Revert "Revert "core: applications api: add option to only list apps with launch url (#10336 )""

This reverts commit 1eb9d7a9d6.
detect RAC differently
2024-07-04 12:58:29 +02:00 · 2024-07-04 12:58:25 +02:00 · 2024-07-04 12:57:56 +02:00 · 2024-07-04 12:52:26 +02:00 · 2024-07-04 12:50:46 +02:00
85 changed files with 1553 additions and 5410 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -21,10 +21,7 @@ updates:
    labels:
      - dependencies
  - package-ecosystem: npm
-    directories:
-      - "/web"
-      - "/tests/wdio"
-      - "/web/sfe"
+    directory: "/web"
    schedule:
      interval: daily
      time: "04:00"
@ -33,6 +30,7 @@ updates:
    open-pull-requests-limit: 10
    commit-message:
      prefix: "web:"
+    # TODO: deduplicate these groups
    groups:
      sentry:
        patterns:
@ -58,6 +56,38 @@ updates:
        patterns:
          - "@rollup/*"
          - "rollup-*"
+  - package-ecosystem: npm
+    directory: "/tests/wdio"
+    schedule:
+      interval: daily
+      time: "04:00"
+    labels:
+      - dependencies
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "web:"
+    # TODO: deduplicate these groups
+    groups:
+      sentry:
+        patterns:
+          - "@sentry/*"
+          - "@spotlightjs/*"
+      babel:
+        patterns:
+          - "@babel/*"
+          - "babel-*"
+      eslint:
+        patterns:
+          - "@typescript-eslint/*"
+          - "eslint"
+          - "eslint-*"
+      storybook:
+        patterns:
+          - "@storybook/*"
+          - "*storybook*"
+      esbuild:
+        patterns:
+          - "@esbuild/*"
      wdio:
        patterns:
          - "@wdio/*"
--- a/.github/workflows/api-ts-publish.yml
+++ b/.github/workflows/api-ts-publish.yml
@ -31,12 +31,7 @@ jobs:
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
      - name: Upgrade /web
-        working-directory: web
-        run: |
-          export VERSION=`node -e 'console.log(require("../gen-ts-api/package.json").version)'`
-          npm i @goauthentik/api@$VERSION
-      - name: Upgrade /web/sfe
-        working-directory: web/sfe
+        working-directory: web/
        run: |
          export VERSION=`node -e 'console.log(require("../gen-ts-api/package.json").version)'`
          npm i @goauthentik/api@$VERSION
--- a/.github/workflows/ci-main.yml
+++ b/.github/workflows/ci-main.yml
@ -219,7 +219,7 @@ jobs:
        with:
          ref: ${{ github.event.pull_request.head.sha }}
      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3.1.0
+        uses: docker/setup-qemu-action@v3.0.0
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: prepare variables
--- a/.github/workflows/ci-outpost.yml
+++ b/.github/workflows/ci-outpost.yml
@ -76,7 +76,7 @@ jobs:
        with:
          ref: ${{ github.event.pull_request.head.sha }}
      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3.1.0
+        uses: docker/setup-qemu-action@v3.0.0
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: prepare variables
--- a/.github/workflows/ci-web.yml
+++ b/.github/workflows/ci-web.yml
@ -26,10 +26,6 @@ jobs:
          - web
          - tests/wdio
        include:
-          - command: tsc
-            project: web
-            extra_setup: |
-              cd sfe/ && npm ci
          - command: lit-analyse
            project: web
            extra_setup: |
--- a/.github/workflows/release-publish.yml
+++ b/.github/workflows/release-publish.yml
@ -14,7 +14,7 @@ jobs:
    steps:
      - uses: actions/checkout@v4
      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3.1.0
+        uses: docker/setup-qemu-action@v3.0.0
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: prepare variables
@ -68,7 +68,7 @@ jobs:
        with:
          go-version-file: "go.mod"
      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3.1.0
+        uses: docker/setup-qemu-action@v3.0.0
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: prepare variables
--- a/8
+++ b/8
@ -30,12 +30,8 @@ WORKDIR /work/web

 RUN --mount=type=bind,target=/work/web/package.json,src=./web/package.json \
    --mount=type=bind,target=/work/web/package-lock.json,src=./web/package-lock.json \
-    --mount=type=bind,target=/work/web/sfe/package.json,src=./web/sfe/package.json \
-    --mount=type=bind,target=/work/web/sfe/package-lock.json,src=./web/sfe/package-lock.json \
    --mount=type=bind,target=/work/web/scripts,src=./web/scripts \
    --mount=type=cache,id=npm-web,sharing=shared,target=/root/.npm \
-    npm ci --include=dev && \
-    cd sfe && \
    npm ci --include=dev

 COPY ./package.json /work
@ -43,9 +39,7 @@ COPY ./web /work/web/
 COPY ./website /work/website/
 COPY ./gen-ts-api /work/web/node_modules/@goauthentik/api

-RUN npm run build && \
-    cd sfe && \
-    npm run build
+RUN npm run build

 # Stage 3: Build go proxy
 FROM --platform=${BUILDPLATFORM} mcr.microsoft.com/oss/go/microsoft/golang:1.22-fips-bookworm AS go-builder
--- a/authentik/brands/api.py
+++ b/authentik/brands/api.py
@ -24,7 +24,7 @@ from authentik.tenants.utils import get_current_tenant
 class FooterLinkSerializer(PassiveSerializer):
    """Links returned in Config API"""

-    href = CharField(read_only=True, allow_null=True)
+    href = CharField(read_only=True)
    name = CharField(read_only=True)


--- a/authentik/core/api/applications.py
+++ b/authentik/core/api/applications.py
@ -7,7 +7,9 @@ from datetime import timedelta
 from django.core.cache import cache
 from django.db.models import QuerySet
 from django.db.models.functions import ExtractHour
+from django.http import HttpRequest
 from django.shortcuts import get_object_or_404
+from django.urls import reverse
 from drf_spectacular.types import OpenApiTypes
 from drf_spectacular.utils import OpenApiParameter, OpenApiResponse, extend_schema
 from guardian.shortcuts import get_objects_for_user
@ -65,10 +67,16 @@ class ApplicationSerializer(ModelSerializer):

    def get_launch_url(self, app: Application) -> str | None:
        """Allow formatting of launch URL"""
-        user = None
+        rel_url = reverse(
+            "authentik_core:application-launch",
+            kwargs={
+                "application_slug": app.slug,
+            },
+        )
        if "request" in self.context:
-            user = self.context["request"].user
-        return app.get_launch_url(user)
+            request: HttpRequest = self.context["request"]
+            return request.build_absolute_uri(rel_url)
+        return rel_url

    def __init__(self, *args, **kwargs) -> None:
        super().__init__(*args, **kwargs)
@ -147,6 +155,13 @@ class ApplicationViewSet(UsedByMixin, ModelViewSet):
                applications.append(application)
        return applications

+    def _filter_applications_with_launch_url(self, pagined_apps: Iterator[Application]) -> list[Application]:
+        applications = []
+        for app in pagined_apps:
+            if app.get_launch_url():
+                applications.append(app)
+        return applications
+
    @extend_schema(
        parameters=[
            OpenApiParameter(
@ -204,6 +219,11 @@ class ApplicationViewSet(UsedByMixin, ModelViewSet):
                location=OpenApiParameter.QUERY,
                type=OpenApiTypes.INT,
            ),
+            OpenApiParameter(
+                name="only_with_launch_url",
+                location=OpenApiParameter.QUERY,
+                type=OpenApiTypes.BOOL,
+            ),
        ]
    )
    def list(self, request: Request) -> Response:
@ -216,6 +236,8 @@ class ApplicationViewSet(UsedByMixin, ModelViewSet):
        if superuser_full_list and request.user.is_superuser:
            return super().list(request)

+        only_with_launch_url = str(request.query_params.get("only_with_launch_url", "false")).lower()
+
        queryset = self._filter_queryset_for_list(self.get_queryset())
        paginator: Pagination = self.paginator
        paginated_apps = paginator.paginate_queryset(queryset, request)
@ -251,6 +273,10 @@ class ApplicationViewSet(UsedByMixin, ModelViewSet):
                    allowed_applications,
                    timeout=86400,
                )
+
+        if only_with_launch_url == "true":
+            allowed_applications = self._filter_applications_with_launch_url(allowed_applications)
+
        serializer = self.get_serializer(allowed_applications, many=True)
        return self.get_paginated_response(serializer.data)

--- a/authentik/core/models.py
+++ b/authentik/core/models.py
@ -1,6 +1,7 @@
 """authentik core models"""

 from datetime import datetime
+from functools import lru_cache
 from hashlib import sha256
 from typing import Any, Optional, Self
 from uuid import uuid4
@ -475,6 +476,10 @@ class Application(SerializerModel, PolicyBindingModel):
            return self.meta_icon.name
        return self.meta_icon.url

+    # maxsize is set as 2 since that is called once to check
+    # if we should return applications with a launch URL
+    # and a second time to actually get the launch_url
+    @lru_cache(maxsize=2)
    def get_launch_url(self, user: Optional["User"] = None) -> str | None:
        """Get launch URL if set, otherwise attempt to get launch URL based on provider."""
        url = None
--- a/authentik/core/sources/flow_manager.py
+++ b/authentik/core/sources/flow_manager.py
@ -309,7 +309,7 @@ class SourceFlowManager:
        # When request isn't authenticated we jump straight to auth
        if not self.request.user.is_authenticated:
            return self.handle_auth(connection)
-        connection.save()
+        # Connection has already been saved
        Event.new(
            EventAction.SOURCE_LINKED,
            message="Linked Source",
--- a/authentik/core/templates/base/header_js.html
+++ b/authentik/core/templates/base/header_js.html
@ -10,7 +10,7 @@
        versionSubdomain: "{{ version_subdomain }}",
        build: "{{ build }}",
    };
-    window.addEventListener("DOMContentLoaded", function () {
+    window.addEventListener("DOMContentLoaded", () => {
        {% for message in messages %}
        window.dispatchEvent(
            new CustomEvent("ak-message", {
--- a/authentik/flows/templates/if/flow.html
+++ b/authentik/flows/templates/if/flow.html
--- a/authentik/core/templates/login/base_full.html
+++ b/authentik/core/templates/login/base_full.html
@ -71,9 +71,9 @@
                </li>
                {% endfor %}
                <li>
-                    <span>
+                    <a rel="noopener noreferrer" target="_blank" href="https://goauthentik.io?utm_source=authentik">
                        {% trans 'Powered by authentik' %}
-                    </span>
+                    </a>
                </li>
            </ul>
        </footer>
--- a/authentik/core/urls.py
+++ b/authentik/core/urls.py
@ -20,9 +20,8 @@ from authentik.core.api.transactional_applications import TransactionalApplicati
 from authentik.core.api.users import UserViewSet
 from authentik.core.views import apps
 from authentik.core.views.debug import AccessDeniedView
-from authentik.core.views.interface import InterfaceView
+from authentik.core.views.interface import FlowInterfaceView, InterfaceView
 from authentik.core.views.session import EndSessionView
-from authentik.flows.views.interface import FlowInterfaceView
 from authentik.root.asgi_middleware import SessionMiddleware
 from authentik.root.messages.consumer import MessageConsumer
 from authentik.root.middleware import ChannelsLoggingMiddleware
@ -54,8 +53,6 @@ urlpatterns = [
    ),
    path(
        "if/flow/<slug:flow_slug>/",
-        # FIXME: move this url to the flows app...also will cause all
-        # of the reverse calls to be adjusted
        ensure_csrf_cookie(FlowInterfaceView.as_view()),
        name="if-flow",
    ),
--- a/authentik/core/views/interface.py
+++ b/authentik/core/views/interface.py
@ -3,6 +3,7 @@
 from json import dumps
 from typing import Any

+from django.shortcuts import get_object_or_404
 from django.views.generic.base import TemplateView
 from rest_framework.request import Request

@ -10,6 +11,7 @@ from authentik import get_build_hash
 from authentik.admin.tasks import LOCAL_VERSION
 from authentik.api.v3.config import ConfigView
 from authentik.brands.api import CurrentBrandSerializer
+from authentik.flows.models import Flow


 class InterfaceView(TemplateView):
@ -23,3 +25,14 @@ class InterfaceView(TemplateView):
        kwargs["build"] = get_build_hash()
        kwargs["url_kwargs"] = self.kwargs
        return super().get_context_data(**kwargs)
+
+
+class FlowInterfaceView(InterfaceView):
+    """Flow interface"""
+
+    template_name = "if/flow.html"
+
+    def get_context_data(self, **kwargs: Any) -> dict[str, Any]:
+        kwargs["flow"] = get_object_or_404(Flow, slug=self.kwargs.get("flow_slug"))
+        kwargs["inspector"] = "inspector" in self.request.GET
+        return super().get_context_data(**kwargs)
--- a/authentik/flows/templates/if/flow-sfe.html
+++ b/authentik/flows/templates/if/flow-sfe.html
@ -1,54 +0,0 @@
-{% load static %}
-{% load i18n %}
-{% load authentik_core %}
-
-<!DOCTYPE html>
-
-<html lang="en">
-    <head>
-        <meta charset="UTF-8">
-        <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
-        <title>{% block title %}{% trans title|default:brand.branding_title %}{% endblock %}</title>
-        <link rel="icon" href="{{ brand.branding_favicon }}">
-        <link rel="shortcut icon" href="{{ brand.branding_favicon }}">
-        {% block head_before %}
-        {% endblock %}
-        <link rel="stylesheet" type="text/css" href="{% static 'dist/sfe/bootstrap.min.css' %}">
-        <meta name="sentry-trace" content="{{ sentry_trace }}" />
-        {% include "base/header_js.html" %}
-        <style>
-          html,
-          body {
-            height: 100%;
-          }
-          body {
-            background-image: url("{{ flow.background_url }}");
-            background-repeat: no-repeat;
-            background-size: cover;
-          }
-          .card {
-            padding: 3rem;
-          }
-
-          .form-signin {
-            max-width: 330px;
-            padding: 1rem;
-          }
-
-          .form-signin .form-floating:focus-within {
-            z-index: 2;
-          }
-          .brand-icon {
-            max-width: 100%;
-          }
-        </style>
-    </head>
-    <body class="d-flex align-items-center py-4 bg-body-tertiary">
-      <div class="card m-auto">
-        <main class="form-signin w-100 m-auto" id="flow-sfe-container">
-        </main>
-        <span class="mt-3 mb-0 text-muted text-center">{% trans 'Powered by authentik' %}</span>
-      </div>
-      <script src="{% static 'dist/sfe/index.js' %}"></script>
-    </body>
-</html>
--- a/authentik/flows/views/executor.py
+++ b/authentik/flows/views/executor.py
@ -16,7 +16,6 @@ from django.views.decorators.clickjacking import xframe_options_sameorigin
 from django.views.generic import View
 from drf_spectacular.types import OpenApiTypes
 from drf_spectacular.utils import OpenApiParameter, PolymorphicProxySerializer, extend_schema
-from rest_framework.authentication import SessionAuthentication
 from rest_framework.permissions import AllowAny
 from rest_framework.views import APIView
 from sentry_sdk import capture_exception
@ -24,7 +23,6 @@ from sentry_sdk.api import set_tag
 from sentry_sdk.hub import Hub
 from structlog.stdlib import BoundLogger, get_logger

-from authentik.api.authentication import TokenAuthentication
 from authentik.brands.models import Brand
 from authentik.core.models import Application
 from authentik.events.models import Event, EventAction, cleanse_dict
@ -106,10 +104,6 @@ class FlowExecutorView(APIView):
    """Flow executor, passing requests to Stage Views"""

    permission_classes = [AllowAny]
-    authentication_classes = [
-        TokenAuthentication,
-        SessionAuthentication,
-    ]

    flow: Flow

--- a/authentik/flows/views/interface.py
+++ b/authentik/flows/views/interface.py
@ -1,41 +0,0 @@
-"""Interface views"""
-
-from typing import Any
-
-from django.shortcuts import get_object_or_404
-from ua_parser.user_agent_parser import Parse
-
-from authentik.core.views.interface import InterfaceView
-from authentik.flows.models import Flow
-
-
-class FlowInterfaceView(InterfaceView):
-    """Flow interface"""
-
-    def get_context_data(self, **kwargs: Any) -> dict[str, Any]:
-        kwargs["flow"] = get_object_or_404(Flow, slug=self.kwargs.get("flow_slug"))
-        kwargs["inspector"] = "inspector" in self.request.GET
-        return super().get_context_data(**kwargs)
-
-    def compat_needs_sfe(self) -> bool:
-        """Check if we need to use the simplified flow executor for compatibility"""
-        ua = Parse(self.request.META.get("HTTP_USER_AGENT", ""))
-        if ua["user_agent"]["family"] == "IE":
-            return True
-        # Only use SFE for Edge 18 and older, after Edge 18 MS switched to chromium which supports
-        # the default flow executor
-        if (
-            ua["user_agent"]["family"] == "Edge"
-            and int(ua["user_agent"]["major"]) <= 18  # noqa: PLR2004
-        ):  # noqa: PLR2004
-            return True
-        # https://github.com/AzureAD/microsoft-authentication-library-for-objc
-        # Used by Microsoft Teams/Office on macOS, and also uses a very outdated browser engine
-        if "PKeyAuth" in ua["string"]:
-            return True
-        return False
-
-    def get_template_names(self) -> list[str]:
-        if self.compat_needs_sfe() or "sfe" in self.request.GET:
-            return ["if/flow-sfe.html"]
-        return ["if/flow.html"]
--- a/authentik/outposts/api/outposts.py
+++ b/authentik/outposts/api/outposts.py
@ -20,7 +20,6 @@ from authentik.core.api.utils import JSONDictField, ModelSerializer, PassiveSeri
 from authentik.core.models import Provider
 from authentik.enterprise.license import LicenseKey
 from authentik.enterprise.providers.rac.models import RACProvider
-from authentik.lib.utils.time import timedelta_from_string, timedelta_string_validator
 from authentik.outposts.api.service_connections import ServiceConnectionSerializer
 from authentik.outposts.apps import MANAGED_OUTPOST, MANAGED_OUTPOST_NAME
 from authentik.outposts.models import (
@ -50,10 +49,6 @@ class OutpostSerializer(ModelSerializer):
    service_connection_obj = ServiceConnectionSerializer(
        source="service_connection", read_only=True
    )
-    refresh_interval_s = SerializerMethodField()
-
-    def get_refresh_interval_s(self, obj: Outpost) -> int:
-        return int(timedelta_from_string(obj.config.refresh_interval).total_seconds())

    def validate_name(self, name: str) -> str:
        """Validate name (especially for embedded outpost)"""
@ -89,8 +84,7 @@ class OutpostSerializer(ModelSerializer):
    def validate_config(self, config) -> dict:
        """Check that the config has all required fields"""
        try:
-            parsed = from_dict(OutpostConfig, config)
-            timedelta_string_validator(parsed.refresh_interval)
+            from_dict(OutpostConfig, config)
        except DaciteError as exc:
            raise ValidationError(f"Failed to validate config: {str(exc)}") from exc
        return config
@ -105,7 +99,6 @@ class OutpostSerializer(ModelSerializer):
            "providers_obj",
            "service_connection",
            "service_connection_obj",
-            "refresh_interval_s",
            "token_identifier",
            "config",
            "managed",
--- a/authentik/outposts/models.py
+++ b/authentik/outposts/models.py
@ -61,7 +61,6 @@ class OutpostConfig:

    log_level: str = CONFIG.get("log_level")
    object_naming_template: str = field(default="ak-outpost-%(name)s")
-    refresh_interval: str = "minutes=5"

    container_image: str | None = field(default=None)

--- a/authentik/root/settings.py
+++ b/authentik/root/settings.py
@ -5,7 +5,6 @@ from collections import OrderedDict
 from hashlib import sha512
 from pathlib import Path

-import orjson
 from celery.schedules import crontab
 from django.conf import ImproperlyConfigured
 from sentry_sdk import set_tag
@ -179,17 +178,16 @@ REST_FRAMEWORK = {
        "rest_framework.filters.OrderingFilter",
        "rest_framework.filters.SearchFilter",
    ],
-    "DEFAULT_PERMISSION_CLASSES": ("authentik.rbac.permissions.ObjectPermissions",),
-    "DEFAULT_AUTHENTICATION_CLASSES": ("authentik.api.authentication.TokenAuthentication",),
-    "DEFAULT_RENDERER_CLASSES": [
-        "drf_orjson_renderer.renderers.ORJSONRenderer",
-    ],
-    "ORJSON_RENDERER_OPTIONS": [
-        orjson.OPT_NON_STR_KEYS,
-        orjson.OPT_UTC_Z,
-    ],
    "DEFAULT_PARSER_CLASSES": [
-        "drf_orjson_renderer.parsers.ORJSONParser",
+        "rest_framework.parsers.JSONParser",
+    ],
+    "DEFAULT_PERMISSION_CLASSES": ("authentik.rbac.permissions.ObjectPermissions",),
+    "DEFAULT_AUTHENTICATION_CLASSES": (
+        "authentik.api.authentication.TokenAuthentication",
+        "rest_framework.authentication.SessionAuthentication",
+    ),
+    "DEFAULT_RENDERER_CLASSES": [
+        "rest_framework.renderers.JSONRenderer",
    ],
    "DEFAULT_SCHEMA_CLASS": "drf_spectacular.openapi.AutoSchema",
    "TEST_REQUEST_DEFAULT_FORMAT": "json",
--- a/authentik/stages/authenticator_validate/stage.py
+++ b/authentik/stages/authenticator_validate/stage.py
@ -325,7 +325,7 @@ class AuthenticatorValidateStageView(ChallengeStageView):
            serializer = SelectableStageSerializer(
                data={
                    "pk": stage.pk,
-                    "name": getattr(stage, "friendly_name", stage.name),
+                    "name": stage.friendly_name or stage.name,
                    "verbose_name": str(stage._meta.verbose_name)
                    .replace("Setup Stage", "")
                    .strip(),
--- a/blueprints/default/app-authentik-admin.yaml
+++ b/blueprints/default/app-authentik-admin.yaml
@ -1,45 +0,0 @@
-version: 1
-metadata:
-  name: Default - authentik Admin Interface
-entries:
-  - model: authentik_providers_oauth2.oauth2provider
-    id: provider
-    identifiers:
-      name: authentik-admin-interface
-    attrs:
-      authorization_flow:
-        !Find [
-          authentik_flows.flow,
-          [slug, default-provider-authorization-implicit-consent],
-        ]
-      client_type: public
-      client_id: authentik-admin-interface
-      property_mappings:
-        - !Find [
-            authentik_providers_oauth2.scopemapping,
-            [managed, goauthentik.io/providers/oauth2/scope-openid],
-          ]
-        - !Find [
-            authentik_providers_oauth2.scopemapping,
-            [managed, goauthentik.io/providers/oauth2/scope-email],
-          ]
-        - !Find [
-            authentik_providers_oauth2.scopemapping,
-            [managed, goauthentik.io/providers/oauth2/scope-profile],
-          ]
-        - !Find [
-            authentik_providers_oauth2.scopemapping,
-            [managed, goauthentik.io/providers/oauth2/scope-authentik_api],
-          ]
-      signing_key:
-        !Find [
-          authentik_crypto.certificatekeypair,
-          [name, authentik Self-signed Certificate],
-        ]
-  - model: authentik_core.application
-    identifiers:
-      slug: authentik-admin-interface
-    attrs:
-      name: authentik Admin interface
-      icon: https://goauthentik.io/img/icon.png
-      provider: !KeyOf provider
--- a/blueprints/default/app-authentik-user.yaml
+++ b/blueprints/default/app-authentik-user.yaml
@ -1,45 +0,0 @@
-version: 1
-metadata:
-  name: Default - authentik User Interface
-entries:
-  - model: authentik_providers_oauth2.oauth2provider
-    id: provider
-    identifiers:
-      name: authentik-user-interface
-    attrs:
-      authorization_flow:
-        !Find [
-          authentik_flows.flow,
-          [slug, default-provider-authorization-implicit-consent],
-        ]
-      client_type: public
-      client_id: authentik-user-interface
-      property_mappings:
-        - !Find [
-            authentik_providers_oauth2.scopemapping,
-            [managed, goauthentik.io/providers/oauth2/scope-openid],
-          ]
-        - !Find [
-            authentik_providers_oauth2.scopemapping,
-            [managed, goauthentik.io/providers/oauth2/scope-email],
-          ]
-        - !Find [
-            authentik_providers_oauth2.scopemapping,
-            [managed, goauthentik.io/providers/oauth2/scope-profile],
-          ]
-        - !Find [
-            authentik_providers_oauth2.scopemapping,
-            [managed, goauthentik.io/providers/oauth2/scope-authentik_api],
-          ]
-      signing_key:
-        !Find [
-          authentik_crypto.certificatekeypair,
-          [name, authentik Self-signed Certificate],
-        ]
-  - model: authentik_core.application
-    identifiers:
-      slug: authentik-user-interface
-    attrs:
-      name: authentik User interface
-      icon: https://goauthentik.io/img/icon.png
-      provider: !KeyOf provider
--- a/go.mod
+++ b/go.mod
@ -23,12 +23,12 @@ require (
 	github.com/pires/go-proxyproto v0.7.0
 	github.com/prometheus/client_golang v1.19.1
 	github.com/redis/go-redis/v9 v9.5.3
-	github.com/sethvargo/go-envconfig v1.1.0
+	github.com/sethvargo/go-envconfig v1.0.3
 	github.com/sirupsen/logrus v1.9.3
 	github.com/spf13/cobra v1.8.1
 	github.com/stretchr/testify v1.9.0
 	github.com/wwt/guac v1.3.2
-	goauthentik.io/api/v3 v3.2024060.6
+	goauthentik.io/api/v3 v3.2024060.2
 	golang.org/x/exp v0.0.0-20230210204819-062eb4c674ab
 	golang.org/x/oauth2 v0.21.0
 	golang.org/x/sync v0.7.0
--- a/go.sum
+++ b/go.sum
@ -248,8 +248,8 @@ github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFR
 github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
 github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUzkipdSkR5nkCZA=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
-github.com/sethvargo/go-envconfig v1.1.0 h1:cWZiJxeTm7AlCvzGXrEXaSTCNgip5oJepekh/BOQuog=
-github.com/sethvargo/go-envconfig v1.1.0/go.mod h1:JLd0KFWQYzyENqnEPWWZ49i4vzZo/6nRidxI8YvGiHw=
+github.com/sethvargo/go-envconfig v1.0.3 h1:ZDxFGT1M7RPX0wgDOCdZMidrEB+NrayYr6fL0/+pk4I=
+github.com/sethvargo/go-envconfig v1.0.3/go.mod h1:JLd0KFWQYzyENqnEPWWZ49i4vzZo/6nRidxI8YvGiHw=
 github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
 github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
 github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
@ -294,8 +294,8 @@ go.opentelemetry.io/otel/trace v1.24.0 h1:CsKnnL4dUAr/0llH9FKuc698G04IrpWV0MQA/Y
 go.opentelemetry.io/otel/trace v1.24.0/go.mod h1:HPc3Xr/cOApsBI154IU0OI0HJexz+aw5uPdbs3UCjNU=
 go.uber.org/goleak v1.2.1 h1:NBol2c7O1ZokfZ0LEU9K6Whx/KnwvepVetCUhtKja4A=
 go.uber.org/goleak v1.2.1/go.mod h1:qlT2yGI9QafXHhZZLxlSuNsMw3FFLxBr+tBRlmO1xH4=
-goauthentik.io/api/v3 v3.2024060.6 h1:6xN5GXv9G2w6JlqdtSo5p/lBmvBwbNGRTbBwSr1EOKU=
-goauthentik.io/api/v3 v3.2024060.6/go.mod h1:zz+mEZg8rY/7eEjkMGWJ2DnGqk+zqxuybGCGrR2O4Kw=
+goauthentik.io/api/v3 v3.2024060.2 h1:rnZlHFzuHJQ5sU1V7XVZhWRtlSuvrf2QLzBSNtLexi8=
+goauthentik.io/api/v3 v3.2024060.2/go.mod h1:zz+mEZg8rY/7eEjkMGWJ2DnGqk+zqxuybGCGrR2O4Kw=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
--- a/internal/outpost/ak/api_ws.go
+++ b/internal/outpost/ak/api_ws.go
@ -183,7 +183,7 @@ func (ac *APIController) startWSHealth() {

 func (ac *APIController) startIntervalUpdater() {
 	logger := ac.logger.WithField("loop", "interval-updater")
-	ticker := time.NewTicker(time.Duration(ac.Outpost.RefreshIntervalS) * time.Second)
+	ticker := time.NewTicker(5 * time.Minute)
 	for ; true; <-ticker.C {
 		logger.Debug("Running interval update")
 		err := ac.OnRefresh()
@ -198,7 +198,6 @@ func (ac *APIController) startIntervalUpdater() {
 				"build":        constants.BUILD("tagged"),
 			}).SetToCurrentTime()
 		}
-		ticker.Reset(time.Duration(ac.Outpost.RefreshIntervalS) * time.Second)
 	}
 }

--- a/internal/outpost/proxyv2/templates/error.html
+++ b/internal/outpost/proxyv2/templates/error.html
@ -48,9 +48,9 @@
                <footer class="pf-c-login__footer">
                    <ul class="pf-c-list pf-m-inline">
                        <li>
-                            <span>
+                            <a rel="noopener noreferrer" target="_blank" href="https://goauthentik.io?utm_source=authentik_outpost&utm_campaign=proxy_error">
                                Powered by authentik
-                            </span>
+                            </a>
                        </li>
                    </ul>
                </footer>
--- a/poetry.lock
+++ b/poetry.lock
@ -1,4 +1,4 @@
-# This file is automatically @generated by Poetry 1.8.3 and should not be changed by hand.
+# This file is automatically @generated by Poetry 1.8.2 and should not be changed by hand.

 [[package]]
 name = "aiohttp"
@ -639,13 +639,13 @@ zstd = ["zstandard (==0.22.0)"]

 [[package]]
 name = "certifi"
-version = "2024.7.4"
+version = "2024.2.2"
 description = "Python package for providing Mozilla's CA Bundle."
 optional = false
 python-versions = ">=3.6"
 files = [
-    {file = "certifi-2024.7.4-py3-none-any.whl", hash = "sha256:c198e21b1289c2ab85ee4e67bb4b4ef3ead0892059901a8d5b622f24a1101e90"},
-    {file = "certifi-2024.7.4.tar.gz", hash = "sha256:5a1e7645bc0ec61a09e26c36f6106dd4cf40c6db3a1fb6352b0244e7fb057c7b"},
+    {file = "certifi-2024.2.2-py3-none-any.whl", hash = "sha256:dc383c07b76109f368f6106eee2b593b04a011ea4d55f652c6ca24a754d1cdd1"},
+    {file = "certifi-2024.2.2.tar.gz", hash = "sha256:0569859f95fc761b18b45ef421b1290a0f65f147e92a1e5eb3e635f9a5e4e66f"},
 ]

 [[package]]
@ -1446,22 +1446,6 @@ docs = ["sphinx", "sphinx-rtd-theme"]
 release = ["bump-my-version", "twine"]
 tests = ["black", "django-stubs[compatible-mypy]", "djangorestframework-stubs[compatible-mypy]", "flake8", "fqdn", "idna", "isoduration", "isort", "jsonpointer", "mypy", "pytest", "pytest-django", "rfc3339-validator", "rfc3987", "tox", "types-jsonschema", "uri-template", "webcolors"]

-[[package]]
-name = "drf-orjson-renderer"
-version = "1.7.2"
-description = "Django RestFramework JSON Renderer Backed by orjson"
-optional = false
-python-versions = ">=3.6.0"
-files = [
-    {file = "drf_orjson_renderer-1.7.2-py3-none-any.whl", hash = "sha256:4fbf6f91d7032fbf23e31837e4c5cf6950af4e588bf34e9feadc809c67977657"},
-    {file = "drf_orjson_renderer-1.7.2.tar.gz", hash = "sha256:b8a47c38a6eeaf5ffc7a5d53d028b95fa8b340999507681e403a599f0a3be456"},
-]
-
-[package.dependencies]
-django = ">=3.2"
-djangorestframework = "*"
-orjson = ">=3.3.0"
-
 [[package]]
 name = "drf-spectacular"
 version = "0.27.2"
@ -3034,61 +3018,6 @@ files = [
 [package.dependencies]
 opentelemetry-api = "1.25.0"

-[[package]]
-name = "orjson"
-version = "3.10.3"
-description = "Fast, correct Python JSON library supporting dataclasses, datetimes, and numpy"
-optional = false
-python-versions = ">=3.8"
-files = [
-    {file = "orjson-3.10.3-cp310-cp310-macosx_10_15_x86_64.macosx_11_0_arm64.macosx_10_15_universal2.whl", hash = "sha256:9fb6c3f9f5490a3eb4ddd46fc1b6eadb0d6fc16fb3f07320149c3286a1409dd8"},
-    {file = "orjson-3.10.3-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:252124b198662eee80428f1af8c63f7ff077c88723fe206a25df8dc57a57b1fa"},
-    {file = "orjson-3.10.3-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:9f3e87733823089a338ef9bbf363ef4de45e5c599a9bf50a7a9b82e86d0228da"},
-    {file = "orjson-3.10.3-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:c8334c0d87103bb9fbbe59b78129f1f40d1d1e8355bbed2ca71853af15fa4ed3"},
-    {file = "orjson-3.10.3-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:1952c03439e4dce23482ac846e7961f9d4ec62086eb98ae76d97bd41d72644d7"},
-    {file = "orjson-3.10.3-cp310-cp310-musllinux_1_2_aarch64.whl", hash = "sha256:c0403ed9c706dcd2809f1600ed18f4aae50be263bd7112e54b50e2c2bc3ebd6d"},
-    {file = "orjson-3.10.3-cp310-cp310-musllinux_1_2_x86_64.whl", hash = "sha256:382e52aa4270a037d41f325e7d1dfa395b7de0c367800b6f337d8157367bf3a7"},
-    {file = "orjson-3.10.3-cp310-none-win32.whl", hash = "sha256:be2aab54313752c04f2cbaab4515291ef5af8c2256ce22abc007f89f42f49109"},
-    {file = "orjson-3.10.3-cp310-none-win_amd64.whl", hash = "sha256:416b195f78ae461601893f482287cee1e3059ec49b4f99479aedf22a20b1098b"},
-    {file = "orjson-3.10.3-cp311-cp311-macosx_10_15_x86_64.macosx_11_0_arm64.macosx_10_15_universal2.whl", hash = "sha256:73100d9abbbe730331f2242c1fc0bcb46a3ea3b4ae3348847e5a141265479700"},
-    {file = "orjson-3.10.3-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:544a12eee96e3ab828dbfcb4d5a0023aa971b27143a1d35dc214c176fdfb29b3"},
-    {file = "orjson-3.10.3-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:520de5e2ef0b4ae546bea25129d6c7c74edb43fc6cf5213f511a927f2b28148b"},
-    {file = "orjson-3.10.3-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:ccaa0a401fc02e8828a5bedfd80f8cd389d24f65e5ca3954d72c6582495b4bcf"},
-    {file = "orjson-3.10.3-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:9a7bc9e8bc11bac40f905640acd41cbeaa87209e7e1f57ade386da658092dc16"},
-    {file = "orjson-3.10.3-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:3582b34b70543a1ed6944aca75e219e1192661a63da4d039d088a09c67543b08"},
-    {file = "orjson-3.10.3-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:1c23dfa91481de880890d17aa7b91d586a4746a4c2aa9a145bebdbaf233768d5"},
-    {file = "orjson-3.10.3-cp311-none-win32.whl", hash = "sha256:1770e2a0eae728b050705206d84eda8b074b65ee835e7f85c919f5705b006c9b"},
-    {file = "orjson-3.10.3-cp311-none-win_amd64.whl", hash = "sha256:93433b3c1f852660eb5abdc1f4dd0ced2be031ba30900433223b28ee0140cde5"},
-    {file = "orjson-3.10.3-cp312-cp312-macosx_10_15_x86_64.macosx_11_0_arm64.macosx_10_15_universal2.whl", hash = "sha256:a39aa73e53bec8d410875683bfa3a8edf61e5a1c7bb4014f65f81d36467ea098"},
-    {file = "orjson-3.10.3-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:0943a96b3fa09bee1afdfccc2cb236c9c64715afa375b2af296c73d91c23eab2"},
-    {file = "orjson-3.10.3-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:e852baafceff8da3c9defae29414cc8513a1586ad93e45f27b89a639c68e8176"},
-    {file = "orjson-3.10.3-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:18566beb5acd76f3769c1d1a7ec06cdb81edc4d55d2765fb677e3eaa10fa99e0"},
-    {file = "orjson-3.10.3-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:1bd2218d5a3aa43060efe649ec564ebedec8ce6ae0a43654b81376216d5ebd42"},
-    {file = "orjson-3.10.3-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:cf20465e74c6e17a104ecf01bf8cd3b7b252565b4ccee4548f18b012ff2f8069"},
-    {file = "orjson-3.10.3-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:ba7f67aa7f983c4345eeda16054a4677289011a478ca947cd69c0a86ea45e534"},
-    {file = "orjson-3.10.3-cp312-none-win32.whl", hash = "sha256:17e0713fc159abc261eea0f4feda611d32eabc35708b74bef6ad44f6c78d5ea0"},
-    {file = "orjson-3.10.3-cp312-none-win_amd64.whl", hash = "sha256:4c895383b1ec42b017dd2c75ae8a5b862fc489006afde06f14afbdd0309b2af0"},
-    {file = "orjson-3.10.3-cp38-cp38-macosx_10_15_x86_64.macosx_11_0_arm64.macosx_10_15_universal2.whl", hash = "sha256:be2719e5041e9fb76c8c2c06b9600fe8e8584e6980061ff88dcbc2691a16d20d"},
-    {file = "orjson-3.10.3-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:cb0175a5798bdc878956099f5c54b9837cb62cfbf5d0b86ba6d77e43861bcec2"},
-    {file = "orjson-3.10.3-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:978be58a68ade24f1af7758626806e13cff7748a677faf95fbb298359aa1e20d"},
-    {file = "orjson-3.10.3-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:16bda83b5c61586f6f788333d3cf3ed19015e3b9019188c56983b5a299210eb5"},
-    {file = "orjson-3.10.3-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:4ad1f26bea425041e0a1adad34630c4825a9e3adec49079b1fb6ac8d36f8b754"},
-    {file = "orjson-3.10.3-cp38-cp38-musllinux_1_2_aarch64.whl", hash = "sha256:9e253498bee561fe85d6325ba55ff2ff08fb5e7184cd6a4d7754133bd19c9195"},
-    {file = "orjson-3.10.3-cp38-cp38-musllinux_1_2_x86_64.whl", hash = "sha256:0a62f9968bab8a676a164263e485f30a0b748255ee2f4ae49a0224be95f4532b"},
-    {file = "orjson-3.10.3-cp38-none-win32.whl", hash = "sha256:8d0b84403d287d4bfa9bf7d1dc298d5c1c5d9f444f3737929a66f2fe4fb8f134"},
-    {file = "orjson-3.10.3-cp38-none-win_amd64.whl", hash = "sha256:8bc7a4df90da5d535e18157220d7915780d07198b54f4de0110eca6b6c11e290"},
-    {file = "orjson-3.10.3-cp39-cp39-macosx_10_15_x86_64.macosx_11_0_arm64.macosx_10_15_universal2.whl", hash = "sha256:9059d15c30e675a58fdcd6f95465c1522b8426e092de9fff20edebfdc15e1cb0"},
-    {file = "orjson-3.10.3-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:8d40c7f7938c9c2b934b297412c067936d0b54e4b8ab916fd1a9eb8f54c02294"},
-    {file = "orjson-3.10.3-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:d4a654ec1de8fdaae1d80d55cee65893cb06494e124681ab335218be6a0691e7"},
-    {file = "orjson-3.10.3-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:831c6ef73f9aa53c5f40ae8f949ff7681b38eaddb6904aab89dca4d85099cb78"},
-    {file = "orjson-3.10.3-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:99b880d7e34542db89f48d14ddecbd26f06838b12427d5a25d71baceb5ba119d"},
-    {file = "orjson-3.10.3-cp39-cp39-musllinux_1_2_aarch64.whl", hash = "sha256:2e5e176c994ce4bd434d7aafb9ecc893c15f347d3d2bbd8e7ce0b63071c52e25"},
-    {file = "orjson-3.10.3-cp39-cp39-musllinux_1_2_x86_64.whl", hash = "sha256:b69a58a37dab856491bf2d3bbf259775fdce262b727f96aafbda359cb1d114d8"},
-    {file = "orjson-3.10.3-cp39-none-win32.whl", hash = "sha256:b8d4d1a6868cde356f1402c8faeb50d62cee765a1f7ffcfd6de732ab0581e063"},
-    {file = "orjson-3.10.3-cp39-none-win_amd64.whl", hash = "sha256:5102f50c5fc46d94f2033fe00d392588564378260d64377aec702f21a7a22912"},
-    {file = "orjson-3.10.3.tar.gz", hash = "sha256:2b166507acae7ba2f7c315dcf185a9111ad5e992ac81f2d507aac39193c2c818"},
-]
-
 [[package]]
 name = "outcome"
 version = "1.3.0.post0"
@ -3462,19 +3391,19 @@ files = [

 [[package]]
 name = "pydantic"
-version = "2.8.2"
+version = "2.8.0"
 description = "Data validation using Python type hints"
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "pydantic-2.8.2-py3-none-any.whl", hash = "sha256:73ee9fddd406dc318b885c7a2eab8a6472b68b8fb5ba8150949fc3db939f23c8"},
-    {file = "pydantic-2.8.2.tar.gz", hash = "sha256:6f62c13d067b0755ad1c21a34bdd06c0c12625a22b0fc09c6b149816604f7c2a"},
+    {file = "pydantic-2.8.0-py3-none-any.whl", hash = "sha256:ead4f3a1e92386a734ca1411cb25d94147cf8778ed5be6b56749047676d6364e"},
+    {file = "pydantic-2.8.0.tar.gz", hash = "sha256:d970ffb9d030b710795878940bd0489842c638e7252fc4a19c3ae2f7da4d6141"},
 ]

 [package.dependencies]
 annotated-types = ">=0.4.0"
 email-validator = {version = ">=2.0.0", optional = true, markers = "extra == \"email\""}
-pydantic-core = "2.20.1"
+pydantic-core = "2.20.0"
 typing-extensions = {version = ">=4.6.1", markers = "python_version < \"3.13\""}

 [package.extras]
@ -3482,100 +3411,99 @@ email = ["email-validator (>=2.0.0)"]

 [[package]]
 name = "pydantic-core"
-version = "2.20.1"
+version = "2.20.0"
 description = "Core functionality for Pydantic validation and serialization"
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "pydantic_core-2.20.1-cp310-cp310-macosx_10_12_x86_64.whl", hash = "sha256:3acae97ffd19bf091c72df4d726d552c473f3576409b2a7ca36b2f535ffff4a3"},
-    {file = "pydantic_core-2.20.1-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:41f4c96227a67a013e7de5ff8f20fb496ce573893b7f4f2707d065907bffdbd6"},
-    {file = "pydantic_core-2.20.1-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:5f239eb799a2081495ea659d8d4a43a8f42cd1fe9ff2e7e436295c38a10c286a"},
-    {file = "pydantic_core-2.20.1-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:53e431da3fc53360db73eedf6f7124d1076e1b4ee4276b36fb25514544ceb4a3"},
-    {file = "pydantic_core-2.20.1-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:f1f62b2413c3a0e846c3b838b2ecd6c7a19ec6793b2a522745b0869e37ab5bc1"},
-    {file = "pydantic_core-2.20.1-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:5d41e6daee2813ecceea8eda38062d69e280b39df793f5a942fa515b8ed67953"},
-    {file = "pydantic_core-2.20.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:3d482efec8b7dc6bfaedc0f166b2ce349df0011f5d2f1f25537ced4cfc34fd98"},
-    {file = "pydantic_core-2.20.1-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:e93e1a4b4b33daed65d781a57a522ff153dcf748dee70b40c7258c5861e1768a"},
-    {file = "pydantic_core-2.20.1-cp310-cp310-musllinux_1_1_aarch64.whl", hash = "sha256:e7c4ea22b6739b162c9ecaaa41d718dfad48a244909fe7ef4b54c0b530effc5a"},
-    {file = "pydantic_core-2.20.1-cp310-cp310-musllinux_1_1_x86_64.whl", hash = "sha256:4f2790949cf385d985a31984907fecb3896999329103df4e4983a4a41e13e840"},
-    {file = "pydantic_core-2.20.1-cp310-none-win32.whl", hash = "sha256:5e999ba8dd90e93d57410c5e67ebb67ffcaadcea0ad973240fdfd3a135506250"},
-    {file = "pydantic_core-2.20.1-cp310-none-win_amd64.whl", hash = "sha256:512ecfbefef6dac7bc5eaaf46177b2de58cdf7acac8793fe033b24ece0b9566c"},
-    {file = "pydantic_core-2.20.1-cp311-cp311-macosx_10_12_x86_64.whl", hash = "sha256:d2a8fa9d6d6f891f3deec72f5cc668e6f66b188ab14bb1ab52422fe8e644f312"},
-    {file = "pydantic_core-2.20.1-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:175873691124f3d0da55aeea1d90660a6ea7a3cfea137c38afa0a5ffabe37b88"},
-    {file = "pydantic_core-2.20.1-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:37eee5b638f0e0dcd18d21f59b679686bbd18917b87db0193ae36f9c23c355fc"},
-    {file = "pydantic_core-2.20.1-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:25e9185e2d06c16ee438ed39bf62935ec436474a6ac4f9358524220f1b236e43"},
-    {file = "pydantic_core-2.20.1-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:150906b40ff188a3260cbee25380e7494ee85048584998c1e66df0c7a11c17a6"},
-    {file = "pydantic_core-2.20.1-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:8ad4aeb3e9a97286573c03df758fc7627aecdd02f1da04516a86dc159bf70121"},
-    {file = "pydantic_core-2.20.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:d3f3ed29cd9f978c604708511a1f9c2fdcb6c38b9aae36a51905b8811ee5cbf1"},
-    {file = "pydantic_core-2.20.1-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:b0dae11d8f5ded51699c74d9548dcc5938e0804cc8298ec0aa0da95c21fff57b"},
-    {file = "pydantic_core-2.20.1-cp311-cp311-musllinux_1_1_aarch64.whl", hash = "sha256:faa6b09ee09433b87992fb5a2859efd1c264ddc37280d2dd5db502126d0e7f27"},
-    {file = "pydantic_core-2.20.1-cp311-cp311-musllinux_1_1_x86_64.whl", hash = "sha256:9dc1b507c12eb0481d071f3c1808f0529ad41dc415d0ca11f7ebfc666e66a18b"},
-    {file = "pydantic_core-2.20.1-cp311-none-win32.whl", hash = "sha256:fa2fddcb7107e0d1808086ca306dcade7df60a13a6c347a7acf1ec139aa6789a"},
-    {file = "pydantic_core-2.20.1-cp311-none-win_amd64.whl", hash = "sha256:40a783fb7ee353c50bd3853e626f15677ea527ae556429453685ae32280c19c2"},
-    {file = "pydantic_core-2.20.1-cp312-cp312-macosx_10_12_x86_64.whl", hash = "sha256:595ba5be69b35777474fa07f80fc260ea71255656191adb22a8c53aba4479231"},
-    {file = "pydantic_core-2.20.1-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:a4f55095ad087474999ee28d3398bae183a66be4823f753cd7d67dd0153427c9"},
-    {file = "pydantic_core-2.20.1-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:f9aa05d09ecf4c75157197f27cdc9cfaeb7c5f15021c6373932bf3e124af029f"},
-    {file = "pydantic_core-2.20.1-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:e97fdf088d4b31ff4ba35db26d9cc472ac7ef4a2ff2badeabf8d727b3377fc52"},
-    {file = "pydantic_core-2.20.1-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:bc633a9fe1eb87e250b5c57d389cf28998e4292336926b0b6cdaee353f89a237"},
-    {file = "pydantic_core-2.20.1-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:d573faf8eb7e6b1cbbcb4f5b247c60ca8be39fe2c674495df0eb4318303137fe"},
-    {file = "pydantic_core-2.20.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:26dc97754b57d2fd00ac2b24dfa341abffc380b823211994c4efac7f13b9e90e"},
-    {file = "pydantic_core-2.20.1-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:33499e85e739a4b60c9dac710c20a08dc73cb3240c9a0e22325e671b27b70d24"},
-    {file = "pydantic_core-2.20.1-cp312-cp312-musllinux_1_1_aarch64.whl", hash = "sha256:bebb4d6715c814597f85297c332297c6ce81e29436125ca59d1159b07f423eb1"},
-    {file = "pydantic_core-2.20.1-cp312-cp312-musllinux_1_1_x86_64.whl", hash = "sha256:516d9227919612425c8ef1c9b869bbbee249bc91912c8aaffb66116c0b447ebd"},
-    {file = "pydantic_core-2.20.1-cp312-none-win32.whl", hash = "sha256:469f29f9093c9d834432034d33f5fe45699e664f12a13bf38c04967ce233d688"},
-    {file = "pydantic_core-2.20.1-cp312-none-win_amd64.whl", hash = "sha256:035ede2e16da7281041f0e626459bcae33ed998cca6a0a007a5ebb73414ac72d"},
-    {file = "pydantic_core-2.20.1-cp313-cp313-macosx_10_12_x86_64.whl", hash = "sha256:0827505a5c87e8aa285dc31e9ec7f4a17c81a813d45f70b1d9164e03a813a686"},
-    {file = "pydantic_core-2.20.1-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:19c0fa39fa154e7e0b7f82f88ef85faa2a4c23cc65aae2f5aea625e3c13c735a"},
-    {file = "pydantic_core-2.20.1-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:4aa223cd1e36b642092c326d694d8bf59b71ddddc94cdb752bbbb1c5c91d833b"},
-    {file = "pydantic_core-2.20.1-cp313-cp313-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:c336a6d235522a62fef872c6295a42ecb0c4e1d0f1a3e500fe949415761b8a19"},
-    {file = "pydantic_core-2.20.1-cp313-cp313-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:7eb6a0587eded33aeefea9f916899d42b1799b7b14b8f8ff2753c0ac1741edac"},
-    {file = "pydantic_core-2.20.1-cp313-cp313-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:70c8daf4faca8da5a6d655f9af86faf6ec2e1768f4b8b9d0226c02f3d6209703"},
-    {file = "pydantic_core-2.20.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:e9fa4c9bf273ca41f940bceb86922a7667cd5bf90e95dbb157cbb8441008482c"},
-    {file = "pydantic_core-2.20.1-cp313-cp313-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:11b71d67b4725e7e2a9f6e9c0ac1239bbc0c48cce3dc59f98635efc57d6dac83"},
-    {file = "pydantic_core-2.20.1-cp313-cp313-musllinux_1_1_aarch64.whl", hash = "sha256:270755f15174fb983890c49881e93f8f1b80f0b5e3a3cc1394a255706cabd203"},
-    {file = "pydantic_core-2.20.1-cp313-cp313-musllinux_1_1_x86_64.whl", hash = "sha256:c81131869240e3e568916ef4c307f8b99583efaa60a8112ef27a366eefba8ef0"},
-    {file = "pydantic_core-2.20.1-cp313-none-win32.whl", hash = "sha256:b91ced227c41aa29c672814f50dbb05ec93536abf8f43cd14ec9521ea09afe4e"},
-    {file = "pydantic_core-2.20.1-cp313-none-win_amd64.whl", hash = "sha256:65db0f2eefcaad1a3950f498aabb4875c8890438bc80b19362cf633b87a8ab20"},
-    {file = "pydantic_core-2.20.1-cp38-cp38-macosx_10_12_x86_64.whl", hash = "sha256:4745f4ac52cc6686390c40eaa01d48b18997cb130833154801a442323cc78f91"},
-    {file = "pydantic_core-2.20.1-cp38-cp38-macosx_11_0_arm64.whl", hash = "sha256:a8ad4c766d3f33ba8fd692f9aa297c9058970530a32c728a2c4bfd2616d3358b"},
-    {file = "pydantic_core-2.20.1-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:41e81317dd6a0127cabce83c0c9c3fbecceae981c8391e6f1dec88a77c8a569a"},
-    {file = "pydantic_core-2.20.1-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:04024d270cf63f586ad41fff13fde4311c4fc13ea74676962c876d9577bcc78f"},
-    {file = "pydantic_core-2.20.1-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:eaad4ff2de1c3823fddf82f41121bdf453d922e9a238642b1dedb33c4e4f98ad"},
-    {file = "pydantic_core-2.20.1-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:26ab812fa0c845df815e506be30337e2df27e88399b985d0bb4e3ecfe72df31c"},
-    {file = "pydantic_core-2.20.1-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:3c5ebac750d9d5f2706654c638c041635c385596caf68f81342011ddfa1e5598"},
-    {file = "pydantic_core-2.20.1-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:2aafc5a503855ea5885559eae883978c9b6d8c8993d67766ee73d82e841300dd"},
-    {file = "pydantic_core-2.20.1-cp38-cp38-musllinux_1_1_aarch64.whl", hash = "sha256:4868f6bd7c9d98904b748a2653031fc9c2f85b6237009d475b1008bfaeb0a5aa"},
-    {file = "pydantic_core-2.20.1-cp38-cp38-musllinux_1_1_x86_64.whl", hash = "sha256:aa2f457b4af386254372dfa78a2eda2563680d982422641a85f271c859df1987"},
-    {file = "pydantic_core-2.20.1-cp38-none-win32.whl", hash = "sha256:225b67a1f6d602de0ce7f6c1c3ae89a4aa25d3de9be857999e9124f15dab486a"},
-    {file = "pydantic_core-2.20.1-cp38-none-win_amd64.whl", hash = "sha256:6b507132dcfc0dea440cce23ee2182c0ce7aba7054576efc65634f080dbe9434"},
-    {file = "pydantic_core-2.20.1-cp39-cp39-macosx_10_12_x86_64.whl", hash = "sha256:b03f7941783b4c4a26051846dea594628b38f6940a2fdc0df00b221aed39314c"},
-    {file = "pydantic_core-2.20.1-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:1eedfeb6089ed3fad42e81a67755846ad4dcc14d73698c120a82e4ccf0f1f9f6"},
-    {file = "pydantic_core-2.20.1-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:635fee4e041ab9c479e31edda27fcf966ea9614fff1317e280d99eb3e5ab6fe2"},
-    {file = "pydantic_core-2.20.1-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:77bf3ac639c1ff567ae3b47f8d4cc3dc20f9966a2a6dd2311dcc055d3d04fb8a"},
-    {file = "pydantic_core-2.20.1-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:7ed1b0132f24beeec5a78b67d9388656d03e6a7c837394f99257e2d55b461611"},
-    {file = "pydantic_core-2.20.1-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:c6514f963b023aeee506678a1cf821fe31159b925c4b76fe2afa94cc70b3222b"},
-    {file = "pydantic_core-2.20.1-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:10d4204d8ca33146e761c79f83cc861df20e7ae9f6487ca290a97702daf56006"},
-    {file = "pydantic_core-2.20.1-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:2d036c7187b9422ae5b262badb87a20a49eb6c5238b2004e96d4da1231badef1"},
-    {file = "pydantic_core-2.20.1-cp39-cp39-musllinux_1_1_aarch64.whl", hash = "sha256:9ebfef07dbe1d93efb94b4700f2d278494e9162565a54f124c404a5656d7ff09"},
-    {file = "pydantic_core-2.20.1-cp39-cp39-musllinux_1_1_x86_64.whl", hash = "sha256:6b9d9bb600328a1ce523ab4f454859e9d439150abb0906c5a1983c146580ebab"},
-    {file = "pydantic_core-2.20.1-cp39-none-win32.whl", hash = "sha256:784c1214cb6dd1e3b15dd8b91b9a53852aed16671cc3fbe4786f4f1db07089e2"},
-    {file = "pydantic_core-2.20.1-cp39-none-win_amd64.whl", hash = "sha256:d2fe69c5434391727efa54b47a1e7986bb0186e72a41b203df8f5b0a19a4f669"},
-    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-macosx_10_12_x86_64.whl", hash = "sha256:a45f84b09ac9c3d35dfcf6a27fd0634d30d183205230a0ebe8373a0e8cfa0906"},
-    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-macosx_11_0_arm64.whl", hash = "sha256:d02a72df14dfdbaf228424573a07af10637bd490f0901cee872c4f434a735b94"},
-    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:d2b27e6af28f07e2f195552b37d7d66b150adbaa39a6d327766ffd695799780f"},
-    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:084659fac3c83fd674596612aeff6041a18402f1e1bc19ca39e417d554468482"},
-    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:242b8feb3c493ab78be289c034a1f659e8826e2233786e36f2893a950a719bb6"},
-    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-musllinux_1_1_aarch64.whl", hash = "sha256:38cf1c40a921d05c5edc61a785c0ddb4bed67827069f535d794ce6bcded919fc"},
-    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-musllinux_1_1_x86_64.whl", hash = "sha256:e0bbdd76ce9aa5d4209d65f2b27fc6e5ef1312ae6c5333c26db3f5ade53a1e99"},
-    {file = "pydantic_core-2.20.1-pp310-pypy310_pp73-win_amd64.whl", hash = "sha256:254ec27fdb5b1ee60684f91683be95e5133c994cc54e86a0b0963afa25c8f8a6"},
-    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-macosx_10_12_x86_64.whl", hash = "sha256:407653af5617f0757261ae249d3fba09504d7a71ab36ac057c938572d1bc9331"},
-    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-macosx_11_0_arm64.whl", hash = "sha256:c693e916709c2465b02ca0ad7b387c4f8423d1db7b4649c551f27a529181c5ad"},
-    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:5b5ff4911aea936a47d9376fd3ab17e970cc543d1b68921886e7f64bd28308d1"},
-    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:177f55a886d74f1808763976ac4efd29b7ed15c69f4d838bbd74d9d09cf6fa86"},
-    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:964faa8a861d2664f0c7ab0c181af0bea66098b1919439815ca8803ef136fc4e"},
-    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-musllinux_1_1_aarch64.whl", hash = "sha256:4dd484681c15e6b9a977c785a345d3e378d72678fd5f1f3c0509608da24f2ac0"},
-    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-musllinux_1_1_x86_64.whl", hash = "sha256:f6d6cff3538391e8486a431569b77921adfcdef14eb18fbf19b7c0a5294d4e6a"},
-    {file = "pydantic_core-2.20.1-pp39-pypy39_pp73-win_amd64.whl", hash = "sha256:a6d511cc297ff0883bc3708b465ff82d7560193169a8b93260f74ecb0a5e08a7"},
-    {file = "pydantic_core-2.20.1.tar.gz", hash = "sha256:26ca695eeee5f9f1aeeb211ffc12f10bcb6f71e2989988fda61dabd65db878d4"},
+    {file = "pydantic_core-2.20.0-cp310-cp310-macosx_10_12_x86_64.whl", hash = "sha256:e9dcd7fb34f7bfb239b5fa420033642fff0ad676b765559c3737b91f664d4fa9"},
+    {file = "pydantic_core-2.20.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:649a764d9b0da29816889424697b2a3746963ad36d3e0968784ceed6e40c6355"},
+    {file = "pydantic_core-2.20.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:7701df088d0b05f3460f7ba15aec81ac8b0fb5690367dfd072a6c38cf5b7fdb5"},
+    {file = "pydantic_core-2.20.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:ab760f17c3e792225cdaef31ca23c0aea45c14ce80d8eff62503f86a5ab76bff"},
+    {file = "pydantic_core-2.20.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:cb1ad5b4d73cde784cf64580166568074f5ccd2548d765e690546cff3d80937d"},
+    {file = "pydantic_core-2.20.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:b81ec2efc04fc1dbf400647d4357d64fb25543bae38d2d19787d69360aad21c9"},
+    {file = "pydantic_core-2.20.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:c4a9732a5cad764ba37f3aa873dccb41b584f69c347a57323eda0930deec8e10"},
+    {file = "pydantic_core-2.20.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:6dc85b9e10cc21d9c1055f15684f76fa4facadddcb6cd63abab702eb93c98943"},
+    {file = "pydantic_core-2.20.0-cp310-cp310-musllinux_1_1_aarch64.whl", hash = "sha256:21d9f7e24f63fdc7118e6cc49defaab8c1d27570782f7e5256169d77498cf7c7"},
+    {file = "pydantic_core-2.20.0-cp310-cp310-musllinux_1_1_x86_64.whl", hash = "sha256:8b315685832ab9287e6124b5d74fc12dda31e6421d7f6b08525791452844bc2d"},
+    {file = "pydantic_core-2.20.0-cp310-none-win32.whl", hash = "sha256:c3dc8ec8b87c7ad534c75b8855168a08a7036fdb9deeeed5705ba9410721c84d"},
+    {file = "pydantic_core-2.20.0-cp310-none-win_amd64.whl", hash = "sha256:85770b4b37bb36ef93a6122601795231225641003e0318d23c6233c59b424279"},
+    {file = "pydantic_core-2.20.0-cp311-cp311-macosx_10_12_x86_64.whl", hash = "sha256:58e251bb5a5998f7226dc90b0b753eeffa720bd66664eba51927c2a7a2d5f32c"},
+    {file = "pydantic_core-2.20.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:78d584caac52c24240ef9ecd75de64c760bbd0e20dbf6973631815e3ef16ef8b"},
+    {file = "pydantic_core-2.20.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:5084ec9721f82bef5ff7c4d1ee65e1626783abb585f8c0993833490b63fe1792"},
+    {file = "pydantic_core-2.20.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:6d0f52684868db7c218437d260e14d37948b094493f2646f22d3dda7229bbe3f"},
+    {file = "pydantic_core-2.20.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:1def125d59a87fe451212a72ab9ed34c118ff771e5473fef4f2f95d8ede26d75"},
+    {file = "pydantic_core-2.20.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:b34480fd6778ab356abf1e9086a4ced95002a1e195e8d2fd182b0def9d944d11"},
+    {file = "pydantic_core-2.20.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:d42669d319db366cb567c3b444f43caa7ffb779bf9530692c6f244fc635a41eb"},
+    {file = "pydantic_core-2.20.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:53b06aea7a48919a254b32107647be9128c066aaa6ee6d5d08222325f25ef175"},
+    {file = "pydantic_core-2.20.0-cp311-cp311-musllinux_1_1_aarch64.whl", hash = "sha256:1f038156b696a1c39d763b2080aeefa87ddb4162c10aa9fabfefffc3dd8180fa"},
+    {file = "pydantic_core-2.20.0-cp311-cp311-musllinux_1_1_x86_64.whl", hash = "sha256:3f0f3a4a23717280a5ee3ac4fb1f81d6fde604c9ec5100f7f6f987716bb8c137"},
+    {file = "pydantic_core-2.20.0-cp311-none-win32.whl", hash = "sha256:316fe7c3fec017affd916a0c83d6f1ec697cbbbdf1124769fa73328e7907cc2e"},
+    {file = "pydantic_core-2.20.0-cp311-none-win_amd64.whl", hash = "sha256:2d06a7fa437f93782e3f32d739c3ec189f82fca74336c08255f9e20cea1ed378"},
+    {file = "pydantic_core-2.20.0-cp312-cp312-macosx_10_12_x86_64.whl", hash = "sha256:d6f8c49657f3eb7720ed4c9b26624063da14937fc94d1812f1e04a2204db3e17"},
+    {file = "pydantic_core-2.20.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:ad1bd2f377f56fec11d5cfd0977c30061cd19f4fa199bf138b200ec0d5e27eeb"},
+    {file = "pydantic_core-2.20.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:ed741183719a5271f97d93bbcc45ed64619fa38068aaa6e90027d1d17e30dc8d"},
+    {file = "pydantic_core-2.20.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:d82e5ed3a05f2dcb89c6ead2fd0dbff7ac09bc02c1b4028ece2d3a3854d049ce"},
+    {file = "pydantic_core-2.20.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:b2ba34a099576234671f2e4274e5bc6813b22e28778c216d680eabd0db3f7dad"},
+    {file = "pydantic_core-2.20.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:879ae6bb08a063b3e1b7ac8c860096d8fd6b48dd9b2690b7f2738b8c835e744b"},
+    {file = "pydantic_core-2.20.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:0b0eefc7633a04c0694340aad91fbfd1986fe1a1e0c63a22793ba40a18fcbdc8"},
+    {file = "pydantic_core-2.20.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:73deadd6fd8a23e2f40b412b3ac617a112143c8989a4fe265050fd91ba5c0608"},
+    {file = "pydantic_core-2.20.0-cp312-cp312-musllinux_1_1_aarch64.whl", hash = "sha256:35681445dc85446fb105943d81ae7569aa7e89de80d1ca4ac3229e05c311bdb1"},
+    {file = "pydantic_core-2.20.0-cp312-cp312-musllinux_1_1_x86_64.whl", hash = "sha256:0f6dd3612a3b9f91f2e63924ea18a4476656c6d01843ca20a4c09e00422195af"},
+    {file = "pydantic_core-2.20.0-cp312-none-win32.whl", hash = "sha256:7e37b6bb6e90c2b8412b06373c6978d9d81e7199a40e24a6ef480e8acdeaf918"},
+    {file = "pydantic_core-2.20.0-cp312-none-win_amd64.whl", hash = "sha256:7d4df13d1c55e84351fab51383520b84f490740a9f1fec905362aa64590b7a5d"},
+    {file = "pydantic_core-2.20.0-cp313-cp313-macosx_10_12_x86_64.whl", hash = "sha256:d43e7ab3b65e4dc35a7612cfff7b0fd62dce5bc11a7cd198310b57f39847fd6c"},
+    {file = "pydantic_core-2.20.0-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:7b6a24d7b5893392f2b8e3b7a0031ae3b14c6c1942a4615f0d8794fdeeefb08b"},
+    {file = "pydantic_core-2.20.0-cp313-cp313-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:b2f13c3e955a087c3ec86f97661d9f72a76e221281b2262956af381224cfc243"},
+    {file = "pydantic_core-2.20.0-cp313-cp313-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:72432fd6e868c8d0a6849869e004b8bcae233a3c56383954c228316694920b38"},
+    {file = "pydantic_core-2.20.0-cp313-cp313-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:d70a8ff2d4953afb4cbe6211f17268ad29c0b47e73d3372f40e7775904bc28fc"},
+    {file = "pydantic_core-2.20.0-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:8e49524917b8d3c2f42cd0d2df61178e08e50f5f029f9af1f402b3ee64574392"},
+    {file = "pydantic_core-2.20.0-cp313-cp313-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:a4f0f71653b1c1bad0350bc0b4cc057ab87b438ff18fa6392533811ebd01439c"},
+    {file = "pydantic_core-2.20.0-cp313-cp313-musllinux_1_1_aarch64.whl", hash = "sha256:16197e6f4fdecb9892ed2436e507e44f0a1aa2cff3b9306d1c879ea2f9200997"},
+    {file = "pydantic_core-2.20.0-cp313-cp313-musllinux_1_1_x86_64.whl", hash = "sha256:763602504bf640b3ded3bba3f8ed8a1cc2fc6a87b8d55c1c5689f428c49c947e"},
+    {file = "pydantic_core-2.20.0-cp313-none-win32.whl", hash = "sha256:a3f243f318bd9523277fa123b3163f4c005a3e8619d4b867064de02f287a564d"},
+    {file = "pydantic_core-2.20.0-cp313-none-win_amd64.whl", hash = "sha256:03aceaf6a5adaad3bec2233edc5a7905026553916615888e53154807e404545c"},
+    {file = "pydantic_core-2.20.0-cp38-cp38-macosx_10_12_x86_64.whl", hash = "sha256:d6f2d8b8da1f03f577243b07bbdd3412eee3d37d1f2fd71d1513cbc76a8c1239"},
+    {file = "pydantic_core-2.20.0-cp38-cp38-macosx_11_0_arm64.whl", hash = "sha256:a272785a226869416c6b3c1b7e450506152d3844207331f02f27173562c917e0"},
+    {file = "pydantic_core-2.20.0-cp38-cp38-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:efbb412d55a4ffe73963fed95c09ccb83647ec63b711c4b3752be10a56f0090b"},
+    {file = "pydantic_core-2.20.0-cp38-cp38-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:1e4f46189d8740561b43655263a41aac75ff0388febcb2c9ec4f1b60a0ec12f3"},
+    {file = "pydantic_core-2.20.0-cp38-cp38-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:87d3df115f4a3c8c5e4d5acf067d399c6466d7e604fc9ee9acbe6f0c88a0c3cf"},
+    {file = "pydantic_core-2.20.0-cp38-cp38-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:a340d2bdebe819d08f605e9705ed551c3feb97e4fd71822d7147c1e4bdbb9508"},
+    {file = "pydantic_core-2.20.0-cp38-cp38-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:616b9c2f882393d422ba11b40e72382fe975e806ad693095e9a3b67c59ea6150"},
+    {file = "pydantic_core-2.20.0-cp38-cp38-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:25c46bb2ff6084859bbcfdf4f1a63004b98e88b6d04053e8bf324e115398e9e7"},
+    {file = "pydantic_core-2.20.0-cp38-cp38-musllinux_1_1_aarch64.whl", hash = "sha256:23425eccef8f2c342f78d3a238c824623836c6c874d93c726673dbf7e56c78c0"},
+    {file = "pydantic_core-2.20.0-cp38-cp38-musllinux_1_1_x86_64.whl", hash = "sha256:52527e8f223ba29608d999d65b204676398009725007c9336651c2ec2d93cffc"},
+    {file = "pydantic_core-2.20.0-cp38-none-win32.whl", hash = "sha256:1c3c5b7f70dd19a6845292b0775295ea81c61540f68671ae06bfe4421b3222c2"},
+    {file = "pydantic_core-2.20.0-cp38-none-win_amd64.whl", hash = "sha256:8093473d7b9e908af1cef30025609afc8f5fd2a16ff07f97440fd911421e4432"},
+    {file = "pydantic_core-2.20.0-cp39-cp39-macosx_10_12_x86_64.whl", hash = "sha256:ee7785938e407418795e4399b2bf5b5f3cf6cf728077a7f26973220d58d885cf"},
+    {file = "pydantic_core-2.20.0-cp39-cp39-macosx_11_0_arm64.whl", hash = "sha256:0e75794883d635071cf6b4ed2a5d7a1e50672ab7a051454c76446ef1ebcdcc91"},
+    {file = "pydantic_core-2.20.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:344e352c96e53b4f56b53d24728217c69399b8129c16789f70236083c6ceb2ac"},
+    {file = "pydantic_core-2.20.0-cp39-cp39-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:978d4123ad1e605daf1ba5e01d4f235bcf7b6e340ef07e7122e8e9cfe3eb61ab"},
+    {file = "pydantic_core-2.20.0-cp39-cp39-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:3c05eaf6c863781eb834ab41f5963604ab92855822a2062897958089d1335dad"},
+    {file = "pydantic_core-2.20.0-cp39-cp39-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:bc7e43b4a528ffca8c9151b6a2ca34482c2fdc05e6aa24a84b7f475c896fc51d"},
+    {file = "pydantic_core-2.20.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:658287a29351166510ebbe0a75c373600cc4367a3d9337b964dada8d38bcc0f4"},
+    {file = "pydantic_core-2.20.0-cp39-cp39-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:1dacf660d6de692fe351e8c806e7efccf09ee5184865893afbe8e59be4920b4a"},
+    {file = "pydantic_core-2.20.0-cp39-cp39-musllinux_1_1_aarch64.whl", hash = "sha256:3e147fc6e27b9a487320d78515c5f29798b539179f7777018cedf51b7749e4f4"},
+    {file = "pydantic_core-2.20.0-cp39-cp39-musllinux_1_1_x86_64.whl", hash = "sha256:c867230d715a3dd1d962c8d9bef0d3168994ed663e21bf748b6e3a529a129aab"},
+    {file = "pydantic_core-2.20.0-cp39-none-win32.whl", hash = "sha256:22b813baf0dbf612752d8143a2dbf8e33ccb850656b7850e009bad2e101fc377"},
+    {file = "pydantic_core-2.20.0-cp39-none-win_amd64.whl", hash = "sha256:3a7235b46c1bbe201f09b6f0f5e6c36b16bad3d0532a10493742f91fbdc8035f"},
+    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-macosx_10_12_x86_64.whl", hash = "sha256:cafde15a6f7feaec2f570646e2ffc5b73412295d29134a29067e70740ec6ee20"},
+    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-macosx_11_0_arm64.whl", hash = "sha256:2aec8eeea0b08fd6bc2213d8e86811a07491849fd3d79955b62d83e32fa2ad5f"},
+    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:840200827984f1c4e114008abc2f5ede362d6e11ed0b5931681884dd41852ff1"},
+    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:f8ea1d8b7df522e5ced34993c423c3bf3735c53df8b2a15688a2f03a7d678800"},
+    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:d5b8376a867047bf08910573deb95d3c8dfb976eb014ee24f3b5a61ccc5bee1b"},
+    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-musllinux_1_1_aarch64.whl", hash = "sha256:d08264b4460326cefacc179fc1411304d5af388a79910832835e6f641512358b"},
+    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-musllinux_1_1_x86_64.whl", hash = "sha256:7a3639011c2e8a9628466f616ed7fb413f30032b891898e10895a0a8b5857d6c"},
+    {file = "pydantic_core-2.20.0-pp310-pypy310_pp73-win_amd64.whl", hash = "sha256:05e83ce2f7eba29e627dd8066aa6c4c0269b2d4f889c0eba157233a353053cea"},
+    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-macosx_10_12_x86_64.whl", hash = "sha256:603a843fea76a595c8f661cd4da4d2281dff1e38c4a836a928eac1a2f8fe88e4"},
+    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-macosx_11_0_arm64.whl", hash = "sha256:ac76f30d5d3454f4c28826d891fe74d25121a346c69523c9810ebba43f3b1cec"},
+    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:22e3b1d4b1b3f6082849f9b28427ef147a5b46a6132a3dbaf9ca1baa40c88609"},
+    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:2761f71faed820e25ec62eacba670d1b5c2709bb131a19fcdbfbb09884593e5a"},
+    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:a0586cddbf4380e24569b8a05f234e7305717cc8323f50114dfb2051fcbce2a3"},
+    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-musllinux_1_1_aarch64.whl", hash = "sha256:b8c46a8cf53e849eea7090f331ae2202cd0f1ceb090b00f5902c423bd1e11805"},
+    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-musllinux_1_1_x86_64.whl", hash = "sha256:b4a085bd04af7245e140d1b95619fe8abb445a3d7fdf219b3f80c940853268ef"},
+    {file = "pydantic_core-2.20.0-pp39-pypy39_pp73-win_amd64.whl", hash = "sha256:116b326ac82c8b315e7348390f6d30bcfe6e688a7d3f1de50ff7bcc2042a23c2"},
+    {file = "pydantic_core-2.20.0.tar.gz", hash = "sha256:366be8e64e0cb63d87cf79b4e1765c0703dd6313c729b22e7b9e378db6b96877"},
 ]

 [package.dependencies]
@ -4148,29 +4076,29 @@ pyasn1 = ">=0.1.3"

 [[package]]
 name = "ruff"
-version = "0.5.1"
+version = "0.5.0"
 description = "An extremely fast Python linter and code formatter, written in Rust."
 optional = false
 python-versions = ">=3.7"
 files = [
-    {file = "ruff-0.5.1-py3-none-linux_armv6l.whl", hash = "sha256:6ecf968fcf94d942d42b700af18ede94b07521bd188aaf2cd7bc898dd8cb63b6"},
-    {file = "ruff-0.5.1-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:204fb0a472f00f2e6280a7c8c7c066e11e20e23a37557d63045bf27a616ba61c"},
-    {file = "ruff-0.5.1-py3-none-macosx_11_0_arm64.whl", hash = "sha256:d235968460e8758d1e1297e1de59a38d94102f60cafb4d5382033c324404ee9d"},
-    {file = "ruff-0.5.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:38beace10b8d5f9b6bdc91619310af6d63dd2019f3fb2d17a2da26360d7962fa"},
-    {file = "ruff-0.5.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:5e478d2f09cf06add143cf8c4540ef77b6599191e0c50ed976582f06e588c994"},
-    {file = "ruff-0.5.1-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:f0368d765eec8247b8550251c49ebb20554cc4e812f383ff9f5bf0d5d94190b0"},
-    {file = "ruff-0.5.1-py3-none-manylinux_2_17_ppc64.manylinux2014_ppc64.whl", hash = "sha256:3a9a9a1b582e37669b0138b7c1d9d60b9edac880b80eb2baba6d0e566bdeca4d"},
-    {file = "ruff-0.5.1-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:bdd9f723e16003623423affabcc0a807a66552ee6a29f90eddad87a40c750b78"},
-    {file = "ruff-0.5.1-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:be9fd62c1e99539da05fcdc1e90d20f74aec1b7a1613463ed77870057cd6bd96"},
-    {file = "ruff-0.5.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:e216fc75a80ea1fbd96af94a6233d90190d5b65cc3d5dfacf2bd48c3e067d3e1"},
-    {file = "ruff-0.5.1-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:c4c2112e9883a40967827d5c24803525145e7dab315497fae149764979ac7929"},
-    {file = "ruff-0.5.1-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:dfaf11c8a116394da3b65cd4b36de30d8552fa45b8119b9ef5ca6638ab964fa3"},
-    {file = "ruff-0.5.1-py3-none-musllinux_1_2_i686.whl", hash = "sha256:d7ceb9b2fe700ee09a0c6b192c5ef03c56eb82a0514218d8ff700f6ade004108"},
-    {file = "ruff-0.5.1-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:bac6288e82f6296f82ed5285f597713acb2a6ae26618ffc6b429c597b392535c"},
-    {file = "ruff-0.5.1-py3-none-win32.whl", hash = "sha256:5c441d9c24ec09e1cb190a04535c5379b36b73c4bc20aa180c54812c27d1cca4"},
-    {file = "ruff-0.5.1-py3-none-win_amd64.whl", hash = "sha256:b1789bf2cd3d1b5a7d38397cac1398ddf3ad7f73f4de01b1e913e2abc7dfc51d"},
-    {file = "ruff-0.5.1-py3-none-win_arm64.whl", hash = "sha256:2875b7596a740cbbd492f32d24be73e545a4ce0a3daf51e4f4e609962bfd3cd2"},
-    {file = "ruff-0.5.1.tar.gz", hash = "sha256:3164488aebd89b1745b47fd00604fb4358d774465f20d1fcd907f9c0fc1b0655"},
+    {file = "ruff-0.5.0-py3-none-linux_armv6l.whl", hash = "sha256:ee770ea8ab38918f34e7560a597cc0a8c9a193aaa01bfbd879ef43cb06bd9c4c"},
+    {file = "ruff-0.5.0-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:38f3b8327b3cb43474559d435f5fa65dacf723351c159ed0dc567f7ab735d1b6"},
+    {file = "ruff-0.5.0-py3-none-macosx_11_0_arm64.whl", hash = "sha256:7594f8df5404a5c5c8f64b8311169879f6cf42142da644c7e0ba3c3f14130370"},
+    {file = "ruff-0.5.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:adc7012d6ec85032bc4e9065110df205752d64010bed5f958d25dbee9ce35de3"},
+    {file = "ruff-0.5.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:d505fb93b0fabef974b168d9b27c3960714d2ecda24b6ffa6a87ac432905ea38"},
+    {file = "ruff-0.5.0-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:9dc5cfd3558f14513ed0d5b70ce531e28ea81a8a3b1b07f0f48421a3d9e7d80a"},
+    {file = "ruff-0.5.0-py3-none-manylinux_2_17_ppc64.manylinux2014_ppc64.whl", hash = "sha256:db3ca35265de239a1176d56a464b51557fce41095c37d6c406e658cf80bbb362"},
+    {file = "ruff-0.5.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:b1a321c4f68809fddd9b282fab6a8d8db796b270fff44722589a8b946925a2a8"},
+    {file = "ruff-0.5.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:2c4dfcd8d34b143916994b3876b63d53f56724c03f8c1a33a253b7b1e6bf2a7d"},
+    {file = "ruff-0.5.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:81e5facfc9f4a674c6a78c64d38becfbd5e4f739c31fcd9ce44c849f1fad9e4c"},
+    {file = "ruff-0.5.0-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:e589e27971c2a3efff3fadafb16e5aef7ff93250f0134ec4b52052b673cf988d"},
+    {file = "ruff-0.5.0-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:d2ffbc3715a52b037bcb0f6ff524a9367f642cdc5817944f6af5479bbb2eb50e"},
+    {file = "ruff-0.5.0-py3-none-musllinux_1_2_i686.whl", hash = "sha256:cd096e23c6a4f9c819525a437fa0a99d1c67a1b6bb30948d46f33afbc53596cf"},
+    {file = "ruff-0.5.0-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:46e193b36f2255729ad34a49c9a997d506e58f08555366b2108783b3064a0e1e"},
+    {file = "ruff-0.5.0-py3-none-win32.whl", hash = "sha256:49141d267100f5ceff541b4e06552e98527870eafa1acc9dec9139c9ec5af64c"},
+    {file = "ruff-0.5.0-py3-none-win_amd64.whl", hash = "sha256:e9118f60091047444c1b90952736ee7b1792910cab56e9b9a9ac20af94cd0440"},
+    {file = "ruff-0.5.0-py3-none-win_arm64.whl", hash = "sha256:ed5c4df5c1fb4518abcb57725b576659542bdbe93366f4f329e8f398c4b71178"},
+    {file = "ruff-0.5.0.tar.gz", hash = "sha256:eb641b5873492cf9bd45bc9c5ae5320648218e04386a5f0c264ad6ccce8226a1"},
 ]

 [[package]]
@ -5449,4 +5377,4 @@ files = [
 [metadata]
 lock-version = "2.0"
 python-versions = "~3.12"
-content-hash = "484d2f95c5c725b76ade4455d4416be3ad6d29b1721a9367a775ecc442c7cc4b"
+content-hash = "f960013b56683ab42d82f8b49b2822dffc76046e3d22695ebb737b405a98dbaf"
--- a/pyproject.toml
+++ b/pyproject.toml
@ -32,7 +32,7 @@ select = [
    "PL",
 ]
 ignore = [
-    "DJ001", # Avoid using `null=True` on string-based fields,
+    "DJ001" # Avoid using `null=True` on string-based fields,
 ]
 [tool.ruff.lint.pylint]
 max-args = 7
@ -103,11 +103,10 @@ django-prometheus = "*"
 django-redis = "*"
 django-storages = { extras = ["s3"], version = "*" }
 # See https://github.com/django-tenants/django-tenants/pull/997
-django-tenants = { git = "https://github.com/rissson/django-tenants.git", branch = "authentik-fixes" }
+django-tenants = { git = "https://github.com/rissson/django-tenants.git", branch="authentik-fixes" }
 djangorestframework = "3.14.0"
 djangorestframework-guardian = "*"
 docker = "*"
-drf-orjson-renderer = "*"
 drf-spectacular = "*"
 dumb-init = "*"
 duo-client = "*"
--- a/schema.yml
+++ b/schema.yml
@ -2682,6 +2682,10 @@ paths:
        name: name
        schema:
          type: string
+      - in: query
+        name: only_with_launch_url
+        schema:
+          type: boolean
      - name: ordering
        required: false
        in: query
@ -36634,7 +36638,6 @@ components:
        href:
          type: string
          readOnly: true
-          nullable: true
        name:
          type: string
          readOnly: true
@ -39498,9 +39501,6 @@ components:
          allOf:
          - $ref: '#/components/schemas/ServiceConnection'
          readOnly: true
-        refresh_interval_s:
-          type: integer
-          readOnly: true
        token_identifier:
          type: string
          description: Get Token identifier
@ -39522,7 +39522,6 @@ components:
      - pk
      - providers
      - providers_obj
-      - refresh_interval_s
      - service_connection_obj
      - token_identifier
      - type
--- a/tests/e2e/test_source_oauth_oauth2.py
+++ b/tests/e2e/test_source_oauth_oauth2.py
@ -1,6 +1,5 @@
 """test OAuth Source"""

-from json import loads
 from pathlib import Path
 from time import sleep
 from typing import Any
@ -195,41 +194,3 @@ class TestSourceOAuth2(SeleniumTestCase):
        self.driver.get(self.if_user_url("/settings"))

        self.assert_user(User(username="foo", name="admin", email="admin@example.com"))
-
-    @retry()
-    @apply_blueprint(
-        "default/flow-default-authentication-flow.yaml",
-        "default/flow-default-invalidation-flow.yaml",
-    )
-    @apply_blueprint(
-        "default/flow-default-source-authentication.yaml",
-        "default/flow-default-source-enrollment.yaml",
-        "default/flow-default-source-pre-authentication.yaml",
-    )
-    def test_oauth_link(self):
-        """test OAuth Source link OIDC"""
-        self.create_objects()
-        self.driver.get(self.live_server_url)
-        self.login()
-
-        self.driver.get(
-            self.url("authentik_sources_oauth:oauth-client-login", source_slug=self.slug)
-        )
-
-        # Now we should be at the IDP, wait for the login field
-        self.wait.until(ec.presence_of_element_located((By.ID, "login")))
-        self.driver.find_element(By.ID, "login").send_keys("admin@example.com")
-        self.driver.find_element(By.ID, "password").send_keys("password")
-        self.driver.find_element(By.ID, "password").send_keys(Keys.ENTER)
-
-        # Wait until we're logged in
-        self.wait.until(ec.presence_of_element_located((By.CSS_SELECTOR, "button[type=submit]")))
-        self.driver.find_element(By.CSS_SELECTOR, "button[type=submit]").click()
-
-        self.driver.get(self.url("authentik_api:usersourceconnection-list") + "?format=json")
-        body_json = loads(self.driver.find_element(By.CSS_SELECTOR, "pre").text)
-        results = body_json["results"]
-        self.assertEqual(len(results), 1)
-        connection = results[0]
-        self.assertEqual(connection["source"]["slug"], self.slug)
-        self.assertEqual(connection["user"], self.user.pk)
--- a/tests/wdio/package-lock.json
+++ b/tests/wdio/package-lock.json
@ -12,8 +12,8 @@
                "@trivago/prettier-plugin-sort-imports": "^4.3.0",
                "@typescript-eslint/eslint-plugin": "^7.5.0",
                "@typescript-eslint/parser": "^7.5.0",
-                "@wdio/cli": "^8.39.1",
-                "@wdio/local-runner": "^8.39.1",
+                "@wdio/cli": "^8.39.0",
+                "@wdio/local-runner": "^8.39.0",
                "@wdio/mocha-framework": "^8.39.0",
                "@wdio/spec-reporter": "^8.39.0",
                "eslint": "^8.57.0",
@ -1189,15 +1189,15 @@
            }
        },
        "node_modules/@wdio/cli": {
-            "version": "8.39.1",
-            "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-8.39.1.tgz",
-            "integrity": "sha512-CUze/nbOMzgSEp+Qo27dnM5IhlOPAiBJCPX3xO85/kjweqqxmAB1QBKww1Mz9YlNIXineaHrkgqlUQIvEqOJdQ==",
+            "version": "8.39.0",
+            "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-8.39.0.tgz",
+            "integrity": "sha512-kAd+8TYjJWRN6gZaRGiSu6Yj3k4+ULRt2NWAgNtGhnr0/Rwlr3j9bjAIhXGL574VqrH+rSnrevDdeGuLcZa1xg==",
            "dev": true,
            "dependencies": {
                "@types/node": "^20.1.1",
                "@vitest/snapshot": "^1.2.1",
                "@wdio/config": "8.39.0",
-                "@wdio/globals": "8.39.1",
+                "@wdio/globals": "8.39.0",
                "@wdio/logger": "8.38.0",
                "@wdio/protocols": "8.38.0",
                "@wdio/types": "8.39.0",
@ -1216,7 +1216,7 @@
                "lodash.union": "^4.6.0",
                "read-pkg-up": "10.0.0",
                "recursive-readdir": "^2.2.3",
-                "webdriverio": "8.39.1",
+                "webdriverio": "8.39.0",
                "yargs": "^17.7.2"
            },
            "bin": {
@ -1257,28 +1257,28 @@
            }
        },
        "node_modules/@wdio/globals": {
-            "version": "8.39.1",
-            "resolved": "https://registry.npmjs.org/@wdio/globals/-/globals-8.39.1.tgz",
-            "integrity": "sha512-kNb1TlxI8Le/tsOiw7CMQcG0+ZGyxk9ZDO/PQLxkJvjo/q2QmiBcgaNMPuf+j1ABETcQK4bI7QtiT5uZ+f2AGA==",
+            "version": "8.39.0",
+            "resolved": "https://registry.npmjs.org/@wdio/globals/-/globals-8.39.0.tgz",
+            "integrity": "sha512-qZo6JjRCIOtdvba6fdSqj6b91TnWXD6rmamyud93FTqbcspnhBvr8lmgOs5wnslTKeeTTigCjpsT310b4/AyHA==",
            "dev": true,
            "engines": {
                "node": "^16.13 || >=18"
            },
            "optionalDependencies": {
                "expect-webdriverio": "^4.11.2",
-                "webdriverio": "8.39.1"
+                "webdriverio": "8.39.0"
            }
        },
        "node_modules/@wdio/local-runner": {
-            "version": "8.39.1",
-            "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-8.39.1.tgz",
-            "integrity": "sha512-VYRD7pSkl5JTsYXroM65yb+vJVn9pFJf0XZMB7Xj+WVUqGXuVkZ+XybsQetUlhruXvHIsPdiFj12V1tMyaUHrQ==",
+            "version": "8.39.0",
+            "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-8.39.0.tgz",
+            "integrity": "sha512-TSGJVVWqshH7IO13OKw7G/364q3FczZDEh4h6bYe+GAs91KpZrEhZanyALgjh5F3crWtlffX+GA2HUwpi8X0sA==",
            "dev": true,
            "dependencies": {
                "@types/node": "^20.1.0",
                "@wdio/logger": "8.38.0",
                "@wdio/repl": "8.24.12",
-                "@wdio/runner": "8.39.1",
+                "@wdio/runner": "8.39.0",
                "@wdio/types": "8.39.0",
                "async-exit-hook": "^2.0.1",
                "split2": "^4.1.0",
@ -1367,14 +1367,14 @@
            }
        },
        "node_modules/@wdio/runner": {
-            "version": "8.39.1",
-            "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-8.39.1.tgz",
-            "integrity": "sha512-hCGI+TSAyb14UtdDjswI5AAdW1CZMi6di+rDZ6ml43hQyHc6sw+74CXI8dwoJ29dcTzbg7QCJZZXV1qMn0kh2w==",
+            "version": "8.39.0",
+            "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-8.39.0.tgz",
+            "integrity": "sha512-M1ixrrCtuwxHVzwsOKGMWBZCteafV0ztoS9+evMWGQtj0ZEsmhjAhWR3n2nZftt24vWOs+eNLGe2p+IO9Sm9bA==",
            "dev": true,
            "dependencies": {
                "@types/node": "^20.11.28",
                "@wdio/config": "8.39.0",
-                "@wdio/globals": "8.39.1",
+                "@wdio/globals": "8.39.0",
                "@wdio/logger": "8.38.0",
                "@wdio/types": "8.39.0",
                "@wdio/utils": "8.39.0",
@ -1382,7 +1382,7 @@
                "expect-webdriverio": "^4.12.0",
                "gaze": "^1.1.3",
                "webdriver": "8.39.0",
-                "webdriverio": "8.39.1"
+                "webdriverio": "8.39.0"
            },
            "engines": {
                "node": "^16.13 || >=18"
@ -8991,9 +8991,9 @@
            }
        },
        "node_modules/webdriverio": {
-            "version": "8.39.1",
-            "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-8.39.1.tgz",
-            "integrity": "sha512-dPwLgLNtP+l4vnybz+YFxxH8nBKOP7j6VVzKtfDyTLDQg9rz3U8OA4xMMQCBucnrVXy3KcKxGqlnMa+c4IfWCQ==",
+            "version": "8.39.0",
+            "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-8.39.0.tgz",
+            "integrity": "sha512-pDpGu0V+TL1LkXPode67m3s+IPto4TcmcOzMpzFgu2oeLMBornoLN3yQSFR1fjZd1gK4UfnG3lJ4poTGOfbWfw==",
            "dev": true,
            "dependencies": {
                "@types/node": "^20.1.0",
--- a/tests/wdio/package.json
+++ b/tests/wdio/package.json
@ -6,8 +6,8 @@
        "@trivago/prettier-plugin-sort-imports": "^4.3.0",
        "@typescript-eslint/eslint-plugin": "^7.5.0",
        "@typescript-eslint/parser": "^7.5.0",
-        "@wdio/cli": "^8.39.1",
-        "@wdio/local-runner": "^8.39.1",
+        "@wdio/cli": "^8.39.0",
+        "@wdio/local-runner": "^8.39.0",
        "@wdio/mocha-framework": "^8.39.0",
        "@wdio/spec-reporter": "^8.39.0",
        "eslint": "^8.57.0",
--- a/web/package-lock.json
+++ b/web/package-lock.json
--- a/web/package.json
+++ b/web/package.json
@ -43,7 +43,7 @@
        "@codemirror/theme-one-dark": "^6.1.2",
        "@formatjs/intl-listformat": "^7.5.7",
        "@fortawesome/fontawesome-free": "^6.5.2",
-        "@goauthentik/api": "^2024.6.0-1720200294",
+        "@goauthentik/api": "^2024.6.0-1720022184",
        "@lit/context": "^1.1.2",
        "@lit/localize": "^0.12.1",
        "@lit/reactive-element": "^2.0.4",
@ -51,7 +51,7 @@
        "@open-wc/lit-helpers": "^0.7.0",
        "@patternfly/elements": "^3.0.2",
        "@patternfly/patternfly": "^4.224.2",
-        "@sentry/browser": "^8.15.0",
+        "@sentry/browser": "^8.13.0",
        "@webcomponents/webcomponentsjs": "^2.8.0",
        "base64-js": "^1.5.1",
        "chart.js": "^4.4.3",
@ -65,7 +65,6 @@
        "lit": "^3.1.4",
        "md-front-matter": "^1.0.4",
        "mermaid": "^10.9.1",
-        "oidc-client-ts": "^2.4.0",
        "rapidoc": "^9.3.4",
        "showdown": "^2.1.0",
        "style-mod": "^4.1.2",
@ -102,8 +101,8 @@
        "@types/showdown": "^2.0.6",
        "@typescript-eslint/eslint-plugin": "^7.14.0",
        "@typescript-eslint/parser": "^7.14.0",
-        "@wdio/browser-runner": "^8.39.1",
-        "@wdio/cli": "^8.39.1",
+        "@wdio/browser-runner": "^8.36.1",
+        "@wdio/cli": "^8.36.1",
        "@wdio/mocha-framework": "^8.36.1",
        "@wdio/spec-reporter": "^8.36.1",
        "babel-plugin-macros": "^3.1.0",
@ -118,7 +117,7 @@
        "eslint-plugin-sonarjs": "^0.25.1",
        "eslint-plugin-storybook": "^0.8.0",
        "github-slugger": "^2.0.0",
-        "glob": "^10.4.3",
+        "glob": "^10.4.2",
        "lit-analyzer": "^2.0.3",
        "lockfile-lint": "^4.14.0",
        "npm-run-all": "^4.1.5",
--- a/web/sfe/index.ts
+++ b/web/sfe/index.ts
@ -1,529 +0,0 @@
-import { fromByteArray } from "base64-js";
-import "formdata-polyfill";
-import $ from "jquery";
-import "weakmap-polyfill";
-
-import {
-    type AuthenticatorValidationChallenge,
-    type AutosubmitChallenge,
-    type ChallengeTypes,
-    ChallengeTypesFromJSON,
-    type ContextualFlowInfo,
-    type DeviceChallenge,
-    type ErrorDetail,
-    type IdentificationChallenge,
-    type PasswordChallenge,
-    type RedirectChallenge,
-} from "@goauthentik/api";
-
-interface GlobalAuthentik {
-    brand: {
-        branding_logo: string;
-    };
-}
-
-function ak(): GlobalAuthentik {
-    return (
-        window as unknown as {
-            authentik: GlobalAuthentik;
-        }
-    ).authentik;
-}
-
-class SimpleFlowExecutor {
-    challenge?: ChallengeTypes;
-    flowSlug: string;
-    container: HTMLDivElement;
-
-    constructor(container: HTMLDivElement) {
-        this.flowSlug = window.location.pathname.split("/")[3];
-        this.container = container;
-    }
-
-    get apiURL() {
-        return `/api/v3/flows/executor/${this.flowSlug}/?query=${encodeURIComponent(window.location.search.substring(1))}`;
-    }
-
-    start() {
-        $.ajax({
-            type: "GET",
-            url: this.apiURL,
-            success: (data) => {
-                this.challenge = ChallengeTypesFromJSON(data);
-                this.renderChallenge();
-            },
-        });
-    }
-
-    submit(data: { [key: string]: unknown } | FormData) {
-        $("button[type=submit]").addClass("disabled")
-            .html(`<span class="spinner-border spinner-border-sm" aria-hidden="true"></span>
-                <span role="status">Loading...</span>`);
-        let finalData: { [key: string]: unknown } = {};
-        if (data instanceof FormData) {
-            finalData = {};
-            data.forEach((value, key) => {
-                finalData[key] = value;
-            });
-        } else {
-            finalData = data;
-        }
-        $.ajax({
-            type: "POST",
-            url: this.apiURL,
-            data: JSON.stringify(finalData),
-            success: (data) => {
-                this.challenge = ChallengeTypesFromJSON(data);
-                this.renderChallenge();
-            },
-            contentType: "application/json",
-            dataType: "json",
-        });
-    }
-
-    renderChallenge() {
-        switch (this.challenge?.component) {
-            case "ak-stage-identification":
-                new IdentificationStage(this, this.challenge).render();
-                return;
-            case "ak-stage-password":
-                new PasswordStage(this, this.challenge).render();
-                return;
-            case "xak-flow-redirect":
-                new RedirectStage(this, this.challenge).render();
-                return;
-            case "ak-stage-autosubmit":
-                new AutosubmitStage(this, this.challenge).render();
-                return;
-            case "ak-stage-authenticator-validate":
-                new AuthenticatorValidateStage(this, this.challenge).render();
-                return;
-            default:
-                this.container.innerText = "Unsupported stage: " + this.challenge?.component;
-                return;
-        }
-    }
-}
-
-export interface FlowInfoChallenge {
-    flowInfo?: ContextualFlowInfo;
-    responseErrors?: {
-        [key: string]: Array<ErrorDetail>;
-    };
-}
-
-class Stage<T extends FlowInfoChallenge> {
-    constructor(
-        public executor: SimpleFlowExecutor,
-        public challenge: T,
-    ) {}
-
-    error(fieldName: string) {
-        if (!this.challenge.responseErrors) {
-            return [];
-        }
-        return this.challenge.responseErrors[fieldName] || [];
-    }
-
-    renderInputError(fieldName: string) {
-        return `${this.error(fieldName)
-            .map((error) => {
-                return `<div class="invalid-feedback">
-                    ${error.string}
-                </div>`;
-            })
-            .join("")}`;
-    }
-
-    renderNonFieldErrors() {
-        return `${this.error("non_field_errors")
-            .map((error) => {
-                return `<div class="alert alert-danger" role="alert">
-                    ${error.string}
-                </div>`;
-            })
-            .join("")}`;
-    }
-
-    html(html: string) {
-        this.executor.container.innerHTML = html;
-    }
-
-    render() {
-        throw new Error("Abstract method");
-    }
-}
-
-class IdentificationStage extends Stage<IdentificationChallenge> {
-    render() {
-        this.html(`
-            <form id="ident-form">
-                <img class="mb-4 brand-icon" src="${ak().brand.branding_logo}" alt="">
-                <h1 class="h3 mb-3 fw-normal text-center">${this.challenge?.flowInfo?.title}</h1>
-                ${
-                    this.challenge.applicationPre
-                        ? `<p>
-                              Login to continue to ${this.challenge.applicationPre}.
-                          </p>`
-                        : ""
-                }
-                <div class="form-label-group my-3 has-validation">
-                    <input type="text" autofocus class="form-control" name="uid_field" placeholder="Email / Username">
-                </div>
-                ${
-                    this.challenge.passwordFields
-                        ? `<div class="form-label-group my-3 has-validation">
-                                <input type="password" class="form-control ${this.error("password").length > 0 ? "is-invalid" : ""}" name="password" placeholder="Password">
-                                ${this.renderInputError("password")}
-                        </div>`
-                        : ""
-                }
-                ${this.renderNonFieldErrors()}
-                <button class="btn btn-primary w-100 py-2" type="submit">${this.challenge.primaryAction}</button>
-            </form>`);
-        $("#ident-form input[name=uid_field]").trigger("focus");
-        $("#ident-form").on("submit", (ev) => {
-            ev.preventDefault();
-            const data = new FormData(ev.target as HTMLFormElement);
-            this.executor.submit(data);
-        });
-    }
-}
-
-class PasswordStage extends Stage<PasswordChallenge> {
-    render() {
-        this.html(`
-            <form id="password-form">
-                <img class="mb-4 brand-icon" src="${ak().brand.branding_logo}" alt="">
-                <h1 class="h3 mb-3 fw-normal text-center">${this.challenge?.flowInfo?.title}</h1>
-                <div class="form-label-group my-3 has-validation">
-                    <input type="password" autofocus class="form-control ${this.error("password").length > 0 ? "is-invalid" : ""}" name="password" placeholder="Password">
-                    ${this.renderInputError("password")}
-                </div>
-                <button class="btn btn-primary w-100 py-2" type="submit">Continue</button>
-            </form>`);
-        $("#password-form input").trigger("focus");
-        $("#password-form").on("submit", (ev) => {
-            ev.preventDefault();
-            const data = new FormData(ev.target as HTMLFormElement);
-            this.executor.submit(data);
-        });
-    }
-}
-
-class RedirectStage extends Stage<RedirectChallenge> {
-    render() {
-        window.location.assign(this.challenge.to);
-    }
-}
-
-class AutosubmitStage extends Stage<AutosubmitChallenge> {
-    render() {
-        this.html(`
-            <form id="autosubmit-form" action="${this.challenge.url}" method="POST">
-                <img class="mb-4 brand-icon" src="${ak().brand.branding_logo}" alt="">
-                <h1 class="h3 mb-3 fw-normal text-center">${this.challenge?.flowInfo?.title}</h1>
-                ${Object.entries(this.challenge.attrs).map(([key, value]) => {
-                    return `<input
-                            type="hidden"
-                            name="${key}"
-                            value="${value}"
-                        />`;
-                })}
-                <div class="d-flex justify-content-center">
-                    <div class="spinner-border" role="status">
-                        <span class="sr-only">Loading...</span>
-                    </div>
-                </div>
-            </form>`);
-        $("#autosubmit-form").submit();
-    }
-}
-
-export interface Assertion {
-    id: string;
-    rawId: string;
-    type: string;
-    registrationClientExtensions: string;
-    response: {
-        clientDataJSON: string;
-        attestationObject: string;
-    };
-}
-
-export interface AuthAssertion {
-    id: string;
-    rawId: string;
-    type: string;
-    assertionClientExtensions: string;
-    response: {
-        clientDataJSON: string;
-        authenticatorData: string;
-        signature: string;
-        userHandle: string | null;
-    };
-}
-
-class AuthenticatorValidateStage extends Stage<AuthenticatorValidationChallenge> {
-    deviceChallenge?: DeviceChallenge;
-
-    b64enc(buf: Uint8Array): string {
-        return fromByteArray(buf).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
-    }
-
-    b64RawEnc(buf: Uint8Array): string {
-        return fromByteArray(buf).replace(/\+/g, "-").replace(/\//g, "_");
-    }
-
-    u8arr(input: string): Uint8Array {
-        return Uint8Array.from(atob(input.replace(/_/g, "/").replace(/-/g, "+")), (c) =>
-            c.charCodeAt(0),
-        );
-    }
-
-    checkWebAuthnSupport(): boolean {
-        if ("credentials" in navigator) {
-            return true;
-        }
-        if (window.location.protocol === "http:" && window.location.hostname !== "localhost") {
-            console.warn("WebAuthn requires this page to be accessed via HTTPS.");
-            return false;
-        }
-        console.warn("WebAuthn not supported by browser.");
-        return false;
-    }
-
-    /**
-     * Transforms items in the credentialCreateOptions generated on the server
-     * into byte arrays expected by the navigator.credentials.create() call
-     */
-    transformCredentialCreateOptions(
-        credentialCreateOptions: PublicKeyCredentialCreationOptions,
-        userId: string,
-    ): PublicKeyCredentialCreationOptions {
-        const user = credentialCreateOptions.user;
-        // Because json can't contain raw bytes, the server base64-encodes the User ID
-        // So to get the base64 encoded byte array, we first need to convert it to a regular
-        // string, then a byte array, re-encode it and wrap that in an array.
-        const stringId = decodeURIComponent(window.atob(userId));
-        user.id = this.u8arr(this.b64enc(this.u8arr(stringId)));
-        const challenge = this.u8arr(credentialCreateOptions.challenge.toString());
-
-        const transformedCredentialCreateOptions = Object.assign({}, credentialCreateOptions, {
-            challenge,
-            user,
-        });
-
-        return transformedCredentialCreateOptions;
-    }
-
-    /**
-     * Transforms the binary data in the credential into base64 strings
-     * for posting to the server.
-     * @param {PublicKeyCredential} newAssertion
-     */
-    transformNewAssertionForServer(newAssertion: PublicKeyCredential): Assertion {
-        const attObj = new Uint8Array(
-            (newAssertion.response as AuthenticatorAttestationResponse).attestationObject,
-        );
-        const clientDataJSON = new Uint8Array(newAssertion.response.clientDataJSON);
-        const rawId = new Uint8Array(newAssertion.rawId);
-
-        const registrationClientExtensions = newAssertion.getClientExtensionResults();
-        return {
-            id: newAssertion.id,
-            rawId: this.b64enc(rawId),
-            type: newAssertion.type,
-            registrationClientExtensions: JSON.stringify(registrationClientExtensions),
-            response: {
-                clientDataJSON: this.b64enc(clientDataJSON),
-                attestationObject: this.b64enc(attObj),
-            },
-        };
-    }
-
-    transformCredentialRequestOptions(
-        credentialRequestOptions: PublicKeyCredentialRequestOptions,
-    ): PublicKeyCredentialRequestOptions {
-        const challenge = this.u8arr(credentialRequestOptions.challenge.toString());
-
-        const allowCredentials = (credentialRequestOptions.allowCredentials || []).map(
-            (credentialDescriptor) => {
-                const id = this.u8arr(credentialDescriptor.id.toString());
-                return Object.assign({}, credentialDescriptor, { id });
-            },
-        );
-
-        const transformedCredentialRequestOptions = Object.assign({}, credentialRequestOptions, {
-            challenge,
-            allowCredentials,
-        });
-
-        return transformedCredentialRequestOptions;
-    }
-
-    /**
-     * Encodes the binary data in the assertion into strings for posting to the server.
-     * @param {PublicKeyCredential} newAssertion
-     */
-    transformAssertionForServer(newAssertion: PublicKeyCredential): AuthAssertion {
-        const response = newAssertion.response as AuthenticatorAssertionResponse;
-        const authData = new Uint8Array(response.authenticatorData);
-        const clientDataJSON = new Uint8Array(response.clientDataJSON);
-        const rawId = new Uint8Array(newAssertion.rawId);
-        const sig = new Uint8Array(response.signature);
-        const assertionClientExtensions = newAssertion.getClientExtensionResults();
-
-        return {
-            id: newAssertion.id,
-            rawId: this.b64enc(rawId),
-            type: newAssertion.type,
-            assertionClientExtensions: JSON.stringify(assertionClientExtensions),
-
-            response: {
-                clientDataJSON: this.b64RawEnc(clientDataJSON),
-                signature: this.b64RawEnc(sig),
-                authenticatorData: this.b64RawEnc(authData),
-                userHandle: null,
-            },
-        };
-    }
-
-    render() {
-        if (!this.deviceChallenge) {
-            return this.renderChallengePicker();
-        }
-        switch (this.deviceChallenge.deviceClass) {
-            case "static":
-            case "totp":
-                this.renderCodeInput();
-                break;
-            case "webauthn":
-                this.renderWebauthn();
-                break;
-            default:
-                break;
-        }
-    }
-
-    renderChallengePicker() {
-        const challenges = this.challenge.deviceChallenges.filter((challenge) => {
-            if (challenge.deviceClass === "webauthn") {
-                if (!this.checkWebAuthnSupport()) {
-                    return undefined;
-                }
-            }
-            return challenge;
-        });
-        this.html(`<form id="picker-form">
-                <img class="mb-4 brand-icon" src="${ak().brand.branding_logo}" alt="">
-                <h1 class="h3 mb-3 fw-normal text-center">${this.challenge?.flowInfo?.title}</h1>
-                ${
-                    challenges.length > 0
-                        ? "<p>Select an authentication method.</p>"
-                        : `
-                    <p>No compatible authentication method available</p>
-                    `
-                }
-                ${challenges
-                    .map((challenge) => {
-                        let label = undefined;
-                        switch (challenge.deviceClass) {
-                            case "static":
-                                label = "Recovery keys";
-                                break;
-                            case "totp":
-                                label = "Traditional authenticator";
-                                break;
-                            case "webauthn":
-                                label = "Security key";
-                                break;
-                        }
-                        if (!label) {
-                            return "";
-                        }
-                        return `<div class="form-label-group my-3 has-validation">
-                            <button id="${challenge.deviceClass}-${challenge.deviceUid}" class="btn btn-secondary w-100 py-2" type="button">
-                                ${label}
-                            </button>
-                        </div>`;
-                    })
-                    .join("")}
-            </form>`);
-        this.challenge.deviceChallenges.forEach((challenge) => {
-            $(`#picker-form button#${challenge.deviceClass}-${challenge.deviceUid}`).on(
-                "click",
-                () => {
-                    this.deviceChallenge = challenge;
-                    this.render();
-                },
-            );
-        });
-    }
-
-    renderCodeInput() {
-        this.html(`
-            <form id="totp-form">
-                <img class="mb-4 brand-icon" src="${ak().brand.branding_logo}" alt="">
-                <h1 class="h3 mb-3 fw-normal text-center">${this.challenge?.flowInfo?.title}</h1>
-                <div class="form-label-group my-3 has-validation">
-                    <input type="text" autofocus class="form-control ${this.error("code").length > 0 ? "is-invalid" : ""}" name="code" placeholder="Please enter your code" autocomplete="one-time-code">
-                    ${this.renderInputError("code")}
-                </div>
-                <button class="btn btn-primary w-100 py-2" type="submit">Continue</button>
-            </form>`);
-        $("#totp-form input").trigger("focus");
-        $("#totp-form").on("submit", (ev) => {
-            ev.preventDefault();
-            const data = new FormData(ev.target as HTMLFormElement);
-            this.executor.submit(data);
-        });
-    }
-
-    renderWebauthn() {
-        this.html(`
-            <form id="totp-form">
-                <img class="mb-4 brand-icon" src="${ak().brand.branding_logo}" alt="">
-                <h1 class="h3 mb-3 fw-normal text-center">${this.challenge?.flowInfo?.title}</h1>
-                <div class="d-flex justify-content-center">
-                    <div class="spinner-border" role="status">
-                        <span class="sr-only">Loading...</span>
-                    </div>
-                </div>
-            </form>
-            `);
-        navigator.credentials
-            .get({
-                publicKey: this.transformCredentialRequestOptions(
-                    this.deviceChallenge?.challenge as PublicKeyCredentialRequestOptions,
-                ),
-            })
-            .then((assertion) => {
-                if (!assertion) {
-                    throw new Error("No assertion");
-                }
-                try {
-                    // we now have an authentication assertion! encode the byte arrays contained
-                    // in the assertion data as strings for posting to the server
-                    const transformedAssertionForServer = this.transformAssertionForServer(
-                        assertion as PublicKeyCredential,
-                    );
-
-                    // post the assertion to the server for verification.
-                    this.executor.submit({
-                        webauthn: transformedAssertionForServer,
-                    });
-                } catch (err) {
-                    throw new Error(`Error when validating assertion on server: ${err}`);
-                }
-            })
-            .catch((error) => {
-                console.warn(error);
-                this.deviceChallenge = undefined;
-                this.render();
-            });
-    }
-}
-
-const sfe = new SimpleFlowExecutor($("#flow-sfe-container")[0] as HTMLDivElement);
-sfe.start();
--- a/web/sfe/package-lock.json
+++ b/web/sfe/package-lock.json
--- a/web/sfe/package.json
+++ b/web/sfe/package.json
@ -1,28 +0,0 @@
-{
-    "name": "@goauthentik/web-sfe",
-    "version": "0.0.0",
-    "private": true,
-    "license": "MIT",
-    "dependencies": {
-        "@goauthentik/api": "^2024.6.0-1719577139",
-        "base64-js": "^1.5.1",
-        "bootstrap": "^4.6.1",
-        "formdata-polyfill": "^4.0.10",
-        "jquery": "^3.7.1",
-        "weakmap-polyfill": "^2.0.4"
-    },
-    "scripts": {
-        "build": "rollup -c rollup.config.js --bundleConfigAsCjs",
-        "watch": "rollup -w -c rollup.config.js --bundleConfigAsCjs"
-    },
-    "devDependencies": {
-        "@rollup/plugin-commonjs": "^26.0.1",
-        "@rollup/plugin-node-resolve": "^15.2.3",
-        "@rollup/plugin-swc": "^0.3.1",
-        "@swc/cli": "^0.4.0",
-        "@swc/core": "^1.6.13",
-        "@types/jquery": "^3.5.30",
-        "rollup": "^4.18.0",
-        "rollup-plugin-copy": "^3.5.0"
-    }
-}
--- a/web/sfe/rollup.config.js
+++ b/web/sfe/rollup.config.js
@ -1,40 +0,0 @@
-import commonjs from "@rollup/plugin-commonjs";
-import resolve from "@rollup/plugin-node-resolve";
-import swc from "@rollup/plugin-swc";
-import copy from "rollup-plugin-copy";
-
-export default {
-    input: "index.ts",
-    output: {
-        dir: "../dist/sfe",
-        format: "cjs",
-    },
-    context: "window",
-    plugins: [
-        copy({
-            targets: [
-                { src: "node_modules/bootstrap/dist/css/bootstrap.min.css", dest: "../dist/sfe" },
-            ],
-        }),
-        resolve({ browser: true }),
-        commonjs(),
-        swc({
-            swc: {
-                jsc: {
-                    loose: false,
-                    externalHelpers: false,
-                    // Requires v1.2.50 or upper and requires target to be es2016 or upper.
-                    keepClassNames: false,
-                },
-                minify: false,
-                env: {
-                    targets: {
-                        edge: "17",
-                        ie: "11",
-                    },
-                    mode: "entry",
-                },
-            },
-        }),
-    ],
-};
--- a/web/sfe/tsconfig.json
+++ b/web/sfe/tsconfig.json
@ -1,7 +0,0 @@
-{
-    "compilerOptions": {
-        "types": ["jquery"],
-        "esModuleInterop": true,
-        "lib": ["DOM", "ES2015", "ES2017"]
-    },
-}
--- a/web/src/admin/AdminInterface/AdminInterface.ts
+++ b/web/src/admin/AdminInterface/AdminInterface.ts
@ -4,12 +4,9 @@ import {
    EVENT_API_DRAWER_TOGGLE,
    EVENT_NOTIFICATION_DRAWER_TOGGLE,
 } from "@goauthentik/common/constants";
-import { WithOAuth } from "@goauthentik/common/oauth/interface";
 import { configureSentry } from "@goauthentik/common/sentry";
 import { me } from "@goauthentik/common/users";
 import { WebsocketClient } from "@goauthentik/common/ws";
-import { OAuthLoginController } from "@goauthentik/components/oauth/controller";
-import { adminSettings } from "@goauthentik/components/oauth/settings";
 import { EnterpriseAwareInterface } from "@goauthentik/elements/Interface";
 import "@goauthentik/elements/ak-locale-context";
 import "@goauthentik/elements/enterprise/EnterpriseStatusBanner";
@ -36,7 +33,7 @@ import { AdminApi, SessionUser, UiThemeEnum, Version } from "@goauthentik/api";
 import "./AdminSidebar";

@customElement("ak-interface-admin")
-export class AdminInterface extends WithOAuth(EnterpriseAwareInterface, adminSettings) {
+export class AdminInterface extends EnterpriseAwareInterface {
    @property({ type: Boolean })
    notificationDrawerOpen = getURLParam("notificationDrawerOpen", false);

@ -51,8 +48,6 @@ export class AdminInterface extends WithOAuth(EnterpriseAwareInterface, adminSet
    @state()
    user?: SessionUser;

-    oauthController: OAuthLoginController;
-
    static get styles(): CSSResult[] {
        return [
            PFBase,
@ -83,7 +78,6 @@ export class AdminInterface extends WithOAuth(EnterpriseAwareInterface, adminSet
    constructor() {
        super();
        this.ws = new WebsocketClient();
-        this.oauthController = new OAuthLoginController(this, adminSettings);
        window.addEventListener(EVENT_NOTIFICATION_DRAWER_TOGGLE, () => {
            this.notificationDrawerOpen = !this.notificationDrawerOpen;
            updateURLParams({
@ -98,8 +92,7 @@ export class AdminInterface extends WithOAuth(EnterpriseAwareInterface, adminSet
        });
    }

-    async firstUpdated(_changedProperties: Map<PropertyKey, unknown>): Promise<void> {
-        super.firstUpdated(_changedProperties);
+    async firstUpdated(): Promise<void> {
        configureSentry(true);
        this.version = await new AdminApi(DEFAULT_CONFIG).adminVersionRetrieve();
        this.user = await me();
--- a/web/src/admin/Routes.ts
+++ b/web/src/admin/Routes.ts
@ -1,7 +1,4 @@
 import "@goauthentik/admin/admin-overview/AdminOverviewPage";
-import "@goauthentik/components/oauth/callback";
-import { adminSettings } from "@goauthentik/components/oauth/settings";
-import "@goauthentik/components/oauth/signout";
 import { ID_REGEX, Route, SLUG_REGEX, UUID_REGEX } from "@goauthentik/elements/router/Route";

 import { html } from "lit";
@ -11,15 +8,6 @@ export const ROUTES: Route[] = [
    new Route(new RegExp("^/$")).redirect("/administration/overview"),
    new Route(new RegExp("^#.*")).redirect("/administration/overview"),
    new Route(new RegExp("^/library$")).redirect("/if/user/", true),
-    new Route(new RegExp("^/oauth-callback/(?<rest>.*)$"), async (args) => {
-        return html`<ak-oauth-callback
-            .settings=${adminSettings}
-            params=${args.rest}
-        ></ak-oauth-callback>`;
-    }),
-    new Route(new RegExp("^/oauth-signout$"), async () => {
-        return html`<ak-oauth-signout .settings=${adminSettings}></ak-oauth-signout>`;
-    }),
    // statically imported since this is the default route
    new Route(new RegExp("^/administration/overview$"), async () => {
        return html`<ak-admin-overview></ak-admin-overview>`;
--- a/web/src/common/api/config.ts
+++ b/web/src/common/api/config.ts
@ -5,7 +5,6 @@ import {
 } from "@goauthentik/common/api/middleware";
 import { EVENT_LOCALE_REQUEST, VERSION } from "@goauthentik/common/constants";
 import { globalAK } from "@goauthentik/common/global";
-import { TokenMiddleware } from "@goauthentik/common/oauth-middleware.js";

 import { Config, Configuration, CoreApi, CurrentBrand, RootApi } from "@goauthentik/api";

@ -74,7 +73,6 @@ export const DEFAULT_CONFIG = new Configuration({
        "sentry-trace": getMetaContent("sentry-trace"),
    },
    middleware: [
-        new TokenMiddleware(),
        new CSRFMiddleware(),
        new EventMiddleware(),
        new LoggingMiddleware(globalAK().brand),
--- a/web/src/common/oauth-middleware.ts
+++ b/web/src/common/oauth-middleware.ts
@ -1,15 +0,0 @@
-import { adminSettings } from "@goauthentik/components/oauth/settings";
-import { UserManager } from "oidc-client-ts";
-
-import { FetchParams, Middleware, RequestContext } from "@goauthentik/api";
-
-export class TokenMiddleware implements Middleware {
-    async pre?(context: RequestContext): Promise<FetchParams | void> {
-        const user = await new UserManager(adminSettings).getUser();
-        if (user !== null) {
-            // @ts-ignore
-            context.init.headers["Authorization"] = `Bearer ${user.access_token}`;
-        }
-        return Promise.resolve(context);
-    }
-}
--- a/web/src/common/oauth/callback.ts
+++ b/web/src/common/oauth/callback.ts
@ -1,24 +0,0 @@
-import { state } from "@goauthentik/common/oauth/constants";
-import { refreshMe } from "@goauthentik/common/users";
-import { User, UserManager, UserManagerSettings } from "oidc-client-ts";
-
-import { LitElement } from "lit";
-import { customElement, property } from "lit/decorators.js";
-
-@customElement("ak-oauth-callback")
-export class OAuthCallback extends LitElement {
-    @property()
-    params?: string;
-    @property({ attribute: false })
-    settings?: UserManagerSettings;
-    async firstUpdated(): Promise<void> {
-        if (!this.settings) {
-            return;
-        }
-        const client = new UserManager(this.settings);
-        const user = (await client.signinCallback(`#${this.params}`)) as User;
-        const st = user.state as state;
-        window.location.assign(st.url);
-        refreshMe();
-    }
-}
--- a/web/src/common/oauth/constants.ts
+++ b/web/src/common/oauth/constants.ts
@ -1,7 +0,0 @@
-export class state {
-    url: string;
-
-    constructor() {
-        this.url = window.location.href;
-    }
-}
--- a/web/src/common/oauth/interface.ts
+++ b/web/src/common/oauth/interface.ts
@ -1,34 +0,0 @@
-import { state } from "@goauthentik/common/oauth/constants";
-import { AbstractConstructor } from "@goauthentik/elements/types";
-import { UserManager, UserManagerSettings } from "oidc-client-ts";
-
-import type { LitElement } from "lit";
-
-export function WithOAuth<T extends AbstractConstructor<LitElement>>(
-    superclass: T,
-    settings: UserManagerSettings,
-) {
-    abstract class OAuthInterface extends superclass {
-        private async ensureLoggedIn() {
-            const client = new UserManager(settings);
-            const user = await client.getUser();
-            if (user !== null) {
-                return;
-            }
-            if (window.location.href.startsWith(settings.redirect_uri)) {
-                return;
-            }
-            const s = new state();
-            await client.signinRedirect({
-                state: s,
-            });
-        }
-
-        async firstUpdated(_changedProperties: Map<PropertyKey, unknown>): Promise<void> {
-            await this.ensureLoggedIn();
-            await super.firstUpdated(_changedProperties);
-        }
-    }
-
-    return OAuthInterface;
-}
--- a/web/src/common/oauth/middleware.ts
+++ b/web/src/common/oauth/middleware.ts
@ -1,15 +0,0 @@
-import { adminSettings } from "@goauthentik/common/oauth/settings";
-import { UserManager } from "oidc-client-ts";
-
-import { FetchParams, Middleware, RequestContext } from "@goauthentik/api";
-
-export class TokenMiddleware implements Middleware {
-    async pre?(context: RequestContext): Promise<FetchParams | void> {
-        const user = await new UserManager(adminSettings).getUser();
-        if (user !== null) {
-            // @ts-ignore
-            context.init.headers["Authorization"] = `Bearer ${user.access_token}`;
-        }
-        return Promise.resolve(context);
-    }
-}
--- a/web/src/common/oauth/settings.ts
+++ b/web/src/common/oauth/settings.ts
@ -1,25 +0,0 @@
-import { MemoryStore } from "@goauthentik/common/oauth/storage";
-import { Log, OidcClientSettings, UserManagerSettings } from "oidc-client-ts";
-
-Log.setLogger(console);
-Log.setLevel(Log.DEBUG);
-
-export const userSettings: OidcClientSettings & UserManagerSettings = {
-    authority: `${window.location.origin}/application/o/authentik-user-interface/`,
-    redirect_uri: `${window.location.origin}/if/user/#/oauth-callback/`,
-    client_id: "authentik-user-interface",
-    scope: "openid profile email goauthentik.io/api",
-    response_mode: "fragment",
-    automaticSilentRenew: true,
-    userStore: new MemoryStore(),
-};
-
-export const adminSettings: OidcClientSettings & UserManagerSettings = {
-    authority: `${window.location.origin}/application/o/authentik-admin-interface/`,
-    redirect_uri: `${window.location.origin}/if/admin/#/oauth-callback/`,
-    client_id: "authentik-admin-interface",
-    scope: "openid profile email goauthentik.io/api",
-    response_mode: "fragment",
-    automaticSilentRenew: true,
-    userStore: new MemoryStore(),
-};
--- a/web/src/common/oauth/signout.ts
+++ b/web/src/common/oauth/signout.ts
@ -1,17 +0,0 @@
-import { UserManager, UserManagerSettings } from "oidc-client-ts";
-
-import { LitElement } from "lit";
-import { customElement, property } from "lit/decorators.js";
-
-@customElement("ak-oauth-signout")
-export class OAuthSignout extends LitElement {
-    @property({ attribute: false })
-    settings?: UserManagerSettings;
-    async firstUpdated(): Promise<void> {
-        if (!this.settings) {
-            return;
-        }
-        const client = new UserManager(this.settings);
-        await client.signoutRedirect();
-    }
-}
--- a/web/src/common/oauth/storage.ts
+++ b/web/src/common/oauth/storage.ts
@ -1,20 +0,0 @@
-import { WebStorageStateStore } from "oidc-client-ts";
-
-export class MemoryStore extends WebStorageStateStore {
-    private map: Map<string, string> = new Map();
-    async set(key: string, value: string): Promise<void> {
-        this.map.set(key, value);
-    }
-    async get(key: string): Promise<string | null> {
-        const value = this.map.get(key);
-        return value ? value : null;
-    }
-    async remove(key: string): Promise<string | null> {
-        const value = await this.get(key);
-        this.map.delete(key);
-        return value;
-    }
-    async getAllKeys(): Promise<string[]> {
-        return Array.from(this.map.keys());
-    }
-}
--- a/web/src/common/users.ts
+++ b/web/src/common/users.ts
@ -1,7 +1,7 @@
 import { DEFAULT_CONFIG } from "@goauthentik/common/api/config";
 import { EVENT_LOCALE_REQUEST } from "@goauthentik/common/constants";

-import { CoreApi, SessionUser } from "@goauthentik/api";
+import { CoreApi, ResponseError, SessionUser } from "@goauthentik/api";

 let globalMePromise: Promise<SessionUser> | undefined;

@ -33,7 +33,7 @@ export function me(): Promise<SessionUser> {
                }
                return user;
            })
-            .catch(() => {
+            .catch((ex: ResponseError) => {
                const defaultUser: SessionUser = {
                    user: {
                        pk: -1,
@ -48,6 +48,14 @@ export function me(): Promise<SessionUser> {
                        systemPermissions: [],
                    },
                };
+                if (ex.response?.status === 401 || ex.response?.status === 403) {
+                    const relativeUrl = window.location
+                        .toString()
+                        .substring(window.location.origin.length);
+                    window.location.assign(
+                        `/flows/-/default/authentication/?next=${encodeURIComponent(relativeUrl)}`,
+                    );
+                }
                return defaultUser;
            });
    }
--- a/web/src/components/oauth/callback.ts
+++ b/web/src/components/oauth/callback.ts
@ -1,24 +0,0 @@
-import { refreshMe } from "@goauthentik/common/users";
-import { state } from "@goauthentik/components/oauth/constants";
-import { User, UserManager, UserManagerSettings } from "oidc-client-ts";
-
-import { LitElement } from "lit";
-import { customElement, property } from "lit/decorators.js";
-
-@customElement("ak-oauth-callback")
-export class OAuthCallback extends LitElement {
-    @property()
-    params?: string;
-    @property({ attribute: false })
-    settings?: UserManagerSettings;
-    async firstUpdated(): Promise<void> {
-        if (!this.settings) {
-            return;
-        }
-        const client = new UserManager(this.settings);
-        const user = (await client.signinCallback(`#${this.params}`)) as User;
-        const st = user.state as state;
-        window.location.assign(st.url);
-        refreshMe();
-    }
-}
--- a/web/src/components/oauth/constants.ts
+++ b/web/src/components/oauth/constants.ts
@ -1,7 +0,0 @@
-export class state {
-    url: string;
-
-    constructor() {
-        this.url = window.location.href;
-    }
-}
--- a/web/src/components/oauth/controller.ts
+++ b/web/src/components/oauth/controller.ts
@ -1,41 +0,0 @@
-import { state } from "@goauthentik/components/oauth/constants";
-import { Interface } from "@goauthentik/elements/Interface/index.js";
-import { UserManager, UserManagerSettings } from "oidc-client-ts";
-
-import { ReactiveController, ReactiveControllerHost } from "lit";
-
-type ReactiveInterfaceHost = Partial<ReactiveControllerHost> & Interface;
-
-export class OAuthLoginController implements ReactiveController {
-    checked = false;
-
-    constructor(
-        private host: ReactiveInterfaceHost,
-        private settings: UserManagerSettings,
-    ) {
-        this.host.addController(this);
-    }
-
-    hostUpdated() {
-        if (this.checked) {
-            return;
-        }
-        this.checked = true;
-        this.ensureLoggedIn();
-    }
-
-    private async ensureLoggedIn() {
-        const client = new UserManager(this.settings);
-        const user = await client.getUser();
-        if (user !== null) {
-            return;
-        }
-        if (window.location.href.startsWith(this.settings.redirect_uri)) {
-            return;
-        }
-        const s = new state();
-        await client.signinRedirect({
-            state: s,
-        });
-    }
-}
--- a/web/src/components/oauth/settings.ts
+++ b/web/src/components/oauth/settings.ts
@ -1,25 +0,0 @@
-import { MemoryStore } from "@goauthentik/components/oauth/storage";
-import { Log, OidcClientSettings, UserManagerSettings } from "oidc-client-ts";
-
-Log.setLogger(console);
-Log.setLevel(Log.DEBUG);
-
-export const userSettings: OidcClientSettings & UserManagerSettings = {
-    authority: `${window.location.origin}/application/o/authentik-user-interface/`,
-    redirect_uri: `${window.location.origin}/if/user/#/oauth-callback/`,
-    client_id: "authentik-user-interface",
-    scope: "openid profile email goauthentik.io/api",
-    response_mode: "fragment",
-    automaticSilentRenew: true,
-    userStore: new MemoryStore(),
-};
-
-export const adminSettings: OidcClientSettings & UserManagerSettings = {
-    authority: `${window.location.origin}/application/o/authentik-admin-interface/`,
-    redirect_uri: `${window.location.origin}/if/admin/#/oauth-callback/`,
-    client_id: "authentik-admin-interface",
-    scope: "openid profile email goauthentik.io/api",
-    response_mode: "fragment",
-    automaticSilentRenew: true,
-    userStore: new MemoryStore(),
-};
--- a/web/src/components/oauth/signout.ts
+++ b/web/src/components/oauth/signout.ts
@ -1,17 +0,0 @@
-import { UserManager, UserManagerSettings } from "oidc-client-ts";
-
-import { LitElement } from "lit";
-import { customElement, property } from "lit/decorators.js";
-
-@customElement("ak-oauth-signout")
-export class OAuthSignout extends LitElement {
-    @property({ attribute: false })
-    settings?: UserManagerSettings;
-    async firstUpdated(): Promise<void> {
-        if (!this.settings) {
-            return;
-        }
-        const client = new UserManager(this.settings);
-        await client.signoutRedirect();
-    }
-}
--- a/web/src/components/oauth/storage.ts
+++ b/web/src/components/oauth/storage.ts
@ -1,20 +0,0 @@
-import { WebStorageStateStore } from "oidc-client-ts";
-
-export class MemoryStore extends WebStorageStateStore {
-    private map: Map<string, string> = new Map();
-    async set(key: string, value: string): Promise<void> {
-        this.map.set(key, value);
-    }
-    async get(key: string): Promise<string | null> {
-        const value = this.map.get(key);
-        return value ? value : null;
-    }
-    async remove(key: string): Promise<string | null> {
-        const value = await this.get(key);
-        this.map.delete(key);
-        return value;
-    }
-    async getAllKeys(): Promise<string[]> {
-        return Array.from(this.map.keys());
-    }
-}
--- a/web/src/elements/sidebar/SidebarUser.ts
+++ b/web/src/elements/sidebar/SidebarUser.ts
@ -47,7 +47,7 @@ export class SidebarUser extends AKElement {
                    html``,
                )}
            </a>
-            <a href="#/oauth-signout" class="pf-c-nav__link user-logout" id="logout">
+            <a href="/flows/-/default/invalidation/" class="pf-c-nav__link user-logout" id="logout">
                <i class="fas fa-sign-out-alt" aria-hidden="true"></i>
            </a>
        `;
--- a/web/src/flow/FlowExecutor.ts
+++ b/web/src/flow/FlowExecutor.ts
@ -503,17 +503,19 @@ export class FlowExecutor extends Interface implements StageHost {
                                        <footer class="pf-c-login__footer">
                                            <ul class="pf-c-list pf-m-inline">
                                                ${this.brand?.uiFooterLinks?.map((link) => {
-                                                    if (link.href) {
-                                                        return html`<li>
-                                                            <a href="${link.href}">${link.name}</a>
-                                                        </li>`;
-                                                    }
                                                    return html`<li>
-                                                        <span>${link.name}</span>
+                                                        <a href="${link.href || ""}"
+                                                            >${link.name}</a
+                                                        >
                                                    </li>`;
                                                })}
                                                <li>
-                                                    <span>${msg("Powered by authentik")}</span>
+                                                    <a
+                                                        href="https://goauthentik.io?utm_source=authentik&amp;utm_medium=flow"
+                                                        target="_blank"
+                                                        rel="noopener noreferrer"
+                                                        >${msg("Powered by authentik")}</a
+                                                    >
                                                </li>
                                            </ul>
                                        </footer>
--- a/web/src/user/LibraryApplication/index.ts
+++ b/web/src/user/LibraryApplication/index.ts
@ -90,7 +90,7 @@ export class LibraryApplication extends AKElement {
        if (!this.application) {
            return html``;
        }
-        if (this.application?.launchUrl === "goauthentik.io://providers/rac/launch") {
+        if (this.application?.providerObj.component === "ak-provider-rac-form") {
            return html`<ak-library-rac-endpoint-launch .app=${this.application}>
                <a slot="trigger"> ${this.application.name} </a>
            </ak-library-rac-endpoint-launch>`;
--- a/web/src/user/LibraryPage/ak-library.ts
+++ b/web/src/user/LibraryPage/ak-library.ts
@ -70,6 +70,7 @@ export class LibraryPage extends AKElement {
            ordering: "name",
            page,
            pageSize: 100,
+            onlyWithLaunchUrl: true,
        });

        const applicationListFetch = await coreApi().coreApplicationsList(applicationListParams(1));
--- a/web/src/user/Routes.ts
+++ b/web/src/user/Routes.ts
@ -1,6 +1,3 @@
-import "@goauthentik/components/oauth/callback";
-import { userSettings } from "@goauthentik/components/oauth/settings";
-import "@goauthentik/components/oauth/signout";
 import { Route } from "@goauthentik/elements/router/Route";
 import "@goauthentik/user/LibraryPage/ak-library.js";

@ -10,15 +7,6 @@ export const ROUTES: Route[] = [
    // Prevent infinite Shell loops
    new Route(new RegExp("^/$")).redirect("/library"),
    new Route(new RegExp("^#.*")).redirect("/library"),
-    new Route(new RegExp("^/oauth-callback/(?<rest>.*)$"), async (args) => {
-        return html`<ak-oauth-callback
-            .settings=${userSettings}
-            params=${args.rest}
-        ></ak-oauth-callback>`;
-    }),
-    new Route(new RegExp("^/oauth-signout$"), async () => {
-        return html`<ak-oauth-signout .settings=${userSettings}></ak-oauth-signout>`;
-    }),
    new Route(new RegExp("^/library$"), async () => html`<ak-library></ak-library>`),
    new Route(new RegExp("^/settings$"), async () => {
        await import("@goauthentik/user/user-settings/UserSettingsPage");
--- a/web/src/user/UserInterface.ts
+++ b/web/src/user/UserInterface.ts
@ -4,18 +4,14 @@ import {
    EVENT_NOTIFICATION_DRAWER_TOGGLE,
    EVENT_WS_MESSAGE,
 } from "@goauthentik/common/constants";
-import { WithOAuth } from "@goauthentik/common/oauth/interface";
 import { configureSentry } from "@goauthentik/common/sentry";
 import { UIConfig, UserDisplay } from "@goauthentik/common/ui/config";
 import { me } from "@goauthentik/common/users";
 import { WebsocketClient } from "@goauthentik/common/ws";
-import { OAuthLoginController } from "@goauthentik/components/oauth/controller.js";
-import { userSettings } from "@goauthentik/components/oauth/settings";
 import { AKElement } from "@goauthentik/elements/Base";
 import { EnterpriseAwareInterface } from "@goauthentik/elements/Interface";
 import "@goauthentik/elements/ak-locale-context";
 import "@goauthentik/elements/buttons/ActionButton";
-import { bound } from "@goauthentik/elements/decorators/bound.js";
 import "@goauthentik/elements/enterprise/EnterpriseStatusBanner";
 import "@goauthentik/elements/messages/MessageContainer";
 import "@goauthentik/elements/notifications/APIDrawer";
@ -210,7 +206,10 @@ class UserInterfacePresentation extends AKElement {
                            <!-- -->
                            ${this.renderSettings()}
                            <div class="pf-c-page__header-tools-item">
-                                <a href="#/oauth-signout" class="pf-c-button pf-m-plain">
+                                <a
+                                    href="/flows/-/default/invalidation/"
+                                    class="pf-c-button pf-m-plain"
+                                >
                                    <pf-tooltip position="top" content=${msg("Sign out")}>
                                        <i class="fas fa-sign-out-alt" aria-hidden="true"></i>
                                    </pf-tooltip>
@ -385,7 +384,7 @@ class UserInterfacePresentation extends AKElement {
 //
 //
@customElement("ak-interface-user")
-export class UserInterface extends WithOAuth(EnterpriseAwareInterface, userSettings) {
+export class UserInterface extends EnterpriseAwareInterface {
    @property({ type: Boolean })
    notificationDrawerOpen = getURLParam("notificationDrawerOpen", false);

@ -400,14 +399,14 @@ export class UserInterface extends WithOAuth(EnterpriseAwareInterface, userSetti
    @state()
    me?: SessionUser;

-    oauthController: OAuthLoginController;
-
    constructor() {
        super();
        this.ws = new WebsocketClient();
        this.fetchConfigurationDetails();
        configureSentry(true);
-        this.oauthController = new OAuthLoginController(this, userSettings);
+        this.toggleNotificationDrawer = this.toggleNotificationDrawer.bind(this);
+        this.toggleApiDrawer = this.toggleApiDrawer.bind(this);
+        this.fetchConfigurationDetails = this.fetchConfigurationDetails.bind(this);
    }

    connectedCallback() {
@ -424,7 +423,6 @@ export class UserInterface extends WithOAuth(EnterpriseAwareInterface, userSetti
        super.disconnectedCallback();
    }

-    @bound
    toggleNotificationDrawer() {
        this.notificationDrawerOpen = !this.notificationDrawerOpen;
        updateURLParams({
@ -432,7 +430,6 @@ export class UserInterface extends WithOAuth(EnterpriseAwareInterface, userSetti
        });
    }

-    @bound
    toggleApiDrawer() {
        this.apiDrawerOpen = !this.apiDrawerOpen;
        updateURLParams({
@ -440,7 +437,6 @@ export class UserInterface extends WithOAuth(EnterpriseAwareInterface, userSetti
        });
    }

-    @bound
    fetchConfigurationDetails() {
        me().then((me: SessionUser) => {
            this.me = me;
--- a/web/xliff/zh-Hans.xlf
+++ b/web/xliff/zh-Hans.xlf
@ -8821,47 +8821,36 @@ Bindings to groups/users are checked against the user of the event.</source>
 </trans-unit>
 <trans-unit id="se166e95fe447ebcd">
  <source>Close dialog</source>
-  <target>关闭对话框</target>
 </trans-unit>
 <trans-unit id="s3dc14a4b8129f989">
  <source>Pagination</source>
-  <target>分页</target>
 </trans-unit>
 <trans-unit id="s6d46b842e227be57">
  <source>Application Details</source>
-  <target>应用程序详情</target>
 </trans-unit>
 <trans-unit id="s76415a60e548cafe">
  <source>Provider Configuration</source>
-  <target>提供程序配置</target>
 </trans-unit>
 <trans-unit id="sde59c64619570b57">
  <source>Submit Application</source>
-  <target>提交应用程序</target>
 </trans-unit>
 <trans-unit id="sf2da0e95c78f2cb7">
  <source>Restore Application Wizard Hint</source>
-  <target>恢复应用程序向导提示</target>
 </trans-unit>
 <trans-unit id="s76dc6d0d1a7db8e2">
  <source>Your authentik password</source>
-  <target>您的 authentik 密码</target>
 </trans-unit>
 <trans-unit id="se3a34af2a05c5c98">
  <source>Internal Service account</source>
-  <target>内部服务账户</target>
 </trans-unit>
 <trans-unit id="s681c086b8f7afcae">
  <source>Global</source>
-  <target>全局</target>
 </trans-unit>
 <trans-unit id="s1b85e6ac2978a2c0">
  <source>Outpost integrations</source>
-  <target>前哨集成</target>
 </trans-unit>
 <trans-unit id="sec55a3a7f18615ec">
  <source>Outpost integrations define how authentik connects to external platforms to manage and deploy Outposts.</source>
-  <target>前哨集成定义了 authentik 如何连接到外部平台以管理和部署前哨。</target>
 </trans-unit>
    </body>
  </file>
--- a/web/xliff/zh_CN.xlf
+++ b/web/xliff/zh_CN.xlf
@ -8818,50 +8818,6 @@ Bindings to groups/users are checked against the user of the event.</source>
 <trans-unit id="s7a64ac07061f85b2">
  <source>See documentation</source>
  <target>查看文档</target>
-</trans-unit>
-<trans-unit id="se166e95fe447ebcd">
-  <source>Close dialog</source>
-  <target>关闭对话框</target>
-</trans-unit>
-<trans-unit id="s3dc14a4b8129f989">
-  <source>Pagination</source>
-  <target>分页</target>
-</trans-unit>
-<trans-unit id="s6d46b842e227be57">
-  <source>Application Details</source>
-  <target>应用程序详情</target>
-</trans-unit>
-<trans-unit id="s76415a60e548cafe">
-  <source>Provider Configuration</source>
-  <target>提供程序配置</target>
-</trans-unit>
-<trans-unit id="sde59c64619570b57">
-  <source>Submit Application</source>
-  <target>提交应用程序</target>
-</trans-unit>
-<trans-unit id="sf2da0e95c78f2cb7">
-  <source>Restore Application Wizard Hint</source>
-  <target>恢复应用程序向导提示</target>
-</trans-unit>
-<trans-unit id="s76dc6d0d1a7db8e2">
-  <source>Your authentik password</source>
-  <target>您的 authentik 密码</target>
-</trans-unit>
-<trans-unit id="se3a34af2a05c5c98">
-  <source>Internal Service account</source>
-  <target>内部服务账户</target>
-</trans-unit>
-<trans-unit id="s681c086b8f7afcae">
-  <source>Global</source>
-  <target>全局</target>
-</trans-unit>
-<trans-unit id="s1b85e6ac2978a2c0">
-  <source>Outpost integrations</source>
-  <target>前哨集成</target>
-</trans-unit>
-<trans-unit id="sec55a3a7f18615ec">
-  <source>Outpost integrations define how authentik connects to external platforms to manage and deploy Outposts.</source>
-  <target>前哨集成定义了 authentik 如何连接到外部平台以管理和部署前哨。</target>
 </trans-unit>
    </body>
  </file>
--- a/website/developer-docs/api/flow-executor.md
+++ b/website/developer-docs/api/flow-executor.md
@ -4,7 +4,7 @@ title: Flow executor (backend)

 A big focus of authentik is the flows system, which allows you to combine and build complex conditional processes using stages and policies. Normally, these flows are automatically executed in the browser using authentik's [standard browser-based flow executor (/if/flows)](/docs/flow/executors/if-flow).

-However, any flow can be executed via an API from anywhere, in fact that is what every flow executor does. With a few requests you can execute flows from anywhere, and integrate authentik even better.
+However, any flow can be executed via an API from anywhere, in fact that is what the backend flow executor does. With a few requests you can execute flows from anywhere, and integrate authentik even better.

 :::info
 Because the flow executor stores its state in the HTTP Session, so you need to ensure that cookies between flow executor requests are persisted.
--- a/website/docs/core/settings.md
+++ b/website/docs/core/settings.md
@ -51,8 +51,6 @@ The setting can be used as follows:
 [{ "name": "Link Name", "href": "https://goauthentik.io" }]
 ```

-Starting with authentik 2024.6.1, the `href` attribute is optional, and this option can be used to add additional text to the flow executor pages.
-
 ### GDPR compliance

 When enabled, all the events caused by a user will be deleted upon the user's deletion. Defaults to `true`.
--- a/website/docs/flow/executors/headless.md
+++ b/website/docs/flow/executors/headless.md
@ -6,6 +6,6 @@ The headless flow executor is used by clients that don't have access to the web

 The following stages are supported:

-   [**Identification stage**](../stages/identification/)
-   [**Password stage**](../stages/password/)
-   [**Authenticator Validation Stage**](../stages/authenticator_validate/)
+-   [**identification**](../stages/identification/)
+-   [**password**](../stages/password/)
+-   [**authenticator_validate**](../stages/authenticator_validate/)
--- a/website/docs/flow/executors/if-flow.md
+++ b/website/docs/flow/executors/if-flow.md
@ -1,9 +1,5 @@
 ---
-title: Default
+title: Default (Web)
 ---

-This is the default, web-based environment that flows are executed in. All stages are compatible with this environment and no limitations are imposed.
-
-:::info
-All flow executors use the same [API](../../../developer-docs/api/flow-executor) which allows for the implementation of custom flow executors.
-:::
+This is the default, web-based environment flows are executed in. All stages are compatible with this environment and no limitations are imposed.
--- a/website/docs/flow/executors/sfe.md
+++ b/website/docs/flow/executors/sfe.md
@ -1,31 +0,0 @@
---
-title: Simplified flow executor
---
-
-<span class="badge badge--info">authentik 2024.8+</span>
-
-A simplified web-based flow executor that authentik automatically uses for older browsers that do not support modern web technologies.
-
-Currently this flow executor is automatically used for the following browsers:
-
-   Internet Explorer
-   Microsoft Edge (up to and including version 18)
-
-The following stages are supported:
-
-   [**Identification stage**](../stages/identification/)
-
-    :::info
-    Only user identifier and user identifier + password stage configurations are supported; sources and passwordless configurations are not supported.
-    :::
-
-   [**Password stage**](../stages/password/)
-   [**Authenticator Validation Stage**](../stages/authenticator_validate/)
-
-Compared to the [default flow executor](./if-flow.md), this flow executor does _not_ support the following features:
-
-   Localization
-   Theming (Dark / light themes)
-   Theming (Custom CSS)
-   Stages not listed above
-   Flow inspector
--- a/website/docs/flow/stages/authenticator_validate/index.md
+++ b/website/docs/flow/stages/authenticator_validate/index.md
@ -1,5 +1,5 @@
 ---
-title: Authenticator validation stage
+title: Authenticator Validation Stage
 ---

 This stage validates an already configured Authenticator Device. This device has to be configured using any of the other authenticator stages:
--- a/website/docs/outposts/_config.md
+++ b/website/docs/outposts/_config.md
@ -3,11 +3,6 @@
 # Allowed levels: trace, debug, info, warning, error
 # Applies to: non-embedded
 log_level: debug
-# Interval at which the outpost will refresh the providers
-# from authentik. For caching outposts (such as LDAP), the
-# cache will also be invalidated at that interval.
-# (Format: hours=1;minutes=2;seconds=3).
-refresh_interval: minutes=5
 ########################################
 # The settings below are only relevant when using a managed outpost
 ########################################
--- a/website/docs/property-mappings/index.md
+++ b/website/docs/property-mappings/index.md
@ -23,8 +23,6 @@ LDAP Property Mappings are used when you define a LDAP Source. These mappings de

 These are configured with most common LDAP setups.

-You can also configure [custom LDAP property mappings](../sources/ldap/index.md#custom-ldap-property-mapping).
-
 ## Scope Mapping

 Scope Mappings are used by the OAuth2 Provider to map information from authentik to OAuth2/OpenID Claims. Values returned by a Scope Mapping are added as custom claims to Access and ID tokens.
--- a/website/docs/sources/ldap/index.md
+++ b/website/docs/sources/ldap/index.md
@ -73,20 +73,6 @@ By default, authentik ships with [pre-configured mappings](../../property-mappin

 You can assign the value of a mapping to any user attribute, or save it as a custom attribute by prefixing the object field with `attribute.` Keep in mind though, data types from the LDAP server will be carried over. This means that with some implementations, where fields are stored as array in LDAP, they will be saved as array in authentik. To prevent this, use the built-in `list_flatten` function.

-### Custom LDAP Property Mapping
-
-If the default source mapping is not enough, you can set your own custom LDAP property mapping.
-
-Here are the steps:
-
-1. In authentik, open the Admin interface, and then navigate to **Customization -> Property Mappings**.
-2. Click **Create**, select **LDAP Property Mapping**, and then click **Next**.
-3. Type a unique and meaningful **Name**, such as `ldap-displayName-mapping:name`.
-4. In the**Object field** field, type the name of an existing authentik field, such as `name`. If you want to add more extended attributes, you can type `attributes.mobile` for example.
-5. In the **Expression** field enter Python expressions to retrieve the value from LDAP source. For example `return list_flatten(ldap.get("displayName"))`.
-
-`list_flatten(["input string array"])` will convert a string array to a single string. If you are not sure whether the LDAP field is an array or not, you can map the field to any `attributes.xxx` and then check the sync result in authentik UI.
-
 ## Password login

 By default, authentik doesn't update the password it stores for a user when they log in using their LDAP credentials. That means that if the LDAP server is not reachable by authentik, users will not be able to log in. This behavior can be turned on with the **Update internal password on login** setting on the LDAP source.
@ -97,9 +83,9 @@ Sources created prior to the 2024.2 release have this setting turned on by defau

 Be aware of the following security considerations when turning on this functionality:

-   Updating the LDAP password does not invalidate the password stored in authentik; however for LDAP Servers like FreeIPA and Active Directory, authentik will lock its internal password during the next LDAP sync. For other LDAP servers, the old passwords will still be valid indefinitely.
+-   Updating the LDAP password does not invalid the password stored in authentik, however for LDAP Servers like FreeIPA and Active Directory, authentik will lock its internal password during the next LDAP sync. For other LDAP servers, the old passwords will still be valid indefinitely.
 -   Logging in via LDAP credentials overwrites the password stored in authentik if users have different passwords in LDAP and authentik.
-   Custom security measures that are used to secure the password in LDAP may differ from the ones used in authentik. Depending on threat model and security requirements this could lead to unknowingly being non-compliant.
+-   Custom security measures used to secure the password in LDAP may differ from the ones used in authentik. Depending on threat model and security requirements this could lead to unknowingly being non-compliant.

 ## Troubleshooting

--- a/website/docs/troubleshooting/postgres/upgrade_docker.md
+++ b/website/docs/troubleshooting/postgres/upgrade_docker.md
@ -6,7 +6,7 @@ title: Upgrade PostgreSQL on Docker Compose

 Dump your existing database with `docker compose exec postgresql pg_dump -U authentik -d authentik -cC > upgrade_backup_12.sql`.

-Before continuing, ensure the SQL dump file (`upgrade_backup_12.sql`) includes all your database content.
+Before continuing, ensure the SQL dump file `(upgrade_backup_12.sql`) includes all your database content.

 ### Stop your authentik stack

--- a/website/integrations/services/apache-guacamole/index.mdx
+++ b/website/integrations/services/apache-guacamole/index.mdx
@ -19,20 +19,20 @@ The following placeholders will be used:

 Create an OAuth2/OpenID provider with the following parameters:

-   **Client Type**: `Confidential`
-   **Redirect URIs**: `https://guacamole.company/` (depending on your Tomcat setup, you might have to add `/guacamole/` if the application runs in a subfolder)
-   **Scopes**: OpenID, Email, and Profile
+-   Client Type: `Confidential`
+-   Redirect URIs: `https://guacamole.company/` (depending on your Tomcat setup, you might have to add `/guacamole/` if the application runs in a subfolder)
+-   Scopes: OpenID, Email and Profile

-Under **Advanced protocol settings**, set the following:
+Under _Advanced protocol settings_, set the following:

-   **Token validity**: Any value to configure how long the session should last. Guacamole will not accept any tokens valid longer than 300 Minutes.
-   **Signing Key**: Set the key as `authentik Self-signed Certificate`
+-   Token validity: Any value to configure how long the session should last. Guacamole will not accept any tokens valid longer than 300 Minutes.
+-   Signing Key: Set the key as `authentik Self-signed Certificate`

 Note the Client ID value. Create an application, using the provider you've created above.

 ## Guacamole

-It is recommended you configure an admin account in Guacamole before setting up SSO to make things easier. Create a user in Guacamole using the email address of your user in authentik and give them admin permissions. Without this, you might lose access to the Guacamole admin settings and have to revert the settings below.
+It is recommended you configure an admin account in Guacamole before setting up SSO to make things easier. Create a user in Guacamole using the email address of your user in authentik and give them admin permissions. Without this you might loose access to the Guacamole admin settings and have to revert the settings below.

 import Tabs from "@theme/Tabs";
 import TabItem from "@theme/TabItem";
@ -40,11 +40,11 @@ import TabItem from "@theme/TabItem";
 <Tabs
  defaultValue="docker"
  values={[
-    { label: 'Docker', value: 'docker' },
-    { label: 'Standalone', value: 'standalone' },
+    {label: 'Docker', value: 'docker'},
+    {label: 'Standalone', value: 'standalone'},
  ]}>
  <TabItem value="docker">
-    The Docker containers are configured via environment variables. The following variables are required:
+    The docker containers are configured via environment variables. The following variables are required:

 ```yaml
 OPENID_AUTHORIZATION_ENDPOINT: https://authentik.company/application/o/authorize/
--- a/website/integrations/services/aws/index.md
+++ b/website/integrations/services/aws/index.md
@ -12,36 +12,37 @@ title: Amazon Web Services

 ## Select your method

-There are two ways to perform the integration: the classic IAM SAML way, or the 'newer' IAM Identity Center way. This all depends on your preference and needs.
+There are two ways to perform the integration. The classic IAM SAML way, or the 'newer' IAM Identity Center way.
+This all depends on your preference and needs.

-## Method 1: Classic IAM
+# Method 1: Classic IAM

-### Preparation
+## Preparation

 Create an application in authentik and note the slug, as this will be used later. Create a SAML provider with the following parameters:

-   **ACS URL**: `https://signin.aws.amazon.com/saml`
-   **Issuer**: `authentik`
-   **Binding**: `Post`
-   **Audience**: `urn:amazon:webservices`
+-   ACS URL: `https://signin.aws.amazon.com/saml`
+-   Issuer: `authentik`
+-   Binding: `Post`
+-   Audience: `urn:amazon:webservices`

-You can use a custom signing certificate and adjust durations as needed.
+You can of course use a custom signing certificate, and adjust durations.

-### AWS
+## AWS

 Create a role with the permissions you desire, and note the ARN.

-After configuring the Property Mappings, add them to the SAML Provider in AWS.
+After you've created the Property Mappings below, add them to the Provider.

 Create an application, assign policies, and assign this provider.

-Export the metadata from authentik and create a new Identity Provider [here](https://console.aws.amazon.com/iam/home#/providers).
+Export the metadata from authentik, and create an Identity Provider [here](https://console.aws.amazon.com/iam/home#/providers).

 #### Role Mapping

 The Role mapping specifies the AWS ARN(s) of the identity provider, and the role the user should assume ([see](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_saml_assertions.html#saml_role-attribute)).

-This Mapping needs to have the SAML Name field set to `https://aws.amazon.com/SAML/Attributes/Role`.
+This Mapping needs to have the SAML Name field set to "https://aws.amazon.com/SAML/Attributes/Role"

 As expression, you can return a static ARN like so

@ -70,7 +71,7 @@ return [

 The RoleSessionMapping specifies what identifier will be shown at the top of the Management Console ([see](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_saml_assertions.html#saml_role-session-attribute)).

-This mapping needs to have the SAML Name field set to `https://aws.amazon.com/SAML/Attributes/RoleSessionName`.
+This mapping needs to have the SAML Name field set to "https://aws.amazon.com/SAML/Attributes/RoleSessionName".

 To use the user's username, use this snippet

@ -78,69 +79,70 @@ To use the user's username, use this snippet
 return user.username
 ```

-## Method 2: IAM Identity Center
+# Method 2: IAM Identity Center

-### Preparation
+## Preparation

 -   A certificate to sign SAML assertions is required. You can use authentik's default certificate, or provide/generate one yourself.
 -   You may pre-create an AWS application.

-### How to integrate with AWS
+## How to integrate with AWS

 In AWS:

-   In AWS, navigate to: **IAM Identity Center -> Settings -> Identity Source (tab)**
-   On the right side, click **Actions** -> **Change identity source**
-   Select **External Identity Provider**
-   Under **Service Provider metadata** download the metadata file.
+-   In AWS navigate to: _IAM Identity Center_ -> _Settings_ -> _Identity Source (tab)_
+-   On the right side click _Actions_ -> _Change identity source_
+-   Select _External Identity Provider_
+-   Under _Service Provider metadata_ download the metadata file.

 Now go to your authentik instance, and perform the following steps.

-   Under **Providers**, create a new **SAML Provider from metadata**. Give it a name, and upload the metadata file AWS gave you.
-   Click **Next**. Give it a name, and close the file.
+-   Under _Providers_ create a new _SAML Provider from metadata_. Give it a name, and upload the metadata file AWS gave you.
+-   Click _Next_. Give it a name, and close the file.
 -   If you haven't done so yet, create an application for AWS and connect the provider to it.
-   Navigate to the provider you've just created, and then select **Edit**
-   Copy the **Issuer URL** to the **Audience** field.
-   Under **Advanced Protocol Settings** set a **Signing Certificate**
+-   Navigate to the provider you've just created, and then select _Edit_
+-   Copy the _Issuer URL_ to the _Audience_ field.
+-   Under _Advanced Protocol Settings_ set a _Signing Certificate_
 -   Save and Close.
-   Under **Related Objects**, download the **Metadata file** and the **Signing Certificate**
+-   Under _Related Objects_ download the _Metadata file_, and the _Signing Certificate_

 Now go back to your AWS instance

-   Under **Identity provider metadata**, upload both the **Metadata** file and **Signing Certificate** that authentik gave you.
-   Click **Next**.
-   In your settings pane, under the tab **Identity Source**, click **Actions** -> **Manage Authentication**.
-   Note the AWS access portal sign-in URL (especially if you have customized it).
+-   Under _Identity provider metadata_ upload both the the _Metadata_ file and _Signing Certificate_ that authentik gave you.
+-   Click _Next_.
+-   In your settings pane, under the tab _Identity Source_, click _Actions_ -> _Manage Authentication_.
+-   Take note of the _AWS access portal sign-in URL_ (this is especially important if you changed it from the default).

 Now go back to your authentik instance.

-   Navigate to the Application that you created for AWS and click **Edit**.
-   Under **UI Settings** make sure the **Start URL** matches the **AWS access portal sign-in URL**.
+-   Navigate to the Application that you created for AWS and click _Edit_.
+-   Under _UI Settings_ make sure the _Start URL_ matches the _AWS access portal sign-in URL_

-:::::info
+## Caveats and Troubleshooting

-   Ensure users already exist in AWS for authentication through authentik. AWS will throw an error if the user is unrecognized.
-   In case you're stuck, you can see the SSO logs in Amazon CloudTrail -> Event History. Look for `ExtenalIdPDirectoryLogin`.
-    :::::
+-   Users need to already exist in AWS in order to use them through authentik. AWS will throw an error if it doesn't recognise the user.
+-   In case you're stuck, you can see the SSO logs in Amazon CloudTrail -> Event History. Look for `ExtenalIdPDirectoryLogin`
+
+Note:

 ## Optional: Automated provisioning with SCIM

-Some people may opt to use the automatic provisioning feature called SCIM (System for Cross-domain Identity Management).
+Some people may opt TO USE the automatic provisioning feature called SCIM (System for Cross-domain Identity Management).
 SCIM allows you to synchronize (part of) your directory to AWS's IAM, saving you the hassle of having to create users by hand.
-To do so, take the following steps in your AWS Identity Center:
+In order to do so, take the following steps in your AWS Identity Center:

-   In your **Settings** pane, locate the **Automatic Provisioning** information box. Click **Enable**.
-   AWS provides an SCIM Endpoint and an Access Token. Note these values.
+-   In your _Settings_ pane, locate the _Automatic Provisioning_ information box. Click _Enable_.
+-   AWS will give you an _SCIM Endpoint_ and a _Access Token_. Take note of these values.

 Go back to your authentik instance

-   Navigate to **Providers** -> **Create**
-   Select **SCIM Provider**
-   Give it a name, under **URL** enter the **SCIM Endpoint**, and then under **Token** enter the **Access Token** AWS provided you with.
-   Optionally, change the user filtering settings to your liking. Click **Finish**
+-   Navigate to _Providers_ -> _Create_
+-   Select _SCIM Provider_
+-   Give it a name, under _URL_ enter the _SCIM Endpoint_, and then under _Token_ enter the _Access Token_ AWS provided you with.
+-   Optionally, change the user filtering settings to your liking. Click _Finish_

-   Go to **Customization -> Property Mappings**
-   Click **Create -> SCIM Mapping**
+-   Go to _Customization -> Property Mappings_
+-   Click _Create -> SCIM Mapping_
 -   Make sure to give the mapping a name that's lexically lower than `authentik default`, for example `AWS SCIM User mapping`
 -   As the expression, enter:

@ -152,12 +154,12 @@ return {
 }
 ```

-   Click **Save**. Navigate back to your SCIM provider, click **Edit**
-   Under **User Property Mappings** select the default mapping and the mapping that you just created.
-   Click **Update**
+-   Click _Save_. Navigate back to your SCIM provider, click _Edit_
+-   Under _User Property Mappings_ select the default mapping and the mapping that you just created.
+-   Click _Update_

-   Navigate to your application, click **Edit**.
-   Under **Backchannel providers** add the SCIM provider that you created.
-   Click **Update**
+-   Navigate to your application, click _Edit_.
+-   Under _Backchannel providers_ add the SCIM provider that you created.
+-   Click _Update_

-The SCIM provider syncs automatically whenever you create/update/remove users, groups, or group membership. You can manually sync by going to your SCIM provider and clicking **Run sync again**. After the SCIM provider has synced, you should see the users and groups in your AWS IAM center.
+The SCIM provider syncs automatically whenever you create/update/remove users, groups, or group membership. You can manually sync by going to your SCIM provider and clicking _Run sync again_. After the SCIM provider has synced, you should see the users and groups in your AWS IAM center.
--- a/website/integrations/services/dokuwiki/index.md
+++ b/website/integrations/services/dokuwiki/index.md
@ -38,7 +38,7 @@ For _Oauthgeneric_:
 -   plugin»oauthgeneric»tokenurl: https://authentik.company/application/o/token/
 -   plugin»oauthgeneric»userurl: https://authentik.company/application/o/userinfo/
 -   plugin»oauthgeneric»authmethod: Bearer Header
-   plugin»oauthgeneric»scopes: email, openid, profile, offline_access
+-   plugin»oauthgeneric»scopes: email, openid, profile
 -   plugin»oauthgeneric»needs-state: checked
 -   plugin»oauthgeneric»json-user: preferred_username
 -   plugin»oauthgeneric»json-name: name
@ -60,8 +60,6 @@ In authentik, under _Providers_, create an _OAuth2/OpenID Provider_ with these s

 Note the _client ID_ and _client secret_, then save the provider. If you need to retrieve these values, you can do so by editing the provider.

-To prevent users from needing to log in again as soon as the access token expires, include the _offline_access_ scope in both authentik and DokuWiki. This scope allows DokuWiki to use refresh tokens.
-
 ### Application

 In authentik, create an application which uses this provider. Optionally apply access restrictions to the application using policy bindings.
--- a/website/integrations/services/gitlab/index.md
+++ b/website/integrations/services/gitlab/index.md
@ -21,6 +21,7 @@ There are 2 ways to configure single sign on (SSO) for GitLab:
 -   [via SAML](#saml-auth)
 -   [via OIDC Connect (OAuth)](#openid-connect-auth)

+
 ### SAML auth

 #### Preparation
@ -41,9 +42,11 @@ Under _Advanced protocol settings_, set a certificate for _Signing Certificate_.

 #### GitLab Configuration

+
 Paste the following block in your `/etc/gitlab/gitlab.rb` file, after replacing the placeholder values from above.
 To get the value for `idp_cert_fingerprint`, navigate to the authentik Admin interface, expand the **System** section and select **Certificates**. Then, expand the selected certificate and copy the SHA1 Certificate Fingerprint.

+
 ```ruby
 gitlab_rails['omniauth_enabled'] = true
 gitlab_rails['omniauth_allow_single_sign_on'] = ['saml']
--- a/website/package-lock.json
+++ b/website/package-lock.json
@ -19,7 +19,7 @@
                "clsx": "^2.1.1",
                "disqus-react": "^1.1.5",
                "docusaurus-plugin-openapi-docs": "^3.0.0-beta.10",
-                "docusaurus-theme-openapi-docs": "^3.0.1",
+                "docusaurus-theme-openapi-docs": "^3.0.0-beta.10",
                "postcss": "^8.4.39",
                "prism-react-renderer": "^2.3.1",
                "react": "^18.3.1",
@ -27,7 +27,7 @@
                "react-dom": "^18.3.1",
                "react-feather": "^2.0.10",
                "react-toggle": "^4.1.3",
-                "react-tooltip": "^5.27.1",
+                "react-tooltip": "^5.27.0",
                "remark-github": "^12.0.0"
            },
            "devDependencies": {
@ -35,7 +35,6 @@
                "@docusaurus/tsconfig": "^3.4.0",
                "@docusaurus/types": "^3.3.2",
                "@types/react": "^18.3.3",
-                "cross-env": "^7.0.3",
                "lockfile-lint": "^4.14.0",
                "prettier": "3.3.2",
                "typescript": "~5.5.3"
@ -2640,11 +2639,6 @@
            "version": "1.3.0",
            "license": "MIT"
        },
-        "node_modules/@faker-js/faker": {
-            "version": "5.5.3",
-            "resolved": "https://registry.npmjs.org/@faker-js/faker/-/faker-5.5.3.tgz",
-            "integrity": "sha512-R11tGE6yIFwqpaIqcfkcg7AICXzFg14+5h5v0TfF/9+RMDL6jhzCy/pxHVOfbALGdtVYdt6JdR21tuxEgl34dw=="
-        },
        "node_modules/@floating-ui/core": {
            "version": "1.6.0",
            "license": "MIT",
@ -2878,6 +2872,153 @@
                "node": ">= 8"
            }
        },
+        "node_modules/@paloaltonetworks/openapi-to-postmanv2": {
+            "version": "3.1.0-hotfix.1",
+            "license": "Apache-2.0",
+            "dependencies": {
+                "@paloaltonetworks/postman-collection": "^4.1.0",
+                "ajv": "8.1.0",
+                "ajv-formats": "2.1.1",
+                "async": "3.2.1",
+                "commander": "2.20.3",
+                "js-yaml": "3.14.1",
+                "json-schema-merge-allof": "0.8.1",
+                "lodash": "4.17.21",
+                "oas-resolver-browser": "2.5.2",
+                "path-browserify": "1.0.1",
+                "yaml": "1.10.2"
+            },
+            "bin": {
+                "openapi2postmanv2": "bin/openapi2postmanv2.js"
+            },
+            "engines": {
+                "node": ">=8"
+            }
+        },
+        "node_modules/@paloaltonetworks/openapi-to-postmanv2/node_modules/ajv": {
+            "version": "8.1.0",
+            "license": "MIT",
+            "dependencies": {
+                "fast-deep-equal": "^3.1.1",
+                "json-schema-traverse": "^1.0.0",
+                "require-from-string": "^2.0.2",
+                "uri-js": "^4.2.2"
+            },
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/epoberezkin"
+            }
+        },
+        "node_modules/@paloaltonetworks/openapi-to-postmanv2/node_modules/argparse": {
+            "version": "1.0.10",
+            "license": "MIT",
+            "dependencies": {
+                "sprintf-js": "~1.0.2"
+            }
+        },
+        "node_modules/@paloaltonetworks/openapi-to-postmanv2/node_modules/commander": {
+            "version": "2.20.3",
+            "license": "MIT"
+        },
+        "node_modules/@paloaltonetworks/openapi-to-postmanv2/node_modules/js-yaml": {
+            "version": "3.14.1",
+            "license": "MIT",
+            "dependencies": {
+                "argparse": "^1.0.7",
+                "esprima": "^4.0.0"
+            },
+            "bin": {
+                "js-yaml": "bin/js-yaml.js"
+            }
+        },
+        "node_modules/@paloaltonetworks/postman-code-generators": {
+            "version": "1.1.15-patch.2",
+            "hasInstallScript": true,
+            "license": "Apache-2.0",
+            "dependencies": {
+                "@paloaltonetworks/postman-collection": "^4.1.0",
+                "async": "^3.2.4",
+                "path": "^0.12.7",
+                "shelljs": "^0.8.5"
+            },
+            "engines": {
+                "node": ">=6"
+            }
+        },
+        "node_modules/@paloaltonetworks/postman-code-generators/node_modules/async": {
+            "version": "3.2.5",
+            "license": "MIT"
+        },
+        "node_modules/@paloaltonetworks/postman-collection": {
+            "version": "4.1.1",
+            "license": "Apache-2.0",
+            "dependencies": {
+                "file-type": "3.9.0",
+                "http-reasons": "0.1.0",
+                "iconv-lite": "0.6.3",
+                "liquid-json": "0.3.1",
+                "lodash": "4.17.21",
+                "mime-format": "2.0.1",
+                "mime-types": "2.1.34",
+                "postman-url-encoder": "3.0.5",
+                "semver": "7.3.5",
+                "uuid": "8.3.2"
+            },
+            "engines": {
+                "node": ">=10"
+            }
+        },
+        "node_modules/@paloaltonetworks/postman-collection/node_modules/lru-cache": {
+            "version": "6.0.0",
+            "license": "ISC",
+            "dependencies": {
+                "yallist": "^4.0.0"
+            },
+            "engines": {
+                "node": ">=10"
+            }
+        },
+        "node_modules/@paloaltonetworks/postman-collection/node_modules/mime-db": {
+            "version": "1.51.0",
+            "license": "MIT",
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/@paloaltonetworks/postman-collection/node_modules/mime-types": {
+            "version": "2.1.34",
+            "license": "MIT",
+            "dependencies": {
+                "mime-db": "1.51.0"
+            },
+            "engines": {
+                "node": ">= 0.6"
+            }
+        },
+        "node_modules/@paloaltonetworks/postman-collection/node_modules/semver": {
+            "version": "7.3.5",
+            "license": "ISC",
+            "dependencies": {
+                "lru-cache": "^6.0.0"
+            },
+            "bin": {
+                "semver": "bin/semver.js"
+            },
+            "engines": {
+                "node": ">=10"
+            }
+        },
+        "node_modules/@paloaltonetworks/postman-collection/node_modules/uuid": {
+            "version": "8.3.2",
+            "license": "MIT",
+            "bin": {
+                "uuid": "dist/bin/uuid"
+            }
+        },
+        "node_modules/@paloaltonetworks/postman-collection/node_modules/yallist": {
+            "version": "4.0.0",
+            "license": "ISC"
+        },
        "node_modules/@pkgjs/parseargs": {
            "version": "0.11.0",
            "license": "MIT",
@ -3850,19 +3991,6 @@
                "url": "https://github.com/sponsors/epoberezkin"
            }
        },
-        "node_modules/ajv-draft-04": {
-            "version": "1.0.0",
-            "resolved": "https://registry.npmjs.org/ajv-draft-04/-/ajv-draft-04-1.0.0.tgz",
-            "integrity": "sha512-mv00Te6nmYbRp5DCwclxtt7yV/joXJPGS7nM+97GdxvuttCOfgI3K4U25zboyeX0O+myI8ERluxQe5wljMmVIw==",
-            "peerDependencies": {
-                "ajv": "^8.5.0"
-            },
-            "peerDependenciesMeta": {
-                "ajv": {
-                    "optional": true
-                }
-            }
-        },
        "node_modules/ajv-formats": {
            "version": "2.1.1",
            "license": "MIT",
@ -4041,9 +4169,8 @@
            }
        },
        "node_modules/async": {
-            "version": "3.2.4",
-            "resolved": "https://registry.npmjs.org/async/-/async-3.2.4.tgz",
-            "integrity": "sha512-iAB+JbDEGXhyIUavoDl9WP/Jj106Kz9DEn1DPgYw5ruDn0e3Wgi3sKFm55sASdGBNOQB8F59d9qQ7deqrHA8wQ=="
+            "version": "3.2.1",
+            "license": "MIT"
        },
        "node_modules/at-least-node": {
            "version": "1.0.0",
@ -4670,8 +4797,7 @@
        },
        "node_modules/charset": {
            "version": "1.0.1",
-            "resolved": "https://registry.npmjs.org/charset/-/charset-1.0.1.tgz",
-            "integrity": "sha512-6dVyOOYjpfFcL1Y4qChrAoQLRHvj2ziyhcm0QJlhOcAhykL/k1kTUPbeo+87MNRTRdk2OIIsIXbuF3x2wi5EXg==",
+            "license": "MIT",
            "engines": {
                "node": ">=4.0.0"
            }
@ -5010,8 +5136,6 @@
        },
        "node_modules/compute-gcd": {
            "version": "1.2.1",
-            "resolved": "https://registry.npmjs.org/compute-gcd/-/compute-gcd-1.2.1.tgz",
-            "integrity": "sha512-TwMbxBNz0l71+8Sc4czv13h4kEqnchV9igQZBi6QUaz09dnz13juGnnaWWJTRsP3brxOoxeB4SA2WELLw1hCtg==",
            "dependencies": {
                "validate.io-array": "^1.0.3",
                "validate.io-function": "^1.0.2",
@ -5020,8 +5144,6 @@
        },
        "node_modules/compute-lcm": {
            "version": "1.1.2",
-            "resolved": "https://registry.npmjs.org/compute-lcm/-/compute-lcm-1.1.2.tgz",
-            "integrity": "sha512-OFNPdQAXnQhDSKioX8/XYT6sdUlXwpeMjfd6ApxMJfyZ4GxmLR1xvMERctlYhlHwIiz6CSpBc2+qYKjHGZw4TQ==",
            "dependencies": {
                "compute-gcd": "^1.2.1",
                "validate.io-array": "^1.0.3",
@ -5273,24 +5395,6 @@
                "sha.js": "^2.4.8"
            }
        },
-        "node_modules/cross-env": {
-            "version": "7.0.3",
-            "resolved": "https://registry.npmjs.org/cross-env/-/cross-env-7.0.3.tgz",
-            "integrity": "sha512-+/HKd6EgcQCJGh2PSjZuUitQBQynKor4wrFbRg4DtAgS1aWO+gU52xpH7M9ScGgXSYmAVS9bIJ8EzuaGw0oNAw==",
-            "dev": true,
-            "dependencies": {
-                "cross-spawn": "^7.0.1"
-            },
-            "bin": {
-                "cross-env": "src/bin/cross-env.js",
-                "cross-env-shell": "src/bin/cross-env-shell.js"
-            },
-            "engines": {
-                "node": ">=10.14",
-                "npm": ">=6",
-                "yarn": ">=1"
-            }
-        },
        "node_modules/cross-spawn": {
            "version": "7.0.3",
            "license": "MIT",
@ -6037,6 +6141,13 @@
                }
            }
        },
+        "node_modules/decamelize": {
+            "version": "1.2.0",
+            "license": "MIT",
+            "engines": {
+                "node": ">=0.10.0"
+            }
+        },
        "node_modules/decode-named-character-reference": {
            "version": "1.0.2",
            "license": "MIT",
@ -6292,14 +6403,15 @@
            }
        },
        "node_modules/docusaurus-plugin-openapi-docs": {
-            "version": "3.0.1",
-            "resolved": "https://registry.npmjs.org/docusaurus-plugin-openapi-docs/-/docusaurus-plugin-openapi-docs-3.0.1.tgz",
-            "integrity": "sha512-6SRqwey/TXMNu2G02mbWgxrifhpjGOjDr30N+58AR0Ytgc+HXMqlPAUIvTe+e7sOBfAtBbiNlmOWv5KSYIjf3w==",
+            "version": "3.0.0-beta.10",
+            "license": "MIT",
            "dependencies": {
                "@apidevtools/json-schema-ref-parser": "^11.5.4",
                "@docusaurus/plugin-content-docs": "^3.0.1",
                "@docusaurus/utils": "^3.0.1",
                "@docusaurus/utils-validation": "^3.0.1",
+                "@paloaltonetworks/openapi-to-postmanv2": "3.1.0-hotfix.1",
+                "@paloaltonetworks/postman-collection": "^4.1.0",
                "@redocly/openapi-core": "^1.10.5",
                "chalk": "^4.1.2",
                "clsx": "^1.1.1",
@ -6309,8 +6421,6 @@
                "json5": "^2.2.3",
                "lodash": "^4.17.20",
                "mustache": "^4.2.0",
-                "openapi-to-postmanv2": "^4.21.0",
-                "postman-collection": "^4.4.0",
                "slugify": "^1.6.5",
                "swagger2openapi": "^7.0.8",
                "xml-formatter": "^2.6.1"
@ -6478,23 +6588,22 @@
            }
        },
        "node_modules/docusaurus-theme-openapi-docs": {
-            "version": "3.0.1",
-            "resolved": "https://registry.npmjs.org/docusaurus-theme-openapi-docs/-/docusaurus-theme-openapi-docs-3.0.1.tgz",
-            "integrity": "sha512-tqypV91tC3wuWj9O+4n0M/e5AgHOeMT2nvPj1tjlPkC7/dLinZvpwQStT4YDUPYSoHRseqxd7lhivFQHcmlryg==",
+            "version": "3.0.0-beta.10",
+            "license": "MIT",
            "dependencies": {
                "@docusaurus/theme-common": "^3.0.1",
                "@hookform/error-message": "^2.0.1",
+                "@paloaltonetworks/postman-code-generators": "1.1.15-patch.2",
+                "@paloaltonetworks/postman-collection": "^4.1.0",
                "@reduxjs/toolkit": "^1.7.1",
                "clsx": "^1.1.1",
                "copy-text-to-clipboard": "^3.1.0",
                "crypto-js": "^4.1.1",
-                "docusaurus-plugin-openapi-docs": "^3.0.1",
+                "docusaurus-plugin-openapi-docs": "^3.0.0-beta.10",
                "docusaurus-plugin-sass": "^0.2.3",
                "file-saver": "^2.0.5",
                "lodash": "^4.17.20",
                "node-polyfill-webpack-plugin": "^2.0.1",
-                "postman-code-generators": "^1.10.1",
-                "postman-collection": "^4.4.0",
                "prism-react-renderer": "^2.3.0",
                "react-hook-form": "^7.43.8",
                "react-live": "^4.0.0",
@ -7308,11 +7417,6 @@
                "node": ">=0.10.0"
            }
        },
-        "node_modules/faker": {
-            "version": "5.5.3",
-            "resolved": "https://registry.npmjs.org/faker/-/faker-5.5.3.tgz",
-            "integrity": "sha512-wLTv2a28wjUyWkbnX7u/ABZBkUkIF2fCd73V6P2oFqEGEktDfzWx4UxrSqtPRw0xPRAcjeAOIiJWqZm3pP4u3g=="
-        },
        "node_modules/fast-deep-equal": {
            "version": "3.1.3",
            "license": "MIT"
@ -7451,8 +7555,7 @@
        },
        "node_modules/file-type": {
            "version": "3.9.0",
-            "resolved": "https://registry.npmjs.org/file-type/-/file-type-3.9.0.tgz",
-            "integrity": "sha512-RLoqTXE8/vPmMuTI88DAzhMYC99I8BWv7zYP4A1puo5HIjEJ5EX48ighy4ZyKMG9EDXxBgW6e++cn7d1xuFghA==",
+            "license": "MIT",
            "engines": {
                "node": ">=0.10.0"
            }
@ -7994,14 +8097,6 @@
            "version": "4.2.11",
            "license": "ISC"
        },
-        "node_modules/graphlib": {
-            "version": "2.1.8",
-            "resolved": "https://registry.npmjs.org/graphlib/-/graphlib-2.1.8.tgz",
-            "integrity": "sha512-jcLLfkpoVGmH7/InMC/1hIvOPSUh38oJtGhvrOFGzioE1DZ+0YW16RgmOJhHiuWTvGiJQ9Z1Ik43JvkRPRvE+A==",
-            "dependencies": {
-                "lodash": "^4.17.15"
-            }
-        },
        "node_modules/gray-matter": {
            "version": "4.0.3",
            "license": "MIT",
@ -8574,8 +8669,7 @@
        },
        "node_modules/http-reasons": {
            "version": "0.1.0",
-            "resolved": "https://registry.npmjs.org/http-reasons/-/http-reasons-0.1.0.tgz",
-            "integrity": "sha512-P6kYh0lKZ+y29T2Gqz+RlC9WBLhKe8kDmcJ+A+611jFfxdPsbMRQ5aNmFRM3lENqFkK+HTTL+tlQviAiv0AbLQ=="
+            "license": "Apache-2.0"
        },
        "node_modules/http2-client": {
            "version": "1.3.5",
@ -9225,16 +9319,14 @@
        },
        "node_modules/json-schema-compare": {
            "version": "0.2.2",
-            "resolved": "https://registry.npmjs.org/json-schema-compare/-/json-schema-compare-0.2.2.tgz",
-            "integrity": "sha512-c4WYmDKyJXhs7WWvAWm3uIYnfyWFoIp+JEoX34rctVvEkMYCPGhXtvmFFXiffBbxfZsvQ0RNnV5H7GvDF5HCqQ==",
+            "license": "MIT",
            "dependencies": {
                "lodash": "^4.17.4"
            }
        },
        "node_modules/json-schema-merge-allof": {
            "version": "0.8.1",
-            "resolved": "https://registry.npmjs.org/json-schema-merge-allof/-/json-schema-merge-allof-0.8.1.tgz",
-            "integrity": "sha512-CTUKmIlPJbsWfzRRnOXz+0MjIqvnleIXwFTzz+t9T86HnYX/Rozria6ZVGLktAU9e+NygNljveP+yxqtQp/Q4w==",
+            "license": "MIT",
            "dependencies": {
                "compute-lcm": "^1.1.2",
                "json-schema-compare": "^0.2.2",
@ -9347,8 +9439,7 @@
        },
        "node_modules/liquid-json": {
            "version": "0.3.1",
-            "resolved": "https://registry.npmjs.org/liquid-json/-/liquid-json-0.3.1.tgz",
-            "integrity": "sha512-wUayTU8MS827Dam6MxgD72Ui+KOSF+u/eIqpatOtjnvgJ0+mnDq33uC2M7J0tPK+upe/DpUAuK4JUU89iBoNKQ==",
+            "license": "Apache-2.0",
            "engines": {
                "node": ">=4"
            }
@ -12107,8 +12198,7 @@
        },
        "node_modules/mime-format": {
            "version": "2.0.1",
-            "resolved": "https://registry.npmjs.org/mime-format/-/mime-format-2.0.1.tgz",
-            "integrity": "sha512-XxU3ngPbEnrYnNbIX+lYSaYg0M01v6p2ntd2YaFksTu0vayaw5OJvbdRyWs07EYRlLED5qadUZ+xo+XhOvFhwg==",
+            "license": "Apache-2.0",
            "dependencies": {
                "charset": "^1.0.0"
            }
@ -12468,16 +12558,15 @@
            }
        },
        "node_modules/oas-resolver-browser": {
-            "version": "2.5.6",
-            "resolved": "https://registry.npmjs.org/oas-resolver-browser/-/oas-resolver-browser-2.5.6.tgz",
-            "integrity": "sha512-Jw5elT/kwUJrnGaVuRWe1D7hmnYWB8rfDDjBnpQ+RYY/dzAewGXeTexXzt4fGEo6PUE4eqKqPWF79MZxxvMppA==",
+            "version": "2.5.2",
+            "license": "BSD-3-Clause",
            "dependencies": {
                "node-fetch-h2": "^2.3.0",
                "oas-kit-common": "^1.0.8",
                "path-browserify": "^1.0.1",
-                "reftools": "^1.1.9",
+                "reftools": "^1.1.6",
                "yaml": "^1.10.0",
-                "yargs": "^17.0.1"
+                "yargs": "^15.3.1"
            },
            "bin": {
                "resolve": "resolve.js"
@ -12486,6 +12575,136 @@
                "url": "https://github.com/Mermade/oas-kit?sponsor=1"
            }
        },
+        "node_modules/oas-resolver-browser/node_modules/camelcase": {
+            "version": "5.3.1",
+            "license": "MIT",
+            "engines": {
+                "node": ">=6"
+            }
+        },
+        "node_modules/oas-resolver-browser/node_modules/cliui": {
+            "version": "6.0.0",
+            "license": "ISC",
+            "dependencies": {
+                "string-width": "^4.2.0",
+                "strip-ansi": "^6.0.0",
+                "wrap-ansi": "^6.2.0"
+            }
+        },
+        "node_modules/oas-resolver-browser/node_modules/emoji-regex": {
+            "version": "8.0.0",
+            "license": "MIT"
+        },
+        "node_modules/oas-resolver-browser/node_modules/find-up": {
+            "version": "4.1.0",
+            "license": "MIT",
+            "dependencies": {
+                "locate-path": "^5.0.0",
+                "path-exists": "^4.0.0"
+            },
+            "engines": {
+                "node": ">=8"
+            }
+        },
+        "node_modules/oas-resolver-browser/node_modules/locate-path": {
+            "version": "5.0.0",
+            "license": "MIT",
+            "dependencies": {
+                "p-locate": "^4.1.0"
+            },
+            "engines": {
+                "node": ">=8"
+            }
+        },
+        "node_modules/oas-resolver-browser/node_modules/p-limit": {
+            "version": "2.3.0",
+            "license": "MIT",
+            "dependencies": {
+                "p-try": "^2.0.0"
+            },
+            "engines": {
+                "node": ">=6"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/sindresorhus"
+            }
+        },
+        "node_modules/oas-resolver-browser/node_modules/p-locate": {
+            "version": "4.1.0",
+            "license": "MIT",
+            "dependencies": {
+                "p-limit": "^2.2.0"
+            },
+            "engines": {
+                "node": ">=8"
+            }
+        },
+        "node_modules/oas-resolver-browser/node_modules/path-exists": {
+            "version": "4.0.0",
+            "license": "MIT",
+            "engines": {
+                "node": ">=8"
+            }
+        },
+        "node_modules/oas-resolver-browser/node_modules/string-width": {
+            "version": "4.2.3",
+            "license": "MIT",
+            "dependencies": {
+                "emoji-regex": "^8.0.0",
+                "is-fullwidth-code-point": "^3.0.0",
+                "strip-ansi": "^6.0.1"
+            },
+            "engines": {
+                "node": ">=8"
+            }
+        },
+        "node_modules/oas-resolver-browser/node_modules/wrap-ansi": {
+            "version": "6.2.0",
+            "license": "MIT",
+            "dependencies": {
+                "ansi-styles": "^4.0.0",
+                "string-width": "^4.1.0",
+                "strip-ansi": "^6.0.0"
+            },
+            "engines": {
+                "node": ">=8"
+            }
+        },
+        "node_modules/oas-resolver-browser/node_modules/y18n": {
+            "version": "4.0.3",
+            "license": "ISC"
+        },
+        "node_modules/oas-resolver-browser/node_modules/yargs": {
+            "version": "15.4.1",
+            "license": "MIT",
+            "dependencies": {
+                "cliui": "^6.0.0",
+                "decamelize": "^1.2.0",
+                "find-up": "^4.1.0",
+                "get-caller-file": "^2.0.1",
+                "require-directory": "^2.1.1",
+                "require-main-filename": "^2.0.0",
+                "set-blocking": "^2.0.0",
+                "string-width": "^4.2.0",
+                "which-module": "^2.0.0",
+                "y18n": "^4.0.0",
+                "yargs-parser": "^18.1.2"
+            },
+            "engines": {
+                "node": ">=8"
+            }
+        },
+        "node_modules/oas-resolver-browser/node_modules/yargs-parser": {
+            "version": "18.1.3",
+            "license": "ISC",
+            "dependencies": {
+                "camelcase": "^5.0.0",
+                "decamelize": "^1.2.0"
+            },
+            "engines": {
+                "node": ">=6"
+            }
+        },
        "node_modules/oas-schema-walker": {
            "version": "1.1.5",
            "license": "BSD-3-Clause",
@ -12521,6 +12740,7 @@
            "version": "3.0.0",
            "resolved": "https://registry.npmjs.org/object-hash/-/object-hash-3.0.0.tgz",
            "integrity": "sha512-RSn9F68PjH9HqtltsSnqYC1XXoWe9Bju5+213R98cNGttag9q9yAOTzdbsqvIa7aNm5WffBZFpWYr2aWrklWAw==",
+            "dev": true,
            "engines": {
                "node": ">= 6"
            }
@ -12625,103 +12845,6 @@
                "url": "https://github.com/sponsors/sindresorhus"
            }
        },
-        "node_modules/openapi-to-postmanv2": {
-            "version": "4.21.0",
-            "resolved": "https://registry.npmjs.org/openapi-to-postmanv2/-/openapi-to-postmanv2-4.21.0.tgz",
-            "integrity": "sha512-UyHf2xOjDfl4bIaYrUP6w4UiR894gsiOt1HR93cWOxv33Ucw4rGG0B6ewQczSGBpvFMgri+KSSykNEVjsmB55w==",
-            "dependencies": {
-                "ajv": "8.11.0",
-                "ajv-draft-04": "1.0.0",
-                "ajv-formats": "2.1.1",
-                "async": "3.2.4",
-                "commander": "2.20.3",
-                "graphlib": "2.1.8",
-                "js-yaml": "4.1.0",
-                "json-schema-merge-allof": "0.8.1",
-                "lodash": "4.17.21",
-                "oas-resolver-browser": "2.5.6",
-                "object-hash": "3.0.0",
-                "path-browserify": "1.0.1",
-                "postman-collection": "4.2.1",
-                "swagger2openapi": "7.0.8",
-                "traverse": "0.6.6",
-                "yaml": "1.10.2"
-            },
-            "bin": {
-                "openapi2postmanv2": "bin/openapi2postmanv2.js"
-            },
-            "engines": {
-                "node": ">=8"
-            }
-        },
-        "node_modules/openapi-to-postmanv2/node_modules/ajv": {
-            "version": "8.11.0",
-            "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.11.0.tgz",
-            "integrity": "sha512-wGgprdCvMalC0BztXvitD2hC04YffAvtsUn93JbGXYLAtCUO4xd17mCCZQxUOItiBwZvJScWo8NIvQMQ71rdpg==",
-            "dependencies": {
-                "fast-deep-equal": "^3.1.1",
-                "json-schema-traverse": "^1.0.0",
-                "require-from-string": "^2.0.2",
-                "uri-js": "^4.2.2"
-            },
-            "funding": {
-                "type": "github",
-                "url": "https://github.com/sponsors/epoberezkin"
-            }
-        },
-        "node_modules/openapi-to-postmanv2/node_modules/commander": {
-            "version": "2.20.3",
-            "resolved": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz",
-            "integrity": "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ=="
-        },
-        "node_modules/openapi-to-postmanv2/node_modules/mime-db": {
-            "version": "1.52.0",
-            "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
-            "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==",
-            "engines": {
-                "node": ">= 0.6"
-            }
-        },
-        "node_modules/openapi-to-postmanv2/node_modules/mime-types": {
-            "version": "2.1.35",
-            "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
-            "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
-            "dependencies": {
-                "mime-db": "1.52.0"
-            },
-            "engines": {
-                "node": ">= 0.6"
-            }
-        },
-        "node_modules/openapi-to-postmanv2/node_modules/postman-collection": {
-            "version": "4.2.1",
-            "resolved": "https://registry.npmjs.org/postman-collection/-/postman-collection-4.2.1.tgz",
-            "integrity": "sha512-DFLt3/yu8+ldtOTIzmBUctoupKJBOVK4NZO0t68K2lIir9smQg7OdQTBjOXYy+PDh7u0pSDvD66tm93eBHEPHA==",
-            "dependencies": {
-                "@faker-js/faker": "5.5.3",
-                "file-type": "3.9.0",
-                "http-reasons": "0.1.0",
-                "iconv-lite": "0.6.3",
-                "liquid-json": "0.3.1",
-                "lodash": "4.17.21",
-                "mime-format": "2.0.1",
-                "mime-types": "2.1.35",
-                "postman-url-encoder": "3.0.5",
-                "semver": "7.5.4",
-                "uuid": "8.3.2"
-            },
-            "engines": {
-                "node": ">=10"
-            }
-        },
-        "node_modules/openapi-to-postmanv2/node_modules/uuid": {
-            "version": "8.3.2",
-            "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
-            "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==",
-            "bin": {
-                "uuid": "dist/bin/uuid"
-            }
-        },
        "node_modules/opener": {
            "version": "1.5.2",
            "license": "(WTFPL OR MIT)",
@ -12932,8 +13055,7 @@
        },
        "node_modules/path": {
            "version": "0.12.7",
-            "resolved": "https://registry.npmjs.org/path/-/path-0.12.7.tgz",
-            "integrity": "sha512-aXXC6s+1w7otVF9UletFkFcDsJeO7lSZBPUQhtb5O0xJe8LtYhj/GxldoL09bBj9+ZmE2hNoHqQSFMN5fikh4Q==",
+            "license": "MIT",
            "dependencies": {
                "process": "^0.11.1",
                "util": "^0.10.3"
@ -13009,13 +13131,11 @@
        },
        "node_modules/path/node_modules/inherits": {
            "version": "2.0.3",
-            "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz",
-            "integrity": "sha512-x00IRNXNy63jwGkJmzPigoySHbaqpNuzKbBOmzK+g2OdZpQ9w+sxCN+VSB3ja7IAge2OP2qpfxTjeNcyjmW1uw=="
+            "license": "ISC"
        },
        "node_modules/path/node_modules/util": {
            "version": "0.10.4",
-            "resolved": "https://registry.npmjs.org/util/-/util-0.10.4.tgz",
-            "integrity": "sha512-0Pm9hTQ3se5ll1XihRic3FDIku70C+iHUdT/W926rSgHV5QgXsYbKZN8MSC3tJtSkhuROzvsQjAaFENRXr+19A==",
+            "license": "MIT",
            "dependencies": {
                "inherits": "2.0.3"
            }
@ -13687,176 +13807,9 @@
                "postcss": "^8.4.31"
            }
        },
-        "node_modules/postman-code-generators": {
-            "version": "1.10.1",
-            "resolved": "https://registry.npmjs.org/postman-code-generators/-/postman-code-generators-1.10.1.tgz",
-            "integrity": "sha512-VGjqIFezG6tZRP3GvSbYjLDq3bQtXUeNDnBrN5CUIbgc9siu5Ubkva9hZnFpk+/qfi+PXs3CUR5mvV+WzpMhsg==",
-            "hasInstallScript": true,
-            "dependencies": {
-                "async": "3.2.2",
-                "lodash": "4.17.21",
-                "path": "0.12.7",
-                "postman-collection": "4.0.0",
-                "shelljs": "0.8.5"
-            },
-            "engines": {
-                "node": ">=12"
-            }
-        },
-        "node_modules/postman-code-generators/node_modules/async": {
-            "version": "3.2.2",
-            "resolved": "https://registry.npmjs.org/async/-/async-3.2.2.tgz",
-            "integrity": "sha512-H0E+qZaDEfx/FY4t7iLRv1W2fFI6+pyCeTw1uN20AQPiwqwM6ojPxHxdLv4z8hi2DtnW9BOckSspLucW7pIE5g=="
-        },
-        "node_modules/postman-code-generators/node_modules/lru-cache": {
-            "version": "6.0.0",
-            "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz",
-            "integrity": "sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==",
-            "dependencies": {
-                "yallist": "^4.0.0"
-            },
-            "engines": {
-                "node": ">=10"
-            }
-        },
-        "node_modules/postman-code-generators/node_modules/mime-db": {
-            "version": "1.48.0",
-            "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.48.0.tgz",
-            "integrity": "sha512-FM3QwxV+TnZYQ2aRqhlKBMHxk10lTbMt3bBkMAp54ddrNeVSfcQYOOKuGuy3Ddrm38I04If834fOUSq1yzslJQ==",
-            "engines": {
-                "node": ">= 0.6"
-            }
-        },
-        "node_modules/postman-code-generators/node_modules/mime-types": {
-            "version": "2.1.31",
-            "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.31.tgz",
-            "integrity": "sha512-XGZnNzm3QvgKxa8dpzyhFTHmpP3l5YNusmne07VUOXxou9CqUqYa/HBy124RqtVh/O2pECas/MOcsDgpilPOPg==",
-            "dependencies": {
-                "mime-db": "1.48.0"
-            },
-            "engines": {
-                "node": ">= 0.6"
-            }
-        },
-        "node_modules/postman-code-generators/node_modules/postman-collection": {
-            "version": "4.0.0",
-            "resolved": "https://registry.npmjs.org/postman-collection/-/postman-collection-4.0.0.tgz",
-            "integrity": "sha512-vDrXG/dclSu6RMqPqBz4ZqoQBwcj/a80sJYsQZmzWJ6dWgXiudPhwu6Vm3C1Hy7zX5W8A6am1Z6vb/TB4eyURA==",
-            "dependencies": {
-                "faker": "5.5.3",
-                "file-type": "3.9.0",
-                "http-reasons": "0.1.0",
-                "iconv-lite": "0.6.3",
-                "liquid-json": "0.3.1",
-                "lodash": "4.17.21",
-                "mime-format": "2.0.1",
-                "mime-types": "2.1.31",
-                "postman-url-encoder": "3.0.1",
-                "semver": "7.3.5",
-                "uuid": "8.3.2"
-            },
-            "engines": {
-                "node": ">=10"
-            }
-        },
-        "node_modules/postman-code-generators/node_modules/postman-url-encoder": {
-            "version": "3.0.1",
-            "resolved": "https://registry.npmjs.org/postman-url-encoder/-/postman-url-encoder-3.0.1.tgz",
-            "integrity": "sha512-dMPqXnkDlstM2Eya+Gw4MIGWEan8TzldDcUKZIhZUsJ/G5JjubfQPhFhVWKzuATDMvwvrWbSjF+8VmAvbu6giw==",
-            "dependencies": {
-                "punycode": "^2.1.1"
-            },
-            "engines": {
-                "node": ">=10"
-            }
-        },
-        "node_modules/postman-code-generators/node_modules/punycode": {
-            "version": "2.3.1",
-            "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
-            "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==",
-            "engines": {
-                "node": ">=6"
-            }
-        },
-        "node_modules/postman-code-generators/node_modules/semver": {
-            "version": "7.3.5",
-            "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.5.tgz",
-            "integrity": "sha512-PoeGJYh8HK4BTO/a9Tf6ZG3veo/A7ZVsYrSA6J8ny9nb3B1VrpkuN+z9OE5wfE5p6H4LchYZsegiQgbJD94ZFQ==",
-            "dependencies": {
-                "lru-cache": "^6.0.0"
-            },
-            "bin": {
-                "semver": "bin/semver.js"
-            },
-            "engines": {
-                "node": ">=10"
-            }
-        },
-        "node_modules/postman-code-generators/node_modules/uuid": {
-            "version": "8.3.2",
-            "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
-            "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==",
-            "bin": {
-                "uuid": "dist/bin/uuid"
-            }
-        },
-        "node_modules/postman-code-generators/node_modules/yallist": {
-            "version": "4.0.0",
-            "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz",
-            "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="
-        },
-        "node_modules/postman-collection": {
-            "version": "4.4.0",
-            "resolved": "https://registry.npmjs.org/postman-collection/-/postman-collection-4.4.0.tgz",
-            "integrity": "sha512-2BGDFcUwlK08CqZFUlIC8kwRJueVzPjZnnokWPtJCd9f2J06HBQpGL7t2P1Ud1NEsK9NHq9wdipUhWLOPj5s/Q==",
-            "dependencies": {
-                "@faker-js/faker": "5.5.3",
-                "file-type": "3.9.0",
-                "http-reasons": "0.1.0",
-                "iconv-lite": "0.6.3",
-                "liquid-json": "0.3.1",
-                "lodash": "4.17.21",
-                "mime-format": "2.0.1",
-                "mime-types": "2.1.35",
-                "postman-url-encoder": "3.0.5",
-                "semver": "7.5.4",
-                "uuid": "8.3.2"
-            },
-            "engines": {
-                "node": ">=10"
-            }
-        },
-        "node_modules/postman-collection/node_modules/mime-db": {
-            "version": "1.52.0",
-            "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
-            "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==",
-            "engines": {
-                "node": ">= 0.6"
-            }
-        },
-        "node_modules/postman-collection/node_modules/mime-types": {
-            "version": "2.1.35",
-            "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
-            "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
-            "dependencies": {
-                "mime-db": "1.52.0"
-            },
-            "engines": {
-                "node": ">= 0.6"
-            }
-        },
-        "node_modules/postman-collection/node_modules/uuid": {
-            "version": "8.3.2",
-            "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
-            "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==",
-            "bin": {
-                "uuid": "dist/bin/uuid"
-            }
-        },
        "node_modules/postman-url-encoder": {
            "version": "3.0.5",
-            "resolved": "https://registry.npmjs.org/postman-url-encoder/-/postman-url-encoder-3.0.5.tgz",
-            "integrity": "sha512-jOrdVvzUXBC7C+9gkIkpDJ3HIxOHTIqjpQ4C1EMt1ZGeMvSEpbFCKq23DEfgsj46vMnDgyQf+1ZLp2Wm+bKSsA==",
+            "license": "Apache-2.0",
            "dependencies": {
                "punycode": "^2.1.1"
            },
@ -13866,8 +13819,7 @@
        },
        "node_modules/postman-url-encoder/node_modules/punycode": {
            "version": "2.3.1",
-            "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
-            "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==",
+            "license": "MIT",
            "engines": {
                "node": ">=6"
            }
@ -15083,9 +15035,9 @@
            }
        },
        "node_modules/react-tooltip": {
-            "version": "5.27.1",
-            "resolved": "https://registry.npmjs.org/react-tooltip/-/react-tooltip-5.27.1.tgz",
-            "integrity": "sha512-a+micPXcMOMt11CYlwJD4XShcqGziasHco4NPe1OFw298WBTILMyzUgNC1LAFViAe791JdHNVSJIpzhZm2MvDA==",
+            "version": "5.27.0",
+            "resolved": "https://registry.npmjs.org/react-tooltip/-/react-tooltip-5.27.0.tgz",
+            "integrity": "sha512-JXROcdfCEbCqkAkh8LyTSP3guQ0dG53iY2E2o4fw3D8clKzziMpE6QG6CclDaHELEKTzpMSeAOsdtg0ahoQosw==",
            "dependencies": {
                "@floating-ui/dom": "^1.6.1",
                "classnames": "^2.3.0"
@ -15501,6 +15453,10 @@
                "node": "*"
            }
        },
+        "node_modules/require-main-filename": {
+            "version": "2.0.0",
+            "license": "ISC"
+        },
        "node_modules/requires-port": {
            "version": "1.0.0",
            "license": "MIT"
@ -15965,6 +15921,10 @@
                "node": ">= 0.8.0"
            }
        },
+        "node_modules/set-blocking": {
+            "version": "2.0.0",
+            "license": "ISC"
+        },
        "node_modules/set-function-length": {
            "version": "1.2.2",
            "license": "MIT",
@ -16828,11 +16788,6 @@
            "version": "0.0.3",
            "license": "MIT"
        },
-        "node_modules/traverse": {
-            "version": "0.6.6",
-            "resolved": "https://registry.npmjs.org/traverse/-/traverse-0.6.6.tgz",
-            "integrity": "sha512-kdf4JKs8lbARxWdp7RKdNzoJBhGUcIalSYibuGyHJbmk40pOysQ0+QPvlkCOICOivDWU2IJo2rkrxyTK2AH4fw=="
-        },
        "node_modules/trim-lines": {
            "version": "3.0.1",
            "license": "MIT",
@ -17390,35 +17345,26 @@
        },
        "node_modules/validate.io-array": {
            "version": "1.0.6",
-            "resolved": "https://registry.npmjs.org/validate.io-array/-/validate.io-array-1.0.6.tgz",
-            "integrity": "sha512-DeOy7CnPEziggrOO5CZhVKJw6S3Yi7e9e65R1Nl/RTN1vTQKnzjfvks0/8kQ40FP/dsjRAOd4hxmJ7uLa6vxkg=="
+            "license": "MIT"
        },
        "node_modules/validate.io-function": {
-            "version": "1.0.2",
-            "resolved": "https://registry.npmjs.org/validate.io-function/-/validate.io-function-1.0.2.tgz",
-            "integrity": "sha512-LlFybRJEriSuBnUhQyG5bwglhh50EpTL2ul23MPIuR1odjO7XaMLFV8vHGwp7AZciFxtYOeiSCT5st+XSPONiQ=="
+            "version": "1.0.2"
        },
        "node_modules/validate.io-integer": {
            "version": "1.0.5",
-            "resolved": "https://registry.npmjs.org/validate.io-integer/-/validate.io-integer-1.0.5.tgz",
-            "integrity": "sha512-22izsYSLojN/P6bppBqhgUDjCkr5RY2jd+N2a3DCAUey8ydvrZ/OkGvFPR7qfOpwR2LC5p4Ngzxz36g5Vgr/hQ==",
            "dependencies": {
                "validate.io-number": "^1.0.3"
            }
        },
        "node_modules/validate.io-integer-array": {
            "version": "1.0.0",
-            "resolved": "https://registry.npmjs.org/validate.io-integer-array/-/validate.io-integer-array-1.0.0.tgz",
-            "integrity": "sha512-mTrMk/1ytQHtCY0oNO3dztafHYyGU88KL+jRxWuzfOmQb+4qqnWmI+gykvGp8usKZOM0H7keJHEbRaFiYA0VrA==",
            "dependencies": {
                "validate.io-array": "^1.0.3",
                "validate.io-integer": "^1.0.4"
            }
        },
        "node_modules/validate.io-number": {
-            "version": "1.0.3",
-            "resolved": "https://registry.npmjs.org/validate.io-number/-/validate.io-number-1.0.3.tgz",
-            "integrity": "sha512-kRAyotcbNaSYoDnXvb4MHg/0a1egJdLwS6oJ38TJY7aw9n93Fl/3blIXdyYvPOp55CNxywooG/3BcrwNrBpcSg=="
+            "version": "1.0.3"
        },
        "node_modules/value-equal": {
            "version": "1.0.1",
@ -17849,6 +17795,10 @@
                "node": ">= 8"
            }
        },
+        "node_modules/which-module": {
+            "version": "2.0.1",
+            "license": "ISC"
+        },
        "node_modules/which-typed-array": {
            "version": "1.1.15",
            "license": "MIT",
--- a/website/package.json
+++ b/website/package.json
@ -4,8 +4,8 @@
    "private": true,
    "license": "MIT",
    "scripts": {
-        "build": "cp ../docker-compose.yml static/docker-compose.yml && cp ../schema.yml static/schema.yaml && docusaurus gen-api-docs all && cross-env NODE_OPTIONS='--max_old_space_size=65536' docusaurus build",
-        "build-bundled": "cp ../schema.yml static/schema.yaml && docusaurus gen-api-docs all && cross-env NODE_OPTIONS='--max_old_space_size=65536' docusaurus build",
+        "build": "cp ../docker-compose.yml static/docker-compose.yml && cp ../schema.yml static/schema.yaml && docusaurus gen-api-docs all && docusaurus build",
+        "build-bundled": "cp ../schema.yml static/schema.yaml && docusaurus gen-api-docs all && docusaurus build",
        "deploy": "docusaurus deploy",
        "docusaurus": "docusaurus",
        "lint:lockfile": "lockfile-lint --path package.json --type npm --allowed-hosts npm --validate-https",
@ -27,7 +27,7 @@
        "clsx": "^2.1.1",
        "disqus-react": "^1.1.5",
        "docusaurus-plugin-openapi-docs": "^3.0.0-beta.10",
-        "docusaurus-theme-openapi-docs": "^3.0.1",
+        "docusaurus-theme-openapi-docs": "^3.0.0-beta.10",
        "postcss": "^8.4.39",
        "prism-react-renderer": "^2.3.1",
        "react": "^18.3.1",
@ -35,7 +35,7 @@
        "react-dom": "^18.3.1",
        "react-feather": "^2.0.10",
        "react-toggle": "^4.1.3",
-        "react-tooltip": "^5.27.1",
+        "react-tooltip": "^5.27.0",
        "remark-github": "^12.0.0"
    },
    "browserslist": {
@ -55,7 +55,6 @@
        "@docusaurus/tsconfig": "^3.4.0",
        "@docusaurus/types": "^3.3.2",
        "@types/react": "^18.3.3",
-        "cross-env": "^7.0.3",
        "lockfile-lint": "^4.14.0",
        "prettier": "3.3.2",
        "typescript": "~5.5.3"
--- a/website/sidebars.js
+++ b/website/sidebars.js
@ -253,7 +253,6 @@ const docsSidebar = {
                    label: "Executors",
                    items: [
                        "flow/executors/if-flow",
-                        "flow/executors/sfe",
                        "flow/executors/user-settings",
                        "flow/executors/headless",
                    ],
Author	SHA1	Message	Date
Jens Langhammer	36e418436b	Revert "Revert "core: applications api: add option to only list apps with launch url (#10336 )"" This reverts commit `1eb9d7a9d6`.	2024-07-04 12:58:29 +02:00
Jens Langhammer	8b0058ada0	detect RAC differently Signed-off-by: Jens Langhammer <jens@goauthentik.io>	2024-07-04 12:58:25 +02:00
Jens Langhammer	3abf1421a2	return full URL when possible Signed-off-by: Jens Langhammer <jens@goauthentik.io>	2024-07-04 12:57:56 +02:00
Jens Langhammer	70c7454c69	return authentik launch URL Signed-off-by: Jens Langhammer <jens@goauthentik.io>	2024-07-04 12:52:26 +02:00
Jens Langhammer	1eb9d7a9d6	Revert "core: applications api: add option to only list apps with launch url (#10336 )" This reverts commit `42e0ff6492`.	2024-07-04 12:50:46 +02:00