version: 1
metadata:
  name: Xiteng password recovery
  labels:
    blueprints.goauthentik.io/instantiate: "true"
entries:
  - id: recovery-flow
    model: authentik_flows.flow
    state: present
    identifiers:
      slug: xiteng-recovery
    attrs:
      name: Xiteng 密码恢复
      title: 设置新密码
      designation: recovery
      authentication: require_unauthenticated

  - id: password
    model: authentik_stages_prompt.prompt
    state: present
    identifiers:
      name: xiteng-recovery-password
    attrs:
      field_key: password
      label: 新密码
      type: password
      required: true
      order: 0
      placeholder: 新密码
      placeholder_expression: false

  - id: password-repeat
    model: authentik_stages_prompt.prompt
    state: present
    identifiers:
      name: xiteng-recovery-password-repeat
    attrs:
      field_key: password_repeat
      label: 再次输入新密码
      type: password
      required: true
      order: 1
      placeholder: 再次输入新密码
      placeholder_expression: false

  - id: password-stage
    model: authentik_stages_prompt.promptstage
    state: present
    identifiers:
      name: Xiteng 设置新密码
    attrs:
      fields:
        - !KeyOf password
        - !KeyOf password-repeat
      validation_policies: []

  - id: user-write
    model: authentik_stages_user_write.userwritestage
    state: present
    identifiers:
      name: xiteng-recovery-user-write
    attrs:
      user_creation_mode: never_create

  - id: user-login
    model: authentik_stages_user_login.userloginstage
    state: present
    identifiers:
      name: xiteng-recovery-user-login

  - model: authentik_flows.flowstagebinding
    state: present
    identifiers:
      target: !KeyOf recovery-flow
      stage: !KeyOf password-stage
      order: 10

  - model: authentik_flows.flowstagebinding
    state: present
    identifiers:
      target: !KeyOf recovery-flow
      stage: !KeyOf user-write
      order: 20

  - model: authentik_flows.flowstagebinding
    state: present
    identifiers:
      target: !KeyOf recovery-flow
      stage: !KeyOf user-login
      order: 30

  - model: authentik_brands.brand
    state: present
    identifiers:
      domain: authentik-default
      default: true
    attrs:
      flow_recovery: !KeyOf recovery-flow