Yes, that's exactly what I'm saying. The AP is connected to a switch, with the uplink being configured as a trunk port. The VLANs which terminate at the AP are statically assigned on the uplink port of the AP, no dynamic assignments taking place. The AP acts as a 802.1X supplicant from the switch's point of view. The wireless clients in turn are supplicants to the AP. Once the AP is successfully authenticated the uplink port switches from access to trunk.
But it's in the docs as well, see
IEEE 802.1X port-based authentication is configured on a device to prevent unauthorized devices (supplicants) from gaining access to the network. The device can combine the function of a router, switch, and access point, depending on the fixed configuration or installed modules. The switch functions are provided by either built-in switch ports or a plug-in module with switch ports. This feature supports both access ports and trunk ports.