ory-client 1.22.61 → 1.22.63

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b954f3964b25e176e051d74f5be6d120891c614f621b59a9fd551a7c7c2aa022
-  data.tar.gz: 50a7ad8fa07ac2fff4639390860a869e60d26d50d4664ce2828ef34d8aa7a07c
+  metadata.gz: d5fb15eaeb2b84cced07109479844562e5ff010b90ed5fde4b517d51cc96b312
+  data.tar.gz: c95516e46fb71126cb19127b845515e1a31ba9637091b3090a966157be1f3495
 SHA512:
-  metadata.gz: f26e78572750bd58ab2654658b5ec1621e3d78a156f27b5523a71186eb1e74d74107a1bc2ba185abcff00fbd9b5d3827d3878fd4367e17db42cd3efd51079753
-  data.tar.gz: c78b3314a0fd57f26a1c8e17fc58204a386a0e940b52ec37bfcefe73a141d67deef9ba9233327881372801c17dde99aee2c65e3c2afb4ee50808445acd460dd7
+  metadata.gz: 2deca2a34b96df65c3e2af76a02a29690782553b3cd3bbe9d327844c2bf88a9f9aa94c1a29bcad2ffe8c0c4d88ce00ee7cc050bd9dec4a65206259d07e7474c8
+  data.tar.gz: 4ffc72ef921fe01c09fbbc4148a88096b253c25bbb5f6b4afdb96889408f23fb004cc053d8d63b9d4cf48d8ccb619d897156321006c7a89983c1810ab9f6bb09

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    ory-client (1.22.61)
+    ory-client (1.22.63)
       typhoeus (~> 1.0, >= 1.0.1)
 
 GEM

data/README.md

@@ -26,8 +26,8 @@ This document describes the APIs available in the Ory Network. The APIs are avai
 
 This SDK is automatically generated by the [OpenAPI Generator](https://openapi-generator.tech) project:
 
-- API version: v1.22.61
-- Package version: v1.22.61
+- API version: v1.22.63
+- Package version: v1.22.63
 - Generator version: 7.17.0
 - Build package: org.openapitools.codegen.languages.RubyClientCodegen
 
@@ -44,16 +44,16 @@ gem build ory-client.gemspec
 Then either install the gem locally:
 
 ```shell
-gem install ./ory-client-v1.22.61.gem
+gem install ./ory-client-v1.22.63.gem
 ```
 
-(for development, run `gem install --dev ./ory-client-v1.22.61.gem` to install the development dependencies)
+(for development, run `gem install --dev ./ory-client-v1.22.63.gem` to install the development dependencies)
 
 or publish the gem to a gem hosting service, e.g. [RubyGems](https://rubygems.org/).
 
 Finally add this to the Gemfile:
 
-    gem 'ory-client', '~> v1.22.61'
+    gem 'ory-client', '~> v1.22.63'
 
 ### Install from Git
 
@@ -312,6 +312,8 @@ Class | Method | HTTP request | Description
  - [OryClient::CheckPermissionResultWithError](docs/CheckPermissionResultWithError.md)
  - [OryClient::CloudAccount](docs/CloudAccount.md)
  - [OryClient::ContinueWith](docs/ContinueWith.md)
+ - [OryClient::ContinueWithDeviceAuthnPinEntryUi](docs/ContinueWithDeviceAuthnPinEntryUi.md)
+ - [OryClient::ContinueWithDeviceAuthnPinEntryUiData](docs/ContinueWithDeviceAuthnPinEntryUiData.md)
  - [OryClient::ContinueWithRecoveryUi](docs/ContinueWithRecoveryUi.md)
  - [OryClient::ContinueWithRecoveryUiFlow](docs/ContinueWithRecoveryUiFlow.md)
  - [OryClient::ContinueWithRedirectBrowserTo](docs/ContinueWithRedirectBrowserTo.md)
@@ -330,7 +332,7 @@ Class | Method | HTTP request | Description
  - [OryClient::CreateJsonWebKeySet](docs/CreateJsonWebKeySet.md)
  - [OryClient::CreateOnboardingLinkResponse](docs/CreateOnboardingLinkResponse.md)
  - [OryClient::CreateOrganizationOnboardingPortalLinkBody](docs/CreateOrganizationOnboardingPortalLinkBody.md)
- - [OryClient::CreateProjectApiKeyRequest](docs/CreateProjectApiKeyRequest.md)
+ - [OryClient::CreateProjectApiKeyBody](docs/CreateProjectApiKeyBody.md)
  - [OryClient::CreateProjectBody](docs/CreateProjectBody.md)
  - [OryClient::CreateProjectBranding](docs/CreateProjectBranding.md)
  - [OryClient::CreateProjectMemberInviteBody](docs/CreateProjectMemberInviteBody.md)
@@ -500,6 +502,7 @@ Class | Method | HTTP request | Description
  - [OryClient::Organization](docs/Organization.md)
  - [OryClient::OrganizationBody](docs/OrganizationBody.md)
  - [OryClient::OrganizationOnboardingPortalLinksResponse](docs/OrganizationOnboardingPortalLinksResponse.md)
+ - [OryClient::PINConfig](docs/PINConfig.md)
  - [OryClient::ParseError](docs/ParseError.md)
  - [OryClient::PatchIdentitiesBody](docs/PatchIdentitiesBody.md)
  - [OryClient::PatchWorkspaceMemberBody](docs/PatchWorkspaceMemberBody.md)
@@ -620,6 +623,7 @@ Class | Method | HTTP request | Description
  - [OryClient::UpdateSettingsFlowWithDeviceAuthnMethod](docs/UpdateSettingsFlowWithDeviceAuthnMethod.md)
  - [OryClient::UpdateSettingsFlowWithDeviceAuthnMethodAdd](docs/UpdateSettingsFlowWithDeviceAuthnMethodAdd.md)
  - [OryClient::UpdateSettingsFlowWithDeviceAuthnMethodDelete](docs/UpdateSettingsFlowWithDeviceAuthnMethodDelete.md)
+ - [OryClient::UpdateSettingsFlowWithDeviceAuthnMethodRotateSecret](docs/UpdateSettingsFlowWithDeviceAuthnMethodRotateSecret.md)
  - [OryClient::UpdateSettingsFlowWithLookupMethod](docs/UpdateSettingsFlowWithLookupMethod.md)
  - [OryClient::UpdateSettingsFlowWithOidcMethod](docs/UpdateSettingsFlowWithOidcMethod.md)
  - [OryClient::UpdateSettingsFlowWithPasskeyMethod](docs/UpdateSettingsFlowWithPasskeyMethod.md)
@@ -634,6 +638,7 @@ Class | Method | HTTP request | Description
  - [OryClient::UpdateVerificationFlowWithLinkMethod](docs/UpdateVerificationFlowWithLinkMethod.md)
  - [OryClient::UpdateWorkspaceBody](docs/UpdateWorkspaceBody.md)
  - [OryClient::Usage](docs/Usage.md)
+ - [OryClient::UserVerification](docs/UserVerification.md)
  - [OryClient::ValidateBaseURLRewriteRequest](docs/ValidateBaseURLRewriteRequest.md)
  - [OryClient::ValidateBaseURLRewriteResponse](docs/ValidateBaseURLRewriteResponse.md)
  - [OryClient::VerifiableCredentialPrimingResponse](docs/VerifiableCredentialPrimingResponse.md)

data/docs/AccountExperienceConfiguration.md

@@ -4,6 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **contact_url** | **String** | The URL to the project's Contact page. | [optional] |
 | **default_locale** | **String** |  |  |
 | **default_redirect_url** | **String** |  |  |
 | **enabled_locales** | **Array<String>** |  |  |
@@ -17,12 +18,14 @@
 | **logo_dark_url** | **String** |  | [optional] |
 | **logo_light_url** | **String** |  | [optional] |
 | **name** | **String** |  |  |
+| **privacy_policy_url** | **String** | The URL to the project's Privacy Policy page. | [optional] |
 | **recovery_enabled** | **Boolean** |  |  |
 | **recovery_ui_url** | **String** |  |  |
 | **registration_enabled** | **Boolean** |  |  |
 | **registration_ui_url** | **String** |  |  |
 | **settings_ui_url** | **String** |  |  |
 | **stylesheet** | **String** |  | [optional] |
+| **terms_of_service_url** | **String** | The URL to the project's Terms of Service page. | [optional] |
 | **translations** | [**Array<RevisionAccountExperienceCustomTranslation>**](RevisionAccountExperienceCustomTranslation.md) |  |  |
 | **verification_enabled** | **Boolean** |  |  |
 | **verification_ui_url** | **String** |  |  |
@@ -33,6 +36,7 @@
 require 'ory-client'
 
 instance = OryClient::AccountExperienceConfiguration.new(
+  contact_url: null,
   default_locale: null,
   default_redirect_url: null,
   enabled_locales: null,
@@ -46,12 +50,14 @@ instance = OryClient::AccountExperienceConfiguration.new(
   logo_dark_url: null,
   logo_light_url: null,
   name: null,
+  privacy_policy_url: null,
   recovery_enabled: null,
   recovery_ui_url: null,
   registration_enabled: null,
   registration_ui_url: null,
   settings_ui_url: null,
   stylesheet: null,
+  terms_of_service_url: null,
   translations: null,
   verification_enabled: null,
   verification_ui_url: null

data/docs/ContinueWith.md

@@ -14,6 +14,7 @@ require 'ory-client'
 OryClient::ContinueWith.openapi_one_of
 # =>
 # [
+#   :'ContinueWithDeviceAuthnPinEntryUi',
 #   :'ContinueWithRecoveryUi',
 #   :'ContinueWithRedirectBrowserTo',
 #   :'ContinueWithSetOrySessionToken',
@@ -49,6 +50,7 @@ OryClient::ContinueWith.openapi_discriminator_mapping
 # {
 #   :'redirect_browser_to' => :'ContinueWithRedirectBrowserTo',
 #   :'set_ory_session_token' => :'ContinueWithSetOrySessionToken',
+#   :'show_pin_entry_ui' => :'ContinueWithDeviceAuthnPinEntryUi',
 #   :'show_recovery_ui' => :'ContinueWithRecoveryUi',
 #   :'show_settings_ui' => :'ContinueWithSettingsUi',
 #   :'show_verification_ui' => :'ContinueWithVerificationUi'
@@ -65,7 +67,7 @@ Find the appropriate object from the `openapi_one_of` list and casts the data in
 require 'ory-client'
 
 OryClient::ContinueWith.build(data)
-# => #<ContinueWithRecoveryUi:0x00007fdd4aab02a0>
+# => #<ContinueWithDeviceAuthnPinEntryUi:0x00007fdd4aab02a0>
 
 OryClient::ContinueWith.build(data_that_doesnt_match)
 # => nil
@@ -79,6 +81,7 @@ OryClient::ContinueWith.build(data_that_doesnt_match)
 
 #### Return type
 
+- `ContinueWithDeviceAuthnPinEntryUi`
 - `ContinueWithRecoveryUi`
 - `ContinueWithRedirectBrowserTo`
 - `ContinueWithSetOrySessionToken`

data/docs/ContinueWithDeviceAuthnPinEntryUi.md

@@ -0,0 +1,20 @@
+# OryClient::ContinueWithDeviceAuthnPinEntryUi
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **action** | **String** | Action will always be `show_pin_entry_ui` show_pin_entry_ui ContinueWithActionShowPINEntryUIString |  |
+| **data** | [**ContinueWithDeviceAuthnPinEntryUiData**](ContinueWithDeviceAuthnPinEntryUiData.md) | The one-time HPKE-sealed pin_secret material the device opens to bind the user's PIN after a PIN-protected DeviceAuthn enrollment or secret rotation. |  |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::ContinueWithDeviceAuthnPinEntryUi.new(
+  action: null,
+  data: null
+)
+```
+

data/docs/ContinueWithDeviceAuthnPinEntryUiData.md

@@ -0,0 +1,20 @@
+# OryClient::ContinueWithDeviceAuthnPinEntryUiData
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **ciphertext** | **String** | Ciphertext is the base64-encoded HPKE-sealed pin_secret. |  |
+| **enc** | **String** | Enc is the base64-encoded HPKE encapsulated key. |  |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::ContinueWithDeviceAuthnPinEntryUiData.new(
+  ciphertext: null,
+  enc: null
+)
+```
+

data/docs/{CreateProjectApiKeyRequest.md → CreateProjectApiKeyBody.md}

@@ -1,18 +1,18 @@
-# OryClient::CreateProjectApiKeyRequest
+# OryClient::CreateProjectApiKeyBody
 
 ## Properties
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **expires_at** | **Time** |  | [optional] |
-| **name** | **String** | The Token Name  A descriptive name for the token.  in: body |  |
+| **name** | **String** | The Token Name  A descriptive name for the token. |  |
 
 ## Example
 
 ```ruby
 require 'ory-client'
 
-instance = OryClient::CreateProjectApiKeyRequest.new(
+instance = OryClient::CreateProjectApiKeyBody.new(
   expires_at: null,
   name: null
 )

data/docs/CreateProjectNormalizedPayload.md

@@ -4,6 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **account_experience_contact_url** | **String** | Holds the URL to the account experience's Contact page. This governs the \"contact_url\" setting. | [optional] |
 | **account_experience_custom_translations** | [**Array<RevisionAccountExperienceCustomTranslation>**](RevisionAccountExperienceCustomTranslation.md) | The Account Experience's Custom Translations  Contains all Custom Translations for this project. | [optional] |
 | **account_experience_default_locale** | **String** | Holds the default locale for the account experience. This governs the \"default_locale\" setting. | [optional] |
 | **account_experience_enabled_locales** | **Array<String>** | The Account Experience's Enabled Locales  This governs the locales that are available in the account experience. This governs the \"enabled_locales\" setting. | [optional] |
@@ -14,6 +15,8 @@
 | **account_experience_locale_behavior** | **String** | Holds the URL to the account experience's language behavior.  Can be one of: `respect_accept_language`: Respect the `Accept-Language` header. `force_default`: Force the default language. This governs the \"locale_behavior\" setting. | [optional] |
 | **account_experience_logo_dark** | **String** | Holds the URL to the account experience's dark theme logo (currently unused). This governs the \"logo_dark\" setting. | [optional] |
 | **account_experience_logo_light** | **String** | Holds the URL to the account experience's logo. This governs the \"logo_light\" setting. | [optional] |
+| **account_experience_privacy_policy_url** | **String** | Holds the URL to the account experience's Privacy Policy page. This governs the \"privacy_policy_url\" setting. | [optional] |
+| **account_experience_terms_of_service_url** | **String** | Holds the URL to the account experience's Terms of Service page. This governs the \"terms_of_service_url\" setting. | [optional] |
 | **account_experience_theme_variables_dark** | **String** | Holds the URL to the account experience's dark theme variables. This governs the \"theme_variables_dark\" setting. | [optional] |
 | **account_experience_theme_variables_light** | **String** | Holds the URL to the account experience's light theme variables. This governs the \"theme_variables_light\" setting. | [optional] |
 | **created_at** | **Time** | The Project's Revision Creation Date | [optional][readonly] |
@@ -23,6 +26,8 @@
 | **home_region** | **String** |  eu-central EUCentral asia-northeast AsiaNorthEast us-east USEast us-west USWest eu EU asia Asia us US global Global | [optional] |
 | **hydra_oauth2_allowed_top_level_claims** | **Array<String>** | A list of custom claims which are allowed to be added top level to the Access Token. They cannot override reserved claims.  This governs the \"oauth2.allowed_top_level_claims\" setting. | [optional] |
 | **hydra_oauth2_client_credentials_default_grant_allowed_scope** | **Boolean** | Automatically grant authorized OAuth2 Scope in OAuth2 Client Credentials Flow.  Each OAuth2 Client is allowed to request a predefined OAuth2 Scope (for example `read write`). If this option is enabled, the full scope is automatically granted when performing the OAuth2 Client Credentials flow.  If disabled, the OAuth2 Client has to request the scope in the OAuth2 request by providing the `scope` query parameter.  Setting this option to true is common if you need compatibility with MITREid.  This governs the \"oauth2.client_credentials.default_grant_allowed_scope\" setting. | [optional] |
+| **hydra_oauth2_device_authorization_token_polling_interval** | **String** | Configures how often a non-interactive device should poll the OAuth 2.0 Device Authorization Grant token endpoint. Purely informational — the value is reported to the device in the \"interval\" response field of the device authorization response. Hydra defaults to 5s when this is left empty.  This is an Enterprise feature.  This governs the \"oauth2.device_authorization.token_polling_interval\" setting. | [optional] |
+| **hydra_oauth2_device_authorization_user_code_entropy_preset** | **String** | Picks a preset for the OAuth 2.0 Device Authorization Grant user_code length and character set. \"high\" produces the longest codes (most resistant to brute force); \"low\" the shortest (easiest for the end user to read and enter). Leave empty to keep Hydra's default preset.  This is an Enterprise feature.  This governs the \"oauth2.device_authorization.user_code.entropy_preset\" setting. | [optional] |
 | **hydra_oauth2_exclude_not_before_claim** | **Boolean** | Set to true if you want to omit the `nbf` (not valid before) claim in the access token.  This governs the \"oauth2.exclude_not_before_claim\" setting. | [optional] |
 | **hydra_oauth2_grant_jwt_iat_optional** | **Boolean** | Configures if the issued at (`iat`) claim is required in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523).  If set to `false`, the `iat` claim is required. Set this value to `true` only after careful consideration.  This governs the \"oauth2.grant.jwt.iat_optional\" setting. | [optional] |
 | **hydra_oauth2_grant_jwt_jti_optional** | **Boolean** | Configures if the JSON Web Token ID (`jti`) claim is required in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523).  If set to `false`, the `jti` claim is required. Set this value to `true` only after careful consideration.  This governs the \"oauth2.grant.jwt.jti_optional\" setting. | [optional] |
@@ -51,10 +56,13 @@
 | **hydra_strategies_scope** | **String** | Defines how scopes are matched. For more details have a look at https://github.com/ory/fosite#scopes  This governs the \"strategies.scope\" setting. exact Oauth2ScopeStrategyExact wildcard Oauth2ScopeStrategyWildcard | [optional][default to 'wildcard'] |
 | **hydra_ttl_access_token** | **String** | This governs the \"ttl.access_token\" setting. | [optional][default to '30m'] |
 | **hydra_ttl_auth_code** | **String** | Configures how long refresh tokens are valid.  Set to -1 for refresh tokens to never expire. This is not recommended!  This governs the \"ttl.auth_code\" setting. | [optional][default to '720h'] |
+| **hydra_ttl_device_user_code** | **String** | Configures how long the device_code and user_code in the OAuth 2.0 Device Authorization Grant remain valid. Larger values mean more database storage; shorter values mean users have less time to complete the second-device verification. Hydra defaults to 10m when this is left empty.  This is an Enterprise feature.  This governs the \"ttl.device_user_code\" setting. | [optional] |
 | **hydra_ttl_id_token** | **String** | This governs the \"ttl.id_token\" setting. | [optional][default to '30m'] |
 | **hydra_ttl_login_consent_request** | **String** | Configures how long a user login and consent flow may take.  This governs the \"ttl.login_consent_request\" setting. | [optional][default to '30m'] |
 | **hydra_ttl_refresh_token** | **String** | Configures how long refresh tokens are valid.  Set to -1 for refresh tokens to never expire. This is not recommended!  This governs the \"ttl.refresh_token\" setting. | [optional][default to '720h'] |
 | **hydra_urls_consent** | **String** | Sets the OAuth2 Consent Endpoint URL of the OAuth2 User Login & Consent flow.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.consent\" setting. | [optional] |
+| **hydra_urls_device_success** | **String** | Sets the URL the user is redirected to after successfully completing the OAuth 2.0 Device Authorization Grant user verification step. Defaults to the Ory Account Experience fallback page if left empty.  This is an Enterprise feature.  This governs the \"urls.device.success\" setting. | [optional] |
+| **hydra_urls_device_verification** | **String** | Sets the URL of the user verification page for the OAuth 2.0 Device Authorization Grant (RFC 8628). End users are redirected to this URL to enter the user_code shown on their device. Defaults to the Ory Account Experience fallback page if left empty.  This is an Enterprise feature.  This governs the \"urls.device.verification\" setting. | [optional] |
 | **hydra_urls_error** | **String** | Sets the OAuth2 Error URL of the OAuth2 User Login & Consent flow.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.error\" setting. | [optional] |
 | **hydra_urls_login** | **String** | Sets the OAuth2 Login Endpoint URL of the OAuth2 User Login & Consent flow.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.login\" setting. | [optional] |
 | **hydra_urls_logout** | **String** | Sets the logout endpoint.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.logout\" setting. | [optional] |
@@ -64,6 +72,7 @@
 | **hydra_webfinger_jwks_broadcast_keys** | **Array<String>** | A list of JSON Web Keys that should be exposed at that endpoint. This is usually the public key for verifying OpenID Connect ID Tokens. However, you might want to add additional keys here as well.  This governs the \"webfinger.jwks.broadcast_keys\" setting. | [optional] |
 | **hydra_webfinger_oidc_discovery_auth_url** | **String** | Configures OpenID Connect Discovery and overwrites the OAuth2 Authorization URL.  This governs the \"webfinger.oidc_discovery.auth_url\" setting. | [optional] |
 | **hydra_webfinger_oidc_discovery_client_registration_url** | **String** | Configures OpenID Connect Discovery and overwrites the OpenID Connect Dynamic Client Registration Endpoint.  This governs the \"webfinger.oidc_discovery.client_registration_url\" setting. | [optional] |
+| **hydra_webfinger_oidc_discovery_device_authorization_url** | **String** | Override the OAuth 2.0 Device Authorization Endpoint URL that is advertised in the OpenID Connect discovery document (/.well-known/openid-configuration). Defaults to the project's public base URL + /oauth2/device/auth.  This is an Enterprise feature.  This governs the \"webfinger.oidc_discovery.device_authorization_url\" setting. | [optional] |
 | **hydra_webfinger_oidc_discovery_jwks_url** | **String** | Configures OpenID Connect Discovery and overwrites the JWKS URL.  This governs the \"webfinger.oidc_discovery.jwks_url\" setting. | [optional] |
 | **hydra_webfinger_oidc_discovery_supported_claims** | **Array<String>** | Configures OpenID Connect Discovery and overwrites a list of supported claims to be broadcasted. Claim \"sub\" is always included.  This governs the \"webfinger.oidc_discovery.supported_claims\" setting. | [optional] |
 | **hydra_webfinger_oidc_discovery_supported_scope** | **Array<String>** | Configures OpenID Connect Discovery and overwrites the scope OAuth 2.0 Clients may request. Scope `offline`, `offline_access`, and `openid` are always included.  This governs the \"webfinger.oidc_discovery.supported_scope\" setting. | [optional] |
@@ -214,8 +223,11 @@
 | **kratos_selfservice_methods_code_passwordless_enabled** | **Boolean** | Configures whether Ory Kratos Passwordless should use the Code Method  This governs the \"selfservice.methods.code.passwordless_enabled\" setting. | [optional] |
 | **kratos_selfservice_methods_code_passwordless_login_fallback_enabled** | **Boolean** | This setting allows the code method to always login a user with code if they have registered with another authentication method such as password or social sign in.  This governs the \"selfservice.methods.code.passwordless_login_fallback_enabled\" setting. | [optional] |
 | **kratos_selfservice_methods_deviceauthn_config_android_app_ids** | **Array<String>** | Configures the allow-list of Android app signing-certificate digests that a device key may be bound to.  This governs the \"selfservice.methods.deviceauthn.config.android_app_ids\" setting. | [optional] |
+| **kratos_selfservice_methods_deviceauthn_config_first_factor** | **Boolean** | Configures whether device authentication may be used as the sole first factor.  This governs the \"selfservice.methods.deviceauthn.config.first_factor\" setting. | [optional] |
 | **kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation** | **Boolean** | Configures whether Ory Kratos Device authentication accepts relaxed attestations for testing  Only allowed on development projects and forced off otherwise. Keys enrolled under relaxation are short-lived and refused once this is turned off.  This governs the \"selfservice.methods.deviceauthn.config.insecure_allow_relaxed_attestation\" setting. | [optional] |
 | **kratos_selfservice_methods_deviceauthn_config_ios_app_ids** | **Array<String>** | Configures the allow-list of Apple App IDs that a device key may be bound to.  This governs the \"selfservice.methods.deviceauthn.config.ios_app_ids\" setting. | [optional] |
+| **kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor** | **Boolean** | Configures whether an iOS biometric device key may be used as the sole first factor.  This governs the \"selfservice.methods.deviceauthn.config.ios_biometric_first_factor\" setting. | [optional] |
+| **kratos_selfservice_methods_deviceauthn_config_pin_max_attempts** | **Integer** | Configures the consecutive wrong-PIN limit before a device key is locked.  This governs the \"selfservice.methods.deviceauthn.config.pin_max_attempts\" setting. | [optional] |
 | **kratos_selfservice_methods_deviceauthn_enabled** | **Boolean** | Configures whether Ory Kratos Device authentication is enabled  This governs the \"selfservice.methods.deviceauthn.enabled\" setting. | [optional] |
 | **kratos_selfservice_methods_link_config_base_url** | **String** | Configures the Base URL which Recovery, Verification, and Login Links Point to  It is recommended to leave this value empty. It will be appropriately configured to the best matching domain (e.g. when using custom domains) automatically.  This governs the \"selfservice.methods.link.config.base_url\" setting. | [optional] |
 | **kratos_selfservice_methods_link_config_lifespan** | **String** | Configures the Ory Kratos Link Method's lifespan  This governs the \"selfservice.methods.link.config.lifespan\" setting. | [optional] |
@@ -288,6 +300,7 @@
 require 'ory-client'
 
 instance = OryClient::CreateProjectNormalizedPayload.new(
+  account_experience_contact_url: null,
   account_experience_custom_translations: null,
   account_experience_default_locale: null,
   account_experience_enabled_locales: null,
@@ -298,6 +311,8 @@ instance = OryClient::CreateProjectNormalizedPayload.new(
   account_experience_locale_behavior: null,
   account_experience_logo_dark: null,
   account_experience_logo_light: null,
+  account_experience_privacy_policy_url: null,
+  account_experience_terms_of_service_url: null,
   account_experience_theme_variables_dark: null,
   account_experience_theme_variables_light: null,
   created_at: null,
@@ -307,6 +322,8 @@ instance = OryClient::CreateProjectNormalizedPayload.new(
   home_region: null,
   hydra_oauth2_allowed_top_level_claims: null,
   hydra_oauth2_client_credentials_default_grant_allowed_scope: null,
+  hydra_oauth2_device_authorization_token_polling_interval: 15s,
+  hydra_oauth2_device_authorization_user_code_entropy_preset: null,
   hydra_oauth2_exclude_not_before_claim: null,
   hydra_oauth2_grant_jwt_iat_optional: null,
   hydra_oauth2_grant_jwt_jti_optional: null,
@@ -335,10 +352,13 @@ instance = OryClient::CreateProjectNormalizedPayload.new(
   hydra_strategies_scope: null,
   hydra_ttl_access_token: 1h,
   hydra_ttl_auth_code: 30m,
+  hydra_ttl_device_user_code: 30m,
   hydra_ttl_id_token: 1h,
   hydra_ttl_login_consent_request: 1h,
   hydra_ttl_refresh_token: 30m,
   hydra_urls_consent: null,
+  hydra_urls_device_success: null,
+  hydra_urls_device_verification: null,
   hydra_urls_error: null,
   hydra_urls_login: null,
   hydra_urls_logout: null,
@@ -348,6 +368,7 @@ instance = OryClient::CreateProjectNormalizedPayload.new(
   hydra_webfinger_jwks_broadcast_keys: null,
   hydra_webfinger_oidc_discovery_auth_url: null,
   hydra_webfinger_oidc_discovery_client_registration_url: null,
+  hydra_webfinger_oidc_discovery_device_authorization_url: null,
   hydra_webfinger_oidc_discovery_jwks_url: null,
   hydra_webfinger_oidc_discovery_supported_claims: null,
   hydra_webfinger_oidc_discovery_supported_scope: null,
@@ -498,8 +519,11 @@ instance = OryClient::CreateProjectNormalizedPayload.new(
   kratos_selfservice_methods_code_passwordless_enabled: null,
   kratos_selfservice_methods_code_passwordless_login_fallback_enabled: null,
   kratos_selfservice_methods_deviceauthn_config_android_app_ids: null,
+  kratos_selfservice_methods_deviceauthn_config_first_factor: null,
   kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation: null,
   kratos_selfservice_methods_deviceauthn_config_ios_app_ids: null,
+  kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor: null,
+  kratos_selfservice_methods_deviceauthn_config_pin_max_attempts: null,
   kratos_selfservice_methods_deviceauthn_enabled: null,
   kratos_selfservice_methods_link_config_base_url: null,
   kratos_selfservice_methods_link_config_lifespan: null,

data/docs/DeviceAuthnKey.md

@@ -9,9 +9,11 @@
 | **created_at** | **Time** | CreatedAt is the timestamp of when the key was created. Only used for troubleshooting/UI. | [optional] |
 | **device_name** | **String** | DeviceName is a human readable name for the device, helping the user to distinguish it from others. | [optional] |
 | **device_type** | **String** |  | [optional] |
+| **pin** | [**PINConfig**](PINConfig.md) |  | [optional] |
 | **public_key** | **Array<Integer>** | PublicKey is the device's public key (EC P-256 in v1), used to verify signatures. It is stored in PKIX, ASN.1 DER form (the SubjectPublicKeyInfo encoding produced by x509.MarshalPKIXPublicKey). The private key resides inside the device and does not exist on the server. | [optional] |
 | **relaxed_attestation_expires_at** | **Time** | RelaxedAttestationExpiresAt is set only when the key's attestation chain validated because relaxed attestation was allowed (software roots, expired certs, software security level) rather than under strict rules. Such keys are second-class: they are refused at login after this time, or immediately if relaxed attestation is turned off. It is nil for hardware-attested keys that pass strict validation. | [optional] |
 | **state** | **String** |  | [optional] |
+| **user_verification** | [**UserVerification**](UserVerification.md) |  | [optional] |
 | **version** | **Integer** | v1 uses SHA256 + EC256. v2 (in the future) may use ML-DSA which is post-quantum resistant. This requires Android/iOS support so we have to wait. We intentionally avoid storing the cryptographic algorithm here a la JWT/TLS to avoid security issues and algorithm negotiation. | [optional] |
 
 ## Example
@@ -25,9 +27,11 @@ instance = OryClient::DeviceAuthnKey.new(
   created_at: null,
   device_name: null,
   device_type: null,
+  pin: null,
   public_key: null,
   relaxed_attestation_expires_at: null,
   state: null,
+  user_verification: null,
   version: null
 )
 ```

data/docs/ElementsConfiguration.md

@@ -4,6 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **contact_url** | **String** | The URL to the project's Contact page. | [optional] |
 | **default_redirect_url** | **String** | The default redirect URL. |  |
 | **error_ui_url** | **String** | The URL for the error UI. |  |
 | **hide_ory_branding** | **Boolean** | Whether to hide the Ory branding badge. |  |
@@ -12,11 +13,13 @@
 | **logo_dark_url** | **String** | The URL for the dark logo. | [optional] |
 | **logo_light_url** | **String** | The URL for the light logo on the auth card. | [optional] |
 | **name** | **String** | The name of the project displayed on the auth card. |  |
+| **privacy_policy_url** | **String** | The URL to the project's Privacy Policy page. | [optional] |
 | **recovery_enabled** | **Boolean** | Whether recovery is enabled. |  |
 | **recovery_ui_url** | **String** | The URL for the recovery UI. |  |
 | **registration_enabled** | **Boolean** | Whether registration is enabled. |  |
 | **registration_ui_url** | **String** | The URL for the registration UI. |  |
 | **settings_ui_url** | **String** | The URL for the settings UI. |  |
+| **terms_of_service_url** | **String** | The URL to the project's Terms of Service page. | [optional] |
 | **verification_enabled** | **Boolean** | Whether verification is enabled. |  |
 | **verification_ui_url** | **String** | The URL for the verification UI. |  |
 
@@ -26,6 +29,7 @@
 require 'ory-client'
 
 instance = OryClient::ElementsConfiguration.new(
+  contact_url: null,
   default_redirect_url: null,
   error_ui_url: null,
   hide_ory_branding: null,
@@ -34,11 +38,13 @@ instance = OryClient::ElementsConfiguration.new(
   logo_dark_url: null,
   logo_light_url: null,
   name: null,
+  privacy_policy_url: null,
   recovery_enabled: null,
   recovery_ui_url: null,
   registration_enabled: null,
   registration_ui_url: null,
   settings_ui_url: null,
+  terms_of_service_url: null,
   verification_enabled: null,
   verification_ui_url: null
 )

data/docs/Message.md

@@ -13,7 +13,7 @@
 | **send_count** | **Integer** |  |  |
 | **status** | [**CourierMessageStatus**](CourierMessageStatus.md) |  |  |
 | **subject** | **String** |  |  |
-| **template_type** | **String** |  recovery_invalid TypeRecoveryInvalid recovery_valid TypeRecoveryValid recovery_code_invalid TypeRecoveryCodeInvalid recovery_code_valid TypeRecoveryCodeValid verification_invalid TypeVerificationInvalid verification_valid TypeVerificationValid verification_code_invalid TypeVerificationCodeInvalid verification_code_valid TypeVerificationCodeValid stub TypeTestStub login_code_valid TypeLoginCodeValid registration_code_valid TypeRegistrationCodeValid verifiable_address_changed TypeVerifiableAddressChanged |  |
+| **template_type** | **String** |  recovery_invalid TypeRecoveryInvalid recovery_valid TypeRecoveryValid recovery_code_invalid TypeRecoveryCodeInvalid recovery_code_valid TypeRecoveryCodeValid verification_invalid TypeVerificationInvalid verification_valid TypeVerificationValid verification_code_invalid TypeVerificationCodeInvalid verification_code_valid TypeVerificationCodeValid stub TypeTestStub login_code_valid TypeLoginCodeValid registration_code_valid TypeRegistrationCodeValid verifiable_address_changed TypeVerifiableAddressChanged authenticator_key_added TypeAuthenticatorKeyAdded |  |
 | **type** | [**CourierMessageType**](CourierMessageType.md) |  |  |
 | **updated_at** | **Time** | UpdatedAt is a helper struct field for gobuffalo.pop. |  |
 

data/docs/NormalizedProjectRevision.md

@@ -4,6 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **account_experience_contact_url** | **String** | Holds the URL to the account experience's Contact page. This governs the \"contact_url\" setting. | [optional] |
 | **account_experience_custom_translations** | [**Array<RevisionAccountExperienceCustomTranslation>**](RevisionAccountExperienceCustomTranslation.md) | The Account Experience's Custom Translations  Contains all Custom Translations for this project. | [optional] |
 | **account_experience_default_locale** | **String** | Holds the default locale for the account experience. This governs the \"default_locale\" setting. | [optional] |
 | **account_experience_enabled_locales** | **Array<String>** | The Account Experience's Enabled Locales  This governs the locales that are available in the account experience. This governs the \"enabled_locales\" setting. | [optional] |
@@ -14,6 +15,8 @@
 | **account_experience_locale_behavior** | **String** | Holds the URL to the account experience's language behavior.  Can be one of: `respect_accept_language`: Respect the `Accept-Language` header. `force_default`: Force the default language. This governs the \"locale_behavior\" setting. | [optional] |
 | **account_experience_logo_dark** | **String** | Holds the URL to the account experience's dark theme logo (currently unused). This governs the \"logo_dark\" setting. | [optional] |
 | **account_experience_logo_light** | **String** | Holds the URL to the account experience's logo. This governs the \"logo_light\" setting. | [optional] |
+| **account_experience_privacy_policy_url** | **String** | Holds the URL to the account experience's Privacy Policy page. This governs the \"privacy_policy_url\" setting. | [optional] |
+| **account_experience_terms_of_service_url** | **String** | Holds the URL to the account experience's Terms of Service page. This governs the \"terms_of_service_url\" setting. | [optional] |
 | **account_experience_theme_variables_dark** | **String** | Holds the URL to the account experience's dark theme variables. This governs the \"theme_variables_dark\" setting. | [optional] |
 | **account_experience_theme_variables_light** | **String** | Holds the URL to the account experience's light theme variables. This governs the \"theme_variables_light\" setting. | [optional] |
 | **created_at** | **Time** | The Project's Revision Creation Date | [optional][readonly] |
@@ -21,6 +24,8 @@
 | **enable_ax_v2** | **Boolean** | Whether the new account experience is enabled and reachable. This governs the \"enable_ax_v2\" setting. | [optional] |
 | **hydra_oauth2_allowed_top_level_claims** | **Array<String>** | A list of custom claims which are allowed to be added top level to the Access Token. They cannot override reserved claims.  This governs the \"oauth2.allowed_top_level_claims\" setting. | [optional] |
 | **hydra_oauth2_client_credentials_default_grant_allowed_scope** | **Boolean** | Automatically grant authorized OAuth2 Scope in OAuth2 Client Credentials Flow.  Each OAuth2 Client is allowed to request a predefined OAuth2 Scope (for example `read write`). If this option is enabled, the full scope is automatically granted when performing the OAuth2 Client Credentials flow.  If disabled, the OAuth2 Client has to request the scope in the OAuth2 request by providing the `scope` query parameter.  Setting this option to true is common if you need compatibility with MITREid.  This governs the \"oauth2.client_credentials.default_grant_allowed_scope\" setting. | [optional] |
+| **hydra_oauth2_device_authorization_token_polling_interval** | **String** | Configures how often a non-interactive device should poll the OAuth 2.0 Device Authorization Grant token endpoint. Purely informational — the value is reported to the device in the \"interval\" response field of the device authorization response. Hydra defaults to 5s when this is left empty.  This is an Enterprise feature.  This governs the \"oauth2.device_authorization.token_polling_interval\" setting. | [optional] |
+| **hydra_oauth2_device_authorization_user_code_entropy_preset** | **String** | Picks a preset for the OAuth 2.0 Device Authorization Grant user_code length and character set. \"high\" produces the longest codes (most resistant to brute force); \"low\" the shortest (easiest for the end user to read and enter). Leave empty to keep Hydra's default preset.  This is an Enterprise feature.  This governs the \"oauth2.device_authorization.user_code.entropy_preset\" setting. | [optional] |
 | **hydra_oauth2_exclude_not_before_claim** | **Boolean** | Set to true if you want to omit the `nbf` (not valid before) claim in the access token.  This governs the \"oauth2.exclude_not_before_claim\" setting. | [optional] |
 | **hydra_oauth2_grant_jwt_iat_optional** | **Boolean** | Configures if the issued at (`iat`) claim is required in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523).  If set to `false`, the `iat` claim is required. Set this value to `true` only after careful consideration.  This governs the \"oauth2.grant.jwt.iat_optional\" setting. | [optional] |
 | **hydra_oauth2_grant_jwt_jti_optional** | **Boolean** | Configures if the JSON Web Token ID (`jti`) claim is required in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523).  If set to `false`, the `jti` claim is required. Set this value to `true` only after careful consideration.  This governs the \"oauth2.grant.jwt.jti_optional\" setting. | [optional] |
@@ -49,10 +54,13 @@
 | **hydra_strategies_scope** | **String** | Defines how scopes are matched. For more details have a look at https://github.com/ory/fosite#scopes  This governs the \"strategies.scope\" setting. exact Oauth2ScopeStrategyExact wildcard Oauth2ScopeStrategyWildcard | [optional][default to 'wildcard'] |
 | **hydra_ttl_access_token** | **String** | This governs the \"ttl.access_token\" setting. | [optional][default to '30m'] |
 | **hydra_ttl_auth_code** | **String** | Configures how long refresh tokens are valid.  Set to -1 for refresh tokens to never expire. This is not recommended!  This governs the \"ttl.auth_code\" setting. | [optional][default to '720h'] |
+| **hydra_ttl_device_user_code** | **String** | Configures how long the device_code and user_code in the OAuth 2.0 Device Authorization Grant remain valid. Larger values mean more database storage; shorter values mean users have less time to complete the second-device verification. Hydra defaults to 10m when this is left empty.  This is an Enterprise feature.  This governs the \"ttl.device_user_code\" setting. | [optional] |
 | **hydra_ttl_id_token** | **String** | This governs the \"ttl.id_token\" setting. | [optional][default to '30m'] |
 | **hydra_ttl_login_consent_request** | **String** | Configures how long a user login and consent flow may take.  This governs the \"ttl.login_consent_request\" setting. | [optional][default to '30m'] |
 | **hydra_ttl_refresh_token** | **String** | Configures how long refresh tokens are valid.  Set to -1 for refresh tokens to never expire. This is not recommended!  This governs the \"ttl.refresh_token\" setting. | [optional][default to '720h'] |
 | **hydra_urls_consent** | **String** | Sets the OAuth2 Consent Endpoint URL of the OAuth2 User Login & Consent flow.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.consent\" setting. | [optional] |
+| **hydra_urls_device_success** | **String** | Sets the URL the user is redirected to after successfully completing the OAuth 2.0 Device Authorization Grant user verification step. Defaults to the Ory Account Experience fallback page if left empty.  This is an Enterprise feature.  This governs the \"urls.device.success\" setting. | [optional] |
+| **hydra_urls_device_verification** | **String** | Sets the URL of the user verification page for the OAuth 2.0 Device Authorization Grant (RFC 8628). End users are redirected to this URL to enter the user_code shown on their device. Defaults to the Ory Account Experience fallback page if left empty.  This is an Enterprise feature.  This governs the \"urls.device.verification\" setting. | [optional] |
 | **hydra_urls_error** | **String** | Sets the OAuth2 Error URL of the OAuth2 User Login & Consent flow.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.error\" setting. | [optional] |
 | **hydra_urls_login** | **String** | Sets the OAuth2 Login Endpoint URL of the OAuth2 User Login & Consent flow.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.login\" setting. | [optional] |
 | **hydra_urls_logout** | **String** | Sets the logout endpoint.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.logout\" setting. | [optional] |
@@ -62,6 +70,7 @@
 | **hydra_webfinger_jwks_broadcast_keys** | **Array<String>** | A list of JSON Web Keys that should be exposed at that endpoint. This is usually the public key for verifying OpenID Connect ID Tokens. However, you might want to add additional keys here as well.  This governs the \"webfinger.jwks.broadcast_keys\" setting. | [optional] |
 | **hydra_webfinger_oidc_discovery_auth_url** | **String** | Configures OpenID Connect Discovery and overwrites the OAuth2 Authorization URL.  This governs the \"webfinger.oidc_discovery.auth_url\" setting. | [optional] |
 | **hydra_webfinger_oidc_discovery_client_registration_url** | **String** | Configures OpenID Connect Discovery and overwrites the OpenID Connect Dynamic Client Registration Endpoint.  This governs the \"webfinger.oidc_discovery.client_registration_url\" setting. | [optional] |
+| **hydra_webfinger_oidc_discovery_device_authorization_url** | **String** | Override the OAuth 2.0 Device Authorization Endpoint URL that is advertised in the OpenID Connect discovery document (/.well-known/openid-configuration). Defaults to the project's public base URL + /oauth2/device/auth.  This is an Enterprise feature.  This governs the \"webfinger.oidc_discovery.device_authorization_url\" setting. | [optional] |
 | **hydra_webfinger_oidc_discovery_jwks_url** | **String** | Configures OpenID Connect Discovery and overwrites the JWKS URL.  This governs the \"webfinger.oidc_discovery.jwks_url\" setting. | [optional] |
 | **hydra_webfinger_oidc_discovery_supported_claims** | **Array<String>** | Configures OpenID Connect Discovery and overwrites a list of supported claims to be broadcasted. Claim \"sub\" is always included.  This governs the \"webfinger.oidc_discovery.supported_claims\" setting. | [optional] |
 | **hydra_webfinger_oidc_discovery_supported_scope** | **Array<String>** | Configures OpenID Connect Discovery and overwrites the scope OAuth 2.0 Clients may request. Scope `offline`, `offline_access`, and `openid` are always included.  This governs the \"webfinger.oidc_discovery.supported_scope\" setting. | [optional] |
@@ -212,8 +221,11 @@
 | **kratos_selfservice_methods_code_passwordless_enabled** | **Boolean** | Configures whether Ory Kratos Passwordless should use the Code Method  This governs the \"selfservice.methods.code.passwordless_enabled\" setting. | [optional] |
 | **kratos_selfservice_methods_code_passwordless_login_fallback_enabled** | **Boolean** | This setting allows the code method to always login a user with code if they have registered with another authentication method such as password or social sign in.  This governs the \"selfservice.methods.code.passwordless_login_fallback_enabled\" setting. | [optional] |
 | **kratos_selfservice_methods_deviceauthn_config_android_app_ids** | **Array<String>** | Configures the allow-list of Android app signing-certificate digests that a device key may be bound to.  This governs the \"selfservice.methods.deviceauthn.config.android_app_ids\" setting. | [optional] |
+| **kratos_selfservice_methods_deviceauthn_config_first_factor** | **Boolean** | Configures whether device authentication may be used as the sole first factor.  This governs the \"selfservice.methods.deviceauthn.config.first_factor\" setting. | [optional] |
 | **kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation** | **Boolean** | Configures whether Ory Kratos Device authentication accepts relaxed attestations for testing  Only allowed on development projects and forced off otherwise. Keys enrolled under relaxation are short-lived and refused once this is turned off.  This governs the \"selfservice.methods.deviceauthn.config.insecure_allow_relaxed_attestation\" setting. | [optional] |
 | **kratos_selfservice_methods_deviceauthn_config_ios_app_ids** | **Array<String>** | Configures the allow-list of Apple App IDs that a device key may be bound to.  This governs the \"selfservice.methods.deviceauthn.config.ios_app_ids\" setting. | [optional] |
+| **kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor** | **Boolean** | Configures whether an iOS biometric device key may be used as the sole first factor.  This governs the \"selfservice.methods.deviceauthn.config.ios_biometric_first_factor\" setting. | [optional] |
+| **kratos_selfservice_methods_deviceauthn_config_pin_max_attempts** | **Integer** | Configures the consecutive wrong-PIN limit before a device key is locked.  This governs the \"selfservice.methods.deviceauthn.config.pin_max_attempts\" setting. | [optional] |
 | **kratos_selfservice_methods_deviceauthn_enabled** | **Boolean** | Configures whether Ory Kratos Device authentication is enabled  This governs the \"selfservice.methods.deviceauthn.enabled\" setting. | [optional] |
 | **kratos_selfservice_methods_link_config_base_url** | **String** | Configures the Base URL which Recovery, Verification, and Login Links Point to  It is recommended to leave this value empty. It will be appropriately configured to the best matching domain (e.g. when using custom domains) automatically.  This governs the \"selfservice.methods.link.config.base_url\" setting. | [optional] |
 | **kratos_selfservice_methods_link_config_lifespan** | **String** | Configures the Ory Kratos Link Method's lifespan  This governs the \"selfservice.methods.link.config.lifespan\" setting. | [optional] |
@@ -285,6 +297,7 @@
 require 'ory-client'
 
 instance = OryClient::NormalizedProjectRevision.new(
+  account_experience_contact_url: null,
   account_experience_custom_translations: null,
   account_experience_default_locale: null,
   account_experience_enabled_locales: null,
@@ -295,6 +308,8 @@ instance = OryClient::NormalizedProjectRevision.new(
   account_experience_locale_behavior: null,
   account_experience_logo_dark: null,
   account_experience_logo_light: null,
+  account_experience_privacy_policy_url: null,
+  account_experience_terms_of_service_url: null,
   account_experience_theme_variables_dark: null,
   account_experience_theme_variables_light: null,
   created_at: null,
@@ -302,6 +317,8 @@ instance = OryClient::NormalizedProjectRevision.new(
   enable_ax_v2: null,
   hydra_oauth2_allowed_top_level_claims: null,
   hydra_oauth2_client_credentials_default_grant_allowed_scope: null,
+  hydra_oauth2_device_authorization_token_polling_interval: 15s,
+  hydra_oauth2_device_authorization_user_code_entropy_preset: null,
   hydra_oauth2_exclude_not_before_claim: null,
   hydra_oauth2_grant_jwt_iat_optional: null,
   hydra_oauth2_grant_jwt_jti_optional: null,
@@ -330,10 +347,13 @@ instance = OryClient::NormalizedProjectRevision.new(
   hydra_strategies_scope: null,
   hydra_ttl_access_token: 1h,
   hydra_ttl_auth_code: 30m,
+  hydra_ttl_device_user_code: 30m,
   hydra_ttl_id_token: 1h,
   hydra_ttl_login_consent_request: 1h,
   hydra_ttl_refresh_token: 30m,
   hydra_urls_consent: null,
+  hydra_urls_device_success: null,
+  hydra_urls_device_verification: null,
   hydra_urls_error: null,
   hydra_urls_login: null,
   hydra_urls_logout: null,
@@ -343,6 +363,7 @@ instance = OryClient::NormalizedProjectRevision.new(
   hydra_webfinger_jwks_broadcast_keys: null,
   hydra_webfinger_oidc_discovery_auth_url: null,
   hydra_webfinger_oidc_discovery_client_registration_url: null,
+  hydra_webfinger_oidc_discovery_device_authorization_url: null,
   hydra_webfinger_oidc_discovery_jwks_url: null,
   hydra_webfinger_oidc_discovery_supported_claims: null,
   hydra_webfinger_oidc_discovery_supported_scope: null,
@@ -493,8 +514,11 @@ instance = OryClient::NormalizedProjectRevision.new(
   kratos_selfservice_methods_code_passwordless_enabled: null,
   kratos_selfservice_methods_code_passwordless_login_fallback_enabled: null,
   kratos_selfservice_methods_deviceauthn_config_android_app_ids: null,
+  kratos_selfservice_methods_deviceauthn_config_first_factor: null,
   kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation: null,
   kratos_selfservice_methods_deviceauthn_config_ios_app_ids: null,
+  kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor: null,
+  kratos_selfservice_methods_deviceauthn_config_pin_max_attempts: null,
   kratos_selfservice_methods_deviceauthn_enabled: null,
   kratos_selfservice_methods_link_config_base_url: null,
   kratos_selfservice_methods_link_config_lifespan: null,

data/docs/PINConfig.md

@@ -0,0 +1,24 @@
+# OryClient::PINConfig
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **created_at** | **Time** | CreatedAt is when the pin_secret was first issued. | [optional] |
+| **failed_attempts** | **Integer** | FailedAttempts counts consecutive wrong-PIN attempts; the key locks when it reaches the configured maximum. | [optional] |
+| **pin_secret** | **String** | PINSecret is the at-rest pin_secret ciphertext. Server-internal: never logged or transmitted. Empty once the key locks. | [optional] |
+| **rotated_at** | **Time** | RotatedAt is when the pin_secret was last rotated; the zero value means never rotated. omitzero (not omitempty) drops the zero timestamp from the JSON, since omitempty never treats a time.Time value as empty. | [optional] |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::PINConfig.new(
+  created_at: null,
+  failed_attempts: null,
+  pin_secret: null,
+  rotated_at: null
+)
+```
+

data/docs/ProjectApi.md

@@ -268,7 +268,7 @@ end
 api_instance = OryClient::ProjectApi.new
 project = 'project_example' # String | The Project ID or Project slug
 opts = {
-  create_project_api_key_request: OryClient::CreateProjectApiKeyRequest.new({name: 'name_example'}) # CreateProjectApiKeyRequest | 
+  create_project_api_key_body: OryClient::CreateProjectApiKeyBody.new({name: 'name_example'}) # CreateProjectApiKeyBody | 
 }
 
 begin
@@ -303,7 +303,7 @@ end
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **project** | **String** | The Project ID or Project slug |  |
-| **create_project_api_key_request** | [**CreateProjectApiKeyRequest**](CreateProjectApiKeyRequest.md) |  | [optional] |
+| **create_project_api_key_body** | [**CreateProjectApiKeyBody**](CreateProjectApiKeyBody.md) |  | [optional] |
 
 ### Return type