37,22 @@ from authentik.core.api.users import UserSerializer
 from authentik.core.models import User
 from authentik.core.tests.utils import create_test_admin_user
 from authentik.lib.generators import generate_id
-from authentik.root.test_runner import get_docker_tag

 IS_CI = "CI" in environ
 RETRIES = int(environ.get("RETRIES", "3")) if IS_CI else 1


+def get_docker_tag() -> str:
+    """Get docker-tag based off of CI variables"""
+    env_pr_branch = "GITHUB_HEAD_REF"
+    default_branch = "GITHUB_REF"
+    branch_name = os.environ.get(default_branch, "main")
+    if os.environ.get(env_pr_branch, "") != "":
+        branch_name = os.environ[env_pr_branch]
+    branch_name = branch_name.replace("refs/heads/", "").replace("/", "-")
+    return f"gh-{branch_name}"
+
+
 def get_local_ip() -> str:
    """Get the local machine's IP"""
    hostname = socket.gethostname()
--- a/uv.lock
+++ b/uv.lock
@ -301,7 +301,7 @@ requires-dist = [
    { name = "gunicorn", specifier = "==23.0.0" },
    { name = "jsonpatch", specifier = "==1.33" },
    { name = "jwcrypto", specifier = "==1.5.6" },
-    { name = "kubernetes", specifier = "==33.1.0" },
+    { name = "kubernetes", specifier = "==32.0.1" },
    { name = "ldap3", specifier = "==2.9.1" },
    { name = "lxml", specifier = "==5.4.0" },
    { name = "msgraph-sdk", specifier = "==1.33.0" },
@ -317,13 +317,13 @@ requires-dist = [
    { name = "pyyaml", specifier = "==6.0.2" },
    { name = "requests-oauthlib", specifier = "==2.0.0" },
    { name = "scim2-filter-parser", specifier = "==0.7.0" },
-    { name = "sentry-sdk", specifier = "==2.30.0" },
+    { name = "sentry-sdk", specifier = "==2.29.1" },
    { name = "service-identity", specifier = "==24.2.0" },
    { name = "setproctitle", specifier = "==1.3.6" },
    { name = "structlog", specifier = "==25.4.0" },
    { name = "swagger-spec-validator", specifier = "==3.0.4" },
    { name = "tenant-schemas-celery", specifier = "==3.0.0" },
-    { name = "twilio", specifier = "==9.6.3" },
+    { name = "twilio", specifier = "==9.6.2" },
    { name = "ua-parser", specifier = "==1.0.1" },
    { name = "unidecode", specifier = "==1.4.0" },
    { name = "urllib3", specifier = "<3" },
@ -1772,7 +1772,7 @@ wheels = [

 [[package]]
 name = "kubernetes"
-version = "33.1.0"
+version = "32.0.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
    { name = "certifi" },
@ -1787,9 +1787,9 @@ dependencies = [
    { name = "urllib3" },
    { name = "websocket-client" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/ae/52/19ebe8004c243fdfa78268a96727c71e08f00ff6fe69a301d0b7fcbce3c2/kubernetes-33.1.0.tar.gz", hash = "sha256:f64d829843a54c251061a8e7a14523b521f2dc5c896cf6d65ccf348648a88993", size = 1036779, upload-time = "2025-06-09T21:57:58.521Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/b7/e8/0598f0e8b4af37cd9b10d8b87386cf3173cb8045d834ab5f6ec347a758b3/kubernetes-32.0.1.tar.gz", hash = "sha256:42f43d49abd437ada79a79a16bd48a604d3471a117a8347e87db693f2ba0ba28", size = 946691, upload-time = "2025-02-18T21:06:34.148Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/89/43/d9bebfc3db7dea6ec80df5cb2aad8d274dd18ec2edd6c4f21f32c237cbbb/kubernetes-33.1.0-py2.py3-none-any.whl", hash = "sha256:544de42b24b64287f7e0aa9513c93cb503f7f40eea39b20f66810011a86eabc5", size = 1941335, upload-time = "2025-06-09T21:57:56.327Z" },
+    { url = "https://files.pythonhosted.org/packages/08/10/9f8af3e6f569685ce3af7faab51c8dd9d93b9c38eba339ca31c746119447/kubernetes-32.0.1-py2.py3-none-any.whl", hash = "sha256:35282ab8493b938b08ab5526c7ce66588232df00ef5e1dbe88a419107dc10998", size = 1988070, upload-time = "2025-02-18T21:06:31.391Z" },
 ]

 [[package]]
@ -2931,15 +2931,15 @@ wheels = [

 [[package]]
 name = "sentry-sdk"
-version = "2.30.0"
+version = "2.29.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
    { name = "certifi" },
    { name = "urllib3" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/04/4c/af31e0201b48469786ddeb1bf6fd3dfa3a291cc613a0fe6a60163a7535f9/sentry_sdk-2.30.0.tar.gz", hash = "sha256:436369b02afef7430efb10300a344fb61a11fe6db41c2b11f41ee037d2dd7f45", size = 326767, upload-time = "2025-06-12T10:34:34.733Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/22/67/d552a5f8e5a6a56b2feea6529e2d8ccd54349084c84176d5a1f7295044bc/sentry_sdk-2.29.1.tar.gz", hash = "sha256:8d4a0206b95fa5fe85e5e7517ed662e3888374bdc342c00e435e10e6d831aa6d", size = 325518, upload-time = "2025-05-19T14:27:38.512Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/5a/99/31ac6faaae33ea698086692638f58d14f121162a8db0039e68e94135e7f1/sentry_sdk-2.30.0-py2.py3-none-any.whl", hash = "sha256:59391db1550662f746ea09b483806a631c3ae38d6340804a1a4c0605044f6877", size = 343149, upload-time = "2025-06-12T10:34:32.896Z" },
+    { url = "https://files.pythonhosted.org/packages/f0/e5/da07b0bd832cefd52d16f2b9bbbe31624d57552602c06631686b93ccb1bd/sentry_sdk-2.29.1-py2.py3-none-any.whl", hash = "sha256:90862fe0616ded4572da6c9dadb363121a1ae49a49e21c418f0634e9d10b4c19", size = 341553, upload-time = "2025-05-19T14:27:36.882Z" },
 ]

 [[package]]
@ -3151,7 +3151,7 @@ wheels = [

 [[package]]
 name = "twilio"
-version = "9.6.3"
+version = "9.6.2"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
    { name = "aiohttp" },
@ -3159,9 +3159,9 @@ dependencies = [
    { name = "pyjwt" },
    { name = "requests" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/fb/af/1b401bc4cfd3eb41c7e2a98d0040d2bcfd2ad3217f3163401121179b3fb3/twilio-9.6.3.tar.gz", hash = "sha256:16a8c2ab9550343c25c8a195f31db9e230d9b341eca31ebdd301109910fd9730", size = 1041494, upload-time = "2025-06-12T10:40:55.63Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/fa/c9/441a07f6552f2b504812501d56c41bd85b02afeef6c23ab8baf41ed6c70e/twilio-9.6.2.tar.gz", hash = "sha256:5da13bb497e39ece34cb9f2b3bc911f3288928612748f7688b3bda262c2767a1", size = 1041300, upload-time = "2025-05-29T12:25:04.59Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/c9/35/d61a3581eb223e5e1fc0add1c397d7bb60014b22790e8f89aa5eb4e41e04/twilio-9.6.3-py2.py3-none-any.whl", hash = "sha256:a9b2cf11b0718394f12c43585ca25b9094f12b82ff975f1561fcec7f0f6f49b2", size = 1909549, upload-time = "2025-06-12T10:40:53.67Z" },
+    { url = "https://files.pythonhosted.org/packages/67/91/382e83e5d205a7ae4325b66d40cd2fa6ce85526f2ed8fc553265e19abbe4/twilio-9.6.2-py2.py3-none-any.whl", hash = "sha256:8d4af6f42850734a921857df42940f7fed84e3e4a508d0d6bef5b9fb7dc08357", size = 1909253, upload-time = "2025-05-29T12:25:02.521Z" },
 ]

 [[package]]
--- a/web/.storybook/manager.js
+++ b/web/.storybook/manager.js
@ -4,7 +4,6 @@
 * @import { ThemeVarsPartial } from "storybook/internal/theming";
 */
 import { createUIThemeEffect, resolveUITheme } from "@goauthentik/web/common/theme.ts";
-
 import { addons } from "@storybook/manager-api";
 import { create } from "@storybook/theming/create";

--- a/web/bundler/mdx-plugin/node.js
+++ b/web/bundler/mdx-plugin/node.js
@ -11,7 +11,6 @@
 * } from "esbuild"
 */
 import { MonoRepoRoot } from "@goauthentik/core/paths/node";
-
 import * as fs from "node:fs/promises";
 import * as path from "node:path";

--- a/web/eslint.config.mjs
+++ b/web/eslint.config.mjs
@ -1,5 +1,4 @@
 import { createESLintPackageConfig } from "@goauthentik/eslint-config";
-
 import tseslint from "typescript-eslint";

 // @ts-check
--- a/web/package-lock.json
+++ b/web/package-lock.json
@ -31,9 +31,10 @@
                "@open-wc/lit-helpers": "^0.7.0",
                "@patternfly/elements": "^4.1.0",
                "@patternfly/patternfly": "^4.224.2",
-                "@sentry/browser": "^9.28.1",
-                "@spotlightjs/spotlight": "^3.0.0",
+                "@sentry/browser": "^9.28.0",
+                "@spotlightjs/spotlight": "^2.13.3",
                "@webcomponents/webcomponentsjs": "^2.8.0",
+                "base64-js": "^1.5.1",
                "change-case": "^5.4.4",
                "chart.js": "^4.4.9",
                "chartjs-adapter-date-fns": "^3.0.0",
@ -65,7 +66,6 @@
                "trusted-types": "^2.0.0",
                "ts-pattern": "^5.7.1",
                "unist-util-visit": "^5.0.0",
-                "webauthn-polyfills": "^0.1.7",
                "webcomponent-qr-code": "^1.2.0",
                "yaml": "^2.8.0"
            },
@ -74,7 +74,7 @@
                "@goauthentik/core": "^1.0.0",
                "@goauthentik/esbuild-plugin-live-reload": "^1.0.4",
                "@goauthentik/eslint-config": "^1.0.5",
-                "@goauthentik/prettier-config": "^2.0.0",
+                "@goauthentik/prettier-config": "^1.0.5",
                "@goauthentik/tsconfig": "^1.0.4",
                "@hcaptcha/types": "^1.0.4",
                "@lit/localize-tools": "^0.8.0",
@ -1773,9 +1773,9 @@
            }
        },
        "node_modules/@goauthentik/prettier-config": {
-            "version": "2.0.0",
-            "resolved": "https://registry.npmjs.org/@goauthentik/prettier-config/-/prettier-config-2.0.0.tgz",
-            "integrity": "sha512-W+PAea+pH511lC4omoyeNGkFS+/AytrCMdtN7dIUJhaufMppYHLagyvurhyb5mUCg/j4DphCcunguj6dkiRVRw==",
+            "version": "1.0.5",
+            "resolved": "https://registry.npmjs.org/@goauthentik/prettier-config/-/prettier-config-1.0.5.tgz",
+            "integrity": "sha512-3W1uJvhzBPerDao53hSXhNzB7Ev8DbGYh+gVkuku1FaUZGBpiwD/6U3ah4sny8NoRiObGQ1geF4dhNLtlRbC/Q==",
            "dev": true,
            "license": "MIT",
            "engines": {
@ -4478,75 +4478,75 @@
            "dev": true
        },
        "node_modules/@sentry-internal/browser-utils": {
-            "version": "9.28.1",
-            "resolved": "https://registry.npmjs.org/@sentry-internal/browser-utils/-/browser-utils-9.28.1.tgz",
-            "integrity": "sha512-P/FEZkT7UqTw9P/2n/Y4Aa1OtGP6dnCvyqzPPkjiRdVa7Ep7S5ElBJloGv7077TLLBtAfCsEUVRlM1F6/jQoaA==",
+            "version": "9.28.0",
+            "resolved": "https://registry.npmjs.org/@sentry-internal/browser-utils/-/browser-utils-9.28.0.tgz",
+            "integrity": "sha512-SqntPnIXudP3FoKj4mQ1BVPC1RNzo4CGtAxJnLpbIUpdT/khJVM6Q59zrGl2MgZ7URZCI986L5jXihQeferf6g==",
            "license": "MIT",
            "dependencies": {
-                "@sentry/core": "9.28.1"
+                "@sentry/core": "9.28.0"
            },
            "engines": {
                "node": ">=18"
            }
        },
        "node_modules/@sentry-internal/feedback": {
-            "version": "9.28.1",
-            "resolved": "https://registry.npmjs.org/@sentry-internal/feedback/-/feedback-9.28.1.tgz",
-            "integrity": "sha512-HOk/c26D3nlClO/xEefev8fIJzRA621PFQvNFPu/y0Z5HujEqSmIsrff0cXszPPYD95h4Mwk63E0ZYdspdeXcw==",
+            "version": "9.28.0",
+            "resolved": "https://registry.npmjs.org/@sentry-internal/feedback/-/feedback-9.28.0.tgz",
+            "integrity": "sha512-z2jShmVENsesmDnShEOv841Saw0zXe1tX6GHNgkK9f6NrUMbL970JvGKByBFTffhQH6uQ0WeNPnXJ5L/YKnfDg==",
            "license": "MIT",
            "dependencies": {
-                "@sentry/core": "9.28.1"
+                "@sentry/core": "9.28.0"
            },
            "engines": {
                "node": ">=18"
            }
        },
        "node_modules/@sentry-internal/replay": {
-            "version": "9.28.1",
-            "resolved": "https://registry.npmjs.org/@sentry-internal/replay/-/replay-9.28.1.tgz",
-            "integrity": "sha512-Tv9pkfAX+1bmhxF42TL0c4uTiK2+rp5LMYEPdz6JBfpfvG/Z1unPGsuB7fQmHYKyfHBQJmi92DZV+smljm7w/g==",
+            "version": "9.28.0",
+            "resolved": "https://registry.npmjs.org/@sentry-internal/replay/-/replay-9.28.0.tgz",
+            "integrity": "sha512-BVGVBlmcpJdT55d/vywjfK1u6zMC5ycjJBxU1wUCNgCU3cSKRDBnvmYgk/+Ay23bFryT28Q4hM1p5qBBAOfxjQ==",
            "license": "MIT",
            "dependencies": {
-                "@sentry-internal/browser-utils": "9.28.1",
-                "@sentry/core": "9.28.1"
+                "@sentry-internal/browser-utils": "9.28.0",
+                "@sentry/core": "9.28.0"
            },
            "engines": {
                "node": ">=18"
            }
        },
        "node_modules/@sentry-internal/replay-canvas": {
-            "version": "9.28.1",
-            "resolved": "https://registry.npmjs.org/@sentry-internal/replay-canvas/-/replay-canvas-9.28.1.tgz",
-            "integrity": "sha512-RtkogfcIpXLFCyV8CTnXmVTH2QauT/KwmUAXBbeOz3rRWsM19yjN1moHrsjxn7OdjTv+D4qWSCA8Ka1aKSpr7g==",
+            "version": "9.28.0",
+            "resolved": "https://registry.npmjs.org/@sentry-internal/replay-canvas/-/replay-canvas-9.28.0.tgz",
+            "integrity": "sha512-Bv4mbtUrRV3p6PpFQPseLv3+Uaen+3AlfX02Z6QHY1sMa4lpt+U8OHfRGLprnzb6Rarw6fK2LNVL5rnV9LNMwA==",
            "license": "MIT",
            "dependencies": {
-                "@sentry-internal/replay": "9.28.1",
-                "@sentry/core": "9.28.1"
+                "@sentry-internal/replay": "9.28.0",
+                "@sentry/core": "9.28.0"
            },
            "engines": {
                "node": ">=18"
            }
        },
        "node_modules/@sentry/browser": {
-            "version": "9.28.1",
-            "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-9.28.1.tgz",
-            "integrity": "sha512-XAS46iQSq8lXTnv9udQP025JTf3PwSVRE9ePJVQhx25QBWxedqGhEOv5qqX9b1Ijf8KiZYXXhBWMQxBBXVzUaw==",
+            "version": "9.28.0",
+            "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-9.28.0.tgz",
+            "integrity": "sha512-ttqiv3D9sIB43nZnJTTln1nXw1p4C5BDSh+sHmGUOiqdCH6ND3HByDITYMYIOz1lACSISTT4V+MEpqx0V25Tlw==",
            "license": "MIT",
            "dependencies": {
-                "@sentry-internal/browser-utils": "9.28.1",
-                "@sentry-internal/feedback": "9.28.1",
-                "@sentry-internal/replay": "9.28.1",
-                "@sentry-internal/replay-canvas": "9.28.1",
-                "@sentry/core": "9.28.1"
+                "@sentry-internal/browser-utils": "9.28.0",
+                "@sentry-internal/feedback": "9.28.0",
+                "@sentry-internal/replay": "9.28.0",
+                "@sentry-internal/replay-canvas": "9.28.0",
+                "@sentry/core": "9.28.0"
            },
            "engines": {
                "node": ">=18"
            }
        },
        "node_modules/@sentry/core": {
-            "version": "9.28.1",
-            "resolved": "https://registry.npmjs.org/@sentry/core/-/core-9.28.1.tgz",
-            "integrity": "sha512-6q59r/71MeE+4StkvwdKAAyhBBNpWcii0HeiWBZ3l1gaFYQlb6bChjZJRZmxSzF5dnvkdF4duQbAC3JmjeIbPA==",
+            "version": "9.28.0",
+            "resolved": "https://registry.npmjs.org/@sentry/core/-/core-9.28.0.tgz",
+            "integrity": "sha512-vzD9xhg9S864jxfCpq77feCE4y7iP2cZYsNMoTupl1vTUlmXlhp7XgF832fEMjEZq4vrPhaqCNsde7Sc3PAbaQ==",
            "license": "MIT",
            "engines": {
                "node": ">=18"
@ -4685,12 +4685,6 @@
            "dev": true,
            "license": "MIT"
        },
-        "node_modules/@simplewebauthn/types": {
-            "version": "11.0.0",
-            "resolved": "https://registry.npmjs.org/@simplewebauthn/types/-/types-11.0.0.tgz",
-            "integrity": "sha512-b2o0wC5u2rWts31dTgBkAtSNKGX0cvL6h8QedNsKmj8O4QoLFQFR3DBVBUlpyVEhYKA+mXGUaXbcOc4JdQ3HzA==",
-            "license": "MIT"
-        },
        "node_modules/@sinclair/typebox": {
            "version": "0.27.8",
            "resolved": "https://registry.npmjs.org/@sinclair/typebox/-/typebox-0.27.8.tgz",
@ -4723,15 +4717,15 @@
            }
        },
        "node_modules/@spotlightjs/overlay": {
-            "version": "3.0.0",
-            "resolved": "https://registry.npmjs.org/@spotlightjs/overlay/-/overlay-3.0.0.tgz",
-            "integrity": "sha512-0b03WtsykqpcOKmjDRnRZf0GGfaEB6ZHGctLZZxFK4NHTDBNJ6BaQZjunr4XU35kKR5BT2OFp5E/DPKluih0Hg==",
+            "version": "2.15.1",
+            "resolved": "https://registry.npmjs.org/@spotlightjs/overlay/-/overlay-2.15.1.tgz",
+            "integrity": "sha512-5TpHWFRiTm8rrNINOQs9iFsqVnguFGHU1cK/bmhrysNzts4tYQT9d+kWvl++GlItKezIPbu5xPD9VoapO30cyw==",
            "license": "Apache-2.0"
        },
        "node_modules/@spotlightjs/sidecar": {
-            "version": "1.11.4",
-            "resolved": "https://registry.npmjs.org/@spotlightjs/sidecar/-/sidecar-1.11.4.tgz",
-            "integrity": "sha512-8uDJNhvt6uVNvIoBltjRBqb0a//SxkKoyPACtNjq9k9qMYSfFhE0RVtgqnJNBineXeJfxzK5uvzeG/X7pEhYeQ==",
+            "version": "1.11.3",
+            "resolved": "https://registry.npmjs.org/@spotlightjs/sidecar/-/sidecar-1.11.3.tgz",
+            "integrity": "sha512-2FNZjnvJH71pAsYlJA/LIaEZ0jdtjqrlD58F/xJ5ZhI7z6US5zIqE7DMrqaK/tvObFam71CyCncKHRG6M0l6Cg==",
            "license": "Apache-2.0",
            "dependencies": {
                "@jridgewell/trace-mapping": "^0.3.25",
@ -4747,21 +4741,21 @@
            }
        },
        "node_modules/@spotlightjs/spotlight": {
-            "version": "3.0.0",
-            "resolved": "https://registry.npmjs.org/@spotlightjs/spotlight/-/spotlight-3.0.0.tgz",
-            "integrity": "sha512-dkMineYpONLUmkHh7gvBhjf34ES8a08KDQXNem9/0JzAMy/bXSDlC95sqkX9wDfKWjq2rJKYjJulNtCuGHDaeA==",
+            "version": "2.13.3",
+            "resolved": "https://registry.npmjs.org/@spotlightjs/spotlight/-/spotlight-2.13.3.tgz",
+            "integrity": "sha512-wDnXJaSVexPC/+blgXXx2AYCk7S+5lT4TCJmu0HZAVtYd2sDgNub/wAOitsKYxvpRtIQnPe55IlvL4r1X7goSg==",
            "license": "Apache-2.0",
            "dependencies": {
                "@sentry/node": "^8.49.0",
-                "@spotlightjs/overlay": "3.0.0",
-                "@spotlightjs/sidecar": "1.11.4",
+                "@spotlightjs/overlay": "2.15.1",
+                "@spotlightjs/sidecar": "1.11.3",
                "import-meta-resolve": "^4.1.0"
            },
            "bin": {
                "spotlight": "bin/run.js"
            },
            "engines": {
-                "node": ">=20"
+                "node": ">=18"
            }
        },
        "node_modules/@stencil/core": {
@ -7284,12 +7278,6 @@
            "resolved": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz",
            "integrity": "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw=="
        },
-        "node_modules/@types/ua-parser-js": {
-            "version": "0.7.39",
-            "resolved": "https://registry.npmjs.org/@types/ua-parser-js/-/ua-parser-js-0.7.39.tgz",
-            "integrity": "sha512-P/oDfpofrdtF5xw433SPALpdSchtJmY7nsJItf8h3KXqOslkbySh8zq4dSWXH2oTjRvJ5PczVEoCZPow6GicLg==",
-            "license": "MIT"
-        },
        "node_modules/@types/unist": {
            "version": "3.0.3",
            "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz",
@ -12205,7 +12193,8 @@
        "node_modules/compare-versions": {
            "version": "6.1.1",
            "resolved": "https://registry.npmjs.org/compare-versions/-/compare-versions-6.1.1.tgz",
-            "integrity": "sha512-4hm4VPpIecmlg59CHXnRDnqGplJFrbLG4aFEl5vl6cK1u76ws3LLvX7ikFnTDl5vo39sjWD6AaDPYodJp/NNHg=="
+            "integrity": "sha512-4hm4VPpIecmlg59CHXnRDnqGplJFrbLG4aFEl5vl6cK1u76ws3LLvX7ikFnTDl5vo39sjWD6AaDPYodJp/NNHg==",
+            "dev": true
        },
        "node_modules/compatx": {
            "version": "0.1.8",
@ -17154,9 +17143,9 @@
            }
        },
        "node_modules/import-in-the-middle": {
-            "version": "1.14.0",
-            "resolved": "https://registry.npmjs.org/import-in-the-middle/-/import-in-the-middle-1.14.0.tgz",
-            "integrity": "sha512-g5zLT0HaztRJWysayWYiUq/7E5H825QIiecMD2pI5QO7Wzr847l6GDvPvmZaDIdrDtS2w7qRczywxiK6SL5vRw==",
+            "version": "1.13.2",
+            "resolved": "https://registry.npmjs.org/import-in-the-middle/-/import-in-the-middle-1.13.2.tgz",
+            "integrity": "sha512-Yjp9X7s2eHSXvZYQ0aye6UvwYPrVB5C2k47fuXjFKnYinAByaDZjh4t9MT2wEga9775n6WaIqyHnQhBxYtX2mg==",
            "license": "Apache-2.0",
            "dependencies": {
                "acorn": "^8.14.0",
@ -27128,32 +27117,6 @@
                "node": ">=8"
            }
        },
-        "node_modules/ua-parser-js": {
-            "version": "1.0.40",
-            "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-1.0.40.tgz",
-            "integrity": "sha512-z6PJ8Lml+v3ichVojCiB8toQJBuwR42ySM4ezjXIqXK3M0HczmKQ3LF4rhU55PfD99KEEXQG6yb7iOMyvYuHew==",
-            "funding": [
-                {
-                    "type": "opencollective",
-                    "url": "https://opencollective.com/ua-parser-js"
-                },
-                {
-                    "type": "paypal",
-                    "url": "https://paypal.me/faisalman"
-                },
-                {
-                    "type": "github",
-                    "url": "https://github.com/sponsors/faisalman"
-                }
-            ],
-            "license": "MIT",
-            "bin": {
-                "ua-parser-js": "script/cli.js"
-            },
-            "engines": {
-                "node": "*"
-            }
-        },
        "node_modules/uc.micro": {
            "version": "2.1.0",
            "resolved": "https://registry.npmjs.org/uc.micro/-/uc.micro-2.1.0.tgz",
@ -28497,18 +28460,6 @@
            "license": "MIT",
            "optional": true
        },
-        "node_modules/webauthn-polyfills": {
-            "version": "0.1.7",
-            "resolved": "https://registry.npmjs.org/webauthn-polyfills/-/webauthn-polyfills-0.1.7.tgz",
-            "integrity": "sha512-tOA5KPHhN8j8EBA9I90bYmsEc6CAKd1SbWJzmVn0hmTfvfiNJLGGzRPlSW4fKiQPm8BC6doPQC0CnaQdhxsL3Q==",
-            "license": "Apache-2.0",
-            "dependencies": {
-                "@simplewebauthn/types": "^11.0.0",
-                "@types/ua-parser-js": "^0.7.39",
-                "compare-versions": "^6.1.1",
-                "ua-parser-js": "^1.0.39"
-            }
-        },
        "node_modules/webcomponent-qr-code": {
            "version": "1.2.0",
            "resolved": "https://registry.npmjs.org/webcomponent-qr-code/-/webcomponent-qr-code-1.2.0.tgz",
@ -29412,7 +29363,7 @@
            "version": "1.0.0",
            "license": "MIT",
            "devDependencies": {
-                "@goauthentik/prettier-config": "^2.0.0",
+                "@goauthentik/prettier-config": "^1.0.5",
                "@goauthentik/tsconfig": "^1.0.4",
                "@types/node": "^22.15.21",
                "prettier": "^3.3.3",
@ -29447,7 +29398,7 @@
                "find-free-ports": "^3.1.1"
            },
            "devDependencies": {
-                "@goauthentik/prettier-config": "^2.0.0",
+                "@goauthentik/prettier-config": "^1.0.5",
                "@goauthentik/tsconfig": "^1.0.4",
                "@trivago/prettier-plugin-sort-imports": "^5.2.2",
                "@types/node": "^22.15.21",
@ -29504,11 +29455,11 @@
            "license": "MIT",
            "dependencies": {
                "@goauthentik/api": "^2024.6.0-1719577139",
+                "base64-js": "^1.5.1",
                "bootstrap": "^4.6.1",
                "formdata-polyfill": "^4.0.10",
                "jquery": "^3.7.1",
-                "weakmap-polyfill": "^2.0.4",
-                "webauthn-polyfills": "^0.1.7"
+                "weakmap-polyfill": "^2.0.4"
            },
            "devDependencies": {
                "@goauthentik/core": "^1.0.0",
--- a/web/package.json
+++ b/web/package.json
@ -102,9 +102,10 @@
        "@open-wc/lit-helpers": "^0.7.0",
        "@patternfly/elements": "^4.1.0",
        "@patternfly/patternfly": "^4.224.2",
-        "@sentry/browser": "^9.28.1",
-        "@spotlightjs/spotlight": "^3.0.0",
+        "@sentry/browser": "^9.28.0",
+        "@spotlightjs/spotlight": "^2.13.3",
        "@webcomponents/webcomponentsjs": "^2.8.0",
+        "base64-js": "^1.5.1",
        "change-case": "^5.4.4",
        "chart.js": "^4.4.9",
        "chartjs-adapter-date-fns": "^3.0.0",
@ -136,7 +137,6 @@
        "trusted-types": "^2.0.0",
        "ts-pattern": "^5.7.1",
        "unist-util-visit": "^5.0.0",
-        "webauthn-polyfills": "^0.1.7",
        "webcomponent-qr-code": "^1.2.0",
        "yaml": "^2.8.0"
    },
@ -145,7 +145,7 @@
        "@goauthentik/core": "^1.0.0",
        "@goauthentik/esbuild-plugin-live-reload": "^1.0.4",
        "@goauthentik/eslint-config": "^1.0.5",
-        "@goauthentik/prettier-config": "^2.0.0",
+        "@goauthentik/prettier-config": "^1.0.5",
        "@goauthentik/tsconfig": "^1.0.4",
        "@hcaptcha/types": "^1.0.4",
        "@lit/localize-tools": "^0.8.0",
--- a/web/packages/core/package.json
+++ b/web/packages/core/package.json
@ -45,7 +45,7 @@
        }
    },
    "devDependencies": {
-        "@goauthentik/prettier-config": "^2.0.0",
+        "@goauthentik/prettier-config": "^1.0.5",
        "@goauthentik/tsconfig": "^1.0.4",
        "@types/node": "^22.15.21",
        "prettier": "^3.3.3",
--- a/web/packages/core/version/node.js
+++ b/web/packages/core/version/node.js
@ -4,7 +4,6 @@
 * @runtime node
 */
 import { MonoRepoRoot } from "#paths/node";
-
 import { execSync } from "node:child_process";

 import PackageJSON from "../../../../package.json" with { type: "json" };
--- a/web/packages/esbuild-plugin-live-reload/.github/README.md
+++ b/web/packages/esbuild-plugin-live-reload/.github/README.md
@ -12,7 +12,6 @@ yarn add -D @goauthentik/esbuild-plugin-live-reload

 ```js
 import { liveReloadPlugin } from "@goauthentik/esbuild-plugin-live-reload";
-
 import esbuild from "esbuild";

 const NodeEnvironment = process.env.NODE_ENV || "development";
--- a/web/packages/esbuild-plugin-live-reload/package-lock.json
+++ b/web/packages/esbuild-plugin-live-reload/package-lock.json
@ -12,11 +12,11 @@
                "find-free-ports": "^3.1.1"
            },
            "devDependencies": {
-                "@goauthentik/prettier-config": "^2.0.0",
+                "@goauthentik/prettier-config": "^1.0.5",
                "@goauthentik/tsconfig": "^1.0.4",
                "@trivago/prettier-plugin-sort-imports": "^5.2.2",
                "@types/node": "^22.15.21",
-                "esbuild": "^0.25.5",
+                "esbuild": "^0.25.4",
                "prettier": "^3.5.3",
                "prettier-plugin-packagejson": "^2.5.14",
                "typedoc": "^0.28.5",
@ -27,7 +27,7 @@
                "node": ">=22"
            },
            "peerDependencies": {
-                "esbuild": "^0.25.5"
+                "esbuild": "^0.25.4"
            }
        },
        "node_modules/@babel/code-frame": {
@ -586,9 +586,9 @@
            }
        },
        "node_modules/@goauthentik/prettier-config": {
-            "version": "2.0.0",
-            "resolved": "https://registry.npmjs.org/@goauthentik/prettier-config/-/prettier-config-2.0.0.tgz",
-            "integrity": "sha512-W+PAea+pH511lC4omoyeNGkFS+/AytrCMdtN7dIUJhaufMppYHLagyvurhyb5mUCg/j4DphCcunguj6dkiRVRw==",
+            "version": "1.0.5",
+            "resolved": "https://registry.npmjs.org/@goauthentik/prettier-config/-/prettier-config-1.0.5.tgz",
+            "integrity": "sha512-3W1uJvhzBPerDao53hSXhNzB7Ev8DbGYh+gVkuku1FaUZGBpiwD/6U3ah4sny8NoRiObGQ1geF4dhNLtlRbC/Q==",
            "dev": true,
            "license": "MIT",
            "engines": {
--- a/web/packages/esbuild-plugin-live-reload/package.json
+++ b/web/packages/esbuild-plugin-live-reload/package.json
@ -31,7 +31,7 @@
        "find-free-ports": "^3.1.1"
    },
    "devDependencies": {
-        "@goauthentik/prettier-config": "^2.0.0",
+        "@goauthentik/prettier-config": "^1.0.5",
        "@goauthentik/tsconfig": "^1.0.4",
        "@trivago/prettier-plugin-sort-imports": "^5.2.2",
        "@types/node": "^22.15.21",
--- a/web/packages/sfe/package.json
+++ b/web/packages/sfe/package.json
@ -11,11 +11,11 @@
    },
    "dependencies": {
        "@goauthentik/api": "^2024.6.0-1719577139",
+        "base64-js": "^1.5.1",
        "bootstrap": "^4.6.1",
        "formdata-polyfill": "^4.0.10",
        "jquery": "^3.7.1",
-        "weakmap-polyfill": "^2.0.4",
-        "webauthn-polyfills": "^0.1.7"
+        "weakmap-polyfill": "^2.0.4"
    },
    "devDependencies": {
        "@goauthentik/core": "^1.0.0",
--- a/web/packages/sfe/src/index.ts
+++ b/web/packages/sfe/src/index.ts
@ -1,9 +1,7 @@
+import { fromByteArray } from "base64-js";
 import "formdata-polyfill";
-
 import $ from "jquery";
-
 import "weakmap-polyfill";
-import "webauthn-polyfills";

 import {
    type AuthenticatorValidationChallenge,
@ -259,9 +257,47 @@ class AutosubmitStage extends Stage<AutosubmitChallenge> {
    }
 }

+export interface Assertion {
+    id: string;
+    rawId: string;
+    type: string;
+    registrationClientExtensions: string;
+    response: {
+        clientDataJSON: string;
+        attestationObject: string;
+    };
+}
+
+export interface AuthAssertion {
+    id: string;
+    rawId: string;
+    type: string;
+    assertionClientExtensions: string;
+    response: {
+        clientDataJSON: string;
+        authenticatorData: string;
+        signature: string;
+        userHandle: string | null;
+    };
+}
+
 class AuthenticatorValidateStage extends Stage<AuthenticatorValidationChallenge> {
    deviceChallenge?: DeviceChallenge;

+    b64enc(buf: Uint8Array): string {
+        return fromByteArray(buf).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+    }
+
+    b64RawEnc(buf: Uint8Array): string {
+        return fromByteArray(buf).replace(/\+/g, "-").replace(/\//g, "_");
+    }
+
+    u8arr(input: string): Uint8Array {
+        return Uint8Array.from(atob(input.replace(/_/g, "/").replace(/-/g, "+")), (c) =>
+            c.charCodeAt(0),
+        );
+    }
+
    checkWebAuthnSupport(): boolean {
        if ("credentials" in navigator) {
            return true;
@ -274,6 +310,98 @@ class AuthenticatorValidateStage extends Stage<AuthenticatorValidationChallenge>
        return false;
    }

+    /**
+     * Transforms items in the credentialCreateOptions generated on the server
+     * into byte arrays expected by the navigator.credentials.create() call
+     */
+    transformCredentialCreateOptions(
+        credentialCreateOptions: PublicKeyCredentialCreationOptions,
+        userId: string,
+    ): PublicKeyCredentialCreationOptions {
+        const user = credentialCreateOptions.user;
+        // Because json can't contain raw bytes, the server base64-encodes the User ID
+        // So to get the base64 encoded byte array, we first need to convert it to a regular
+        // string, then a byte array, re-encode it and wrap that in an array.
+        const stringId = decodeURIComponent(window.atob(userId));
+        user.id = this.u8arr(this.b64enc(this.u8arr(stringId)));
+        const challenge = this.u8arr(credentialCreateOptions.challenge.toString());
+
+        return Object.assign({}, credentialCreateOptions, {
+            challenge,
+            user,
+        });
+    }
+
+    /**
+     * Transforms the binary data in the credential into base64 strings
+     * for posting to the server.
+     * @param {PublicKeyCredential} newAssertion
+     */
+    transformNewAssertionForServer(newAssertion: PublicKeyCredential): Assertion {
+        const attObj = new Uint8Array(
+            (newAssertion.response as AuthenticatorAttestationResponse).attestationObject,
+        );
+        const clientDataJSON = new Uint8Array(newAssertion.response.clientDataJSON);
+        const rawId = new Uint8Array(newAssertion.rawId);
+
+        const registrationClientExtensions = newAssertion.getClientExtensionResults();
+        return {
+            id: newAssertion.id,
+            rawId: this.b64enc(rawId),
+            type: newAssertion.type,
+            registrationClientExtensions: JSON.stringify(registrationClientExtensions),
+            response: {
+                clientDataJSON: this.b64enc(clientDataJSON),
+                attestationObject: this.b64enc(attObj),
+            },
+        };
+    }
+
+    transformCredentialRequestOptions(
+        credentialRequestOptions: PublicKeyCredentialRequestOptions,
+    ): PublicKeyCredentialRequestOptions {
+        const challenge = this.u8arr(credentialRequestOptions.challenge.toString());
+
+        const allowCredentials = (credentialRequestOptions.allowCredentials || []).map(
+            (credentialDescriptor) => {
+                const id = this.u8arr(credentialDescriptor.id.toString());
+                return Object.assign({}, credentialDescriptor, { id });
+            },
+        );
+
+        return Object.assign({}, credentialRequestOptions, {
+            challenge,
+            allowCredentials,
+        });
+    }
+
+    /**
+     * Encodes the binary data in the assertion into strings for posting to the server.
+     * @param {PublicKeyCredential} newAssertion
+     */
+    transformAssertionForServer(newAssertion: PublicKeyCredential): AuthAssertion {
+        const response = newAssertion.response as AuthenticatorAssertionResponse;
+        const authData = new Uint8Array(response.authenticatorData);
+        const clientDataJSON = new Uint8Array(response.clientDataJSON);
+        const rawId = new Uint8Array(newAssertion.rawId);
+        const sig = new Uint8Array(response.signature);
+        const assertionClientExtensions = newAssertion.getClientExtensionResults();
+
+        return {
+            id: newAssertion.id,
+            rawId: this.b64enc(rawId),
+            type: newAssertion.type,
+            assertionClientExtensions: JSON.stringify(assertionClientExtensions),
+
+            response: {
+                clientDataJSON: this.b64RawEnc(clientDataJSON),
+                signature: this.b64RawEnc(sig),
+                authenticatorData: this.b64RawEnc(authData),
+                userHandle: null,
+            },
+        };
+    }
+
    render() {
        if (this.challenge.deviceChallenges.length === 1) {
            this.deviceChallenge = this.challenge.deviceChallenges[0];
@ -377,8 +505,8 @@ class AuthenticatorValidateStage extends Stage<AuthenticatorValidationChallenge>
            `);
        navigator.credentials
            .get({
-                publicKey: PublicKeyCredential.parseRequestOptionsFromJSON(
-                    this.deviceChallenge?.challenge as PublicKeyCredentialRequestOptionsJSON,
+                publicKey: this.transformCredentialRequestOptions(
+                    this.deviceChallenge?.challenge as PublicKeyCredentialRequestOptions,
                ),
            })
            .then((assertion) => {
@ -386,9 +514,15 @@ class AuthenticatorValidateStage extends Stage<AuthenticatorValidationChallenge>
                    throw new Error("No assertion");
                }
                try {
+                    // we now have an authentication assertion! encode the byte arrays contained
+                    // in the assertion data as strings for posting to the server
+                    const transformedAssertionForServer = this.transformAssertionForServer(
+                        assertion as PublicKeyCredential,
+                    );
+
                    // post the assertion to the server for verification.
                    this.executor.submit({
-                        webauthn: (assertion as PublicKeyCredential).toJSON(),
+                        webauthn: transformedAssertionForServer,
                    });
                } catch (err) {
                    throw new Error(`Error when validating assertion on server: ${err}`);
--- a/web/paths/node.js
+++ b/web/paths/node.js
@ -4,7 +4,6 @@
 * @runtime node
 */
 import { DistDirectoryName } from "#paths";
-
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";

--- a/web/scripts/build-locales.mjs
+++ b/web/scripts/build-locales.mjs
@ -13,7 +13,6 @@
 * @import { Stats } from "fs";
 */
 import { PackageRoot } from "#paths/node";
-
 import { spawnSync } from "node:child_process";
 import { readFileSync, statSync } from "node:fs";
 import path from "node:path";
--- a/web/scripts/build-web.mjs
+++ b/web/scripts/build-web.mjs
@ -7,11 +7,9 @@
 import { mdxPlugin } from "#bundler/mdx-plugin/node";
 import { createBundleDefinitions } from "#bundler/utils/node";
 import { DistDirectory, EntryPoint, PackageRoot } from "#paths/node";
-
 import { NodeEnvironment } from "@goauthentik/core/environment/node";
 import { MonoRepoRoot, resolvePackage } from "@goauthentik/core/paths/node";
 import { readBuildIdentifier } from "@goauthentik/core/version/node";
-
 import { deepmerge } from "deepmerge-ts";
 import esbuild from "esbuild";
 import copy from "esbuild-plugin-copy";
--- a/web/scripts/pseudolocalize.mjs
+++ b/web/scripts/pseudolocalize.mjs
@ -7,7 +7,6 @@
 * @import { Locale } from "@lit/localize-tools/src/types/locale.js"
 */
 import { PackageRoot } from "#paths/node";
-
 import { readFileSync } from "node:fs";
 import path from "node:path";
 import pseudolocale from "pseudolocale";
--- a/web/src/admin/AdminInterface/AboutModal.ts
+++ b/web/src/admin/AdminInterface/AboutModal.ts
@ -1,15 +1,10 @@
-import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-import { globalAK } from "@goauthentik/common/global";
-
 import { WithBrandConfig } from "#elements/mixins/branding";
 import { WithLicenseSummary } from "#elements/mixins/license";
-
+import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
+import { globalAK } from "@goauthentik/common/global";
 import "@goauthentik/elements/EmptyState";
-
 import { ModalButton } from "@goauthentik/elements/buttons/ModalButton";

-import { AdminApi, CapabilitiesEnum, LicenseSummaryStatusEnum } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { TemplateResult, css, html } from "lit";
 import { customElement } from "lit/decorators.js";
@ -17,6 +12,8 @@ import { until } from "lit/directives/until.js";

 import PFAbout from "@patternfly/patternfly/components/AboutModalBox/about-modal-box.css";

+import { AdminApi, CapabilitiesEnum, LicenseSummaryStatusEnum } from "@goauthentik/api";
+
@customElement("ak-about-modal")
 export class AboutModal extends WithLicenseSummary(WithBrandConfig(ModalButton)) {
    static get styles() {
--- a/web/src/admin/AdminInterface/AdminSidebar.ts
+++ b/web/src/admin/AdminInterface/AdminSidebar.ts
@ -1,5 +1,4 @@
 import { ID_REGEX, SLUG_REGEX, UUID_REGEX } from "@goauthentik/elements/router/Route";
-
 import { spread } from "@open-wc/lit-helpers";

 import { msg } from "@lit/localize";
--- a/web/src/admin/AdminInterface/index.entrypoint.ts
+++ b/web/src/admin/AdminInterface/index.entrypoint.ts
@ -1,17 +1,12 @@
 import "#admin/AdminInterface/AboutModal";
-
+import type { AboutModal } from "#admin/AdminInterface/AboutModal";
+import { ROUTES } from "#admin/Routes";
 import { EVENT_API_DRAWER_TOGGLE, EVENT_NOTIFICATION_DRAWER_TOGGLE } from "#common/constants";
 import { configureSentry } from "#common/sentry/index";
 import { me } from "#common/users";
 import { WebsocketClient } from "#common/ws";
-
-import { AuthenticatedInterface } from "#elements/AuthenticatedInterface";
-
 import { SidebarToggleEventDetail } from "#components/ak-page-header";
-
-import type { AboutModal } from "#admin/AdminInterface/AboutModal";
-import { ROUTES } from "#admin/Routes";
-
+import { AuthenticatedInterface } from "#elements/AuthenticatedInterface";
 import "#elements/ak-locale-context/ak-locale-context";
 import "#elements/banner/EnterpriseStatusBanner";
 import "#elements/banner/EnterpriseStatusBanner";
@ -19,20 +14,14 @@ import "#elements/banner/VersionBanner";
 import "#elements/banner/VersionBanner";
 import "#elements/messages/MessageContainer";
 import "#elements/messages/MessageContainer";
-
 import { WithCapabilitiesConfig } from "#elements/mixins/capabilities";
-
 import "#elements/notifications/APIDrawer";
 import "#elements/notifications/NotificationDrawer";
-
 import { getURLParam, updateURLParams } from "#elements/router/RouteMatch";
-
 import "#elements/router/RouterOutlet";
 import "#elements/sidebar/Sidebar";
 import "#elements/sidebar/SidebarItem";

-import { CapabilitiesEnum, SessionUser, UiThemeEnum } from "@goauthentik/api";
-
 import { CSSResult, TemplateResult, css, html, nothing } from "lit";
 import { customElement, eventOptions, property, query } from "lit/decorators.js";
 import { classMap } from "lit/directives/class-map.js";
@ -43,6 +32,8 @@ import PFNav from "@patternfly/patternfly/components/Nav/nav.css";
 import PFPage from "@patternfly/patternfly/components/Page/page.css";
 import PFBase from "@patternfly/patternfly/patternfly-base.css";

+import { CapabilitiesEnum, SessionUser, UiThemeEnum } from "@goauthentik/api";
+
 import {
    AdminSidebarEnterpriseEntries,
    AdminSidebarEntries,
--- a/web/src/admin/DebugPage.ts
+++ b/web/src/admin/DebugPage.ts
@ -1,14 +1,9 @@
 import { DEFAULT_CONFIG } from "#common/api/config";
 import { parseAPIResponseError, pluckErrorDetail } from "#common/errors/network";
 import { MessageLevel } from "#common/messages";
-
 import "#components/ak-page-header";
-
 import { AKElement } from "#elements/Base";
 import { showMessage } from "#elements/messages/MessageContainer";
-
-import { AdminApi } from "@goauthentik/api";
-
 import * as Sentry from "@sentry/browser";

 import { CSSResult, TemplateResult, html } from "lit";
@ -20,6 +15,8 @@ import PFPage from "@patternfly/patternfly/components/Page/page.css";
 import PFGrid from "@patternfly/patternfly/layouts/Grid/grid.css";
 import PFBase from "@patternfly/patternfly/patternfly-base.css";

+import { AdminApi } from "@goauthentik/api";
+
@customElement("ak-admin-debug-page")
 export class DebugPage extends AKElement {
    static get styles(): CSSResult[] {
--- a/web/src/admin/Routes.ts
+++ b/web/src/admin/Routes.ts
@ -1,5 +1,4 @@
 import "@goauthentik/admin/admin-overview/AdminOverviewPage";
-
 import { ID_REGEX, Route, SLUG_REGEX, UUID_REGEX } from "@goauthentik/elements/router/Route";

 import { html } from "lit";
--- a/web/src/admin/admin-overview/AdminOverviewPage.ts
+++ b/web/src/admin/admin-overview/AdminOverviewPage.ts
@ -8,23 +8,14 @@ import "#admin/admin-overview/cards/WorkerStatusCard";
 import "#admin/admin-overview/charts/AdminLoginAuthorizeChart";
 import "#admin/admin-overview/charts/OutpostStatusChart";
 import "#admin/admin-overview/charts/SyncStatusChart";
-
 import { me } from "#common/users";
-
 import "#components/ak-page-header";
-
 import { AKElement } from "#elements/Base";
-
 import "#elements/cards/AggregatePromiseCard";
-
 import type { QuickAction } from "#elements/cards/QuickActionsCard";
-
 import "#elements/cards/QuickActionsCard";
-
 import { WithLicenseSummary } from "#elements/mixins/license";
 import { paramURL } from "#elements/router/RouterOutlet";
-
-import { SessionUser } from "@goauthentik/api";
 import { createReleaseNotesURL } from "@goauthentik/core/version";

 import { msg, str } from "@lit/localize";
@ -38,6 +29,8 @@ import PFPage from "@patternfly/patternfly/components/Page/page.css";
 import PFGrid from "@patternfly/patternfly/layouts/Grid/grid.css";
 import PFBase from "@patternfly/patternfly/patternfly-base.css";

+import { SessionUser } from "@goauthentik/api";
+
 const AdminOverviewBase = WithLicenseSummary(AKElement);

@customElement("ak-admin-overview")
--- a/web/src/admin/admin-overview/DashboardUserPage.ts
+++ b/web/src/admin/admin-overview/DashboardUserPage.ts
@ -1,12 +1,8 @@
 import "#admin/admin-overview/charts/AdminModelPerDay";
 import "#components/ak-page-header";
-
 import { AKElement } from "#elements/Base";
-
 import "#elements/cards/AggregatePromiseCard";

-import { EventActions, EventsEventsVolumeListRequest } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { CSSResult, TemplateResult, css, html } from "lit";
 import { customElement } from "lit/decorators.js";
@ -17,6 +13,8 @@ import PFList from "@patternfly/patternfly/components/List/list.css";
 import PFPage from "@patternfly/patternfly/components/Page/page.css";
 import PFGrid from "@patternfly/patternfly/layouts/Grid/grid.css";

+import { EventActions, EventsEventsVolumeListRequest } from "@goauthentik/api";
+
@customElement("ak-admin-dashboard-users")
 export class DashboardUserPage extends AKElement {
    static get styles(): CSSResult[] {
--- a/web/src/admin/admin-overview/TopApplicationsTable.ts
+++ b/web/src/admin/admin-overview/TopApplicationsTable.ts
@ -1,17 +1,15 @@
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import { AKElement } from "@goauthentik/elements/Base";
-
 import "@goauthentik/elements/Spinner";

-import { EventTopPerUser, EventsApi } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { CSSResult, TemplateResult, html } from "lit";
 import { customElement, property } from "lit/decorators.js";

 import PFTable from "@patternfly/patternfly/components/Table/table.css";

+import { EventTopPerUser, EventsApi } from "@goauthentik/api";
+
@customElement("ak-top-applications-table")
 export class TopApplicationsTable extends AKElement {
    @property({ attribute: false })
--- a/web/src/admin/admin-overview/cards/AdminStatusCard.ts
+++ b/web/src/admin/admin-overview/cards/AdminStatusCard.ts
@ -5,7 +5,6 @@ import {
    parseAPIResponseError,
    pluckErrorDetail,
 } from "@goauthentik/common/errors/network";
-
 import { AggregateCard } from "@goauthentik/elements/cards/AggregateCard";

 import { msg } from "@lit/localize";
--- a/web/src/admin/admin-overview/cards/FipsStatusCard.ts
+++ b/web/src/admin/admin-overview/cards/FipsStatusCard.ts
@ -1,16 +1,15 @@
-import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import {
    AdminStatus,
    AdminStatusCard,
 } from "@goauthentik/admin/admin-overview/cards/AdminStatusCard";
-
-import { AdminApi, SystemInfo } from "@goauthentik/api";
+import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";

 import { msg } from "@lit/localize";
 import { TemplateResult, html } from "lit";
 import { customElement, state } from "lit/decorators.js";

+import { AdminApi, SystemInfo } from "@goauthentik/api";
+
 type StatusContent = { icon: string; message: TemplateResult };

@customElement("ak-admin-fips-status-system")
--- a/web/src/admin/admin-overview/cards/RecentEventsCard.ts
+++ b/web/src/admin/admin-overview/cards/RecentEventsCard.ts
@ -1,28 +1,25 @@
+import { EventGeo, EventUser } from "@goauthentik/admin/events/utils";
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
 import { EventWithContext } from "@goauthentik/common/events";
 import { actionToLabel } from "@goauthentik/common/labels";
 import { formatElapsedTime } from "@goauthentik/common/temporal";
-
-import { EventGeo, EventUser } from "@goauthentik/admin/events/utils";
-
 import "@goauthentik/components/ak-event-info";
 import "@goauthentik/elements/Tabs";
 import "@goauthentik/elements/buttons/Dropdown";
 import "@goauthentik/elements/buttons/ModalButton";
 import "@goauthentik/elements/buttons/SpinnerButton";
-
 import { PaginatedResponse } from "@goauthentik/elements/table/Table";
 import { Table, TableColumn } from "@goauthentik/elements/table/Table";
 import { SlottedTemplateResult } from "@goauthentik/elements/types";

-import { Event, EventsApi } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { CSSResult, TemplateResult, css, html } from "lit";
 import { customElement, property } from "lit/decorators.js";

 import PFCard from "@patternfly/patternfly/components/Card/card.css";

+import { Event, EventsApi } from "@goauthentik/api";
+
@customElement("ak-recent-events")
 export class RecentEventsCard extends Table<Event> {
    @property()
--- a/web/src/admin/admin-overview/cards/SystemStatusCard.ts
+++ b/web/src/admin/admin-overview/cards/SystemStatusCard.ts
@ -1,16 +1,15 @@
-import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import {
    AdminStatus,
    AdminStatusCard,
 } from "@goauthentik/admin/admin-overview/cards/AdminStatusCard";
-
-import { AdminApi, OutpostsApi, SystemInfo } from "@goauthentik/api";
+import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";

 import { msg } from "@lit/localize";
 import { TemplateResult, html } from "lit";
 import { customElement, state } from "lit/decorators.js";

+import { AdminApi, OutpostsApi, SystemInfo } from "@goauthentik/api";
+
@customElement("ak-admin-status-system")
 export class SystemStatusCard extends AdminStatusCard<SystemInfo> {
    now?: Date;
--- a/web/src/admin/admin-overview/cards/VersionStatusCard.ts
+++ b/web/src/admin/admin-overview/cards/VersionStatusCard.ts
@ -1,16 +1,15 @@
-import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import {
    AdminStatus,
    AdminStatusCard,
 } from "@goauthentik/admin/admin-overview/cards/AdminStatusCard";
-
-import { AdminApi, Version } from "@goauthentik/api";
+import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";

 import { msg, str } from "@lit/localize";
 import { TemplateResult, html } from "lit";
 import { customElement } from "lit/decorators.js";

+import { AdminApi, Version } from "@goauthentik/api";
+
@customElement("ak-admin-status-version")
 export class VersionStatusCard extends AdminStatusCard<Version> {
    icon = "pf-icon pf-icon-bundle";
--- a/web/src/admin/admin-overview/cards/WorkerStatusCard.ts
+++ b/web/src/admin/admin-overview/cards/WorkerStatusCard.ts
@ -1,16 +1,15 @@
-import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import {
    AdminStatus,
    AdminStatusCard,
 } from "@goauthentik/admin/admin-overview/cards/AdminStatusCard";
-
-import { AdminApi, Worker } from "@goauthentik/api";
+import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";

 import { msg } from "@lit/localize";
 import { TemplateResult, html } from "lit";
 import { customElement } from "lit/decorators.js";

+import { AdminApi, Worker } from "@goauthentik/api";
+
@customElement("ak-admin-status-card-workers")
 export class WorkersStatusCard extends AdminStatusCard<Worker[]> {
    icon = "pf-icon pf-icon-server";
--- a/web/src/admin/admin-overview/charts/AdminLoginAuthorizeChart.ts
+++ b/web/src/admin/admin-overview/charts/AdminLoginAuthorizeChart.ts
@ -1,14 +1,12 @@
-import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import { EventChart } from "#elements/charts/EventChart";
-
-import { EventActions, EventVolume, EventsApi } from "@goauthentik/api";
-
+import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
 import { ChartData, ChartDataset } from "chart.js";

 import { msg } from "@lit/localize";
 import { customElement } from "lit/decorators.js";

+import { EventActions, EventVolume, EventsApi } from "@goauthentik/api";
+
@customElement("ak-charts-admin-login-authorization")
 export class AdminLoginAuthorizeChart extends EventChart {
    async apiRequest(): Promise<EventVolume[]> {
--- a/web/src/admin/admin-overview/charts/AdminModelPerDay.ts
+++ b/web/src/admin/admin-overview/charts/AdminModelPerDay.ts
@ -1,6 +1,9 @@
-import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import { EventChart } from "#elements/charts/EventChart";
+import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
+import { ChartData } from "chart.js";
+
+import { msg } from "@lit/localize";
+import { customElement, property } from "lit/decorators.js";

 import {
    EventActions,
@ -9,11 +12,6 @@ import {
    EventsEventsVolumeListRequest,
 } from "@goauthentik/api";

-import { ChartData } from "chart.js";
-
-import { msg } from "@lit/localize";
-import { customElement, property } from "lit/decorators.js";
-
@customElement("ak-charts-admin-model-per-day")
 export class AdminModelPerDay extends EventChart {
    @property()
--- a/web/src/admin/admin-overview/charts/OutpostStatusChart.ts
+++ b/web/src/admin/admin-overview/charts/OutpostStatusChart.ts
@ -1,19 +1,15 @@
-import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import { actionToColor } from "#elements/charts/EventChart";
-import { AKChart } from "@goauthentik/elements/charts/Chart";
-
 import { SummarizedSyncStatus } from "@goauthentik/admin/admin-overview/charts/SyncStatusChart";
-
+import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
+import { AKChart } from "@goauthentik/elements/charts/Chart";
 import "@goauthentik/elements/forms/ConfirmationForm";
-
-import { EventActions, OutpostsApi } from "@goauthentik/api";
-
 import { ChartData, ChartOptions } from "chart.js";

 import { msg } from "@lit/localize";
 import { customElement } from "lit/decorators.js";

+import { EventActions, OutpostsApi } from "@goauthentik/api";
+
@customElement("ak-admin-status-chart-outpost")
 export class OutpostStatusChart extends AKChart<SummarizedSyncStatus[]> {
    getChartType(): string {
--- a/web/src/admin/admin-overview/charts/SyncStatusChart.ts
+++ b/web/src/admin/admin-overview/charts/SyncStatusChart.ts
@ -1,11 +1,12 @@
-import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import { actionToColor } from "#elements/charts/EventChart";
+import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
 import { AKChart } from "@goauthentik/elements/charts/Chart";
-
 import "@goauthentik/elements/forms/ConfirmationForm";
-
 import { PaginatedResponse } from "@goauthentik/elements/table/Table";
+import { ChartData, ChartOptions } from "chart.js";
+
+import { msg } from "@lit/localize";
+import { customElement } from "lit/decorators.js";

 import {
    EventActions,
@ -15,11 +16,6 @@ import {
    SystemTaskStatusEnum,
 } from "@goauthentik/api";

-import { ChartData, ChartOptions } from "chart.js";
-
-import { msg } from "@lit/localize";
-import { customElement } from "lit/decorators.js";
-
 export interface SummarizedSyncStatus {
    healthy: number;
    failed: number;
--- a/web/src/admin/admin-settings/AdminSettingsFooterLinks.ts
+++ b/web/src/admin/admin-settings/AdminSettingsFooterLinks.ts
@ -1,8 +1,5 @@
 import { AkControlElement } from "@goauthentik/elements/AkControlElement.js";
 import { type Spread } from "@goauthentik/elements/types";
-
-import { FooterLink } from "@goauthentik/api";
-
 import { spread } from "@open-wc/lit-helpers";

 import { msg } from "@lit/localize";
@ -14,6 +11,8 @@ import PFFormControl from "@patternfly/patternfly/components/FormControl/form-co
 import PFInputGroup from "@patternfly/patternfly/components/InputGroup/input-group.css";
 import PFBase from "@patternfly/patternfly/patternfly-base.css";

+import { FooterLink } from "@goauthentik/api";
+
 export interface IFooterLinkInput {
    footerLink: FooterLink;
 }
--- a/web/src/admin/admin-settings/AdminSettingsForm.ts
+++ b/web/src/admin/admin-settings/AdminSettingsForm.ts
@ -1,20 +1,15 @@
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import "@goauthentik/components/ak-number-input";
 import "@goauthentik/components/ak-switch-input";
 import "@goauthentik/components/ak-text-input";
 import "@goauthentik/elements/ak-array-input.js";
-
 import { Form } from "@goauthentik/elements/forms/Form";
-
 import "@goauthentik/elements/forms/FormGroup";
 import "@goauthentik/elements/forms/HorizontalFormElement";
 import "@goauthentik/elements/forms/Radio";
 import "@goauthentik/elements/forms/SearchSelect";
 import "@goauthentik/elements/utils/TimeDeltaHelp";

-import { AdminApi, FooterLink, Settings, SettingsRequest } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { CSSResult, TemplateResult, css, html } from "lit";
 import { customElement, property } from "lit/decorators.js";
@ -22,8 +17,9 @@ import { ifDefined } from "lit/directives/if-defined.js";

 import PFList from "@patternfly/patternfly/components/List/list.css";

-import "./AdminSettingsFooterLinks.js";
+import { AdminApi, FooterLink, Settings, SettingsRequest } from "@goauthentik/api";

+import "./AdminSettingsFooterLinks.js";
 import { IFooterLinkInput, akFooterLinkInput } from "./AdminSettingsFooterLinks.js";

 const DEFAULT_REPUTATION_LOWER_LIMIT = -5;
--- a/web/src/admin/admin-settings/AdminSettingsPage.ts
+++ b/web/src/admin/admin-settings/AdminSettingsPage.ts
@ -1,14 +1,9 @@
 import "#admin/admin-settings/AdminSettingsForm";
-
-import { DEFAULT_CONFIG } from "#common/api/config";
-
 import { AdminSettingsForm } from "#admin/admin-settings/AdminSettingsForm";
-
+import { DEFAULT_CONFIG } from "#common/api/config";
 import "#components/ak-page-header";
 import "#components/events/ObjectChangelog";
-
 import { AKElement } from "#elements/Base";
-
 import "#elements/CodeMirror";
 import "#elements/EmptyState";
 import "#elements/Tabs";
@ -16,8 +11,6 @@ import "#elements/buttons/ModalButton";
 import "#elements/buttons/SpinnerButton/ak-spinner-button";
 import "#elements/forms/ModalForm";

-import { AdminApi, Settings } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { html, nothing } from "lit";
 import { customElement, query, state } from "lit/decorators.js";
@ -33,6 +26,8 @@ import PFPage from "@patternfly/patternfly/components/Page/page.css";
 import PFGrid from "@patternfly/patternfly/layouts/Grid/grid.css";
 import PFBase from "@patternfly/patternfly/patternfly-base.css";

+import { AdminApi, Settings } from "@goauthentik/api";
+
@customElement("ak-admin-settings")
 export class AdminSettingsPage extends AKElement {
    static get styles() {
--- a/web/src/admin/admin-settings/stories/AdminSettingsFooterLinks.stories.ts
+++ b/web/src/admin/admin-settings/stories/AdminSettingsFooterLinks.stories.ts
@ -1,12 +1,10 @@
 import "@goauthentik/elements/messages/MessageContainer";
-
 import { Meta, StoryObj, WebComponentsRenderer } from "@storybook/web-components";
 import { DecoratorFunction } from "storybook/internal/types";

 import { html } from "lit";

 import { FooterLinkInput } from "../AdminSettingsFooterLinks.js";
-
 import "../AdminSettingsFooterLinks.js";

 // eslint-disable-next-line @typescript-eslint/no-explicit-any
--- a/web/src/admin/admin-settings/stories/AdminSettingsFooterLinks.test.ts
+++ b/web/src/admin/admin-settings/stories/AdminSettingsFooterLinks.test.ts
@ -1,5 +1,4 @@
 import { render } from "@goauthentik/elements/tests/utils.js";
-
 import { $, expect } from "@wdio/globals";

 import { html } from "lit";
--- a/web/src/admin/applications/ApplicationAuthorizeChart.ts
+++ b/web/src/admin/applications/ApplicationAuthorizeChart.ts
@ -1,14 +1,12 @@
-import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import { EventChart } from "#elements/charts/EventChart";
-
-import { EventActions, EventVolume, EventsApi } from "@goauthentik/api";
-
+import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
 import { ChartData } from "chart.js";

 import { msg } from "@lit/localize";
 import { customElement, property } from "lit/decorators.js";

+import { EventActions, EventVolume, EventsApi } from "@goauthentik/api";
+
@customElement("ak-charts-application-authorize")
 export class ApplicationAuthorizeChart extends EventChart {
    @property({ attribute: "application-id" })
--- a/web/src/admin/applications/ApplicationCheckAccessForm.ts
+++ b/web/src/admin/applications/ApplicationCheckAccessForm.ts
@ -1,13 +1,16 @@
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import "@goauthentik/components/ak-status-label";
 import "@goauthentik/elements/events/LogViewer";
-
 import { Form } from "@goauthentik/elements/forms/Form";
-
 import "@goauthentik/elements/forms/HorizontalFormElement";
 import "@goauthentik/elements/forms/SearchSelect";

+import { msg } from "@lit/localize";
+import { CSSResult, TemplateResult, html } from "lit";
+import { customElement, property } from "lit/decorators.js";
+
+import PFDescriptionList from "@patternfly/patternfly/components/DescriptionList/description-list.css";
+
 import {
    Application,
    CoreApi,
@ -16,12 +19,6 @@ import {
    User,
 } from "@goauthentik/api";

-import { msg } from "@lit/localize";
-import { CSSResult, TemplateResult, html } from "lit";
-import { customElement, property } from "lit/decorators.js";
-
-import PFDescriptionList from "@patternfly/patternfly/components/DescriptionList/description-list.css";
-
@customElement("ak-application-check-access-form")
 export class ApplicationCheckAccessForm extends Form<{ forUser: number }> {
    @property({ attribute: false })
--- a/web/src/admin/applications/ApplicationForm.ts
+++ b/web/src/admin/applications/ApplicationForm.ts
@ -1,12 +1,8 @@
 import { CapabilitiesEnum, WithCapabilitiesConfig } from "#elements/mixins/capabilities";
-
 import "@goauthentik/admin/applications/ProviderSelectModal";
-
-import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import { iconHelperText } from "@goauthentik/admin/helperText";
 import { policyEngineModes } from "@goauthentik/admin/policies/PolicyEngineModes";
-
+import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
 import "@goauthentik/components/ak-file-input";
 import "@goauthentik/components/ak-radio-input";
 import "@goauthentik/components/ak-switch-input";
@ -16,21 +12,19 @@ import "@goauthentik/elements/Alert";
 import "@goauthentik/elements/forms/FormGroup";
 import "@goauthentik/elements/forms/HorizontalFormElement";
 import "@goauthentik/elements/forms/ModalForm";
-
 import { ModelForm } from "@goauthentik/elements/forms/ModelForm";
-
 import "@goauthentik/elements/forms/ProxyForm";
 import "@goauthentik/elements/forms/Radio";
 import "@goauthentik/elements/forms/SearchSelect/ak-search-select";
 import "@patternfly/elements/pf-tooltip/pf-tooltip.js";

-import { Application, CoreApi, Provider } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { TemplateResult, html, nothing } from "lit";
 import { customElement, property, state } from "lit/decorators.js";
 import { ifDefined } from "lit/directives/if-defined.js";

+import { Application, CoreApi, Provider } from "@goauthentik/api";
+
 import "./components/ak-backchannel-input";
 import "./components/ak-provider-search-input";

--- a/web/src/admin/applications/ApplicationListPage.ts
+++ b/web/src/admin/applications/ApplicationListPage.ts
@ -1,23 +1,16 @@
 import "#admin/applications/ApplicationForm";
-
 import { DEFAULT_CONFIG } from "#common/api/config";
-
 import "#elements/AppIcon";
 import "#elements/ak-mdx/ak-mdx";
 import "#elements/buttons/SpinnerButton/ak-spinner-button";
 import "#elements/forms/DeleteBulkForm";
 import "#elements/forms/ModalForm";
-
 import { WithBrandConfig } from "#elements/mixins/branding";
 import { getURLParam } from "#elements/router/RouteMatch";
 import { PaginatedResponse } from "#elements/table/Table";
 import { TableColumn } from "#elements/table/Table";
 import { TablePage } from "#elements/table/TablePage";
-
 import "@patternfly/elements/pf-tooltip/pf-tooltip.js";
-
-import { Application, CoreApi, PoliciesApi } from "@goauthentik/api";
-
 import MDApplication from "~docs/add-secure-apps/applications/index.md";

 import { msg, str } from "@lit/localize";
@ -27,6 +20,8 @@ import { ifDefined } from "lit/directives/if-defined.js";

 import PFCard from "@patternfly/patternfly/components/Card/card.css";

+import { Application, CoreApi, PoliciesApi } from "@goauthentik/api";
+
 import "./ApplicationWizardHint.js";

 export const applicationListStyle = css`
--- a/web/src/admin/applications/ApplicationViewPage.ts
+++ b/web/src/admin/applications/ApplicationViewPage.ts
@ -4,27 +4,16 @@ import "#admin/applications/ApplicationForm";
 import "#admin/applications/entitlements/ApplicationEntitlementPage";
 import "#admin/policies/BoundPoliciesList";
 import "#admin/rbac/ObjectPermissionsPage";
-
 import { DEFAULT_CONFIG } from "#common/api/config";
 import { PFSize } from "#common/enums";
-
 import "#components/ak-page-header";
 import "#components/events/ObjectChangelog";
 import "#elements/AppIcon";
-
 import { AKElement } from "#elements/Base";
-
 import "#elements/EmptyState";
 import "#elements/Tabs";
 import "#elements/buttons/SpinnerButton/ak-spinner-button";

-import {
-    Application,
-    CoreApi,
-    OutpostsApi,
-    RbacPermissionsAssignedByUsersListModelEnum,
-} from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { CSSResult, PropertyValues, TemplateResult, html } from "lit";
 import { customElement, property, state } from "lit/decorators.js";
@ -40,6 +29,13 @@ import PFPage from "@patternfly/patternfly/components/Page/page.css";
 import PFGrid from "@patternfly/patternfly/layouts/Grid/grid.css";
 import PFBase from "@patternfly/patternfly/patternfly-base.css";

+import {
+    Application,
+    CoreApi,
+    OutpostsApi,
+    RbacPermissionsAssignedByUsersListModelEnum,
+} from "@goauthentik/api";
+
@customElement("ak-application-view")
 export class ApplicationViewPage extends AKElement {
    @property({ type: String })
--- a/web/src/admin/applications/ApplicationWizardHint.ts
+++ b/web/src/admin/applications/ApplicationWizardHint.ts
@ -1,18 +1,13 @@
 import "@goauthentik/admin/applications/wizard/ak-application-wizard";
-
 import {
    ShowHintController,
    ShowHintControllerHost,
 } from "@goauthentik/components/ak-hint/ShowHintController";
-
 import "@goauthentik/components/ak-hint/ak-hint";
 import "@goauthentik/components/ak-hint/ak-hint-body";
-
 import { AKElement } from "@goauthentik/elements/Base";
-
 import "@goauthentik/elements/Label";
 import "@goauthentik/elements/buttons/ActionButton/ak-action-button";
-
 import { getURLParam } from "@goauthentik/elements/router/RouteMatch";

 import { msg } from "@lit/localize";
--- a/web/src/admin/applications/ProviderSelectModal.ts
+++ b/web/src/admin/applications/ProviderSelectModal.ts
@ -1,17 +1,15 @@
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import "@goauthentik/elements/buttons/SpinnerButton";
-
 import { PaginatedResponse } from "@goauthentik/elements/table/Table";
 import { TableColumn } from "@goauthentik/elements/table/Table";
 import { TableModal } from "@goauthentik/elements/table/TableModal";

-import { Provider, ProvidersApi } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { TemplateResult, html } from "lit";
 import { customElement, property } from "lit/decorators.js";

+import { Provider, ProvidersApi } from "@goauthentik/api";
+
@customElement("ak-provider-select-table")
 export class ProviderSelectModal extends TableModal<Provider> {
    checkbox = true;
--- a/web/src/admin/applications/components/ak-backchannel-input.ts
+++ b/web/src/admin/applications/components/ak-backchannel-input.ts
@ -1,17 +1,15 @@
 import "@goauthentik/admin/applications/ProviderSelectModal";
-
 import { AKElement } from "@goauthentik/elements/Base";
-
 import "@goauthentik/elements/chips/Chip";
 import "@goauthentik/elements/chips/ChipGroup";

-import { Provider } from "@goauthentik/api";
-
 import { TemplateResult, html, nothing } from "lit";
 import { customElement, property } from "lit/decorators.js";
 import { ifDefined } from "lit/directives/if-defined.js";
 import { map } from "lit/directives/map.js";

+import { Provider } from "@goauthentik/api";
+
@customElement("ak-backchannel-providers-input")
 export class AkBackchannelProvidersInput extends AKElement {
    // Render into the lightDOM. This effectively erases the shadowDOM nature of this component, but
--- a/web/src/admin/applications/components/ak-provider-search-input.ts
+++ b/web/src/admin/applications/components/ak-provider-search-input.ts
@ -1,15 +1,13 @@
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
 import { groupBy } from "@goauthentik/common/utils";
-
 import { AKElement } from "@goauthentik/elements/Base";
-
 import "@goauthentik/elements/forms/SearchSelect";

-import { Provider, ProvidersAllListRequest, ProvidersApi } from "@goauthentik/api";
-
 import { html, nothing } from "lit";
 import { customElement, property } from "lit/decorators.js";

+import { Provider, ProvidersAllListRequest, ProvidersApi } from "@goauthentik/api";
+
 const renderElement = (item: Provider) => item.name;
 const renderValue = (item: Provider | undefined) => item?.pk;
 const doGroupBy = (items: Provider[]) => groupBy(items, (item) => item.verboseName);
--- a/web/src/admin/applications/entitlements/ApplicationEntitlementForm.ts
+++ b/web/src/admin/applications/entitlements/ApplicationEntitlementForm.ts
@ -1,18 +1,10 @@
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import "@goauthentik/elements/CodeMirror";
-
 import { CodeMirrorMode } from "@goauthentik/elements/CodeMirror";
-
 import "@goauthentik/elements/forms/HorizontalFormElement";
-
 import { ModelForm } from "@goauthentik/elements/forms/ModelForm";
-
 import "@goauthentik/elements/forms/Radio";
 import "@goauthentik/elements/forms/SearchSelect";
-
-import { ApplicationEntitlement, CoreApi } from "@goauthentik/api";
-
 import YAML from "yaml";

 import { msg } from "@lit/localize";
@ -22,6 +14,8 @@ import { customElement, property } from "lit/decorators.js";

 import PFContent from "@patternfly/patternfly/components/Content/content.css";

+import { ApplicationEntitlement, CoreApi } from "@goauthentik/api";
+
@customElement("ak-application-entitlement-form")
 export class ApplicationEntitlementForm extends ModelForm<ApplicationEntitlement, string> {
    async loadInstance(pk: string): Promise<ApplicationEntitlement> {
--- a/web/src/admin/applications/entitlements/ApplicationEntitlementPage.ts
+++ b/web/src/admin/applications/entitlements/ApplicationEntitlementPage.ts
@ -1,33 +1,28 @@
 import "@goauthentik/admin/applications/entitlements/ApplicationEntitlementForm";
 import "@goauthentik/admin/policies/BoundPoliciesList";
-
 import { PolicyBindingCheckTarget } from "@goauthentik/admin/policies/utils";
-
 import "@goauthentik/admin/rbac/ObjectPermissionModal";
-
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
 import { PFSize } from "@goauthentik/common/enums";
-
 import "@goauthentik/components/ak-status-label";
 import "@goauthentik/elements/Tabs";
 import "@goauthentik/elements/forms/DeleteBulkForm";
 import "@goauthentik/elements/forms/ModalForm";
 import "@goauthentik/elements/forms/ProxyForm";
-
 import { PaginatedResponse } from "@goauthentik/elements/table/Table";
 import { Table, TableColumn } from "@goauthentik/elements/table/Table";

+import { msg } from "@lit/localize";
+import { TemplateResult, html } from "lit";
+import { customElement, property } from "lit/decorators.js";
+import { ifDefined } from "lit/directives/if-defined.js";
+
 import {
    ApplicationEntitlement,
    CoreApi,
    RbacPermissionsAssignedByUsersListModelEnum,
 } from "@goauthentik/api";

-import { msg } from "@lit/localize";
-import { TemplateResult, html } from "lit";
-import { customElement, property } from "lit/decorators.js";
-import { ifDefined } from "lit/directives/if-defined.js";
-
@customElement("ak-application-entitlements-list")
 export class ApplicationEntitlementsPage extends Table<ApplicationEntitlement> {
    @property()
--- a/web/src/admin/applications/wizard/ApplicationWizardStep.ts
+++ b/web/src/admin/applications/wizard/ApplicationWizardStep.ts
@ -1,20 +1,18 @@
-import { KeyUnknown, serializeForm } from "@goauthentik/elements/forms/Form";
-import { HorizontalFormElement } from "@goauthentik/elements/forms/HorizontalFormElement";
-
+import { styles } from "@goauthentik/admin/applications/wizard/ApplicationWizardFormStepStyles.css.js";
 import { WizardStep } from "@goauthentik/components/ak-wizard/WizardStep.js";
 import {
    NavigationEventInit,
    WizardNavigationEvent,
    WizardUpdateEvent,
 } from "@goauthentik/components/ak-wizard/events";
-
-import { styles } from "@goauthentik/admin/applications/wizard/ApplicationWizardFormStepStyles.css.js";
-
-import { ValidationError } from "@goauthentik/api";
+import { KeyUnknown, serializeForm } from "@goauthentik/elements/forms/Form";
+import { HorizontalFormElement } from "@goauthentik/elements/forms/HorizontalFormElement";

 import { msg } from "@lit/localize";
 import { property, query } from "lit/decorators.js";

+import { ValidationError } from "@goauthentik/api";
+
 import {
    ApplicationTransactionValidationError,
    type ApplicationWizardState,
--- a/web/src/admin/applications/wizard/ak-application-wizard-main.ts
+++ b/web/src/admin/applications/wizard/ak-application-wizard-main.ts
@ -1,27 +1,22 @@
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import "@goauthentik/components/ak-wizard/ak-wizard-steps.js";
-
-import { AKElement } from "@goauthentik/elements/Base.js";
-
 import { WizardUpdateEvent } from "@goauthentik/components/ak-wizard/events";
-
-import { ProvidersApi, ProxyMode } from "@goauthentik/api";
+import { AKElement } from "@goauthentik/elements/Base.js";

 import { ContextProvider } from "@lit/context";
 import { html } from "lit";
 import { customElement, state } from "lit/decorators.js";

+import { ProvidersApi, ProxyMode } from "@goauthentik/api";
+
 import { applicationWizardProvidersContext } from "./ContextIdentity";
 import { providerTypeRenderers } from "./steps/ProviderChoices.js";
-
 import "./steps/ak-application-wizard-application-step.js";
 import "./steps/ak-application-wizard-bindings-step.js";
 import "./steps/ak-application-wizard-edit-binding-step.js";
 import "./steps/ak-application-wizard-provider-choice-step.js";
 import "./steps/ak-application-wizard-provider-step.js";
 import "./steps/ak-application-wizard-submit-step.js";
-
 import { type ApplicationWizardState, type ApplicationWizardStateUpdate } from "./types";

 const freshWizardState = (): ApplicationWizardState => ({
--- a/web/src/admin/applications/wizard/ak-application-wizard.ts
+++ b/web/src/admin/applications/wizard/ak-application-wizard.ts
@ -1,8 +1,7 @@
+import { WizardCloseEvent } from "@goauthentik/components/ak-wizard/events.js";
 import { ModalButton } from "@goauthentik/elements/buttons/ModalButton";
 import { bound } from "@goauthentik/elements/decorators/bound.js";

-import { WizardCloseEvent } from "@goauthentik/components/ak-wizard/events.js";
-
 import { html } from "lit";
 import { customElement } from "lit/decorators.js";

--- a/web/src/admin/applications/wizard/steps/ProviderChoices.ts
+++ b/web/src/admin/applications/wizard/steps/ProviderChoices.ts
@ -1,9 +1,9 @@
 import "@goauthentik/admin/common/ak-license-notice";

-import type { TypeCreate } from "@goauthentik/api";
-
 import { TemplateResult, html } from "lit";

+import type { TypeCreate } from "@goauthentik/api";
+
 type ProviderRenderer = () => TemplateResult;

 export type LocalTypeCreate = TypeCreate & {
--- a/web/src/admin/applications/wizard/steps/SubmitStepOverviewRenderers.ts
+++ b/web/src/admin/applications/wizard/steps/SubmitStepOverviewRenderers.ts
@ -2,6 +2,10 @@ import {
    type DescriptionPair,
    renderDescriptionList,
 } from "@goauthentik/components/DescriptionList.js";
+import { match } from "ts-pattern";
+
+import { msg } from "@lit/localize";
+import { html } from "lit";

 import {
    ClientTypeEnum,
@ -18,11 +22,6 @@ import {
    SCIMProvider,
 } from "@goauthentik/api";

-import { match } from "ts-pattern";
-
-import { msg } from "@lit/localize";
-import { html } from "lit";
-
 import { OneOfProvider } from "../types.js";

 const renderSummary = (type: string, name: string, fields: DescriptionPair[]) =>
--- a/web/src/admin/applications/wizard/steps/ak-application-wizard-application-step.ts
+++ b/web/src/admin/applications/wizard/steps/ak-application-wizard-application-step.ts
@ -1,32 +1,24 @@
 import { ApplicationWizardStep } from "@goauthentik/admin/applications/wizard/ApplicationWizardStep.js";
-
 import "@goauthentik/admin/applications/wizard/ak-wizard-title.js";
-
-import { camelToSnake } from "@goauthentik/common/utils.js";
-
 import { policyEngineModes } from "@goauthentik/admin/policies/PolicyEngineModes";
-
+import { camelToSnake } from "@goauthentik/common/utils.js";
 import "@goauthentik/components/ak-radio-input";
 import "@goauthentik/components/ak-slug-input";
 import "@goauthentik/components/ak-switch-input";
 import "@goauthentik/components/ak-text-input";
-
-import { type KeyUnknown } from "@goauthentik/elements/forms/Form";
-
 import { type NavigableButton, type WizardButton } from "@goauthentik/components/ak-wizard/types";
-
+import { type KeyUnknown } from "@goauthentik/elements/forms/Form";
 import "@goauthentik/elements/forms/FormGroup";
 import "@goauthentik/elements/forms/HorizontalFormElement";
-
 import { isSlug } from "@goauthentik/elements/router/utils.js";

-import { type ApplicationRequest } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { html } from "lit";
 import { customElement, query, state } from "lit/decorators.js";
 import { ifDefined } from "lit/directives/if-defined.js";

+import { type ApplicationRequest } from "@goauthentik/api";
+
 import { ApplicationWizardStateUpdate, ValidationRecord } from "../types";

 const autoTrim = (v: unknown) => (typeof v === "string" ? v.trim() : v);
--- a/web/src/admin/applications/wizard/steps/ak-application-wizard-bindings-step.ts
+++ b/web/src/admin/applications/wizard/steps/ak-application-wizard-bindings-step.ts
@ -1,21 +1,15 @@
 import { ApplicationWizardStep } from "@goauthentik/admin/applications/wizard/ApplicationWizardStep.js";
-
 import "@goauthentik/admin/applications/wizard/ak-wizard-title.js";
 import "@goauthentik/components/ak-radio-input";
 import "@goauthentik/components/ak-slug-input";
 import "@goauthentik/components/ak-status-label";
 import "@goauthentik/components/ak-switch-input";
 import "@goauthentik/components/ak-text-input";
-
 import { type WizardButton } from "@goauthentik/components/ak-wizard/types";
-
 import "@goauthentik/elements/ak-table/ak-select-table.js";
-
 import { SelectTable } from "@goauthentik/elements/ak-table/ak-select-table.js";
-
 import "@goauthentik/elements/forms/FormGroup";
 import "@goauthentik/elements/forms/HorizontalFormElement";
-
 import { P, match } from "ts-pattern";

 import { msg, str } from "@lit/localize";
@ -25,7 +19,6 @@ import { customElement, query } from "lit/decorators.js";
 import PFCard from "@patternfly/patternfly/components/Card/card.css";

 import { makeEditButton } from "./bindings/ak-application-wizard-bindings-edit-button.js";
-
 import "./bindings/ak-application-wizard-bindings-toolbar.js";

 const COLUMNS = [
--- a/web/src/admin/applications/wizard/steps/ak-application-wizard-edit-binding-step.ts
+++ b/web/src/admin/applications/wizard/steps/ak-application-wizard-edit-binding-step.ts
@ -1,31 +1,24 @@
 import { ApplicationWizardStep } from "@goauthentik/admin/applications/wizard/ApplicationWizardStep.js";
-
 import "@goauthentik/admin/applications/wizard/ak-wizard-title.js";
-
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
 import { groupBy } from "@goauthentik/common/utils";
-
 import "@goauthentik/components/ak-radio-input";
 import "@goauthentik/components/ak-switch-input";
 import "@goauthentik/components/ak-text-input";
 import "@goauthentik/components/ak-toggle-group";
-
 import { type NavigableButton, type WizardButton } from "@goauthentik/components/ak-wizard/types";
-
 import "@goauthentik/elements/forms/FormGroup";
 import "@goauthentik/elements/forms/HorizontalFormElement";
 import "@goauthentik/elements/forms/SearchSelect";
-
 import { type SearchSelectBase } from "@goauthentik/elements/forms/SearchSelect/SearchSelect.js";
-
 import "@goauthentik/elements/forms/SearchSelect/ak-search-select-ez.js";

-import { CoreApi, Group, PoliciesApi, Policy, PolicyBinding, User } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { html, nothing } from "lit";
 import { customElement, query, state } from "lit/decorators.js";

+import { CoreApi, Group, PoliciesApi, Policy, PolicyBinding, User } from "@goauthentik/api";
+
 const withQuery = <T>(search: string | undefined, args: T) => (search ? { ...args, search } : args);

 enum target {
--- a/web/src/admin/applications/wizard/steps/ak-application-wizard-provider-choice-step.ts
+++ b/web/src/admin/applications/wizard/steps/ak-application-wizard-provider-choice-step.ts
@ -1,29 +1,21 @@
 import { WithLicenseSummary } from "#elements/mixins/license";
-
 import { ApplicationWizardStep } from "@goauthentik/admin/applications/wizard/ApplicationWizardStep.js";
-
 import "@goauthentik/admin/applications/wizard/ak-wizard-title.js";
-
 import type { NavigableButton, WizardButton } from "@goauthentik/components/ak-wizard/types";
-
 import "@goauthentik/elements/EmptyState.js";
-
 import { bound } from "@goauthentik/elements/decorators/bound.js";
-
 import "@goauthentik/elements/forms/FormGroup.js";
 import "@goauthentik/elements/forms/HorizontalFormElement.js";
-
 import { TypeCreateWizardPageLayouts } from "@goauthentik/elements/wizard/TypeCreateWizardPage.js";
-
 import "@goauthentik/elements/wizard/TypeCreateWizardPage.js";

-import { TypeCreate } from "@goauthentik/api";
-
 import { consume } from "@lit/context";
 import { msg } from "@lit/localize";
 import { html } from "lit";
 import { customElement, state } from "lit/decorators.js";

+import { TypeCreate } from "@goauthentik/api";
+
 import { applicationWizardProvidersContext } from "../ContextIdentity";
 import { type LocalTypeCreate } from "./ProviderChoices.js";

--- a/web/src/admin/applications/wizard/steps/ak-application-wizard-provider-step.ts
+++ b/web/src/admin/applications/wizard/steps/ak-application-wizard-provider-step.ts
@ -8,7 +8,6 @@ import { html, unsafeStatic } from "lit/static-html.js";
 import { ApplicationWizardStep } from "../ApplicationWizardStep.js";
 import { OneOfProvider } from "../types.js";
 import { ApplicationWizardProviderForm } from "./providers/ApplicationWizardProviderForm.js";
-
 import "./providers/ak-application-wizard-provider-for-ldap.js";
 import "./providers/ak-application-wizard-provider-for-oauth.js";
 import "./providers/ak-application-wizard-provider-for-proxy.js";
--- a/web/src/admin/applications/wizard/steps/ak-application-wizard-submit-step.ts
+++ b/web/src/admin/applications/wizard/steps/ak-application-wizard-submit-step.ts
@ -1,14 +1,24 @@
 import "@goauthentik/admin/applications/wizard/ak-wizard-title.js";
-
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
 import { EVENT_REFRESH } from "@goauthentik/common/constants";
 import { parseAPIResponseError } from "@goauthentik/common/errors/network";
-
-import { showAPIErrorMessage } from "@goauthentik/elements/messages/MessageContainer";
-import { CustomEmitterElement } from "@goauthentik/elements/utils/eventEmitter";
-
 import { WizardNavigationEvent } from "@goauthentik/components/ak-wizard/events.js";
 import { type WizardButton } from "@goauthentik/components/ak-wizard/types";
+import { showAPIErrorMessage } from "@goauthentik/elements/messages/MessageContainer";
+import { CustomEmitterElement } from "@goauthentik/elements/utils/eventEmitter";
+import { P, match } from "ts-pattern";
+
+import { msg } from "@lit/localize";
+import { TemplateResult, css, html, nothing } from "lit";
+import { customElement, state } from "lit/decorators.js";
+import { classMap } from "lit/directives/class-map.js";
+
+// import { map } from "lit/directives/map.js";
+import PFDescriptionList from "@patternfly/patternfly/components/DescriptionList/description-list.css";
+import PFEmptyState from "@patternfly/patternfly/components/EmptyState/empty-state.css";
+import PFProgressStepper from "@patternfly/patternfly/components/ProgressStepper/progress-stepper.css";
+import PFTitle from "@patternfly/patternfly/components/Title/title.css";
+import PFBullseye from "@patternfly/patternfly/layouts/Bullseye/bullseye.css";

 import {
    type ApplicationRequest,
@ -24,20 +34,6 @@ import {
    instanceOfValidationError,
 } from "@goauthentik/api";

-import { P, match } from "ts-pattern";
-
-import { msg } from "@lit/localize";
-import { TemplateResult, css, html, nothing } from "lit";
-import { customElement, state } from "lit/decorators.js";
-import { classMap } from "lit/directives/class-map.js";
-
-// import { map } from "lit/directives/map.js";
-import PFDescriptionList from "@patternfly/patternfly/components/DescriptionList/description-list.css";
-import PFEmptyState from "@patternfly/patternfly/components/EmptyState/empty-state.css";
-import PFProgressStepper from "@patternfly/patternfly/components/ProgressStepper/progress-stepper.css";
-import PFTitle from "@patternfly/patternfly/components/Title/title.css";
-import PFBullseye from "@patternfly/patternfly/layouts/Bullseye/bullseye.css";
-
 import { ApplicationWizardStep } from "../ApplicationWizardStep.js";
 import { OneOfProvider, isApplicationTransactionValidationError } from "../types.js";
 import { providerRenderers } from "./SubmitStepOverviewRenderers.js";
--- a/web/src/admin/applications/wizard/steps/providers/ApplicationWizardProviderForm.ts
+++ b/web/src/admin/applications/wizard/steps/providers/ApplicationWizardProviderForm.ts
@ -1,16 +1,12 @@
 import { camelToSnake } from "@goauthentik/common/utils.js";
-
 import "@goauthentik/components/ak-number-input";
 import "@goauthentik/components/ak-radio-input";
 import "@goauthentik/components/ak-switch-input";
 import "@goauthentik/components/ak-text-input";
-
 import { AKElement } from "@goauthentik/elements/Base.js";
 import { KeyUnknown, serializeForm } from "@goauthentik/elements/forms/Form";
-
 import "@goauthentik/elements/forms/FormGroup";
 import "@goauthentik/elements/forms/HorizontalFormElement";
-
 import { HorizontalFormElement } from "@goauthentik/elements/forms/HorizontalFormElement";

 import { property, query } from "lit/decorators.js";
--- a/web/src/admin/applications/wizard/steps/providers/ak-application-wizard-provider-for-ldap.ts
+++ b/web/src/admin/applications/wizard/steps/providers/ak-application-wizard-provider-for-ldap.ts
@ -1,16 +1,14 @@
 import { WithBrandConfig } from "#elements/mixins/branding";
-
 import "@goauthentik/admin/applications/wizard/ak-wizard-title.js";
-
 import { ValidationRecord } from "@goauthentik/admin/applications/wizard/types";
 import { renderForm } from "@goauthentik/admin/providers/ldap/LDAPProviderFormForm.js";

-import type { LDAPProvider } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { html } from "lit";
 import { customElement } from "lit/decorators.js";

+import type { LDAPProvider } from "@goauthentik/api";
+
 import { ApplicationWizardProviderForm } from "./ApplicationWizardProviderForm.js";

@customElement("ak-application-wizard-provider-for-ldap")
--- a/web/src/admin/applications/wizard/steps/providers/ak-application-wizard-provider-for-oauth.ts
+++ b/web/src/admin/applications/wizard/steps/providers/ak-application-wizard-provider-for-oauth.ts
@ -1,16 +1,14 @@
 import "@goauthentik/admin/applications/wizard/ak-wizard-title.js";
-
-import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import { renderForm } from "@goauthentik/admin/providers/oauth2/OAuth2ProviderFormForm.js";
-
-import { OAuth2ProviderRequest, SourcesApi } from "@goauthentik/api";
-import { type OAuth2Provider, type PaginatedOAuthSourceList } from "@goauthentik/api";
+import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";

 import { msg } from "@lit/localize";
 import { html } from "lit";
 import { customElement, state } from "lit/decorators.js";

+import { OAuth2ProviderRequest, SourcesApi } from "@goauthentik/api";
+import { type OAuth2Provider, type PaginatedOAuthSourceList } from "@goauthentik/api";
+
 import { ApplicationTransactionValidationError } from "../../types.js";
 import { ApplicationWizardProviderForm } from "./ApplicationWizardProviderForm.js";

--- a/web/src/admin/applications/wizard/steps/providers/ak-application-wizard-provider-for-proxy.ts
+++ b/web/src/admin/applications/wizard/steps/providers/ak-application-wizard-provider-for-proxy.ts
@ -1,7 +1,4 @@
 import "@goauthentik/admin/applications/wizard/ak-wizard-title.js";
-
-import { WizardUpdateEvent } from "@goauthentik/components/ak-wizard/events.js";
-
 import { ValidationRecord } from "@goauthentik/admin/applications/wizard/types";
 import {
    ProxyModeValue,
@ -9,13 +6,14 @@ import {
    type SetShowHttpBasic,
    renderForm,
 } from "@goauthentik/admin/providers/proxy/ProxyProviderFormForm.js";
-
-import { ProxyMode, ProxyProvider } from "@goauthentik/api";
+import { WizardUpdateEvent } from "@goauthentik/components/ak-wizard/events.js";

 import { msg } from "@lit/localize";
 import { html } from "lit";
 import { customElement, state } from "lit/decorators.js";

+import { ProxyMode, ProxyProvider } from "@goauthentik/api";
+
 import { ApplicationWizardProviderForm } from "./ApplicationWizardProviderForm";

@customElement("ak-application-wizard-provider-for-proxy")
--- a/web/src/admin/applications/wizard/steps/providers/ak-application-wizard-provider-for-rac.ts
+++ b/web/src/admin/applications/wizard/steps/providers/ak-application-wizard-provider-for-rac.ts
@ -1,23 +1,21 @@
 import "@goauthentik/admin/applications/wizard/ak-wizard-title.js";
 import "@goauthentik/admin/common/ak-crypto-certificate-search.js";
 import "@goauthentik/admin/common/ak-flow-search/ak-flow-search";
-
 import {
    propertyMappingsProvider,
    propertyMappingsSelector,
 } from "@goauthentik/admin/providers/rac/RACProviderFormHelpers.js";
-
 import "@goauthentik/components/ak-text-input";
 import "@goauthentik/elements/CodeMirror";
 import "@goauthentik/elements/ak-dual-select/ak-dual-select-dynamic-selected-provider.js";

-import { FlowsInstancesListDesignationEnum, type RACProvider } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { html } from "lit";
 import { customElement } from "lit/decorators.js";
 import { ifDefined } from "lit/directives/if-defined.js";

+import { FlowsInstancesListDesignationEnum, type RACProvider } from "@goauthentik/api";
+
 import { ApplicationWizardProviderForm } from "./ApplicationWizardProviderForm.js";

@customElement("ak-application-wizard-provider-for-rac")
--- a/web/src/admin/applications/wizard/steps/providers/ak-application-wizard-provider-for-radius.ts
+++ b/web/src/admin/applications/wizard/steps/providers/ak-application-wizard-provider-for-radius.ts
@ -1,16 +1,14 @@
 import { WithBrandConfig } from "#elements/mixins/branding";
-
 import "@goauthentik/admin/applications/wizard/ak-wizard-title.js";
-
 import { ValidationRecord } from "@goauthentik/admin/applications/wizard/types";
 import { renderForm } from "@goauthentik/admin/providers/radius/RadiusProviderFormForm.js";

-import { RadiusProvider } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { customElement } from "@lit/reactive-element/decorators.js";
 import { html } from "lit";

+import { RadiusProvider } from "@goauthentik/api";
+
 import { ApplicationWizardProviderForm } from "./ApplicationWizardProviderForm.js";

@customElement("ak-application-wizard-provider-for-radius")
--- a/web/src/admin/applications/wizard/steps/providers/ak-application-wizard-provider-for-saml.ts
+++ b/web/src/admin/applications/wizard/steps/providers/ak-application-wizard-provider-for-saml.ts
@ -1,16 +1,14 @@
 import "@goauthentik/admin/applications/wizard/ak-wizard-title.js";
-
 import { type AkCryptoCertificateSearch } from "@goauthentik/admin/common/ak-crypto-certificate-search";
 import { renderForm } from "@goauthentik/admin/providers/saml/SAMLProviderFormForm.js";
-
 import "@goauthentik/elements/forms/FormGroup";

-import { SAMLProvider } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { customElement, state } from "@lit/reactive-element/decorators.js";
 import { html } from "lit";

+import { SAMLProvider } from "@goauthentik/api";
+
 import { ApplicationWizardProviderForm } from "./ApplicationWizardProviderForm";

@customElement("ak-application-wizard-provider-for-saml")
--- a/web/src/admin/applications/wizard/steps/providers/ak-application-wizard-provider-for-scim.ts
+++ b/web/src/admin/applications/wizard/steps/providers/ak-application-wizard-provider-for-scim.ts
@ -1,15 +1,13 @@
 import "@goauthentik/admin/applications/wizard/ak-wizard-title.js";
-
 import { renderForm } from "@goauthentik/admin/providers/scim/SCIMProviderFormForm.js";
-
 import "@goauthentik/elements/forms/FormGroup";

-import { PaginatedSCIMMappingList, type SCIMProvider } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { customElement, state } from "@lit/reactive-element/decorators.js";
 import { html } from "lit";

+import { PaginatedSCIMMappingList, type SCIMProvider } from "@goauthentik/api";
+
 import { ApplicationWizardProviderForm } from "./ApplicationWizardProviderForm";

@customElement("ak-application-wizard-provider-for-scim")
--- a/web/src/admin/blueprints/BlueprintForm.ts
+++ b/web/src/admin/blueprints/BlueprintForm.ts
@ -1,20 +1,12 @@
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
 import { docLink } from "@goauthentik/common/global";
-
 import "@goauthentik/components/ak-toggle-group";
 import "@goauthentik/elements/CodeMirror";
-
 import { CodeMirrorMode } from "@goauthentik/elements/CodeMirror";
-
 import "@goauthentik/elements/forms/FormGroup";
 import "@goauthentik/elements/forms/HorizontalFormElement";
-
 import { ModelForm } from "@goauthentik/elements/forms/ModelForm";
-
 import "@goauthentik/elements/forms/SearchSelect";
-
-import { BlueprintFile, BlueprintInstance, ManagedApi } from "@goauthentik/api";
-
 import YAML from "yaml";

 import { msg } from "@lit/localize";
@ -24,6 +16,8 @@ import { ifDefined } from "lit/directives/if-defined.js";

 import PFContent from "@patternfly/patternfly/components/Content/content.css";

+import { BlueprintFile, BlueprintInstance, ManagedApi } from "@goauthentik/api";
+
 enum blueprintSource {
    file = "file",
    oci = "oci",
--- a/web/src/admin/blueprints/BlueprintListPage.ts
+++ b/web/src/admin/blueprints/BlueprintListPage.ts
@ -1,22 +1,24 @@
 import "@goauthentik/admin/blueprints/BlueprintForm";
 import "@goauthentik/admin/rbac/ObjectPermissionModal";
-
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
 import { EVENT_REFRESH } from "@goauthentik/common/constants";
 import { formatElapsedTime } from "@goauthentik/common/temporal";
-
 import "@goauthentik/components/ak-status-label";
 import "@goauthentik/elements/buttons/ActionButton";
 import "@goauthentik/elements/buttons/SpinnerButton";
 import "@goauthentik/elements/forms/DeleteBulkForm";
 import "@goauthentik/elements/forms/ModalForm";
-
 import { PaginatedResponse } from "@goauthentik/elements/table/Table";
 import { TableColumn } from "@goauthentik/elements/table/Table";
 import { TablePage } from "@goauthentik/elements/table/TablePage";
-
 import "@patternfly/elements/pf-tooltip/pf-tooltip.js";

+import { msg } from "@lit/localize";
+import { CSSResult, TemplateResult, html } from "lit";
+import { customElement, property } from "lit/decorators.js";
+
+import PFDescriptionList from "@patternfly/patternfly/components/DescriptionList/description-list.css";
+
 import {
    BlueprintInstance,
    BlueprintInstanceStatusEnum,
@ -24,12 +26,6 @@ import {
    RbacPermissionsAssignedByUsersListModelEnum,
 } from "@goauthentik/api";

-import { msg } from "@lit/localize";
-import { CSSResult, TemplateResult, html } from "lit";
-import { customElement, property } from "lit/decorators.js";
-
-import PFDescriptionList from "@patternfly/patternfly/components/DescriptionList/description-list.css";
-
 export function BlueprintStatus(blueprint?: BlueprintInstance): string {
    if (!blueprint) return "";
    switch (blueprint.status) {
--- a/web/src/admin/brands/BrandForm.ts
+++ b/web/src/admin/brands/BrandForm.ts
@ -1,23 +1,21 @@
 import { certificateProvider, certificateSelector } from "@goauthentik/admin/brands/Certificates";
-
 import "@goauthentik/admin/common/ak-crypto-certificate-search";
 import "@goauthentik/admin/common/ak-flow-search/ak-flow-search";
-
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
 import { DefaultBrand } from "@goauthentik/common/ui/config";
-
 import "@goauthentik/elements/CodeMirror";
-
 import { CodeMirrorMode } from "@goauthentik/elements/CodeMirror";
-
 import "@goauthentik/elements/ak-dual-select/ak-dual-select-dynamic-selected-provider.js";
 import "@goauthentik/elements/ak-dual-select/ak-dual-select-provider.js";
 import "@goauthentik/elements/forms/FormGroup";
 import "@goauthentik/elements/forms/HorizontalFormElement";
-
 import { ModelForm } from "@goauthentik/elements/forms/ModelForm";
-
 import "@goauthentik/elements/forms/SearchSelect";
+import YAML from "yaml";
+
+import { msg } from "@lit/localize";
+import { TemplateResult, html } from "lit";
+import { customElement } from "lit/decorators.js";

 import {
    Application,
@ -27,12 +25,6 @@ import {
    FlowsInstancesListDesignationEnum,
 } from "@goauthentik/api";

-import YAML from "yaml";
-
-import { msg } from "@lit/localize";
-import { TemplateResult, html } from "lit";
-import { customElement } from "lit/decorators.js";
-
@customElement("ak-brand-form")
 export class BrandForm extends ModelForm<Brand, string> {
    loadInstance(pk: string): Promise<Brand> {
--- a/web/src/admin/brands/BrandListPage.ts
+++ b/web/src/admin/brands/BrandListPage.ts
@ -1,26 +1,22 @@
 import "@goauthentik/admin/brands/BrandForm";
 import "@goauthentik/admin/rbac/ObjectPermissionModal";
-
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import "@goauthentik/components/ak-status-label";
 import "@goauthentik/components/ak-status-label";
 import "@goauthentik/elements/buttons/SpinnerButton";
 import "@goauthentik/elements/forms/DeleteBulkForm";
 import "@goauthentik/elements/forms/ModalForm";
-
 import { PaginatedResponse } from "@goauthentik/elements/table/Table";
 import { TableColumn } from "@goauthentik/elements/table/Table";
 import { TablePage } from "@goauthentik/elements/table/TablePage";
-
 import "@patternfly/elements/pf-tooltip/pf-tooltip.js";

-import { Brand, CoreApi, RbacPermissionsAssignedByUsersListModelEnum } from "@goauthentik/api";
-
 import { msg } from "@lit/localize";
 import { TemplateResult, html } from "lit";
 import { customElement, property } from "lit/decorators.js";

+import { Brand, CoreApi, RbacPermissionsAssignedByUsersListModelEnum } from "@goauthentik/api";
+
@customElement("ak-brand-list")
 export class BrandListPage extends TablePage<Brand> {
    searchEnabled(): boolean {
--- a/web/src/admin/brands/Certificates.ts
+++ b/web/src/admin/brands/Certificates.ts
@ -1,5 +1,4 @@
 import { DEFAULT_CONFIG } from "#common/api/config";
-
 import {
    DataProvision,
    DualSelectPair,
--- a/web/src/admin/common/ak-core-group-search.ts
+++ b/web/src/admin/common/ak-core-group-search.ts
@ -1,15 +1,14 @@
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import { AKElement } from "@goauthentik/elements/Base";
 import { SearchSelect } from "@goauthentik/elements/forms/SearchSelect";
 import { CustomListenerElement } from "@goauthentik/elements/utils/eventEmitter";

-import { CoreApi, CoreGroupsListRequest, Group } from "@goauthentik/api";
-
 import { html } from "lit";
 import { customElement } from "lit/decorators.js";
 import { property, query } from "lit/decorators.js";

+import { CoreApi, CoreGroupsListRequest, Group } from "@goauthentik/api";
+
 async function fetchObjects(query?: string): Promise<Group[]> {
    const args: CoreGroupsListRequest = {
        ordering: "name",
--- a/web/src/admin/common/ak-crypto-certificate-search.ts
+++ b/web/src/admin/common/ak-crypto-certificate-search.ts
@ -1,22 +1,19 @@
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
-
 import { AKElement } from "@goauthentik/elements/Base";
 import { SearchSelect } from "@goauthentik/elements/forms/SearchSelect";
-
 import "@goauthentik/elements/forms/SearchSelect";
-
 import { CustomListenerElement } from "@goauthentik/elements/utils/eventEmitter";

+import { html } from "lit";
+import { customElement, property, query } from "lit/decorators.js";
+import { ifDefined } from "lit/directives/if-defined.js";
+
 import {
    CertificateKeyPair,
    CryptoApi,
    CryptoCertificatekeypairsListRequest,
 } from "@goauthentik/api";

-import { html } from "lit";
-import { customElement, property, query } from "lit/decorators.js";
-import { ifDefined } from "lit/directives/if-defined.js";
-
 const renderElement = (item: CertificateKeyPair): string => item.name;

 const renderValue = (item: CertificateKeyPair | undefined): string | undefined => item?.pk;
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Dewi Roberts	c90456e53d	Altered directory	2025-06-12 18:26:04 +03:00
Dewi Roberts	95c5d3aa80	Merge remote-tracking branch 'origin/main' into website/docs--update-nginx-config	2025-06-12 17:58:42 +03:00
Dewi Roberts	3a23469dcc	Language change	2025-06-12 17:58:29 +03:00
Dewi Roberts	ab3bc89b22	Updates nginx config based on comment from user	2025-06-12 14:24:03 +03:00