ory-client 1.22.66 → 1.22.79

data/docs/OAuth2Client.md

@@ -25,7 +25,7 @@
 | **device_authorization_grant_refresh_token_lifespan** | **String** |  | [optional] |
 | **frontchannel_logout_session_required** | **Boolean** | OpenID Connect Front-Channel Logout Session Required  Boolean value specifying whether the RP requires that iss (issuer) and sid (session ID) query parameters be included to identify the RP session with the OP when the frontchannel_logout_uri is used. If omitted, the default value is false. | [optional] |
 | **frontchannel_logout_uri** | **String** | OpenID Connect Front-Channel Logout URI  RP URL that will cause the RP to log itself out when rendered in an iframe by the OP. An iss (issuer) query parameter and a sid (session ID) query parameter MAY be included by the OP to enable the RP to validate the request and to determine which of the potentially multiple sessions is to be logged out; if either is included, both MUST be. | [optional] |
-| **grant_types** | **Array<String>** | OAuth 2.0 Client Grant Types  An array of OAuth 2.0 grant types the client is allowed to use. Can be one of:  Client Credentials Grant: `client_credentials` Authorization Code Grant: `authorization_code` OpenID Connect Implicit Grant (deprecated!): `implicit` Refresh Token Grant: `refresh_token` OAuth 2.0 Token Exchange: `urn:ietf:params:oauth:grant-type:jwt-bearer` OAuth 2.0 Device Code Grant: `urn:ietf:params:oauth:grant-type:device_code` | [optional] |
+| **grant_types** | **Array<String>** | OAuth 2.0 Client Grant Types  An array of OAuth 2.0 grant types the client is allowed to use. Can be one of:  - Client Credentials Grant: `client_credentials` - Authorization Code Grant: `authorization_code` - OpenID Connect Implicit Grant (deprecated!): `implicit` - Refresh Token Grant: `refresh_token` - OAuth 2.0 Token Exchange: `urn:ietf:params:oauth:grant-type:jwt-bearer` - OAuth 2.0 Device Code Grant: `urn:ietf:params:oauth:grant-type:device_code` | [optional] |
 | **implicit_grant_access_token_lifespan** | **String** |  | [optional] |
 | **implicit_grant_id_token_lifespan** | **String** |  | [optional] |
 | **jwks** | [**JsonWebKeySet**](JsonWebKeySet.md) |  | [optional] |
@@ -44,13 +44,13 @@
 | **registration_client_uri** | **String** | OpenID Connect Dynamic Client Registration URL  RegistrationClientURI is the URL used to update, get, or delete the OAuth2 Client. | [optional] |
 | **request_object_signing_alg** | **String** | OpenID Connect Request Object Signing Algorithm  JWS [JWS] alg algorithm [JWA] that MUST be used for signing Request Objects sent to the OP. All Request Objects from this Client MUST be rejected, if not signed with this algorithm. | [optional] |
 | **request_uris** | **Array<String>** | OpenID Connect Request URIs  Array of request_uri values that are pre-registered by the RP for use at the OP. Servers MAY cache the contents of the files referenced by these URIs and not retrieve them at the time they are used in a request. OPs can require that request_uri values used be pre-registered with the require_request_uri_registration discovery parameter. | [optional] |
-| **response_types** | **Array<String>** | OAuth 2.0 Client Response Types  An array of the OAuth 2.0 response type strings that the client can use at the authorization endpoint. Possible values are:  `code` for Authorization Code Grant. `token` or `id_token` or `token id_token` for OpenID Connect Implicit Grant (not recommended). `code token` or `code id_token` or `code token id_token` for OpenID Connect Hybrid Flow (not recommended). | [optional] |
+| **response_types** | **Array<String>** | OAuth 2.0 Client Response Types  An array of the OAuth 2.0 response type strings that the client can use at the authorization endpoint. Possible values are:  - `code` for Authorization Code Grant. - `token` or `id_token` or `token id_token` for OpenID Connect Implicit Grant (not recommended). - `code token` or `code id_token` or `code token id_token` for OpenID Connect Hybrid Flow (not recommended). | [optional] |
 | **scope** | **String** | OAuth 2.0 Client Scope  Scope is a string containing a space-separated list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749]) that the client can use when requesting access tokens. | [optional] |
 | **sector_identifier_uri** | **String** | OpenID Connect Sector Identifier URI  URL using the https scheme to be used in calculating Pseudonymous Identifiers by the OP. The URL references a file with a single JSON array of redirect_uri values. | [optional] |
 | **skip_consent** | **Boolean** | SkipConsent skips the consent screen for this client. This field can only be set from the admin API. | [optional] |
 | **skip_logout_consent** | **Boolean** | SkipLogoutConsent skips the logout consent screen for this client. This field can only be set from the admin API. | [optional] |
 | **subject_type** | **String** | OpenID Connect Subject Type  The `subject_types_supported` Discovery parameter contains a list of the supported subject_type values for this server. Valid types include `pairwise` and `public`. | [optional] |
-| **token_endpoint_auth_method** | **String** | OAuth 2.0 Token Endpoint Authentication Method  Requested Client Authentication method for the Token Endpoint. The options are:  `client_secret_basic`: (default) Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` encoded in the HTTP Authorization header. `client_secret_post`: Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` in the HTTP body. `private_key_jwt`: Use JSON Web Tokens to authenticate the client. `none`: Used for public clients (native apps, mobile apps) which can not have secrets. | [optional][default to 'client_secret_basic'] |
+| **token_endpoint_auth_method** | **String** | OAuth 2.0 Token Endpoint Authentication Method  Requested Client Authentication method for the Token Endpoint. The options are:  - `client_secret_basic`: (default) Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` encoded in the HTTP Authorization header. - `client_secret_post`: Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` in the HTTP body. - `private_key_jwt`: Use JSON Web Tokens to authenticate the client. - `none`: Used for public clients (native apps, mobile apps) which can not have secrets. | [optional][default to 'client_secret_basic'] |
 | **token_endpoint_auth_signing_alg** | **String** | OAuth 2.0 Token Endpoint Signing Algorithm  Requested Client Authentication signing algorithm for the Token Endpoint. | [optional] |
 | **tos_uri** | **String** | OAuth 2.0 Client Terms of Service URI  A URL string pointing to a human-readable terms of service document for the client that describes a contractual relationship between the end-user and the client that the end-user accepts when authorizing the client. | [optional] |
 | **updated_at** | **Time** | OAuth 2.0 Client Last Update Date  UpdatedAt returns the timestamp of the last update. | [optional] |

data/docs/OAuth2ConsentRequestOpenIDConnectContext.md

@@ -5,7 +5,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **acr_values** | **Array<String>** | ACRValues is the Authentication AuthorizationContext Class Reference requested in the OAuth 2.0 Authorization request. It is a parameter defined by OpenID Connect and expresses which level of authentication (e.g. 2FA) is required.  OpenID Connect defines it as follows: > Requested Authentication AuthorizationContext Class Reference values. Space-separated string that specifies the acr values that the Authorization Server is being requested to use for processing this Authentication Request, with the values appearing in order of preference. The Authentication AuthorizationContext Class satisfied by the authentication performed is returned as the acr Claim Value, as specified in Section 2. The acr Claim is requested as a Voluntary Claim by this parameter. | [optional] |
-| **display** | **String** | Display is a string value that specifies how the Authorization Server displays the authentication and consent user interface pages to the End-User. The defined values are: page: The Authorization Server SHOULD display the authentication and consent UI consistent with a full User Agent page view. If the display parameter is not specified, this is the default display mode. popup: The Authorization Server SHOULD display the authentication and consent UI consistent with a popup User Agent window. The popup User Agent window should be of an appropriate size for a login-focused dialog and should not obscure the entire window that it is popping up over. touch: The Authorization Server SHOULD display the authentication and consent UI consistent with a device that leverages a touch interface. wap: The Authorization Server SHOULD display the authentication and consent UI consistent with a \"feature phone\" type display.  The Authorization Server MAY also attempt to detect the capabilities of the User Agent and present an appropriate display. | [optional] |
+| **display** | **String** | Display is a string value that specifies how the Authorization Server displays the authentication and consent user interface pages to the End-User. The defined values are: - page: The Authorization Server SHOULD display the authentication and consent UI consistent with a full User Agent page view. If the display parameter is not specified, this is the default display mode. - popup: The Authorization Server SHOULD display the authentication and consent UI consistent with a popup User Agent window. The popup User Agent window should be of an appropriate size for a login-focused dialog and should not obscure the entire window that it is popping up over. - touch: The Authorization Server SHOULD display the authentication and consent UI consistent with a device that leverages a touch interface. - wap: The Authorization Server SHOULD display the authentication and consent UI consistent with a \"feature phone\" type display.  The Authorization Server MAY also attempt to detect the capabilities of the User Agent and present an appropriate display. | [optional] |
 | **id_token_hint_claims** | **Hash<String, Object>** | IDTokenHintClaims are the claims of the ID Token previously issued by the Authorization Server being passed as a hint about the End-User's current or past authenticated session with the Client. | [optional] |
 | **login_hint** | **String** | LoginHint hints about the login identifier the End-User might use to log in (if necessary). This hint can be used by an RP if it first asks the End-User for their e-mail address (or other identifier) and then wants to pass that value as a hint to the discovered authorization service. This value MAY also be a phone number in the format specified for the phone_number Claim. The use of this parameter is optional. | [optional] |
 | **ui_locales** | **Array<String>** | UILocales is the End-User'id preferred languages and scripts for the user interface, represented as a space-separated list of BCP47 [RFC5646] language tag values, ordered by preference. For instance, the value \"fr-CA fr en\" represents a preference for French as spoken in Canada, then French (without a region designation), followed by English (without a region designation). An error SHOULD NOT result if some or all of the requested locales are not supported by the OpenID Provider. | [optional] |

data/docs/OidcApi.md

@@ -414,7 +414,7 @@ This endpoint does not need any parameter.
 
 OpenID Connect Front- and Back-channel Enabled Logout
 
-This endpoint initiates and completes user logout at the Ory OAuth2 & OpenID provider and initiates OpenID Connect Front- / Back-channel logout:  https://openid.net/specs/openid-connect-frontchannel-1_0.html https://openid.net/specs/openid-connect-backchannel-1_0.html  Back-channel logout is performed asynchronously and does not affect logout flow.
+This endpoint initiates and completes user logout at the Ory OAuth2 & OpenID provider and initiates OpenID Connect Front- / Back-channel logout:  - https://openid.net/specs/openid-connect-frontchannel-1_0.html - https://openid.net/specs/openid-connect-backchannel-1_0.html  Back-channel logout is performed asynchronously and does not affect logout flow.
 
 ### Examples
 

data/docs/OidcConfiguration.md

@@ -69,7 +69,7 @@ instance = OryClient::OidcConfiguration.new(
   response_types_supported: null,
   revocation_endpoint: null,
   scopes_supported: null,
-  subject_types_supported: null,
+  subject_types_supported: ["public","pairwise"],
   token_endpoint: https://playground.ory.sh/ory-hydra/public/oauth2/token,
   token_endpoint_auth_methods_supported: null,
   userinfo_endpoint: null,

data/docs/OplParseError.md

@@ -0,0 +1,22 @@
+# OryClient::OplParseError
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **_end** | [**OplSourcePosition**](OplSourcePosition.md) |  | [optional] |
+| **message** | **String** |  | [optional] |
+| **start** | [**OplSourcePosition**](OplSourcePosition.md) |  | [optional] |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::OplParseError.new(
+  _end: null,
+  message: null,
+  start: null
+)
+```
+

data/docs/OplSourcePosition.md

@@ -0,0 +1,20 @@
+# OryClient::OplSourcePosition
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **column** | **Integer** |  | [optional] |
+| **line** | **Integer** |  | [optional] |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::OplSourcePosition.new(
+  column: null,
+  line: null
+)
+```
+

data/docs/OplValidateResult.md

@@ -0,0 +1,18 @@
+# OryClient::OplValidateResult
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **errors** | [**Array<OplParseError>**](OplParseError.md) |  | [optional] |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::OplValidateResult.new(
+  errors: null
+)
+```
+

data/docs/PatchIdentitiesBody.md

@@ -5,6 +5,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **identities** | [**Array<IdentityPatch>**](IdentityPatch.md) | Identities holds the list of patches to apply  required | [optional] |
+| **with_partial_inserts** | **Boolean** | WithPartialInserts controls how the batch handles an identity that conflicts with one that already exists.  When true (the default), every identity is applied on its own: the ones that do not conflict are created, and the response reports the conflicting ones individually.  When false, the batch is written in one transaction and is all-or-nothing. A single conflict fails the whole request with 409 Conflict and no identity is created, but the import is considerably faster. | [optional] |
 
 ## Example
 
@@ -12,7 +13,8 @@
 require 'ory-client'
 
 instance = OryClient::PatchIdentitiesBody.new(
-  identities: null
+  identities: null,
+  with_partial_inserts: null
 )
 ```
 

data/docs/PatchWorkspaceContactBody.md

@@ -0,0 +1,26 @@
+# OryClient::PatchWorkspaceContactBody
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **business** | **Boolean** |  | [optional] |
+| **privacy** | **Boolean** |  | [optional] |
+| **recipient** | [**WorkspaceContactRecipientInput**](WorkspaceContactRecipientInput.md) |  | [optional] |
+| **security** | **Boolean** |  | [optional] |
+| **technical** | **Boolean** |  | [optional] |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::PatchWorkspaceContactBody.new(
+  business: null,
+  privacy: null,
+  recipient: null,
+  security: null,
+  technical: null
+)
+```
+

data/docs/ProjectApi.md

@@ -13,7 +13,7 @@ All URIs are relative to *https://playground.projects.oryapis.com*
 | [**delete_project_api_key**](ProjectApi.md#delete_project_api_key) | **DELETE** /projects/{project}/tokens/{token_id} | Delete project API key |
 | [**get_organization**](ProjectApi.md#get_organization) | **GET** /projects/{project_id}/organizations/{organization_id} | Get Enterprise SSO Organization by ID |
 | [**get_organization_onboarding_portal_links**](ProjectApi.md#get_organization_onboarding_portal_links) | **GET** /projects/{project_id}/organizations/{organization_id}/onboarding-portal-links | Get the organization onboarding portal links |
-| [**get_project**](ProjectApi.md#get_project) | **GET** /projects/{project_id} | Get a Project |
+| [**get_project**](ProjectApi.md#get_project) | **GET** /projects/{project_id} | Get an Ory Network Project Configuration |
 | [**get_project_members**](ProjectApi.md#get_project_members) | **GET** /projects/{project}/members | Get all members associated with this project |
 | [**list_organizations**](ProjectApi.md#list_organizations) | **GET** /projects/{project_id}/organizations | List all Enterprise SSO organizations |
 | [**list_project_api_keys**](ProjectApi.md#list_project_api_keys) | **GET** /projects/{project}/tokens | List a project's API keys |
@@ -25,6 +25,7 @@ All URIs are relative to *https://playground.projects.oryapis.com*
 | [**set_project**](ProjectApi.md#set_project) | **PUT** /projects/{project_id} | Update an Ory Network Project Configuration |
 | [**update_organization**](ProjectApi.md#update_organization) | **PUT** /projects/{project_id}/organizations/{organization_id} | Update an Enterprise SSO Organization |
 | [**update_organization_onboarding_portal_link**](ProjectApi.md#update_organization_onboarding_portal_link) | **POST** /projects/{project_id}/organizations/{organization_id}/onboarding-portal-links/{onboarding_portal_link_id} | Update organization onboarding portal link |
+| [**validate_opl**](ProjectApi.md#validate_opl) | **POST** /projects/{project_id}/opl/validate | Validate an Ory Permission Language document |
 
 
 ## create_organization
@@ -677,9 +678,9 @@ end
 
 > <Project> get_project(project_id)
 
-Get a Project
+Get an Ory Network Project Configuration
 
-Get a project you have access to by its ID.
+Returns the project rendered into the configuration format the open source projects use (e.g. Ory Kratos for Identity, Ory Keto for Permissions), including the values Ory fills in for the project, such as the resolved base URLs.  The rendered configuration does not carry the operational configuration items (e.g. port, tracing, logging) available in the open source.
 
 ### Examples
 
@@ -696,7 +697,7 @@ api_instance = OryClient::ProjectApi.new
 project_id = 'project_id_example' # String | Project ID  The project's ID.
 
 begin
-  # Get a Project
+  # Get an Ory Network Project Configuration
   result = api_instance.get_project(project_id)
   p result
 rescue OryClient::ApiError => e
@@ -712,7 +713,7 @@ This returns an Array which contains the response data, status code and headers.
 
 ```ruby
 begin
-  # Get a Project
+  # Get an Ory Network Project Configuration
   data, status_code, headers = api_instance.get_project_with_http_info(project_id)
   p status_code # => 2xx
   p headers # => { ... }
@@ -1533,3 +1534,76 @@ end
 - **Content-Type**: application/json
 - **Accept**: application/json
 
+
+## validate_opl
+
+> <OplValidateResult> validate_opl(project_id, opts)
+
+Validate an Ory Permission Language document
+
+Parses an OPL document using the same product limits and subscription entitlements applied when the project's configuration is saved.
+
+### Examples
+
+```ruby
+require 'time'
+require 'ory-client'
+# setup authorization
+OryClient.configure do |config|
+  # Configure Bearer authorization: oryWorkspaceApiKey
+  config.access_token = 'YOUR_BEARER_TOKEN'
+end
+
+api_instance = OryClient::ProjectApi.new
+project_id = 'project_id_example' # String | The project's ID.
+opts = {
+  body: 'body_example' # String | 
+}
+
+begin
+  # Validate an Ory Permission Language document
+  result = api_instance.validate_opl(project_id, opts)
+  p result
+rescue OryClient::ApiError => e
+  puts "Error when calling ProjectApi->validate_opl: #{e}"
+end
+```
+
+#### Using the validate_opl_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<OplValidateResult>, Integer, Hash)> validate_opl_with_http_info(project_id, opts)
+
+```ruby
+begin
+  # Validate an Ory Permission Language document
+  data, status_code, headers = api_instance.validate_opl_with_http_info(project_id, opts)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <OplValidateResult>
+rescue OryClient::ApiError => e
+  puts "Error when calling ProjectApi->validate_opl_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **project_id** | **String** | The project&#39;s ID. |  |
+| **body** | **String** |  | [optional] |
+
+### Return type
+
+[**OplValidateResult**](OplValidateResult.md)
+
+### Authorization
+
+[oryWorkspaceApiKey](../README.md#oryWorkspaceApiKey)
+
+### HTTP request headers
+
+- **Content-Type**: text/plain
+- **Accept**: application/json
+

data/docs/Provider.md

@@ -10,7 +10,7 @@
 | **fields** | **Array<String>** | Array of strings that specifies the user information (\"name\", \" email\", \"picture\") that RP needs IdP to share with them.  Note: Field API is supported by Chrome 132 and later. | [optional] |
 | **login_hint** | **String** | By specifying one of login_hints values provided by the accounts endpoints, the FedCM dialog selectively shows the specified account. | [optional] |
 | **nonce** | **String** | A random string to ensure the response is issued for this specific request. Prevents replay attacks. | [optional] |
-| **parameters** | **Hash<String, String>** | Custom object that allows to specify additional key-value parameters: scope: A string value containing additional permissions that RP needs to request, for example \" drive.readonly calendar.readonly\" nonce: A random string to ensure the response is issued for this specific request. Prevents replay attacks.  Other custom key-value parameters.  Note: parameters is supported from Chrome 132. | [optional] |
+| **parameters** | **Hash<String, String>** | Custom object that allows to specify additional key-value parameters: - scope: A string value containing additional permissions that RP needs to request, for example \" drive.readonly calendar.readonly\" - nonce: A random string to ensure the response is issued for this specific request. Prevents replay attacks.  Other custom key-value parameters.  Note: parameters is supported from Chrome 132. | [optional] |
 
 ## Example
 

data/docs/QuotaUsage.md

@@ -6,7 +6,7 @@
 | ---- | ---- | ----------- | ----- |
 | **additional_price** | **String** | The additional price per unit in cents. |  |
 | **can_use_more** | **Boolean** |  |  |
-| **feature** | **String** |  production_projects ProductionProjects staging_projects StagingProjects development_projects DevelopmentProjects daily_active_users DailyActiveUsers custom_domains CustomDomains event_streams EventStreams event_stream_events EventStreamEvents sla SLA collaborator_seats CollaboratorSeats edge_cache EdgeCache branding_themes BrandingThemes zendesk_support ZendeskSupport zendesk_support_on_call ZendeskSupportOnCall project_metrics ProjectMetrics project_metrics_time_window ProjectMetricsTimeWindow project_metrics_events_history ProjectMetricsEventsHistory organizations Organizations rop_grant ResourceOwnerPasswordGrant concierge_onboarding ConciergeOnboarding credit Credit data_location_global DataLocationGlobal data_location_us DataLocationUS data_location_asiane DataLocationAsiaNorthEast m2m_token_issuance M2MTokenIssuance permission_checks PermissionChecks captcha Captcha captcha_byo CaptchaBYO hide_ory_branding HideOryBranding identity_search_api IdentitySearchAPI saml_sp SAMLSP saml_idp SAMLIDP auto_link_policy AutoLinkPolicy scim_clients SCIMClients default_smtp_email_customization DefaultSMTPEmailCustomization onboarding_portal OnboardingPortal console_organization_sso ConsoleOrganizationSSO talos_api_keys TalosAPIKeys talos_rate_limit TalosRateLimit talos_cache TalosCache graceful_refresh_token_count GracefulRefreshTokenCount hydra_token_prefix HydraTokenPrefix hydra_device_authorization HydraDeviceAuthorization deviceauthn Deviceauthn allow_insecure_origins AllowInsecureOrigins  AllowInsecureOrigins grandfathers a project past strict wildcard  enforcement (CORS origins + return URLs). Override-only; never sold. update_self_service_registration_rate_limit_tier RateLimitTierUpdateSelfServiceRegistration  Self-service rate limits update_self_service_recovery_rate_limit_tier RateLimitTierUpdateSelfServiceRecovery update_self_service_settings_rate_limit_tier RateLimitTierUpdateSelfServiceSettings update_self_service_verification_rate_limit_tier RateLimitTierUpdateSelfServiceVerification identities_create_rate_limit_tier RateLimitTierIdentitiesCreate identities_import_rate_limit_tier RateLimitTierIdentitiesImport fed_cm_parameters_rate_limit_tier RateLimitTierFedCMParameters data_location_regional DataLocationRegional  Required Features rate_limit_tier RateLimitTier session_rate_limit_tier RateLimitTierSessions identities_list_rate_limit_tier RateLimitTierIdentitiesList permission_checks_rate_limit_tier RateLimitTierPermissionChecks oauth2_introspect_rate_limit_tier RateLimitTierOAuth2Introspect create_recovery_admin_rate_limit_tier RateLimitTierCreateAdminRecovery scim_rate_limit_tier RateLimitTierSCIM hydra_admin_high_rate_limit_tier RateLimitTierHydraAdminHigh  Bucket-specific rate limit tiers hydra_admin_medium_rate_limit_tier RateLimitTierHydraAdminMedium hydra_admin_low_rate_limit_tier RateLimitTierHydraAdminLow hydra_public_high_rate_limit_tier RateLimitTierHydraPublicHigh hydra_public_medium_rate_limit_tier RateLimitTierHydraPublicMedium hydra_public_low_rate_limit_tier RateLimitTierHydraPublicLow keto_admin_low_rate_limit_tier RateLimitTierKetoAdminLow keto_admin_medium_rate_limit_tier RateLimitTierKetoAdminMedium keto_public_high_rate_limit_tier RateLimitTierKetoPublicHigh kratos_admin_high_rate_limit_tier RateLimitTierKratosAdminHigh kratos_admin_medium_rate_limit_tier RateLimitTierKratosAdminMedium kratos_admin_low_rate_limit_tier RateLimitTierKratosAdminLow kratos_public_high_rate_limit_tier RateLimitTierKratosPublicHigh kratos_public_medium_rate_limit_tier RateLimitTierKratosPublicMedium kratos_public_low_rate_limit_tier RateLimitTierKratosPublicLow polis_public_high_rate_limit_tier RateLimitTierPolisPublicHigh polis_public_medium_rate_limit_tier RateLimitTierPolisPublicMedium talos_admin_high_rate_limit_tier RateLimitTierTalosAdminHigh talos_admin_medium_rate_limit_tier RateLimitTierTalosAdminMedium talos_admin_low_rate_limit_tier RateLimitTierTalosAdminLow talos_public_high_rate_limit_tier RateLimitTierTalosPublicHigh talos_public_low_rate_limit_tier RateLimitTierTalosPublicLow unassigned_rate_limit_tier RateLimitTierUnassigned |  |
+| **feature** | **String** | production_projects ProductionProjects ai_assistant AIAssistant staging_projects StagingProjects development_projects DevelopmentProjects daily_active_users DailyActiveUsers custom_domains CustomDomains event_streams EventStreams event_stream_events EventStreamEvents sla SLA collaborator_seats CollaboratorSeats edge_cache EdgeCache branding_themes BrandingThemes zendesk_support ZendeskSupport zendesk_support_on_call ZendeskSupportOnCall project_metrics ProjectMetrics project_metrics_time_window ProjectMetricsTimeWindow project_metrics_events_history ProjectMetricsEventsHistory organizations Organizations rop_grant ResourceOwnerPasswordGrant concierge_onboarding ConciergeOnboarding credit Credit data_location_global DataLocationGlobal data_location_us DataLocationUS data_location_asiane DataLocationAsiaNorthEast m2m_token_issuance M2MTokenIssuance permission_checks PermissionChecks captcha Captcha captcha_byo CaptchaBYO hide_ory_branding HideOryBranding identity_search_api IdentitySearchAPI saml_sp SAMLSP saml_idp SAMLIDP auto_link_policy AutoLinkPolicy scim_clients SCIMClients default_smtp_email_customization DefaultSMTPEmailCustomization onboarding_portal OnboardingPortal console_organization_sso ConsoleOrganizationSSO talos_api_keys TalosAPIKeys talos_rate_limit TalosRateLimit talos_cache TalosCache graceful_refresh_token_count GracefulRefreshTokenCount hydra_token_prefix HydraTokenPrefix hydra_device_authorization HydraDeviceAuthorization kratos_oidc_front_channel_logout KratosOIDCFrontChannelLogout deviceauthn Deviceauthn keto_allow_opl_permit_relation_collision KetoAllowOPLPermitRelationCollision exempts a subscription from rejecting OPL  that declares the same name as both a relation and a permit. keto_allow_opl_traverse_subject_set KetoAllowOPLTraverseSubjectSet exempts a subscription from rejecting OPL  that traverses a relation declared as a subject set. Override-only, for  legacy configurations; see the OPL reference for the supported shape. allow_insecure_origins AllowInsecureOrigins grandfathers a project past strict wildcard  enforcement (CORS origins + return URLs). Override-only; never sold. update_self_service_registration_rate_limit_tier RateLimitTierUpdateSelfServiceRegistration  Self-service rate limits update_self_service_recovery_rate_limit_tier RateLimitTierUpdateSelfServiceRecovery update_self_service_settings_rate_limit_tier RateLimitTierUpdateSelfServiceSettings update_self_service_verification_rate_limit_tier RateLimitTierUpdateSelfServiceVerification identities_create_rate_limit_tier RateLimitTierIdentitiesCreate identities_import_rate_limit_tier RateLimitTierIdentitiesImport fed_cm_parameters_rate_limit_tier RateLimitTierFedCMParameters data_location_regional DataLocationRegional  Required Features rate_limit_tier RateLimitTier session_rate_limit_tier RateLimitTierSessions identities_list_rate_limit_tier RateLimitTierIdentitiesList permission_checks_rate_limit_tier RateLimitTierPermissionChecks oauth2_introspect_rate_limit_tier RateLimitTierOAuth2Introspect create_recovery_admin_rate_limit_tier RateLimitTierCreateAdminRecovery scim_rate_limit_tier RateLimitTierSCIM hydra_admin_high_rate_limit_tier RateLimitTierHydraAdminHigh  Bucket-specific rate limit tiers hydra_admin_medium_rate_limit_tier RateLimitTierHydraAdminMedium hydra_admin_low_rate_limit_tier RateLimitTierHydraAdminLow hydra_public_high_rate_limit_tier RateLimitTierHydraPublicHigh hydra_public_medium_rate_limit_tier RateLimitTierHydraPublicMedium hydra_public_low_rate_limit_tier RateLimitTierHydraPublicLow keto_admin_low_rate_limit_tier RateLimitTierKetoAdminLow keto_admin_medium_rate_limit_tier RateLimitTierKetoAdminMedium keto_public_high_rate_limit_tier RateLimitTierKetoPublicHigh kratos_admin_high_rate_limit_tier RateLimitTierKratosAdminHigh kratos_admin_medium_rate_limit_tier RateLimitTierKratosAdminMedium kratos_admin_low_rate_limit_tier RateLimitTierKratosAdminLow kratos_public_high_rate_limit_tier RateLimitTierKratosPublicHigh kratos_public_medium_rate_limit_tier RateLimitTierKratosPublicMedium kratos_public_low_rate_limit_tier RateLimitTierKratosPublicLow polis_public_high_rate_limit_tier RateLimitTierPolisPublicHigh polis_public_medium_rate_limit_tier RateLimitTierPolisPublicMedium talos_admin_high_rate_limit_tier RateLimitTierTalosAdminHigh talos_admin_medium_rate_limit_tier RateLimitTierTalosAdminMedium talos_admin_low_rate_limit_tier RateLimitTierTalosAdminLow talos_public_high_rate_limit_tier RateLimitTierTalosPublicHigh talos_public_low_rate_limit_tier RateLimitTierTalosPublicLow unassigned_rate_limit_tier RateLimitTierUnassigned |  |
 | **feature_available** | **Boolean** |  |  |
 | **included** | **Integer** |  |  |
 | **is_unlimited** | **Boolean** |  |  |

data/docs/RateLimitPolicy.md

@@ -5,8 +5,8 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **quota** | **String** | quota is the number of requests allowed per window. | [optional] |
-| **unit** | **String** |  | [optional] |
-| **window** | **String** | window is the time window for the quota. Common values: 60s (1 minute), 3600s (1 hour), 86400s (1 day). | [optional] |
+| **unit** | **String** | unit must be \"requests\" when specified. If omitted, it defaults to \"requests\". All other values are rejected. | [optional] |
+| **window** | **String** | window is the time window for the quota. Common values: 60s (1 minute), 3600s (1 hour), 86400s (1 day). Fractional-second values are rejected. | [optional] |
 
 ## Example
 

data/docs/RecoveryFlow.md

@@ -11,7 +11,7 @@
 | **issued_at** | **Time** | IssuedAt is the time (UTC) when the request occurred. |  |
 | **request_url** | **String** | RequestURL is the initial URL that was requested from Ory Kratos. It can be used to forward information contained in the URL's path or query for example. |  |
 | **return_to** | **String** | ReturnTo contains the requested return_to URL. | [optional] |
-| **state** | **Object** | State represents the state of this request:  choose_method: ask the user to choose a method (e.g. recover account via email) sent_email: the email has been sent to the user passed_challenge: the request was successful and the recovery challenge was passed. |  |
+| **state** | [**RecoveryFlowState**](RecoveryFlowState.md) |  |  |
 | **transient_payload** | **Object** | TransientPayload is used to pass data from the recovery flow to hooks and email templates | [optional] |
 | **type** | **String** | The flow type can either be `api` or `browser`. |  |
 | **ui** | [**UiContainer**](UiContainer.md) |  |  |

data/docs/RegistrationFlow.md

@@ -4,7 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **active** | **String** | Active, if set, contains the registration method that is being used. It is initially not set. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile saml CredentialsTypeSAML deviceauthn CredentialsTypeDeviceAuthn identifier_first CredentialsTypeIdentifierFirst link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode | [optional] |
+| **active** | **String** | Active, if set, contains the registration method that is being used. It is initially not set. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile saml CredentialsTypeSAML deviceauthn CredentialsTypeDeviceAuthn identifier_first CredentialsTypeIdentifierFirst link_recovery CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode | [optional] |
 | **expires_at** | **Time** | ExpiresAt is the time (UTC) when the flow expires. If the user still wishes to log in, a new flow has to be initiated. |  |
 | **id** | **String** | ID represents the flow's unique ID. When performing the registration flow, this represents the id in the registration ui's query parameter: http://<selfservice.flows.registration.ui_url>/?flow=<id> |  |
 | **identity_schema** | **String** | IdentitySchema optionally holds the ID of the identity schema that is used for this flow. This value can be set by the user when creating the flow and should be retained when the flow is saved or converted to another flow. | [optional] |
@@ -15,7 +15,7 @@
 | **request_url** | **String** | RequestURL is the initial URL that was requested from Ory Kratos. It can be used to forward information contained in the URL's path or query for example. |  |
 | **return_to** | **String** | ReturnTo contains the requested return_to URL. | [optional] |
 | **session_token_exchange_code** | **String** | SessionTokenExchangeCode holds the secret code that the client can use to retrieve a session token after the flow has been completed. This is only set if the client has requested a session token exchange code, and if the flow is of type \"api\", and only on creating the flow. | [optional] |
-| **state** | **Object** | State represents the state of this request:  choose_method: ask the user to choose a method (e.g. registration with email) sent_email: the email has been sent to the user passed_challenge: the request was successful and the registration challenge was passed. |  |
+| **state** | [**RegistrationFlowState**](RegistrationFlowState.md) |  |  |
 | **transient_payload** | **Object** | TransientPayload is used to pass data from the registration to a webhook | [optional] |
 | **type** | **String** | The flow type can either be `api` or `browser`. |  |
 | **ui** | [**UiContainer**](UiContainer.md) |  |  |

data/docs/RotateOAuth2ClientSecretBody.md

@@ -0,0 +1,18 @@
+# OryClient::RotateOAuth2ClientSecretBody
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **client_secret** | **String** | The new client secret. Must be at least 6 bytes.  If omitted, the server generates a cryptographically random secret. Supply a value only when the secret has to match one already issued elsewhere, such as when replicating a client into a second environment. | [optional] |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::RotateOAuth2ClientSecretBody.new(
+  client_secret: null
+)
+```
+

data/docs/SessionAuthenticationMethod.md

@@ -5,8 +5,9 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **aal** | [**AuthenticatorAssuranceLevel**](AuthenticatorAssuranceLevel.md) |  | [optional] |
+| **channel** | **String** |  | [optional] |
 | **completed_at** | **Time** | When the authentication challenge was completed. | [optional] |
-| **method** | **String** | The method used in this authenticator. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile saml CredentialsTypeSAML deviceauthn CredentialsTypeDeviceAuthn identifier_first CredentialsTypeIdentifierFirst link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode | [optional] |
+| **method** | **String** | The method used in this authenticator. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile saml CredentialsTypeSAML deviceauthn CredentialsTypeDeviceAuthn identifier_first CredentialsTypeIdentifierFirst link_recovery CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode | [optional] |
 | **organization** | **String** | The Organization id used for authentication | [optional] |
 | **provider** | **String** | OIDC or SAML provider id used for authentication | [optional] |
 | **upstream_acr** | **String** | UpstreamACR is the `acr` claim reported by the upstream OIDC provider, if any. Populated only for OIDC login methods when the upstream ID token contained an `acr` claim. | [optional] |
@@ -19,6 +20,7 @@ require 'ory-client'
 
 instance = OryClient::SessionAuthenticationMethod.new(
   aal: null,
+  channel: null,
   completed_at: null,
   method: null,
   organization: null,

data/docs/SettingsFlow.md

@@ -13,7 +13,7 @@
 | **organization_id** | **String** |  | [optional] |
 | **request_url** | **String** | RequestURL is the initial URL that was requested from Ory Kratos. It can be used to forward information contained in the URL's path or query for example. |  |
 | **return_to** | **String** | ReturnTo contains the requested return_to URL. | [optional] |
-| **state** | **Object** | State represents the state of this flow. It knows two states:  show_form: No user data has been collected, or it is invalid, and thus the form should be shown. success: Indicates that the settings flow has been updated successfully with the provided data. Done will stay true when repeatedly checking. If set to true, done will revert back to false only when a flow with invalid (e.g. \"please use a valid phone number\") data was sent. |  |
+| **state** | [**SettingsFlowState**](SettingsFlowState.md) |  |  |
 | **transient_payload** | **Object** | TransientPayload is used to pass data from the settings flow to hooks and email templates | [optional] |
 | **type** | **String** | The flow type can either be `api` or `browser`. |  |
 | **ui** | [**UiContainer**](UiContainer.md) |  |  |

data/docs/TokenPaginationHeaders.md

@@ -4,8 +4,8 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **link** | **String** | The link header contains pagination links.  For details on pagination please head over to the [pagination documentation](https://www.ory.com/docs/ecosystem/api-design#pagination).  in: header | [optional] |
-| **x_total_count** | **String** | The total number of clients.  in: header | [optional] |
+| **link** | **String** | The link header contains pagination links.  For details on pagination please head over to the [pagination documentation](https://www.ory.com/docs/ecosystem/api-design#pagination). | [optional] |
+| **x_total_count** | **String** | The total number of clients. | [optional] |
 
 ## Example
 

data/docs/TokenPaginationResponseHeaders.md

@@ -4,7 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **link** | **String** | The Link HTTP Header  The `Link` header contains a comma-delimited list of links to the following pages:  first: The first page of results. next: The next page of results. prev: The previous page of results. last: The last page of results.  Pages are omitted if they do not exist. For example, if there is no next page, the `next` link is omitted. Examples:  </clients?page_size=5&page_token=0>; rel=\"first\",</clients?page_size=5&page_token=15>; rel=\"next\",</clients?page_size=5&page_token=5>; rel=\"prev\",</clients?page_size=5&page_token=20>; rel=\"last\" | [optional] |
+| **link** | **String** | The Link HTTP Header  The `Link` header contains a comma-delimited list of links to the following pages:  - first: The first page of results. - next: The next page of results. - prev: The previous page of results. - last: The last page of results.  Pages are omitted if they do not exist. For example, if there is no next page, the `next` link is omitted. Examples:  </clients?page_size=5&page_token=0>; rel=\"first\",</clients?page_size=5&page_token=15>; rel=\"next\",</clients?page_size=5&page_token=5>; rel=\"prev\",</clients?page_size=5&page_token=20>; rel=\"last\" | [optional] |
 | **x_total_count** | **Integer** | The X-Total-Count HTTP Header  The `X-Total-Count` header contains the total number of items in the collection. | [optional] |
 
 ## Example

data/docs/UpdateLoginFlowWithOidcMethod.md

@@ -5,13 +5,13 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **csrf_token** | **String** | The CSRF Token | [optional] |
-| **id_token** | **String** | IDToken is an optional id token provided by an OIDC provider  If submitted, it is verified using the OIDC provider's public key set and the claims are used to populate the OIDC credentials of the identity. If the OIDC provider does not store additional claims (such as name, etc.) in the IDToken itself, you can use the `traits` field to populate the identity's traits. Note, that Apple only includes the users email in the IDToken.  Supported providers are Apple Google | [optional] |
+| **id_token** | **String** | IDToken is an optional id token provided by an OIDC provider  If submitted, it is verified using the OIDC provider's public key set and the claims are used to populate the OIDC credentials of the identity. If the OIDC provider does not store additional claims (such as name, etc.) in the IDToken itself, you can use the `traits` field to populate the identity's traits. Note, that Apple only includes the users email in the IDToken.  Supported providers are - Apple - Google | [optional] |
 | **id_token_nonce** | **String** | IDTokenNonce is the nonce, used when generating the IDToken. If the provider supports nonce validation, the nonce will be validated against this value and required. | [optional] |
 | **method** | **String** | Method to use  This field must be set to `oidc` when using the oidc method. |  |
 | **provider** | **String** | The provider to register with |  |
 | **traits** | **Object** | The identity traits. This is a placeholder for the registration flow. | [optional] |
 | **transient_payload** | **Object** | Transient data to pass along to any webhooks | [optional] |
-| **upstream_parameters** | **Object** | UpstreamParameters are the parameters that are passed to the upstream identity provider.  These parameters are optional and depend on what the upstream identity provider supports. Supported parameters are: `hd` (string): The `hd` parameter limits the login/registration process to a Google Organization, e.g. `mycollege.edu`. `prompt` (string): The `prompt` specifies whether the Authorization Server prompts the End-User for reauthentication and consent, e.g. `select_account`. `acr_values` (string): The `acr_values` specifies the Authentication Context Class Reference values for the authorization request. | [optional] |
+| **upstream_parameters** | **Object** | UpstreamParameters are the parameters that are passed to the upstream identity provider.  These parameters are optional and depend on what the upstream identity provider supports. Supported parameters are: - `hd` (string): The `hd` parameter limits the login/registration process to a Google Organization, e.g. `mycollege.edu`. - `prompt` (string): The `prompt` specifies whether the Authorization Server prompts the End-User for reauthentication and consent, e.g. `select_account`. - `acr_values` (string): The `acr_values` specifies the Authentication Context Class Reference values for the authorization request. | [optional] |
 
 ## Example
 

data/docs/UpdateRegistrationFlowWithOidcMethod.md

@@ -5,13 +5,13 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **csrf_token** | **String** | The CSRF Token | [optional] |
-| **id_token** | **String** | IDToken is an optional id token provided by an OIDC provider  If submitted, it is verified using the OIDC provider's public key set and the claims are used to populate the OIDC credentials of the identity. If the OIDC provider does not store additional claims (such as name, etc.) in the IDToken itself, you can use the `traits` field to populate the identity's traits. Note, that Apple only includes the users email in the IDToken.  Supported providers are Apple Google | [optional] |
+| **id_token** | **String** | IDToken is an optional id token provided by an OIDC provider  If submitted, it is verified using the OIDC provider's public key set and the claims are used to populate the OIDC credentials of the identity. If the OIDC provider does not store additional claims (such as name, etc.) in the IDToken itself, you can use the `traits` field to populate the identity's traits. Note, that Apple only includes the users email in the IDToken.  Supported providers are - Apple - Google | [optional] |
 | **id_token_nonce** | **String** | IDTokenNonce is the nonce, used when generating the IDToken. If the provider supports nonce validation, the nonce will be validated against this value and is required. | [optional] |
 | **method** | **String** | Method to use  This field must be set to `oidc` when using the oidc method. |  |
 | **provider** | **String** | The provider to register with |  |
 | **traits** | **Object** | The identity traits | [optional] |
 | **transient_payload** | **Object** | Transient data to pass along to any webhooks | [optional] |
-| **upstream_parameters** | **Object** | UpstreamParameters are the parameters that are passed to the upstream identity provider.  These parameters are optional and depend on what the upstream identity provider supports. Supported parameters are: `hd` (string): The `hd` parameter limits the login/registration process to a Google Organization, e.g. `mycollege.edu`. `prompt` (string): The `prompt` specifies whether the Authorization Server prompts the End-User for reauthentication and consent, e.g. `select_account`. `acr_values` (string): The `acr_values` specifies the Authentication Context Class Reference values for the authorization request. | [optional] |
+| **upstream_parameters** | **Object** | UpstreamParameters are the parameters that are passed to the upstream identity provider.  These parameters are optional and depend on what the upstream identity provider supports. Supported parameters are: - `hd` (string): The `hd` parameter limits the login/registration process to a Google Organization, e.g. `mycollege.edu`. - `prompt` (string): The `prompt` specifies whether the Authorization Server prompts the End-User for reauthentication and consent, e.g. `select_account`. - `acr_values` (string): The `acr_values` specifies the Authentication Context Class Reference values for the authorization request. | [optional] |
 
 ## Example
 

data/docs/UpdateSettingsFlowWithOidcMethod.md

@@ -4,13 +4,14 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **flow** | **String** | Flow ID is the flow's ID.  in: query | [optional] |
-| **link** | **String** | Link this provider  Either this or `unlink` must be set.  type: string in: body | [optional] |
+| **csrf_token** | **String** | The CSRF Token | [optional] |
+| **flow** | **String** | Flow ID is the flow's ID. | [optional] |
+| **link** | **String** | Link this provider  Either this or `unlink` must be set.  type: string | [optional] |
 | **method** | **String** | Method  Should be set to profile when trying to update a profile. |  |
-| **traits** | **Object** | The identity's traits  in: body | [optional] |
+| **traits** | **Object** | The identity's traits | [optional] |
 | **transient_payload** | **Object** | Transient data to pass along to any webhooks | [optional] |
-| **unlink** | **String** | Unlink this provider  Either this or `link` must be set.  type: string in: body | [optional] |
-| **upstream_parameters** | **Object** | UpstreamParameters are the parameters that are passed to the upstream identity provider.  These parameters are optional and depend on what the upstream identity provider supports. Supported parameters are: `hd` (string): The `hd` parameter limits the login/registration process to a Google Organization, e.g. `mycollege.edu`. `prompt` (string): The `prompt` specifies whether the Authorization Server prompts the End-User for reauthentication and consent, e.g. `select_account`. `acr_values` (string): The `acr_values` specifies the Authentication Context Class Reference values for the authorization request. | [optional] |
+| **unlink** | **String** | Unlink this provider  Either this or `link` must be set.  type: string | [optional] |
+| **upstream_parameters** | **Object** | UpstreamParameters are the parameters that are passed to the upstream identity provider.  These parameters are optional and depend on what the upstream identity provider supports. Supported parameters are: - `hd` (string): The `hd` parameter limits the login/registration process to a Google Organization, e.g. `mycollege.edu`. - `prompt` (string): The `prompt` specifies whether the Authorization Server prompts the End-User for reauthentication and consent, e.g. `select_account`. - `acr_values` (string): The `acr_values` specifies the Authentication Context Class Reference values for the authorization request. | [optional] |
 
 ## Example
 
@@ -18,6 +19,7 @@
 require 'ory-client'
 
 instance = OryClient::UpdateSettingsFlowWithOidcMethod.new(
+  csrf_token: null,
   flow: null,
   link: null,
   method: null,

data/docs/UpdateSettingsFlowWithSamlMethod.md

@@ -5,12 +5,12 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **csrf_token** | **String** | The CSRF Token | [optional] |
-| **flow** | **String** | Flow ID is the flow's ID.  in: query | [optional] |
-| **link** | **String** | Link this provider  Either this or `unlink` must be set.  type: string in: body | [optional] |
+| **flow** | **String** | Flow ID is the flow's ID. | [optional] |
+| **link** | **String** | Link this provider  Either this or `unlink` must be set.  type: string | [optional] |
 | **method** | **String** | Method  Should be set to saml when trying to update a profile. |  |
-| **traits** | **Object** | The identity's traits  in: body | [optional] |
+| **traits** | **Object** | The identity's traits | [optional] |
 | **transient_payload** | **Object** | Transient data to pass along to any webhooks | [optional] |
-| **unlink** | **String** | Unlink this provider  Either this or `link` must be set.  type: string in: body | [optional] |
+| **unlink** | **String** | Unlink this provider  Either this or `link` must be set.  type: string | [optional] |
 
 ## Example
 

data/docs/UpdateSubscriptionBody.md

@@ -4,7 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **interval** | **String** |  monthly Monthly yearly Yearly |  |
+| **interval** | **String** | monthly Monthly yearly Yearly |  |
 | **plan** | **String** |  |  |
 | **return_to** | **String** |  | [optional] |
 

data/docs/VerificationFlow.md

@@ -10,7 +10,7 @@
 | **issued_at** | **Time** | IssuedAt is the time (UTC) when the request occurred. | [optional] |
 | **request_url** | **String** | RequestURL is the initial URL that was requested from Ory Kratos. It can be used to forward information contained in the URL's path or query for example. | [optional] |
 | **return_to** | **String** | ReturnTo contains the requested return_to URL. | [optional] |
-| **state** | **Object** | State represents the state of this request:  choose_method: ask the user to choose a method (e.g. verify your email) sent_email: the email has been sent to the user passed_challenge: the request was successful and the verification challenge was passed. |  |
+| **state** | [**VerificationFlowState**](VerificationFlowState.md) |  |  |
 | **transient_payload** | **Object** | TransientPayload is used to pass data from the verification flow to hooks and email templates | [optional] |
 | **type** | **String** | The flow type can either be `api` or `browser`. |  |
 | **ui** | [**UiContainer**](UiContainer.md) |  |  |

data/docs/WebAuthnRelatedOrigins.md

@@ -0,0 +1,18 @@
+# OryClient::WebAuthnRelatedOrigins
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **origins** | **Array<String>** | The related web origins. |  |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::WebAuthnRelatedOrigins.new(
+  origins: null
+)
+```
+