ory-kratos-client 1.2.1 → 1.3.5

data/lib/ory-kratos-client/api/frontend_api.rb

@@ -3,7 +3,7 @@
 
 #This is the API specification for Ory Identities with features such as registration, login, recovery, account verification, profile settings, password reset, identity management, session management, email and sms delivery, and more. 
 
-The version of the OpenAPI document: v1.2.1
+The version of the OpenAPI document: v1.3.5
 Contact: office@ory.sh
 Generated by: https://openapi-generator.tech
 Generator version: 7.7.0
@@ -28,7 +28,7 @@ module OryKratosClient
     # @option opts [String] :cookie HTTP Cookies  When using the SDK in a browser app, on the server side you must include the HTTP Cookie Header sent by the client to your server here. This ensures that CSRF and session cookies are respected.
     # @option opts [String] :login_challenge An optional Hydra login challenge. If present, Kratos will cooperate with Ory Hydra to act as an OAuth2 identity provider.  The value for this parameter comes from `login_challenge` URL Query parameter sent to your application (e.g. `/login?login_challenge=abcde`).
     # @option opts [String] :organization An optional organization ID that should be used for logging this user in. This parameter is only effective in the Ory Network.
-    # @option opts [String] :via Via should contain the identity's credential the code should be sent to. Only relevant in aal2 flows.
+    # @option opts [String] :via Via should contain the identity's credential the code should be sent to. Only relevant in aal2 flows.  DEPRECATED: This field is deprecated. Please remove it from your requests. The user will now see a choice of MFA credentials to choose from to perform the second factor instead.
     # @return [LoginFlow]
     def create_browser_login_flow(opts = {})
       data, _status_code, _headers = create_browser_login_flow_with_http_info(opts)
@@ -44,7 +44,7 @@ module OryKratosClient
     # @option opts [String] :cookie HTTP Cookies  When using the SDK in a browser app, on the server side you must include the HTTP Cookie Header sent by the client to your server here. This ensures that CSRF and session cookies are respected.
     # @option opts [String] :login_challenge An optional Hydra login challenge. If present, Kratos will cooperate with Ory Hydra to act as an OAuth2 identity provider.  The value for this parameter comes from `login_challenge` URL Query parameter sent to your application (e.g. `/login?login_challenge=abcde`).
     # @option opts [String] :organization An optional organization ID that should be used for logging this user in. This parameter is only effective in the Ory Network.
-    # @option opts [String] :via Via should contain the identity's credential the code should be sent to. Only relevant in aal2 flows.
+    # @option opts [String] :via Via should contain the identity's credential the code should be sent to. Only relevant in aal2 flows.  DEPRECATED: This field is deprecated. Please remove it from your requests. The user will now see a choice of MFA credentials to choose from to perform the second factor instead.
     # @return [Array<(LoginFlow, Integer, Hash)>] LoginFlow data, response status code and response headers
     def create_browser_login_flow_with_http_info(opts = {})
       if @api_client.config.debugging
@@ -226,7 +226,7 @@ module OryKratosClient
     # @option opts [String] :return_to The URL to return the browser to after the flow was completed.
     # @option opts [String] :login_challenge Ory OAuth 2.0 Login Challenge.  If set will cooperate with Ory OAuth2 and OpenID to act as an OAuth2 server / OpenID Provider.  The value for this parameter comes from &#x60;login_challenge&#x60; URL Query parameter sent to your application (e.g. &#x60;/registration?login_challenge&#x3D;abcde&#x60;).  This feature is compatible with Ory Hydra when not running on the Ory Network.
     # @option opts [String] :after_verification_return_to The URL to return the browser to after the verification flow was completed.  After the registration flow is completed, the user will be sent a verification email. Upon completing the verification flow, this URL will be used to override the default &#x60;selfservice.flows.verification.after.default_redirect_to&#x60; value.
-    # @option opts [String] :organization 
+    # @option opts [String] :organization An optional organization ID that should be used to register this user. This parameter is only effective in the Ory Network.
     # @return [RegistrationFlow]
     def create_browser_registration_flow(opts = {})
       data, _status_code, _headers = create_browser_registration_flow_with_http_info(opts)
@@ -239,7 +239,7 @@ module OryKratosClient
     # @option opts [String] :return_to The URL to return the browser to after the flow was completed.
     # @option opts [String] :login_challenge Ory OAuth 2.0 Login Challenge.  If set will cooperate with Ory OAuth2 and OpenID to act as an OAuth2 server / OpenID Provider.  The value for this parameter comes from &#x60;login_challenge&#x60; URL Query parameter sent to your application (e.g. &#x60;/registration?login_challenge&#x3D;abcde&#x60;).  This feature is compatible with Ory Hydra when not running on the Ory Network.
     # @option opts [String] :after_verification_return_to The URL to return the browser to after the verification flow was completed.  After the registration flow is completed, the user will be sent a verification email. Upon completing the verification flow, this URL will be used to override the default &#x60;selfservice.flows.verification.after.default_redirect_to&#x60; value.
-    # @option opts [String] :organization 
+    # @option opts [String] :organization An optional organization ID that should be used to register this user. This parameter is only effective in the Ory Network.
     # @return [Array<(RegistrationFlow, Integer, Hash)>] RegistrationFlow data, response status code and response headers
     def create_browser_registration_flow_with_http_info(opts = {})
       if @api_client.config.debugging
@@ -412,6 +412,63 @@ module OryKratosClient
       return data, status_code, headers
     end
 
+    # Get FedCM Parameters
+    # This endpoint returns a list of all available FedCM providers. It is only supported on the Ory Network.
+    # @param [Hash] opts the optional parameters
+    # @return [CreateFedcmFlowResponse]
+    def create_fedcm_flow(opts = {})
+      data, _status_code, _headers = create_fedcm_flow_with_http_info(opts)
+      data
+    end
+
+    # Get FedCM Parameters
+    # This endpoint returns a list of all available FedCM providers. It is only supported on the Ory Network.
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(CreateFedcmFlowResponse, Integer, Hash)>] CreateFedcmFlowResponse data, response status code and response headers
+    def create_fedcm_flow_with_http_info(opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: FrontendApi.create_fedcm_flow ...'
+      end
+      # resource path
+      local_var_path = '/self-service/fed-cm/parameters'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'CreateFedcmFlowResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || []
+
+      new_options = opts.merge(
+        :operation => :"FrontendApi.create_fedcm_flow",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:GET, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: FrontendApi#create_fedcm_flow\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Create Login Flow for Native Apps
     # This endpoint initiates a login flow for native apps that do not use a browser, such as mobile devices, smart TVs, and so on.  If a valid provided session cookie or session token is provided, a 400 Bad Request error will be returned unless the URL query parameter `?refresh=true` is set.  To fetch an existing login flow call `/self-service/login/flows?flow=<flow_id>`.  You MUST NOT use this endpoint in client-side (Single Page Apps, ReactJS, AngularJS) nor server-side (Java Server Pages, NodeJS, PHP, Golang, ...) browser applications. Using this endpoint in these applications will make you vulnerable to a variety of CSRF attacks, including CSRF login attacks.  In the case of an error, the `error.id` of the JSON response body can be one of:  `session_already_available`: The user is already signed in. `session_aal1_required`: Multi-factor auth (e.g. 2fa) was requested but the user has no session yet. `security_csrf_violation`: Unable to fetch the flow because a CSRF violation occurred.  This endpoint MUST ONLY be used in scenarios such as native mobile apps (React Native, Objective C, Swift, Java, ...).  More information can be found at [Ory Kratos User Login](https://www.ory.sh/docs/kratos/self-service/flows/user-login) and [User Registration Documentation](https://www.ory.sh/docs/kratos/self-service/flows/user-registration).
     # @param [Hash] opts the optional parameters
@@ -420,7 +477,8 @@ module OryKratosClient
     # @option opts [String] :x_session_token The Session Token of the Identity performing the settings flow.
     # @option opts [Boolean] :return_session_token_exchange_code EnableSessionTokenExchangeCode requests the login flow to include a code that can be used to retrieve the session token after the login flow has been completed.
     # @option opts [String] :return_to The URL to return the browser to after the flow was completed.
-    # @option opts [String] :via Via should contain the identity&#39;s credential the code should be sent to. Only relevant in aal2 flows.
+    # @option opts [String] :organization An optional organization ID that should be used for logging this user in. This parameter is only effective in the Ory Network.
+    # @option opts [String] :via Via should contain the identity&#39;s credential the code should be sent to. Only relevant in aal2 flows.  DEPRECATED: This field is deprecated. Please remove it from your requests. The user will now see a choice of MFA credentials to choose from to perform the second factor instead.
     # @return [LoginFlow]
     def create_native_login_flow(opts = {})
       data, _status_code, _headers = create_native_login_flow_with_http_info(opts)
@@ -435,7 +493,8 @@ module OryKratosClient
     # @option opts [String] :x_session_token The Session Token of the Identity performing the settings flow.
     # @option opts [Boolean] :return_session_token_exchange_code EnableSessionTokenExchangeCode requests the login flow to include a code that can be used to retrieve the session token after the login flow has been completed.
     # @option opts [String] :return_to The URL to return the browser to after the flow was completed.
-    # @option opts [String] :via Via should contain the identity&#39;s credential the code should be sent to. Only relevant in aal2 flows.
+    # @option opts [String] :organization An optional organization ID that should be used for logging this user in. This parameter is only effective in the Ory Network.
+    # @option opts [String] :via Via should contain the identity&#39;s credential the code should be sent to. Only relevant in aal2 flows.  DEPRECATED: This field is deprecated. Please remove it from your requests. The user will now see a choice of MFA credentials to choose from to perform the second factor instead.
     # @return [Array<(LoginFlow, Integer, Hash)>] LoginFlow data, response status code and response headers
     def create_native_login_flow_with_http_info(opts = {})
       if @api_client.config.debugging
@@ -450,6 +509,7 @@ module OryKratosClient
       query_params[:'aal'] = opts[:'aal'] if !opts[:'aal'].nil?
       query_params[:'return_session_token_exchange_code'] = opts[:'return_session_token_exchange_code'] if !opts[:'return_session_token_exchange_code'].nil?
       query_params[:'return_to'] = opts[:'return_to'] if !opts[:'return_to'].nil?
+      query_params[:'organization'] = opts[:'organization'] if !opts[:'organization'].nil?
       query_params[:'via'] = opts[:'via'] if !opts[:'via'].nil?
 
       # header parameters
@@ -549,6 +609,7 @@ module OryKratosClient
     # @param [Hash] opts the optional parameters
     # @option opts [Boolean] :return_session_token_exchange_code EnableSessionTokenExchangeCode requests the login flow to include a code that can be used to retrieve the session token after the login flow has been completed.
     # @option opts [String] :return_to The URL to return the browser to after the flow was completed.
+    # @option opts [String] :organization An optional organization ID that should be used to register this user. This parameter is only effective in the Ory Network.
     # @return [RegistrationFlow]
     def create_native_registration_flow(opts = {})
       data, _status_code, _headers = create_native_registration_flow_with_http_info(opts)
@@ -560,6 +621,7 @@ module OryKratosClient
     # @param [Hash] opts the optional parameters
     # @option opts [Boolean] :return_session_token_exchange_code EnableSessionTokenExchangeCode requests the login flow to include a code that can be used to retrieve the session token after the login flow has been completed.
     # @option opts [String] :return_to The URL to return the browser to after the flow was completed.
+    # @option opts [String] :organization An optional organization ID that should be used to register this user. This parameter is only effective in the Ory Network.
     # @return [Array<(RegistrationFlow, Integer, Hash)>] RegistrationFlow data, response status code and response headers
     def create_native_registration_flow_with_http_info(opts = {})
       if @api_client.config.debugging
@@ -572,6 +634,7 @@ module OryKratosClient
       query_params = opts[:query_params] || {}
       query_params[:'return_session_token_exchange_code'] = opts[:'return_session_token_exchange_code'] if !opts[:'return_session_token_exchange_code'].nil?
       query_params[:'return_to'] = opts[:'return_to'] if !opts[:'return_to'].nil?
+      query_params[:'organization'] = opts[:'organization'] if !opts[:'organization'].nil?
 
       # header parameters
       header_params = opts[:header_params] || {}
@@ -670,6 +733,7 @@ module OryKratosClient
     # Create Verification Flow for Native Apps
     # This endpoint initiates a verification flow for API clients such as mobile devices, smart TVs, and so on.  To fetch an existing verification flow call `/self-service/verification/flows?flow=<flow_id>`.  You MUST NOT use this endpoint in client-side (Single Page Apps, ReactJS, AngularJS) nor server-side (Java Server Pages, NodeJS, PHP, Golang, ...) browser applications. Using this endpoint in these applications will make you vulnerable to a variety of CSRF attacks.  This endpoint MUST ONLY be used in scenarios such as native mobile apps (React Native, Objective C, Swift, Java, ...).  More information can be found at [Ory Email and Phone Verification Documentation](https://www.ory.sh/docs/kratos/self-service/flows/verify-email-account-activation).
     # @param [Hash] opts the optional parameters
+    # @option opts [String] :return_to A URL contained in the return_to key of the verification flow. This piece of data has no effect on the actual logic of the flow and is purely informational.
     # @return [VerificationFlow]
     def create_native_verification_flow(opts = {})
       data, _status_code, _headers = create_native_verification_flow_with_http_info(opts)
@@ -679,6 +743,7 @@ module OryKratosClient
     # Create Verification Flow for Native Apps
     # This endpoint initiates a verification flow for API clients such as mobile devices, smart TVs, and so on.  To fetch an existing verification flow call &#x60;/self-service/verification/flows?flow&#x3D;&lt;flow_id&gt;&#x60;.  You MUST NOT use this endpoint in client-side (Single Page Apps, ReactJS, AngularJS) nor server-side (Java Server Pages, NodeJS, PHP, Golang, ...) browser applications. Using this endpoint in these applications will make you vulnerable to a variety of CSRF attacks.  This endpoint MUST ONLY be used in scenarios such as native mobile apps (React Native, Objective C, Swift, Java, ...).  More information can be found at [Ory Email and Phone Verification Documentation](https://www.ory.sh/docs/kratos/self-service/flows/verify-email-account-activation).
     # @param [Hash] opts the optional parameters
+    # @option opts [String] :return_to A URL contained in the return_to key of the verification flow. This piece of data has no effect on the actual logic of the flow and is purely informational.
     # @return [Array<(VerificationFlow, Integer, Hash)>] VerificationFlow data, response status code and response headers
     def create_native_verification_flow_with_http_info(opts = {})
       if @api_client.config.debugging
@@ -689,6 +754,7 @@ module OryKratosClient
 
       # query parameters
       query_params = opts[:query_params] || {}
+      query_params[:'return_to'] = opts[:'return_to'] if !opts[:'return_to'].nil?
 
       # header parameters
       header_params = opts[:header_params] || {}
@@ -1609,6 +1675,74 @@ module OryKratosClient
       return data, status_code, headers
     end
 
+    # Submit a FedCM token
+    # Use this endpoint to submit a token from a FedCM provider through `navigator.credentials.get` and log the user in. The parameters from `navigator.credentials.get` must have come from `GET self-service/fed-cm/parameters`.
+    # @param update_fedcm_flow_body [UpdateFedcmFlowBody] 
+    # @param [Hash] opts the optional parameters
+    # @return [SuccessfulNativeLogin]
+    def update_fedcm_flow(update_fedcm_flow_body, opts = {})
+      data, _status_code, _headers = update_fedcm_flow_with_http_info(update_fedcm_flow_body, opts)
+      data
+    end
+
+    # Submit a FedCM token
+    # Use this endpoint to submit a token from a FedCM provider through &#x60;navigator.credentials.get&#x60; and log the user in. The parameters from &#x60;navigator.credentials.get&#x60; must have come from &#x60;GET self-service/fed-cm/parameters&#x60;.
+    # @param update_fedcm_flow_body [UpdateFedcmFlowBody] 
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(SuccessfulNativeLogin, Integer, Hash)>] SuccessfulNativeLogin data, response status code and response headers
+    def update_fedcm_flow_with_http_info(update_fedcm_flow_body, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: FrontendApi.update_fedcm_flow ...'
+      end
+      # verify the required parameter 'update_fedcm_flow_body' is set
+      if @api_client.config.client_side_validation && update_fedcm_flow_body.nil?
+        fail ArgumentError, "Missing the required parameter 'update_fedcm_flow_body' when calling FrontendApi.update_fedcm_flow"
+      end
+      # resource path
+      local_var_path = '/self-service/fed-cm/token'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json'])
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json', 'application/x-www-form-urlencoded'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(update_fedcm_flow_body)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'SuccessfulNativeLogin'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || []
+
+      new_options = opts.merge(
+        :operation => :"FrontendApi.update_fedcm_flow",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: FrontendApi#update_fedcm_flow\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Submit a Login Flow
     # Use this endpoint to complete a login flow. This endpoint behaves differently for API and browser flows.  API flows expect `application/json` to be sent in the body and responds with HTTP 200 and a application/json body with the session token on success; HTTP 410 if the original flow expired with the appropriate error messages set and optionally a `use_flow_id` parameter in the body; HTTP 400 on form validation errors.  Browser flows expect a Content-Type of `application/x-www-form-urlencoded` or `application/json` to be sent in the body and respond with a HTTP 303 redirect to the post/after login URL or the `return_to` value if it was set and if the login succeeded; a HTTP 303 redirect to the login UI URL with the flow ID containing the validation errors otherwise.  Browser flows with an accept header of `application/json` will not redirect but instead respond with HTTP 200 and a application/json body with the signed in identity and a `Set-Cookie` header on success; HTTP 303 redirect to a fresh login flow if the original flow expired with the appropriate error messages set; HTTP 400 on form validation errors.  If this endpoint is called with `Accept: application/json` in the header, the response contains the flow without a redirect. In the case of an error, the `error.id` of the JSON response body can be one of:  `session_already_available`: The user is already signed in. `security_csrf_violation`: Unable to fetch the flow because a CSRF violation occurred. `security_identity_mismatch`: The requested `?return_to` address is not allowed to be used. Adjust this in the configuration! `browser_location_change_required`: Usually sent when an AJAX request indicates that the browser needs to open a specific URL. Most likely used in Social Sign In flows.  More information can be found at [Ory Kratos User Login](https://www.ory.sh/docs/kratos/self-service/flows/user-login) and [User Registration Documentation](https://www.ory.sh/docs/kratos/self-service/flows/user-registration).
     # @param flow [String] The Login Flow ID  The value for this parameter comes from &#x60;flow&#x60; URL Query parameter sent to your application (e.g. &#x60;/login?flow&#x3D;abcde&#x60;).

data/lib/ory-kratos-client/api/identity_api.rb

@@ -3,7 +3,7 @@
 
 #This is the API specification for Ory Identities with features such as registration, login, recovery, account verification, profile settings, password reset, identity management, session management, email and sms delivery, and more. 
 
-The version of the OpenAPI document: v1.2.1
+The version of the OpenAPI document: v1.3.5
 Contact: office@ory.sh
 Generated by: https://openapi-generator.tech
 Generator version: 7.7.0
@@ -342,10 +342,11 @@ module OryKratosClient
     end
 
     # Delete a credential for a specific identity
-    # Delete an [identity](https://www.ory.sh/docs/kratos/concepts/identity-user-model) credential by its type You can only delete second factor (aal2) credentials.
+    # Delete an [identity](https://www.ory.sh/docs/kratos/concepts/identity-user-model) credential by its type. You cannot delete password or code auth credentials through this API.
     # @param id [String] ID is the identity's ID.
-    # @param type [String] Type is the type of credentials to be deleted. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode
+    # @param type [String] Type is the type of credentials to delete. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile saml CredentialsTypeSAML link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode
     # @param [Hash] opts the optional parameters
+    # @option opts [String] :identifier Identifier is the identifier of the OIDC credential to delete. Find the identifier by calling the `GET /admin/identities/{id}?include_credential=oidc` endpoint.
     # @return [nil]
     def delete_identity_credentials(id, type, opts = {})
       delete_identity_credentials_with_http_info(id, type, opts)
@@ -353,10 +354,11 @@ module OryKratosClient
     end
 
     # Delete a credential for a specific identity
-    # Delete an [identity](https://www.ory.sh/docs/kratos/concepts/identity-user-model) credential by its type You can only delete second factor (aal2) credentials.
+    # Delete an [identity](https://www.ory.sh/docs/kratos/concepts/identity-user-model) credential by its type. You cannot delete password or code auth credentials through this API.
     # @param id [String] ID is the identity's ID.
-    # @param type [String] Type is the type of credentials to be deleted. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode
+    # @param type [String] Type is the type of credentials to delete. password CredentialsTypePassword oidc CredentialsTypeOIDC totp CredentialsTypeTOTP lookup_secret CredentialsTypeLookup webauthn CredentialsTypeWebAuthn code CredentialsTypeCodeAuth passkey CredentialsTypePasskey profile CredentialsTypeProfile saml CredentialsTypeSAML link_recovery CredentialsTypeRecoveryLink  CredentialsTypeRecoveryLink is a special credential type linked to the link strategy (recovery flow).  It is not used within the credentials object itself. code_recovery CredentialsTypeRecoveryCode
     # @param [Hash] opts the optional parameters
+    # @option opts [String] :identifier Identifier is the identifier of the OIDC credential to delete. Find the identifier by calling the `GET /admin/identities/{id}?include_credential=oidc` endpoint.
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
     def delete_identity_credentials_with_http_info(id, type, opts = {})
       if @api_client.config.debugging
@@ -371,7 +373,7 @@ module OryKratosClient
         fail ArgumentError, "Missing the required parameter 'type' when calling IdentityApi.delete_identity_credentials"
       end
       # verify enum value
-      allowable_values = ["password", "oidc", "totp", "lookup_secret", "webauthn", "code", "passkey", "profile", "link_recovery", "code_recovery"]
+      allowable_values = ["password", "oidc", "totp", "lookup_secret", "webauthn", "code", "passkey", "profile", "saml", "link_recovery", "code_recovery"]
       if @api_client.config.client_side_validation && !allowable_values.include?(type)
         fail ArgumentError, "invalid value for \"type\", must be one of #{allowable_values}"
       end
@@ -380,6 +382,7 @@ module OryKratosClient
 
       # query parameters
       query_params = opts[:query_params] || {}
+      query_params[:'identifier'] = opts[:'identifier'] if !opts[:'identifier'].nil?
 
       # header parameters
       header_params = opts[:header_params] || {}
@@ -542,7 +545,7 @@ module OryKratosClient
     end
 
     # Extend a Session
-    # Calling this endpoint extends the given session ID. If `session.earliest_possible_extend` is set it will only extend the session after the specified time has passed.  Retrieve the session ID from the `/sessions/whoami` endpoint / `toSession` SDK method.
+    # Calling this endpoint extends the given session ID. If `session.earliest_possible_extend` is set it will only extend the session after the specified time has passed.  This endpoint returns per default a 204 No Content response on success. Older Ory Network projects may return a 200 OK response with the session in the body. Returning the session as part of the response will be deprecated in the future and should not be relied upon.  This endpoint ignores consecutive requests to extend the same session and returns a 404 error in those scenarios. This endpoint also returns 404 errors if the session does not exist.  Retrieve the session ID from the `/sessions/whoami` endpoint / `toSession` SDK method.
     # @param id [String] ID is the session&#39;s ID.
     # @param [Hash] opts the optional parameters
     # @return [Session]
@@ -552,7 +555,7 @@ module OryKratosClient
     end
 
     # Extend a Session
-    # Calling this endpoint extends the given session ID. If &#x60;session.earliest_possible_extend&#x60; is set it will only extend the session after the specified time has passed.  Retrieve the session ID from the &#x60;/sessions/whoami&#x60; endpoint / &#x60;toSession&#x60; SDK method.
+    # Calling this endpoint extends the given session ID. If &#x60;session.earliest_possible_extend&#x60; is set it will only extend the session after the specified time has passed.  This endpoint returns per default a 204 No Content response on success. Older Ory Network projects may return a 200 OK response with the session in the body. Returning the session as part of the response will be deprecated in the future and should not be relied upon.  This endpoint ignores consecutive requests to extend the same session and returns a 404 error in those scenarios. This endpoint also returns 404 errors if the session does not exist.  Retrieve the session ID from the &#x60;/sessions/whoami&#x60; endpoint / &#x60;toSession&#x60; SDK method.
     # @param id [String] ID is the session&#39;s ID.
     # @param [Hash] opts the optional parameters
     # @return [Array<(Session, Integer, Hash)>] Session data, response status code and response headers
@@ -629,7 +632,7 @@ module OryKratosClient
       if @api_client.config.client_side_validation && id.nil?
         fail ArgumentError, "Missing the required parameter 'id' when calling IdentityApi.get_identity"
       end
-      allowable_values = ["password", "oidc", "totp", "lookup_secret", "webauthn", "code", "passkey", "profile", "link_recovery", "code_recovery"]
+      allowable_values = ["password", "oidc", "totp", "lookup_secret", "webauthn", "code", "passkey", "profile", "saml", "link_recovery", "code_recovery"]
       if @api_client.config.client_side_validation && opts[:'include_credential'] && !opts[:'include_credential'].all? { |item| allowable_values.include?(item) }
         fail ArgumentError, "invalid value for \"include_credential\", must include one of #{allowable_values}"
       end
@@ -808,17 +811,18 @@ module OryKratosClient
     end
 
     # List Identities
-    # Lists all [identities](https://www.ory.sh/docs/kratos/concepts/identity-user-model) in the system.
+    # Lists all [identities](https://www.ory.sh/docs/kratos/concepts/identity-user-model) in the system. Note: filters cannot be combined.
     # @param [Hash] opts the optional parameters
     # @option opts [Integer] :per_page Deprecated Items per Page  DEPRECATED: Please use &#x60;page_token&#x60; instead. This parameter will be removed in the future.  This is the number of items per page. (default to 250)
     # @option opts [Integer] :page Deprecated Pagination Page  DEPRECATED: Please use &#x60;page_token&#x60; instead. This parameter will be removed in the future.  This value is currently an integer, but it is not sequential. The value is not the page number, but a reference. The next page can be any number and some numbers might return an empty list.  For example, page 2 might not follow after page 1. And even if page 3 and 5 exist, but page 4 might not exist. The first page can be retrieved by omitting this parameter. Following page pointers will be returned in the &#x60;Link&#x60; header.
     # @option opts [Integer] :page_size Page Size  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). (default to 250)
     # @option opts [String] :page_token Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). (default to '1')
     # @option opts [String] :consistency Read Consistency Level (preview)  The read consistency level determines the consistency guarantee for reads:  strong (slow): The read is guaranteed to return the most recent data committed at the start of the read. eventual (very fast): The result will return data that is about 4.8 seconds old.  The default consistency guarantee can be changed in the Ory Network Console or using the Ory CLI with &#x60;ory patch project --replace &#39;/previews/default_read_consistency_level&#x3D;\&quot;strong\&quot;&#39;&#x60;.  Setting the default consistency level to &#x60;eventual&#x60; may cause regressions in the future as we add consistency controls to more APIs. Currently, the following APIs will be affected by this setting:  &#x60;GET /admin/identities&#x60;  This feature is in preview and only available in Ory Network.  ConsistencyLevelUnset  ConsistencyLevelUnset is the unset / default consistency level. strong ConsistencyLevelStrong  ConsistencyLevelStrong is the strong consistency level. eventual ConsistencyLevelEventual  ConsistencyLevelEventual is the eventual consistency level using follower read timestamps.
-    # @option opts [Array<String>] :ids List of ids used to filter identities. If this list is empty, then no filter will be applied.
+    # @option opts [Array<String>] :ids Retrieve multiple identities by their IDs.  This parameter has the following limitations:  Duplicate or non-existent IDs are ignored. The order of returned IDs may be different from the request. This filter does not support pagination. You must implement your own pagination as the maximum number of items returned by this endpoint may not exceed a certain threshold (currently 500).
     # @option opts [String] :credentials_identifier CredentialsIdentifier is the identifier (username, email) of the credentials to look up using exact match. Only one of CredentialsIdentifier and CredentialsIdentifierSimilar can be used.
     # @option opts [String] :preview_credentials_identifier_similar This is an EXPERIMENTAL parameter that WILL CHANGE. Do NOT rely on consistent, deterministic behavior. THIS PARAMETER WILL BE REMOVED IN AN UPCOMING RELEASE WITHOUT ANY MIGRATION PATH.  CredentialsIdentifierSimilar is the (partial) identifier (username, email) of the credentials to look up using similarity search. Only one of CredentialsIdentifier and CredentialsIdentifierSimilar can be used.
     # @option opts [Array<String>] :include_credential Include Credentials in Response  Include any credential, for example &#x60;password&#x60; or &#x60;oidc&#x60;, in the response. When set to &#x60;oidc&#x60;, This will return the initial OAuth 2.0 Access Token, OAuth 2.0 Refresh Token and the OpenID Connect ID Token if available.
+    # @option opts [String] :organization_id List identities that belong to a specific organization.
     # @return [Array<Identity>]
     def list_identities(opts = {})
       data, _status_code, _headers = list_identities_with_http_info(opts)
@@ -826,17 +830,18 @@ module OryKratosClient
     end
 
     # List Identities
-    # Lists all [identities](https://www.ory.sh/docs/kratos/concepts/identity-user-model) in the system.
+    # Lists all [identities](https://www.ory.sh/docs/kratos/concepts/identity-user-model) in the system. Note: filters cannot be combined.
     # @param [Hash] opts the optional parameters
     # @option opts [Integer] :per_page Deprecated Items per Page  DEPRECATED: Please use &#x60;page_token&#x60; instead. This parameter will be removed in the future.  This is the number of items per page. (default to 250)
     # @option opts [Integer] :page Deprecated Pagination Page  DEPRECATED: Please use &#x60;page_token&#x60; instead. This parameter will be removed in the future.  This value is currently an integer, but it is not sequential. The value is not the page number, but a reference. The next page can be any number and some numbers might return an empty list.  For example, page 2 might not follow after page 1. And even if page 3 and 5 exist, but page 4 might not exist. The first page can be retrieved by omitting this parameter. Following page pointers will be returned in the &#x60;Link&#x60; header.
     # @option opts [Integer] :page_size Page Size  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). (default to 250)
     # @option opts [String] :page_token Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). (default to '1')
     # @option opts [String] :consistency Read Consistency Level (preview)  The read consistency level determines the consistency guarantee for reads:  strong (slow): The read is guaranteed to return the most recent data committed at the start of the read. eventual (very fast): The result will return data that is about 4.8 seconds old.  The default consistency guarantee can be changed in the Ory Network Console or using the Ory CLI with &#x60;ory patch project --replace &#39;/previews/default_read_consistency_level&#x3D;\&quot;strong\&quot;&#39;&#x60;.  Setting the default consistency level to &#x60;eventual&#x60; may cause regressions in the future as we add consistency controls to more APIs. Currently, the following APIs will be affected by this setting:  &#x60;GET /admin/identities&#x60;  This feature is in preview and only available in Ory Network.  ConsistencyLevelUnset  ConsistencyLevelUnset is the unset / default consistency level. strong ConsistencyLevelStrong  ConsistencyLevelStrong is the strong consistency level. eventual ConsistencyLevelEventual  ConsistencyLevelEventual is the eventual consistency level using follower read timestamps.
-    # @option opts [Array<String>] :ids List of ids used to filter identities. If this list is empty, then no filter will be applied.
+    # @option opts [Array<String>] :ids Retrieve multiple identities by their IDs.  This parameter has the following limitations:  Duplicate or non-existent IDs are ignored. The order of returned IDs may be different from the request. This filter does not support pagination. You must implement your own pagination as the maximum number of items returned by this endpoint may not exceed a certain threshold (currently 500).
     # @option opts [String] :credentials_identifier CredentialsIdentifier is the identifier (username, email) of the credentials to look up using exact match. Only one of CredentialsIdentifier and CredentialsIdentifierSimilar can be used.
     # @option opts [String] :preview_credentials_identifier_similar This is an EXPERIMENTAL parameter that WILL CHANGE. Do NOT rely on consistent, deterministic behavior. THIS PARAMETER WILL BE REMOVED IN AN UPCOMING RELEASE WITHOUT ANY MIGRATION PATH.  CredentialsIdentifierSimilar is the (partial) identifier (username, email) of the credentials to look up using similarity search. Only one of CredentialsIdentifier and CredentialsIdentifierSimilar can be used.
     # @option opts [Array<String>] :include_credential Include Credentials in Response  Include any credential, for example &#x60;password&#x60; or &#x60;oidc&#x60;, in the response. When set to &#x60;oidc&#x60;, This will return the initial OAuth 2.0 Access Token, OAuth 2.0 Refresh Token and the OpenID Connect ID Token if available.
+    # @option opts [String] :organization_id List identities that belong to a specific organization.
     # @return [Array<(Array<Identity>, Integer, Hash)>] Array<Identity> data, response status code and response headers
     def list_identities_with_http_info(opts = {})
       if @api_client.config.debugging
@@ -876,6 +881,7 @@ module OryKratosClient
       query_params[:'credentials_identifier'] = opts[:'credentials_identifier'] if !opts[:'credentials_identifier'].nil?
       query_params[:'preview_credentials_identifier_similar'] = opts[:'preview_credentials_identifier_similar'] if !opts[:'preview_credentials_identifier_similar'].nil?
       query_params[:'include_credential'] = @api_client.build_collection_param(opts[:'include_credential'], :multi) if !opts[:'include_credential'].nil?
+      query_params[:'organization_id'] = opts[:'organization_id'] if !opts[:'organization_id'].nil?
 
       # header parameters
       header_params = opts[:header_params] || {}

data/lib/ory-kratos-client/api/metadata_api.rb

@@ -3,7 +3,7 @@
 
 #This is the API specification for Ory Identities with features such as registration, login, recovery, account verification, profile settings, password reset, identity management, session management, email and sms delivery, and more. 
 
-The version of the OpenAPI document: v1.2.1
+The version of the OpenAPI document: v1.3.5
 Contact: office@ory.sh
 Generated by: https://openapi-generator.tech
 Generator version: 7.7.0

data/lib/ory-kratos-client/api_client.rb

@@ -3,7 +3,7 @@
 
 #This is the API specification for Ory Identities with features such as registration, login, recovery, account verification, profile settings, password reset, identity management, session management, email and sms delivery, and more. 
 
-The version of the OpenAPI document: v1.2.1
+The version of the OpenAPI document: v1.3.5
 Contact: office@ory.sh
 Generated by: https://openapi-generator.tech
 Generator version: 7.7.0

data/lib/ory-kratos-client/api_error.rb

@@ -3,7 +3,7 @@
 
 #This is the API specification for Ory Identities with features such as registration, login, recovery, account verification, profile settings, password reset, identity management, session management, email and sms delivery, and more. 
 
-The version of the OpenAPI document: v1.2.1
+The version of the OpenAPI document: v1.3.5
 Contact: office@ory.sh
 Generated by: https://openapi-generator.tech
 Generator version: 7.7.0

data/lib/ory-kratos-client/configuration.rb

@@ -3,7 +3,7 @@
 
 #This is the API specification for Ory Identities with features such as registration, login, recovery, account verification, profile settings, password reset, identity management, session management, email and sms delivery, and more. 
 
-The version of the OpenAPI document: v1.2.1
+The version of the OpenAPI document: v1.3.5
 Contact: office@ory.sh
 Generated by: https://openapi-generator.tech
 Generator version: 7.7.0

data/lib/ory-kratos-client/models/authenticator_assurance_level.rb

@@ -3,7 +3,7 @@
 
 #This is the API specification for Ory Identities with features such as registration, login, recovery, account verification, profile settings, password reset, identity management, session management, email and sms delivery, and more. 
 
-The version of the OpenAPI document: v1.2.1
+The version of the OpenAPI document: v1.3.5
 Contact: office@ory.sh
 Generated by: https://openapi-generator.tech
 Generator version: 7.7.0

data/lib/ory-kratos-client/models/batch_patch_identities_response.rb

@@ -3,7 +3,7 @@
 
 #This is the API specification for Ory Identities with features such as registration, login, recovery, account verification, profile settings, password reset, identity management, session management, email and sms delivery, and more. 
 
-The version of the OpenAPI document: v1.2.1
+The version of the OpenAPI document: v1.3.5
 Contact: office@ory.sh
 Generated by: https://openapi-generator.tech
 Generator version: 7.7.0

data/lib/ory-kratos-client/models/consistency_request_parameters.rb

@@ -3,7 +3,7 @@
 
 #This is the API specification for Ory Identities with features such as registration, login, recovery, account verification, profile settings, password reset, identity management, session management, email and sms delivery, and more. 
 
-The version of the OpenAPI document: v1.2.1
+The version of the OpenAPI document: v1.3.5
 Contact: office@ory.sh
 Generated by: https://openapi-generator.tech
 Generator version: 7.7.0

data/lib/ory-kratos-client/models/continue_with.rb

@@ -3,7 +3,7 @@
 
 #This is the API specification for Ory Identities with features such as registration, login, recovery, account verification, profile settings, password reset, identity management, session management, email and sms delivery, and more. 
 
-The version of the OpenAPI document: v1.2.1
+The version of the OpenAPI document: v1.3.5
 Contact: office@ory.sh
 Generated by: https://openapi-generator.tech
 Generator version: 7.7.0
@@ -20,6 +20,7 @@ module OryKratosClient
       def openapi_one_of
         [
           :'ContinueWithRecoveryUi',
+          :'ContinueWithRedirectBrowserTo',
           :'ContinueWithSetOrySessionToken',
           :'ContinueWithSettingsUi',
           :'ContinueWithVerificationUi'
@@ -34,6 +35,7 @@ module OryKratosClient
       # Discriminator's mapping (OpenAPI v3)
       def openapi_discriminator_mapping
         {
+          :'redirect_browser_to' => :'ContinueWithRedirectBrowserTo',
           :'set_ory_session_token' => :'ContinueWithSetOrySessionToken',
           :'show_recovery_ui' => :'ContinueWithRecoveryUi',
           :'show_settings_ui' => :'ContinueWithSettingsUi',

data/lib/ory-kratos-client/models/continue_with_recovery_ui.rb

@@ -3,7 +3,7 @@
 
 #This is the API specification for Ory Identities with features such as registration, login, recovery, account verification, profile settings, password reset, identity management, session management, email and sms delivery, and more. 
 
-The version of the OpenAPI document: v1.2.1
+The version of the OpenAPI document: v1.3.5
 Contact: office@ory.sh
 Generated by: https://openapi-generator.tech
 Generator version: 7.7.0

data/lib/ory-kratos-client/models/continue_with_recovery_ui_flow.rb

@@ -3,7 +3,7 @@
 
 #This is the API specification for Ory Identities with features such as registration, login, recovery, account verification, profile settings, password reset, identity management, session management, email and sms delivery, and more. 
 
-The version of the OpenAPI document: v1.2.1
+The version of the OpenAPI document: v1.3.5
 Contact: office@ory.sh
 Generated by: https://openapi-generator.tech
 Generator version: 7.7.0
@@ -18,7 +18,7 @@ module OryKratosClient
     # The ID of the recovery flow
     attr_accessor :id
 
-    # The URL of the recovery flow
+    # The URL of the recovery flow  If this value is set, redirect the user's browser to this URL. This value is typically unset for native clients / API flows.
     attr_accessor :url
 
     # Attribute mapping from ruby-style variable name to JSON key.