ory-client 1.6.1 → 1.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 60189a51ef456efd7d73aa196abce8dd816dba265e0777c8587ec089443b9cf3
-  data.tar.gz: 11002c3ce4a043ec83e7abeac98a4a38fdd28b1fa788e14a0f595911c07c5486
+  metadata.gz: 659d54c7cf50f14895f15f9e918ffa686631a2ba7749365acb58487a0b911567
+  data.tar.gz: 58c450d855cadf07db1e0025c722a140c4a23ea9c7f198ac4810db3565e2b313
 SHA512:
-  metadata.gz: 518a7831cfa5f26b9a5e7b6a10a52c64c5ee03ac4dc93aa4c88b5245fc5722651068ebf7ad2fbcd70a5644e66a64532bdd7e1591b27bb94852b6b568f17680bf
-  data.tar.gz: 4bf2af1a68e288f6fe87f32d940e3cabdc153fc6cf1e9ef5242fceb6ed7cb552b45b651bd22ccb3c520a5afdd10f27b4498b80fa48f4bc61257dc2dac9776971
+  metadata.gz: 515e385029bb00452cb44660791c4a2835db9c5f43c37d136dd7f3ec11da2f8349a81449ba9a445ca7a5b49d6293238fa7a23fadcac9d5dcc175e8bddc8b72b7
+  data.tar.gz: 53d465496bec5209ed80d1e5e05931498d147ed99f50d4e54841771a103593d66be3a9b90211384c6d888f8cff46b6dbc9e9ef65b741a98b0568b524dab5e5ab

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    ory-client (1.6.1)
+    ory-client (1.8.0)
       typhoeus (~> 1.0, >= 1.0.1)
 
 GEM
@@ -20,12 +20,12 @@ GEM
     parser (3.3.0.5)
       ast (~> 2.4.1)
       racc
-    pry (0.13.1)
+    pry (0.14.2)
       coderay (~> 1.1)
       method_source (~> 1.0)
-    pry-byebug (3.9.0)
+    pry-byebug (3.10.1)
       byebug (~> 11.0)
-      pry (~> 0.13.0)
+      pry (>= 0.13, < 0.15)
     psych (4.0.6)
       stringio
     racc (1.7.3)
@@ -43,7 +43,7 @@ GEM
     rspec-mocks (3.13.0)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.13.0)
-    rspec-support (3.13.0)
+    rspec-support (3.13.1)
     rubocop (0.66.0)
       jaro_winkler (~> 1.5.1)
       parallel (~> 1.10)
@@ -53,7 +53,7 @@ GEM
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 1.4.0, < 1.6)
     ruby-progressbar (1.13.0)
-    stringio (3.0.6)
+    stringio (3.1.0)
     typhoeus (1.4.1)
       ethon (>= 0.9.0)
     unicode-display_width (1.5.0)

data/README.md

@@ -8,8 +8,8 @@ with a valid Personal Access Token. Public APIs are mostly used in browsers.
 
 This SDK is automatically generated by the [OpenAPI Generator](https://openapi-generator.tech) project:
 
-- API version: v1.6.1
-- Package version: v1.6.1
+- API version: v1.8.0
+- Package version: v1.8.0
 - Build package: org.openapitools.codegen.languages.RubyClientCodegen
 
 ## Installation
@@ -25,16 +25,16 @@ gem build ory-client.gemspec
 Then either install the gem locally:
 
 ```shell
-gem install ./ory-client-v1.6.1.gem
+gem install ./ory-client-v1.8.0.gem
 ```
 
-(for development, run `gem install --dev ./ory-client-v1.6.1.gem` to install the development dependencies)
+(for development, run `gem install --dev ./ory-client-v1.8.0.gem` to install the development dependencies)
 
 or publish the gem to a gem hosting service, e.g. [RubyGems](https://rubygems.org/).
 
 Finally add this to the Gemfile:
 
-    gem 'ory-client', '~> v1.6.1'
+    gem 'ory-client', '~> v1.8.0'
 
 ### Install from Git
 
@@ -62,6 +62,8 @@ require 'ory-client'
 OryClient.configure do |config|
   # Configure Bearer authorization: oryAccessToken
   config.access_token = 'YOUR_BEARER_TOKEN'
+  # Configure a proc to get access tokens in lieu of the static access_token configuration
+  config.access_token_getter = -> { 'YOUR TOKEN GETTER PROC' } 
 end
 
 api_instance = OryClient::CourierApi.new
@@ -255,9 +257,11 @@ Class | Method | HTTP request | Description
  - [OryClient::CreateRecoveryLinkForIdentityBody](docs/CreateRecoveryLinkForIdentityBody.md)
  - [OryClient::CreateRelationshipBody](docs/CreateRelationshipBody.md)
  - [OryClient::CreateSubscriptionBody](docs/CreateSubscriptionBody.md)
+ - [OryClient::CreateSubscriptionCommon](docs/CreateSubscriptionCommon.md)
  - [OryClient::CreateVerifiableCredentialRequestBody](docs/CreateVerifiableCredentialRequestBody.md)
  - [OryClient::CreateWorkspaceMemberInviteBody](docs/CreateWorkspaceMemberInviteBody.md)
  - [OryClient::CreateWorkspacePayload](docs/CreateWorkspacePayload.md)
+ - [OryClient::CreateWorkspaceSubscriptionBody](docs/CreateWorkspaceSubscriptionBody.md)
  - [OryClient::CredentialSupportedDraft00](docs/CredentialSupportedDraft00.md)
  - [OryClient::CustomDomain](docs/CustomDomain.md)
  - [OryClient::DeleteMySessionsCount](docs/DeleteMySessionsCount.md)
@@ -306,7 +310,6 @@ Class | Method | HTTP request | Description
  - [OryClient::InternalIsAXWelcomeScreenEnabledForProjectBody](docs/InternalIsAXWelcomeScreenEnabledForProjectBody.md)
  - [OryClient::InternalIsOwnerForProjectBySlugBody](docs/InternalIsOwnerForProjectBySlugBody.md)
  - [OryClient::InternalIsOwnerForProjectBySlugResponse](docs/InternalIsOwnerForProjectBySlugResponse.md)
- - [OryClient::InternalProvisionMockSubscription](docs/InternalProvisionMockSubscription.md)
  - [OryClient::IntrospectedOAuth2Token](docs/IntrospectedOAuth2Token.md)
  - [OryClient::IsOwnerForProjectBySlug](docs/IsOwnerForProjectBySlug.md)
  - [OryClient::IsReady200Response](docs/IsReady200Response.md)
@@ -357,6 +360,7 @@ Class | Method | HTTP request | Description
  - [OryClient::ParseError](docs/ParseError.md)
  - [OryClient::PatchIdentitiesBody](docs/PatchIdentitiesBody.md)
  - [OryClient::PerformNativeLogoutBody](docs/PerformNativeLogoutBody.md)
+ - [OryClient::PermissionsOnWorkpaceResponse](docs/PermissionsOnWorkpaceResponse.md)
  - [OryClient::Plan](docs/Plan.md)
  - [OryClient::PlanDetails](docs/PlanDetails.md)
  - [OryClient::PostCheckPermissionBody](docs/PostCheckPermissionBody.md)
@@ -369,6 +373,7 @@ Class | Method | HTTP request | Description
  - [OryClient::ProjectCors](docs/ProjectCors.md)
  - [OryClient::ProjectEventsDatapoint](docs/ProjectEventsDatapoint.md)
  - [OryClient::ProjectHost](docs/ProjectHost.md)
+ - [OryClient::ProjectMember](docs/ProjectMember.md)
  - [OryClient::ProjectMetadata](docs/ProjectMetadata.md)
  - [OryClient::ProjectServiceIdentity](docs/ProjectServiceIdentity.md)
  - [OryClient::ProjectServiceOAuth2](docs/ProjectServiceOAuth2.md)
@@ -403,7 +408,6 @@ Class | Method | HTTP request | Description
  - [OryClient::SettingsFlow](docs/SettingsFlow.md)
  - [OryClient::SettingsFlowState](docs/SettingsFlowState.md)
  - [OryClient::SourcePosition](docs/SourcePosition.md)
- - [OryClient::StripeCustomer](docs/StripeCustomer.md)
  - [OryClient::SubjectSet](docs/SubjectSet.md)
  - [OryClient::Subscription](docs/Subscription.md)
  - [OryClient::SuccessfulCodeExchangeResponse](docs/SuccessfulCodeExchangeResponse.md)
@@ -454,6 +458,7 @@ Class | Method | HTTP request | Description
  - [OryClient::UpdateVerificationFlowBody](docs/UpdateVerificationFlowBody.md)
  - [OryClient::UpdateVerificationFlowWithCodeMethod](docs/UpdateVerificationFlowWithCodeMethod.md)
  - [OryClient::UpdateVerificationFlowWithLinkMethod](docs/UpdateVerificationFlowWithLinkMethod.md)
+ - [OryClient::UpdateWorkspacePayload](docs/UpdateWorkspacePayload.md)
  - [OryClient::Usage](docs/Usage.md)
  - [OryClient::VerifiableCredentialPrimingResponse](docs/VerifiableCredentialPrimingResponse.md)
  - [OryClient::VerifiableCredentialProof](docs/VerifiableCredentialProof.md)
@@ -470,6 +475,7 @@ Class | Method | HTTP request | Description
 ## Documentation for Authorization
 
 
+Authentication schemes defined for the API:
 ### basic
 
 - **Type**: HTTP basic authentication

data/docs/AcceptOAuth2ConsentRequest.md

@@ -4,6 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **context** | **Object** |  | [optional] |
 | **grant_access_token_audience** | **Array<String>** |  | [optional] |
 | **grant_scope** | **Array<String>** |  | [optional] |
 | **handled_at** | **Time** |  | [optional] |
@@ -17,6 +18,7 @@
 require 'ory-client'
 
 instance = OryClient::AcceptOAuth2ConsentRequest.new(
+  context: null,
   grant_access_token_audience: null,
   grant_scope: null,
   handled_at: null,

data/docs/CloudAccount.md

@@ -4,9 +4,9 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **email** | **String** |  | [optional] |
-| **id** | **String** |  | [optional] |
-| **name** | **String** |  | [optional] |
+| **email** | **String** |  |  |
+| **id** | **String** |  |  |
+| **name** | **String** |  |  |
 
 ## Example
 

data/docs/ContinueWith.md

@@ -51,6 +51,7 @@ OryClient::ContinueWith.openapi_discriminator_mapping
 #   :'show_settings_ui' => :'ContinueWithSettingsUi',
 #   :'show_verification_ui' => :'ContinueWithVerificationUi'
 # }
+```
 
 ### build
 

data/docs/CreateProjectBody.md

@@ -4,6 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **environment** | **String** | The environment of the project. prod Production dev Development |  |
 | **name** | **String** | The name of the project to be created |  |
 | **workspace_id** | **String** |  | [optional] |
 
@@ -13,6 +14,7 @@
 require 'ory-client'
 
 instance = OryClient::CreateProjectBody.new(
+  environment: null,
   name: null,
   workspace_id: null
 )

data/docs/CreateProjectNormalizedPayload.md

@@ -6,12 +6,15 @@
 | ---- | ---- | ----------- | ----- |
 | **created_at** | **Time** | The Project's Revision Creation Date | [optional][readonly] |
 | **disable_account_experience_welcome_screen** | **Boolean** | Whether to disable the account experience welcome screen, which is hosted under `/ui/welcome`. | [optional] |
+| **enable_ax_v2** | **Boolean** | Whether the new account experience is enabled and reachable. | [optional] |
+| **environment** | **String** |  prod Production dev Development |  |
 | **hydra_oauth2_allowed_top_level_claims** | **Array<String>** |  | [optional] |
 | **hydra_oauth2_client_credentials_default_grant_allowed_scope** | **Boolean** | Automatically grant authorized OAuth2 Scope in OAuth2 Client Credentials Flow.  Each OAuth2 Client is allowed to request a predefined OAuth2 Scope (for example `read write`). If this option is enabled, the full scope is automatically granted when performing the OAuth2 Client Credentials flow.  If disabled, the OAuth2 Client has to request the scope in the OAuth2 request by providing the `scope` query parameter.  Setting this option to true is common if you need compatibility with MITREid.  This governs the \"oauth2.client_credentials.default_grant_allowed_scope\" setting. | [optional] |
 | **hydra_oauth2_exclude_not_before_claim** | **Boolean** | Set to true if you want to exclude claim `nbf (not before)` part of access token.  This governs the \"oauth2.exclude_not_before_claim\" setting. | [optional] |
 | **hydra_oauth2_grant_jwt_iat_optional** | **Boolean** | Configures if the issued at (`iat`) claim is required in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523).  If set to `false`, the `iat` claim is required. Set this value to `true` only after careful consideration.  This governs the \"oauth2.grant.jwt.iat_optional\" setting. | [optional] |
 | **hydra_oauth2_grant_jwt_jti_optional** | **Boolean** | Configures if the JSON Web Token ID (`jti`) claim is required in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523).  If set to `false`, the `jti` claim is required. Set this value to `true` only after careful consideration.  This governs the \"oauth2.grant.jwt.jti_optional\" setting. | [optional] |
 | **hydra_oauth2_grant_jwt_max_ttl** | **String** | Configures what the maximum age of a JWT assertion used in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523) can be.  This feature uses the `exp` claim and `iat` claim to calculate assertion age. Assertions exceeding the max age will be denied.  Useful as a safety measure and recommended to keep below 720h.  This governs the \"oauth2.grant.jwt.max_ttl\" setting. | [optional][default to '720h'] |
+| **hydra_oauth2_mirror_top_level_claims** | **Boolean** | Set to false if you don't want to mirror custom claims under 'ext'.  This governs the \"oauth2.mirror_top_level_claims\" setting. | [optional] |
 | **hydra_oauth2_pkce_enforced** | **Boolean** | Configures whether PKCE should be enforced for all OAuth2 Clients.  This governs the \"oauth2.pkce.enforced\" setting. | [optional] |
 | **hydra_oauth2_pkce_enforced_for_public_clients** | **Boolean** | Configures whether PKCE should be enforced for OAuth2 Clients without a client secret (public clients).  This governs the \"oauth2.pkce.enforced_for_public_clients\" setting. | [optional] |
 | **hydra_oauth2_refresh_token_hook** | **String** | Sets the Refresh Token Hook Endpoint. If set this endpoint will be called during the OAuth2 Token Refresh grant update the OAuth2 Access Token claims.  This governs the \"oauth2.refresh_token_hook\" setting. | [optional] |
@@ -204,12 +207,15 @@ require 'ory-client'
 instance = OryClient::CreateProjectNormalizedPayload.new(
   created_at: null,
   disable_account_experience_welcome_screen: null,
+  enable_ax_v2: null,
+  environment: null,
   hydra_oauth2_allowed_top_level_claims: null,
   hydra_oauth2_client_credentials_default_grant_allowed_scope: null,
   hydra_oauth2_exclude_not_before_claim: null,
   hydra_oauth2_grant_jwt_iat_optional: null,
   hydra_oauth2_grant_jwt_jti_optional: null,
   hydra_oauth2_grant_jwt_max_ttl: 30m,
+  hydra_oauth2_mirror_top_level_claims: null,
   hydra_oauth2_pkce_enforced: null,
   hydra_oauth2_pkce_enforced_for_public_clients: null,
   hydra_oauth2_refresh_token_hook: null,

data/docs/CreateSubscriptionBody.md

@@ -7,9 +7,8 @@
 | **currency** | **String** |  usd USD eur Euro | [optional] |
 | **interval** | **String** |  monthly Monthly yearly Yearly |  |
 | **plan** | **String** |  |  |
-| **provision_first_project** | **String** |  | [optional] |
+| **provision_first_project** | **String** |  |  |
 | **return_to** | **String** |  | [optional] |
-| **workspace** | **String** |  | [optional] |
 
 ## Example
 
@@ -21,8 +20,7 @@ instance = OryClient::CreateSubscriptionBody.new(
   interval: null,
   plan: null,
   provision_first_project: null,
-  return_to: null,
-  workspace: null
+  return_to: null
 )
 ```
 

data/docs/CreateSubscriptionCommon.md

@@ -0,0 +1,24 @@
+# OryClient::CreateSubscriptionCommon
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **currency** | **String** |  usd USD eur Euro | [optional] |
+| **interval** | **String** |  monthly Monthly yearly Yearly |  |
+| **plan** | **String** |  |  |
+| **return_to** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::CreateSubscriptionCommon.new(
+  currency: null,
+  interval: null,
+  plan: null,
+  return_to: null
+)
+```
+

data/docs/CreateWorkspaceSubscriptionBody.md

@@ -0,0 +1,24 @@
+# OryClient::CreateWorkspaceSubscriptionBody
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **currency** | **String** |  usd USD eur Euro | [optional] |
+| **interval** | **String** |  monthly Monthly yearly Yearly |  |
+| **plan** | **String** |  |  |
+| **return_to** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::CreateWorkspaceSubscriptionBody.new(
+  currency: null,
+  interval: null,
+  plan: null,
+  return_to: null
+)
+```
+

data/docs/FrontendApi.md

@@ -57,7 +57,8 @@ opts = {
   return_to: 'return_to_example', # String | The URL to return the browser to after the flow was completed.
   cookie: 'cookie_example', # String | HTTP Cookies  When using the SDK in a browser app, on the server side you must include the HTTP Cookie Header sent by the client to your server here. This ensures that CSRF and session cookies are respected.
   login_challenge: 'login_challenge_example', # String | An optional Hydra login challenge. If present, Kratos will cooperate with Ory Hydra to act as an OAuth2 identity provider.  The value for this parameter comes from `login_challenge` URL Query parameter sent to your application (e.g. `/login?login_challenge=abcde`).
-  organization: 'organization_example' # String | An optional organization ID that should be used for logging this user in. This parameter is only effective in the Ory Network.
+  organization: 'organization_example', # String | An optional organization ID that should be used for logging this user in. This parameter is only effective in the Ory Network.
+  via: 'via_example' # String | Via should contain the identity's credential the code should be sent to. Only relevant in aal2 flows.
 }
 
 begin
@@ -97,6 +98,7 @@ end
 | **cookie** | **String** | HTTP Cookies  When using the SDK in a browser app, on the server side you must include the HTTP Cookie Header sent by the client to your server here. This ensures that CSRF and session cookies are respected. | [optional] |
 | **login_challenge** | **String** | An optional Hydra login challenge. If present, Kratos will cooperate with Ory Hydra to act as an OAuth2 identity provider.  The value for this parameter comes from `login_challenge` URL Query parameter sent to your application (e.g. `/login?login_challenge=abcde`). | [optional] |
 | **organization** | **String** | An optional organization ID that should be used for logging this user in. This parameter is only effective in the Ory Network. | [optional] |
+| **via** | **String** | Via should contain the identity's credential the code should be sent to. Only relevant in aal2 flows. | [optional] |
 
 ### Return type
 

data/docs/IdentityApi.md

@@ -891,7 +891,8 @@ opts = {
   consistency: 'consistency_example', # String | Read Consistency Level (preview)  The read consistency level determines the consistency guarantee for reads:  strong (slow): The read is guaranteed to return the most recent data committed at the start of the read. eventual (very fast): The result will return data that is about 4.8 seconds old.  The default consistency guarantee can be changed in the Ory Network Console or using the Ory CLI with `ory patch project --replace '/previews/default_read_consistency_level=\"strong\"'`.  Setting the default consistency level to `eventual` may cause regressions in the future as we add consistency controls to more APIs. Currently, the following APIs will be affected by this setting:  `GET /admin/identities`  This feature is in preview and only available in Ory Network.  ConsistencyLevelUnset  ConsistencyLevelUnset is the unset / default consistency level. strong ConsistencyLevelStrong  ConsistencyLevelStrong is the strong consistency level. eventual ConsistencyLevelEventual  ConsistencyLevelEventual is the eventual consistency level using follower read timestamps.
   ids: ['inner_example'], # Array<String> | List of ids used to filter identities. If this list is empty, then no filter will be applied.
   credentials_identifier: 'credentials_identifier_example', # String | CredentialsIdentifier is the identifier (username, email) of the credentials to look up using exact match. Only one of CredentialsIdentifier and CredentialsIdentifierSimilar can be used.
-  preview_credentials_identifier_similar: 'preview_credentials_identifier_similar_example' # String | This is an EXPERIMENTAL parameter that WILL CHANGE. Do NOT rely on consistent, deterministic behavior. THIS PARAMETER WILL BE REMOVED IN AN UPCOMING RELEASE WITHOUT ANY MIGRATION PATH.  CredentialsIdentifierSimilar is the (partial) identifier (username, email) of the credentials to look up using similarity search. Only one of CredentialsIdentifier and CredentialsIdentifierSimilar can be used.
+  preview_credentials_identifier_similar: 'preview_credentials_identifier_similar_example', # String | This is an EXPERIMENTAL parameter that WILL CHANGE. Do NOT rely on consistent, deterministic behavior. THIS PARAMETER WILL BE REMOVED IN AN UPCOMING RELEASE WITHOUT ANY MIGRATION PATH.  CredentialsIdentifierSimilar is the (partial) identifier (username, email) of the credentials to look up using similarity search. Only one of CredentialsIdentifier and CredentialsIdentifierSimilar can be used.
+  include_credential: ['inner_example'] # Array<String> | Include Credentials in Response  Include any credential, for example `password` or `oidc`, in the response. When set to `oidc`, This will return the initial OAuth 2.0 Access Token, OAuth 2.0 Refresh Token and the OpenID Connect ID Token if available.
 }
 
 begin
@@ -933,6 +934,7 @@ end
 | **ids** | [**Array&lt;String&gt;**](String.md) | List of ids used to filter identities. If this list is empty, then no filter will be applied. | [optional] |
 | **credentials_identifier** | **String** | CredentialsIdentifier is the identifier (username, email) of the credentials to look up using exact match. Only one of CredentialsIdentifier and CredentialsIdentifierSimilar can be used. | [optional] |
 | **preview_credentials_identifier_similar** | **String** | This is an EXPERIMENTAL parameter that WILL CHANGE. Do NOT rely on consistent, deterministic behavior. THIS PARAMETER WILL BE REMOVED IN AN UPCOMING RELEASE WITHOUT ANY MIGRATION PATH.  CredentialsIdentifierSimilar is the (partial) identifier (username, email) of the credentials to look up using similarity search. Only one of CredentialsIdentifier and CredentialsIdentifierSimilar can be used. | [optional] |
+| **include_credential** | [**Array&lt;String&gt;**](String.md) | Include Credentials in Response  Include any credential, for example &#x60;password&#x60; or &#x60;oidc&#x60;, in the response. When set to &#x60;oidc&#x60;, This will return the initial OAuth 2.0 Access Token, OAuth 2.0 Refresh Token and the OpenID Connect ID Token if available. | [optional] |
 
 ### Return type
 

data/docs/LoginFlow.md

@@ -18,6 +18,7 @@
 | **return_to** | **String** | ReturnTo contains the requested return_to URL. | [optional] |
 | **session_token_exchange_code** | **String** | SessionTokenExchangeCode holds the secret code that the client can use to retrieve a session token after the login flow has been completed. This is only set if the client has requested a session token exchange code, and if the flow is of type \"api\", and only on creating the login flow. | [optional] |
 | **state** | **Object** | State represents the state of this request:  choose_method: ask the user to choose a method to sign in with sent_email: the email has been sent to the user passed_challenge: the request was successful and the login challenge was passed. |  |
+| **transient_payload** | **Object** | TransientPayload is used to pass data from the login to hooks and email templates | [optional] |
 | **type** | **String** | The flow type can either be `api` or `browser`. |  |
 | **ui** | [**UiContainer**](UiContainer.md) |  |  |
 | **updated_at** | **Time** | UpdatedAt is a helper struct field for gobuffalo.pop. | [optional] |
@@ -42,6 +43,7 @@ instance = OryClient::LoginFlow.new(
   return_to: null,
   session_token_exchange_code: null,
   state: null,
+  transient_payload: null,
   type: null,
   ui: null,
   updated_at: null

data/docs/NormalizedProjectRevision.md

@@ -6,12 +6,14 @@
 | ---- | ---- | ----------- | ----- |
 | **created_at** | **Time** | The Project's Revision Creation Date | [optional][readonly] |
 | **disable_account_experience_welcome_screen** | **Boolean** | Whether to disable the account experience welcome screen, which is hosted under `/ui/welcome`. | [optional] |
+| **enable_ax_v2** | **Boolean** | Whether the new account experience is enabled and reachable. | [optional] |
 | **hydra_oauth2_allowed_top_level_claims** | **Array<String>** |  | [optional] |
 | **hydra_oauth2_client_credentials_default_grant_allowed_scope** | **Boolean** | Automatically grant authorized OAuth2 Scope in OAuth2 Client Credentials Flow.  Each OAuth2 Client is allowed to request a predefined OAuth2 Scope (for example `read write`). If this option is enabled, the full scope is automatically granted when performing the OAuth2 Client Credentials flow.  If disabled, the OAuth2 Client has to request the scope in the OAuth2 request by providing the `scope` query parameter.  Setting this option to true is common if you need compatibility with MITREid.  This governs the \"oauth2.client_credentials.default_grant_allowed_scope\" setting. | [optional] |
 | **hydra_oauth2_exclude_not_before_claim** | **Boolean** | Set to true if you want to exclude claim `nbf (not before)` part of access token.  This governs the \"oauth2.exclude_not_before_claim\" setting. | [optional] |
 | **hydra_oauth2_grant_jwt_iat_optional** | **Boolean** | Configures if the issued at (`iat`) claim is required in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523).  If set to `false`, the `iat` claim is required. Set this value to `true` only after careful consideration.  This governs the \"oauth2.grant.jwt.iat_optional\" setting. | [optional] |
 | **hydra_oauth2_grant_jwt_jti_optional** | **Boolean** | Configures if the JSON Web Token ID (`jti`) claim is required in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523).  If set to `false`, the `jti` claim is required. Set this value to `true` only after careful consideration.  This governs the \"oauth2.grant.jwt.jti_optional\" setting. | [optional] |
 | **hydra_oauth2_grant_jwt_max_ttl** | **String** | Configures what the maximum age of a JWT assertion used in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523) can be.  This feature uses the `exp` claim and `iat` claim to calculate assertion age. Assertions exceeding the max age will be denied.  Useful as a safety measure and recommended to keep below 720h.  This governs the \"oauth2.grant.jwt.max_ttl\" setting. | [optional][default to '720h'] |
+| **hydra_oauth2_mirror_top_level_claims** | **Boolean** | Set to false if you don't want to mirror custom claims under 'ext'.  This governs the \"oauth2.mirror_top_level_claims\" setting. | [optional] |
 | **hydra_oauth2_pkce_enforced** | **Boolean** | Configures whether PKCE should be enforced for all OAuth2 Clients.  This governs the \"oauth2.pkce.enforced\" setting. | [optional] |
 | **hydra_oauth2_pkce_enforced_for_public_clients** | **Boolean** | Configures whether PKCE should be enforced for OAuth2 Clients without a client secret (public clients).  This governs the \"oauth2.pkce.enforced_for_public_clients\" setting. | [optional] |
 | **hydra_oauth2_refresh_token_hook** | **String** | Sets the Refresh Token Hook Endpoint. If set this endpoint will be called during the OAuth2 Token Refresh grant update the OAuth2 Access Token claims.  This governs the \"oauth2.refresh_token_hook\" setting. | [optional] |
@@ -203,12 +205,14 @@ require 'ory-client'
 instance = OryClient::NormalizedProjectRevision.new(
   created_at: null,
   disable_account_experience_welcome_screen: null,
+  enable_ax_v2: null,
   hydra_oauth2_allowed_top_level_claims: null,
   hydra_oauth2_client_credentials_default_grant_allowed_scope: null,
   hydra_oauth2_exclude_not_before_claim: null,
   hydra_oauth2_grant_jwt_iat_optional: null,
   hydra_oauth2_grant_jwt_jti_optional: null,
   hydra_oauth2_grant_jwt_max_ttl: 30m,
+  hydra_oauth2_mirror_top_level_claims: null,
   hydra_oauth2_pkce_enforced: null,
   hydra_oauth2_pkce_enforced_for_public_clients: null,
   hydra_oauth2_refresh_token_hook: null,

data/docs/OAuth2Client.md

@@ -45,6 +45,7 @@
 | **scope** | **String** | OAuth 2.0 Client Scope  Scope is a string containing a space-separated list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749]) that the client can use when requesting access tokens. | [optional] |
 | **sector_identifier_uri** | **String** | OpenID Connect Sector Identifier URI  URL using the https scheme to be used in calculating Pseudonymous Identifiers by the OP. The URL references a file with a single JSON array of redirect_uri values. | [optional] |
 | **skip_consent** | **Boolean** | SkipConsent skips the consent screen for this client. This field can only be set from the admin API. | [optional] |
+| **skip_logout_consent** | **Boolean** | SkipLogoutConsent skips the logout consent screen for this client. This field can only be set from the admin API. | [optional] |
 | **subject_type** | **String** | OpenID Connect Subject Type  The `subject_types_supported` Discovery parameter contains a list of the supported subject_type values for this server. Valid types include `pairwise` and `public`. | [optional] |
 | **token_endpoint_auth_method** | **String** | OAuth 2.0 Token Endpoint Authentication Method  Requested Client Authentication method for the Token Endpoint. The options are:  `client_secret_basic`: (default) Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` encoded in the HTTP Authorization header. `client_secret_post`: Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` in the HTTP body. `private_key_jwt`: Use JSON Web Tokens to authenticate the client. `none`: Used for public clients (native apps, mobile apps) which can not have secrets. | [optional][default to 'client_secret_basic'] |
 | **token_endpoint_auth_signing_alg** | **String** | OAuth 2.0 Token Endpoint Signing Algorithm  Requested Client Authentication signing algorithm for the Token Endpoint. | [optional] |
@@ -99,6 +100,7 @@ instance = OryClient::OAuth2Client.new(
   scope: scope1 scope-2 scope.3 scope:4,
   sector_identifier_uri: null,
   skip_consent: null,
+  skip_logout_consent: null,
   subject_type: null,
   token_endpoint_auth_method: null,
   token_endpoint_auth_signing_alg: null,

data/docs/OAuth2ConsentSession.md

@@ -5,6 +5,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **consent_request** | [**OAuth2ConsentRequest**](OAuth2ConsentRequest.md) |  | [optional] |
+| **context** | **Object** |  | [optional] |
 | **expires_at** | [**OAuth2ConsentSessionExpiresAt**](OAuth2ConsentSessionExpiresAt.md) |  | [optional] |
 | **grant_access_token_audience** | **Array<String>** |  | [optional] |
 | **grant_scope** | **Array<String>** |  | [optional] |
@@ -20,6 +21,7 @@ require 'ory-client'
 
 instance = OryClient::OAuth2ConsentSession.new(
   consent_request: null,
+  context: null,
   expires_at: null,
   grant_access_token_audience: null,
   grant_scope: null,

data/docs/PermissionsOnWorkpaceResponse.md

@@ -0,0 +1,18 @@
+# OryClient::PermissionsOnWorkpaceResponse
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **permissions** | **Hash<String, Boolean>** |  | [optional] |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::PermissionsOnWorkpaceResponse.new(
+  permissions: null
+)
+```
+

data/docs/PlanDetails.md

@@ -8,7 +8,7 @@
 | **base_fee_yearly** | **Integer** | BaseFeeYearly is the yearly base fee for the plan. |  |
 | **custom** | **Boolean** | Custom is true if the plan is custom. This means it will be hidden from the pricing page. |  |
 | **description** | **String** | Description is the description of the plan. |  |
-| **features** | [**Hash<String, GenericUsage>**](GenericUsage.md) | Features are the feature definitions included in the plan. |  |
+| **features** | [**Hash<String, GenericUsage>**](GenericUsage.md) |  |  |
 | **name** | **String** | Name is the name of the plan. |  |
 | **version** | **Integer** | Version is the version of the plan. The combination of `name@version` must be unique. |  |
 

data/docs/ProjectApi.md

@@ -119,7 +119,7 @@ end
 
 api_instance = OryClient::ProjectApi.new
 opts = {
-  create_project_body: OryClient::CreateProjectBody.new({name: 'name_example'}) # CreateProjectBody | 
+  create_project_body: OryClient::CreateProjectBody.new({environment: 'prod', name: 'name_example'}) # CreateProjectBody | 
 }
 
 begin
@@ -586,7 +586,7 @@ end
 
 ## get_project_members
 
-> <Array<CloudAccount>> get_project_members(project)
+> <Array<ProjectMember>> get_project_members(project)
 
 Get all members associated with this project
 
@@ -619,7 +619,7 @@ end
 
 This returns an Array which contains the response data, status code and headers.
 
-> <Array(<Array<CloudAccount>>, Integer, Hash)> get_project_members_with_http_info(project)
+> <Array(<Array<ProjectMember>>, Integer, Hash)> get_project_members_with_http_info(project)
 
 ```ruby
 begin
@@ -627,7 +627,7 @@ begin
   data, status_code, headers = api_instance.get_project_members_with_http_info(project)
   p status_code # => 2xx
   p headers # => { ... }
-  p data # => <Array<CloudAccount>>
+  p data # => <Array<ProjectMember>>
 rescue OryClient::ApiError => e
   puts "Error when calling ProjectApi->get_project_members_with_http_info: #{e}"
 end
@@ -641,7 +641,7 @@ end
 
 ### Return type
 
-[**Array&lt;CloudAccount&gt;**](CloudAccount.md)
+[**Array&lt;ProjectMember&gt;**](ProjectMember.md)
 
 ### Authorization
 
@@ -675,7 +675,7 @@ end
 api_instance = OryClient::ProjectApi.new
 project_id = 'project_id_example' # String | Project ID
 event_type = 'event_type_example' # String | The event type to query for
-resolution = 'resolution_example' # String | The resolution of the buckets  The minimum resolution is 1 hour.
+resolution = 'resolution_example' # String | The resolution of the buckets  The minimum resolution is 1 minute.
 from = Time.parse('2013-10-20T19:20:30+01:00') # Time | The start RFC3339 date of the time window
 to = Time.parse('2013-10-20T19:20:30+01:00') # Time | The end RFC3339 date of the time window
 
@@ -712,7 +712,7 @@ end
 | ---- | ---- | ----------- | ----- |
 | **project_id** | **String** | Project ID |  |
 | **event_type** | **String** | The event type to query for |  |
-| **resolution** | **String** | The resolution of the buckets  The minimum resolution is 1 hour. |  |
+| **resolution** | **String** | The resolution of the buckets  The minimum resolution is 1 minute. |  |
 | **from** | **Time** | The start RFC3339 date of the time window |  |
 | **to** | **Time** | The end RFC3339 date of the time window |  |
 

data/docs/ProjectMember.md

@@ -0,0 +1,24 @@
+# OryClient::ProjectMember
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **email** | **String** |  |  |
+| **id** | **String** |  |  |
+| **name** | **String** |  |  |
+| **role** | **String** |  |  |
+
+## Example
+
+```ruby
+require 'ory-client'
+
+instance = OryClient::ProjectMember.new(
+  email: null,
+  id: null,
+  name: null,
+  role: null
+)
+```
+

data/docs/QuotaUsage.md

@@ -6,7 +6,7 @@
 | ---- | ---- | ----------- | ----- |
 | **additional_price** | **Integer** | The additional price per unit in cents. |  |
 | **can_use_more** | **Boolean** |  |  |
-| **feature** | **String** |  region_eu RegionEU region_us RegionUS region_apac RegionAPAC region_global RegionGlobal production_projects ProductionProjects daily_active_users DailyActiveUsers custom_domains CustomDomains event_streams EventStreams sla SLA collaborator_seats CollaboratorSeats edge_cache EdgeCache branding_themes BrandingThemes zendesk_support ZendeskSupport project_metrics ProjectMetrics project_metrics_time_window ProjectMetricsTimeWindow project_metrics_events_history ProjectMetricsEventsHistory organizations Organizations rop_grant ResourceOwnerPasswordGrant rate_limit_tier RateLimitTier session_rate_limit_tier RateLimitTierSessions identities_list_rate_limit_tier RateLimitTierIdentitiesList |  |
+| **feature** | **String** |  region_eu RegionEU region_us RegionUS region_apac RegionAPAC region_global RegionGlobal production_projects ProductionProjects daily_active_users DailyActiveUsers custom_domains CustomDomains event_streams EventStreams sla SLA collaborator_seats CollaboratorSeats edge_cache EdgeCache branding_themes BrandingThemes zendesk_support ZendeskSupport project_metrics ProjectMetrics project_metrics_time_window ProjectMetricsTimeWindow project_metrics_events_history ProjectMetricsEventsHistory organizations Organizations rop_grant ResourceOwnerPasswordGrant concierge_onboarding ConciergeOnboarding rate_limit_tier RateLimitTier session_rate_limit_tier RateLimitTierSessions identities_list_rate_limit_tier RateLimitTierIdentitiesList permission_checks_rate_limit_tier RateLimitTierPermissionChecks oauth2_introspect_rate_limit_tier RateLimitTierOAuth2Introspect |  |
 | **feature_available** | **Boolean** |  |  |
 | **included** | **Integer** |  |  |
 | **used** | **Integer** |  |  |

data/docs/RecoveryFlow.md

@@ -12,6 +12,7 @@
 | **request_url** | **String** | RequestURL is the initial URL that was requested from Ory Kratos. It can be used to forward information contained in the URL's path or query for example. |  |
 | **return_to** | **String** | ReturnTo contains the requested return_to URL. | [optional] |
 | **state** | **Object** | State represents the state of this request:  choose_method: ask the user to choose a method (e.g. recover account via email) sent_email: the email has been sent to the user passed_challenge: the request was successful and the recovery challenge was passed. |  |
+| **transient_payload** | **Object** | TransientPayload is used to pass data from the recovery flow to hooks and email templates | [optional] |
 | **type** | **String** | The flow type can either be `api` or `browser`. |  |
 | **ui** | [**UiContainer**](UiContainer.md) |  |  |
 
@@ -29,6 +30,7 @@ instance = OryClient::RecoveryFlow.new(
   request_url: null,
   return_to: null,
   state: null,
+  transient_payload: null,
   type: null,
   ui: null
 )

data/docs/SettingsFlow.md

@@ -13,6 +13,7 @@
 | **request_url** | **String** | RequestURL is the initial URL that was requested from Ory Kratos. It can be used to forward information contained in the URL's path or query for example. |  |
 | **return_to** | **String** | ReturnTo contains the requested return_to URL. | [optional] |
 | **state** | **Object** | State represents the state of this flow. It knows two states:  show_form: No user data has been collected, or it is invalid, and thus the form should be shown. success: Indicates that the settings flow has been updated successfully with the provided data. Done will stay true when repeatedly checking. If set to true, done will revert back to false only when a flow with invalid (e.g. \"please use a valid phone number\") data was sent. |  |
+| **transient_payload** | **Object** | TransientPayload is used to pass data from the settings flow to hooks and email templates | [optional] |
 | **type** | **String** | The flow type can either be `api` or `browser`. |  |
 | **ui** | [**UiContainer**](UiContainer.md) |  |  |
 
@@ -31,6 +32,7 @@ instance = OryClient::SettingsFlow.new(
   request_url: null,
   return_to: null,
   state: null,
+  transient_payload: null,
   type: null,
   ui: null
 )