version: 1
metadata:
  labels:
    blueprints.goauthentik.io/instantiate: "false"
  name: Example - Login with email magic link
entries:
  - identifiers:
      slug: default-authentication-flow
    model: authentik_flows.flow
    id: flow
    attrs:
      name: Default Authentication Flow
      title: Welcome to authentik!
      designation: authentication
      authentication: require_unauthenticated
  - identifiers:
      name: default-authentication-identification
    id: default-authentication-identification
    model: authentik_stages_identification.identificationstage
    attrs:
      user_fields:
        - email
        - username
      template: stages/identification/login.html
  - identifiers:
      name: default-authentication-email-magic-link
    id: default-authentication-email-magic-link
    model: authentik_stages_email.emailstage
    attrs:
      use_global_settings: true
      token_expiry: minutes=30
      subject: authentik sign-in link
      template: email/account_confirmation.html
      activate_user_on_success: false
      recovery_max_attempts: 5
      recovery_cache_timeout: minutes=5
  - identifiers:
      name: default-authentication-login
    id: default-authentication-login
    model: authentik_stages_user_login.userloginstage
  - identifiers:
      target: !KeyOf flow
      stage: !KeyOf default-authentication-identification
      order: 10
    model: authentik_flows.flowstagebinding
  - identifiers:
      target: !KeyOf flow
      stage: !KeyOf default-authentication-email-magic-link
      order: 20
    model: authentik_flows.flowstagebinding
  - identifiers:
      target: !KeyOf flow
      stage: !KeyOf default-authentication-login
      order: 100
    model: authentik_flows.flowstagebinding
