RubyGems - ory-client - Versions diffs - 1.20.11 → 1.20.22 - Mend

ory-client 1.20.11 → 1.20.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1021) hide show

data/docs/NormalizedProjectRevision.md CHANGED Viewed

@@ -32,6 +32,7 @@
 | **hydra_oidc_subject_identifiers_pairwise_salt** | **String** | Configures OpenID Connect Discovery and overwrites the pairwise algorithm  This governs the \&quot;oidc.subject_identifiers.pairwise_salt\&quot; setting. | [optional] |
 | **hydra_oidc_subject_identifiers_supported_types** | **Array&lt;String&gt;** |  | [optional] |
 | **hydra_secrets_cookie** | **Array&lt;String&gt;** |  | [optional] |
+| **hydra_secrets_pagination** | **Array&lt;String&gt;** |  | [optional] |
 | **hydra_secrets_system** | **Array&lt;String&gt;** |  | [optional] |
 | **hydra_serve_cookies_same_site_legacy_workaround** | **Boolean** | Configures the Ory Hydra Cookie Same Site Legacy Workaround  This governs the \&quot;serve.cookies.same_site_legacy_workaround\&quot; setting. | [optional] |
 | **hydra_serve_cookies_same_site_mode** | **String** | Configures the Ory Hydra Cookie Same Site Mode  This governs the \&quot;serve.cookies.same_site_mode\&quot; setting. | [optional] |
@@ -61,6 +62,7 @@
 | **id** | **String** | The revision ID. | [optional][readonly] |
 | **keto_namespace_configuration** | **String** | The Revisions&#39; Keto Namespace Configuration  The string is a URL pointing to an OPL file with the configuration. | [optional] |
 | **keto_namespaces** | [**Array&lt;KetoNamespace&gt;**](KetoNamespace.md) |  | [optional] |
+| **keto_secrets_pagination** | **Array&lt;String&gt;** |  | [optional] |
 | **kratos_cookies_same_site** | **String** | Configures the Ory Kratos Cookie SameSite Attribute  This governs the \&quot;cookies.same_site\&quot; setting. | [optional] |
 | **kratos_courier_channels** | [**Array&lt;NormalizedProjectRevisionCourierChannel&gt;**](NormalizedProjectRevisionCourierChannel.md) |  | [optional] |
 | **kratos_courier_delivery_strategy** | **String** | The delivery strategy to use when sending emails  &#x60;smtp&#x60;: Use SMTP server &#x60;http&#x60;: Use the built in HTTP client to send the email to some remote service | [optional][default to &#39;smtp&#39;] |
@@ -115,6 +117,9 @@
 | **kratos_feature_flags_cacheable_sessions** | **Boolean** | Configures the Ory Kratos Session caching feature flag  This governs the \&quot;feature_flags.cacheable_sessions\&quot; setting. | [optional] |
 | **kratos_feature_flags_cacheable_sessions_max_age** | **String** | Configures the Ory Kratos Session caching max-age feature flag  This governs the \&quot;feature_flags.cacheable_sessions_max_age\&quot; setting. | [optional] |
 | **kratos_feature_flags_faster_session_extend** | **Boolean** | Configures the Ory Kratos Faster Session Extend setting  If enabled allows faster session extension by skipping the session lookup and returning 201 instead of 200. Disabling this feature will be deprecated in the future.  This governs the \&quot;feature_flags.faster_session_extend\&quot; setting. | [optional] |
+| **kratos_feature_flags_legacy_continue_with_verification_ui** | **Boolean** | Always include show_verification_ui in continue_with  If true, restores the legacy behavior of always including &#x60;show_verification_ui&#x60; in the registration flow&#39;s &#x60;continue_with&#x60; when verification is enabled. If set to false, &#x60;show_verification_ui&#x60; is only set in &#x60;continue_with&#x60; if the &#x60;show_verification_ui&#x60; hook is used. This flag will be removed in the future.  This governs the \&quot;feature_flags.legacy_continue_with_verification_ui\&quot; setting. | [optional] |
+| **kratos_feature_flags_legacy_oidc_registration_node_group** | **Boolean** | Controls whether the UI nodes in an OIDC registration flow have group \&quot;oidc\&quot; in case required fields are not returned by the OIDC provider.  If set to true, the UI nodes will have group \&quot;oidc\&quot; and the flow will be considered successful if the user completes the flow. This is the legacy behavior.  This governs the \&quot;feature_flags.legacy_oidc_registration_node_group\&quot; setting. | [optional] |
+| **kratos_feature_flags_legacy_require_verified_login_error** | **Boolean** | Return a form error if the login identifier is not verified  If true, the login flow will return a form error if the login identifier is not verified, which restores legacy behavior. If this value is false, the &#x60;continue_with&#x60; array will contain a &#x60;show_verification_ui&#x60; hook instead.  This flag is deprecated and will be removed in the future.  This governs the \&quot;feature_flags.legacy_require_verified_login_error\&quot; setting. | [optional] |
 | **kratos_feature_flags_use_continue_with_transitions** | **Boolean** | Configures the Ory Kratos Session use_continue_with_transitions flag  This governs the \&quot;feature_flags.use_continue_with_transitions\&quot; setting. | [optional] |
 | **kratos_identity_schemas** | [**Array&lt;NormalizedProjectRevisionIdentitySchema&gt;**](NormalizedProjectRevisionIdentitySchema.md) |  | [optional] |
 | **kratos_oauth2_provider_headers** | **Object** | NullJSONRawMessage represents a json.RawMessage that works well with JSON, SQL, and Swagger and is NULLable- | [optional] |
@@ -176,8 +181,10 @@
 | **kratos_selfservice_flows_verification_use** | **String** | Configures the Ory Kratos Strategy to use for Verification  This governs the \&quot;selfservice.flows.verification.use\&quot; setting. link SelfServiceMessageVerificationStrategyLink code SelfServiceMessageVerificationStrategyCode | [optional] |
 | **kratos_selfservice_methods_captcha_config_cf_turnstile_secret** | **String** | Configures the Cloudflare Turnstile site secret for CAPTCHA protection  The site secret is private and will be never be shared with the client. This key is write only and the value will not be returned in response to a read request.  Reach out to your account manager to enable this feature. | [optional] |
 | **kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey** | **String** | Configures the Cloudflare Turnstile site key for CAPTCHA protection  The site key is public and will be shared with the client.  Reach out to your account manager to enable this feature. | [optional] |
+| **kratos_selfservice_methods_captcha_config_legacy_inject_node** | **Boolean** | Configures the Ory Kratos Self-Service Methods&#39; Captcha Enabled Setting  Reach out to your account manager to enable this feature. | [optional] |
 | **kratos_selfservice_methods_captcha_enabled** | **Boolean** | Configures the Ory Kratos Self-Service Methods&#39; Captcha Enabled Setting  Reach out to your account manager to enable this feature. | [optional] |
 | **kratos_selfservice_methods_code_config_lifespan** | **String** | Configures the Ory Kratos Code Method&#39;s lifespan  This governs the \&quot;selfservice.methods.code.config.lifespan\&quot; setting. | [optional] |
+| **kratos_selfservice_methods_code_config_max_submissions** | **Integer** |  | [optional] |
 | **kratos_selfservice_methods_code_config_missing_credential_fallback_enabled** | **Boolean** | Enables a fallback method required in certain legacy use cases.  This governs the \&quot;selfservice.methods.code.config.missing_credential_fallback_enabled\&quot; setting. | [optional] |
 | **kratos_selfservice_methods_code_enabled** | **Boolean** | Configures whether Ory Kratos Code Method is enabled  This governs the \&quot;selfservice.methods.code.enabled\&quot; setting. | [optional] |
 | **kratos_selfservice_methods_code_mfa_enabled** | **Boolean** | Configures whether the code method can be used to fulfil MFA flows  This governs the \&quot;selfservice.methods.code.mfa_enabled\&quot; setting. | [optional] |
@@ -218,6 +225,7 @@
 | **kratos_session_whoami_required_aal** | **String** | Configures the Ory Kratos Session Whoami AAL requirement  This governs the \&quot;session.whoami.required_aal\&quot; setting. | [optional] |
 | **kratos_session_whoami_tokenizer_templates** | [**Array&lt;NormalizedProjectRevisionTokenizerTemplate&gt;**](NormalizedProjectRevisionTokenizerTemplate.md) |  | [optional] |
 | **name** | **String** | The project&#39;s name. |  |
+| **organizations** | [**Array&lt;Organization&gt;**](Organization.md) |  | [optional] |
 | **project_id** | **String** | The Revision&#39;s Project ID | [optional] |
 | **project_revision_hooks** | [**Array&lt;NormalizedProjectRevisionHook&gt;**](NormalizedProjectRevisionHook.md) |  | [optional] |
 | **scim_clients** | [**Array&lt;NormalizedProjectRevisionScimClient&gt;**](NormalizedProjectRevisionScimClient.md) |  | [optional] |
@@ -262,6 +270,7 @@ instance = OryClient::NormalizedProjectRevision.new(
   hydra_oidc_subject_identifiers_pairwise_salt: null,
   hydra_oidc_subject_identifiers_supported_types: null,
   hydra_secrets_cookie: null,
+  hydra_secrets_pagination: null,
   hydra_secrets_system: null,
   hydra_serve_cookies_same_site_legacy_workaround: null,
   hydra_serve_cookies_same_site_mode: null,
@@ -291,6 +300,7 @@ instance = OryClient::NormalizedProjectRevision.new(
   id: null,
   keto_namespace_configuration: null,
   keto_namespaces: null,
+  keto_secrets_pagination: null,
   kratos_cookies_same_site: null,
   kratos_courier_channels: null,
   kratos_courier_delivery_strategy: null,
@@ -345,6 +355,9 @@ instance = OryClient::NormalizedProjectRevision.new(
   kratos_feature_flags_cacheable_sessions: null,
   kratos_feature_flags_cacheable_sessions_max_age: null,
   kratos_feature_flags_faster_session_extend: null,
+  kratos_feature_flags_legacy_continue_with_verification_ui: null,
+  kratos_feature_flags_legacy_oidc_registration_node_group: null,
+  kratos_feature_flags_legacy_require_verified_login_error: null,
   kratos_feature_flags_use_continue_with_transitions: null,
   kratos_identity_schemas: null,
   kratos_oauth2_provider_headers: null,
@@ -406,8 +419,10 @@ instance = OryClient::NormalizedProjectRevision.new(
   kratos_selfservice_flows_verification_use: null,
   kratos_selfservice_methods_captcha_config_cf_turnstile_secret: null,
   kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey: null,
+  kratos_selfservice_methods_captcha_config_legacy_inject_node: null,
   kratos_selfservice_methods_captcha_enabled: null,
   kratos_selfservice_methods_code_config_lifespan: null,
+  kratos_selfservice_methods_code_config_max_submissions: null,
   kratos_selfservice_methods_code_config_missing_credential_fallback_enabled: null,
   kratos_selfservice_methods_code_enabled: null,
   kratos_selfservice_methods_code_mfa_enabled: null,
@@ -448,6 +463,7 @@ instance = OryClient::NormalizedProjectRevision.new(
   kratos_session_whoami_required_aal: null,
   kratos_session_whoami_tokenizer_templates: null,
   name: null,
+  organizations: null,
   project_id: null,
   project_revision_hooks: null,
   scim_clients: null,

data/docs/OAuth2Api.md CHANGED Viewed

@@ -7,6 +7,7 @@ All URIs are relative to *https://playground.projects.oryapis.com*
 | [**accept_o_auth2_consent_request**](OAuth2Api.md#accept_o_auth2_consent_request) | **PUT** /admin/oauth2/auth/requests/consent/accept | Accept OAuth 2.0 Consent Request |
 | [**accept_o_auth2_login_request**](OAuth2Api.md#accept_o_auth2_login_request) | **PUT** /admin/oauth2/auth/requests/login/accept | Accept OAuth 2.0 Login Request |
 | [**accept_o_auth2_logout_request**](OAuth2Api.md#accept_o_auth2_logout_request) | **PUT** /admin/oauth2/auth/requests/logout/accept | Accept OAuth 2.0 Session Logout Request |
+| [**accept_user_code_request**](OAuth2Api.md#accept_user_code_request) | **PUT** /admin/oauth2/auth/requests/device/accept | Accepts a device grant user_code request |
 | [**create_o_auth2_client**](OAuth2Api.md#create_o_auth2_client) | **POST** /admin/clients | Create OAuth 2.0 Client |
 | [**delete_o_auth2_client**](OAuth2Api.md#delete_o_auth2_client) | **DELETE** /admin/clients/{id} | Delete OAuth 2.0 Client |
 | [**delete_o_auth2_token**](OAuth2Api.md#delete_o_auth2_token) | **DELETE** /admin/oauth2/tokens | Delete OAuth 2.0 Access Tokens from specific OAuth 2.0 Client |
@@ -21,8 +22,10 @@ All URIs are relative to *https://playground.projects.oryapis.com*
 | [**list_o_auth2_consent_sessions**](OAuth2Api.md#list_o_auth2_consent_sessions) | **GET** /admin/oauth2/auth/sessions/consent | List OAuth 2.0 Consent Sessions of a Subject |
 | [**list_trusted_o_auth2_jwt_grant_issuers**](OAuth2Api.md#list_trusted_o_auth2_jwt_grant_issuers) | **GET** /admin/trust/grants/jwt-bearer/issuers | List Trusted OAuth2 JWT Bearer Grant Type Issuers |
 | [**o_auth2_authorize**](OAuth2Api.md#o_auth2_authorize) | **GET** /oauth2/auth | OAuth 2.0 Authorize Endpoint |
+| [**o_auth2_device_flow**](OAuth2Api.md#o_auth2_device_flow) | **POST** /oauth2/device/auth | The OAuth 2.0 Device Authorize Endpoint |
 | [**oauth2_token_exchange**](OAuth2Api.md#oauth2_token_exchange) | **POST** /oauth2/token | The OAuth 2.0 Token Endpoint |
 | [**patch_o_auth2_client**](OAuth2Api.md#patch_o_auth2_client) | **PATCH** /admin/clients/{id} | Patch OAuth 2.0 Client |
+| [**perform_o_auth2_device_verification_flow**](OAuth2Api.md#perform_o_auth2_device_verification_flow) | **GET** /oauth2/device/verify | OAuth 2.0 Device Verification Endpoint |
 | [**reject_o_auth2_consent_request**](OAuth2Api.md#reject_o_auth2_consent_request) | **PUT** /admin/oauth2/auth/requests/consent/reject | Reject OAuth 2.0 Consent Request |
 | [**reject_o_auth2_login_request**](OAuth2Api.md#reject_o_auth2_login_request) | **PUT** /admin/oauth2/auth/requests/login/reject | Reject OAuth 2.0 Login Request |
 | [**reject_o_auth2_logout_request**](OAuth2Api.md#reject_o_auth2_logout_request) | **PUT** /admin/oauth2/auth/requests/logout/reject | Reject OAuth 2.0 Session Logout Request |
@@ -249,6 +252,79 @@ end
 - **Accept**: application/json
+## accept_user_code_request
+> <OAuth2RedirectTo> accept_user_code_request(device_challenge, opts)
+Accepts a device grant user_code request
+Accepts a device grant user_code request
+### Examples
+```ruby
+require 'time'
+require 'ory-client'
+# setup authorization
+OryClient.configure do |config|
+  # Configure Bearer authorization: oryAccessToken
+  config.access_token = 'YOUR_BEARER_TOKEN'
+end
+api_instance = OryClient::OAuth2Api.new
+device_challenge = 'device_challenge_example' # String |
+opts = {
+  accept_device_user_code_request: OryClient::AcceptDeviceUserCodeRequest.new # AcceptDeviceUserCodeRequest |
+}
+begin
+  # Accepts a device grant user_code request
+  result = api_instance.accept_user_code_request(device_challenge, opts)
+  p result
+rescue OryClient::ApiError => e
+  puts "Error when calling OAuth2Api->accept_user_code_request: #{e}"
+end
+```
+#### Using the accept_user_code_request_with_http_info variant
+This returns an Array which contains the response data, status code and headers.
+> <Array(<OAuth2RedirectTo>, Integer, Hash)> accept_user_code_request_with_http_info(device_challenge, opts)
+```ruby
+begin
+  # Accepts a device grant user_code request
+  data, status_code, headers = api_instance.accept_user_code_request_with_http_info(device_challenge, opts)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <OAuth2RedirectTo>
+rescue OryClient::ApiError => e
+  puts "Error when calling OAuth2Api->accept_user_code_request_with_http_info: #{e}"
+end
+```
+### Parameters
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **device_challenge** | **String** |  |  |
+| **accept_device_user_code_request** | [**AcceptDeviceUserCodeRequest**](AcceptDeviceUserCodeRequest.md) |  | [optional] |
+### Return type
+[**OAuth2RedirectTo**](OAuth2RedirectTo.md)
+### Authorization
+[oryAccessToken](../README.md#oryAccessToken)
+### HTTP request headers
+- **Content-Type**: application/json
+- **Accept**: application/json
 ## create_o_auth2_client
 > <OAuth2Client> create_o_auth2_client(o_auth2_client)
@@ -999,7 +1075,7 @@ end
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **page_size** | **Integer** | Items per Page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). | [optional][default to 250] |
-| **page_token** | **String** | Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). | [optional][default to &#39;1&#39;] |
+| **page_token** | **String** | Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). | [optional] |
 | **client_name** | **String** | The name of the clients to filter by. | [optional] |
 | **owner** | **String** | The owner of the clients to filter by. | [optional] |
@@ -1115,8 +1191,8 @@ end
 api_instance = OryClient::OAuth2Api.new
 opts = {
-  max_items: 789, # Integer |
-  default_items: 789, # Integer |
+  page_size: 789, # Integer | Items per Page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).
+  page_token: 'page_token_example', # String | Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).
   issuer: 'issuer_example' # String | If optional \"issuer\" is supplied, only jwt-bearer grants with this issuer will be returned.
 }
@@ -1151,8 +1227,8 @@ end
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **max_items** | **Integer** |  | [optional] |
-| **default_items** | **Integer** |  | [optional] |
+| **page_size** | **Integer** | Items per Page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). | [optional][default to 250] |
+| **page_token** | **String** | Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). | [optional] |
 | **issuer** | **String** | If optional \&quot;issuer\&quot; is supplied, only jwt-bearer grants with this issuer will be returned. | [optional] |
 ### Return type
@@ -1230,6 +1306,67 @@ No authorization required
 - **Accept**: application/json
+## o_auth2_device_flow
+> <DeviceAuthorization> o_auth2_device_flow
+The OAuth 2.0 Device Authorize Endpoint
+This endpoint is not documented here because you should never use your own implementation to perform OAuth2 flows. OAuth2 is a very popular protocol and a library for your programming language will exists.  To learn more about this flow please refer to the specification: https://tools.ietf.org/html/rfc8628
+### Examples
+```ruby
+require 'time'
+require 'ory-client'
+api_instance = OryClient::OAuth2Api.new
+begin
+  # The OAuth 2.0 Device Authorize Endpoint
+  result = api_instance.o_auth2_device_flow
+  p result
+rescue OryClient::ApiError => e
+  puts "Error when calling OAuth2Api->o_auth2_device_flow: #{e}"
+end
+```
+#### Using the o_auth2_device_flow_with_http_info variant
+This returns an Array which contains the response data, status code and headers.
+> <Array(<DeviceAuthorization>, Integer, Hash)> o_auth2_device_flow_with_http_info
+```ruby
+begin
+  # The OAuth 2.0 Device Authorize Endpoint
+  data, status_code, headers = api_instance.o_auth2_device_flow_with_http_info
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <DeviceAuthorization>
+rescue OryClient::ApiError => e
+  puts "Error when calling OAuth2Api->o_auth2_device_flow_with_http_info: #{e}"
+end
+```
+### Parameters
+This endpoint does not need any parameter.
+### Return type
+[**DeviceAuthorization**](DeviceAuthorization.md)
+### Authorization
+No authorization required
+### HTTP request headers
+- **Content-Type**: Not defined
+- **Accept**: application/json
 ## oauth2_token_exchange
 > <OAuth2TokenExchange> oauth2_token_exchange(grant_type, opts)
@@ -1384,6 +1521,67 @@ end
 - **Accept**: application/json
+## perform_o_auth2_device_verification_flow
+> <ErrorOAuth2> perform_o_auth2_device_verification_flow
+OAuth 2.0 Device Verification Endpoint
+This is the device user verification endpoint. The user is redirected here when trying to login using the device flow.
+### Examples
+```ruby
+require 'time'
+require 'ory-client'
+api_instance = OryClient::OAuth2Api.new
+begin
+  # OAuth 2.0 Device Verification Endpoint
+  result = api_instance.perform_o_auth2_device_verification_flow
+  p result
+rescue OryClient::ApiError => e
+  puts "Error when calling OAuth2Api->perform_o_auth2_device_verification_flow: #{e}"
+end
+```
+#### Using the perform_o_auth2_device_verification_flow_with_http_info variant
+This returns an Array which contains the response data, status code and headers.
+> <Array(<ErrorOAuth2>, Integer, Hash)> perform_o_auth2_device_verification_flow_with_http_info
+```ruby
+begin
+  # OAuth 2.0 Device Verification Endpoint
+  data, status_code, headers = api_instance.perform_o_auth2_device_verification_flow_with_http_info
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <ErrorOAuth2>
+rescue OryClient::ApiError => e
+  puts "Error when calling OAuth2Api->perform_o_auth2_device_verification_flow_with_http_info: #{e}"
+end
+```
+### Parameters
+This endpoint does not need any parameter.
+### Return type
+[**ErrorOAuth2**](ErrorOAuth2.md)
+### Authorization
+No authorization required
+### HTTP request headers
+- **Content-Type**: Not defined
+- **Accept**: application/json
 ## reject_o_auth2_consent_request
 > <OAuth2RedirectTo> reject_o_auth2_consent_request(consent_challenge, opts)

data/docs/OAuth2Client.md CHANGED Viewed

@@ -4,7 +4,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **access_token_strategy** | **String** | OAuth 2.0 Access Token Strategy  AccessTokenStrategy is the strategy used to generate access tokens. Valid options are &#x60;jwt&#x60; and &#x60;opaque&#x60;. &#x60;jwt&#x60; is a bad idea, see https://www.ory.sh/docs/oauth2-oidc/jwt-access-token Setting the stragegy here overrides the global setting in &#x60;strategies.access_token&#x60;. | [optional] |
+| **access_token_strategy** | **String** | OAuth 2.0 Access Token Strategy  AccessTokenStrategy is the strategy used to generate access tokens. Valid options are &#x60;jwt&#x60; and &#x60;opaque&#x60;. &#x60;jwt&#x60; is a bad idea, see https://www.ory.sh/docs/oauth2-oidc/jwt-access-token Setting the strategy here overrides the global setting in &#x60;strategies.access_token&#x60;. | [optional] |
 | **allowed_cors_origins** | **Array&lt;String&gt;** |  | [optional] |
 | **audience** | **Array&lt;String&gt;** |  | [optional] |
 | **authorization_code_grant_access_token_lifespan** | **String** |  | [optional] |
@@ -20,12 +20,15 @@
 | **client_uri** | **String** | OAuth 2.0 Client URI  ClientURI is a URL string of a web page providing information about the client. If present, the server SHOULD display this URL to the end-user in a clickable fashion. | [optional] |
 | **contacts** | **Array&lt;String&gt;** |  | [optional] |
 | **created_at** | **Time** | OAuth 2.0 Client Creation Date  CreatedAt returns the timestamp of the client&#39;s creation. | [optional] |
+| **device_authorization_grant_access_token_lifespan** | **String** |  | [optional] |
+| **device_authorization_grant_id_token_lifespan** | **String** |  | [optional] |
+| **device_authorization_grant_refresh_token_lifespan** | **String** |  | [optional] |
 | **frontchannel_logout_session_required** | **Boolean** | OpenID Connect Front-Channel Logout Session Required  Boolean value specifying whether the RP requires that iss (issuer) and sid (session ID) query parameters be included to identify the RP session with the OP when the frontchannel_logout_uri is used. If omitted, the default value is false. | [optional] |
 | **frontchannel_logout_uri** | **String** | OpenID Connect Front-Channel Logout URI  RP URL that will cause the RP to log itself out when rendered in an iframe by the OP. An iss (issuer) query parameter and a sid (session ID) query parameter MAY be included by the OP to enable the RP to validate the request and to determine which of the potentially multiple sessions is to be logged out; if either is included, both MUST be. | [optional] |
 | **grant_types** | **Array&lt;String&gt;** |  | [optional] |
 | **implicit_grant_access_token_lifespan** | **String** |  | [optional] |
 | **implicit_grant_id_token_lifespan** | **String** |  | [optional] |
-| **jwks** | **Object** | OAuth 2.0 Client JSON Web Key Set  Client&#39;s JSON Web Key Set [JWK] document, passed by value. The semantics of the jwks parameter are the same as the jwks_uri parameter, other than that the JWK Set is passed by value, rather than by reference. This parameter is intended only to be used by Clients that, for some reason, are unable to use the jwks_uri parameter, for instance, by native applications that might not have a location to host the contents of the JWK Set. If a Client can use jwks_uri, it MUST NOT use jwks. One significant downside of jwks is that it does not enable key rotation (which jwks_uri does, as described in Section 10 of OpenID Connect Core 1.0 [OpenID.Core]). The jwks_uri and jwks parameters MUST NOT be used together. | [optional] |
+| **jwks** | [**JsonWebKeySet**](JsonWebKeySet.md) |  | [optional] |
 | **jwks_uri** | **String** | OAuth 2.0 Client JSON Web Key Set URL  URL for the Client&#39;s JSON Web Key Set [JWK] document. If the Client signs requests to the Server, it contains the signing key(s) the Server uses to validate signatures from the Client. The JWK Set MAY also contain the Client&#39;s encryption keys(s), which are used by the Server to encrypt responses to the Client. When both signing and encryption keys are made available, a use (Key Use) parameter value is REQUIRED for all keys in the referenced JWK Set to indicate each key&#39;s intended usage. Although some algorithms allow the same key to be used for both signatures and encryption, doing so is NOT RECOMMENDED, as it is less secure. The JWK x5c parameter MAY be used to provide X.509 representations of keys provided. When used, the bare key values MUST still be present and MUST match those in the certificate. | [optional] |
 | **jwt_bearer_grant_access_token_lifespan** | **String** |  | [optional] |
 | **logo_uri** | **String** | OAuth 2.0 Client Logo URI  A URL string referencing the client&#39;s logo. | [optional] |
@@ -75,6 +78,9 @@ instance = OryClient::OAuth2Client.new(
   client_uri: null,
   contacts: null,
   created_at: null,
+  device_authorization_grant_access_token_lifespan: null,
+  device_authorization_grant_id_token_lifespan: null,
+  device_authorization_grant_refresh_token_lifespan: null,
   frontchannel_logout_session_required: null,
   frontchannel_logout_uri: null,
   grant_types: null,

data/docs/OAuth2ClientTokenLifespans.md CHANGED Viewed

@@ -8,6 +8,9 @@
 | **authorization_code_grant_id_token_lifespan** | **String** |  | [optional] |
 | **authorization_code_grant_refresh_token_lifespan** | **String** |  | [optional] |
 | **client_credentials_grant_access_token_lifespan** | **String** |  | [optional] |
+| **device_authorization_grant_access_token_lifespan** | **String** |  | [optional] |
+| **device_authorization_grant_id_token_lifespan** | **String** |  | [optional] |
+| **device_authorization_grant_refresh_token_lifespan** | **String** |  | [optional] |
 | **implicit_grant_access_token_lifespan** | **String** |  | [optional] |
 | **implicit_grant_id_token_lifespan** | **String** |  | [optional] |
 | **jwt_bearer_grant_access_token_lifespan** | **String** |  | [optional] |
@@ -25,6 +28,9 @@ instance = OryClient::OAuth2ClientTokenLifespans.new(
   authorization_code_grant_id_token_lifespan: null,
   authorization_code_grant_refresh_token_lifespan: null,
   client_credentials_grant_access_token_lifespan: null,
+  device_authorization_grant_access_token_lifespan: null,
+  device_authorization_grant_id_token_lifespan: null,
+  device_authorization_grant_refresh_token_lifespan: null,
   implicit_grant_access_token_lifespan: null,
   implicit_grant_id_token_lifespan: null,
   jwt_bearer_grant_access_token_lifespan: null,

data/docs/OAuth2ConsentRequest.md CHANGED Viewed

@@ -10,6 +10,7 @@
 | **client** | [**OAuth2Client**](OAuth2Client.md) |  | [optional] |
 | **consent_request_id** | **String** | ConsentRequestID is the ID of the consent request. | [optional] |
 | **context** | **Object** |  | [optional] |
+| **device_challenge_id** | **String** | DeviceChallenge is the device challenge this consent challenge belongs to, if this flow was initiated by a device. | [optional] |
 | **login_challenge** | **String** | LoginChallenge is the login challenge this consent challenge belongs to. It can be used to associate a login and consent request in the login &amp; consent app. | [optional] |
 | **login_session_id** | **String** | LoginSessionID is the login session ID. If the user-agent reuses a login session (via cookie / remember flag) this ID will remain the same. If the user-agent did not have an existing authentication session (e.g. remember is false) this will be a new random value. This value is used as the \&quot;sid\&quot; parameter in the ID Token and in OIDC Front-/Back- channel logout. It&#39;s value can generally be used to associate consecutive login requests by a certain user. | [optional] |
 | **oidc_context** | [**OAuth2ConsentRequestOpenIDConnectContext**](OAuth2ConsentRequestOpenIDConnectContext.md) |  | [optional] |
@@ -31,6 +32,7 @@ instance = OryClient::OAuth2ConsentRequest.new(
   client: null,
   consent_request_id: null,
   context: null,
+  device_challenge_id: null,
   login_challenge: null,
   login_session_id: null,
   oidc_context: null,

data/docs/OidcConfiguration.md CHANGED Viewed

@@ -12,6 +12,7 @@
 | **code_challenge_methods_supported** | **Array&lt;String&gt;** | OAuth 2.0 PKCE Supported Code Challenge Methods  JSON array containing a list of Proof Key for Code Exchange (PKCE) [RFC7636] code challenge methods supported by this authorization server. | [optional] |
 | **credentials_endpoint_draft_00** | **String** | OpenID Connect Verifiable Credentials Endpoint  Contains the URL of the Verifiable Credentials Endpoint. | [optional] |
 | **credentials_supported_draft_00** | [**Array&lt;CredentialSupportedDraft00&gt;**](CredentialSupportedDraft00.md) | OpenID Connect Verifiable Credentials Supported  JSON array containing a list of the Verifiable Credentials supported by this authorization server. | [optional] |
+| **device_authorization_endpoint** | **String** | OAuth 2.0 Device Authorization Endpoint URL |  |
 | **end_session_endpoint** | **String** | OpenID Connect End-Session Endpoint  URL at the OP to which an RP can perform a redirect to request that the End-User be logged out at the OP. | [optional] |
 | **frontchannel_logout_session_supported** | **Boolean** | OpenID Connect Front-Channel Logout Session Required  Boolean value specifying whether the OP can pass iss (issuer) and sid (session ID) query parameters to identify the RP session with the OP when the frontchannel_logout_uri is used. If supported, the sid Claim is also included in ID Tokens issued by the OP. | [optional] |
 | **frontchannel_logout_supported** | **Boolean** | OpenID Connect Front-Channel Logout Supported  Boolean value specifying whether the OP supports HTTP-based logout, with true indicating support. | [optional] |
@@ -50,6 +51,7 @@ instance = OryClient::OidcConfiguration.new(
   code_challenge_methods_supported: null,
   credentials_endpoint_draft_00: null,
   credentials_supported_draft_00: null,
+  device_authorization_endpoint: https://playground.ory.sh/ory-hydra/public/oauth2/device/oauth,
   end_session_endpoint: null,
   frontchannel_logout_session_supported: null,
   frontchannel_logout_supported: null,

data/docs/OnboardingPortalLink.md ADDED Viewed

@@ -0,0 +1,30 @@
+# OryClient::OnboardingPortalLink
+## Properties
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **created_at** | **Time** | The onboarding portal link&#39;s creation date | [optional][readonly] |
+| **enable_sso** | **Boolean** | Feature flag to enable SSO configuration | [optional] |
+| **expires_at** | **Time** | The onboarding portal link&#39;s expiry date | [readonly] |
+| **id** | **String** | The onboarding portal link&#39;s ID. | [readonly] |
+| **organization_id** | **String** | The onboarding portal link&#39;s organization ID | [readonly] |
+| **project_id** | **String** | The onboarding portal link&#39;s project ID | [readonly] |
+| **value** | **String** | The onboarding portal link&#39;s value | [readonly] |
+## Example
+```ruby
+require 'ory-client'
+instance = OryClient::OnboardingPortalLink.new(
+  created_at: null,
+  enable_sso: null,
+  expires_at: null,
+  id: null,
+  organization_id: null,
+  project_id: null,
+  value: null
+)
+```

data/docs/OnboardingPortalOrganization.md ADDED Viewed

@@ -0,0 +1,28 @@
+# OryClient::OnboardingPortalOrganization
+## Properties
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **base_url** | **String** |  |  |
+| **kratos_selfservice_methods_oidc_config_providers** | [**Array&lt;NormalizedProjectRevisionThirdPartyProvider&gt;**](NormalizedProjectRevisionThirdPartyProvider.md) |  |  |
+| **kratos_selfservice_methods_saml_config_providers** | [**Array&lt;NormalizedProjectRevisionSAMLProvider&gt;**](NormalizedProjectRevisionSAMLProvider.md) |  |  |
+| **organization_id** | **String** | Organization ID | [optional] |
+| **organization_label** | **String** | Organization Label | [optional] |
+| **revision_id** | **String** |  |  |
+## Example
+```ruby
+require 'ory-client'
+instance = OryClient::OnboardingPortalOrganization.new(
+  base_url: null,
+  kratos_selfservice_methods_oidc_config_providers: null,
+  kratos_selfservice_methods_saml_config_providers: null,
+  organization_id: null,
+  organization_label: null,
+  revision_id: null
+)
+```

data/docs/Organization.md CHANGED Viewed

@@ -4,12 +4,10 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **created_at** | **Time** | The organization&#39;s creation date. | [readonly] |
+| **created_at** | **Time** |  |  |
 | **domains** | **Array&lt;String&gt;** |  |  |
 | **id** | **String** | The organization&#39;s ID. |  |
 | **label** | **String** | The organization&#39;s human-readable label. |  |
-| **project_id** | **String** | The project&#39;s ID. |  |
-| **updated_at** | **Time** | The last time the organization was updated. | [readonly] |
 ## Example
@@ -20,9 +18,7 @@ instance = OryClient::Organization.new(
   created_at: null,
   domains: null,
   id: null,
-  label: null,
-  project_id: null,
-  updated_at: null
+  label: null
 )
 ```

data/docs/OrganizationOnboardingPortalLinksResponse.md ADDED Viewed

@@ -0,0 +1,18 @@
+# OryClient::OrganizationOnboardingPortalLinksResponse
+## Properties
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **links** | [**Array&lt;OnboardingPortalLink&gt;**](OnboardingPortalLink.md) |  |  |
+## Example
+```ruby
+require 'ory-client'
+instance = OryClient::OrganizationOnboardingPortalLinksResponse.new(
+  links: null
+)
+```

data/docs/Project.md CHANGED Viewed

@@ -10,6 +10,7 @@
 | **home_region** | **String** | The project home region.  This is used to set where the project data is stored and where the project&#39;s endpoints are located. eu-central EUCentral asia-northeast AsiaNorthEast us-east USEast us-west USWest us US global Global |  |
 | **id** | **String** | The project&#39;s ID. | [readonly] |
 | **name** | **String** | The name of the project. |  |
+| **organizations** | [**Array&lt;BasicOrganization&gt;**](BasicOrganization.md) | The organizations of the project.  Organizations are used to group users and enforce certain restrictions like usage of SSO. |  |
 | **revision_id** | **String** | The configuration revision ID. | [readonly] |
 | **services** | [**ProjectServices**](ProjectServices.md) |  |  |
 | **slug** | **String** | The project&#39;s slug | [readonly] |
@@ -28,6 +29,7 @@ instance = OryClient::Project.new(
   home_region: null,
   id: null,
   name: null,
+  organizations: null,
   revision_id: null,
   services: null,
   slug: null,