stages_authenticator_validate_create

POST 
/api/v3//stages/authenticator/validate/

AuthenticatorValidateStage Viewset

Request

application/json

Bodyrequired

namestringrequired
Possible values: non-empty
flow_set object[]
Array [
namestringrequired
Possible values: non-empty
slugstringrequired
Visible in the URL.
Possible values: non-empty and <= 50 characters, Value must match regular expression ^[-a-zA-Z0-9_]+$
titlestringrequired
Shown as the Title in Flow pages.
Possible values: non-empty
designationFlowDesignationEnum (string)required
Decides what this Flow is used for. For example, the Authentication flow is redirect to when an un-authenticated user visits authentik.
Possible values: [authentication, authorization, invalidation, enrollment, unenrollment, recovery, stage_configuration]
policy_engine_modePolicyEngineMode (string)
Possible values: [all, any]
compatibility_modeboolean
Enable compatibility mode, increases compatibility with password managers on mobile devices.
layoutFlowLayoutEnum (string)
Possible values: [stacked, content_left, content_right, sidebar_left, sidebar_right]
denied_actionDeniedActionEnum (string)
Configure what should happen when a flow denies access to a user.
Possible values: [message_continue, message, continue]
]
not_configured_actionNotConfiguredActionEnum (string)
Possible values: [skip, deny, configure]
device_classesDeviceClassesEnum (string)[]
Device classes which can be used to authenticate
Possible values: [static, totp, webauthn, duo, sms, email]
configuration_stagesuuid[]
Stages used to configure Authenticator when user doesn't have any compatible devices. After this configuration Stage passes, the user is not prompted again.
last_auth_thresholdstring
If any of the user's device has been used within this threshold, this stage will be skipped
Possible values: non-empty
webauthn_user_verificationUserVerificationEnum (string)
Enforce user verification for WebAuthn devices.
Possible values: [required, preferred, discouraged]
webauthn_allowed_device_typesuuid[]

Responses

201

application/json

Schema

Schema

pkuuidrequired
namestringrequired
componentstringrequired
Get object type so that we know how to edit the object
verbose_namestringrequired
Return object's verbose_name
verbose_name_pluralstringrequired
Return object's plural verbose_name
meta_model_namestringrequired
Return internal model name
flow_set object[]
Array [
pkuuidrequired
policybindingmodel_ptr_iduuidrequired
namestringrequired
slugstringrequired
Visible in the URL.
Possible values: <= 50 characters, Value must match regular expression ^[-a-zA-Z0-9_]+$
titlestringrequired
Shown as the Title in Flow pages.
designationFlowDesignationEnum (string)required
Decides what this Flow is used for. For example, the Authentication flow is redirect to when an un-authenticated user visits authentik.
Possible values: [authentication, authorization, invalidation, enrollment, unenrollment, recovery, stage_configuration]
backgroundstringrequired
Get the URL to the background image. If the name is /static or starts with http it is returned as-is
policy_engine_modePolicyEngineMode (string)
Possible values: [all, any]
compatibility_modeboolean
Enable compatibility mode, increases compatibility with password managers on mobile devices.
export_urlstringrequired
Get export URL for flow
layoutFlowLayoutEnum (string)
Possible values: [stacked, content_left, content_right, sidebar_left, sidebar_right]
denied_actionDeniedActionEnum (string)
Configure what should happen when a flow denies access to a user.
Possible values: [message_continue, message, continue]
]
not_configured_actionNotConfiguredActionEnum (string)
Possible values: [skip, deny, configure]
device_classesDeviceClassesEnum (string)[]
Device classes which can be used to authenticate
Possible values: [static, totp, webauthn, duo, sms, email]
configuration_stagesuuid[]
Stages used to configure Authenticator when user doesn't have any compatible devices. After this configuration Stage passes, the user is not prompted again.
last_auth_thresholdstring
If any of the user's device has been used within this threshold, this stage will be skipped
webauthn_user_verificationUserVerificationEnum (string)
Enforce user verification for WebAuthn devices.
Possible values: [required, preferred, discouraged]
webauthn_allowed_device_typesuuid[]
webauthn_allowed_device_types_obj object[]required
Array [
aaguiduuidrequired
descriptionstringrequired
]

Example (auto)

{
  "pk": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
  "name": "string",
  "component": "string",
  "verbose_name": "string",
  "verbose_name_plural": "string",
  "meta_model_name": "string",
  "flow_set": [
    {
      "pk": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
      "policybindingmodel_ptr_id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
      "name": "string",
      "slug": "string",
      "title": "string",
      "designation": "authentication",
      "background": "string",
      "policy_engine_mode": "all",
      "compatibility_mode": true,
      "export_url": "string",
      "layout": "stacked",
      "denied_action": "message_continue"
    }
  ],
  "not_configured_action": "skip",
  "device_classes": [
    "static"
  ],
  "configuration_stages": [
    "3fa85f64-5717-4562-b3fc-2c963f66afa6"
  ],
  "last_auth_threshold": "string",
  "webauthn_user_verification": "required",
  "webauthn_allowed_device_types": [
    "3fa85f64-5717-4562-b3fc-2c963f66afa6"
  ],
  "webauthn_allowed_device_types_obj": [
    {
      "aaguid": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
      "description": "string"
    }
  ]
}

400

application/json

Schema

Schema

non_field_errorsstring[]

codestring

property name*any

Validation Error

Example (auto)

{
  "non_field_errors": [
    "string"
  ],
  "code": "string"
}

403

application/json

Schema

Schema

detailstringrequired
codestring

Example (auto)

{
  "detail": "string",
  "code": "string"
}

Authorization: http

name: authentiktype: httpscheme: bearer

• csharp
• curl
• dart
• go
• http
• java
• javascript
• kotlin
• c
• nodejs
• objective-c
• ocaml
• php
• powershell
• python
• r
• ruby
• rust
• shell
• swift

• HTTPCLIENT
• RESTSHARP

Request Collapse all

Base URL

/api/v3

Auth

Bearer Token

Body required

{
  "name": "string",
  "flow_set": [
    {
      "name": "string",
      "slug": "string",
      "title": "string",
      "designation": "authentication",
      "policy_engine_mode": "all",
      "compatibility_mode": true,
      "layout": "stacked",
      "denied_action": "message_continue"
    }
  ],
  "not_configured_action": "skip",
  "device_classes": [
    "static"
  ],
  "configuration_stages": [
    "3fa85f64-5717-4562-b3fc-2c963f66afa6"
  ],
  "last_auth_threshold": "string",
  "webauthn_user_verification": "required",
  "webauthn_allowed_device_types": [
    "3fa85f64-5717-4562-b3fc-2c963f66afa6"
  ]
}