ory-kratos-client 1.2.1 → 1.3.4

data/docs/IdentityApi.md

@@ -390,11 +390,11 @@ nil (empty response body)
 
 ## delete_identity_credentials
 
-> delete_identity_credentials(id, type)
+> delete_identity_credentials(id, type, opts)
 
 Delete a credential for a specific identity
 
-Delete an [identity](https://www.ory.sh/docs/kratos/concepts/identity-user-model) credential by its type You can only delete second factor (aal2) credentials.
+Delete an [identity](https://www.ory.sh/docs/kratos/concepts/identity-user-model) credential by its type. You cannot delete password or code auth credentials through this API.
 
 ### Examples
 
@@ -411,11 +411,14 @@ end
 
 api_instance = OryKratosClient::IdentityApi.new
 id = 'id_example' # String | ID is the identity's ID.
-type = 'password' # String | Type is the type of credentials to be deleted. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode
+type = 'password' # String | Type is the type of credentials to delete. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile saml CredentialsTypeSAML link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode
+opts = {
+  identifier: 'identifier_example' # String | Identifier is the identifier of the OIDC credential to delete. Find the identifier by calling the `GET /admin/identities/{id}?include_credential=oidc` endpoint.
+}
 
 begin
   # Delete a credential for a specific identity
-  api_instance.delete_identity_credentials(id, type)
+  api_instance.delete_identity_credentials(id, type, opts)
 rescue OryKratosClient::ApiError => e
   puts "Error when calling IdentityApi->delete_identity_credentials: #{e}"
 end
@@ -425,12 +428,12 @@ end
 
 This returns an Array which contains the response data (`nil` in this case), status code and headers.
 
-> <Array(nil, Integer, Hash)> delete_identity_credentials_with_http_info(id, type)
+> <Array(nil, Integer, Hash)> delete_identity_credentials_with_http_info(id, type, opts)
 
 ```ruby
 begin
   # Delete a credential for a specific identity
-  data, status_code, headers = api_instance.delete_identity_credentials_with_http_info(id, type)
+  data, status_code, headers = api_instance.delete_identity_credentials_with_http_info(id, type, opts)
   p status_code # => 2xx
   p headers # => { ... }
   p data # => nil
@@ -444,7 +447,8 @@ end
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **id** | **String** | ID is the identity&#39;s ID. |  |
-| **type** | **String** | Type is the type of credentials to be deleted. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode |  |
+| **type** | **String** | Type is the type of credentials to delete. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile saml CredentialsTypeSAML link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode |  |
+| **identifier** | **String** | Identifier is the identifier of the OIDC credential to delete. Find the identifier by calling the &#x60;GET /admin/identities/{id}?include_credential&#x3D;oidc&#x60; endpoint. | [optional] |
 
 ### Return type
 
@@ -606,7 +610,7 @@ nil (empty response body)
 
 Extend a Session
 
-Calling this endpoint extends the given session ID. If `session.earliest_possible_extend` is set it will only extend the session after the specified time has passed.  Retrieve the session ID from the `/sessions/whoami` endpoint / `toSession` SDK method.
+Calling this endpoint extends the given session ID. If `session.earliest_possible_extend` is set it will only extend the session after the specified time has passed.  This endpoint returns per default a 204 No Content response on success. Older Ory Network projects may return a 200 OK response with the session in the body. Returning the session as part of the response will be deprecated in the future and should not be relied upon.  This endpoint ignores consecutive requests to extend the same session and returns a 404 error in those scenarios. This endpoint also returns 404 errors if the session does not exist.  Retrieve the session ID from the `/sessions/whoami` endpoint / `toSession` SDK method.
 
 ### Examples
 
@@ -891,7 +895,7 @@ end
 
 List Identities
 
-Lists all [identities](https://www.ory.sh/docs/kratos/concepts/identity-user-model) in the system.
+Lists all [identities](https://www.ory.sh/docs/kratos/concepts/identity-user-model) in the system. Note: filters cannot be combined.
 
 ### Examples
 
@@ -913,10 +917,11 @@ opts = {
   page_size: 789, # Integer | Page Size  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).
   page_token: 'page_token_example', # String | Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).
   consistency: 'consistency_example', # String | Read Consistency Level (preview)  The read consistency level determines the consistency guarantee for reads:  strong (slow): The read is guaranteed to return the most recent data committed at the start of the read. eventual (very fast): The result will return data that is about 4.8 seconds old.  The default consistency guarantee can be changed in the Ory Network Console or using the Ory CLI with `ory patch project --replace '/previews/default_read_consistency_level=\"strong\"'`.  Setting the default consistency level to `eventual` may cause regressions in the future as we add consistency controls to more APIs. Currently, the following APIs will be affected by this setting:  `GET /admin/identities`  This feature is in preview and only available in Ory Network.  ConsistencyLevelUnset  ConsistencyLevelUnset is the unset / default consistency level. strong ConsistencyLevelStrong  ConsistencyLevelStrong is the strong consistency level. eventual ConsistencyLevelEventual  ConsistencyLevelEventual is the eventual consistency level using follower read timestamps.
-  ids: ['inner_example'], # Array<String> | List of ids used to filter identities. If this list is empty, then no filter will be applied.
+  ids: ['inner_example'], # Array<String> | Retrieve multiple identities by their IDs.  This parameter has the following limitations:  Duplicate or non-existent IDs are ignored. The order of returned IDs may be different from the request. This filter does not support pagination. You must implement your own pagination as the maximum number of items returned by this endpoint may not exceed a certain threshold (currently 500).
   credentials_identifier: 'credentials_identifier_example', # String | CredentialsIdentifier is the identifier (username, email) of the credentials to look up using exact match. Only one of CredentialsIdentifier and CredentialsIdentifierSimilar can be used.
   preview_credentials_identifier_similar: 'preview_credentials_identifier_similar_example', # String | This is an EXPERIMENTAL parameter that WILL CHANGE. Do NOT rely on consistent, deterministic behavior. THIS PARAMETER WILL BE REMOVED IN AN UPCOMING RELEASE WITHOUT ANY MIGRATION PATH.  CredentialsIdentifierSimilar is the (partial) identifier (username, email) of the credentials to look up using similarity search. Only one of CredentialsIdentifier and CredentialsIdentifierSimilar can be used.
-  include_credential: ['inner_example'] # Array<String> | Include Credentials in Response  Include any credential, for example `password` or `oidc`, in the response. When set to `oidc`, This will return the initial OAuth 2.0 Access Token, OAuth 2.0 Refresh Token and the OpenID Connect ID Token if available.
+  include_credential: ['inner_example'], # Array<String> | Include Credentials in Response  Include any credential, for example `password` or `oidc`, in the response. When set to `oidc`, This will return the initial OAuth 2.0 Access Token, OAuth 2.0 Refresh Token and the OpenID Connect ID Token if available.
+  organization_id: 'organization_id_example' # String | List identities that belong to a specific organization.
 }
 
 begin
@@ -955,10 +960,11 @@ end
 | **page_size** | **Integer** | Page Size  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). | [optional][default to 250] |
 | **page_token** | **String** | Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). | [optional][default to &#39;1&#39;] |
 | **consistency** | **String** | Read Consistency Level (preview)  The read consistency level determines the consistency guarantee for reads:  strong (slow): The read is guaranteed to return the most recent data committed at the start of the read. eventual (very fast): The result will return data that is about 4.8 seconds old.  The default consistency guarantee can be changed in the Ory Network Console or using the Ory CLI with &#x60;ory patch project --replace &#39;/previews/default_read_consistency_level&#x3D;\&quot;strong\&quot;&#39;&#x60;.  Setting the default consistency level to &#x60;eventual&#x60; may cause regressions in the future as we add consistency controls to more APIs. Currently, the following APIs will be affected by this setting:  &#x60;GET /admin/identities&#x60;  This feature is in preview and only available in Ory Network.  ConsistencyLevelUnset  ConsistencyLevelUnset is the unset / default consistency level. strong ConsistencyLevelStrong  ConsistencyLevelStrong is the strong consistency level. eventual ConsistencyLevelEventual  ConsistencyLevelEventual is the eventual consistency level using follower read timestamps. | [optional] |
-| **ids** | [**Array&lt;String&gt;**](String.md) | List of ids used to filter identities. If this list is empty, then no filter will be applied. | [optional] |
+| **ids** | [**Array&lt;String&gt;**](String.md) | Retrieve multiple identities by their IDs.  This parameter has the following limitations:  Duplicate or non-existent IDs are ignored. The order of returned IDs may be different from the request. This filter does not support pagination. You must implement your own pagination as the maximum number of items returned by this endpoint may not exceed a certain threshold (currently 500). | [optional] |
 | **credentials_identifier** | **String** | CredentialsIdentifier is the identifier (username, email) of the credentials to look up using exact match. Only one of CredentialsIdentifier and CredentialsIdentifierSimilar can be used. | [optional] |
 | **preview_credentials_identifier_similar** | **String** | This is an EXPERIMENTAL parameter that WILL CHANGE. Do NOT rely on consistent, deterministic behavior. THIS PARAMETER WILL BE REMOVED IN AN UPCOMING RELEASE WITHOUT ANY MIGRATION PATH.  CredentialsIdentifierSimilar is the (partial) identifier (username, email) of the credentials to look up using similarity search. Only one of CredentialsIdentifier and CredentialsIdentifierSimilar can be used. | [optional] |
 | **include_credential** | [**Array&lt;String&gt;**](String.md) | Include Credentials in Response  Include any credential, for example &#x60;password&#x60; or &#x60;oidc&#x60;, in the response. When set to &#x60;oidc&#x60;, This will return the initial OAuth 2.0 Access Token, OAuth 2.0 Refresh Token and the OpenID Connect ID Token if available. | [optional] |
+| **organization_id** | **String** | List identities that belong to a specific organization. | [optional] |
 
 ### Return type
 

data/docs/IdentityCredentials.md

@@ -7,7 +7,7 @@
 | **config** | **Object** |  | [optional] |
 | **created_at** | **Time** | CreatedAt is a helper struct field for gobuffalo.pop. | [optional] |
 | **identifiers** | **Array<String>** | Identifiers represents a list of unique identifiers this credential type matches. | [optional] |
-| **type** | **String** | Type discriminates between different types of credentials. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode | [optional] |
+| **type** | **String** | Type discriminates between different types of credentials. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile saml CredentialsTypeSAML link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode | [optional] |
 | **updated_at** | **Time** | UpdatedAt is a helper struct field for gobuffalo.pop. | [optional] |
 | **version** | **Integer** | Version refers to the version of the credential. Useful when changing the config schema. | [optional] |
 

data/docs/IdentityCredentialsCode.md

@@ -4,8 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **address_type** | **String** | The type of the address for this code | [optional] |
-| **used_at** | **Time** |  | [optional] |
+| **addresses** | [**Array<IdentityCredentialsCodeAddress>**](IdentityCredentialsCodeAddress.md) |  | [optional] |
 
 ## Example
 
@@ -13,8 +12,7 @@
 require 'ory-kratos-client'
 
 instance = OryKratosClient::IdentityCredentialsCode.new(
-  address_type: null,
-  used_at: null
+  addresses: null
 )
 ```
 

data/docs/IdentityCredentialsCodeAddress.md

@@ -0,0 +1,20 @@
+# OryKratosClient::IdentityCredentialsCodeAddress
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **address** | **String** | The address for this code | [optional] |
+| **channel** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'ory-kratos-client'
+
+instance = OryKratosClient::IdentityCredentialsCodeAddress.new(
+  address: null,
+  channel: null
+)
+```
+

data/docs/IdentityCredentialsOidcProvider.md

@@ -10,6 +10,7 @@
 | **organization** | **String** |  | [optional] |
 | **provider** | **String** |  | [optional] |
 | **subject** | **String** |  | [optional] |
+| **use_auto_link** | **Boolean** |  | [optional] |
 
 ## Example
 
@@ -22,7 +23,8 @@ instance = OryKratosClient::IdentityCredentialsOidcProvider.new(
   initial_refresh_token: null,
   organization: null,
   provider: null,
-  subject: null
+  subject: null,
+  use_auto_link: null
 )
 ```
 

data/docs/IdentityCredentialsPassword.md

@@ -5,6 +5,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **hashed_password** | **String** | HashedPassword is a hash-representation of the password. | [optional] |
+| **use_password_migration_hook** | **Boolean** | UsePasswordMigrationHook is set to true if the password should be migrated using the password migration hook. If set, and the HashedPassword is empty, a webhook will be called during login to migrate the password. | [optional] |
 
 ## Example
 
@@ -12,7 +13,8 @@
 require 'ory-kratos-client'
 
 instance = OryKratosClient::IdentityCredentialsPassword.new(
-  hashed_password: null
+  hashed_password: null,
+  use_password_migration_hook: null
 )
 ```
 

data/docs/IdentityPatchResponse.md

@@ -4,7 +4,8 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **action** | **String** | The action for this specific patch create ActionCreate  Create this identity. | [optional] |
+| **action** | **String** | The action for this specific patch create ActionCreate  Create this identity. error ActionError  Error indicates that the patch failed. | [optional] |
+| **error** | **Object** |  | [optional] |
 | **identity** | **String** | The identity ID payload of this patch | [optional] |
 | **patch_id** | **String** | The ID of this patch response, if an ID was specified in the patch. | [optional] |
 
@@ -15,6 +16,7 @@ require 'ory-kratos-client'
 
 instance = OryKratosClient::IdentityPatchResponse.new(
   action: null,
+  error: null,
   identity: null,
   patch_id: null
 )

data/docs/IdentityWithCredentialsOidcConfigProvider.md

@@ -6,6 +6,7 @@
 | ---- | ---- | ----------- | ----- |
 | **provider** | **String** | The OpenID Connect provider to link the subject to. Usually something like `google` or `github`. |  |
 | **subject** | **String** | The subject (`sub`) of the OpenID Connect connection. Usually the `sub` field of the ID Token. |  |
+| **use_auto_link** | **Boolean** | If set, this credential allows the user to sign in using the OpenID Connect provider without setting the subject first. | [optional] |
 
 ## Example
 
@@ -14,7 +15,8 @@ require 'ory-kratos-client'
 
 instance = OryKratosClient::IdentityWithCredentialsOidcConfigProvider.new(
   provider: null,
-  subject: null
+  subject: null,
+  use_auto_link: null
 )
 ```
 

data/docs/IdentityWithCredentialsPasswordConfig.md

@@ -6,6 +6,7 @@
 | ---- | ---- | ----------- | ----- |
 | **hashed_password** | **String** | The hashed password in [PHC format](https://www.ory.sh/docs/kratos/manage-identities/import-user-accounts-identities#hashed-passwords) | [optional] |
 | **password** | **String** | The password in plain text if no hash is available. | [optional] |
+| **use_password_migration_hook** | **Boolean** | If set to true, the password will be migrated using the password migration hook. | [optional] |
 
 ## Example
 
@@ -14,7 +15,8 @@ require 'ory-kratos-client'
 
 instance = OryKratosClient::IdentityWithCredentialsPasswordConfig.new(
   hashed_password: null,
-  password: null
+  password: null,
+  use_password_migration_hook: null
 )
 ```
 

data/docs/LoginFlow.md

@@ -4,7 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **active** | **String** | The active login method  If set contains the login method used. If the flow is new, it is unset. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode | [optional] |
+| **active** | **String** | The active login method  If set contains the login method used. If the flow is new, it is unset. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile saml CredentialsTypeSAML link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode | [optional] |
 | **created_at** | **Time** | CreatedAt is a helper struct field for gobuffalo.pop. | [optional] |
 | **expires_at** | **Time** | ExpiresAt is the time (UTC) when the flow expires. If the user still wishes to log in, a new flow has to be initiated. |  |
 | **id** | **String** | ID represents the flow's unique ID. When performing the login flow, this represents the id in the login UI's query parameter: http://<selfservice.flows.login.ui_url>/?flow=<flow_id> |  |

data/docs/Provider.md

@@ -0,0 +1,30 @@
+# OryKratosClient::Provider
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **client_id** | **String** | The RP's client identifier, issued by the IdP. | [optional] |
+| **config_url** | **String** | A full path of the IdP config file. | [optional] |
+| **domain_hint** | **String** | By specifying one of domain_hints values provided by the accounts endpoints, the FedCM dialog selectively shows the specified account. | [optional] |
+| **fields** | **Array<String>** | Array of strings that specifies the user information (\"name\", \" email\", \"picture\") that RP needs IdP to share with them.  Note: Field API is supported by Chrome 132 and later. | [optional] |
+| **login_hint** | **String** | By specifying one of login_hints values provided by the accounts endpoints, the FedCM dialog selectively shows the specified account. | [optional] |
+| **nonce** | **String** | A random string to ensure the response is issued for this specific request. Prevents replay attacks. | [optional] |
+| **parameters** | **Hash<String, String>** | Custom object that allows to specify additional key-value parameters: scope: A string value containing additional permissions that RP needs to request, for example \" drive.readonly calendar.readonly\" nonce: A random string to ensure the response is issued for this specific request. Prevents replay attacks.  Other custom key-value parameters.  Note: parameters is supported from Chrome 132. | [optional] |
+
+## Example
+
+```ruby
+require 'ory-kratos-client'
+
+instance = OryKratosClient::Provider.new(
+  client_id: null,
+  config_url: null,
+  domain_hint: null,
+  fields: null,
+  login_hint: null,
+  nonce: null,
+  parameters: null
+)
+```
+

data/docs/RegistrationFlow.md

@@ -4,7 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **active** | **String** | Active, if set, contains the registration method that is being used. It is initially not set. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode | [optional] |
+| **active** | **String** | Active, if set, contains the registration method that is being used. It is initially not set. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile saml CredentialsTypeSAML link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode | [optional] |
 | **expires_at** | **Time** | ExpiresAt is the time (UTC) when the flow expires. If the user still wishes to log in, a new flow has to be initiated. |  |
 | **id** | **String** | ID represents the flow's unique ID. When performing the registration flow, this represents the id in the registration ui's query parameter: http://<selfservice.flows.registration.ui_url>/?flow=<id> |  |
 | **issued_at** | **Time** | IssuedAt is the time (UTC) when the flow occurred. |  |

data/docs/UiNode.md

@@ -5,7 +5,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **attributes** | [**UiNodeAttributes**](UiNodeAttributes.md) |  |  |
-| **group** | **String** | Group specifies which group (e.g. password authenticator) this node belongs to. default DefaultGroup password PasswordGroup oidc OpenIDConnectGroup profile ProfileGroup link LinkGroup code CodeGroup totp TOTPGroup lookup_secret LookupGroup webauthn WebAuthnGroup passkey PasskeyGroup |  |
+| **group** | **String** | Group specifies which group (e.g. password authenticator) this node belongs to. default DefaultGroup password PasswordGroup oidc OpenIDConnectGroup profile ProfileGroup link LinkGroup code CodeGroup totp TOTPGroup lookup_secret LookupGroup webauthn WebAuthnGroup passkey PasskeyGroup identifier_first IdentifierFirstGroup captcha CaptchaGroup saml SAMLGroup |  |
 | **messages** | [**Array<UiText>**](UiText.md) |  |  |
 | **meta** | [**UiNodeMeta**](UiNodeMeta.md) |  |  |
 | **type** | **String** | The node's type text Text input Input img Image a Anchor script Script |  |

data/docs/UiNodeInputAttributes.md

@@ -7,10 +7,13 @@
 | **autocomplete** | **String** | The autocomplete attribute for the input. email InputAttributeAutocompleteEmail tel InputAttributeAutocompleteTel url InputAttributeAutocompleteUrl current-password InputAttributeAutocompleteCurrentPassword new-password InputAttributeAutocompleteNewPassword one-time-code InputAttributeAutocompleteOneTimeCode | [optional] |
 | **disabled** | **Boolean** | Sets the input's disabled field to true or false. |  |
 | **label** | [**UiText**](UiText.md) |  | [optional] |
+| **maxlength** | **Integer** | MaxLength may contain the input's maximum length. | [optional] |
 | **name** | **String** | The input's element name. |  |
 | **node_type** | **String** | NodeType represents this node's types. It is a mirror of `node.type` and is primarily used to allow compatibility with OpenAPI 3.0.  In this struct it technically always is \"input\". text Text input Input img Image a Anchor script Script |  |
-| **onclick** | **String** | OnClick may contain javascript which should be executed on click. This is primarily used for WebAuthn. | [optional] |
-| **onload** | **String** | OnLoad may contain javascript which should be executed on load. This is primarily used for WebAuthn. | [optional] |
+| **onclick** | **String** | OnClick may contain javascript which should be executed on click. This is primarily used for WebAuthn.  Deprecated: Using OnClick requires the use of eval() which is a security risk. Use OnClickTrigger instead. | [optional] |
+| **onclick_trigger** | **String** | OnClickTrigger may contain a WebAuthn trigger which should be executed on click.  The trigger maps to a JavaScript function provided by Ory, which triggers actions such as PassKey registration or login. oryWebAuthnRegistration WebAuthnTriggersWebAuthnRegistration oryWebAuthnLogin WebAuthnTriggersWebAuthnLogin oryPasskeyLogin WebAuthnTriggersPasskeyLogin oryPasskeyLoginAutocompleteInit WebAuthnTriggersPasskeyLoginAutocompleteInit oryPasskeyRegistration WebAuthnTriggersPasskeyRegistration oryPasskeySettingsRegistration WebAuthnTriggersPasskeySettingsRegistration | [optional] |
+| **onload** | **String** | OnLoad may contain javascript which should be executed on load. This is primarily used for WebAuthn.  Deprecated: Using OnLoad requires the use of eval() which is a security risk. Use OnLoadTrigger instead. | [optional] |
+| **onload_trigger** | **String** | OnLoadTrigger may contain a WebAuthn trigger which should be executed on load.  The trigger maps to a JavaScript function provided by Ory, which triggers actions such as PassKey registration or login. oryWebAuthnRegistration WebAuthnTriggersWebAuthnRegistration oryWebAuthnLogin WebAuthnTriggersWebAuthnLogin oryPasskeyLogin WebAuthnTriggersPasskeyLogin oryPasskeyLoginAutocompleteInit WebAuthnTriggersPasskeyLoginAutocompleteInit oryPasskeyRegistration WebAuthnTriggersPasskeyRegistration oryPasskeySettingsRegistration WebAuthnTriggersPasskeySettingsRegistration | [optional] |
 | **pattern** | **String** | The input's pattern. | [optional] |
 | **required** | **Boolean** | Mark this input field as required. | [optional] |
 | **type** | **String** | The input's element type. text InputAttributeTypeText password InputAttributeTypePassword number InputAttributeTypeNumber checkbox InputAttributeTypeCheckbox hidden InputAttributeTypeHidden email InputAttributeTypeEmail tel InputAttributeTypeTel submit InputAttributeTypeSubmit button InputAttributeTypeButton datetime-local InputAttributeTypeDateTimeLocal date InputAttributeTypeDate url InputAttributeTypeURI |  |
@@ -25,10 +28,13 @@ instance = OryKratosClient::UiNodeInputAttributes.new(
   autocomplete: null,
   disabled: null,
   label: null,
+  maxlength: null,
   name: null,
   node_type: null,
   onclick: null,
+  onclick_trigger: null,
   onload: null,
+  onload_trigger: null,
   pattern: null,
   required: null,
   type: null,

data/docs/UpdateFedcmFlowBody.md

@@ -0,0 +1,22 @@
+# OryKratosClient::UpdateFedcmFlowBody
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **csrf_token** | **String** | CSRFToken is the anti-CSRF token. |  |
+| **nonce** | **String** | Nonce is the nonce that was used in the `navigator.credentials.get` call. If specified, it must match the `nonce` claim in the token. | [optional] |
+| **token** | **String** | Token contains the result of `navigator.credentials.get`. |  |
+
+## Example
+
+```ruby
+require 'ory-kratos-client'
+
+instance = OryKratosClient::UpdateFedcmFlowBody.new(
+  csrf_token: null,
+  nonce: null,
+  token: null
+)
+```
+

data/docs/UpdateLoginFlowBody.md

@@ -15,6 +15,7 @@ OryKratosClient::UpdateLoginFlowBody.openapi_one_of
 # =>
 # [
 #   :'UpdateLoginFlowWithCodeMethod',
+#   :'UpdateLoginFlowWithIdentifierFirstMethod',
 #   :'UpdateLoginFlowWithLookupSecretMethod',
 #   :'UpdateLoginFlowWithOidcMethod',
 #   :'UpdateLoginFlowWithPasskeyMethod',
@@ -50,6 +51,7 @@ OryKratosClient::UpdateLoginFlowBody.openapi_discriminator_mapping
 # =>
 # {
 #   :'code' => :'UpdateLoginFlowWithCodeMethod',
+#   :'identifier_first' => :'UpdateLoginFlowWithIdentifierFirstMethod',
 #   :'lookup_secret' => :'UpdateLoginFlowWithLookupSecretMethod',
 #   :'oidc' => :'UpdateLoginFlowWithOidcMethod',
 #   :'passkey' => :'UpdateLoginFlowWithPasskeyMethod',
@@ -84,6 +86,7 @@ OryKratosClient::UpdateLoginFlowBody.build(data_that_doesnt_match)
 #### Return type
 
 - `UpdateLoginFlowWithCodeMethod`
+- `UpdateLoginFlowWithIdentifierFirstMethod`
 - `UpdateLoginFlowWithLookupSecretMethod`
 - `UpdateLoginFlowWithOidcMethod`
 - `UpdateLoginFlowWithPasskeyMethod`

data/docs/UpdateLoginFlowWithCodeMethod.md

@@ -4,6 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **address** | **String** | Address is the address to send the code to, in case that there are multiple addresses. This field is only used in two-factor flows and is ineffective for passwordless flows. | [optional] |
 | **code** | **String** | Code is the 6 digits code sent to the user | [optional] |
 | **csrf_token** | **String** | CSRFToken is the anti-CSRF token |  |
 | **identifier** | **String** | Identifier is the code identifier The identifier requires that the user has already completed the registration or settings with code flow. | [optional] |
@@ -17,6 +18,7 @@
 require 'ory-kratos-client'
 
 instance = OryKratosClient::UpdateLoginFlowWithCodeMethod.new(
+  address: null,
   code: null,
   csrf_token: null,
   identifier: null,

data/docs/UpdateLoginFlowWithIdentifierFirstMethod.md

@@ -0,0 +1,24 @@
+# OryKratosClient::UpdateLoginFlowWithIdentifierFirstMethod
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **csrf_token** | **String** | Sending the anti-csrf token is only required for browser login flows. | [optional] |
+| **identifier** | **String** | Identifier is the email or username of the user trying to log in. |  |
+| **method** | **String** | Method should be set to \"password\" when logging in using the identifier and password strategy. |  |
+| **transient_payload** | **Object** | Transient data to pass along to any webhooks | [optional] |
+
+## Example
+
+```ruby
+require 'ory-kratos-client'
+
+instance = OryKratosClient::UpdateLoginFlowWithIdentifierFirstMethod.new(
+  csrf_token: null,
+  identifier: null,
+  method: null,
+  transient_payload: null
+)
+```
+

data/docs/UpdateLoginFlowWithOidcMethod.md

@@ -5,7 +5,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **csrf_token** | **String** | The CSRF Token | [optional] |
-| **id_token** | **String** | IDToken is an optional id token provided by an OIDC provider  If submitted, it is verified using the OIDC provider's public key set and the claims are used to populate the OIDC credentials of the identity. If the OIDC provider does not store additional claims (such as name, etc.) in the IDToken itself, you can use the `traits` field to populate the identity's traits. Note, that Apple only includes the users email in the IDToken.  Supported providers are Apple | [optional] |
+| **id_token** | **String** | IDToken is an optional id token provided by an OIDC provider  If submitted, it is verified using the OIDC provider's public key set and the claims are used to populate the OIDC credentials of the identity. If the OIDC provider does not store additional claims (such as name, etc.) in the IDToken itself, you can use the `traits` field to populate the identity's traits. Note, that Apple only includes the users email in the IDToken.  Supported providers are Apple Google | [optional] |
 | **id_token_nonce** | **String** | IDTokenNonce is the nonce, used when generating the IDToken. If the provider supports nonce validation, the nonce will be validated against this value and required. | [optional] |
 | **method** | **String** | Method to use  This field must be set to `oidc` when using the oidc method. |  |
 | **provider** | **String** | The provider to register with |  |

data/docs/UpdateRegistrationFlowBody.md

@@ -18,6 +18,7 @@ OryKratosClient::UpdateRegistrationFlowBody.openapi_one_of
 #   :'UpdateRegistrationFlowWithOidcMethod',
 #   :'UpdateRegistrationFlowWithPasskeyMethod',
 #   :'UpdateRegistrationFlowWithPasswordMethod',
+#   :'UpdateRegistrationFlowWithProfileMethod',
 #   :'UpdateRegistrationFlowWithWebAuthnMethod'
 # ]
 ```
@@ -49,8 +50,9 @@ OryKratosClient::UpdateRegistrationFlowBody.openapi_discriminator_mapping
 # {
 #   :'code' => :'UpdateRegistrationFlowWithCodeMethod',
 #   :'oidc' => :'UpdateRegistrationFlowWithOidcMethod',
-#   :'passKey' => :'UpdateRegistrationFlowWithPasskeyMethod',
+#   :'passkey' => :'UpdateRegistrationFlowWithPasskeyMethod',
 #   :'password' => :'UpdateRegistrationFlowWithPasswordMethod',
+#   :'profile' => :'UpdateRegistrationFlowWithProfileMethod',
 #   :'webauthn' => :'UpdateRegistrationFlowWithWebAuthnMethod'
 # }
 ```
@@ -83,6 +85,7 @@ OryKratosClient::UpdateRegistrationFlowBody.build(data_that_doesnt_match)
 - `UpdateRegistrationFlowWithOidcMethod`
 - `UpdateRegistrationFlowWithPasskeyMethod`
 - `UpdateRegistrationFlowWithPasswordMethod`
+- `UpdateRegistrationFlowWithProfileMethod`
 - `UpdateRegistrationFlowWithWebAuthnMethod`
 - `nil` (if no type matches)
 

data/docs/UpdateRegistrationFlowWithOidcMethod.md

@@ -5,7 +5,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **csrf_token** | **String** | The CSRF Token | [optional] |
-| **id_token** | **String** | IDToken is an optional id token provided by an OIDC provider  If submitted, it is verified using the OIDC provider's public key set and the claims are used to populate the OIDC credentials of the identity. If the OIDC provider does not store additional claims (such as name, etc.) in the IDToken itself, you can use the `traits` field to populate the identity's traits. Note, that Apple only includes the users email in the IDToken.  Supported providers are Apple | [optional] |
+| **id_token** | **String** | IDToken is an optional id token provided by an OIDC provider  If submitted, it is verified using the OIDC provider's public key set and the claims are used to populate the OIDC credentials of the identity. If the OIDC provider does not store additional claims (such as name, etc.) in the IDToken itself, you can use the `traits` field to populate the identity's traits. Note, that Apple only includes the users email in the IDToken.  Supported providers are Apple Google | [optional] |
 | **id_token_nonce** | **String** | IDTokenNonce is the nonce, used when generating the IDToken. If the provider supports nonce validation, the nonce will be validated against this value and is required. | [optional] |
 | **method** | **String** | Method to use  This field must be set to `oidc` when using the oidc method. |  |
 | **provider** | **String** | The provider to register with |  |

data/docs/UpdateRegistrationFlowWithProfileMethod.md

@@ -6,7 +6,7 @@
 | ---- | ---- | ----------- | ----- |
 | **csrf_token** | **String** | The Anti-CSRF Token  This token is only required when performing browser flows. | [optional] |
 | **method** | **String** | Method  Should be set to profile when trying to update a profile. |  |
-| **screen** | **String** | Screen requests navigation to a previous screen.  This must be set to credential-selection to go back to the credential selection screen. | [optional] |
+| **screen** | **String** | Screen requests navigation to a previous screen.  This must be set to credential-selection to go back to the credential selection screen. credential-selection RegistrationScreenCredentialSelection nolint:gosec // not a credential previous RegistrationScreenPrevious | [optional] |
 | **traits** | **Object** | Traits  The identity's traits. |  |
 | **transient_payload** | **Object** | Transient data to pass along to any webhooks | [optional] |
 

data/lib/ory-kratos-client/api/courier_api.rb

@@ -3,7 +3,7 @@
 
 #This is the API specification for Ory Identities with features such as registration, login, recovery, account verification, profile settings, password reset, identity management, session management, email and sms delivery, and more. 
 
-The version of the OpenAPI document: v1.2.1
+The version of the OpenAPI document: v1.3.4
 Contact: office@ory.sh
 Generated by: https://openapi-generator.tech
 Generator version: 7.7.0