diff --git a/pkgs/by-name/au/authentik/package.nix b/pkgs/by-name/au/authentik/package.nix
index 1020b00736780..d88476a32a9a6 100644
--- a/pkgs/by-name/au/authentik/package.nix
+++ b/pkgs/by-name/au/authentik/package.nix
@@ -8,7 +8,7 @@
   bash,
   chromedriver,
   nodejs_24,
-  python312,
+  python3,
   makeWrapper,
 }:
 
@@ -202,7 +202,7 @@ let
     ];
   };
 
-  python = python312.override {
+  python = python3.override {
     self = python;
     packageOverrides = final: prev: {
       # https://github.com/goauthentik/authentik/pull/16324
diff --git a/pkgs/development/python-modules/coreapi/default.nix b/pkgs/development/python-modules/coreapi/default.nix
index 6a0dd2026df43..7c810a0fb0c5b 100644
--- a/pkgs/development/python-modules/coreapi/default.nix
+++ b/pkgs/development/python-modules/coreapi/default.nix
@@ -2,43 +2,40 @@
   lib,
   fetchFromGitHub,
   buildPythonPackage,
-  pythonAtLeast,
+  setuptools,
   django,
   coreschema,
   itypes,
   uritemplate,
   requests,
-  pytest,
+  standard-cgi,
+  pytestCheckHook,
 }:
 
 buildPythonPackage rec {
   pname = "coreapi";
   version = "2.3.3";
-  format = "setuptools";
-
-  # cgi module was removed in 3.13, upstream repo archived since 2019
-  disabled = pythonAtLeast "3.13";
+  pyproject = true;
 
   src = fetchFromGitHub {
     repo = "python-client";
     owner = "core-api";
-    rev = version;
-    sha256 = "1c6chm3q3hyn8fmjv23qgc79ai1kr3xvrrkp4clbqkssn10k7mcw";
+    tag = version;
+    hash = "sha256-nNUzQbBaT7woI3fmvPvIM0SVDnt4iC2rQ9bDgUeFzLA=";
   };
 
-  propagatedBuildInputs = [
+  build-system = [ setuptools ];
+
+  dependencies = [
     django
     coreschema
     itypes
     uritemplate
     requests
+    standard-cgi
   ];
 
-  nativeCheckInputs = [ pytest ];
-  checkPhase = ''
-    cd ./tests
-    pytest
-  '';
+  nativeCheckInputs = [ pytestCheckHook ];
 
   meta = {
     description = "Python client library for Core API";