ory-client 1.22.66 → 1.22.79

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '073188bed284022027ce35514399c73cb288b760c70f8c5e7343aa2f154e7df3'
-  data.tar.gz: 016dc4bc8dc9d6e14b3c3fa2fde262d9b5b1dbc18c9168ad01af56796480e216
+  metadata.gz: 746d8dfc94af81f0d20b8a8281d8121ab6e3f448e79befea4f7f69fd1b45230c
+  data.tar.gz: 358a3e22822de057958e97219930ed8a2e3a498de1eea91c73918f0c76766a67
 SHA512:
-  metadata.gz: 38030f8842ecca79d23ca325d04413fa49d7507f7af6867ab27d02d0321404e69c6149884cc1a2551e894d45f18f3bb934afdf2f3ebf1df14c2090dde29ebf45
-  data.tar.gz: 0c4fe73d7fc7979b0915ba51f38d022c4bd40efc27352ba2fa9b75ea708baf9e467f6febe2e46e3afda6b60ca875783b9191a0be8e8b5e7722253eba03e05792
+  metadata.gz: 9a2dc1f049cab8cfc3d0eff99c12c4cc141cf47da4f7f376d770f25ad8bdd967d4d8788d1c75bf559f265fc0a737f969a2cf6552a52d487ea1eacc11a30cda71
+  data.tar.gz: da0c4b1798fae15fa31c59f5b98d6ef4a5c3484539718a1d9d70047c3fc70b7e06bd55fdb6dc6d3edd40c0d8d56fab63ceb99a42c099e1e4a4d81ba229bb0d17

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    ory-client (1.22.66)
+    ory-client (1.22.79)
       typhoeus (~> 1.0, >= 1.0.1)
 
 GEM
@@ -16,7 +16,7 @@ GEM
       ffi (>= 1.15.0)
       logger
     ffi (1.17.4-x86_64-linux-gnu)
-    io-console (0.8.2)
+    io-console (0.9.4)
     jaro_winkler (1.5.6)
     logger (1.7.0)
     method_source (1.1.0)
@@ -36,7 +36,7 @@ GEM
     racc (1.8.1)
     rainbow (3.1.1)
     rake (13.0.6)
-    reline (0.6.3)
+    reline (0.7.0)
       io-console (~> 0.5)
     rspec (3.13.2)
       rspec-core (~> 3.13.0)

data/README.md

@@ -26,8 +26,8 @@ This document describes the APIs available in the Ory Network. The APIs are avai
 
 This SDK is automatically generated by the [OpenAPI Generator](https://openapi-generator.tech) project:
 
-- API version: v1.22.66
-- Package version: v1.22.66
+- API version: v1.22.79
+- Package version: v1.22.79
 - Generator version: 7.17.0
 - Build package: org.openapitools.codegen.languages.RubyClientCodegen
 
@@ -44,16 +44,16 @@ gem build ory-client.gemspec
 Then either install the gem locally:
 
 ```shell
-gem install ./ory-client-v1.22.66.gem
+gem install ./ory-client-v1.22.79.gem
 ```
 
-(for development, run `gem install --dev ./ory-client-v1.22.66.gem` to install the development dependencies)
+(for development, run `gem install --dev ./ory-client-v1.22.79.gem` to install the development dependencies)
 
 or publish the gem to a gem hosting service, e.g. [RubyGems](https://rubygems.org/).
 
 Finally add this to the Gemfile:
 
-    gem 'ory-client', '~> v1.22.66'
+    gem 'ory-client', '~> v1.22.79'
 
 ### Install from Git
 
@@ -136,6 +136,7 @@ Class | Method | HTTP request | Description
 *OryClient::FrontendApi* | [**create_browser_settings_flow**](docs/FrontendApi.md#create_browser_settings_flow) | **GET** /self-service/settings/browser | Create Settings Flow for Browsers
 *OryClient::FrontendApi* | [**create_browser_verification_flow**](docs/FrontendApi.md#create_browser_verification_flow) | **GET** /self-service/verification/browser | Create Verification Flow for Browser Clients
 *OryClient::FrontendApi* | [**create_fedcm_flow**](docs/FrontendApi.md#create_fedcm_flow) | **GET** /self-service/fed-cm/parameters | Get FedCM Parameters
+*OryClient::FrontendApi* | [**create_id_p_initiated_saml_browser_login_flow**](docs/FrontendApi.md#create_id_p_initiated_saml_browser_login_flow) | **GET** /self-service/methods/saml/idp-initiated/{provider} | Complete IdP-Initiated SAML Login for Browsers
 *OryClient::FrontendApi* | [**create_native_login_flow**](docs/FrontendApi.md#create_native_login_flow) | **GET** /self-service/login/api | Create Login Flow for Native Apps
 *OryClient::FrontendApi* | [**create_native_recovery_flow**](docs/FrontendApi.md#create_native_recovery_flow) | **GET** /self-service/recovery/api | Create Recovery Flow for Native Apps
 *OryClient::FrontendApi* | [**create_native_registration_flow**](docs/FrontendApi.md#create_native_registration_flow) | **GET** /self-service/registration/api | Create Registration Flow for Native Apps
@@ -149,12 +150,18 @@ Class | Method | HTTP request | Description
 *OryClient::FrontendApi* | [**get_login_flow**](docs/FrontendApi.md#get_login_flow) | **GET** /self-service/login/flows | Get Login Flow
 *OryClient::FrontendApi* | [**get_recovery_flow**](docs/FrontendApi.md#get_recovery_flow) | **GET** /self-service/recovery/flows | Get Recovery Flow
 *OryClient::FrontendApi* | [**get_registration_flow**](docs/FrontendApi.md#get_registration_flow) | **GET** /self-service/registration/flows | Get Registration Flow
+*OryClient::FrontendApi* | [**get_saml_metadata**](docs/FrontendApi.md#get_saml_metadata) | **GET** /self-service/methods/saml/metadata | Get SAML SP Metadata
+*OryClient::FrontendApi* | [**get_saml_provider_metadata**](docs/FrontendApi.md#get_saml_provider_metadata) | **GET** /self-service/methods/saml/metadata/{provider} | Get Per-Connection SAML SP Metadata
 *OryClient::FrontendApi* | [**get_settings_flow**](docs/FrontendApi.md#get_settings_flow) | **GET** /self-service/settings/flows | Get Settings Flow
 *OryClient::FrontendApi* | [**get_verification_flow**](docs/FrontendApi.md#get_verification_flow) | **GET** /self-service/verification/flows | Get Verification Flow
 *OryClient::FrontendApi* | [**get_web_authn_java_script**](docs/FrontendApi.md#get_web_authn_java_script) | **GET** /.well-known/ory/webauthn.js | Get WebAuthn JavaScript
+*OryClient::FrontendApi* | [**get_web_authn_related_origins**](docs/FrontendApi.md#get_web_authn_related_origins) | **GET** /.well-known/webauthn | Get WebAuthn Related Origins
 *OryClient::FrontendApi* | [**get_well_known_change_password**](docs/FrontendApi.md#get_well_known_change_password) | **GET** /.well-known/change-password | Change Password URL
+*OryClient::FrontendApi* | [**init_saml_login**](docs/FrontendApi.md#init_saml_login) | **GET** /self-service/methods/saml/init/{provider} | Initiate Native SAML Sign-In
+*OryClient::FrontendApi* | [**init_saml_login_request**](docs/FrontendApi.md#init_saml_login_request) | **POST** /self-service/methods/saml/init/{provider} | Initiate Native SAML Sign-In (Direct POST)
 *OryClient::FrontendApi* | [**list_my_sessions**](docs/FrontendApi.md#list_my_sessions) | **GET** /sessions | Get My Active Sessions
 *OryClient::FrontendApi* | [**perform_native_logout**](docs/FrontendApi.md#perform_native_logout) | **DELETE** /self-service/logout/api | Perform Logout for Native Apps
+*OryClient::FrontendApi* | [**submit_saml_assertion**](docs/FrontendApi.md#submit_saml_assertion) | **POST** /self-service/methods/saml/acs/{provider} | Native SAML Assertion Consumer Service (ACS)
 *OryClient::FrontendApi* | [**to_session**](docs/FrontendApi.md#to_session) | **GET** /sessions/whoami | Check Who the Current HTTP Session Belongs To
 *OryClient::FrontendApi* | [**update_fedcm_flow**](docs/FrontendApi.md#update_fedcm_flow) | **POST** /self-service/fed-cm/token | Submit a FedCM token
 *OryClient::FrontendApi* | [**update_login_flow**](docs/FrontendApi.md#update_login_flow) | **POST** /self-service/login | Submit a Login Flow
@@ -248,7 +255,7 @@ Class | Method | HTTP request | Description
 *OryClient::ProjectApi* | [**delete_project_api_key**](docs/ProjectApi.md#delete_project_api_key) | **DELETE** /projects/{project}/tokens/{token_id} | Delete project API key
 *OryClient::ProjectApi* | [**get_organization**](docs/ProjectApi.md#get_organization) | **GET** /projects/{project_id}/organizations/{organization_id} | Get Enterprise SSO Organization by ID
 *OryClient::ProjectApi* | [**get_organization_onboarding_portal_links**](docs/ProjectApi.md#get_organization_onboarding_portal_links) | **GET** /projects/{project_id}/organizations/{organization_id}/onboarding-portal-links | Get the organization onboarding portal links
-*OryClient::ProjectApi* | [**get_project**](docs/ProjectApi.md#get_project) | **GET** /projects/{project_id} | Get a Project
+*OryClient::ProjectApi* | [**get_project**](docs/ProjectApi.md#get_project) | **GET** /projects/{project_id} | Get an Ory Network Project Configuration
 *OryClient::ProjectApi* | [**get_project_members**](docs/ProjectApi.md#get_project_members) | **GET** /projects/{project}/members | Get all members associated with this project
 *OryClient::ProjectApi* | [**list_organizations**](docs/ProjectApi.md#list_organizations) | **GET** /projects/{project_id}/organizations | List all Enterprise SSO organizations
 *OryClient::ProjectApi* | [**list_project_api_keys**](docs/ProjectApi.md#list_project_api_keys) | **GET** /projects/{project}/tokens | List a project's API keys
@@ -260,6 +267,7 @@ Class | Method | HTTP request | Description
 *OryClient::ProjectApi* | [**set_project**](docs/ProjectApi.md#set_project) | **PUT** /projects/{project_id} | Update an Ory Network Project Configuration
 *OryClient::ProjectApi* | [**update_organization**](docs/ProjectApi.md#update_organization) | **PUT** /projects/{project_id}/organizations/{organization_id} | Update an Enterprise SSO Organization
 *OryClient::ProjectApi* | [**update_organization_onboarding_portal_link**](docs/ProjectApi.md#update_organization_onboarding_portal_link) | **POST** /projects/{project_id}/organizations/{organization_id}/onboarding-portal-links/{onboarding_portal_link_id} | Update organization onboarding portal link
+*OryClient::ProjectApi* | [**validate_opl**](docs/ProjectApi.md#validate_opl) | **POST** /projects/{project_id}/opl/validate | Validate an Ory Permission Language document
 *OryClient::RelationshipApi* | [**check_opl_syntax**](docs/RelationshipApi.md#check_opl_syntax) | **POST** /opl/syntax/check | Check the syntax of an OPL file
 *OryClient::RelationshipApi* | [**create_relationship**](docs/RelationshipApi.md#create_relationship) | **PUT** /admin/relation-tuples | Create a Relationship
 *OryClient::RelationshipApi* | [**delete_relationships**](docs/RelationshipApi.md#delete_relationships) | **DELETE** /admin/relation-tuples | Delete Relationships
@@ -286,6 +294,7 @@ Class | Method | HTTP request | Description
  - [OryClient::AccountExperienceColors](docs/AccountExperienceColors.md)
  - [OryClient::AccountExperienceConfiguration](docs/AccountExperienceConfiguration.md)
  - [OryClient::AddProjectToWorkspaceBody](docs/AddProjectToWorkspaceBody.md)
+ - [OryClient::AddWorkspaceOrganizationDomainBody](docs/AddWorkspaceOrganizationDomainBody.md)
  - [OryClient::AdminIdentityImportCredentialsLookupSecret](docs/AdminIdentityImportCredentialsLookupSecret.md)
  - [OryClient::AdminIdentityImportCredentialsLookupSecretConfig](docs/AdminIdentityImportCredentialsLookupSecretConfig.md)
  - [OryClient::AdminRevokeImportedApiKeyBody](docs/AdminRevokeImportedApiKeyBody.md)
@@ -293,6 +302,7 @@ Class | Method | HTTP request | Description
  - [OryClient::AdminRotateIssuedApiKeyBody](docs/AdminRotateIssuedApiKeyBody.md)
  - [OryClient::AdminUpdateImportedApiKeyRequest](docs/AdminUpdateImportedApiKeyRequest.md)
  - [OryClient::AdminUpdateIssuedApiKeyRequest](docs/AdminUpdateIssuedApiKeyRequest.md)
+ - [OryClient::AiAssistantSessionToken](docs/AiAssistantSessionToken.md)
  - [OryClient::Any](docs/Any.md)
  - [OryClient::Attribute](docs/Attribute.md)
  - [OryClient::AttributeFilter](docs/AttributeFilter.md)
@@ -349,6 +359,7 @@ Class | Method | HTTP request | Description
  - [OryClient::CreateVerifiableCredentialRequestBody](docs/CreateVerifiableCredentialRequestBody.md)
  - [OryClient::CreateWorkspaceApiKeyBody](docs/CreateWorkspaceApiKeyBody.md)
  - [OryClient::CreateWorkspaceBody](docs/CreateWorkspaceBody.md)
+ - [OryClient::CreateWorkspaceContactBody](docs/CreateWorkspaceContactBody.md)
  - [OryClient::CreateWorkspaceMemberInviteBody](docs/CreateWorkspaceMemberInviteBody.md)
  - [OryClient::CreateWorkspaceOrganizationBody](docs/CreateWorkspaceOrganizationBody.md)
  - [OryClient::CreateWorkspaceSubscriptionBody](docs/CreateWorkspaceSubscriptionBody.md)
@@ -368,6 +379,7 @@ Class | Method | HTTP request | Description
  - [OryClient::DeviceAuthorization](docs/DeviceAuthorization.md)
  - [OryClient::DeviceType](docs/DeviceType.md)
  - [OryClient::DeviceUserAuthRequest](docs/DeviceUserAuthRequest.md)
+ - [OryClient::DomainVerificationStatus](docs/DomainVerificationStatus.md)
  - [OryClient::ElementsConfiguration](docs/ElementsConfiguration.md)
  - [OryClient::EmailTemplateData](docs/EmailTemplateData.md)
  - [OryClient::EmailTemplateDataBody](docs/EmailTemplateDataBody.md)
@@ -378,6 +390,7 @@ Class | Method | HTTP request | Description
  - [OryClient::ErrorOAuth2](docs/ErrorOAuth2.md)
  - [OryClient::EventStream](docs/EventStream.md)
  - [OryClient::ExpandedPermissionTree](docs/ExpandedPermissionTree.md)
+ - [OryClient::FeatureFlagsCatalogEntry](docs/FeatureFlagsCatalogEntry.md)
  - [OryClient::FlowError](docs/FlowError.md)
  - [OryClient::GenericError](docs/GenericError.md)
  - [OryClient::GenericErrorContent](docs/GenericErrorContent.md)
@@ -461,6 +474,7 @@ Class | Method | HTTP request | Description
  - [OryClient::ListInvoicesResponse](docs/ListInvoicesResponse.md)
  - [OryClient::ListIssuedApiKeysResponse](docs/ListIssuedApiKeysResponse.md)
  - [OryClient::ListOrganizationsResponse](docs/ListOrganizationsResponse.md)
+ - [OryClient::ListWorkspaceContacts](docs/ListWorkspaceContacts.md)
  - [OryClient::ListWorkspaceProjects](docs/ListWorkspaceProjects.md)
  - [OryClient::ListWorkspaces](docs/ListWorkspaces.md)
  - [OryClient::LoginFlow](docs/LoginFlow.md)
@@ -504,6 +518,9 @@ Class | Method | HTTP request | Description
  - [OryClient::OnboardingPortalLink](docs/OnboardingPortalLink.md)
  - [OryClient::OnboardingPortalOrganization](docs/OnboardingPortalOrganization.md)
  - [OryClient::OnboardingPortalTestLoginFlow](docs/OnboardingPortalTestLoginFlow.md)
+ - [OryClient::OplParseError](docs/OplParseError.md)
+ - [OryClient::OplSourcePosition](docs/OplSourcePosition.md)
+ - [OryClient::OplValidateResult](docs/OplValidateResult.md)
  - [OryClient::Organization](docs/Organization.md)
  - [OryClient::OrganizationBody](docs/OrganizationBody.md)
  - [OryClient::OrganizationByHostname](docs/OrganizationByHostname.md)
@@ -511,10 +528,10 @@ Class | Method | HTTP request | Description
  - [OryClient::PINConfig](docs/PINConfig.md)
  - [OryClient::ParseError](docs/ParseError.md)
  - [OryClient::PatchIdentitiesBody](docs/PatchIdentitiesBody.md)
+ - [OryClient::PatchWorkspaceContactBody](docs/PatchWorkspaceContactBody.md)
  - [OryClient::PatchWorkspaceMemberBody](docs/PatchWorkspaceMemberBody.md)
  - [OryClient::PerformNativeLogoutBody](docs/PerformNativeLogoutBody.md)
  - [OryClient::PermissionsOnWorkspace](docs/PermissionsOnWorkspace.md)
- - [OryClient::Plan](docs/Plan.md)
  - [OryClient::PlanDetails](docs/PlanDetails.md)
  - [OryClient::PostCheckPermissionBody](docs/PostCheckPermissionBody.md)
  - [OryClient::PostCheckPermissionOrErrorBody](docs/PostCheckPermissionOrErrorBody.md)
@@ -554,6 +571,7 @@ Class | Method | HTTP request | Description
  - [OryClient::RevisionAccountExperienceCustomTranslation](docs/RevisionAccountExperienceCustomTranslation.md)
  - [OryClient::RevocationReason](docs/RevocationReason.md)
  - [OryClient::RotateIssuedApiKeyResponse](docs/RotateIssuedApiKeyResponse.md)
+ - [OryClient::RotateOAuth2ClientSecretBody](docs/RotateOAuth2ClientSecretBody.md)
  - [OryClient::RotateTalosKeyBody](docs/RotateTalosKeyBody.md)
  - [OryClient::SchemaPatch](docs/SchemaPatch.md)
  - [OryClient::SelfRevokeApiKeyRequest](docs/SelfRevokeApiKeyRequest.md)
@@ -660,8 +678,12 @@ Class | Method | HTTP request | Description
  - [OryClient::VerifyUserCodeRequest](docs/VerifyUserCodeRequest.md)
  - [OryClient::Version](docs/Version.md)
  - [OryClient::Warning](docs/Warning.md)
+ - [OryClient::WebAuthnRelatedOrigins](docs/WebAuthnRelatedOrigins.md)
  - [OryClient::Workspace](docs/Workspace.md)
  - [OryClient::WorkspaceApiKey](docs/WorkspaceApiKey.md)
+ - [OryClient::WorkspaceContact](docs/WorkspaceContact.md)
+ - [OryClient::WorkspaceContactRecipient](docs/WorkspaceContactRecipient.md)
+ - [OryClient::WorkspaceContactRecipientInput](docs/WorkspaceContactRecipientInput.md)
  - [OryClient::WorkspaceOrganization](docs/WorkspaceOrganization.md)
 
 

data/docs/AccountExperienceConfiguration.md

@@ -11,9 +11,9 @@
 | **error_ui_url** | **String** |  |  |
 | **favicon_dark_url** | **String** |  | [optional] |
 | **favicon_light_url** | **String** |  | [optional] |
-| **hide_ory_branding** | **Boolean** |  |  |
+| **hide_ory_branding** | **Boolean** |  Whether to hide the Ory branding badge on the account experience. |  |
 | **hide_registration_link** | **Boolean** |  |  |
-| **locale_behavior** | **String** |  force_default AccountExperienceLocaleBehaviorForceDefault respect_accept_language AccountExperienceLocaleBehaviorRespectAcceptLanguage |  |
+| **locale_behavior** | **String** | force_default AccountExperienceLocaleBehaviorForceDefault respect_accept_language AccountExperienceLocaleBehaviorRespectAcceptLanguage |  |
 | **login_ui_url** | **String** |  |  |
 | **logo_dark_url** | **String** |  | [optional] |
 | **logo_light_url** | **String** |  | [optional] |

data/docs/AddProjectToWorkspaceBody.md

@@ -5,7 +5,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **environment** | **String** | The environment of the project in the workspace. Can be one of \"prod\" or \"dev\". Note that the number of projects in the \"prod\" environment is limited depending on the subscription. prod Production stage Staging dev Development |  |
-| **project_subscription** | **String** | The action to take with the project subscription. Can be one of \"migrate\", and \"ignore\". \"migrate\" will migrate the project subscription to the workspace. \"ignore\" will ignore the project subscription. migrate ProjectSubscriptionActionMigrate  ProjectSubscriptionActionMigrate will migrate the project subscription to the  workspace. ignore ProjectSubscriptionActionIgnore  ProjectSubscriptionActionIgnore will ignore the project subscription. |  |
+| **project_subscription** | **String** | The action to take with the project subscription. Can be one of \"migrate\", and \"ignore\". \"migrate\" will migrate the project subscription to the workspace. \"ignore\" will ignore the project subscription. migrate ProjectSubscriptionActionMigrate will migrate the project subscription to the  workspace. ignore ProjectSubscriptionActionIgnore will ignore the project subscription. |  |
 
 ## Example
 

data/docs/AddWorkspaceOrganizationDomainBody.md

@@ -0,0 +1,18 @@
+# OryClient::AddWorkspaceOrganizationDomainBody
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **domain** | **String** | The domain to add to the organization. |  |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::AddWorkspaceOrganizationDomainBody.new(
+  domain: null
+)
+```
+

data/docs/AiAssistantSessionToken.md

@@ -0,0 +1,20 @@
+# OryClient::AiAssistantSessionToken
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **expires_at** | **Time** | Expiry of the token (RFC 3339). Refresh before this moment; assistant session tokens are valid for one hour after minting. |  |
+| **token** | **String** | Bearer token to pass to the assistant SDK. |  |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::AiAssistantSessionToken.new(
+  expires_at: null,
+  token: null
+)
+```
+

data/docs/ApiKeysApi.md

@@ -242,7 +242,7 @@ nil (empty response body)
 
 Derive Token
 
-Mints a short-lived JWT or Macaroon token from an API key. Works with both issued and imported keys. The derived token inherits the permissions of the parent API key.  ```http POST /v2alpha1/admin/apiKeys:derive {   \"credential\": \"eyJhbGciOiJFZERTQSI...\",   \"ttl\": \"1h\" } ```
+Mints a short-lived JWT or Macaroon token from an issued or imported root API key. Derived JWTs and Macaroons cannot mint successor tokens. The derived token inherits the permissions of the parent API key.  ```http POST /v2alpha1/admin/apiKeys:derive {   \"credential\": \"ory_ak_v1_...\",   \"ttl\": \"1h\" } ```
 
 ### Examples
 
@@ -1234,7 +1234,7 @@ No authorization required
 
 Revoke API Key (self-service)
 
-Proof-of-possession variant of revocation. The `Self*` prefix on the request/response messages disambiguates from the admin variants (`AdminRevokeIssuedApiKey` / `AdminRevokeImportedApiKey`).  Allows an API key holder to revoke their own key. The caller must provide the full API key secret as proof of possession. Supports issued API keys and imported keys. JWT and macaroon tokens cannot be self-revoked (they are stateless).  The PRIVILEGE_WITHDRAWN reason is not allowed for self-revocation (admin-only).  ```http POST /v2alpha1/apiKeys:selfRevoke {   \"credential\": \"sk_live_abc123...\",   \"reason\": \"REVOCATION_REASON_KEY_COMPROMISE\" } ```
+Proof-of-possession variant of revocation. The `Self*` prefix on the request/response messages disambiguates from the admin variants (`AdminRevokeIssuedApiKey` / `AdminRevokeImportedApiKey`).  Allows an API key holder to revoke their own non-public issued or imported key by providing the full secret as proof of possession. Active public keys require an admin revocation endpoint and return PermissionDenied (HTTP 403 Forbidden) here. Already-revoked keys return success. JWT and macaroon tokens cannot be self-revoked (they are stateless).  The PRIVILEGE_WITHDRAWN reason is not allowed for self-revocation (admin-only).  ```http POST /v2alpha1/apiKeys:selfRevoke {   \"credential\": \"sk_live_abc123...\",   \"reason\": \"REVOCATION_REASON_KEY_COMPROMISE\" } ```
 
 ### Examples
 

data/docs/AttributeFilter.md

@@ -5,7 +5,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **attribute** | **String** |  | [optional] |
-| **condition** | **String** |  | [optional] |
+| **condition** | **String** | equals ConditionEquals not_equals ConditionNotEquals contains ConditionContains not_contains ConditionNotContains regex ConditionRegex not_regex ConditionNotRegex set ConditionSet not_set ConditionNotSet | [optional] |
 | **value** | **String** |  | [optional] |
 
 ## Example

data/docs/CreateProjectNormalizedPayload.md

@@ -12,7 +12,7 @@
 | **account_experience_favicon_light** | **String** | Holds the URL to the account experience's favicon. This governs the \"favicon_light\" setting. | [optional] |
 | **account_experience_hide_ory_branding** | **Boolean** | Whether to hide the Ory branding badge on the account experience. This governs the \"hide_ory_branding\" setting. | [optional] |
 | **account_experience_hide_registration_link** | **Boolean** | Whether to hide the registration link on the account experience login card. This governs the \"hide_registration_link\" setting. | [optional] |
-| **account_experience_locale_behavior** | **String** | Holds the URL to the account experience's language behavior.  Can be one of: `respect_accept_language`: Respect the `Accept-Language` header. `force_default`: Force the default language. This governs the \"locale_behavior\" setting. | [optional] |
+| **account_experience_locale_behavior** | **String** | Holds the URL to the account experience's language behavior.  Can be one of: - `respect_accept_language`: Respect the `Accept-Language` header. - `force_default`: Force the default language. This governs the \"locale_behavior\" setting. | [optional] |
 | **account_experience_logo_dark** | **String** | Holds the URL to the account experience's dark theme logo (currently unused). This governs the \"logo_dark\" setting. | [optional] |
 | **account_experience_logo_light** | **String** | Holds the URL to the account experience's logo. This governs the \"logo_light\" setting. | [optional] |
 | **account_experience_privacy_policy_url** | **String** | Holds the URL to the account experience's Privacy Policy page. This governs the \"privacy_policy_url\" setting. | [optional] |
@@ -22,8 +22,9 @@
 | **created_at** | **Time** | The Project's Revision Creation Date | [optional][readonly] |
 | **disable_account_experience_welcome_screen** | **Boolean** | Whether to disable the account experience welcome screen, which is hosted under `/ui/welcome`. This governs the \"disable_welcome_screen\" setting. | [optional] |
 | **enable_ax_v2** | **Boolean** | Whether the new account experience is enabled and reachable. This governs the \"enable_ax_v2\" setting. | [optional] |
-| **environment** | **String** |  prod Production stage Staging dev Development |  |
-| **home_region** | **String** |  eu-central EUCentral asia-northeast AsiaNorthEast us-east USEast us-west USWest eu EU asia Asia us US global Global | [optional] |
+| **environment** | **String** | prod Production stage Staging dev Development |  |
+| **feature_flags** | **Hash<String, Boolean>** | The project's feature flags. Keys are catalog flag keys such as `kratos.choose_recovery_address`. Responses contain every flag with its effective value; requests may set any subset. | [optional] |
+| **home_region** | **String** | eu-central EUCentral asia-northeast AsiaNorthEast us-east USEast us-west USWest eu EU asia Asia us US global Global | [optional] |
 | **hydra_oauth2_allowed_top_level_claims** | **Array<String>** | A list of custom claims which are allowed to be added top level to the Access Token. They cannot override reserved claims.  This governs the \"oauth2.allowed_top_level_claims\" setting. | [optional] |
 | **hydra_oauth2_client_credentials_default_grant_allowed_scope** | **Boolean** | Automatically grant authorized OAuth2 Scope in OAuth2 Client Credentials Flow.  Each OAuth2 Client is allowed to request a predefined OAuth2 Scope (for example `read write`). If this option is enabled, the full scope is automatically granted when performing the OAuth2 Client Credentials flow.  If disabled, the OAuth2 Client has to request the scope in the OAuth2 request by providing the `scope` query parameter.  Setting this option to true is common if you need compatibility with MITREid.  This governs the \"oauth2.client_credentials.default_grant_allowed_scope\" setting. | [optional] |
 | **hydra_oauth2_device_authorization_token_polling_interval** | **String** | Configures how often a non-interactive device should poll the OAuth 2.0 Device Authorization Grant token endpoint. Purely informational — the value is reported to the device in the \"interval\" response field of the device authorization response. Hydra defaults to 5s when this is left empty.  This is an Enterprise feature.  This governs the \"oauth2.device_authorization.token_polling_interval\" setting. | [optional] |
@@ -52,7 +53,7 @@
 | **hydra_serve_cookies_same_site_legacy_workaround** | **Boolean** | Configures the Ory Hydra Cookie Same Site Legacy Workaround  This governs the \"serve.cookies.same_site_legacy_workaround\" setting. | [optional] |
 | **hydra_serve_cookies_same_site_mode** | **String** | Configures the Ory Hydra Cookie Same Site Mode  This governs the \"serve.cookies.same_site_mode\" setting. | [optional] |
 | **hydra_strategies_access_token** | **String** | Defines access token type  This governs the \"strategies.access_token\" setting. opaque Oauth2AccessTokenStrategyOpaque jwt Oauth2AccessTokenStrategyJwt | [optional][default to 'opaque'] |
-| **hydra_strategies_jwt_scope_claim** | **String** | Define the claim to use as the scope in the access token.  This governs the \"strategies.jwt.scope_claim\" setting.  list: The scope claim is an array of strings named `scope`: `{ \"scope\": [\"read\", \"write\"] }` string: The scope claim is a space delimited list of strings named `scp`: `{ \"scp\": \"read write\" }` both: The scope claim is both a space delimited list and an array of strings named `scope` and `scp`: `{ \"scope\": [\"read\", \"write\"], \"scp\": \"read write\" }` list OAuth2JWTScopeClaimList string OAuth2JWTScopeClaimString both OAuth2JWTScopeClaimBoth | [optional][default to 'list'] |
+| **hydra_strategies_jwt_scope_claim** | **String** | Define the claim to use as the scope in the access token.  This governs the \"strategies.jwt.scope_claim\" setting.  - list: The scope claim is an array of strings named `scope`: `{ \"scope\": [\"read\", \"write\"] }` - string: The scope claim is a space delimited list of strings named `scp`: `{ \"scp\": \"read write\" }` - both: The scope claim is both a space delimited list and an array of strings named `scope` and `scp`: `{ \"scope\": [\"read\", \"write\"], \"scp\": \"read write\" }` list OAuth2JWTScopeClaimList string OAuth2JWTScopeClaimString both OAuth2JWTScopeClaimBoth | [optional][default to 'list'] |
 | **hydra_strategies_scope** | **String** | Defines how scopes are matched. For more details have a look at https://github.com/ory/fosite#scopes  This governs the \"strategies.scope\" setting. exact Oauth2ScopeStrategyExact wildcard Oauth2ScopeStrategyWildcard | [optional][default to 'wildcard'] |
 | **hydra_ttl_access_token** | **String** | This governs the \"ttl.access_token\" setting. | [optional][default to '30m'] |
 | **hydra_ttl_auth_code** | **String** | Configures how long refresh tokens are valid.  Set to -1 for refresh tokens to never expire. This is not recommended!  This governs the \"ttl.auth_code\" setting. | [optional][default to '720h'] |
@@ -79,18 +80,20 @@
 | **hydra_webfinger_oidc_discovery_token_url** | **String** | Configures OpenID Connect Discovery and overwrites the OAuth2 Token URL.  This governs the \"webfinger.oidc_discovery.token_url\" setting. | [optional] |
 | **hydra_webfinger_oidc_discovery_userinfo_url** | **String** | Configures OpenID Connect Discovery and overwrites userinfo endpoint to be advertised at the OpenID Connect Discovery endpoint /.well-known/openid-configuration. Defaults to Ory Hydra's userinfo endpoint at /userinfo. Set this value if you want to handle this endpoint yourself.  This governs the \"webfinger.oidc_discovery.userinfo_url\" setting. | [optional] |
 | **id** | **String** | The revision ID. | [optional][readonly] |
+| **keto_feature_flags_strict_mode** | **Boolean** | Configures Keto's strict mode.  This governs the \"feature_flags.strict_mode\" setting. | [optional] |
 | **keto_namespace_configuration** | **String** | The Revisions' Keto Namespace Configuration  The string is a URL pointing to an OPL file with the configuration.  This governs the \"namespaces.location\" setting. | [optional] |
 | **keto_namespaces** | [**Array<KetoNamespace>**](KetoNamespace.md) |  | [optional] |
 | **keto_secrets_pagination** | **Array<String>** | Configures Keto's pagination secrets.  This governs the \"secrets.pagination\" setting. | [optional] |
+| **keto_strict_mode_readonly** | **Boolean** | When true, strict mode is locked: changes to it are rejected from any client (API, Console, config import), and the Console hides the toggle. NULL and false mean strict mode can be changed (existing projects during migration). New projects are created with this set to true, permanently enabling strict mode. This flag is backoffice metadata and is not part of the rendered Keto configuration. | [optional] |
 | **kratos_cookies_same_site** | **String** | Configures the Ory Kratos Cookie SameSite Attribute  This governs the \"cookies.same_site\" setting. | [optional] |
 | **kratos_courier_channels** | [**Array<NormalizedProjectRevisionCourierChannel>**](NormalizedProjectRevisionCourierChannel.md) |  | [optional] |
-| **kratos_courier_delivery_strategy** | **String** | The delivery strategy to use when sending emails  This governs the \"courier.delivery_strategy\" setting.  `smtp`: Use SMTP server `http`: Use the built in HTTP client to send the email to some remote service | [optional][default to 'smtp'] |
-| **kratos_courier_http_request_config_auth_api_key_in** | **String** | The location of the API key to use in the HTTP email sending service's authentication  `header`: Send the key value pair as a header `cookie`: Send the key value pair as a cookie This governs the \"courier.http.request_config.auth.config.in\" setting. | [optional] |
+| **kratos_courier_delivery_strategy** | **String** | The delivery strategy to use when sending emails  This governs the \"courier.delivery_strategy\" setting.  - `smtp`: Use SMTP server - `http`: Use the built in HTTP client to send the email to some remote service | [optional][default to 'smtp'] |
+| **kratos_courier_http_request_config_auth_api_key_in** | **String** | The location of the API key to use in the HTTP email sending service's authentication  - `header`: Send the key value pair as a header - `cookie`: Send the key value pair as a cookie This governs the \"courier.http.request_config.auth.config.in\" setting. | [optional] |
 | **kratos_courier_http_request_config_auth_api_key_name** | **String** | The name of the API key to use in the HTTP email sending service's authentication  This governs the \"courier.http.request_config.auth.config.name\" setting. | [optional] |
 | **kratos_courier_http_request_config_auth_api_key_value** | **String** | The value of the API key to use in the HTTP email sending service's authentication  This governs the \"courier.http.request_config.auth.config.value\" setting. | [optional] |
 | **kratos_courier_http_request_config_auth_basic_auth_password** | **String** | The password to use for basic auth in the HTTP email sending service's authentication  This governs the \"courier.http.request_config.auth.config.password\" setting. | [optional] |
 | **kratos_courier_http_request_config_auth_basic_auth_user** | **String** | The user to use for basic auth in the HTTP email sending service's authentication  This governs the \"courier.http.request_config.auth.config.user\" setting. | [optional] |
-| **kratos_courier_http_request_config_auth_type** | **String** | The authentication type to use while contacting the remote HTTP email sending service  This governs the \"courier.http.request_config.auth.type\" setting.  `basic_auth`: Use Basic Authentication `api_key`: Use API Key Authentication in a header or cookie | [optional][default to 'empty (no authentication)'] |
+| **kratos_courier_http_request_config_auth_type** | **String** | The authentication type to use while contacting the remote HTTP email sending service  This governs the \"courier.http.request_config.auth.type\" setting.  - `basic_auth`: Use Basic Authentication - `api_key`: Use API Key Authentication in a header or cookie | [optional][default to 'empty (no authentication)'] |
 | **kratos_courier_http_request_config_body** | **String** | The Jsonnet template to generate the body to send to the remote HTTP email sending service  Should be valid Jsonnet and base64 encoded  This governs the \"courier.http.request_config.body\" setting. | [optional] |
 | **kratos_courier_http_request_config_headers** | **Object** | Any additional headers to send to the remote HTTP email sending service  This governs the \"courier.http.request_config.headers\" setting. | [optional] |
 | **kratos_courier_http_request_config_method** | **String** | The http METHOD to use when calling the remote HTTP email sending service  This governs the \"courier.http.request_config.method\" setting. | [optional][default to 'POST'] |
@@ -140,6 +143,7 @@
 | **kratos_feature_flags_cacheable_sessions** | **Boolean** | Configures the Ory Kratos Session caching feature flag  This governs the \"feature_flags.cacheable_sessions\" setting. | [optional] |
 | **kratos_feature_flags_cacheable_sessions_max_age** | **String** | Configures the Ory Kratos Session caching max-age feature flag  This governs the \"feature_flags.cacheable_sessions_max_age\" setting. | [optional] |
 | **kratos_feature_flags_choose_recovery_address** | **Boolean** | This governs the \"feature_flags.choose_recovery_address\" setting. | [optional] |
+| **kratos_feature_flags_enforce_identity_schema_guards** | **Boolean** | Configures whether Ory Kratos enforces the identity schema guards  If enabled, an identity schema that does not pass the identity schema guards is rejected. If disabled, the result is logged and the schema is used.  This governs the \"feature_flags.enforce_identity_schema_guards\" setting. | [optional] |
 | **kratos_feature_flags_faster_session_extend** | **Boolean** | Configures the Ory Kratos Faster Session Extend setting  If enabled allows faster session extension by skipping the session lookup and returning 201 instead of 200. Disabling this feature will be deprecated in the future.  This governs the \"feature_flags.faster_session_extend\" setting. | [optional] |
 | **kratos_feature_flags_legacy_continue_with_verification_ui** | **Boolean** | Always include show_verification_ui in continue_with  If true, restores the legacy behavior of always including `show_verification_ui` in the registration flow's `continue_with` when verification is enabled. If set to false, `show_verification_ui` is only set in `continue_with` if the `show_verification_ui` hook is used. This flag will be removed in the future.  This governs the \"feature_flags.legacy_continue_with_verification_ui\" setting. | [optional] |
 | **kratos_feature_flags_legacy_oidc_registration_node_group** | **Boolean** | Controls whether the UI nodes in an OIDC registration flow have group \"oidc\" in case required fields are not returned by the OIDC provider.  If set to true, the UI nodes will have group \"oidc\" and the flow will be considered successful if the user completes the flow. This is the legacy behavior.  This governs the \"feature_flags.legacy_oidc_registration_node_group\" setting. | [optional] |
@@ -147,11 +151,12 @@
 | **kratos_feature_flags_password_profile_registration_node_group** | **Boolean** | Configures the group for the password method in the registration flow.  If true, it sets the password method group value to \"password\" if it is the only method available. This is the legacy behavior. If false is, it sets the password method group value to \"default\".  This governs the \"feature_flags.password_profile_registration_node_group\" setting. | [optional] |
 | **kratos_feature_flags_refresh_login_choose_address** | **Boolean** | Render an address picker on the code refresh login screen  If true, a code-strategy refresh (privileged re-authentication) login renders a \"Send code to <address>\" button per available code address instead of re-asking for the identifier. The identity is already fixed by the active session, so re-entering the identifier is unnecessary. It is safe to toggle this back and forth.  This governs the \"feature_flags.refresh_login_choose_address\" setting. | [optional] |
 | **kratos_feature_flags_use_continue_with_transitions** | **Boolean** | Configures the Ory Kratos Session use_continue_with_transitions flag  This governs the \"feature_flags.use_continue_with_transitions\" setting. | [optional] |
+| **kratos_feature_flags_webhook_response_directives** | **Boolean** | Honor flow directives in web hook responses  If true, a login `after` web hook whose `response.parse` is enabled may return `{\"required_aal\":\"aal2\"}` to require step-up for that login. Identities without a second factor are routed to enrollment. Off by default, because a web hook that already returns a `required_aal` field has it ignored today and enabling that silently would change how existing logins end.  This governs the \"feature_flags.webhook_response_directives\" setting. | [optional] |
 | **kratos_identity_schemas** | [**Array<NormalizedProjectRevisionIdentitySchema>**](NormalizedProjectRevisionIdentitySchema.md) |  | [optional] |
 | **kratos_oauth2_provider_headers** | **Object** | Configures the OAuth2 Provider Integration HTTP Headers  This governs the \"oauth2_provider.headers\" setting. | [optional] |
 | **kratos_oauth2_provider_override_return_to** | **Boolean** | Kratos OAuth2 Provider Override Return To  Enabling this allows Kratos to set the return_to parameter automatically to the OAuth2 request URL on the login flow, allowing complex flows such as recovery to continue to the initial OAuth2 flow.  This governs the \"oauth2_provider.override_return_to\" setting. | [optional] |
 | **kratos_oauth2_provider_url** | **String** | The Revisions' OAuth2 Provider Integration URL  This governs the \"oauth2_provider.url\" setting. | [optional] |
-| **kratos_preview_default_read_consistency_level** | **String** | Configures the default read consistency level for identity APIs  The read consistency level determines the consistency guarantee for reads:  strong (slow): The read is guaranteed to return the most recent data committed at the start of the read. eventual (very fast): The result will return data that is about 4.8 seconds old.  Setting the default consistency level to `eventual` may cause regressions in the future as we add consistency controls to more APIs. Currently, the following APIs will be affected by this setting:  `GET /admin/identities`  Defaults to \"strong\" for new and existing projects. This feature is in preview. Use with caution. This governs the \"preview.default_read_consistency_level\" setting. | [optional] |
+| **kratos_preview_default_read_consistency_level** | **String** | Configures the default read consistency level for identity APIs  The read consistency level determines the consistency guarantee for reads:  - strong (slow): The read is guaranteed to return the most recent data committed at the start of the read. - eventual (very fast): The result will return data that is about 4.8 seconds old.  Setting the default consistency level to `eventual` may cause regressions in the future as we add consistency controls to more APIs. Currently, the following APIs will be affected by this setting:  - `GET /admin/identities`  Defaults to \"strong\" for new and existing projects. This feature is in preview. Use with caution. This governs the \"preview.default_read_consistency_level\" setting. | [optional] |
 | **kratos_secrets_cipher** | **Array<String>** | Configures the Ory Kratos Cipher Secret  This governs the \"secrets.cipher\" setting. | [optional] |
 | **kratos_secrets_cookie** | **Array<String>** | Configures the Ory Kratos Cookie Secret  This governs the \"secrets.cookie\" setting. | [optional] |
 | **kratos_secrets_default** | **Array<String>** | Configures the Ory Kratos Default Secret  This governs the \"secrets.default\" setting. | [optional] |
@@ -222,6 +227,7 @@
 | **kratos_selfservice_methods_code_mfa_enabled** | **Boolean** | Configures whether the code method can be used to fulfil MFA flows  This governs the \"selfservice.methods.code.mfa_enabled\" setting. | [optional] |
 | **kratos_selfservice_methods_code_passwordless_enabled** | **Boolean** | Configures whether Ory Kratos Passwordless should use the Code Method  This governs the \"selfservice.methods.code.passwordless_enabled\" setting. | [optional] |
 | **kratos_selfservice_methods_code_passwordless_login_fallback_enabled** | **Boolean** | This setting allows the code method to always login a user with code if they have registered with another authentication method such as password or social sign in.  This governs the \"selfservice.methods.code.passwordless_login_fallback_enabled\" setting. | [optional] |
+| **kratos_selfservice_methods_deviceauthn_config_android_allow_expired_factory_certificates** | **Boolean** | Configures whether Ory Kratos Device authentication accepts expired certificates in Android factory attestation chains  When enabled, Android enrollment accepts expired CA certificates in factory-provisioned attestation chains that lead to a pinned Google root key. Devices launched before 2021 ship factory keyboxes whose certificates have expired but that Google documents as still trustworthy unless revoked. Revocation, signature, and leaf-validity checks still apply, and keys enrolled this way are first-class hardware-attested keys. Defaults to false.  This governs the \"selfservice.methods.deviceauthn.config.android_allow_expired_factory_certificates\" setting. | [optional] |
 | **kratos_selfservice_methods_deviceauthn_config_android_app_ids** | **Array<String>** | Configures the allow-list of Android app signing-certificate digests that a device key may be bound to.  This governs the \"selfservice.methods.deviceauthn.config.android_app_ids\" setting. | [optional] |
 | **kratos_selfservice_methods_deviceauthn_config_first_factor** | **Boolean** | Configures whether device authentication may be used as the sole first factor.  When enabled, a confirmed device key with PIN or platform user verification can complete an AAL2 login in a single submission, without a password or code. Defaults to false, which keeps device keys usable only as a second factor (step-up).  This governs the \"selfservice.methods.deviceauthn.config.first_factor\" setting. | [optional] |
 | **kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation** | **Boolean** | Configures whether Ory Kratos Device authentication accepts relaxed attestations for testing  Only allowed on development projects and forced off otherwise. Keys enrolled under relaxation are short-lived and refused once this is turned off.  This governs the \"selfservice.methods.deviceauthn.config.insecure_allow_relaxed_attestation\" setting. | [optional] |
@@ -321,6 +327,7 @@ instance = OryClient::CreateProjectNormalizedPayload.new(
   disable_account_experience_welcome_screen: null,
   enable_ax_v2: null,
   environment: null,
+  feature_flags: null,
   home_region: null,
   hydra_oauth2_allowed_top_level_claims: null,
   hydra_oauth2_client_credentials_default_grant_allowed_scope: null,
@@ -377,9 +384,11 @@ instance = OryClient::CreateProjectNormalizedPayload.new(
   hydra_webfinger_oidc_discovery_token_url: null,
   hydra_webfinger_oidc_discovery_userinfo_url: null,
   id: null,
+  keto_feature_flags_strict_mode: null,
   keto_namespace_configuration: null,
   keto_namespaces: null,
   keto_secrets_pagination: null,
+  keto_strict_mode_readonly: null,
   kratos_cookies_same_site: null,
   kratos_courier_channels: null,
   kratos_courier_delivery_strategy: null,
@@ -438,6 +447,7 @@ instance = OryClient::CreateProjectNormalizedPayload.new(
   kratos_feature_flags_cacheable_sessions: null,
   kratos_feature_flags_cacheable_sessions_max_age: null,
   kratos_feature_flags_choose_recovery_address: null,
+  kratos_feature_flags_enforce_identity_schema_guards: null,
   kratos_feature_flags_faster_session_extend: null,
   kratos_feature_flags_legacy_continue_with_verification_ui: null,
   kratos_feature_flags_legacy_oidc_registration_node_group: null,
@@ -445,6 +455,7 @@ instance = OryClient::CreateProjectNormalizedPayload.new(
   kratos_feature_flags_password_profile_registration_node_group: null,
   kratos_feature_flags_refresh_login_choose_address: null,
   kratos_feature_flags_use_continue_with_transitions: null,
+  kratos_feature_flags_webhook_response_directives: null,
   kratos_identity_schemas: null,
   kratos_oauth2_provider_headers: null,
   kratos_oauth2_provider_override_return_to: null,
@@ -520,6 +531,7 @@ instance = OryClient::CreateProjectNormalizedPayload.new(
   kratos_selfservice_methods_code_mfa_enabled: null,
   kratos_selfservice_methods_code_passwordless_enabled: null,
   kratos_selfservice_methods_code_passwordless_login_fallback_enabled: null,
+  kratos_selfservice_methods_deviceauthn_config_android_allow_expired_factory_certificates: null,
   kratos_selfservice_methods_deviceauthn_config_android_app_ids: null,
   kratos_selfservice_methods_deviceauthn_config_first_factor: null,
   kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation: null,

data/docs/CreateRecoveryCodeForIdentityBody.md

@@ -14,7 +14,7 @@
 require 'ory-client'
 
 instance = OryClient::CreateRecoveryCodeForIdentityBody.new(
-  expires_in: null,
+  expires_in: 1h,
   flow_type: null,
   identity_id: null
 )

data/docs/CreateRecoveryLinkForIdentityBody.md

@@ -13,7 +13,7 @@
 require 'ory-client'
 
 instance = OryClient::CreateRecoveryLinkForIdentityBody.new(
-  expires_in: null,
+  expires_in: 1h,
   identity_id: null
 )
 ```

data/docs/CreateSubscriptionBody.md

@@ -4,8 +4,8 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **currency** | **String** |  usd USD eur Euro | [optional] |
-| **interval** | **String** |  monthly Monthly yearly Yearly |  |
+| **currency** | **String** | usd USD eur Euro | [optional] |
+| **interval** | **String** | monthly Monthly yearly Yearly |  |
 | **plan** | **String** |  |  |
 | **provision_first_project** | **String** |  |  |
 | **return_to** | **String** |  | [optional] |

data/docs/CreateSubscriptionCommon.md

@@ -4,8 +4,8 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **currency** | **String** |  usd USD eur Euro | [optional] |
-| **interval** | **String** |  monthly Monthly yearly Yearly |  |
+| **currency** | **String** | usd USD eur Euro | [optional] |
+| **interval** | **String** | monthly Monthly yearly Yearly |  |
 | **plan** | **String** |  |  |
 | **return_to** | **String** |  | [optional] |
 

data/docs/CreateWorkspaceContactBody.md

@@ -0,0 +1,26 @@
+# OryClient::CreateWorkspaceContactBody
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **business** | **Boolean** | Whether this recipient is a business contact. |  |
+| **privacy** | **Boolean** | Whether this recipient is a privacy contact. |  |
+| **recipient** | [**WorkspaceContactRecipientInput**](WorkspaceContactRecipientInput.md) |  |  |
+| **security** | **Boolean** | Whether this recipient is a security contact. |  |
+| **technical** | **Boolean** | Whether this recipient is a technical contact. |  |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::CreateWorkspaceContactBody.new(
+  business: null,
+  privacy: null,
+  recipient: null,
+  security: null,
+  technical: null
+)
+```
+

data/docs/CreateWorkspaceSubscriptionBody.md

@@ -4,8 +4,8 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **currency** | **String** |  usd USD eur Euro | [optional] |
-| **interval** | **String** |  monthly Monthly yearly Yearly |  |
+| **currency** | **String** | usd USD eur Euro | [optional] |
+| **interval** | **String** | monthly Monthly yearly Yearly |  |
 | **plan** | **String** |  |  |
 | **return_to** | **String** |  | [optional] |
 

data/docs/CustomDomain.md

@@ -11,7 +11,7 @@
 | **custom_ui_base_url** | **String** |  | [optional] |
 | **hostname** | **String** |  | [optional] |
 | **id** | **String** |  | [optional] |
-| **ssl_status** | **String** |  | [optional] |
+| **ssl_status** | **String** | initializing _ pending_validation _ deleted _ pending_issuance _ pending_deployment _ pending_deletion _ pending_expiration _ expired _ active _ initializing_timed_out _ validation_timed_out _ issuance_timed_out _ deployment_timed_out _ deletion_timed_out _ pending_cleanup _ staging_deployment _ staging_active _ deactivating _ inactive _ backup_issued _ holding_deployment _  _  Cloudflare sometimes returns an empty string. | [optional] |
 | **updated_at** | **Time** |  | [optional] |
 | **verification_errors** | **Array<String>** |  | [optional] |
 | **verification_status** | **String** |  | [optional] |

data/docs/DomainVerificationStatus.md

@@ -0,0 +1,28 @@
+# OryClient::DomainVerificationStatus
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **domain** | **String** | The domain being verified. |  |
+| **exempt** | **Boolean** | Whether the domain predates domain verification and is trusted for SSO without a published DNS TXT record. Such a domain keeps routing sign-ins while its owner publishes the record; the exemption is temporary, so the Console asks the owner to verify. |  |
+| **method** | **String** | The verification method. Currently always \"dns-txt\". Empty when no verification has been started for the domain yet.  DomainVerificationMethodNone dns-txt DomainVerificationMethodDNSTXT | [optional] |
+| **status** | **String** | The verification status: one of \"pending\", \"verified\", or \"failed\". Empty when no verification has been started for the domain yet.  DomainVerificationStateNone pending DomainVerificationStatePending verified DomainVerificationStateVerified failed DomainVerificationStateFailed | [optional] |
+| **txt_record_name** | **String** | The name of the DNS TXT record the customer must publish, for example \"_ory-domain-verification.example.com\". |  |
+| **txt_record_value** | **String** | The value of the DNS TXT record the customer must publish. Empty when no verification has been started for the domain yet. | [optional] |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::DomainVerificationStatus.new(
+  domain: null,
+  exempt: null,
+  method: null,
+  status: null,
+  txt_record_name: null,
+  txt_record_value: null
+)
+```
+

data/docs/ErrorOAuth2.md

@@ -19,7 +19,7 @@ instance = OryClient::ErrorOAuth2.new(
   error: null,
   error_debug: null,
   error_description: null,
-  error_hint: The redirect URL is not allowed.,
+  error_hint: The redirect URL is not allowed,
   status_code: 401
 )
 ```

data/docs/EventStream.md

@@ -5,11 +5,12 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **created_at** | **Time** |  | [optional] |
-| **https_endpoint** | **String** |  | [optional] |
+| **http_protocol_major_version** | **Integer** | The major version of the HTTP protocol the endpoint negotiated during the most recent successful connectivity test: 1 for HTTP/1.x, 2 for HTTP/2. Null when the endpoint has not been verified, for example on a paused stream or a non-HTTPS stream. | [optional][readonly] |
+| **https_endpoint** | **String** | The HTTPS endpoint, if type is HTTPS.  Returned with its userinfo and query values masked. Omit it on write to keep the stored endpoint; sending the masked form back overwrites it. | [optional] |
 | **id** | **String** |  | [optional] |
-| **role_arn** | **String** |  | [optional] |
+| **role_arn** | **String** | The AWS IAM role ARN assumed when publishing to the SNS topic, if type is SNS. | [optional] |
 | **status** | **String** | The status of the event stream. A paused event stream does not forward any events until it is set back to active. | [optional] |
-| **topic_arn** | **String** |  | [optional] |
+| **topic_arn** | **String** | The AWS SNS topic ARN, if type is SNS. | [optional] |
 | **type** | **String** |  | [optional] |
 | **updated_at** | **Time** |  | [optional] |
 
@@ -20,6 +21,7 @@ require 'ory-client'
 
 instance = OryClient::EventStream.new(
   created_at: null,
+  http_protocol_major_version: null,
   https_endpoint: null,
   id: null,
   role_arn: null,