ory-client 1.15.5 → 1.22.63

data/lib/ory-client/models/normalized_project_revision.rb

@@ -1,12 +1,12 @@
 =begin
 #Ory APIs
 
-#Documentation for all public and administrative Ory APIs. Administrative APIs can only be accessed with a valid Personal Access Token. Public APIs are mostly used in browsers. 
+## Introduction Documentation for all public and administrative Ory APIs. Administrative APIs can only be accessed with a valid Personal Access Token. Public APIs are mostly used in browsers.  ## SDKs This document describes the APIs available in the Ory Network. The APIs are available as SDKs for the following languages:  | Language       | Download SDK                                                     | Documentation                                                                        | | -------------- | ---------------------------------------------------------------- | ------------------------------------------------------------------------------------ | | Dart           | [pub.dev](https://pub.dev/packages/ory_client)                   | [README](https://github.com/ory/sdk/blob/master/clients/client/dart/README.md)       | | .NET           | [nuget.org](https://www.nuget.org/packages/Ory.Client/)          | [README](https://github.com/ory/sdk/blob/master/clients/client/dotnet/README.md)     | | Elixir         | [hex.pm](https://hex.pm/packages/ory_client)                     | [README](https://github.com/ory/sdk/blob/master/clients/client/elixir/README.md)     | | Go             | [github.com](https://github.com/ory/client-go)                   | [README](https://github.com/ory/sdk/blob/master/clients/client/go/README.md)         | | Java           | [maven.org](https://search.maven.org/artifact/sh.ory/ory-client) | [README](https://github.com/ory/sdk/blob/master/clients/client/java/README.md)       | | JavaScript     | [npmjs.com](https://www.npmjs.com/package/@ory/client)           | [README](https://github.com/ory/sdk/blob/master/clients/client/typescript/README.md) | | JavaScript (With fetch) | [npmjs.com](https://www.npmjs.com/package/@ory/client-fetch)           | [README](https://github.com/ory/sdk/blob/master/clients/client/typescript-fetch/README.md) |  | PHP            | [packagist.org](https://packagist.org/packages/ory/client)       | [README](https://github.com/ory/sdk/blob/master/clients/client/php/README.md)        | | Python         | [pypi.org](https://pypi.org/project/ory-client/)                 | [README](https://github.com/ory/sdk/blob/master/clients/client/python/README.md)     | | Ruby           | [rubygems.org](https://rubygems.org/gems/ory-client)             | [README](https://github.com/ory/sdk/blob/master/clients/client/ruby/README.md)       | | Rust           | [crates.io](https://crates.io/crates/ory-client)                 | [README](https://github.com/ory/sdk/blob/master/clients/client/rust/README.md)       | 
 
-The version of the OpenAPI document: v1.15.5
+The version of the OpenAPI document: v1.22.63
 Contact: support@ory.sh
 Generated by: https://openapi-generator.tech
-Generator version: 7.7.0
+Generator version: 7.17.0
 
 =end
 
@@ -14,22 +14,74 @@ require 'date'
 require 'time'
 
 module OryClient
-  class NormalizedProjectRevision
+  class NormalizedProjectRevision < ApiModelBase
+    # Holds the URL to the account experience's Contact page. This governs the \"contact_url\" setting.
+    attr_accessor :account_experience_contact_url
+
+    # The Account Experience's Custom Translations  Contains all Custom Translations for this project.
+    attr_accessor :account_experience_custom_translations
+
+    # Holds the default locale for the account experience. This governs the \"default_locale\" setting.
+    attr_accessor :account_experience_default_locale
+
+    # The Account Experience's Enabled Locales  This governs the locales that are available in the account experience. This governs the \"enabled_locales\" setting.
+    attr_accessor :account_experience_enabled_locales
+
+    # Holds the URL to the account experience's dark theme favicon (currently unused). This governs the \"favicon_dark\" setting.
+    attr_accessor :account_experience_favicon_dark
+
+    # Holds the URL to the account experience's favicon. This governs the \"favicon_light\" setting.
+    attr_accessor :account_experience_favicon_light
+
+    # Whether to hide the Ory branding badge on the account experience. This governs the \"hide_ory_branding\" setting.
+    attr_accessor :account_experience_hide_ory_branding
+
+    # Whether to hide the registration link on the account experience login card. This governs the \"hide_registration_link\" setting.
+    attr_accessor :account_experience_hide_registration_link
+
+    # Holds the URL to the account experience's language behavior.  Can be one of: `respect_accept_language`: Respect the `Accept-Language` header. `force_default`: Force the default language. This governs the \"locale_behavior\" setting.
+    attr_accessor :account_experience_locale_behavior
+
+    # Holds the URL to the account experience's dark theme logo (currently unused). This governs the \"logo_dark\" setting.
+    attr_accessor :account_experience_logo_dark
+
+    # Holds the URL to the account experience's logo. This governs the \"logo_light\" setting.
+    attr_accessor :account_experience_logo_light
+
+    # Holds the URL to the account experience's Privacy Policy page. This governs the \"privacy_policy_url\" setting.
+    attr_accessor :account_experience_privacy_policy_url
+
+    # Holds the URL to the account experience's Terms of Service page. This governs the \"terms_of_service_url\" setting.
+    attr_accessor :account_experience_terms_of_service_url
+
+    # Holds the URL to the account experience's dark theme variables. This governs the \"theme_variables_dark\" setting.
+    attr_accessor :account_experience_theme_variables_dark
+
+    # Holds the URL to the account experience's light theme variables. This governs the \"theme_variables_light\" setting.
+    attr_accessor :account_experience_theme_variables_light
+
     # The Project's Revision Creation Date
     attr_accessor :created_at
 
-    # Whether to disable the account experience welcome screen, which is hosted under `/ui/welcome`.
+    # Whether to disable the account experience welcome screen, which is hosted under `/ui/welcome`. This governs the \"disable_welcome_screen\" setting.
     attr_accessor :disable_account_experience_welcome_screen
 
-    # Whether the new account experience is enabled and reachable.
+    # Whether the new account experience is enabled and reachable. This governs the \"enable_ax_v2\" setting.
     attr_accessor :enable_ax_v2
 
+    # A list of custom claims which are allowed to be added top level to the Access Token. They cannot override reserved claims.  This governs the \"oauth2.allowed_top_level_claims\" setting.
     attr_accessor :hydra_oauth2_allowed_top_level_claims
 
     # Automatically grant authorized OAuth2 Scope in OAuth2 Client Credentials Flow.  Each OAuth2 Client is allowed to request a predefined OAuth2 Scope (for example `read write`). If this option is enabled, the full scope is automatically granted when performing the OAuth2 Client Credentials flow.  If disabled, the OAuth2 Client has to request the scope in the OAuth2 request by providing the `scope` query parameter.  Setting this option to true is common if you need compatibility with MITREid.  This governs the \"oauth2.client_credentials.default_grant_allowed_scope\" setting.
     attr_accessor :hydra_oauth2_client_credentials_default_grant_allowed_scope
 
-    # Set to true if you want to exclude claim `nbf (not before)` part of access token.  This governs the \"oauth2.exclude_not_before_claim\" setting.
+    # Configures how often a non-interactive device should poll the OAuth 2.0 Device Authorization Grant token endpoint. Purely informational — the value is reported to the device in the \"interval\" response field of the device authorization response. Hydra defaults to 5s when this is left empty.  This is an Enterprise feature.  This governs the \"oauth2.device_authorization.token_polling_interval\" setting.
+    attr_accessor :hydra_oauth2_device_authorization_token_polling_interval
+
+    # Picks a preset for the OAuth 2.0 Device Authorization Grant user_code length and character set. \"high\" produces the longest codes (most resistant to brute force); \"low\" the shortest (easiest for the end user to read and enter). Leave empty to keep Hydra's default preset.  This is an Enterprise feature.  This governs the \"oauth2.device_authorization.user_code.entropy_preset\" setting.
+    attr_accessor :hydra_oauth2_device_authorization_user_code_entropy_preset
+
+    # Set to true if you want to omit the `nbf` (not valid before) claim in the access token.  This governs the \"oauth2.exclude_not_before_claim\" setting.
     attr_accessor :hydra_oauth2_exclude_not_before_claim
 
     # Configures if the issued at (`iat`) claim is required in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523).  If set to `false`, the `iat` claim is required. Set this value to `true` only after careful consideration.  This governs the \"oauth2.grant.jwt.iat_optional\" setting.
@@ -41,6 +93,15 @@ module OryClient
     # Configures what the maximum age of a JWT assertion used in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523) can be.  This feature uses the `exp` claim and `iat` claim to calculate assertion age. Assertions exceeding the max age will be denied.  Useful as a safety measure and recommended to keep below 720h.  This governs the \"oauth2.grant.jwt.max_ttl\" setting.
     attr_accessor :hydra_oauth2_grant_jwt_max_ttl
 
+    # Configures whether the audience (`aud`) claim from the assertion JSON Web Token (JWT) in the JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523) is omitted from the resulting access token.  When set to `true` (the default for new projects), the audience values from the inbound assertion JWT are not granted in the access token. Set to `false` to copy the assertion audience into the access token (the legacy behavior).  This governs the \"oauth2.grant.jwt.omit_assertion_audience\" setting.
+    attr_accessor :hydra_oauth2_grant_jwt_omit_assertion_audience
+
+    # Configures the OAuth2 Grant Refresh Token Rotation Grace Period  If set to `null` or `\"0s\"`, the graceful refresh token rotation is disabled.  This governs the \"oauth2.grant.refresh_token.rotation_grace_period\" setting.
+    attr_accessor :hydra_oauth2_grant_refresh_token_rotation_grace_period
+
+    # Configures the OAuth2 Grant Refresh Token Rotation Grace Reuse Count.  The maximum number of times a refresh token can be reused within the grace period. If set to `null` or `0`, the limit is disabled.  This governs the \"oauth2.grant.refresh_token.rotation_grace_reuse_count\" setting.
+    attr_accessor :hydra_oauth2_grant_refresh_token_rotation_grace_reuse_count
+
     # Set to false if you don't want to mirror custom claims under 'ext'.  This governs the \"oauth2.mirror_top_level_claims\" setting.
     attr_accessor :hydra_oauth2_mirror_top_level_claims
 
@@ -50,12 +111,19 @@ module OryClient
     # Configures whether PKCE should be enforced for OAuth2 Clients without a client secret (public clients).  This governs the \"oauth2.pkce.enforced_for_public_clients\" setting.
     attr_accessor :hydra_oauth2_pkce_enforced_for_public_clients
 
+    # Set to true to keep custom claims that are not promoted to the top level in the 'ext' claim. Only applies when mirror_top_level_claims is false.  This governs the \"oauth2.preserve_ext_claims\" setting.
+    attr_accessor :hydra_oauth2_preserve_ext_claims
+
     # Sets the Refresh Token Hook Endpoint. If set this endpoint will be called during the OAuth2 Token Refresh grant update the OAuth2 Access Token claims.  This governs the \"oauth2.refresh_token_hook\" setting.
     attr_accessor :hydra_oauth2_refresh_token_hook
 
     # Sets the token hook endpoint for all grant types. If set it will be called while providing token to customize claims.  This governs the \"oauth2.token_hook.url\" setting.
     attr_accessor :hydra_oauth2_token_hook
 
+    # Sets a per-project Access Token, Refresh Token, and Authorization Code prefix. The literal \"%s\" is replaced at issuance time with the token kind: \"at\" (access token), \"rt\" (refresh token), or \"ac\" (authorization code). For example, \"acme_%s_\" yields \"acme_at_…\", \"acme_rt_…\", and \"acme_ac_…\".  Must be a fmt.Sprintf template with exactly one \"%s\" substitution. The rendered prefix may contain only ASCII letters, digits, and underscores — no other \"%\" directives (\"%d\", \"%%\", positional or width-flagged verbs), no hyphens, dots, slashes, whitespace, quotes, or non-ASCII characters. Leave empty to keep the default \"ory_%s_\" prefix.  This is an Enterprise feature.  This governs the \"oauth2.token_prefix\" setting.
+    attr_accessor :hydra_oauth2_token_prefix
+
+    # The OpenID Connect Dynamic Client Registration specification has no concept of whitelisting OAuth 2.0 Scope. If you want to expose Dynamic Client Registration, you should set the default scope enabled for newly registered clients. Keep in mind that users can overwrite this default by setting the \"scope\" key in the registration payload, effectively disabling the concept of whitelisted scopes.  This governs the \"oidc.dynamic_client_registration.default_scope\" setting.
     attr_accessor :hydra_oidc_dynamic_client_registration_default_scope
 
     # Configures OpenID Connect Dynamic Client Registration.  This governs the \"oidc.dynamic_client_registration.enabled\" setting.
@@ -64,10 +132,16 @@ module OryClient
     # Configures OpenID Connect Discovery and overwrites the pairwise algorithm  This governs the \"oidc.subject_identifiers.pairwise_salt\" setting.
     attr_accessor :hydra_oidc_subject_identifiers_pairwise_salt
 
+    # Configures OpenID Connect Discovery and overwrites the list of Subject Identifier Algorithms to enable.  This governs the \"oidc.subject_identifiers.supported_types\" setting.
     attr_accessor :hydra_oidc_subject_identifiers_supported_types
 
+    # Configures the Ory Hydra Cookie Secret  This governs the \"secrets.cookie\" setting.
     attr_accessor :hydra_secrets_cookie
 
+    # Configures the Ory Hydra Pagination Secret  This governs the \"secrets.pagination\" setting.
+    attr_accessor :hydra_secrets_pagination
+
+    # Configures the Ory Hydra System Secret  This governs the \"secrets.system\" setting.
     attr_accessor :hydra_secrets_system
 
     # Configures the Ory Hydra Cookie Same Site Legacy Workaround  This governs the \"serve.cookies.same_site_legacy_workaround\" setting.
@@ -79,7 +153,7 @@ module OryClient
     # Defines access token type  This governs the \"strategies.access_token\" setting. opaque Oauth2AccessTokenStrategyOpaque jwt Oauth2AccessTokenStrategyJwt
     attr_accessor :hydra_strategies_access_token
 
-    # Define the claim to use as the scope in the access token.  This governs the \"strategies.jwt.scope_claim\" setting:  list: The scope claim is an array of strings named `scope`: `{ \"scope\": [\"read\", \"write\"] }` string: The scope claim is a space delimited list of strings named `scp`: `{ \"scp\": \"read write\" }` both: The scope claim is both a space delimited list and an array of strings named `scope` and `scp`: `{ \"scope\": [\"read\", \"write\"], \"scp\": \"read write\" }` list OAuth2JWTScopeClaimList string OAuth2JWTScopeClaimString both OAuth2JWTScopeClaimBoth
+    # Define the claim to use as the scope in the access token.  This governs the \"strategies.jwt.scope_claim\" setting.  list: The scope claim is an array of strings named `scope`: `{ \"scope\": [\"read\", \"write\"] }` string: The scope claim is a space delimited list of strings named `scp`: `{ \"scp\": \"read write\" }` both: The scope claim is both a space delimited list and an array of strings named `scope` and `scp`: `{ \"scope\": [\"read\", \"write\"], \"scp\": \"read write\" }` list OAuth2JWTScopeClaimList string OAuth2JWTScopeClaimString both OAuth2JWTScopeClaimBoth
     attr_accessor :hydra_strategies_jwt_scope_claim
 
     # Defines how scopes are matched. For more details have a look at https://github.com/ory/fosite#scopes  This governs the \"strategies.scope\" setting. exact Oauth2ScopeStrategyExact wildcard Oauth2ScopeStrategyWildcard
@@ -91,6 +165,9 @@ module OryClient
     # Configures how long refresh tokens are valid.  Set to -1 for refresh tokens to never expire. This is not recommended!  This governs the \"ttl.auth_code\" setting.
     attr_accessor :hydra_ttl_auth_code
 
+    # Configures how long the device_code and user_code in the OAuth 2.0 Device Authorization Grant remain valid. Larger values mean more database storage; shorter values mean users have less time to complete the second-device verification. Hydra defaults to 10m when this is left empty.  This is an Enterprise feature.  This governs the \"ttl.device_user_code\" setting.
+    attr_accessor :hydra_ttl_device_user_code
+
     # This governs the \"ttl.id_token\" setting.
     attr_accessor :hydra_ttl_id_token
 
@@ -103,6 +180,12 @@ module OryClient
     # Sets the OAuth2 Consent Endpoint URL of the OAuth2 User Login & Consent flow.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.consent\" setting.
     attr_accessor :hydra_urls_consent
 
+    # Sets the URL the user is redirected to after successfully completing the OAuth 2.0 Device Authorization Grant user verification step. Defaults to the Ory Account Experience fallback page if left empty.  This is an Enterprise feature.  This governs the \"urls.device.success\" setting.
+    attr_accessor :hydra_urls_device_success
+
+    # Sets the URL of the user verification page for the OAuth 2.0 Device Authorization Grant (RFC 8628). End users are redirected to this URL to enter the user_code shown on their device. Defaults to the Ory Account Experience fallback page if left empty.  This is an Enterprise feature.  This governs the \"urls.device.verification\" setting.
+    attr_accessor :hydra_urls_device_verification
+
     # Sets the OAuth2 Error URL of the OAuth2 User Login & Consent flow.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.error\" setting.
     attr_accessor :hydra_urls_error
 
@@ -121,71 +204,80 @@ module OryClient
     # This value will be used as the issuer in access and ID tokens. It must be specified and using HTTPS protocol, unless the development mode is enabled.  On the Ory Network it will be very rare that you want to modify this value. If left empty, it will default to the correct value for the Ory Network.  This governs the \"urls.self.issuer\" setting.
     attr_accessor :hydra_urls_self_issuer
 
+    # A list of JSON Web Keys that should be exposed at that endpoint. This is usually the public key for verifying OpenID Connect ID Tokens. However, you might want to add additional keys here as well.  This governs the \"webfinger.jwks.broadcast_keys\" setting.
     attr_accessor :hydra_webfinger_jwks_broadcast_keys
 
-    # Configures OpenID Connect Discovery and overwrites the OAuth2 Authorization URL.  This governs the \"webfinger.oidc.discovery.auth_url\" setting.
+    # Configures OpenID Connect Discovery and overwrites the OAuth2 Authorization URL.  This governs the \"webfinger.oidc_discovery.auth_url\" setting.
     attr_accessor :hydra_webfinger_oidc_discovery_auth_url
 
-    # Configures OpenID Connect Discovery and overwrites the OpenID Connect Dynamic Client Registration Endpoint.  This governs the \"webfinger.oidc.discovery.client_registration_url\" setting.
+    # Configures OpenID Connect Discovery and overwrites the OpenID Connect Dynamic Client Registration Endpoint.  This governs the \"webfinger.oidc_discovery.client_registration_url\" setting.
     attr_accessor :hydra_webfinger_oidc_discovery_client_registration_url
 
-    # Configures OpenID Connect Discovery and overwrites the JWKS URL.  This governs the \"webfinger.oidc.discovery.jwks_url\" setting.
+    # Override the OAuth 2.0 Device Authorization Endpoint URL that is advertised in the OpenID Connect discovery document (/.well-known/openid-configuration). Defaults to the project's public base URL + /oauth2/device/auth.  This is an Enterprise feature.  This governs the \"webfinger.oidc_discovery.device_authorization_url\" setting.
+    attr_accessor :hydra_webfinger_oidc_discovery_device_authorization_url
+
+    # Configures OpenID Connect Discovery and overwrites the JWKS URL.  This governs the \"webfinger.oidc_discovery.jwks_url\" setting.
     attr_accessor :hydra_webfinger_oidc_discovery_jwks_url
 
+    # Configures OpenID Connect Discovery and overwrites a list of supported claims to be broadcasted. Claim \"sub\" is always included.  This governs the \"webfinger.oidc_discovery.supported_claims\" setting.
     attr_accessor :hydra_webfinger_oidc_discovery_supported_claims
 
+    # Configures OpenID Connect Discovery and overwrites the scope OAuth 2.0 Clients may request. Scope `offline`, `offline_access`, and `openid` are always included.  This governs the \"webfinger.oidc_discovery.supported_scope\" setting.
     attr_accessor :hydra_webfinger_oidc_discovery_supported_scope
 
-    # Configures OpenID Connect Discovery and overwrites the OAuth2 Token URL.  This governs the \"webfinger.oidc.discovery.token_url\" setting.
+    # Configures OpenID Connect Discovery and overwrites the OAuth2 Token URL.  This governs the \"webfinger.oidc_discovery.token_url\" setting.
     attr_accessor :hydra_webfinger_oidc_discovery_token_url
 
-    # Configures OpenID Connect Discovery and overwrites userinfo endpoint to be advertised at the OpenID Connect Discovery endpoint /.well-known/openid-configuration. Defaults to Ory Hydra's userinfo endpoint at /userinfo. Set this value if you want to handle this endpoint yourself.  This governs the \"webfinger.oidc.discovery.userinfo_url\" setting.
+    # Configures OpenID Connect Discovery and overwrites userinfo endpoint to be advertised at the OpenID Connect Discovery endpoint /.well-known/openid-configuration. Defaults to Ory Hydra's userinfo endpoint at /userinfo. Set this value if you want to handle this endpoint yourself.  This governs the \"webfinger.oidc_discovery.userinfo_url\" setting.
     attr_accessor :hydra_webfinger_oidc_discovery_userinfo_url
 
     # The revision ID.
     attr_accessor :id
 
-    # The Revisions' Keto Namespace Configuration  The string is a URL pointing to an OPL file with the configuration.
+    # The Revisions' Keto Namespace Configuration  The string is a URL pointing to an OPL file with the configuration.  This governs the \"namespaces.location\" setting.
     attr_accessor :keto_namespace_configuration
 
     attr_accessor :keto_namespaces
 
+    # Configures Keto's pagination secrets.  This governs the \"secrets.pagination\" setting.
+    attr_accessor :keto_secrets_pagination
+
     # Configures the Ory Kratos Cookie SameSite Attribute  This governs the \"cookies.same_site\" setting.
     attr_accessor :kratos_cookies_same_site
 
     attr_accessor :kratos_courier_channels
 
-    # The delivery strategy to use when sending emails  `smtp`: Use SMTP server `http`: Use the built in HTTP client to send the email to some remote service
+    # The delivery strategy to use when sending emails  This governs the \"courier.delivery_strategy\" setting.  `smtp`: Use SMTP server `http`: Use the built in HTTP client to send the email to some remote service
     attr_accessor :kratos_courier_delivery_strategy
 
-    # The location of the API key to use in the HTTP email sending service's authentication  `header`: Send the key value pair as a header `cookie`: Send the key value pair as a cookie This governs the \"courier.http.auth.config.in\" setting
+    # The location of the API key to use in the HTTP email sending service's authentication  `header`: Send the key value pair as a header `cookie`: Send the key value pair as a cookie This governs the \"courier.http.request_config.auth.config.in\" setting.
     attr_accessor :kratos_courier_http_request_config_auth_api_key_in
 
-    # The name of the API key to use in the HTTP email sending service's authentication  This governs the \"courier.http.auth.config.name\" setting
+    # The name of the API key to use in the HTTP email sending service's authentication  This governs the \"courier.http.request_config.auth.config.name\" setting.
     attr_accessor :kratos_courier_http_request_config_auth_api_key_name
 
-    # The value of the API key to use in the HTTP email sending service's authentication  This governs the \"courier.http.auth.config.value\" setting
+    # The value of the API key to use in the HTTP email sending service's authentication  This governs the \"courier.http.request_config.auth.config.value\" setting.
     attr_accessor :kratos_courier_http_request_config_auth_api_key_value
 
-    # The password to use for basic auth in the HTTP email sending service's authentication  This governs the \"courier.http.auth.config.password\" setting
+    # The password to use for basic auth in the HTTP email sending service's authentication  This governs the \"courier.http.request_config.auth.config.password\" setting.
     attr_accessor :kratos_courier_http_request_config_auth_basic_auth_password
 
-    # The user to use for basic auth in the HTTP email sending service's authentication  This governs the \"courier.http.auth.config.user\" setting
+    # The user to use for basic auth in the HTTP email sending service's authentication  This governs the \"courier.http.request_config.auth.config.user\" setting.
     attr_accessor :kratos_courier_http_request_config_auth_basic_auth_user
 
-    # The authentication type to use while contacting the remote HTTP email sending service  `basic_auth`: Use Basic Authentication `api_key`: Use API Key Authentication in a header or cookie
+    # The authentication type to use while contacting the remote HTTP email sending service  This governs the \"courier.http.request_config.auth.type\" setting.  `basic_auth`: Use Basic Authentication `api_key`: Use API Key Authentication in a header or cookie
     attr_accessor :kratos_courier_http_request_config_auth_type
 
-    # The Jsonnet template to generate the body to send to the remote HTTP email sending service  Should be valid Jsonnet and base64 encoded  This governs the \"courier.http.body\" setting
+    # The Jsonnet template to generate the body to send to the remote HTTP email sending service  Should be valid Jsonnet and base64 encoded  This governs the \"courier.http.request_config.body\" setting.
     attr_accessor :kratos_courier_http_request_config_body
 
-    # NullJSONRawMessage represents a json.RawMessage that works well with JSON, SQL, and Swagger and is NULLable-
+    # Any additional headers to send to the remote HTTP email sending service  This governs the \"courier.http.request_config.headers\" setting.
     attr_accessor :kratos_courier_http_request_config_headers
 
-    # The http METHOD to use when calling the remote HTTP email sending service
+    # The http METHOD to use when calling the remote HTTP email sending service  This governs the \"courier.http.request_config.method\" setting.
     attr_accessor :kratos_courier_http_request_config_method
 
-    # The URL of the remote HTTP email sending service  This governs the \"courier.http.url\" setting
+    # The URL of the remote HTTP email sending service  This governs the \"courier.http.request_config.url\" setting.
     attr_accessor :kratos_courier_http_request_config_url
 
     # Configures the Ory Kratos SMTP Connection URI  This governs the \"courier.smtp.connection_uri\" setting.
@@ -197,106 +289,121 @@ module OryClient
     # Configures the Ory Kratos SMTP From Name  This governs the \"courier.smtp.from_name\" setting.
     attr_accessor :kratos_courier_smtp_from_name
 
-    # NullJSONRawMessage represents a json.RawMessage that works well with JSON, SQL, and Swagger and is NULLable-
+    # Configures the Ory Kratos SMTP Connection Headers  This governs the \"courier.smtp.headers\" setting.
     attr_accessor :kratos_courier_smtp_headers
 
     # Configures the local_name to use in SMTP connections  This governs the \"courier.smtp.local_name\" setting.
     attr_accessor :kratos_courier_smtp_local_name
 
-    # Configures the Ory Kratos Valid Login via Code Email Body HTML Template  This governs the \"courier.smtp.templates.login_code.valid.email.body.html\" setting.
+    # Configures the Ory Kratos Valid Login via Code Email Body HTML Template  This governs the \"courier.templates.login_code.valid.email.body.html\" setting.
     attr_accessor :kratos_courier_templates_login_code_valid_email_body_html
 
-    # Configures the Ory Kratos Valid Login via Code Email Body Plaintext Template  This governs the \"courier.smtp.templates.login_code.valid.email.body.plaintext\" setting.
+    # Configures the Ory Kratos Valid Login via Code Email Body Plaintext Template  This governs the \"courier.templates.login_code.valid.email.body.plaintext\" setting.
     attr_accessor :kratos_courier_templates_login_code_valid_email_body_plaintext
 
-    # Configures the Ory Kratos Valid Login via Code Email Subject Template  This governs the \"courier.smtp.templates.login_code.valid.email.subject\" setting.
+    # Configures the Ory Kratos Valid Login via Code Email Subject Template  This governs the \"courier.templates.login_code.valid.email.subject\" setting.
     attr_accessor :kratos_courier_templates_login_code_valid_email_subject
 
-    # Configures the Ory Kratos Valid Login via Code SMS plain text body  This governs the \"courier.smtp.templates.login_code.valid.sms.plaintext\" setting.
+    # Configures the Ory Kratos Valid Login via Code SMS plain text body  This governs the \"courier.templates.login_code.valid.sms.body.plaintext\" setting.
     attr_accessor :kratos_courier_templates_login_code_valid_sms_body_plaintext
 
-    # Configures the Ory Kratos Invalid Recovery via Code Email Body HTML Template  This governs the \"courier.smtp.templates.recovery_code.invalid.email.body.html\" setting.
+    # Configures the Ory Kratos Invalid Recovery via Code Email Body HTML Template  This governs the \"courier.templates.recovery_code.invalid.email.body.html\" setting.
     attr_accessor :kratos_courier_templates_recovery_code_invalid_email_body_html
 
-    # Configures the Ory Kratos Invalid Recovery via Code Email Body Plaintext Template  This governs the \"courier.smtp.templates.recovery_code.invalid.email.body.plaintext\" setting.
+    # Configures the Ory Kratos Invalid Recovery via Code Email Body Plaintext Template  This governs the \"courier.templates.recovery_code.invalid.email.body.plaintext\" setting.
     attr_accessor :kratos_courier_templates_recovery_code_invalid_email_body_plaintext
 
-    # Configures the Ory Kratos Invalid Recovery via Code Email Subject Template  This governs the \"courier.smtp.templates.recovery_code.invalid.email.body.html\" setting.
+    # Configures the Ory Kratos Invalid Recovery via Code Email Subject Template  This governs the \"courier.templates.recovery_code.invalid.email.subject\" setting.
     attr_accessor :kratos_courier_templates_recovery_code_invalid_email_subject
 
-    # Configures the Ory Kratos Valid Recovery via Code Email Body HTML Template  This governs the \"courier.smtp.templates.recovery_code.valid.email.body.html\" setting.
+    # Configures the Ory Kratos Valid Recovery via Code Email Body HTML Template  This governs the \"courier.templates.recovery_code.valid.email.body.html\" setting.
     attr_accessor :kratos_courier_templates_recovery_code_valid_email_body_html
 
-    # Configures the Ory Kratos Valid Recovery via Code Email Body Plaintext Template  This governs the \"courier.smtp.templates.recovery_code.valid.email.body.plaintext\" setting.
+    # Configures the Ory Kratos Valid Recovery via Code Email Body Plaintext Template  This governs the \"courier.templates.recovery_code.valid.email.body.plaintext\" setting.
     attr_accessor :kratos_courier_templates_recovery_code_valid_email_body_plaintext
 
-    # Configures the Ory Kratos Valid Recovery via Code Email Subject Template  This governs the \"courier.smtp.templates.recovery_code.valid.email.subject\" setting.
+    # Configures the Ory Kratos Valid Recovery via Code Email Subject Template  This governs the \"courier.templates.recovery_code.valid.email.subject\" setting.
     attr_accessor :kratos_courier_templates_recovery_code_valid_email_subject
 
-    # Configures the Ory Kratos Invalid Recovery Email Body HTML Template  This governs the \"courier.smtp.templates.recovery.invalid.email.body.html\" setting.
+    # Configures the Ory Kratos Invalid Recovery Email Body HTML Template  This governs the \"courier.templates.recovery.invalid.email.body.html\" setting.
     attr_accessor :kratos_courier_templates_recovery_invalid_email_body_html
 
-    # Configures the Ory Kratos Invalid Recovery Email Body Plaintext Template  This governs the \"courier.smtp.templates.recovery.invalid.email.body.plaintext\" setting.
+    # Configures the Ory Kratos Invalid Recovery Email Body Plaintext Template  This governs the \"courier.templates.recovery.invalid.email.body.plaintext\" setting.
     attr_accessor :kratos_courier_templates_recovery_invalid_email_body_plaintext
 
-    # Configures the Ory Kratos Invalid Recovery Email Subject Template  This governs the \"courier.smtp.templates.recovery.invalid.email.body.html\" setting.
+    # Configures the Ory Kratos Invalid Recovery Email Subject Template  This governs the \"courier.templates.recovery.invalid.email.subject\" setting.
     attr_accessor :kratos_courier_templates_recovery_invalid_email_subject
 
-    # Configures the Ory Kratos Valid Recovery Email Body HTML Template  This governs the \"courier.smtp.templates.recovery.valid.email.body.html\" setting.
+    # Configures the Ory Kratos Valid Recovery Email Body HTML Template  This governs the \"courier.templates.recovery.valid.email.body.html\" setting.
     attr_accessor :kratos_courier_templates_recovery_valid_email_body_html
 
-    # Configures the Ory Kratos Valid Recovery Email Body Plaintext Template  This governs the \"courier.smtp.templates.recovery.valid.email.body.plaintext\" setting.
+    # Configures the Ory Kratos Valid Recovery Email Body Plaintext Template  This governs the \"courier.templates.recovery.valid.email.body.plaintext\" setting.
     attr_accessor :kratos_courier_templates_recovery_valid_email_body_plaintext
 
-    # Configures the Ory Kratos Valid Recovery Email Subject Template  This governs the \"courier.smtp.templates.recovery.valid.email.subject\" setting.
+    # Configures the Ory Kratos Valid Recovery Email Subject Template  This governs the \"courier.templates.recovery.valid.email.subject\" setting.
     attr_accessor :kratos_courier_templates_recovery_valid_email_subject
 
-    # Configures the Ory Kratos Valid Registration via Code Email Body HTML Template  This governs the \"courier.smtp.templates.registration_code.valid.email.body.html\" setting.
+    # Configures the Ory Kratos Valid Registration via Code Email Body HTML Template  This governs the \"courier.templates.registration_code.valid.email.body.html\" setting.
     attr_accessor :kratos_courier_templates_registration_code_valid_email_body_html
 
-    # Configures the Ory Kratos Valid Registration via Code Email Body Plaintext Template  This governs the \"courier.smtp.templates.registration_code.valid.email.body.plaintext\" setting.
+    # Configures the Ory Kratos Valid Registration via Code Email Body Plaintext Template  This governs the \"courier.templates.registration_code.valid.email.body.plaintext\" setting.
     attr_accessor :kratos_courier_templates_registration_code_valid_email_body_plaintext
 
-    # Configures the Ory Kratos Valid Registration via Code Email Subject Template  This governs the \"courier.smtp.templates.registration_code.valid.email.subject\" setting.
+    # Configures the Ory Kratos Valid Registration via Code Email Subject Template  This governs the \"courier.templates.registration_code.valid.email.subject\" setting.
     attr_accessor :kratos_courier_templates_registration_code_valid_email_subject
 
-    # Configures the Ory Kratos Invalid Verification via Code Email Body HTML Template  This governs the \"courier.smtp.templates.verification_code.invalid.email.body.html\" setting.
+    # Configures the Ory Kratos Valid Registration via Code SMS Body Plaintext Template  This governs the \"courier.templates.registration_code.valid.sms.body.plaintext\" setting.
+    attr_accessor :kratos_courier_templates_registration_code_valid_sms_body_plaintext
+
+    # Configures the Ory Kratos Verifiable Address Changed Email Body HTML Template  This governs the \"courier.templates.verifiable_address_changed.email.body.html\" setting.
+    attr_accessor :kratos_courier_templates_verifiable_address_changed_email_body_html
+
+    # Configures the Ory Kratos Verifiable Address Changed Email Body Plaintext Template  This governs the \"courier.templates.verifiable_address_changed.email.body.plaintext\" setting.
+    attr_accessor :kratos_courier_templates_verifiable_address_changed_email_body_plaintext
+
+    # Configures the Ory Kratos Verifiable Address Changed Email Subject Template  This governs the \"courier.templates.verifiable_address_changed.email.subject\" setting.
+    attr_accessor :kratos_courier_templates_verifiable_address_changed_email_subject
+
+    # Configures the Ory Kratos Verifiable Address Changed SMS Body Plaintext Template  This governs the \"courier.templates.verifiable_address_changed.sms.body.plaintext\" setting.
+    attr_accessor :kratos_courier_templates_verifiable_address_changed_sms_body_plaintext
+
+    # Configures the Ory Kratos Invalid Verification via Code Email Body HTML Template  This governs the \"courier.templates.verification_code.invalid.email.body.html\" setting.
     attr_accessor :kratos_courier_templates_verification_code_invalid_email_body_html
 
-    # Configures the Ory Kratos Invalid Verification via Code Email Body Plaintext Template  This governs the \"courier.smtp.templates.verification_code.invalid.email.body.plaintext\" setting.
+    # Configures the Ory Kratos Invalid Verification via Code Email Body Plaintext Template  This governs the \"courier.templates.verification_code.invalid.email.body.plaintext\" setting.
     attr_accessor :kratos_courier_templates_verification_code_invalid_email_body_plaintext
 
-    # Configures the Ory Kratos Invalid Verification via Code Email Subject Template  This governs the \"courier.smtp.templates.verification_code.invalid.email.subject\" setting.
+    # Configures the Ory Kratos Invalid Verification via Code Email Subject Template  This governs the \"courier.templates.verification_code.invalid.email.subject\" setting.
     attr_accessor :kratos_courier_templates_verification_code_invalid_email_subject
 
-    # Configures the Ory Kratos Valid Verification via Code Email Body HTML Template  This governs the \"courier.smtp.templates.verification_code.valid.email.body.html\" setting.
+    # Configures the Ory Kratos Valid Verification via Code Email Body HTML Template  This governs the \"courier.templates.verification_code.valid.email.body.html\" setting.
     attr_accessor :kratos_courier_templates_verification_code_valid_email_body_html
 
-    # Configures the Ory Kratos Valid Verification via Code Email Body Plaintext Template  This governs the \"courier.smtp.templates.verification_code.valid.email.body.plaintext\" setting.
+    # Configures the Ory Kratos Valid Verification via Code Email Body Plaintext Template  This governs the \"courier.templates.verification_code.valid.email.body.plaintext\" setting.
     attr_accessor :kratos_courier_templates_verification_code_valid_email_body_plaintext
 
-    # Configures the Ory Kratos Valid Verification via Code Email Subject Template  This governs the \"courier.smtp.templates.verification_code.valid.email.subject\" setting.
+    # Configures the Ory Kratos Valid Verification via Code Email Subject Template  This governs the \"courier.templates.verification_code.valid.email.subject\" setting.
     attr_accessor :kratos_courier_templates_verification_code_valid_email_subject
 
-    # Configures the Ory Kratos Valid Verification via Code SMS Body Plaintext  This governs the \"courier.smtp.templates.verification_code.valid.sms.body.plaintext\" setting.
+    # Configures the Ory Kratos Valid Verification via Code SMS Body Plaintext  This governs the \"courier.templates.verification_code.valid.sms.body.plaintext\" setting.
     attr_accessor :kratos_courier_templates_verification_code_valid_sms_body_plaintext
 
-    # Configures the Ory Kratos Invalid Verification Email Body HTML Template  This governs the \"courier.smtp.templates.verification.invalid.email.body.html\" setting.
+    # Configures the Ory Kratos Invalid Verification Email Body HTML Template  This governs the \"courier.templates.verification.invalid.email.body.html\" setting.
     attr_accessor :kratos_courier_templates_verification_invalid_email_body_html
 
-    # Configures the Ory Kratos Invalid Verification Email Body Plaintext Template  This governs the \"courier.smtp.templates.verification.invalid.email.body.plaintext\" setting.
+    # Configures the Ory Kratos Invalid Verification Email Body Plaintext Template  This governs the \"courier.templates.verification.invalid.email.body.plaintext\" setting.
     attr_accessor :kratos_courier_templates_verification_invalid_email_body_plaintext
 
-    # Configures the Ory Kratos Invalid Verification Email Subject Template  This governs the \"courier.smtp.templates.verification.invalid.email.subject\" setting.
+    # Configures the Ory Kratos Invalid Verification Email Subject Template  This governs the \"courier.templates.verification.invalid.email.subject\" setting.
     attr_accessor :kratos_courier_templates_verification_invalid_email_subject
 
-    # Configures the Ory Kratos Valid Verification Email Body HTML Template  This governs the \"courier.smtp.templates.verification.valid.email.body.html\" setting.
+    # Configures the Ory Kratos Valid Verification Email Body HTML Template  This governs the \"courier.templates.verification.valid.email.body.html\" setting.
     attr_accessor :kratos_courier_templates_verification_valid_email_body_html
 
-    # Configures the Ory Kratos Valid Verification Email Body Plaintext Template  This governs the \"courier.smtp.templates.verification.valid.email.body.plaintext\" setting.
+    # Configures the Ory Kratos Valid Verification Email Body Plaintext Template  This governs the \"courier.templates.verification.valid.email.body.plaintext\" setting.
     attr_accessor :kratos_courier_templates_verification_valid_email_body_plaintext
 
-    # Configures the Ory Kratos Valid Verification Email Subject Template  This governs the \"courier.smtp.templates.verification.valid.email.subject\" setting.
+    # Configures the Ory Kratos Valid Verification Email Subject Template  This governs the \"courier.templates.verification.valid.email.subject\" setting.
     attr_accessor :kratos_courier_templates_verification_valid_email_subject
 
     # Configures the Ory Kratos Session caching feature flag  This governs the \"feature_flags.cacheable_sessions\" setting.
@@ -305,47 +412,75 @@ module OryClient
     # Configures the Ory Kratos Session caching max-age feature flag  This governs the \"feature_flags.cacheable_sessions_max_age\" setting.
     attr_accessor :kratos_feature_flags_cacheable_sessions_max_age
 
+    # This governs the \"feature_flags.choose_recovery_address\" setting.
+    attr_accessor :kratos_feature_flags_choose_recovery_address
+
     # Configures the Ory Kratos Faster Session Extend setting  If enabled allows faster session extension by skipping the session lookup and returning 201 instead of 200. Disabling this feature will be deprecated in the future.  This governs the \"feature_flags.faster_session_extend\" setting.
     attr_accessor :kratos_feature_flags_faster_session_extend
 
+    # Always include show_verification_ui in continue_with  If true, restores the legacy behavior of always including `show_verification_ui` in the registration flow's `continue_with` when verification is enabled. If set to false, `show_verification_ui` is only set in `continue_with` if the `show_verification_ui` hook is used. This flag will be removed in the future.  This governs the \"feature_flags.legacy_continue_with_verification_ui\" setting.
+    attr_accessor :kratos_feature_flags_legacy_continue_with_verification_ui
+
+    # Controls whether the UI nodes in an OIDC registration flow have group \"oidc\" in case required fields are not returned by the OIDC provider.  If set to true, the UI nodes will have group \"oidc\" and the flow will be considered successful if the user completes the flow. This is the legacy behavior.  This governs the \"feature_flags.legacy_oidc_registration_node_group\" setting.
+    attr_accessor :kratos_feature_flags_legacy_oidc_registration_node_group
+
+    # Return a form error if the login identifier is not verified  If true, the login flow will return a form error if the login identifier is not verified, which restores legacy behavior. If this value is false, the `continue_with` array will contain a `show_verification_ui` hook instead.  This flag is deprecated and will be removed in the future.  This governs the \"feature_flags.legacy_require_verified_login_error\" setting.
+    attr_accessor :kratos_feature_flags_legacy_require_verified_login_error
+
+    # Configures the group for the password method in the registration flow.  If true, it sets the password method group value to \"password\" if it is the only method available. This is the legacy behavior. If false is, it sets the password method group value to \"default\".  This governs the \"feature_flags.password_profile_registration_node_group\" setting.
+    attr_accessor :kratos_feature_flags_password_profile_registration_node_group
+
+    # Render an address picker on the code refresh login screen  If true, a code-strategy refresh (privileged re-authentication) login renders a \"Send code to <address>\" button per available code address instead of re-asking for the identifier. The identity is already fixed by the active session, so re-entering the identifier is unnecessary. It is safe to toggle this back and forth.  This governs the \"feature_flags.refresh_login_choose_address\" setting.
+    attr_accessor :kratos_feature_flags_refresh_login_choose_address
+
     # Configures the Ory Kratos Session use_continue_with_transitions flag  This governs the \"feature_flags.use_continue_with_transitions\" setting.
     attr_accessor :kratos_feature_flags_use_continue_with_transitions
 
     attr_accessor :kratos_identity_schemas
 
-    # NullJSONRawMessage represents a json.RawMessage that works well with JSON, SQL, and Swagger and is NULLable-
+    # Configures the OAuth2 Provider Integration HTTP Headers  This governs the \"oauth2_provider.headers\" setting.
     attr_accessor :kratos_oauth2_provider_headers
 
-    # Kratos OAuth2 Provider Override Return To  Enabling this allows Kratos to set the return_to parameter automatically to the OAuth2 request URL on the login flow, allowing complex flows such as recovery to continue to the initial OAuth2 flow.
+    # Kratos OAuth2 Provider Override Return To  Enabling this allows Kratos to set the return_to parameter automatically to the OAuth2 request URL on the login flow, allowing complex flows such as recovery to continue to the initial OAuth2 flow.  This governs the \"oauth2_provider.override_return_to\" setting.
     attr_accessor :kratos_oauth2_provider_override_return_to
 
     # The Revisions' OAuth2 Provider Integration URL  This governs the \"oauth2_provider.url\" setting.
     attr_accessor :kratos_oauth2_provider_url
 
-    # Configures the default read consistency level for identity APIs  This governs the `preview.default_read_consistency_level` setting.  The read consistency level determines the consistency guarantee for reads:  strong (slow): The read is guaranteed to return the most recent data committed at the start of the read. eventual (very fast): The result will return data that is about 4.8 seconds old.  Setting the default consistency level to `eventual` may cause regressions in the future as we add consistency controls to more APIs. Currently, the following APIs will be affected by this setting:  `GET /admin/identities`  Defaults to \"strong\" for new and existing projects. This feature is in preview. Use with caution.
+    # Configures the default read consistency level for identity APIs  The read consistency level determines the consistency guarantee for reads:  strong (slow): The read is guaranteed to return the most recent data committed at the start of the read. eventual (very fast): The result will return data that is about 4.8 seconds old.  Setting the default consistency level to `eventual` may cause regressions in the future as we add consistency controls to more APIs. Currently, the following APIs will be affected by this setting:  `GET /admin/identities`  Defaults to \"strong\" for new and existing projects. This feature is in preview. Use with caution. This governs the \"preview.default_read_consistency_level\" setting.
     attr_accessor :kratos_preview_default_read_consistency_level
 
+    # Configures the Ory Kratos Cipher Secret  This governs the \"secrets.cipher\" setting.
     attr_accessor :kratos_secrets_cipher
 
+    # Configures the Ory Kratos Cookie Secret  This governs the \"secrets.cookie\" setting.
     attr_accessor :kratos_secrets_cookie
 
+    # Configures the Ory Kratos Default Secret  This governs the \"secrets.default\" setting.
     attr_accessor :kratos_secrets_default
 
+    # Configures the Ory Kratos Pagination Secret  This governs the \"secrets.pagination\" setting.
+    attr_accessor :kratos_secrets_pagination
+
+    # Configures if account enumeration should be mitigated when using identifier first login.  This governs the \"security.account_enumeration.mitigate\" setting.
+    attr_accessor :kratos_security_account_enumeration_mitigate
+
+    # Configures the Ory Kratos Allowed Return URLs  This governs the \"selfservice.allowed_return_urls\" setting.
     attr_accessor :kratos_selfservice_allowed_return_urls
 
-    # Configures the Ory Kratos Default Return URL  This governs the \"selfservice.allowed_return_urls\" setting.
+    # Configures the Ory Kratos Default Return URL  This governs the \"selfservice.default_browser_return_url\" setting.
     attr_accessor :kratos_selfservice_default_browser_return_url
 
     # Configures the Ory Kratos Error UI URL  This governs the \"selfservice.flows.error.ui_url\" setting.
     attr_accessor :kratos_selfservice_flows_error_ui_url
 
-    # Configures the Ory Kratos Login After Password Default Return URL  This governs the \"selfservice.flows.code.after.password.default_browser_return_url\" setting.
+    # Configures the Ory Kratos Login After Code Default Return URL  This governs the \"selfservice.flows.login.after.code.default_browser_return_url\" setting.
     attr_accessor :kratos_selfservice_flows_login_after_code_default_browser_return_url
 
     # Configures the Ory Kratos Login Default Return URL  This governs the \"selfservice.flows.login.after.default_browser_return_url\" setting.
     attr_accessor :kratos_selfservice_flows_login_after_default_browser_return_url
 
-    # Configures the Ory Kratos Login After Password Default Return URL  This governs the \"selfservice.flows.lookup_secret.after.password.default_browser_return_url\" setting.
+    # Configures the Ory Kratos Login After Lookup Secret Default Return URL  This governs the \"selfservice.flows.login.after.lookup_secret.default_browser_return_url\" setting.
     attr_accessor :kratos_selfservice_flows_login_after_lookup_secret_default_browser_return_url
 
     # Configures the Ory Kratos Login After OIDC Default Return URL  This governs the \"selfservice.flows.login.after.oidc.default_browser_return_url\" setting.
@@ -357,7 +492,7 @@ module OryClient
     # Configures the Ory Kratos Login After Password Default Return URL  This governs the \"selfservice.flows.login.after.password.default_browser_return_url\" setting.
     attr_accessor :kratos_selfservice_flows_login_after_password_default_browser_return_url
 
-    # Configures the Ory Kratos Login After Password Default Return URL  This governs the \"selfservice.flows.totp.after.password.default_browser_return_url\" setting.
+    # Configures the Ory Kratos Login After TOTP Default Return URL  This governs the \"selfservice.flows.login.after.totp.default_browser_return_url\" setting.
     attr_accessor :kratos_selfservice_flows_login_after_totp_default_browser_return_url
 
     # Configures the Ory Kratos Login After WebAuthn Default Return URL  This governs the \"selfservice.flows.login.after.webauthn.default_browser_return_url\" setting.
@@ -366,6 +501,9 @@ module OryClient
     # Configures the Ory Kratos Login Lifespan  This governs the \"selfservice.flows.login.lifespan\" setting.
     attr_accessor :kratos_selfservice_flows_login_lifespan
 
+    # Configures the Ory Kratos Login Flow Style  This governs the \"selfservice.flows.login.style\" setting. Possible values are \"unified\" and \"identifier_first\".
+    attr_accessor :kratos_selfservice_flows_login_style
+
     # Configures the Ory Kratos Login UI URL  This governs the \"selfservice.flows.login.ui_url\" setting.
     attr_accessor :kratos_selfservice_flows_login_ui_url
 
@@ -399,7 +537,7 @@ module OryClient
     # Configures the Ory Kratos Registration After OIDC Default Return URL  This governs the \"selfservice.flows.registration.after.oidc.default_browser_return_url\" setting.
     attr_accessor :kratos_selfservice_flows_registration_after_oidc_default_browser_return_url
 
-    # Configures the Ory Kratos Registration After Passkey Default Return URL  This governs the \"selfservice.flows.registration.after.password.default_browser_return_url\" setting.
+    # Configures the Ory Kratos Registration After Passkey Default Return URL  This governs the \"selfservice.flows.registration.after.passkey.default_browser_return_url\" setting.
     attr_accessor :kratos_selfservice_flows_registration_after_passkey_default_browser_return_url
 
     # Configures the Ory Kratos Registration After Password Default Return URL  This governs the \"selfservice.flows.registration.after.password.default_browser_return_url\" setting.
@@ -477,9 +615,36 @@ module OryClient
     # Configures the Ory Kratos Strategy to use for Verification  This governs the \"selfservice.flows.verification.use\" setting. link SelfServiceMessageVerificationStrategyLink code SelfServiceMessageVerificationStrategyCode
     attr_accessor :kratos_selfservice_flows_verification_use
 
+    # Configures the CAPTCHA allowed domains list  This governs the \"selfservice.methods.captcha.config.allowed_domains\" setting.
+    attr_accessor :kratos_selfservice_methods_captcha_config_allowed_domains
+
+    # Configures whether to use BYO or managed widget  Reach out to your account manager to enable this feature.  This governs the \"selfservice.methods.captcha.config.byo\" setting.
+    attr_accessor :kratos_selfservice_methods_captcha_config_byo
+
+    # Configures the Cloudflare Turnstile site secret for Ory BYO CAPTCHA protection  The site secret is private and will be never be shared with the client. This key is write only and the value will not be returned in response to a read request.  Reach out to your account manager to enable this feature.  This governs the \"selfservice.methods.captcha.config.cf_turnstile.secret\" setting.
+    attr_accessor :kratos_selfservice_methods_captcha_config_cf_turnstile_byo_secret
+
+    # Configures the Cloudflare Turnstile site key for Ory BYO CAPTCHA protection  The site key is public and will be shared with the client.  Reach out to your account manager to enable this feature.  This governs the \"selfservice.methods.captcha.config.cf_turnstile.sitekey\" setting.
+    attr_accessor :kratos_selfservice_methods_captcha_config_cf_turnstile_byo_sitekey
+
+    # Configures the Cloudflare Turnstile site secret for managed CAPTCHA protection  The site secret is private and will be never be shared with the client. This key is write only and the value will not be returned in response to a read request.  Reach out to your account manager to enable this feature.  This governs the \"selfservice.methods.captcha.config.cf_turnstile.secret\" setting.
+    attr_accessor :kratos_selfservice_methods_captcha_config_cf_turnstile_secret
+
+    # Configures the Cloudflare Turnstile site key for managed CAPTCHA protection  The site key is public and will be shared with the client.  Reach out to your account manager to enable this feature.  This governs the \"selfservice.methods.captcha.config.cf_turnstile.sitekey\" setting.
+    attr_accessor :kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey
+
+    # Configures legacy CAPTCHA node injection behavior  Reach out to your account manager to enable this feature.  This governs the \"selfservice.methods.captcha.config.legacy_inject_node\" setting.
+    attr_accessor :kratos_selfservice_methods_captcha_config_legacy_inject_node
+
+    # Configures the Ory Kratos Self-Service Methods' Captcha Enabled Setting  Reach out to your account manager to enable this feature.  This governs the \"selfservice.methods.captcha.enabled\" setting.
+    attr_accessor :kratos_selfservice_methods_captcha_enabled
+
     # Configures the Ory Kratos Code Method's lifespan  This governs the \"selfservice.methods.code.config.lifespan\" setting.
     attr_accessor :kratos_selfservice_methods_code_config_lifespan
 
+    # Configures the maximum number of attempts to submit a one-time code in kratos.  This governs the \"selfservice.methods.code.max_submissions\" setting.
+    attr_accessor :kratos_selfservice_methods_code_config_max_submissions
+
     # Enables a fallback method required in certain legacy use cases.  This governs the \"selfservice.methods.code.config.missing_credential_fallback_enabled\" setting.
     attr_accessor :kratos_selfservice_methods_code_config_missing_credential_fallback_enabled
 
@@ -495,6 +660,27 @@ module OryClient
     # This setting allows the code method to always login a user with code if they have registered with another authentication method such as password or social sign in.  This governs the \"selfservice.methods.code.passwordless_login_fallback_enabled\" setting.
     attr_accessor :kratos_selfservice_methods_code_passwordless_login_fallback_enabled
 
+    # Configures the allow-list of Android app signing-certificate digests that a device key may be bound to.  This governs the \"selfservice.methods.deviceauthn.config.android_app_ids\" setting.
+    attr_accessor :kratos_selfservice_methods_deviceauthn_config_android_app_ids
+
+    # Configures whether device authentication may be used as the sole first factor.  This governs the \"selfservice.methods.deviceauthn.config.first_factor\" setting.
+    attr_accessor :kratos_selfservice_methods_deviceauthn_config_first_factor
+
+    # Configures whether Ory Kratos Device authentication accepts relaxed attestations for testing  Only allowed on development projects and forced off otherwise. Keys enrolled under relaxation are short-lived and refused once this is turned off.  This governs the \"selfservice.methods.deviceauthn.config.insecure_allow_relaxed_attestation\" setting.
+    attr_accessor :kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation
+
+    # Configures the allow-list of Apple App IDs that a device key may be bound to.  This governs the \"selfservice.methods.deviceauthn.config.ios_app_ids\" setting.
+    attr_accessor :kratos_selfservice_methods_deviceauthn_config_ios_app_ids
+
+    # Configures whether an iOS biometric device key may be used as the sole first factor.  This governs the \"selfservice.methods.deviceauthn.config.ios_biometric_first_factor\" setting.
+    attr_accessor :kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor
+
+    # Configures the consecutive wrong-PIN limit before a device key is locked.  This governs the \"selfservice.methods.deviceauthn.config.pin_max_attempts\" setting.
+    attr_accessor :kratos_selfservice_methods_deviceauthn_config_pin_max_attempts
+
+    # Configures whether Ory Kratos Device authentication is enabled  This governs the \"selfservice.methods.deviceauthn.enabled\" setting.
+    attr_accessor :kratos_selfservice_methods_deviceauthn_enabled
+
     # Configures the Base URL which Recovery, Verification, and Login Links Point to  It is recommended to leave this value empty. It will be appropriately configured to the best matching domain (e.g. when using custom domains) automatically.  This governs the \"selfservice.methods.link.config.base_url\" setting.
     attr_accessor :kratos_selfservice_methods_link_config_base_url
 
@@ -512,6 +698,9 @@ module OryClient
 
     attr_accessor :kratos_selfservice_methods_oidc_config_providers
 
+    # Configures whether Ory Kratos allows auto-linking of OIDC credentials without a subject  This governs the \"selfservice.methods.oidc.enable_auto_link_policy\" setting.
+    attr_accessor :kratos_selfservice_methods_oidc_enable_auto_link_policy
+
     # Configures whether Ory Kratos Third Party / OpenID Connect Login is enabled  This governs the \"selfservice.methods.oidc.enabled\" setting.
     attr_accessor :kratos_selfservice_methods_oidc_enabled
 
@@ -521,6 +710,7 @@ module OryClient
     # Configures the Ory Kratos Passkey RP ID  This governs the \"selfservice.methods.passkey.config.rp.id\" setting.
     attr_accessor :kratos_selfservice_methods_passkey_config_rp_id
 
+    # Configures the Ory Kratos Passkey RP Origins  This governs the \"selfservice.methods.passkey.config.rp.origins\" setting.
     attr_accessor :kratos_selfservice_methods_passkey_config_rp_origins
 
     # Configures whether Ory Kratos Passkey authentication is enabled  This governs the \"selfservice.methods.passkey.enabled\" setting.
@@ -547,6 +737,11 @@ module OryClient
     # Configures whether Ory Kratos Profile Method is enabled  This governs the \"selfservice.methods.profile.enabled\" setting.
     attr_accessor :kratos_selfservice_methods_profile_enabled
 
+    attr_accessor :kratos_selfservice_methods_saml_config_providers
+
+    # Configures whether Ory Kratos SAML Login is enabled  This governs the \"selfservice.methods.saml.enabled\" setting.
+    attr_accessor :kratos_selfservice_methods_saml_enabled
+
     # Configures Ory Kratos TOTP Issuer  This governs the \"selfservice.methods.totp.config.issuer\" setting.
     attr_accessor :kratos_selfservice_methods_totp_config_issuer
 
@@ -565,6 +760,7 @@ module OryClient
     # Configures the Ory Kratos Webauthn RP ID  This governs the \"selfservice.methods.webauthn.config.rp.id\" setting.
     attr_accessor :kratos_selfservice_methods_webauthn_config_rp_id
 
+    # Configures the Ory Kratos Webauthn RP Origins  This governs the \"selfservice.methods.webauthn.config.rp.origins\" setting.
     attr_accessor :kratos_selfservice_methods_webauthn_config_rp_origins
 
     # Configures whether Ory Kratos Webauthn is enabled  This governs the \"selfservice.methods.webauthn.enabled\" setting.
@@ -587,16 +783,22 @@ module OryClient
     # The project's name.
     attr_accessor :name
 
+    attr_accessor :organizations
+
     # The Revision's Project ID
     attr_accessor :project_id
 
     attr_accessor :project_revision_hooks
 
+    attr_accessor :scim_clients
+
+    # Configures the CORS Allowed Origins on admin APIs  This governs the \"serve.admin.cors.allowed_origins\" setting.
     attr_accessor :serve_admin_cors_allowed_origins
 
     # Enable CORS headers on all admin APIs  This governs the \"serve.admin.cors.enabled\" setting.
     attr_accessor :serve_admin_cors_enabled
 
+    # Configures the CORS Allowed Origins on public APIs  This governs the \"serve.public.cors.allowed_origins\" setting.
     attr_accessor :serve_public_cors_allowed_origins
 
     # Enable CORS headers on all public APIs  This governs the \"serve.public.cors.enabled\" setting.
@@ -605,6 +807,60 @@ module OryClient
     # Whether the project should employ strict security measures. Setting this to true is recommended for going into production.
     attr_accessor :strict_security
 
+    # Talos cache enabled.  When true, API key verification results are cached. Revoked keys may be accepted until the cached entry expires. When false, every verification reads the database and revocations take effect immediately.
+    attr_accessor :talos_cache_enabled
+
+    # Talos cache TTL controls how long API key verification results are cached.
+    attr_accessor :talos_cache_ttl
+
+    # Talos API keys default TTL.
+    attr_accessor :talos_credentials_api_keys_default_ttl
+
+    # Talos API keys max TTL.
+    attr_accessor :talos_credentials_api_keys_max_ttl
+
+    # Talos API keys prefix (current).
+    attr_accessor :talos_credentials_api_keys_prefix_current
+
+    # Talos API keys public prefix (current).
+    attr_accessor :talos_credentials_api_keys_prefix_public_current
+
+    # Talos API keys public prefix (retired).  Previously active public API key prefixes kept for verification of outstanding tokens. The first element of this list was the most recently retired active prefix.
+    attr_accessor :talos_credentials_api_keys_prefix_public_retired
+
+    # Talos API keys prefix (retired).  Previously active API key prefixes kept for verification of outstanding tokens. The first element of this list was the most recently retired active prefix.
+    attr_accessor :talos_credentials_api_keys_prefix_retired
+
+    # Talos derived tokens default TTL (applies to both JWT and macaroon tokens).
+    attr_accessor :talos_credentials_derived_tokens_default_ttl
+
+    # Talos derived tokens JWT signing key ID (kid).
+    attr_accessor :talos_credentials_derived_tokens_jwt_signing_key_id
+
+    # Talos derived tokens JWT signing key URLs.
+    attr_accessor :talos_credentials_derived_tokens_jwt_signing_keys_urls
+
+    # Talos derived tokens macaroon prefix (current).
+    attr_accessor :talos_credentials_derived_tokens_macaroon_prefix_current
+
+    # Talos derived tokens macaroon prefix (retired).  Previously active macaroon prefixes kept for verification of outstanding tokens. The first element of this list was the most recently retired active prefix.
+    attr_accessor :talos_credentials_derived_tokens_macaroon_prefix_retired
+
+    # Talos credentials issuer URL.
+    attr_accessor :talos_credentials_issuer
+
+    # Talos credentials retired issuer URLs.  Previously active issuer URLs kept for verification of outstanding tokens. Tokens signed with these issuers remain valid; new tokens use the current issuer.
+    attr_accessor :talos_credentials_issuer_retired
+
+    # Talos rate limit enabled.  When true, server-side rate limiting is enforced for API key verifications.
+    attr_accessor :talos_rate_limit_enabled
+
+    # TalosSecretsHMACCurrent stores the current HMAC symmetric key as a plain secret string. Application-layer encryption is handled upstream; SanitizeModel (MarshalJSON) redacts this field from API responses.
+    attr_accessor :talos_secrets_hmac_current
+
+    # TalosSecretsHMACRetired stores previously active HMAC symmetric keys as a JSON array of plain secret strings. Application-layer encryption is handled upstream; SanitizeModel (MarshalJSON) redacts this field from API responses. The verifier tries all retired secrets when the current key does not produce a matching HMAC.
+    attr_accessor :talos_secrets_hmac_retired
+
     # Last Time Project's Revision was Updated
     attr_accessor :updated_at
 
@@ -633,25 +889,48 @@ module OryClient
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
+        :'account_experience_contact_url' => :'account_experience_contact_url',
+        :'account_experience_custom_translations' => :'account_experience_custom_translations',
+        :'account_experience_default_locale' => :'account_experience_default_locale',
+        :'account_experience_enabled_locales' => :'account_experience_enabled_locales',
+        :'account_experience_favicon_dark' => :'account_experience_favicon_dark',
+        :'account_experience_favicon_light' => :'account_experience_favicon_light',
+        :'account_experience_hide_ory_branding' => :'account_experience_hide_ory_branding',
+        :'account_experience_hide_registration_link' => :'account_experience_hide_registration_link',
+        :'account_experience_locale_behavior' => :'account_experience_locale_behavior',
+        :'account_experience_logo_dark' => :'account_experience_logo_dark',
+        :'account_experience_logo_light' => :'account_experience_logo_light',
+        :'account_experience_privacy_policy_url' => :'account_experience_privacy_policy_url',
+        :'account_experience_terms_of_service_url' => :'account_experience_terms_of_service_url',
+        :'account_experience_theme_variables_dark' => :'account_experience_theme_variables_dark',
+        :'account_experience_theme_variables_light' => :'account_experience_theme_variables_light',
         :'created_at' => :'created_at',
         :'disable_account_experience_welcome_screen' => :'disable_account_experience_welcome_screen',
         :'enable_ax_v2' => :'enable_ax_v2',
         :'hydra_oauth2_allowed_top_level_claims' => :'hydra_oauth2_allowed_top_level_claims',
         :'hydra_oauth2_client_credentials_default_grant_allowed_scope' => :'hydra_oauth2_client_credentials_default_grant_allowed_scope',
+        :'hydra_oauth2_device_authorization_token_polling_interval' => :'hydra_oauth2_device_authorization_token_polling_interval',
+        :'hydra_oauth2_device_authorization_user_code_entropy_preset' => :'hydra_oauth2_device_authorization_user_code_entropy_preset',
         :'hydra_oauth2_exclude_not_before_claim' => :'hydra_oauth2_exclude_not_before_claim',
         :'hydra_oauth2_grant_jwt_iat_optional' => :'hydra_oauth2_grant_jwt_iat_optional',
         :'hydra_oauth2_grant_jwt_jti_optional' => :'hydra_oauth2_grant_jwt_jti_optional',
         :'hydra_oauth2_grant_jwt_max_ttl' => :'hydra_oauth2_grant_jwt_max_ttl',
+        :'hydra_oauth2_grant_jwt_omit_assertion_audience' => :'hydra_oauth2_grant_jwt_omit_assertion_audience',
+        :'hydra_oauth2_grant_refresh_token_rotation_grace_period' => :'hydra_oauth2_grant_refresh_token_rotation_grace_period',
+        :'hydra_oauth2_grant_refresh_token_rotation_grace_reuse_count' => :'hydra_oauth2_grant_refresh_token_rotation_grace_reuse_count',
         :'hydra_oauth2_mirror_top_level_claims' => :'hydra_oauth2_mirror_top_level_claims',
         :'hydra_oauth2_pkce_enforced' => :'hydra_oauth2_pkce_enforced',
         :'hydra_oauth2_pkce_enforced_for_public_clients' => :'hydra_oauth2_pkce_enforced_for_public_clients',
+        :'hydra_oauth2_preserve_ext_claims' => :'hydra_oauth2_preserve_ext_claims',
         :'hydra_oauth2_refresh_token_hook' => :'hydra_oauth2_refresh_token_hook',
         :'hydra_oauth2_token_hook' => :'hydra_oauth2_token_hook',
+        :'hydra_oauth2_token_prefix' => :'hydra_oauth2_token_prefix',
         :'hydra_oidc_dynamic_client_registration_default_scope' => :'hydra_oidc_dynamic_client_registration_default_scope',
         :'hydra_oidc_dynamic_client_registration_enabled' => :'hydra_oidc_dynamic_client_registration_enabled',
         :'hydra_oidc_subject_identifiers_pairwise_salt' => :'hydra_oidc_subject_identifiers_pairwise_salt',
         :'hydra_oidc_subject_identifiers_supported_types' => :'hydra_oidc_subject_identifiers_supported_types',
         :'hydra_secrets_cookie' => :'hydra_secrets_cookie',
+        :'hydra_secrets_pagination' => :'hydra_secrets_pagination',
         :'hydra_secrets_system' => :'hydra_secrets_system',
         :'hydra_serve_cookies_same_site_legacy_workaround' => :'hydra_serve_cookies_same_site_legacy_workaround',
         :'hydra_serve_cookies_same_site_mode' => :'hydra_serve_cookies_same_site_mode',
@@ -660,10 +939,13 @@ module OryClient
         :'hydra_strategies_scope' => :'hydra_strategies_scope',
         :'hydra_ttl_access_token' => :'hydra_ttl_access_token',
         :'hydra_ttl_auth_code' => :'hydra_ttl_auth_code',
+        :'hydra_ttl_device_user_code' => :'hydra_ttl_device_user_code',
         :'hydra_ttl_id_token' => :'hydra_ttl_id_token',
         :'hydra_ttl_login_consent_request' => :'hydra_ttl_login_consent_request',
         :'hydra_ttl_refresh_token' => :'hydra_ttl_refresh_token',
         :'hydra_urls_consent' => :'hydra_urls_consent',
+        :'hydra_urls_device_success' => :'hydra_urls_device_success',
+        :'hydra_urls_device_verification' => :'hydra_urls_device_verification',
         :'hydra_urls_error' => :'hydra_urls_error',
         :'hydra_urls_login' => :'hydra_urls_login',
         :'hydra_urls_logout' => :'hydra_urls_logout',
@@ -673,6 +955,7 @@ module OryClient
         :'hydra_webfinger_jwks_broadcast_keys' => :'hydra_webfinger_jwks_broadcast_keys',
         :'hydra_webfinger_oidc_discovery_auth_url' => :'hydra_webfinger_oidc_discovery_auth_url',
         :'hydra_webfinger_oidc_discovery_client_registration_url' => :'hydra_webfinger_oidc_discovery_client_registration_url',
+        :'hydra_webfinger_oidc_discovery_device_authorization_url' => :'hydra_webfinger_oidc_discovery_device_authorization_url',
         :'hydra_webfinger_oidc_discovery_jwks_url' => :'hydra_webfinger_oidc_discovery_jwks_url',
         :'hydra_webfinger_oidc_discovery_supported_claims' => :'hydra_webfinger_oidc_discovery_supported_claims',
         :'hydra_webfinger_oidc_discovery_supported_scope' => :'hydra_webfinger_oidc_discovery_supported_scope',
@@ -681,6 +964,7 @@ module OryClient
         :'id' => :'id',
         :'keto_namespace_configuration' => :'keto_namespace_configuration',
         :'keto_namespaces' => :'keto_namespaces',
+        :'keto_secrets_pagination' => :'keto_secrets_pagination',
         :'kratos_cookies_same_site' => :'kratos_cookies_same_site',
         :'kratos_courier_channels' => :'kratos_courier_channels',
         :'kratos_courier_delivery_strategy' => :'kratos_courier_delivery_strategy',
@@ -718,6 +1002,11 @@ module OryClient
         :'kratos_courier_templates_registration_code_valid_email_body_html' => :'kratos_courier_templates_registration_code_valid_email_body_html',
         :'kratos_courier_templates_registration_code_valid_email_body_plaintext' => :'kratos_courier_templates_registration_code_valid_email_body_plaintext',
         :'kratos_courier_templates_registration_code_valid_email_subject' => :'kratos_courier_templates_registration_code_valid_email_subject',
+        :'kratos_courier_templates_registration_code_valid_sms_body_plaintext' => :'kratos_courier_templates_registration_code_valid_sms_body_plaintext',
+        :'kratos_courier_templates_verifiable_address_changed_email_body_html' => :'kratos_courier_templates_verifiable_address_changed_email_body_html',
+        :'kratos_courier_templates_verifiable_address_changed_email_body_plaintext' => :'kratos_courier_templates_verifiable_address_changed_email_body_plaintext',
+        :'kratos_courier_templates_verifiable_address_changed_email_subject' => :'kratos_courier_templates_verifiable_address_changed_email_subject',
+        :'kratos_courier_templates_verifiable_address_changed_sms_body_plaintext' => :'kratos_courier_templates_verifiable_address_changed_sms_body_plaintext',
         :'kratos_courier_templates_verification_code_invalid_email_body_html' => :'kratos_courier_templates_verification_code_invalid_email_body_html',
         :'kratos_courier_templates_verification_code_invalid_email_body_plaintext' => :'kratos_courier_templates_verification_code_invalid_email_body_plaintext',
         :'kratos_courier_templates_verification_code_invalid_email_subject' => :'kratos_courier_templates_verification_code_invalid_email_subject',
@@ -733,7 +1022,13 @@ module OryClient
         :'kratos_courier_templates_verification_valid_email_subject' => :'kratos_courier_templates_verification_valid_email_subject',
         :'kratos_feature_flags_cacheable_sessions' => :'kratos_feature_flags_cacheable_sessions',
         :'kratos_feature_flags_cacheable_sessions_max_age' => :'kratos_feature_flags_cacheable_sessions_max_age',
+        :'kratos_feature_flags_choose_recovery_address' => :'kratos_feature_flags_choose_recovery_address',
         :'kratos_feature_flags_faster_session_extend' => :'kratos_feature_flags_faster_session_extend',
+        :'kratos_feature_flags_legacy_continue_with_verification_ui' => :'kratos_feature_flags_legacy_continue_with_verification_ui',
+        :'kratos_feature_flags_legacy_oidc_registration_node_group' => :'kratos_feature_flags_legacy_oidc_registration_node_group',
+        :'kratos_feature_flags_legacy_require_verified_login_error' => :'kratos_feature_flags_legacy_require_verified_login_error',
+        :'kratos_feature_flags_password_profile_registration_node_group' => :'kratos_feature_flags_password_profile_registration_node_group',
+        :'kratos_feature_flags_refresh_login_choose_address' => :'kratos_feature_flags_refresh_login_choose_address',
         :'kratos_feature_flags_use_continue_with_transitions' => :'kratos_feature_flags_use_continue_with_transitions',
         :'kratos_identity_schemas' => :'kratos_identity_schemas',
         :'kratos_oauth2_provider_headers' => :'kratos_oauth2_provider_headers',
@@ -743,6 +1038,8 @@ module OryClient
         :'kratos_secrets_cipher' => :'kratos_secrets_cipher',
         :'kratos_secrets_cookie' => :'kratos_secrets_cookie',
         :'kratos_secrets_default' => :'kratos_secrets_default',
+        :'kratos_secrets_pagination' => :'kratos_secrets_pagination',
+        :'kratos_security_account_enumeration_mitigate' => :'kratos_security_account_enumeration_mitigate',
         :'kratos_selfservice_allowed_return_urls' => :'kratos_selfservice_allowed_return_urls',
         :'kratos_selfservice_default_browser_return_url' => :'kratos_selfservice_default_browser_return_url',
         :'kratos_selfservice_flows_error_ui_url' => :'kratos_selfservice_flows_error_ui_url',
@@ -755,6 +1052,7 @@ module OryClient
         :'kratos_selfservice_flows_login_after_totp_default_browser_return_url' => :'kratos_selfservice_flows_login_after_totp_default_browser_return_url',
         :'kratos_selfservice_flows_login_after_webauthn_default_browser_return_url' => :'kratos_selfservice_flows_login_after_webauthn_default_browser_return_url',
         :'kratos_selfservice_flows_login_lifespan' => :'kratos_selfservice_flows_login_lifespan',
+        :'kratos_selfservice_flows_login_style' => :'kratos_selfservice_flows_login_style',
         :'kratos_selfservice_flows_login_ui_url' => :'kratos_selfservice_flows_login_ui_url',
         :'kratos_selfservice_flows_logout_after_default_browser_return_url' => :'kratos_selfservice_flows_logout_after_default_browser_return_url',
         :'kratos_selfservice_flows_recovery_after_default_browser_return_url' => :'kratos_selfservice_flows_recovery_after_default_browser_return_url',
@@ -792,18 +1090,35 @@ module OryClient
         :'kratos_selfservice_flows_verification_notify_unknown_recipients' => :'kratos_selfservice_flows_verification_notify_unknown_recipients',
         :'kratos_selfservice_flows_verification_ui_url' => :'kratos_selfservice_flows_verification_ui_url',
         :'kratos_selfservice_flows_verification_use' => :'kratos_selfservice_flows_verification_use',
+        :'kratos_selfservice_methods_captcha_config_allowed_domains' => :'kratos_selfservice_methods_captcha_config_allowed_domains',
+        :'kratos_selfservice_methods_captcha_config_byo' => :'kratos_selfservice_methods_captcha_config_byo',
+        :'kratos_selfservice_methods_captcha_config_cf_turnstile_byo_secret' => :'kratos_selfservice_methods_captcha_config_cf_turnstile_byo_secret',
+        :'kratos_selfservice_methods_captcha_config_cf_turnstile_byo_sitekey' => :'kratos_selfservice_methods_captcha_config_cf_turnstile_byo_sitekey',
+        :'kratos_selfservice_methods_captcha_config_cf_turnstile_secret' => :'kratos_selfservice_methods_captcha_config_cf_turnstile_secret',
+        :'kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey' => :'kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey',
+        :'kratos_selfservice_methods_captcha_config_legacy_inject_node' => :'kratos_selfservice_methods_captcha_config_legacy_inject_node',
+        :'kratos_selfservice_methods_captcha_enabled' => :'kratos_selfservice_methods_captcha_enabled',
         :'kratos_selfservice_methods_code_config_lifespan' => :'kratos_selfservice_methods_code_config_lifespan',
+        :'kratos_selfservice_methods_code_config_max_submissions' => :'kratos_selfservice_methods_code_config_max_submissions',
         :'kratos_selfservice_methods_code_config_missing_credential_fallback_enabled' => :'kratos_selfservice_methods_code_config_missing_credential_fallback_enabled',
         :'kratos_selfservice_methods_code_enabled' => :'kratos_selfservice_methods_code_enabled',
         :'kratos_selfservice_methods_code_mfa_enabled' => :'kratos_selfservice_methods_code_mfa_enabled',
         :'kratos_selfservice_methods_code_passwordless_enabled' => :'kratos_selfservice_methods_code_passwordless_enabled',
         :'kratos_selfservice_methods_code_passwordless_login_fallback_enabled' => :'kratos_selfservice_methods_code_passwordless_login_fallback_enabled',
+        :'kratos_selfservice_methods_deviceauthn_config_android_app_ids' => :'kratos_selfservice_methods_deviceauthn_config_android_app_ids',
+        :'kratos_selfservice_methods_deviceauthn_config_first_factor' => :'kratos_selfservice_methods_deviceauthn_config_first_factor',
+        :'kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation' => :'kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation',
+        :'kratos_selfservice_methods_deviceauthn_config_ios_app_ids' => :'kratos_selfservice_methods_deviceauthn_config_ios_app_ids',
+        :'kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor' => :'kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor',
+        :'kratos_selfservice_methods_deviceauthn_config_pin_max_attempts' => :'kratos_selfservice_methods_deviceauthn_config_pin_max_attempts',
+        :'kratos_selfservice_methods_deviceauthn_enabled' => :'kratos_selfservice_methods_deviceauthn_enabled',
         :'kratos_selfservice_methods_link_config_base_url' => :'kratos_selfservice_methods_link_config_base_url',
         :'kratos_selfservice_methods_link_config_lifespan' => :'kratos_selfservice_methods_link_config_lifespan',
         :'kratos_selfservice_methods_link_enabled' => :'kratos_selfservice_methods_link_enabled',
         :'kratos_selfservice_methods_lookup_secret_enabled' => :'kratos_selfservice_methods_lookup_secret_enabled',
         :'kratos_selfservice_methods_oidc_config_base_redirect_uri' => :'kratos_selfservice_methods_oidc_config_base_redirect_uri',
         :'kratos_selfservice_methods_oidc_config_providers' => :'kratos_selfservice_methods_oidc_config_providers',
+        :'kratos_selfservice_methods_oidc_enable_auto_link_policy' => :'kratos_selfservice_methods_oidc_enable_auto_link_policy',
         :'kratos_selfservice_methods_oidc_enabled' => :'kratos_selfservice_methods_oidc_enabled',
         :'kratos_selfservice_methods_passkey_config_rp_display_name' => :'kratos_selfservice_methods_passkey_config_rp_display_name',
         :'kratos_selfservice_methods_passkey_config_rp_id' => :'kratos_selfservice_methods_passkey_config_rp_id',
@@ -816,6 +1131,8 @@ module OryClient
         :'kratos_selfservice_methods_password_config_min_password_length' => :'kratos_selfservice_methods_password_config_min_password_length',
         :'kratos_selfservice_methods_password_enabled' => :'kratos_selfservice_methods_password_enabled',
         :'kratos_selfservice_methods_profile_enabled' => :'kratos_selfservice_methods_profile_enabled',
+        :'kratos_selfservice_methods_saml_config_providers' => :'kratos_selfservice_methods_saml_config_providers',
+        :'kratos_selfservice_methods_saml_enabled' => :'kratos_selfservice_methods_saml_enabled',
         :'kratos_selfservice_methods_totp_config_issuer' => :'kratos_selfservice_methods_totp_config_issuer',
         :'kratos_selfservice_methods_totp_enabled' => :'kratos_selfservice_methods_totp_enabled',
         :'kratos_selfservice_methods_webauthn_config_passwordless' => :'kratos_selfservice_methods_webauthn_config_passwordless',
@@ -830,44 +1147,92 @@ module OryClient
         :'kratos_session_whoami_required_aal' => :'kratos_session_whoami_required_aal',
         :'kratos_session_whoami_tokenizer_templates' => :'kratos_session_whoami_tokenizer_templates',
         :'name' => :'name',
+        :'organizations' => :'organizations',
         :'project_id' => :'project_id',
         :'project_revision_hooks' => :'project_revision_hooks',
+        :'scim_clients' => :'scim_clients',
         :'serve_admin_cors_allowed_origins' => :'serve_admin_cors_allowed_origins',
         :'serve_admin_cors_enabled' => :'serve_admin_cors_enabled',
         :'serve_public_cors_allowed_origins' => :'serve_public_cors_allowed_origins',
         :'serve_public_cors_enabled' => :'serve_public_cors_enabled',
         :'strict_security' => :'strict_security',
+        :'talos_cache_enabled' => :'talos_cache_enabled',
+        :'talos_cache_ttl' => :'talos_cache_ttl',
+        :'talos_credentials_api_keys_default_ttl' => :'talos_credentials_api_keys_default_ttl',
+        :'talos_credentials_api_keys_max_ttl' => :'talos_credentials_api_keys_max_ttl',
+        :'talos_credentials_api_keys_prefix_current' => :'talos_credentials_api_keys_prefix_current',
+        :'talos_credentials_api_keys_prefix_public_current' => :'talos_credentials_api_keys_prefix_public_current',
+        :'talos_credentials_api_keys_prefix_public_retired' => :'talos_credentials_api_keys_prefix_public_retired',
+        :'talos_credentials_api_keys_prefix_retired' => :'talos_credentials_api_keys_prefix_retired',
+        :'talos_credentials_derived_tokens_default_ttl' => :'talos_credentials_derived_tokens_default_ttl',
+        :'talos_credentials_derived_tokens_jwt_signing_key_id' => :'talos_credentials_derived_tokens_jwt_signing_key_id',
+        :'talos_credentials_derived_tokens_jwt_signing_keys_urls' => :'talos_credentials_derived_tokens_jwt_signing_keys_urls',
+        :'talos_credentials_derived_tokens_macaroon_prefix_current' => :'talos_credentials_derived_tokens_macaroon_prefix_current',
+        :'talos_credentials_derived_tokens_macaroon_prefix_retired' => :'talos_credentials_derived_tokens_macaroon_prefix_retired',
+        :'talos_credentials_issuer' => :'talos_credentials_issuer',
+        :'talos_credentials_issuer_retired' => :'talos_credentials_issuer_retired',
+        :'talos_rate_limit_enabled' => :'talos_rate_limit_enabled',
+        :'talos_secrets_hmac_current' => :'talos_secrets_hmac_current',
+        :'talos_secrets_hmac_retired' => :'talos_secrets_hmac_retired',
         :'updated_at' => :'updated_at'
       }
     end
 
+    # Returns attribute mapping this model knows about
+    def self.acceptable_attribute_map
+      attribute_map
+    end
+
     # Returns all the JSON keys this model knows about
     def self.acceptable_attributes
-      attribute_map.values
+      acceptable_attribute_map.values
     end
 
     # Attribute type mapping.
     def self.openapi_types
       {
+        :'account_experience_contact_url' => :'String',
+        :'account_experience_custom_translations' => :'Array<RevisionAccountExperienceCustomTranslation>',
+        :'account_experience_default_locale' => :'String',
+        :'account_experience_enabled_locales' => :'Array<String>',
+        :'account_experience_favicon_dark' => :'String',
+        :'account_experience_favicon_light' => :'String',
+        :'account_experience_hide_ory_branding' => :'Boolean',
+        :'account_experience_hide_registration_link' => :'Boolean',
+        :'account_experience_locale_behavior' => :'String',
+        :'account_experience_logo_dark' => :'String',
+        :'account_experience_logo_light' => :'String',
+        :'account_experience_privacy_policy_url' => :'String',
+        :'account_experience_terms_of_service_url' => :'String',
+        :'account_experience_theme_variables_dark' => :'String',
+        :'account_experience_theme_variables_light' => :'String',
         :'created_at' => :'Time',
         :'disable_account_experience_welcome_screen' => :'Boolean',
         :'enable_ax_v2' => :'Boolean',
         :'hydra_oauth2_allowed_top_level_claims' => :'Array<String>',
         :'hydra_oauth2_client_credentials_default_grant_allowed_scope' => :'Boolean',
+        :'hydra_oauth2_device_authorization_token_polling_interval' => :'String',
+        :'hydra_oauth2_device_authorization_user_code_entropy_preset' => :'String',
         :'hydra_oauth2_exclude_not_before_claim' => :'Boolean',
         :'hydra_oauth2_grant_jwt_iat_optional' => :'Boolean',
         :'hydra_oauth2_grant_jwt_jti_optional' => :'Boolean',
         :'hydra_oauth2_grant_jwt_max_ttl' => :'String',
+        :'hydra_oauth2_grant_jwt_omit_assertion_audience' => :'Boolean',
+        :'hydra_oauth2_grant_refresh_token_rotation_grace_period' => :'String',
+        :'hydra_oauth2_grant_refresh_token_rotation_grace_reuse_count' => :'Integer',
         :'hydra_oauth2_mirror_top_level_claims' => :'Boolean',
         :'hydra_oauth2_pkce_enforced' => :'Boolean',
         :'hydra_oauth2_pkce_enforced_for_public_clients' => :'Boolean',
+        :'hydra_oauth2_preserve_ext_claims' => :'Boolean',
         :'hydra_oauth2_refresh_token_hook' => :'String',
         :'hydra_oauth2_token_hook' => :'String',
+        :'hydra_oauth2_token_prefix' => :'String',
         :'hydra_oidc_dynamic_client_registration_default_scope' => :'Array<String>',
         :'hydra_oidc_dynamic_client_registration_enabled' => :'Boolean',
         :'hydra_oidc_subject_identifiers_pairwise_salt' => :'String',
         :'hydra_oidc_subject_identifiers_supported_types' => :'Array<String>',
         :'hydra_secrets_cookie' => :'Array<String>',
+        :'hydra_secrets_pagination' => :'Array<String>',
         :'hydra_secrets_system' => :'Array<String>',
         :'hydra_serve_cookies_same_site_legacy_workaround' => :'Boolean',
         :'hydra_serve_cookies_same_site_mode' => :'String',
@@ -876,10 +1241,13 @@ module OryClient
         :'hydra_strategies_scope' => :'String',
         :'hydra_ttl_access_token' => :'String',
         :'hydra_ttl_auth_code' => :'String',
+        :'hydra_ttl_device_user_code' => :'String',
         :'hydra_ttl_id_token' => :'String',
         :'hydra_ttl_login_consent_request' => :'String',
         :'hydra_ttl_refresh_token' => :'String',
         :'hydra_urls_consent' => :'String',
+        :'hydra_urls_device_success' => :'String',
+        :'hydra_urls_device_verification' => :'String',
         :'hydra_urls_error' => :'String',
         :'hydra_urls_login' => :'String',
         :'hydra_urls_logout' => :'String',
@@ -889,6 +1257,7 @@ module OryClient
         :'hydra_webfinger_jwks_broadcast_keys' => :'Array<String>',
         :'hydra_webfinger_oidc_discovery_auth_url' => :'String',
         :'hydra_webfinger_oidc_discovery_client_registration_url' => :'String',
+        :'hydra_webfinger_oidc_discovery_device_authorization_url' => :'String',
         :'hydra_webfinger_oidc_discovery_jwks_url' => :'String',
         :'hydra_webfinger_oidc_discovery_supported_claims' => :'Array<String>',
         :'hydra_webfinger_oidc_discovery_supported_scope' => :'Array<String>',
@@ -897,6 +1266,7 @@ module OryClient
         :'id' => :'String',
         :'keto_namespace_configuration' => :'String',
         :'keto_namespaces' => :'Array<KetoNamespace>',
+        :'keto_secrets_pagination' => :'Array<String>',
         :'kratos_cookies_same_site' => :'String',
         :'kratos_courier_channels' => :'Array<NormalizedProjectRevisionCourierChannel>',
         :'kratos_courier_delivery_strategy' => :'String',
@@ -934,6 +1304,11 @@ module OryClient
         :'kratos_courier_templates_registration_code_valid_email_body_html' => :'String',
         :'kratos_courier_templates_registration_code_valid_email_body_plaintext' => :'String',
         :'kratos_courier_templates_registration_code_valid_email_subject' => :'String',
+        :'kratos_courier_templates_registration_code_valid_sms_body_plaintext' => :'String',
+        :'kratos_courier_templates_verifiable_address_changed_email_body_html' => :'String',
+        :'kratos_courier_templates_verifiable_address_changed_email_body_plaintext' => :'String',
+        :'kratos_courier_templates_verifiable_address_changed_email_subject' => :'String',
+        :'kratos_courier_templates_verifiable_address_changed_sms_body_plaintext' => :'String',
         :'kratos_courier_templates_verification_code_invalid_email_body_html' => :'String',
         :'kratos_courier_templates_verification_code_invalid_email_body_plaintext' => :'String',
         :'kratos_courier_templates_verification_code_invalid_email_subject' => :'String',
@@ -949,7 +1324,13 @@ module OryClient
         :'kratos_courier_templates_verification_valid_email_subject' => :'String',
         :'kratos_feature_flags_cacheable_sessions' => :'Boolean',
         :'kratos_feature_flags_cacheable_sessions_max_age' => :'String',
+        :'kratos_feature_flags_choose_recovery_address' => :'Boolean',
         :'kratos_feature_flags_faster_session_extend' => :'Boolean',
+        :'kratos_feature_flags_legacy_continue_with_verification_ui' => :'Boolean',
+        :'kratos_feature_flags_legacy_oidc_registration_node_group' => :'Boolean',
+        :'kratos_feature_flags_legacy_require_verified_login_error' => :'Boolean',
+        :'kratos_feature_flags_password_profile_registration_node_group' => :'Boolean',
+        :'kratos_feature_flags_refresh_login_choose_address' => :'Boolean',
         :'kratos_feature_flags_use_continue_with_transitions' => :'Boolean',
         :'kratos_identity_schemas' => :'Array<NormalizedProjectRevisionIdentitySchema>',
         :'kratos_oauth2_provider_headers' => :'Object',
@@ -959,6 +1340,8 @@ module OryClient
         :'kratos_secrets_cipher' => :'Array<String>',
         :'kratos_secrets_cookie' => :'Array<String>',
         :'kratos_secrets_default' => :'Array<String>',
+        :'kratos_secrets_pagination' => :'Array<String>',
+        :'kratos_security_account_enumeration_mitigate' => :'Boolean',
         :'kratos_selfservice_allowed_return_urls' => :'Array<String>',
         :'kratos_selfservice_default_browser_return_url' => :'String',
         :'kratos_selfservice_flows_error_ui_url' => :'String',
@@ -971,6 +1354,7 @@ module OryClient
         :'kratos_selfservice_flows_login_after_totp_default_browser_return_url' => :'String',
         :'kratos_selfservice_flows_login_after_webauthn_default_browser_return_url' => :'String',
         :'kratos_selfservice_flows_login_lifespan' => :'String',
+        :'kratos_selfservice_flows_login_style' => :'String',
         :'kratos_selfservice_flows_login_ui_url' => :'String',
         :'kratos_selfservice_flows_logout_after_default_browser_return_url' => :'String',
         :'kratos_selfservice_flows_recovery_after_default_browser_return_url' => :'String',
@@ -1008,18 +1392,35 @@ module OryClient
         :'kratos_selfservice_flows_verification_notify_unknown_recipients' => :'Boolean',
         :'kratos_selfservice_flows_verification_ui_url' => :'String',
         :'kratos_selfservice_flows_verification_use' => :'String',
+        :'kratos_selfservice_methods_captcha_config_allowed_domains' => :'Array<String>',
+        :'kratos_selfservice_methods_captcha_config_byo' => :'Boolean',
+        :'kratos_selfservice_methods_captcha_config_cf_turnstile_byo_secret' => :'String',
+        :'kratos_selfservice_methods_captcha_config_cf_turnstile_byo_sitekey' => :'String',
+        :'kratos_selfservice_methods_captcha_config_cf_turnstile_secret' => :'String',
+        :'kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey' => :'String',
+        :'kratos_selfservice_methods_captcha_config_legacy_inject_node' => :'Boolean',
+        :'kratos_selfservice_methods_captcha_enabled' => :'Boolean',
         :'kratos_selfservice_methods_code_config_lifespan' => :'String',
+        :'kratos_selfservice_methods_code_config_max_submissions' => :'Integer',
         :'kratos_selfservice_methods_code_config_missing_credential_fallback_enabled' => :'Boolean',
         :'kratos_selfservice_methods_code_enabled' => :'Boolean',
         :'kratos_selfservice_methods_code_mfa_enabled' => :'Boolean',
         :'kratos_selfservice_methods_code_passwordless_enabled' => :'Boolean',
         :'kratos_selfservice_methods_code_passwordless_login_fallback_enabled' => :'Boolean',
+        :'kratos_selfservice_methods_deviceauthn_config_android_app_ids' => :'Array<String>',
+        :'kratos_selfservice_methods_deviceauthn_config_first_factor' => :'Boolean',
+        :'kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation' => :'Boolean',
+        :'kratos_selfservice_methods_deviceauthn_config_ios_app_ids' => :'Array<String>',
+        :'kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor' => :'Boolean',
+        :'kratos_selfservice_methods_deviceauthn_config_pin_max_attempts' => :'Integer',
+        :'kratos_selfservice_methods_deviceauthn_enabled' => :'Boolean',
         :'kratos_selfservice_methods_link_config_base_url' => :'String',
         :'kratos_selfservice_methods_link_config_lifespan' => :'String',
         :'kratos_selfservice_methods_link_enabled' => :'Boolean',
         :'kratos_selfservice_methods_lookup_secret_enabled' => :'Boolean',
         :'kratos_selfservice_methods_oidc_config_base_redirect_uri' => :'String',
         :'kratos_selfservice_methods_oidc_config_providers' => :'Array<NormalizedProjectRevisionThirdPartyProvider>',
+        :'kratos_selfservice_methods_oidc_enable_auto_link_policy' => :'Boolean',
         :'kratos_selfservice_methods_oidc_enabled' => :'Boolean',
         :'kratos_selfservice_methods_passkey_config_rp_display_name' => :'String',
         :'kratos_selfservice_methods_passkey_config_rp_id' => :'String',
@@ -1032,6 +1433,8 @@ module OryClient
         :'kratos_selfservice_methods_password_config_min_password_length' => :'Integer',
         :'kratos_selfservice_methods_password_enabled' => :'Boolean',
         :'kratos_selfservice_methods_profile_enabled' => :'Boolean',
+        :'kratos_selfservice_methods_saml_config_providers' => :'Array<NormalizedProjectRevisionSAMLProvider>',
+        :'kratos_selfservice_methods_saml_enabled' => :'Boolean',
         :'kratos_selfservice_methods_totp_config_issuer' => :'String',
         :'kratos_selfservice_methods_totp_enabled' => :'Boolean',
         :'kratos_selfservice_methods_webauthn_config_passwordless' => :'Boolean',
@@ -1046,13 +1449,33 @@ module OryClient
         :'kratos_session_whoami_required_aal' => :'String',
         :'kratos_session_whoami_tokenizer_templates' => :'Array<NormalizedProjectRevisionTokenizerTemplate>',
         :'name' => :'String',
+        :'organizations' => :'Array<Organization>',
         :'project_id' => :'String',
         :'project_revision_hooks' => :'Array<NormalizedProjectRevisionHook>',
+        :'scim_clients' => :'Array<NormalizedProjectRevisionScimClient>',
         :'serve_admin_cors_allowed_origins' => :'Array<String>',
         :'serve_admin_cors_enabled' => :'Boolean',
         :'serve_public_cors_allowed_origins' => :'Array<String>',
         :'serve_public_cors_enabled' => :'Boolean',
         :'strict_security' => :'Boolean',
+        :'talos_cache_enabled' => :'Boolean',
+        :'talos_cache_ttl' => :'String',
+        :'talos_credentials_api_keys_default_ttl' => :'String',
+        :'talos_credentials_api_keys_max_ttl' => :'String',
+        :'talos_credentials_api_keys_prefix_current' => :'String',
+        :'talos_credentials_api_keys_prefix_public_current' => :'String',
+        :'talos_credentials_api_keys_prefix_public_retired' => :'Array<String>',
+        :'talos_credentials_api_keys_prefix_retired' => :'Array<String>',
+        :'talos_credentials_derived_tokens_default_ttl' => :'String',
+        :'talos_credentials_derived_tokens_jwt_signing_key_id' => :'String',
+        :'talos_credentials_derived_tokens_jwt_signing_keys_urls' => :'Array<String>',
+        :'talos_credentials_derived_tokens_macaroon_prefix_current' => :'String',
+        :'talos_credentials_derived_tokens_macaroon_prefix_retired' => :'Array<String>',
+        :'talos_credentials_issuer' => :'String',
+        :'talos_credentials_issuer_retired' => :'Array<String>',
+        :'talos_rate_limit_enabled' => :'Boolean',
+        :'talos_secrets_hmac_current' => :'String',
+        :'talos_secrets_hmac_retired' => :'Array<String>',
         :'updated_at' => :'Time'
       }
     end
@@ -1060,9 +1483,6 @@ module OryClient
     # List of attributes with nullable: true
     def self.openapi_nullable
       Set.new([
-        :'kratos_courier_http_request_config_headers',
-        :'kratos_courier_smtp_headers',
-        :'kratos_oauth2_provider_headers',
       ])
     end
 
@@ -1074,13 +1494,78 @@ module OryClient
       end
 
       # check to see if the attribute exists and convert string to symbol for hash key
+      acceptable_attribute_map = self.class.acceptable_attribute_map
       attributes = attributes.each_with_object({}) { |(k, v), h|
-        if (!self.class.attribute_map.key?(k.to_sym))
-          fail ArgumentError, "`#{k}` is not a valid attribute in `OryClient::NormalizedProjectRevision`. Please check the name to make sure it's valid. List of attributes: " + self.class.attribute_map.keys.inspect
+        if (!acceptable_attribute_map.key?(k.to_sym))
+          fail ArgumentError, "`#{k}` is not a valid attribute in `OryClient::NormalizedProjectRevision`. Please check the name to make sure it's valid. List of attributes: " + acceptable_attribute_map.keys.inspect
         end
         h[k.to_sym] = v
       }
 
+      if attributes.key?(:'account_experience_contact_url')
+        self.account_experience_contact_url = attributes[:'account_experience_contact_url']
+      end
+
+      if attributes.key?(:'account_experience_custom_translations')
+        if (value = attributes[:'account_experience_custom_translations']).is_a?(Array)
+          self.account_experience_custom_translations = value
+        end
+      end
+
+      if attributes.key?(:'account_experience_default_locale')
+        self.account_experience_default_locale = attributes[:'account_experience_default_locale']
+      end
+
+      if attributes.key?(:'account_experience_enabled_locales')
+        if (value = attributes[:'account_experience_enabled_locales']).is_a?(Array)
+          self.account_experience_enabled_locales = value
+        end
+      end
+
+      if attributes.key?(:'account_experience_favicon_dark')
+        self.account_experience_favicon_dark = attributes[:'account_experience_favicon_dark']
+      end
+
+      if attributes.key?(:'account_experience_favicon_light')
+        self.account_experience_favicon_light = attributes[:'account_experience_favicon_light']
+      end
+
+      if attributes.key?(:'account_experience_hide_ory_branding')
+        self.account_experience_hide_ory_branding = attributes[:'account_experience_hide_ory_branding']
+      end
+
+      if attributes.key?(:'account_experience_hide_registration_link')
+        self.account_experience_hide_registration_link = attributes[:'account_experience_hide_registration_link']
+      end
+
+      if attributes.key?(:'account_experience_locale_behavior')
+        self.account_experience_locale_behavior = attributes[:'account_experience_locale_behavior']
+      end
+
+      if attributes.key?(:'account_experience_logo_dark')
+        self.account_experience_logo_dark = attributes[:'account_experience_logo_dark']
+      end
+
+      if attributes.key?(:'account_experience_logo_light')
+        self.account_experience_logo_light = attributes[:'account_experience_logo_light']
+      end
+
+      if attributes.key?(:'account_experience_privacy_policy_url')
+        self.account_experience_privacy_policy_url = attributes[:'account_experience_privacy_policy_url']
+      end
+
+      if attributes.key?(:'account_experience_terms_of_service_url')
+        self.account_experience_terms_of_service_url = attributes[:'account_experience_terms_of_service_url']
+      end
+
+      if attributes.key?(:'account_experience_theme_variables_dark')
+        self.account_experience_theme_variables_dark = attributes[:'account_experience_theme_variables_dark']
+      end
+
+      if attributes.key?(:'account_experience_theme_variables_light')
+        self.account_experience_theme_variables_light = attributes[:'account_experience_theme_variables_light']
+      end
+
       if attributes.key?(:'created_at')
         self.created_at = attributes[:'created_at']
       end
@@ -1103,6 +1588,14 @@ module OryClient
         self.hydra_oauth2_client_credentials_default_grant_allowed_scope = attributes[:'hydra_oauth2_client_credentials_default_grant_allowed_scope']
       end
 
+      if attributes.key?(:'hydra_oauth2_device_authorization_token_polling_interval')
+        self.hydra_oauth2_device_authorization_token_polling_interval = attributes[:'hydra_oauth2_device_authorization_token_polling_interval']
+      end
+
+      if attributes.key?(:'hydra_oauth2_device_authorization_user_code_entropy_preset')
+        self.hydra_oauth2_device_authorization_user_code_entropy_preset = attributes[:'hydra_oauth2_device_authorization_user_code_entropy_preset']
+      end
+
       if attributes.key?(:'hydra_oauth2_exclude_not_before_claim')
         self.hydra_oauth2_exclude_not_before_claim = attributes[:'hydra_oauth2_exclude_not_before_claim']
       end
@@ -1121,6 +1614,18 @@ module OryClient
         self.hydra_oauth2_grant_jwt_max_ttl = '720h'
       end
 
+      if attributes.key?(:'hydra_oauth2_grant_jwt_omit_assertion_audience')
+        self.hydra_oauth2_grant_jwt_omit_assertion_audience = attributes[:'hydra_oauth2_grant_jwt_omit_assertion_audience']
+      end
+
+      if attributes.key?(:'hydra_oauth2_grant_refresh_token_rotation_grace_period')
+        self.hydra_oauth2_grant_refresh_token_rotation_grace_period = attributes[:'hydra_oauth2_grant_refresh_token_rotation_grace_period']
+      end
+
+      if attributes.key?(:'hydra_oauth2_grant_refresh_token_rotation_grace_reuse_count')
+        self.hydra_oauth2_grant_refresh_token_rotation_grace_reuse_count = attributes[:'hydra_oauth2_grant_refresh_token_rotation_grace_reuse_count']
+      end
+
       if attributes.key?(:'hydra_oauth2_mirror_top_level_claims')
         self.hydra_oauth2_mirror_top_level_claims = attributes[:'hydra_oauth2_mirror_top_level_claims']
       end
@@ -1133,6 +1638,10 @@ module OryClient
         self.hydra_oauth2_pkce_enforced_for_public_clients = attributes[:'hydra_oauth2_pkce_enforced_for_public_clients']
       end
 
+      if attributes.key?(:'hydra_oauth2_preserve_ext_claims')
+        self.hydra_oauth2_preserve_ext_claims = attributes[:'hydra_oauth2_preserve_ext_claims']
+      end
+
       if attributes.key?(:'hydra_oauth2_refresh_token_hook')
         self.hydra_oauth2_refresh_token_hook = attributes[:'hydra_oauth2_refresh_token_hook']
       end
@@ -1141,6 +1650,10 @@ module OryClient
         self.hydra_oauth2_token_hook = attributes[:'hydra_oauth2_token_hook']
       end
 
+      if attributes.key?(:'hydra_oauth2_token_prefix')
+        self.hydra_oauth2_token_prefix = attributes[:'hydra_oauth2_token_prefix']
+      end
+
       if attributes.key?(:'hydra_oidc_dynamic_client_registration_default_scope')
         if (value = attributes[:'hydra_oidc_dynamic_client_registration_default_scope']).is_a?(Array)
           self.hydra_oidc_dynamic_client_registration_default_scope = value
@@ -1167,6 +1680,12 @@ module OryClient
         end
       end
 
+      if attributes.key?(:'hydra_secrets_pagination')
+        if (value = attributes[:'hydra_secrets_pagination']).is_a?(Array)
+          self.hydra_secrets_pagination = value
+        end
+      end
+
       if attributes.key?(:'hydra_secrets_system')
         if (value = attributes[:'hydra_secrets_system']).is_a?(Array)
           self.hydra_secrets_system = value
@@ -1211,6 +1730,10 @@ module OryClient
         self.hydra_ttl_auth_code = '720h'
       end
 
+      if attributes.key?(:'hydra_ttl_device_user_code')
+        self.hydra_ttl_device_user_code = attributes[:'hydra_ttl_device_user_code']
+      end
+
       if attributes.key?(:'hydra_ttl_id_token')
         self.hydra_ttl_id_token = attributes[:'hydra_ttl_id_token']
       else
@@ -1233,6 +1756,14 @@ module OryClient
         self.hydra_urls_consent = attributes[:'hydra_urls_consent']
       end
 
+      if attributes.key?(:'hydra_urls_device_success')
+        self.hydra_urls_device_success = attributes[:'hydra_urls_device_success']
+      end
+
+      if attributes.key?(:'hydra_urls_device_verification')
+        self.hydra_urls_device_verification = attributes[:'hydra_urls_device_verification']
+      end
+
       if attributes.key?(:'hydra_urls_error')
         self.hydra_urls_error = attributes[:'hydra_urls_error']
       end
@@ -1271,6 +1802,10 @@ module OryClient
         self.hydra_webfinger_oidc_discovery_client_registration_url = attributes[:'hydra_webfinger_oidc_discovery_client_registration_url']
       end
 
+      if attributes.key?(:'hydra_webfinger_oidc_discovery_device_authorization_url')
+        self.hydra_webfinger_oidc_discovery_device_authorization_url = attributes[:'hydra_webfinger_oidc_discovery_device_authorization_url']
+      end
+
       if attributes.key?(:'hydra_webfinger_oidc_discovery_jwks_url')
         self.hydra_webfinger_oidc_discovery_jwks_url = attributes[:'hydra_webfinger_oidc_discovery_jwks_url']
       end
@@ -1309,6 +1844,12 @@ module OryClient
         end
       end
 
+      if attributes.key?(:'keto_secrets_pagination')
+        if (value = attributes[:'keto_secrets_pagination']).is_a?(Array)
+          self.keto_secrets_pagination = value
+        end
+      end
+
       if attributes.key?(:'kratos_cookies_same_site')
         self.kratos_cookies_same_site = attributes[:'kratos_cookies_same_site']
       end
@@ -1465,6 +2006,26 @@ module OryClient
         self.kratos_courier_templates_registration_code_valid_email_subject = attributes[:'kratos_courier_templates_registration_code_valid_email_subject']
       end
 
+      if attributes.key?(:'kratos_courier_templates_registration_code_valid_sms_body_plaintext')
+        self.kratos_courier_templates_registration_code_valid_sms_body_plaintext = attributes[:'kratos_courier_templates_registration_code_valid_sms_body_plaintext']
+      end
+
+      if attributes.key?(:'kratos_courier_templates_verifiable_address_changed_email_body_html')
+        self.kratos_courier_templates_verifiable_address_changed_email_body_html = attributes[:'kratos_courier_templates_verifiable_address_changed_email_body_html']
+      end
+
+      if attributes.key?(:'kratos_courier_templates_verifiable_address_changed_email_body_plaintext')
+        self.kratos_courier_templates_verifiable_address_changed_email_body_plaintext = attributes[:'kratos_courier_templates_verifiable_address_changed_email_body_plaintext']
+      end
+
+      if attributes.key?(:'kratos_courier_templates_verifiable_address_changed_email_subject')
+        self.kratos_courier_templates_verifiable_address_changed_email_subject = attributes[:'kratos_courier_templates_verifiable_address_changed_email_subject']
+      end
+
+      if attributes.key?(:'kratos_courier_templates_verifiable_address_changed_sms_body_plaintext')
+        self.kratos_courier_templates_verifiable_address_changed_sms_body_plaintext = attributes[:'kratos_courier_templates_verifiable_address_changed_sms_body_plaintext']
+      end
+
       if attributes.key?(:'kratos_courier_templates_verification_code_invalid_email_body_html')
         self.kratos_courier_templates_verification_code_invalid_email_body_html = attributes[:'kratos_courier_templates_verification_code_invalid_email_body_html']
       end
@@ -1525,10 +2086,34 @@ module OryClient
         self.kratos_feature_flags_cacheable_sessions_max_age = attributes[:'kratos_feature_flags_cacheable_sessions_max_age']
       end
 
+      if attributes.key?(:'kratos_feature_flags_choose_recovery_address')
+        self.kratos_feature_flags_choose_recovery_address = attributes[:'kratos_feature_flags_choose_recovery_address']
+      end
+
       if attributes.key?(:'kratos_feature_flags_faster_session_extend')
         self.kratos_feature_flags_faster_session_extend = attributes[:'kratos_feature_flags_faster_session_extend']
       end
 
+      if attributes.key?(:'kratos_feature_flags_legacy_continue_with_verification_ui')
+        self.kratos_feature_flags_legacy_continue_with_verification_ui = attributes[:'kratos_feature_flags_legacy_continue_with_verification_ui']
+      end
+
+      if attributes.key?(:'kratos_feature_flags_legacy_oidc_registration_node_group')
+        self.kratos_feature_flags_legacy_oidc_registration_node_group = attributes[:'kratos_feature_flags_legacy_oidc_registration_node_group']
+      end
+
+      if attributes.key?(:'kratos_feature_flags_legacy_require_verified_login_error')
+        self.kratos_feature_flags_legacy_require_verified_login_error = attributes[:'kratos_feature_flags_legacy_require_verified_login_error']
+      end
+
+      if attributes.key?(:'kratos_feature_flags_password_profile_registration_node_group')
+        self.kratos_feature_flags_password_profile_registration_node_group = attributes[:'kratos_feature_flags_password_profile_registration_node_group']
+      end
+
+      if attributes.key?(:'kratos_feature_flags_refresh_login_choose_address')
+        self.kratos_feature_flags_refresh_login_choose_address = attributes[:'kratos_feature_flags_refresh_login_choose_address']
+      end
+
       if attributes.key?(:'kratos_feature_flags_use_continue_with_transitions')
         self.kratos_feature_flags_use_continue_with_transitions = attributes[:'kratos_feature_flags_use_continue_with_transitions']
       end
@@ -1573,6 +2158,16 @@ module OryClient
         end
       end
 
+      if attributes.key?(:'kratos_secrets_pagination')
+        if (value = attributes[:'kratos_secrets_pagination']).is_a?(Array)
+          self.kratos_secrets_pagination = value
+        end
+      end
+
+      if attributes.key?(:'kratos_security_account_enumeration_mitigate')
+        self.kratos_security_account_enumeration_mitigate = attributes[:'kratos_security_account_enumeration_mitigate']
+      end
+
       if attributes.key?(:'kratos_selfservice_allowed_return_urls')
         if (value = attributes[:'kratos_selfservice_allowed_return_urls']).is_a?(Array)
           self.kratos_selfservice_allowed_return_urls = value
@@ -1623,6 +2218,10 @@ module OryClient
         self.kratos_selfservice_flows_login_lifespan = attributes[:'kratos_selfservice_flows_login_lifespan']
       end
 
+      if attributes.key?(:'kratos_selfservice_flows_login_style')
+        self.kratos_selfservice_flows_login_style = attributes[:'kratos_selfservice_flows_login_style']
+      end
+
       if attributes.key?(:'kratos_selfservice_flows_login_ui_url')
         self.kratos_selfservice_flows_login_ui_url = attributes[:'kratos_selfservice_flows_login_ui_url']
       end
@@ -1771,10 +2370,48 @@ module OryClient
         self.kratos_selfservice_flows_verification_use = attributes[:'kratos_selfservice_flows_verification_use']
       end
 
+      if attributes.key?(:'kratos_selfservice_methods_captcha_config_allowed_domains')
+        if (value = attributes[:'kratos_selfservice_methods_captcha_config_allowed_domains']).is_a?(Array)
+          self.kratos_selfservice_methods_captcha_config_allowed_domains = value
+        end
+      end
+
+      if attributes.key?(:'kratos_selfservice_methods_captcha_config_byo')
+        self.kratos_selfservice_methods_captcha_config_byo = attributes[:'kratos_selfservice_methods_captcha_config_byo']
+      end
+
+      if attributes.key?(:'kratos_selfservice_methods_captcha_config_cf_turnstile_byo_secret')
+        self.kratos_selfservice_methods_captcha_config_cf_turnstile_byo_secret = attributes[:'kratos_selfservice_methods_captcha_config_cf_turnstile_byo_secret']
+      end
+
+      if attributes.key?(:'kratos_selfservice_methods_captcha_config_cf_turnstile_byo_sitekey')
+        self.kratos_selfservice_methods_captcha_config_cf_turnstile_byo_sitekey = attributes[:'kratos_selfservice_methods_captcha_config_cf_turnstile_byo_sitekey']
+      end
+
+      if attributes.key?(:'kratos_selfservice_methods_captcha_config_cf_turnstile_secret')
+        self.kratos_selfservice_methods_captcha_config_cf_turnstile_secret = attributes[:'kratos_selfservice_methods_captcha_config_cf_turnstile_secret']
+      end
+
+      if attributes.key?(:'kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey')
+        self.kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey = attributes[:'kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey']
+      end
+
+      if attributes.key?(:'kratos_selfservice_methods_captcha_config_legacy_inject_node')
+        self.kratos_selfservice_methods_captcha_config_legacy_inject_node = attributes[:'kratos_selfservice_methods_captcha_config_legacy_inject_node']
+      end
+
+      if attributes.key?(:'kratos_selfservice_methods_captcha_enabled')
+        self.kratos_selfservice_methods_captcha_enabled = attributes[:'kratos_selfservice_methods_captcha_enabled']
+      end
+
       if attributes.key?(:'kratos_selfservice_methods_code_config_lifespan')
         self.kratos_selfservice_methods_code_config_lifespan = attributes[:'kratos_selfservice_methods_code_config_lifespan']
       end
 
+      if attributes.key?(:'kratos_selfservice_methods_code_config_max_submissions')
+        self.kratos_selfservice_methods_code_config_max_submissions = attributes[:'kratos_selfservice_methods_code_config_max_submissions']
+      end
+
       if attributes.key?(:'kratos_selfservice_methods_code_config_missing_credential_fallback_enabled')
         self.kratos_selfservice_methods_code_config_missing_credential_fallback_enabled = attributes[:'kratos_selfservice_methods_code_config_missing_credential_fallback_enabled']
       end
@@ -1795,6 +2432,38 @@ module OryClient
         self.kratos_selfservice_methods_code_passwordless_login_fallback_enabled = attributes[:'kratos_selfservice_methods_code_passwordless_login_fallback_enabled']
       end
 
+      if attributes.key?(:'kratos_selfservice_methods_deviceauthn_config_android_app_ids')
+        if (value = attributes[:'kratos_selfservice_methods_deviceauthn_config_android_app_ids']).is_a?(Array)
+          self.kratos_selfservice_methods_deviceauthn_config_android_app_ids = value
+        end
+      end
+
+      if attributes.key?(:'kratos_selfservice_methods_deviceauthn_config_first_factor')
+        self.kratos_selfservice_methods_deviceauthn_config_first_factor = attributes[:'kratos_selfservice_methods_deviceauthn_config_first_factor']
+      end
+
+      if attributes.key?(:'kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation')
+        self.kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation = attributes[:'kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation']
+      end
+
+      if attributes.key?(:'kratos_selfservice_methods_deviceauthn_config_ios_app_ids')
+        if (value = attributes[:'kratos_selfservice_methods_deviceauthn_config_ios_app_ids']).is_a?(Array)
+          self.kratos_selfservice_methods_deviceauthn_config_ios_app_ids = value
+        end
+      end
+
+      if attributes.key?(:'kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor')
+        self.kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor = attributes[:'kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor']
+      end
+
+      if attributes.key?(:'kratos_selfservice_methods_deviceauthn_config_pin_max_attempts')
+        self.kratos_selfservice_methods_deviceauthn_config_pin_max_attempts = attributes[:'kratos_selfservice_methods_deviceauthn_config_pin_max_attempts']
+      end
+
+      if attributes.key?(:'kratos_selfservice_methods_deviceauthn_enabled')
+        self.kratos_selfservice_methods_deviceauthn_enabled = attributes[:'kratos_selfservice_methods_deviceauthn_enabled']
+      end
+
       if attributes.key?(:'kratos_selfservice_methods_link_config_base_url')
         self.kratos_selfservice_methods_link_config_base_url = attributes[:'kratos_selfservice_methods_link_config_base_url']
       end
@@ -1821,6 +2490,10 @@ module OryClient
         end
       end
 
+      if attributes.key?(:'kratos_selfservice_methods_oidc_enable_auto_link_policy')
+        self.kratos_selfservice_methods_oidc_enable_auto_link_policy = attributes[:'kratos_selfservice_methods_oidc_enable_auto_link_policy']
+      end
+
       if attributes.key?(:'kratos_selfservice_methods_oidc_enabled')
         self.kratos_selfservice_methods_oidc_enabled = attributes[:'kratos_selfservice_methods_oidc_enabled']
       end
@@ -1871,6 +2544,16 @@ module OryClient
         self.kratos_selfservice_methods_profile_enabled = attributes[:'kratos_selfservice_methods_profile_enabled']
       end
 
+      if attributes.key?(:'kratos_selfservice_methods_saml_config_providers')
+        if (value = attributes[:'kratos_selfservice_methods_saml_config_providers']).is_a?(Array)
+          self.kratos_selfservice_methods_saml_config_providers = value
+        end
+      end
+
+      if attributes.key?(:'kratos_selfservice_methods_saml_enabled')
+        self.kratos_selfservice_methods_saml_enabled = attributes[:'kratos_selfservice_methods_saml_enabled']
+      end
+
       if attributes.key?(:'kratos_selfservice_methods_totp_config_issuer')
         self.kratos_selfservice_methods_totp_config_issuer = attributes[:'kratos_selfservice_methods_totp_config_issuer']
       end
@@ -1933,6 +2616,12 @@ module OryClient
         self.name = nil
       end
 
+      if attributes.key?(:'organizations')
+        if (value = attributes[:'organizations']).is_a?(Array)
+          self.organizations = value
+        end
+      end
+
       if attributes.key?(:'project_id')
         self.project_id = attributes[:'project_id']
       end
@@ -1943,6 +2632,12 @@ module OryClient
         end
       end
 
+      if attributes.key?(:'scim_clients')
+        if (value = attributes[:'scim_clients']).is_a?(Array)
+          self.scim_clients = value
+        end
+      end
+
       if attributes.key?(:'serve_admin_cors_allowed_origins')
         if (value = attributes[:'serve_admin_cors_allowed_origins']).is_a?(Array)
           self.serve_admin_cors_allowed_origins = value
@@ -1967,6 +2662,90 @@ module OryClient
         self.strict_security = attributes[:'strict_security']
       end
 
+      if attributes.key?(:'talos_cache_enabled')
+        self.talos_cache_enabled = attributes[:'talos_cache_enabled']
+      end
+
+      if attributes.key?(:'talos_cache_ttl')
+        self.talos_cache_ttl = attributes[:'talos_cache_ttl']
+      end
+
+      if attributes.key?(:'talos_credentials_api_keys_default_ttl')
+        self.talos_credentials_api_keys_default_ttl = attributes[:'talos_credentials_api_keys_default_ttl']
+      end
+
+      if attributes.key?(:'talos_credentials_api_keys_max_ttl')
+        self.talos_credentials_api_keys_max_ttl = attributes[:'talos_credentials_api_keys_max_ttl']
+      end
+
+      if attributes.key?(:'talos_credentials_api_keys_prefix_current')
+        self.talos_credentials_api_keys_prefix_current = attributes[:'talos_credentials_api_keys_prefix_current']
+      end
+
+      if attributes.key?(:'talos_credentials_api_keys_prefix_public_current')
+        self.talos_credentials_api_keys_prefix_public_current = attributes[:'talos_credentials_api_keys_prefix_public_current']
+      end
+
+      if attributes.key?(:'talos_credentials_api_keys_prefix_public_retired')
+        if (value = attributes[:'talos_credentials_api_keys_prefix_public_retired']).is_a?(Array)
+          self.talos_credentials_api_keys_prefix_public_retired = value
+        end
+      end
+
+      if attributes.key?(:'talos_credentials_api_keys_prefix_retired')
+        if (value = attributes[:'talos_credentials_api_keys_prefix_retired']).is_a?(Array)
+          self.talos_credentials_api_keys_prefix_retired = value
+        end
+      end
+
+      if attributes.key?(:'talos_credentials_derived_tokens_default_ttl')
+        self.talos_credentials_derived_tokens_default_ttl = attributes[:'talos_credentials_derived_tokens_default_ttl']
+      end
+
+      if attributes.key?(:'talos_credentials_derived_tokens_jwt_signing_key_id')
+        self.talos_credentials_derived_tokens_jwt_signing_key_id = attributes[:'talos_credentials_derived_tokens_jwt_signing_key_id']
+      end
+
+      if attributes.key?(:'talos_credentials_derived_tokens_jwt_signing_keys_urls')
+        if (value = attributes[:'talos_credentials_derived_tokens_jwt_signing_keys_urls']).is_a?(Array)
+          self.talos_credentials_derived_tokens_jwt_signing_keys_urls = value
+        end
+      end
+
+      if attributes.key?(:'talos_credentials_derived_tokens_macaroon_prefix_current')
+        self.talos_credentials_derived_tokens_macaroon_prefix_current = attributes[:'talos_credentials_derived_tokens_macaroon_prefix_current']
+      end
+
+      if attributes.key?(:'talos_credentials_derived_tokens_macaroon_prefix_retired')
+        if (value = attributes[:'talos_credentials_derived_tokens_macaroon_prefix_retired']).is_a?(Array)
+          self.talos_credentials_derived_tokens_macaroon_prefix_retired = value
+        end
+      end
+
+      if attributes.key?(:'talos_credentials_issuer')
+        self.talos_credentials_issuer = attributes[:'talos_credentials_issuer']
+      end
+
+      if attributes.key?(:'talos_credentials_issuer_retired')
+        if (value = attributes[:'talos_credentials_issuer_retired']).is_a?(Array)
+          self.talos_credentials_issuer_retired = value
+        end
+      end
+
+      if attributes.key?(:'talos_rate_limit_enabled')
+        self.talos_rate_limit_enabled = attributes[:'talos_rate_limit_enabled']
+      end
+
+      if attributes.key?(:'talos_secrets_hmac_current')
+        self.talos_secrets_hmac_current = attributes[:'talos_secrets_hmac_current']
+      end
+
+      if attributes.key?(:'talos_secrets_hmac_retired')
+        if (value = attributes[:'talos_secrets_hmac_retired']).is_a?(Array)
+          self.talos_secrets_hmac_retired = value
+        end
+      end
+
       if attributes.key?(:'updated_at')
         self.updated_at = attributes[:'updated_at']
       end
@@ -1977,32 +2756,42 @@ module OryClient
     def list_invalid_properties
       warn '[DEPRECATED] the `list_invalid_properties` method is obsolete'
       invalid_properties = Array.new
-      pattern = Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      if !@hydra_oauth2_device_authorization_token_polling_interval.nil? && @hydra_oauth2_device_authorization_token_polling_interval !~ pattern
+        invalid_properties.push("invalid value for \"hydra_oauth2_device_authorization_token_polling_interval\", must conform to the pattern #{pattern}.")
+      end
+
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
       if !@hydra_oauth2_grant_jwt_max_ttl.nil? && @hydra_oauth2_grant_jwt_max_ttl !~ pattern
         invalid_properties.push("invalid value for \"hydra_oauth2_grant_jwt_max_ttl\", must conform to the pattern #{pattern}.")
       end
 
-      pattern = Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
       if !@hydra_ttl_access_token.nil? && @hydra_ttl_access_token !~ pattern
         invalid_properties.push("invalid value for \"hydra_ttl_access_token\", must conform to the pattern #{pattern}.")
       end
 
-      pattern = Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
       if !@hydra_ttl_auth_code.nil? && @hydra_ttl_auth_code !~ pattern
         invalid_properties.push("invalid value for \"hydra_ttl_auth_code\", must conform to the pattern #{pattern}.")
       end
 
-      pattern = Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      if !@hydra_ttl_device_user_code.nil? && @hydra_ttl_device_user_code !~ pattern
+        invalid_properties.push("invalid value for \"hydra_ttl_device_user_code\", must conform to the pattern #{pattern}.")
+      end
+
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
       if !@hydra_ttl_id_token.nil? && @hydra_ttl_id_token !~ pattern
         invalid_properties.push("invalid value for \"hydra_ttl_id_token\", must conform to the pattern #{pattern}.")
       end
 
-      pattern = Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
       if !@hydra_ttl_login_consent_request.nil? && @hydra_ttl_login_consent_request !~ pattern
         invalid_properties.push("invalid value for \"hydra_ttl_login_consent_request\", must conform to the pattern #{pattern}.")
       end
 
-      pattern = Regexp.new(/^([0-9]+(ns|us|ms|s|m|h)|-1)$/)
+      pattern = Regexp.new(/^(([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+|-1)$/)
       if !@hydra_ttl_refresh_token.nil? && @hydra_ttl_refresh_token !~ pattern
         invalid_properties.push("invalid value for \"hydra_ttl_refresh_token\", must conform to the pattern #{pattern}.")
       end
@@ -2011,6 +2800,26 @@ module OryClient
         invalid_properties.push('invalid value for "name", name cannot be nil.')
       end
 
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      if !@talos_cache_ttl.nil? && @talos_cache_ttl !~ pattern
+        invalid_properties.push("invalid value for \"talos_cache_ttl\", must conform to the pattern #{pattern}.")
+      end
+
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      if !@talos_credentials_api_keys_default_ttl.nil? && @talos_credentials_api_keys_default_ttl !~ pattern
+        invalid_properties.push("invalid value for \"talos_credentials_api_keys_default_ttl\", must conform to the pattern #{pattern}.")
+      end
+
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      if !@talos_credentials_api_keys_max_ttl.nil? && @talos_credentials_api_keys_max_ttl !~ pattern
+        invalid_properties.push("invalid value for \"talos_credentials_api_keys_max_ttl\", must conform to the pattern #{pattern}.")
+      end
+
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      if !@talos_credentials_derived_tokens_default_ttl.nil? && @talos_credentials_derived_tokens_default_ttl !~ pattern
+        invalid_properties.push("invalid value for \"talos_credentials_derived_tokens_default_ttl\", must conform to the pattern #{pattern}.")
+      end
+
       invalid_properties
     end
 
@@ -2018,26 +2827,59 @@ module OryClient
     # @return true if the model is valid
     def valid?
       warn '[DEPRECATED] the `valid?` method is obsolete'
-      return false if !@hydra_oauth2_grant_jwt_max_ttl.nil? && @hydra_oauth2_grant_jwt_max_ttl !~ Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
+      return false if !@hydra_oauth2_device_authorization_token_polling_interval.nil? && @hydra_oauth2_device_authorization_token_polling_interval !~ Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      hydra_oauth2_device_authorization_user_code_entropy_preset_validator = EnumAttributeValidator.new('String', ["high", "medium", "low"])
+      return false unless hydra_oauth2_device_authorization_user_code_entropy_preset_validator.valid?(@hydra_oauth2_device_authorization_user_code_entropy_preset)
+      return false if !@hydra_oauth2_grant_jwt_max_ttl.nil? && @hydra_oauth2_grant_jwt_max_ttl !~ Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
       hydra_strategies_access_token_validator = EnumAttributeValidator.new('String', ["opaque", "jwt"])
       return false unless hydra_strategies_access_token_validator.valid?(@hydra_strategies_access_token)
       hydra_strategies_jwt_scope_claim_validator = EnumAttributeValidator.new('String', ["list", "string", "both"])
       return false unless hydra_strategies_jwt_scope_claim_validator.valid?(@hydra_strategies_jwt_scope_claim)
       hydra_strategies_scope_validator = EnumAttributeValidator.new('String', ["exact", "wildcard"])
       return false unless hydra_strategies_scope_validator.valid?(@hydra_strategies_scope)
-      return false if !@hydra_ttl_access_token.nil? && @hydra_ttl_access_token !~ Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
-      return false if !@hydra_ttl_auth_code.nil? && @hydra_ttl_auth_code !~ Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
-      return false if !@hydra_ttl_id_token.nil? && @hydra_ttl_id_token !~ Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
-      return false if !@hydra_ttl_login_consent_request.nil? && @hydra_ttl_login_consent_request !~ Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
-      return false if !@hydra_ttl_refresh_token.nil? && @hydra_ttl_refresh_token !~ Regexp.new(/^([0-9]+(ns|us|ms|s|m|h)|-1)$/)
+      return false if !@hydra_ttl_access_token.nil? && @hydra_ttl_access_token !~ Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      return false if !@hydra_ttl_auth_code.nil? && @hydra_ttl_auth_code !~ Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      return false if !@hydra_ttl_device_user_code.nil? && @hydra_ttl_device_user_code !~ Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      return false if !@hydra_ttl_id_token.nil? && @hydra_ttl_id_token !~ Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      return false if !@hydra_ttl_login_consent_request.nil? && @hydra_ttl_login_consent_request !~ Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      return false if !@hydra_ttl_refresh_token.nil? && @hydra_ttl_refresh_token !~ Regexp.new(/^(([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+|-1)$/)
       kratos_selfservice_flows_recovery_use_validator = EnumAttributeValidator.new('String', ["link", "code"])
       return false unless kratos_selfservice_flows_recovery_use_validator.valid?(@kratos_selfservice_flows_recovery_use)
       kratos_selfservice_flows_verification_use_validator = EnumAttributeValidator.new('String', ["link", "code"])
       return false unless kratos_selfservice_flows_verification_use_validator.valid?(@kratos_selfservice_flows_verification_use)
       return false if @name.nil?
+      return false if !@talos_cache_ttl.nil? && @talos_cache_ttl !~ Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      return false if !@talos_credentials_api_keys_default_ttl.nil? && @talos_credentials_api_keys_default_ttl !~ Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      return false if !@talos_credentials_api_keys_max_ttl.nil? && @talos_credentials_api_keys_max_ttl !~ Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      return false if !@talos_credentials_derived_tokens_default_ttl.nil? && @talos_credentials_derived_tokens_default_ttl !~ Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
       true
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] hydra_oauth2_device_authorization_token_polling_interval Value to be assigned
+    def hydra_oauth2_device_authorization_token_polling_interval=(hydra_oauth2_device_authorization_token_polling_interval)
+      if hydra_oauth2_device_authorization_token_polling_interval.nil?
+        fail ArgumentError, 'hydra_oauth2_device_authorization_token_polling_interval cannot be nil'
+      end
+
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      if hydra_oauth2_device_authorization_token_polling_interval !~ pattern
+        fail ArgumentError, "invalid value for \"hydra_oauth2_device_authorization_token_polling_interval\", must conform to the pattern #{pattern}."
+      end
+
+      @hydra_oauth2_device_authorization_token_polling_interval = hydra_oauth2_device_authorization_token_polling_interval
+    end
+
+    # Custom attribute writer method checking allowed values (enum).
+    # @param [Object] hydra_oauth2_device_authorization_user_code_entropy_preset Object to be assigned
+    def hydra_oauth2_device_authorization_user_code_entropy_preset=(hydra_oauth2_device_authorization_user_code_entropy_preset)
+      validator = EnumAttributeValidator.new('String', ["high", "medium", "low"])
+      unless validator.valid?(hydra_oauth2_device_authorization_user_code_entropy_preset)
+        fail ArgumentError, "invalid value for \"hydra_oauth2_device_authorization_user_code_entropy_preset\", must be one of #{validator.allowable_values}."
+      end
+      @hydra_oauth2_device_authorization_user_code_entropy_preset = hydra_oauth2_device_authorization_user_code_entropy_preset
+    end
+
     # Custom attribute writer method with validation
     # @param [Object] hydra_oauth2_grant_jwt_max_ttl Value to be assigned
     def hydra_oauth2_grant_jwt_max_ttl=(hydra_oauth2_grant_jwt_max_ttl)
@@ -2045,7 +2887,7 @@ module OryClient
         fail ArgumentError, 'hydra_oauth2_grant_jwt_max_ttl cannot be nil'
       end
 
-      pattern = Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
       if hydra_oauth2_grant_jwt_max_ttl !~ pattern
         fail ArgumentError, "invalid value for \"hydra_oauth2_grant_jwt_max_ttl\", must conform to the pattern #{pattern}."
       end
@@ -2090,7 +2932,7 @@ module OryClient
         fail ArgumentError, 'hydra_ttl_access_token cannot be nil'
       end
 
-      pattern = Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
       if hydra_ttl_access_token !~ pattern
         fail ArgumentError, "invalid value for \"hydra_ttl_access_token\", must conform to the pattern #{pattern}."
       end
@@ -2105,7 +2947,7 @@ module OryClient
         fail ArgumentError, 'hydra_ttl_auth_code cannot be nil'
       end
 
-      pattern = Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
       if hydra_ttl_auth_code !~ pattern
         fail ArgumentError, "invalid value for \"hydra_ttl_auth_code\", must conform to the pattern #{pattern}."
       end
@@ -2113,6 +2955,21 @@ module OryClient
       @hydra_ttl_auth_code = hydra_ttl_auth_code
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] hydra_ttl_device_user_code Value to be assigned
+    def hydra_ttl_device_user_code=(hydra_ttl_device_user_code)
+      if hydra_ttl_device_user_code.nil?
+        fail ArgumentError, 'hydra_ttl_device_user_code cannot be nil'
+      end
+
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      if hydra_ttl_device_user_code !~ pattern
+        fail ArgumentError, "invalid value for \"hydra_ttl_device_user_code\", must conform to the pattern #{pattern}."
+      end
+
+      @hydra_ttl_device_user_code = hydra_ttl_device_user_code
+    end
+
     # Custom attribute writer method with validation
     # @param [Object] hydra_ttl_id_token Value to be assigned
     def hydra_ttl_id_token=(hydra_ttl_id_token)
@@ -2120,7 +2977,7 @@ module OryClient
         fail ArgumentError, 'hydra_ttl_id_token cannot be nil'
       end
 
-      pattern = Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
       if hydra_ttl_id_token !~ pattern
         fail ArgumentError, "invalid value for \"hydra_ttl_id_token\", must conform to the pattern #{pattern}."
       end
@@ -2135,7 +2992,7 @@ module OryClient
         fail ArgumentError, 'hydra_ttl_login_consent_request cannot be nil'
       end
 
-      pattern = Regexp.new(/^[0-9]+(ns|us|ms|s|m|h)$/)
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
       if hydra_ttl_login_consent_request !~ pattern
         fail ArgumentError, "invalid value for \"hydra_ttl_login_consent_request\", must conform to the pattern #{pattern}."
       end
@@ -2150,7 +3007,7 @@ module OryClient
         fail ArgumentError, 'hydra_ttl_refresh_token cannot be nil'
       end
 
-      pattern = Regexp.new(/^([0-9]+(ns|us|ms|s|m|h)|-1)$/)
+      pattern = Regexp.new(/^(([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+|-1)$/)
       if hydra_ttl_refresh_token !~ pattern
         fail ArgumentError, "invalid value for \"hydra_ttl_refresh_token\", must conform to the pattern #{pattern}."
       end
@@ -2178,30 +3035,123 @@ module OryClient
       @kratos_selfservice_flows_verification_use = kratos_selfservice_flows_verification_use
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] name Value to be assigned
+    def name=(name)
+      if name.nil?
+        fail ArgumentError, 'name cannot be nil'
+      end
+
+      @name = name
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] talos_cache_ttl Value to be assigned
+    def talos_cache_ttl=(talos_cache_ttl)
+      if talos_cache_ttl.nil?
+        fail ArgumentError, 'talos_cache_ttl cannot be nil'
+      end
+
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      if talos_cache_ttl !~ pattern
+        fail ArgumentError, "invalid value for \"talos_cache_ttl\", must conform to the pattern #{pattern}."
+      end
+
+      @talos_cache_ttl = talos_cache_ttl
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] talos_credentials_api_keys_default_ttl Value to be assigned
+    def talos_credentials_api_keys_default_ttl=(talos_credentials_api_keys_default_ttl)
+      if talos_credentials_api_keys_default_ttl.nil?
+        fail ArgumentError, 'talos_credentials_api_keys_default_ttl cannot be nil'
+      end
+
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      if talos_credentials_api_keys_default_ttl !~ pattern
+        fail ArgumentError, "invalid value for \"talos_credentials_api_keys_default_ttl\", must conform to the pattern #{pattern}."
+      end
+
+      @talos_credentials_api_keys_default_ttl = talos_credentials_api_keys_default_ttl
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] talos_credentials_api_keys_max_ttl Value to be assigned
+    def talos_credentials_api_keys_max_ttl=(talos_credentials_api_keys_max_ttl)
+      if talos_credentials_api_keys_max_ttl.nil?
+        fail ArgumentError, 'talos_credentials_api_keys_max_ttl cannot be nil'
+      end
+
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      if talos_credentials_api_keys_max_ttl !~ pattern
+        fail ArgumentError, "invalid value for \"talos_credentials_api_keys_max_ttl\", must conform to the pattern #{pattern}."
+      end
+
+      @talos_credentials_api_keys_max_ttl = talos_credentials_api_keys_max_ttl
+    end
+
+    # Custom attribute writer method with validation
+    # @param [Object] talos_credentials_derived_tokens_default_ttl Value to be assigned
+    def talos_credentials_derived_tokens_default_ttl=(talos_credentials_derived_tokens_default_ttl)
+      if talos_credentials_derived_tokens_default_ttl.nil?
+        fail ArgumentError, 'talos_credentials_derived_tokens_default_ttl cannot be nil'
+      end
+
+      pattern = Regexp.new(/^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$/)
+      if talos_credentials_derived_tokens_default_ttl !~ pattern
+        fail ArgumentError, "invalid value for \"talos_credentials_derived_tokens_default_ttl\", must conform to the pattern #{pattern}."
+      end
+
+      @talos_credentials_derived_tokens_default_ttl = talos_credentials_derived_tokens_default_ttl
+    end
+
     # Checks equality by comparing each attribute.
     # @param [Object] Object to be compared
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
+          account_experience_contact_url == o.account_experience_contact_url &&
+          account_experience_custom_translations == o.account_experience_custom_translations &&
+          account_experience_default_locale == o.account_experience_default_locale &&
+          account_experience_enabled_locales == o.account_experience_enabled_locales &&
+          account_experience_favicon_dark == o.account_experience_favicon_dark &&
+          account_experience_favicon_light == o.account_experience_favicon_light &&
+          account_experience_hide_ory_branding == o.account_experience_hide_ory_branding &&
+          account_experience_hide_registration_link == o.account_experience_hide_registration_link &&
+          account_experience_locale_behavior == o.account_experience_locale_behavior &&
+          account_experience_logo_dark == o.account_experience_logo_dark &&
+          account_experience_logo_light == o.account_experience_logo_light &&
+          account_experience_privacy_policy_url == o.account_experience_privacy_policy_url &&
+          account_experience_terms_of_service_url == o.account_experience_terms_of_service_url &&
+          account_experience_theme_variables_dark == o.account_experience_theme_variables_dark &&
+          account_experience_theme_variables_light == o.account_experience_theme_variables_light &&
           created_at == o.created_at &&
           disable_account_experience_welcome_screen == o.disable_account_experience_welcome_screen &&
           enable_ax_v2 == o.enable_ax_v2 &&
           hydra_oauth2_allowed_top_level_claims == o.hydra_oauth2_allowed_top_level_claims &&
           hydra_oauth2_client_credentials_default_grant_allowed_scope == o.hydra_oauth2_client_credentials_default_grant_allowed_scope &&
+          hydra_oauth2_device_authorization_token_polling_interval == o.hydra_oauth2_device_authorization_token_polling_interval &&
+          hydra_oauth2_device_authorization_user_code_entropy_preset == o.hydra_oauth2_device_authorization_user_code_entropy_preset &&
           hydra_oauth2_exclude_not_before_claim == o.hydra_oauth2_exclude_not_before_claim &&
           hydra_oauth2_grant_jwt_iat_optional == o.hydra_oauth2_grant_jwt_iat_optional &&
           hydra_oauth2_grant_jwt_jti_optional == o.hydra_oauth2_grant_jwt_jti_optional &&
           hydra_oauth2_grant_jwt_max_ttl == o.hydra_oauth2_grant_jwt_max_ttl &&
+          hydra_oauth2_grant_jwt_omit_assertion_audience == o.hydra_oauth2_grant_jwt_omit_assertion_audience &&
+          hydra_oauth2_grant_refresh_token_rotation_grace_period == o.hydra_oauth2_grant_refresh_token_rotation_grace_period &&
+          hydra_oauth2_grant_refresh_token_rotation_grace_reuse_count == o.hydra_oauth2_grant_refresh_token_rotation_grace_reuse_count &&
           hydra_oauth2_mirror_top_level_claims == o.hydra_oauth2_mirror_top_level_claims &&
           hydra_oauth2_pkce_enforced == o.hydra_oauth2_pkce_enforced &&
           hydra_oauth2_pkce_enforced_for_public_clients == o.hydra_oauth2_pkce_enforced_for_public_clients &&
+          hydra_oauth2_preserve_ext_claims == o.hydra_oauth2_preserve_ext_claims &&
           hydra_oauth2_refresh_token_hook == o.hydra_oauth2_refresh_token_hook &&
           hydra_oauth2_token_hook == o.hydra_oauth2_token_hook &&
+          hydra_oauth2_token_prefix == o.hydra_oauth2_token_prefix &&
           hydra_oidc_dynamic_client_registration_default_scope == o.hydra_oidc_dynamic_client_registration_default_scope &&
           hydra_oidc_dynamic_client_registration_enabled == o.hydra_oidc_dynamic_client_registration_enabled &&
           hydra_oidc_subject_identifiers_pairwise_salt == o.hydra_oidc_subject_identifiers_pairwise_salt &&
           hydra_oidc_subject_identifiers_supported_types == o.hydra_oidc_subject_identifiers_supported_types &&
           hydra_secrets_cookie == o.hydra_secrets_cookie &&
+          hydra_secrets_pagination == o.hydra_secrets_pagination &&
           hydra_secrets_system == o.hydra_secrets_system &&
           hydra_serve_cookies_same_site_legacy_workaround == o.hydra_serve_cookies_same_site_legacy_workaround &&
           hydra_serve_cookies_same_site_mode == o.hydra_serve_cookies_same_site_mode &&
@@ -2210,10 +3160,13 @@ module OryClient
           hydra_strategies_scope == o.hydra_strategies_scope &&
           hydra_ttl_access_token == o.hydra_ttl_access_token &&
           hydra_ttl_auth_code == o.hydra_ttl_auth_code &&
+          hydra_ttl_device_user_code == o.hydra_ttl_device_user_code &&
           hydra_ttl_id_token == o.hydra_ttl_id_token &&
           hydra_ttl_login_consent_request == o.hydra_ttl_login_consent_request &&
           hydra_ttl_refresh_token == o.hydra_ttl_refresh_token &&
           hydra_urls_consent == o.hydra_urls_consent &&
+          hydra_urls_device_success == o.hydra_urls_device_success &&
+          hydra_urls_device_verification == o.hydra_urls_device_verification &&
           hydra_urls_error == o.hydra_urls_error &&
           hydra_urls_login == o.hydra_urls_login &&
           hydra_urls_logout == o.hydra_urls_logout &&
@@ -2223,6 +3176,7 @@ module OryClient
           hydra_webfinger_jwks_broadcast_keys == o.hydra_webfinger_jwks_broadcast_keys &&
           hydra_webfinger_oidc_discovery_auth_url == o.hydra_webfinger_oidc_discovery_auth_url &&
           hydra_webfinger_oidc_discovery_client_registration_url == o.hydra_webfinger_oidc_discovery_client_registration_url &&
+          hydra_webfinger_oidc_discovery_device_authorization_url == o.hydra_webfinger_oidc_discovery_device_authorization_url &&
           hydra_webfinger_oidc_discovery_jwks_url == o.hydra_webfinger_oidc_discovery_jwks_url &&
           hydra_webfinger_oidc_discovery_supported_claims == o.hydra_webfinger_oidc_discovery_supported_claims &&
           hydra_webfinger_oidc_discovery_supported_scope == o.hydra_webfinger_oidc_discovery_supported_scope &&
@@ -2231,6 +3185,7 @@ module OryClient
           id == o.id &&
           keto_namespace_configuration == o.keto_namespace_configuration &&
           keto_namespaces == o.keto_namespaces &&
+          keto_secrets_pagination == o.keto_secrets_pagination &&
           kratos_cookies_same_site == o.kratos_cookies_same_site &&
           kratos_courier_channels == o.kratos_courier_channels &&
           kratos_courier_delivery_strategy == o.kratos_courier_delivery_strategy &&
@@ -2268,6 +3223,11 @@ module OryClient
           kratos_courier_templates_registration_code_valid_email_body_html == o.kratos_courier_templates_registration_code_valid_email_body_html &&
           kratos_courier_templates_registration_code_valid_email_body_plaintext == o.kratos_courier_templates_registration_code_valid_email_body_plaintext &&
           kratos_courier_templates_registration_code_valid_email_subject == o.kratos_courier_templates_registration_code_valid_email_subject &&
+          kratos_courier_templates_registration_code_valid_sms_body_plaintext == o.kratos_courier_templates_registration_code_valid_sms_body_plaintext &&
+          kratos_courier_templates_verifiable_address_changed_email_body_html == o.kratos_courier_templates_verifiable_address_changed_email_body_html &&
+          kratos_courier_templates_verifiable_address_changed_email_body_plaintext == o.kratos_courier_templates_verifiable_address_changed_email_body_plaintext &&
+          kratos_courier_templates_verifiable_address_changed_email_subject == o.kratos_courier_templates_verifiable_address_changed_email_subject &&
+          kratos_courier_templates_verifiable_address_changed_sms_body_plaintext == o.kratos_courier_templates_verifiable_address_changed_sms_body_plaintext &&
           kratos_courier_templates_verification_code_invalid_email_body_html == o.kratos_courier_templates_verification_code_invalid_email_body_html &&
           kratos_courier_templates_verification_code_invalid_email_body_plaintext == o.kratos_courier_templates_verification_code_invalid_email_body_plaintext &&
           kratos_courier_templates_verification_code_invalid_email_subject == o.kratos_courier_templates_verification_code_invalid_email_subject &&
@@ -2283,7 +3243,13 @@ module OryClient
           kratos_courier_templates_verification_valid_email_subject == o.kratos_courier_templates_verification_valid_email_subject &&
           kratos_feature_flags_cacheable_sessions == o.kratos_feature_flags_cacheable_sessions &&
           kratos_feature_flags_cacheable_sessions_max_age == o.kratos_feature_flags_cacheable_sessions_max_age &&
+          kratos_feature_flags_choose_recovery_address == o.kratos_feature_flags_choose_recovery_address &&
           kratos_feature_flags_faster_session_extend == o.kratos_feature_flags_faster_session_extend &&
+          kratos_feature_flags_legacy_continue_with_verification_ui == o.kratos_feature_flags_legacy_continue_with_verification_ui &&
+          kratos_feature_flags_legacy_oidc_registration_node_group == o.kratos_feature_flags_legacy_oidc_registration_node_group &&
+          kratos_feature_flags_legacy_require_verified_login_error == o.kratos_feature_flags_legacy_require_verified_login_error &&
+          kratos_feature_flags_password_profile_registration_node_group == o.kratos_feature_flags_password_profile_registration_node_group &&
+          kratos_feature_flags_refresh_login_choose_address == o.kratos_feature_flags_refresh_login_choose_address &&
           kratos_feature_flags_use_continue_with_transitions == o.kratos_feature_flags_use_continue_with_transitions &&
           kratos_identity_schemas == o.kratos_identity_schemas &&
           kratos_oauth2_provider_headers == o.kratos_oauth2_provider_headers &&
@@ -2293,6 +3259,8 @@ module OryClient
           kratos_secrets_cipher == o.kratos_secrets_cipher &&
           kratos_secrets_cookie == o.kratos_secrets_cookie &&
           kratos_secrets_default == o.kratos_secrets_default &&
+          kratos_secrets_pagination == o.kratos_secrets_pagination &&
+          kratos_security_account_enumeration_mitigate == o.kratos_security_account_enumeration_mitigate &&
           kratos_selfservice_allowed_return_urls == o.kratos_selfservice_allowed_return_urls &&
           kratos_selfservice_default_browser_return_url == o.kratos_selfservice_default_browser_return_url &&
           kratos_selfservice_flows_error_ui_url == o.kratos_selfservice_flows_error_ui_url &&
@@ -2305,6 +3273,7 @@ module OryClient
           kratos_selfservice_flows_login_after_totp_default_browser_return_url == o.kratos_selfservice_flows_login_after_totp_default_browser_return_url &&
           kratos_selfservice_flows_login_after_webauthn_default_browser_return_url == o.kratos_selfservice_flows_login_after_webauthn_default_browser_return_url &&
           kratos_selfservice_flows_login_lifespan == o.kratos_selfservice_flows_login_lifespan &&
+          kratos_selfservice_flows_login_style == o.kratos_selfservice_flows_login_style &&
           kratos_selfservice_flows_login_ui_url == o.kratos_selfservice_flows_login_ui_url &&
           kratos_selfservice_flows_logout_after_default_browser_return_url == o.kratos_selfservice_flows_logout_after_default_browser_return_url &&
           kratos_selfservice_flows_recovery_after_default_browser_return_url == o.kratos_selfservice_flows_recovery_after_default_browser_return_url &&
@@ -2342,18 +3311,35 @@ module OryClient
           kratos_selfservice_flows_verification_notify_unknown_recipients == o.kratos_selfservice_flows_verification_notify_unknown_recipients &&
           kratos_selfservice_flows_verification_ui_url == o.kratos_selfservice_flows_verification_ui_url &&
           kratos_selfservice_flows_verification_use == o.kratos_selfservice_flows_verification_use &&
+          kratos_selfservice_methods_captcha_config_allowed_domains == o.kratos_selfservice_methods_captcha_config_allowed_domains &&
+          kratos_selfservice_methods_captcha_config_byo == o.kratos_selfservice_methods_captcha_config_byo &&
+          kratos_selfservice_methods_captcha_config_cf_turnstile_byo_secret == o.kratos_selfservice_methods_captcha_config_cf_turnstile_byo_secret &&
+          kratos_selfservice_methods_captcha_config_cf_turnstile_byo_sitekey == o.kratos_selfservice_methods_captcha_config_cf_turnstile_byo_sitekey &&
+          kratos_selfservice_methods_captcha_config_cf_turnstile_secret == o.kratos_selfservice_methods_captcha_config_cf_turnstile_secret &&
+          kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey == o.kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey &&
+          kratos_selfservice_methods_captcha_config_legacy_inject_node == o.kratos_selfservice_methods_captcha_config_legacy_inject_node &&
+          kratos_selfservice_methods_captcha_enabled == o.kratos_selfservice_methods_captcha_enabled &&
           kratos_selfservice_methods_code_config_lifespan == o.kratos_selfservice_methods_code_config_lifespan &&
+          kratos_selfservice_methods_code_config_max_submissions == o.kratos_selfservice_methods_code_config_max_submissions &&
           kratos_selfservice_methods_code_config_missing_credential_fallback_enabled == o.kratos_selfservice_methods_code_config_missing_credential_fallback_enabled &&
           kratos_selfservice_methods_code_enabled == o.kratos_selfservice_methods_code_enabled &&
           kratos_selfservice_methods_code_mfa_enabled == o.kratos_selfservice_methods_code_mfa_enabled &&
           kratos_selfservice_methods_code_passwordless_enabled == o.kratos_selfservice_methods_code_passwordless_enabled &&
           kratos_selfservice_methods_code_passwordless_login_fallback_enabled == o.kratos_selfservice_methods_code_passwordless_login_fallback_enabled &&
+          kratos_selfservice_methods_deviceauthn_config_android_app_ids == o.kratos_selfservice_methods_deviceauthn_config_android_app_ids &&
+          kratos_selfservice_methods_deviceauthn_config_first_factor == o.kratos_selfservice_methods_deviceauthn_config_first_factor &&
+          kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation == o.kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation &&
+          kratos_selfservice_methods_deviceauthn_config_ios_app_ids == o.kratos_selfservice_methods_deviceauthn_config_ios_app_ids &&
+          kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor == o.kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor &&
+          kratos_selfservice_methods_deviceauthn_config_pin_max_attempts == o.kratos_selfservice_methods_deviceauthn_config_pin_max_attempts &&
+          kratos_selfservice_methods_deviceauthn_enabled == o.kratos_selfservice_methods_deviceauthn_enabled &&
           kratos_selfservice_methods_link_config_base_url == o.kratos_selfservice_methods_link_config_base_url &&
           kratos_selfservice_methods_link_config_lifespan == o.kratos_selfservice_methods_link_config_lifespan &&
           kratos_selfservice_methods_link_enabled == o.kratos_selfservice_methods_link_enabled &&
           kratos_selfservice_methods_lookup_secret_enabled == o.kratos_selfservice_methods_lookup_secret_enabled &&
           kratos_selfservice_methods_oidc_config_base_redirect_uri == o.kratos_selfservice_methods_oidc_config_base_redirect_uri &&
           kratos_selfservice_methods_oidc_config_providers == o.kratos_selfservice_methods_oidc_config_providers &&
+          kratos_selfservice_methods_oidc_enable_auto_link_policy == o.kratos_selfservice_methods_oidc_enable_auto_link_policy &&
           kratos_selfservice_methods_oidc_enabled == o.kratos_selfservice_methods_oidc_enabled &&
           kratos_selfservice_methods_passkey_config_rp_display_name == o.kratos_selfservice_methods_passkey_config_rp_display_name &&
           kratos_selfservice_methods_passkey_config_rp_id == o.kratos_selfservice_methods_passkey_config_rp_id &&
@@ -2366,6 +3352,8 @@ module OryClient
           kratos_selfservice_methods_password_config_min_password_length == o.kratos_selfservice_methods_password_config_min_password_length &&
           kratos_selfservice_methods_password_enabled == o.kratos_selfservice_methods_password_enabled &&
           kratos_selfservice_methods_profile_enabled == o.kratos_selfservice_methods_profile_enabled &&
+          kratos_selfservice_methods_saml_config_providers == o.kratos_selfservice_methods_saml_config_providers &&
+          kratos_selfservice_methods_saml_enabled == o.kratos_selfservice_methods_saml_enabled &&
           kratos_selfservice_methods_totp_config_issuer == o.kratos_selfservice_methods_totp_config_issuer &&
           kratos_selfservice_methods_totp_enabled == o.kratos_selfservice_methods_totp_enabled &&
           kratos_selfservice_methods_webauthn_config_passwordless == o.kratos_selfservice_methods_webauthn_config_passwordless &&
@@ -2380,13 +3368,33 @@ module OryClient
           kratos_session_whoami_required_aal == o.kratos_session_whoami_required_aal &&
           kratos_session_whoami_tokenizer_templates == o.kratos_session_whoami_tokenizer_templates &&
           name == o.name &&
+          organizations == o.organizations &&
           project_id == o.project_id &&
           project_revision_hooks == o.project_revision_hooks &&
+          scim_clients == o.scim_clients &&
           serve_admin_cors_allowed_origins == o.serve_admin_cors_allowed_origins &&
           serve_admin_cors_enabled == o.serve_admin_cors_enabled &&
           serve_public_cors_allowed_origins == o.serve_public_cors_allowed_origins &&
           serve_public_cors_enabled == o.serve_public_cors_enabled &&
           strict_security == o.strict_security &&
+          talos_cache_enabled == o.talos_cache_enabled &&
+          talos_cache_ttl == o.talos_cache_ttl &&
+          talos_credentials_api_keys_default_ttl == o.talos_credentials_api_keys_default_ttl &&
+          talos_credentials_api_keys_max_ttl == o.talos_credentials_api_keys_max_ttl &&
+          talos_credentials_api_keys_prefix_current == o.talos_credentials_api_keys_prefix_current &&
+          talos_credentials_api_keys_prefix_public_current == o.talos_credentials_api_keys_prefix_public_current &&
+          talos_credentials_api_keys_prefix_public_retired == o.talos_credentials_api_keys_prefix_public_retired &&
+          talos_credentials_api_keys_prefix_retired == o.talos_credentials_api_keys_prefix_retired &&
+          talos_credentials_derived_tokens_default_ttl == o.talos_credentials_derived_tokens_default_ttl &&
+          talos_credentials_derived_tokens_jwt_signing_key_id == o.talos_credentials_derived_tokens_jwt_signing_key_id &&
+          talos_credentials_derived_tokens_jwt_signing_keys_urls == o.talos_credentials_derived_tokens_jwt_signing_keys_urls &&
+          talos_credentials_derived_tokens_macaroon_prefix_current == o.talos_credentials_derived_tokens_macaroon_prefix_current &&
+          talos_credentials_derived_tokens_macaroon_prefix_retired == o.talos_credentials_derived_tokens_macaroon_prefix_retired &&
+          talos_credentials_issuer == o.talos_credentials_issuer &&
+          talos_credentials_issuer_retired == o.talos_credentials_issuer_retired &&
+          talos_rate_limit_enabled == o.talos_rate_limit_enabled &&
+          talos_secrets_hmac_current == o.talos_secrets_hmac_current &&
+          talos_secrets_hmac_retired == o.talos_secrets_hmac_retired &&
           updated_at == o.updated_at
     end
 
@@ -2399,7 +3407,7 @@ module OryClient
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [created_at, disable_account_experience_welcome_screen, enable_ax_v2, hydra_oauth2_allowed_top_level_claims, hydra_oauth2_client_credentials_default_grant_allowed_scope, hydra_oauth2_exclude_not_before_claim, hydra_oauth2_grant_jwt_iat_optional, hydra_oauth2_grant_jwt_jti_optional, hydra_oauth2_grant_jwt_max_ttl, hydra_oauth2_mirror_top_level_claims, hydra_oauth2_pkce_enforced, hydra_oauth2_pkce_enforced_for_public_clients, hydra_oauth2_refresh_token_hook, hydra_oauth2_token_hook, hydra_oidc_dynamic_client_registration_default_scope, hydra_oidc_dynamic_client_registration_enabled, hydra_oidc_subject_identifiers_pairwise_salt, hydra_oidc_subject_identifiers_supported_types, hydra_secrets_cookie, hydra_secrets_system, hydra_serve_cookies_same_site_legacy_workaround, hydra_serve_cookies_same_site_mode, hydra_strategies_access_token, hydra_strategies_jwt_scope_claim, hydra_strategies_scope, hydra_ttl_access_token, hydra_ttl_auth_code, hydra_ttl_id_token, hydra_ttl_login_consent_request, hydra_ttl_refresh_token, hydra_urls_consent, hydra_urls_error, hydra_urls_login, hydra_urls_logout, hydra_urls_post_logout_redirect, hydra_urls_registration, hydra_urls_self_issuer, hydra_webfinger_jwks_broadcast_keys, hydra_webfinger_oidc_discovery_auth_url, hydra_webfinger_oidc_discovery_client_registration_url, hydra_webfinger_oidc_discovery_jwks_url, hydra_webfinger_oidc_discovery_supported_claims, hydra_webfinger_oidc_discovery_supported_scope, hydra_webfinger_oidc_discovery_token_url, hydra_webfinger_oidc_discovery_userinfo_url, id, keto_namespace_configuration, keto_namespaces, kratos_cookies_same_site, kratos_courier_channels, kratos_courier_delivery_strategy, kratos_courier_http_request_config_auth_api_key_in, kratos_courier_http_request_config_auth_api_key_name, kratos_courier_http_request_config_auth_api_key_value, kratos_courier_http_request_config_auth_basic_auth_password, kratos_courier_http_request_config_auth_basic_auth_user, kratos_courier_http_request_config_auth_type, kratos_courier_http_request_config_body, kratos_courier_http_request_config_headers, kratos_courier_http_request_config_method, kratos_courier_http_request_config_url, kratos_courier_smtp_connection_uri, kratos_courier_smtp_from_address, kratos_courier_smtp_from_name, kratos_courier_smtp_headers, kratos_courier_smtp_local_name, kratos_courier_templates_login_code_valid_email_body_html, kratos_courier_templates_login_code_valid_email_body_plaintext, kratos_courier_templates_login_code_valid_email_subject, kratos_courier_templates_login_code_valid_sms_body_plaintext, kratos_courier_templates_recovery_code_invalid_email_body_html, kratos_courier_templates_recovery_code_invalid_email_body_plaintext, kratos_courier_templates_recovery_code_invalid_email_subject, kratos_courier_templates_recovery_code_valid_email_body_html, kratos_courier_templates_recovery_code_valid_email_body_plaintext, kratos_courier_templates_recovery_code_valid_email_subject, kratos_courier_templates_recovery_invalid_email_body_html, kratos_courier_templates_recovery_invalid_email_body_plaintext, kratos_courier_templates_recovery_invalid_email_subject, kratos_courier_templates_recovery_valid_email_body_html, kratos_courier_templates_recovery_valid_email_body_plaintext, kratos_courier_templates_recovery_valid_email_subject, kratos_courier_templates_registration_code_valid_email_body_html, kratos_courier_templates_registration_code_valid_email_body_plaintext, kratos_courier_templates_registration_code_valid_email_subject, kratos_courier_templates_verification_code_invalid_email_body_html, kratos_courier_templates_verification_code_invalid_email_body_plaintext, kratos_courier_templates_verification_code_invalid_email_subject, kratos_courier_templates_verification_code_valid_email_body_html, kratos_courier_templates_verification_code_valid_email_body_plaintext, kratos_courier_templates_verification_code_valid_email_subject, kratos_courier_templates_verification_code_valid_sms_body_plaintext, kratos_courier_templates_verification_invalid_email_body_html, kratos_courier_templates_verification_invalid_email_body_plaintext, kratos_courier_templates_verification_invalid_email_subject, kratos_courier_templates_verification_valid_email_body_html, kratos_courier_templates_verification_valid_email_body_plaintext, kratos_courier_templates_verification_valid_email_subject, kratos_feature_flags_cacheable_sessions, kratos_feature_flags_cacheable_sessions_max_age, kratos_feature_flags_faster_session_extend, kratos_feature_flags_use_continue_with_transitions, kratos_identity_schemas, kratos_oauth2_provider_headers, kratos_oauth2_provider_override_return_to, kratos_oauth2_provider_url, kratos_preview_default_read_consistency_level, kratos_secrets_cipher, kratos_secrets_cookie, kratos_secrets_default, kratos_selfservice_allowed_return_urls, kratos_selfservice_default_browser_return_url, kratos_selfservice_flows_error_ui_url, kratos_selfservice_flows_login_after_code_default_browser_return_url, kratos_selfservice_flows_login_after_default_browser_return_url, kratos_selfservice_flows_login_after_lookup_secret_default_browser_return_url, kratos_selfservice_flows_login_after_oidc_default_browser_return_url, kratos_selfservice_flows_login_after_passkey_default_browser_return_url, kratos_selfservice_flows_login_after_password_default_browser_return_url, kratos_selfservice_flows_login_after_totp_default_browser_return_url, kratos_selfservice_flows_login_after_webauthn_default_browser_return_url, kratos_selfservice_flows_login_lifespan, kratos_selfservice_flows_login_ui_url, kratos_selfservice_flows_logout_after_default_browser_return_url, kratos_selfservice_flows_recovery_after_default_browser_return_url, kratos_selfservice_flows_recovery_enabled, kratos_selfservice_flows_recovery_lifespan, kratos_selfservice_flows_recovery_notify_unknown_recipients, kratos_selfservice_flows_recovery_ui_url, kratos_selfservice_flows_recovery_use, kratos_selfservice_flows_registration_after_code_default_browser_return_url, kratos_selfservice_flows_registration_after_default_browser_return_url, kratos_selfservice_flows_registration_after_oidc_default_browser_return_url, kratos_selfservice_flows_registration_after_passkey_default_browser_return_url, kratos_selfservice_flows_registration_after_password_default_browser_return_url, kratos_selfservice_flows_registration_after_webauthn_default_browser_return_url, kratos_selfservice_flows_registration_enable_legacy_one_step, kratos_selfservice_flows_registration_enabled, kratos_selfservice_flows_registration_lifespan, kratos_selfservice_flows_registration_login_hints, kratos_selfservice_flows_registration_ui_url, kratos_selfservice_flows_settings_after_default_browser_return_url, kratos_selfservice_flows_settings_after_lookup_secret_default_browser_return_url, kratos_selfservice_flows_settings_after_oidc_default_browser_return_url, kratos_selfservice_flows_settings_after_passkey_default_browser_return_url, kratos_selfservice_flows_settings_after_password_default_browser_return_url, kratos_selfservice_flows_settings_after_profile_default_browser_return_url, kratos_selfservice_flows_settings_after_totp_default_browser_return_url, kratos_selfservice_flows_settings_after_webauthn_default_browser_return_url, kratos_selfservice_flows_settings_lifespan, kratos_selfservice_flows_settings_privileged_session_max_age, kratos_selfservice_flows_settings_required_aal, kratos_selfservice_flows_settings_ui_url, kratos_selfservice_flows_verification_after_default_browser_return_url, kratos_selfservice_flows_verification_enabled, kratos_selfservice_flows_verification_lifespan, kratos_selfservice_flows_verification_notify_unknown_recipients, kratos_selfservice_flows_verification_ui_url, kratos_selfservice_flows_verification_use, kratos_selfservice_methods_code_config_lifespan, kratos_selfservice_methods_code_config_missing_credential_fallback_enabled, kratos_selfservice_methods_code_enabled, kratos_selfservice_methods_code_mfa_enabled, kratos_selfservice_methods_code_passwordless_enabled, kratos_selfservice_methods_code_passwordless_login_fallback_enabled, kratos_selfservice_methods_link_config_base_url, kratos_selfservice_methods_link_config_lifespan, kratos_selfservice_methods_link_enabled, kratos_selfservice_methods_lookup_secret_enabled, kratos_selfservice_methods_oidc_config_base_redirect_uri, kratos_selfservice_methods_oidc_config_providers, kratos_selfservice_methods_oidc_enabled, kratos_selfservice_methods_passkey_config_rp_display_name, kratos_selfservice_methods_passkey_config_rp_id, kratos_selfservice_methods_passkey_config_rp_origins, kratos_selfservice_methods_passkey_enabled, kratos_selfservice_methods_password_config_haveibeenpwned_enabled, kratos_selfservice_methods_password_config_identifier_similarity_check_enabled, kratos_selfservice_methods_password_config_ignore_network_errors, kratos_selfservice_methods_password_config_max_breaches, kratos_selfservice_methods_password_config_min_password_length, kratos_selfservice_methods_password_enabled, kratos_selfservice_methods_profile_enabled, kratos_selfservice_methods_totp_config_issuer, kratos_selfservice_methods_totp_enabled, kratos_selfservice_methods_webauthn_config_passwordless, kratos_selfservice_methods_webauthn_config_rp_display_name, kratos_selfservice_methods_webauthn_config_rp_icon, kratos_selfservice_methods_webauthn_config_rp_id, kratos_selfservice_methods_webauthn_config_rp_origins, kratos_selfservice_methods_webauthn_enabled, kratos_session_cookie_persistent, kratos_session_cookie_same_site, kratos_session_lifespan, kratos_session_whoami_required_aal, kratos_session_whoami_tokenizer_templates, name, project_id, project_revision_hooks, serve_admin_cors_allowed_origins, serve_admin_cors_enabled, serve_public_cors_allowed_origins, serve_public_cors_enabled, strict_security, updated_at].hash
+      [account_experience_contact_url, account_experience_custom_translations, account_experience_default_locale, account_experience_enabled_locales, account_experience_favicon_dark, account_experience_favicon_light, account_experience_hide_ory_branding, account_experience_hide_registration_link, account_experience_locale_behavior, account_experience_logo_dark, account_experience_logo_light, account_experience_privacy_policy_url, account_experience_terms_of_service_url, account_experience_theme_variables_dark, account_experience_theme_variables_light, created_at, disable_account_experience_welcome_screen, enable_ax_v2, hydra_oauth2_allowed_top_level_claims, hydra_oauth2_client_credentials_default_grant_allowed_scope, hydra_oauth2_device_authorization_token_polling_interval, hydra_oauth2_device_authorization_user_code_entropy_preset, hydra_oauth2_exclude_not_before_claim, hydra_oauth2_grant_jwt_iat_optional, hydra_oauth2_grant_jwt_jti_optional, hydra_oauth2_grant_jwt_max_ttl, hydra_oauth2_grant_jwt_omit_assertion_audience, hydra_oauth2_grant_refresh_token_rotation_grace_period, hydra_oauth2_grant_refresh_token_rotation_grace_reuse_count, hydra_oauth2_mirror_top_level_claims, hydra_oauth2_pkce_enforced, hydra_oauth2_pkce_enforced_for_public_clients, hydra_oauth2_preserve_ext_claims, hydra_oauth2_refresh_token_hook, hydra_oauth2_token_hook, hydra_oauth2_token_prefix, hydra_oidc_dynamic_client_registration_default_scope, hydra_oidc_dynamic_client_registration_enabled, hydra_oidc_subject_identifiers_pairwise_salt, hydra_oidc_subject_identifiers_supported_types, hydra_secrets_cookie, hydra_secrets_pagination, hydra_secrets_system, hydra_serve_cookies_same_site_legacy_workaround, hydra_serve_cookies_same_site_mode, hydra_strategies_access_token, hydra_strategies_jwt_scope_claim, hydra_strategies_scope, hydra_ttl_access_token, hydra_ttl_auth_code, hydra_ttl_device_user_code, hydra_ttl_id_token, hydra_ttl_login_consent_request, hydra_ttl_refresh_token, hydra_urls_consent, hydra_urls_device_success, hydra_urls_device_verification, hydra_urls_error, hydra_urls_login, hydra_urls_logout, hydra_urls_post_logout_redirect, hydra_urls_registration, hydra_urls_self_issuer, hydra_webfinger_jwks_broadcast_keys, hydra_webfinger_oidc_discovery_auth_url, hydra_webfinger_oidc_discovery_client_registration_url, hydra_webfinger_oidc_discovery_device_authorization_url, hydra_webfinger_oidc_discovery_jwks_url, hydra_webfinger_oidc_discovery_supported_claims, hydra_webfinger_oidc_discovery_supported_scope, hydra_webfinger_oidc_discovery_token_url, hydra_webfinger_oidc_discovery_userinfo_url, id, keto_namespace_configuration, keto_namespaces, keto_secrets_pagination, kratos_cookies_same_site, kratos_courier_channels, kratos_courier_delivery_strategy, kratos_courier_http_request_config_auth_api_key_in, kratos_courier_http_request_config_auth_api_key_name, kratos_courier_http_request_config_auth_api_key_value, kratos_courier_http_request_config_auth_basic_auth_password, kratos_courier_http_request_config_auth_basic_auth_user, kratos_courier_http_request_config_auth_type, kratos_courier_http_request_config_body, kratos_courier_http_request_config_headers, kratos_courier_http_request_config_method, kratos_courier_http_request_config_url, kratos_courier_smtp_connection_uri, kratos_courier_smtp_from_address, kratos_courier_smtp_from_name, kratos_courier_smtp_headers, kratos_courier_smtp_local_name, kratos_courier_templates_login_code_valid_email_body_html, kratos_courier_templates_login_code_valid_email_body_plaintext, kratos_courier_templates_login_code_valid_email_subject, kratos_courier_templates_login_code_valid_sms_body_plaintext, kratos_courier_templates_recovery_code_invalid_email_body_html, kratos_courier_templates_recovery_code_invalid_email_body_plaintext, kratos_courier_templates_recovery_code_invalid_email_subject, kratos_courier_templates_recovery_code_valid_email_body_html, kratos_courier_templates_recovery_code_valid_email_body_plaintext, kratos_courier_templates_recovery_code_valid_email_subject, kratos_courier_templates_recovery_invalid_email_body_html, kratos_courier_templates_recovery_invalid_email_body_plaintext, kratos_courier_templates_recovery_invalid_email_subject, kratos_courier_templates_recovery_valid_email_body_html, kratos_courier_templates_recovery_valid_email_body_plaintext, kratos_courier_templates_recovery_valid_email_subject, kratos_courier_templates_registration_code_valid_email_body_html, kratos_courier_templates_registration_code_valid_email_body_plaintext, kratos_courier_templates_registration_code_valid_email_subject, kratos_courier_templates_registration_code_valid_sms_body_plaintext, kratos_courier_templates_verifiable_address_changed_email_body_html, kratos_courier_templates_verifiable_address_changed_email_body_plaintext, kratos_courier_templates_verifiable_address_changed_email_subject, kratos_courier_templates_verifiable_address_changed_sms_body_plaintext, kratos_courier_templates_verification_code_invalid_email_body_html, kratos_courier_templates_verification_code_invalid_email_body_plaintext, kratos_courier_templates_verification_code_invalid_email_subject, kratos_courier_templates_verification_code_valid_email_body_html, kratos_courier_templates_verification_code_valid_email_body_plaintext, kratos_courier_templates_verification_code_valid_email_subject, kratos_courier_templates_verification_code_valid_sms_body_plaintext, kratos_courier_templates_verification_invalid_email_body_html, kratos_courier_templates_verification_invalid_email_body_plaintext, kratos_courier_templates_verification_invalid_email_subject, kratos_courier_templates_verification_valid_email_body_html, kratos_courier_templates_verification_valid_email_body_plaintext, kratos_courier_templates_verification_valid_email_subject, kratos_feature_flags_cacheable_sessions, kratos_feature_flags_cacheable_sessions_max_age, kratos_feature_flags_choose_recovery_address, kratos_feature_flags_faster_session_extend, kratos_feature_flags_legacy_continue_with_verification_ui, kratos_feature_flags_legacy_oidc_registration_node_group, kratos_feature_flags_legacy_require_verified_login_error, kratos_feature_flags_password_profile_registration_node_group, kratos_feature_flags_refresh_login_choose_address, kratos_feature_flags_use_continue_with_transitions, kratos_identity_schemas, kratos_oauth2_provider_headers, kratos_oauth2_provider_override_return_to, kratos_oauth2_provider_url, kratos_preview_default_read_consistency_level, kratos_secrets_cipher, kratos_secrets_cookie, kratos_secrets_default, kratos_secrets_pagination, kratos_security_account_enumeration_mitigate, kratos_selfservice_allowed_return_urls, kratos_selfservice_default_browser_return_url, kratos_selfservice_flows_error_ui_url, kratos_selfservice_flows_login_after_code_default_browser_return_url, kratos_selfservice_flows_login_after_default_browser_return_url, kratos_selfservice_flows_login_after_lookup_secret_default_browser_return_url, kratos_selfservice_flows_login_after_oidc_default_browser_return_url, kratos_selfservice_flows_login_after_passkey_default_browser_return_url, kratos_selfservice_flows_login_after_password_default_browser_return_url, kratos_selfservice_flows_login_after_totp_default_browser_return_url, kratos_selfservice_flows_login_after_webauthn_default_browser_return_url, kratos_selfservice_flows_login_lifespan, kratos_selfservice_flows_login_style, kratos_selfservice_flows_login_ui_url, kratos_selfservice_flows_logout_after_default_browser_return_url, kratos_selfservice_flows_recovery_after_default_browser_return_url, kratos_selfservice_flows_recovery_enabled, kratos_selfservice_flows_recovery_lifespan, kratos_selfservice_flows_recovery_notify_unknown_recipients, kratos_selfservice_flows_recovery_ui_url, kratos_selfservice_flows_recovery_use, kratos_selfservice_flows_registration_after_code_default_browser_return_url, kratos_selfservice_flows_registration_after_default_browser_return_url, kratos_selfservice_flows_registration_after_oidc_default_browser_return_url, kratos_selfservice_flows_registration_after_passkey_default_browser_return_url, kratos_selfservice_flows_registration_after_password_default_browser_return_url, kratos_selfservice_flows_registration_after_webauthn_default_browser_return_url, kratos_selfservice_flows_registration_enable_legacy_one_step, kratos_selfservice_flows_registration_enabled, kratos_selfservice_flows_registration_lifespan, kratos_selfservice_flows_registration_login_hints, kratos_selfservice_flows_registration_ui_url, kratos_selfservice_flows_settings_after_default_browser_return_url, kratos_selfservice_flows_settings_after_lookup_secret_default_browser_return_url, kratos_selfservice_flows_settings_after_oidc_default_browser_return_url, kratos_selfservice_flows_settings_after_passkey_default_browser_return_url, kratos_selfservice_flows_settings_after_password_default_browser_return_url, kratos_selfservice_flows_settings_after_profile_default_browser_return_url, kratos_selfservice_flows_settings_after_totp_default_browser_return_url, kratos_selfservice_flows_settings_after_webauthn_default_browser_return_url, kratos_selfservice_flows_settings_lifespan, kratos_selfservice_flows_settings_privileged_session_max_age, kratos_selfservice_flows_settings_required_aal, kratos_selfservice_flows_settings_ui_url, kratos_selfservice_flows_verification_after_default_browser_return_url, kratos_selfservice_flows_verification_enabled, kratos_selfservice_flows_verification_lifespan, kratos_selfservice_flows_verification_notify_unknown_recipients, kratos_selfservice_flows_verification_ui_url, kratos_selfservice_flows_verification_use, kratos_selfservice_methods_captcha_config_allowed_domains, kratos_selfservice_methods_captcha_config_byo, kratos_selfservice_methods_captcha_config_cf_turnstile_byo_secret, kratos_selfservice_methods_captcha_config_cf_turnstile_byo_sitekey, kratos_selfservice_methods_captcha_config_cf_turnstile_secret, kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey, kratos_selfservice_methods_captcha_config_legacy_inject_node, kratos_selfservice_methods_captcha_enabled, kratos_selfservice_methods_code_config_lifespan, kratos_selfservice_methods_code_config_max_submissions, kratos_selfservice_methods_code_config_missing_credential_fallback_enabled, kratos_selfservice_methods_code_enabled, kratos_selfservice_methods_code_mfa_enabled, kratos_selfservice_methods_code_passwordless_enabled, kratos_selfservice_methods_code_passwordless_login_fallback_enabled, kratos_selfservice_methods_deviceauthn_config_android_app_ids, kratos_selfservice_methods_deviceauthn_config_first_factor, kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation, kratos_selfservice_methods_deviceauthn_config_ios_app_ids, kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor, kratos_selfservice_methods_deviceauthn_config_pin_max_attempts, kratos_selfservice_methods_deviceauthn_enabled, kratos_selfservice_methods_link_config_base_url, kratos_selfservice_methods_link_config_lifespan, kratos_selfservice_methods_link_enabled, kratos_selfservice_methods_lookup_secret_enabled, kratos_selfservice_methods_oidc_config_base_redirect_uri, kratos_selfservice_methods_oidc_config_providers, kratos_selfservice_methods_oidc_enable_auto_link_policy, kratos_selfservice_methods_oidc_enabled, kratos_selfservice_methods_passkey_config_rp_display_name, kratos_selfservice_methods_passkey_config_rp_id, kratos_selfservice_methods_passkey_config_rp_origins, kratos_selfservice_methods_passkey_enabled, kratos_selfservice_methods_password_config_haveibeenpwned_enabled, kratos_selfservice_methods_password_config_identifier_similarity_check_enabled, kratos_selfservice_methods_password_config_ignore_network_errors, kratos_selfservice_methods_password_config_max_breaches, kratos_selfservice_methods_password_config_min_password_length, kratos_selfservice_methods_password_enabled, kratos_selfservice_methods_profile_enabled, kratos_selfservice_methods_saml_config_providers, kratos_selfservice_methods_saml_enabled, kratos_selfservice_methods_totp_config_issuer, kratos_selfservice_methods_totp_enabled, kratos_selfservice_methods_webauthn_config_passwordless, kratos_selfservice_methods_webauthn_config_rp_display_name, kratos_selfservice_methods_webauthn_config_rp_icon, kratos_selfservice_methods_webauthn_config_rp_id, kratos_selfservice_methods_webauthn_config_rp_origins, kratos_selfservice_methods_webauthn_enabled, kratos_session_cookie_persistent, kratos_session_cookie_same_site, kratos_session_lifespan, kratos_session_whoami_required_aal, kratos_session_whoami_tokenizer_templates, name, organizations, project_id, project_revision_hooks, scim_clients, serve_admin_cors_allowed_origins, serve_admin_cors_enabled, serve_public_cors_allowed_origins, serve_public_cors_enabled, strict_security, talos_cache_enabled, talos_cache_ttl, talos_credentials_api_keys_default_ttl, talos_credentials_api_keys_max_ttl, talos_credentials_api_keys_prefix_current, talos_credentials_api_keys_prefix_public_current, talos_credentials_api_keys_prefix_public_retired, talos_credentials_api_keys_prefix_retired, talos_credentials_derived_tokens_default_ttl, talos_credentials_derived_tokens_jwt_signing_key_id, talos_credentials_derived_tokens_jwt_signing_keys_urls, talos_credentials_derived_tokens_macaroon_prefix_current, talos_credentials_derived_tokens_macaroon_prefix_retired, talos_credentials_issuer, talos_credentials_issuer_retired, talos_rate_limit_enabled, talos_secrets_hmac_current, talos_secrets_hmac_retired, updated_at].hash
     end
 
     # Builds the object from hash
@@ -2425,61 +3433,6 @@ module OryClient
       new(transformed_hash)
     end
 
-    # Deserializes the data based on type
-    # @param string type Data type
-    # @param string value Value to be deserialized
-    # @return [Object] Deserialized data
-    def self._deserialize(type, value)
-      case type.to_sym
-      when :Time
-        Time.parse(value)
-      when :Date
-        Date.parse(value)
-      when :String
-        value.to_s
-      when :Integer
-        value.to_i
-      when :Float
-        value.to_f
-      when :Boolean
-        if value.to_s =~ /\A(true|t|yes|y|1)\z/i
-          true
-        else
-          false
-        end
-      when :Object
-        # generic object (usually a Hash), return directly
-        value
-      when /\AArray<(?<inner_type>.+)>\z/
-        inner_type = Regexp.last_match[:inner_type]
-        value.map { |v| _deserialize(inner_type, v) }
-      when /\AHash<(?<k_type>.+?), (?<v_type>.+)>\z/
-        k_type = Regexp.last_match[:k_type]
-        v_type = Regexp.last_match[:v_type]
-        {}.tap do |hash|
-          value.each do |k, v|
-            hash[_deserialize(k_type, k)] = _deserialize(v_type, v)
-          end
-        end
-      else # model
-        # models (e.g. Pet) or oneOf
-        klass = OryClient.const_get(type)
-        klass.respond_to?(:openapi_any_of) || klass.respond_to?(:openapi_one_of) ? klass.build(value) : klass.build_from_hash(value)
-      end
-    end
-
-    # Returns the string representation of the object
-    # @return [String] String presentation of the object
-    def to_s
-      to_hash.to_s
-    end
-
-    # to_body is an alias to to_hash (backward compatibility)
-    # @return [Hash] Returns the object in the form of hash
-    def to_body
-      to_hash
-    end
-
     # Returns the object in the form of hash
     # @return [Hash] Returns the object in the form of hash
     def to_hash
@@ -2496,24 +3449,6 @@ module OryClient
       hash
     end
 
-    # Outputs non-array value in the form of hash
-    # For object, use to_hash. Otherwise, just return the value
-    # @param [Object] value Any valid value
-    # @return [Hash] Returns the value in the form of hash
-    def _to_hash(value)
-      if value.is_a?(Array)
-        value.compact.map { |v| _to_hash(v) }
-      elsif value.is_a?(Hash)
-        {}.tap do |hash|
-          value.each { |k, v| hash[k] = _to_hash(v) }
-        end
-      elsif value.respond_to? :to_hash
-        value.to_hash
-      else
-        value
-      end
-    end
-
   end
 
 end