{ lib, stdenv, buildNpmPackage, fetchFromGitHub, python3, ... }:

buildNpmPackage rec {
  pname = "authentik-web";
  version = "2023.8.3";

  src = fetchFromGitHub {
    owner = "goauthentik";
    repo = "authentik";
    rev = "version/${version}";
    hash = "sha256-dpGvxhA5NWO8LKrGXzalV9EVn/nUIj6sMy2HdY5tjlM=";
  };

  sourceRoot = "source/web";

  npmDepsHash = "sha256-kCKtrsUA7VLHzf9SR/UW1z3RCpQc5r5sa/f4dxonTZ0=";
  npmPackFlags = [ "--ignore-scripts" ];
  npmBuildScript = "build";

  nativeBuildInputs = [ python3 ];

  installPhase = ''
    mkdir $out
    cp -r dist/ $out/
    cp -r authentik/ $out/
  '';
}