stytch 10.42.0 → 11.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a9ec5299338703e2955b430042eb3abf11dca6474be1478e91faca5ecc5b7196
-  data.tar.gz: eaa3ad45194052e3a5a1734b5192d670ec04302b7b5194ec8a2128553ca4e8b0
+  metadata.gz: f71629db7c68eb1cc5d3ddfbd1258c460894417b36bff70155c4b6d14a3c805e
+  data.tar.gz: 1b9cc2a8cd738c52b0bcf2b1a001a5e8dd9b1f5b86befe3e956cdeebe58d0a6b
 SHA512:
-  metadata.gz: f48a0d7fcc636ca833de1895bc5f0594a9d8559196a0b4a7b0992b67465e75578aacace17be36a908fa6fd417d84a29a07f00cdafa13472ee43301b03321437d
-  data.tar.gz: da2f334d10213ff40aedaa934215e2b2c2cae6d2e9931db4c01f3ac8fa54a1ce10e40560d12eaacaa2ca162b632bc58fc494ef846c03e8207d95136094b843e2
+  metadata.gz: 9673c8aaaf31c622c9b20124ae5253149bc4e5dd769cbde16f5f0d5a2e8818b03cd43660a8c183443159053b5c883dadec372a228206f720c317046b677e50c5
+  data.tar.gz: dc98d996aed611a95a78dc22b85115ea7efce74935dc8f2f842b3c65b20bc106d89a430d42b60280d8a7b73b69dec434a19b7d11e7ee3dc93aac86e57ad73704

data/.github/workflows/auto-publish.yml

@@ -22,20 +22,18 @@ jobs:
           echo "version=$VERSION" >> $GITHUB_OUTPUT
           echo "release_tag=v$VERSION" >> $GITHUB_OUTPUT
 
-      - name: Get changed files
-        id: files
-        uses: jitterbit/get-changed-files@v1
-
       - name: Check for config.rb diff
         id: diff
+        env:
+          BASE_SHA: ${{ github.event.before }}
+          HEAD_SHA: ${{ github.sha }}
         run: |
-          FOUND=0
-          for changed_file in ${{ steps.files.outputs.all }}; do
-            if [[ $changed_file == "lib/stytch/version.rb" ]]; then
-              FOUND=1
-            fi
-          done
-          echo "diff=$FOUND" >> $GITHUB_OUTPUT
+          git fetch --depth=1 origin "$BASE_SHA"
+          if git diff --quiet "$BASE_SHA" "$HEAD_SHA" -- lib/stytch/version.rb; then
+            echo "diff=0" >> $GITHUB_OUTPUT
+          else
+            echo "diff=1" >> $GITHUB_OUTPUT
+          fi
 
       - name: Publish RubyGem
         if: steps.diff.outputs.diff != 0

data/.rubocop.yml

@@ -19,4 +19,6 @@ Style/StringConcatenation: { Enabled: false }
 
 RSpec/DescribedClass: { Enabled: false }
 RSpec/ExampleLength: { Enabled: false }
+RSpec/InstanceVariable: { Enabled: false }
 RSpec/MultipleExpectations: { Enabled: false }
+RSpec/MultipleMemoizedHelpers: { Enabled: false }

data/lib/stytch/b2b_discovery.rb

@@ -71,7 +71,7 @@ module StytchB2B
       # locale::
       #   If the Member needs to complete an MFA step, and the Member has a phone number, this endpoint will pre-emptively send a one-time passcode (OTP) to the Member's phone number. The locale argument will be used to determine which language to use when sending the passcode.
       #
-      # Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+      # Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
       #
       # Currently supported languages are English (`"en"`), Spanish (`"es"`), and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
       #
@@ -123,6 +123,9 @@ module StytchB2B
       # member_device::
       #   If a valid `telemetry_id` was passed in the request and the [Fingerprint Lookup API](https://stytch.com/docs/fraud/api/fingerprint-lookup) returned results, the `member_device` response field will contain information about the member's device attributes.
       #   The type of this field is nilable +DeviceInfo+ (+object+).
+      # intermediate_session_token_expires_at::
+      #   (no documentation yet)
+      #   The type of this field is nilable +String+.
       def exchange(
         intermediate_session_token:,
         organization_id:,
@@ -337,6 +340,9 @@ module StytchB2B
       # member::
       #   The [Member object](https://stytch.com/docs/b2b/api/member-object)
       #   The type of this field is +Member+ (+object+).
+      # organization::
+      #   The [Organization object](https://stytch.com/docs/b2b/api/organization-object).
+      #   The type of this field is +Organization+ (+object+).
       # member_authenticated::
       #   Indicates whether the Member is fully authenticated. If false, the Member needs to complete an MFA step to log in to the Organization.
       #   The type of this field is +Boolean+.
@@ -349,9 +355,6 @@ module StytchB2B
       # member_session::
       #   The [Session object](https://stytch.com/docs/b2b/api/session-object).
       #   The type of this field is nilable +MemberSession+ (+object+).
-      # organization::
-      #   The [Organization object](https://stytch.com/docs/b2b/api/organization-object).
-      #   The type of this field is nilable +Organization+ (+object+).
       # mfa_required::
       #   Information about the MFA requirements of the Organization and the Member's options for fulfilling MFA.
       #   The type of this field is nilable +MfaRequired+ (+object+).
@@ -361,6 +364,9 @@ module StytchB2B
       # member_device::
       #   If a valid `telemetry_id` was passed in the request and the [Fingerprint Lookup API](https://stytch.com/docs/fraud/api/fingerprint-lookup) returned results, the `member_device` response field will contain information about the member's device attributes.
       #   The type of this field is nilable +DeviceInfo+ (+object+).
+      # intermediate_session_token_expires_at::
+      #   (no documentation yet)
+      #   The type of this field is nilable +String+.
       def create(
         intermediate_session_token:,
         session_duration_minutes: nil,

data/lib/stytch/b2b_impersonation.rb

@@ -64,6 +64,9 @@ module StytchB2B
     # mfa_required::
     #   MFA will not be required when authenticating impersonation tokens.
     #   The type of this field is nilable +MfaRequired+ (+object+).
+    # intermediate_session_token_expires_at::
+    #   (no documentation yet)
+    #   The type of this field is nilable +String+.
     def authenticate(
       impersonation_token:
     )

data/lib/stytch/b2b_magic_links.rb

@@ -69,7 +69,7 @@ module StytchB2B
     # locale::
     #   If the Member needs to complete an MFA step, and the Member has a phone number, this endpoint will pre-emptively send a one-time passcode (OTP) to the Member's phone number. The locale argument will be used to determine which language to use when sending the passcode.
     #
-    # Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+    # Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
     #
     # Currently supported languages are English (`"en"`), Spanish (`"es"`), and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
     #
@@ -133,6 +133,9 @@ module StytchB2B
     # member_device::
     #   If a valid `telemetry_id` was passed in the request and the [Fingerprint Lookup API](https://stytch.com/docs/fraud/api/fingerprint-lookup) returned results, the `member_device` response field will contain information about the member's device attributes.
     #   The type of this field is nilable +DeviceInfo+ (+object+).
+    # intermediate_session_token_expires_at::
+    #   (no documentation yet)
+    #   The type of this field is nilable +String+.
     def authenticate(
       magic_links_token:,
       pkce_code_verifier: nil,
@@ -214,15 +217,14 @@ module StytchB2B
       #   A base64url encoded SHA256 hash of a one time secret used to validate that the request starts and ends on the same device.
       #   The type of this field is nilable +String+.
       # login_template_id::
-      #   Use a custom template for login emails. By default, it will use your default email template. The template must be from Stytch's
-      # built-in customizations or a custom HTML email for Magic Links - Login.
+      #   Use a custom template for login emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “Magic Links - Login”.
       #   The type of this field is nilable +String+.
       # signup_template_id::
       #   Use a custom template for signup emails. By default, it will use your default email template. The template must be from Stytch's
-      # built-in customizations or a custom HTML email for Magic Links - Signup.
+      # built-in customizations or a custom HTML email for “Magic Links - Signup”.
       #   The type of this field is nilable +String+.
       # locale::
-      #   Used to determine which language to use when sending the user this delivery method. Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+      #   Used to determine which language to use when sending the user this delivery method. Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
       #
       # Currently supported languages are English (`"en"`), Spanish (`"es"`), French (`"fr"`) and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
       #
@@ -320,11 +322,10 @@ module StytchB2B
       #   for complete field behavior details.
       #   The type of this field is nilable +object+.
       # invite_template_id::
-      #   Use a custom template for invite emails. By default, it will use your default email template. The template must be a template
-      #   using our built-in customizations or a custom HTML email for Magic Links - Invite.
+      #   Use a custom template for invite emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “Magic Links - Invite”.
       #   The type of this field is nilable +String+.
       # locale::
-      #   Used to determine which language to use when sending the user this delivery method. Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+      #   Used to determine which language to use when sending the user this delivery method. Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
       #
       # Currently supported languages are English (`"en"`), Spanish (`"es"`), French (`"fr"`) and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
       #
@@ -414,11 +415,10 @@ module StytchB2B
         #   A base64url encoded SHA256 hash of a one time secret used to validate that the request starts and ends on the same device.
         #   The type of this field is nilable +String+.
         # login_template_id::
-        #   Use a custom template for discovery emails. By default, it will use your default email template. The template must be from Stytch's
-        # built-in customizations or a custom HTML email for Magic Links - Login.
+        #   Use a custom template for discovery emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “Magic Links - Login”.
         #   The type of this field is nilable +String+.
         # locale::
-        #   Used to determine which language to use when sending the user this delivery method. Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+        #   Used to determine which language to use when sending the user this delivery method. Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
         #
         # Currently supported languages are English (`"en"`), Spanish (`"es"`), French (`"fr"`) and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
         #
@@ -505,6 +505,9 @@ module StytchB2B
       # status_code::
       #   The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
       #   The type of this field is +Integer+.
+      # intermediate_session_token_expires_at::
+      #   (no documentation yet)
+      #   The type of this field is nilable +String+.
       def authenticate(
         discovery_magic_links_token:,
         pkce_code_verifier: nil

data/lib/stytch/b2b_oauth.rb

@@ -67,7 +67,7 @@ module StytchB2B
     # locale::
     #   If the Member needs to complete an MFA step, and the Member has a phone number, this endpoint will pre-emptively send a one-time passcode (OTP) to the Member's phone number. The locale argument will be used to determine which language to use when sending the passcode.
     #
-    # Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+    # Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
     #
     # Currently supported languages are English (`"en"`), Spanish (`"es"`), and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
     #
@@ -139,6 +139,9 @@ module StytchB2B
     # member_device::
     #   If a valid `telemetry_id` was passed in the request and the [Fingerprint Lookup API](https://stytch.com/docs/fraud/api/fingerprint-lookup) returned results, the `member_device` response field will contain information about the member's device attributes.
     #   The type of this field is nilable +DeviceInfo+ (+object+).
+    # intermediate_session_token_expires_at::
+    #   (no documentation yet)
+    #   The type of this field is nilable +String+.
     def authenticate(
       oauth_token:,
       session_token: nil,
@@ -236,6 +239,9 @@ module StytchB2B
       # status_code::
       #   The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
       #   The type of this field is +Integer+.
+      # intermediate_session_token_expires_at::
+      #   (no documentation yet)
+      #   The type of this field is nilable +String+.
       def authenticate(
         discovery_oauth_token:,
         session_token: nil,

data/lib/stytch/b2b_organizations.rb

@@ -1592,7 +1592,7 @@ module StytchB2B
       #   redirect URL that you set in your Dashboard is used. If you have not set a default login redirect URL, an error is returned.
       #   The type of this field is nilable +String+.
       # locale::
-      #   Used to determine which language to use when sending the user this delivery method. Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+      #   Used to determine which language to use when sending the user this delivery method. Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
       #
       # Currently supported languages are English (`"en"`), Spanish (`"es"`), French (`"fr"`) and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
       #
@@ -1600,8 +1600,7 @@ module StytchB2B
       #
       #   The type of this field is nilable +StartEmailUpdateRequestLocale+ (string enum).
       # login_template_id::
-      #   Use a custom template for login emails. By default, it will use your default email template. The template must be from Stytch's
-      # built-in customizations or a custom HTML email for Magic Links - Login.
+      #   Use a custom template for login emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “Magic Links - Login”.
       #   The type of this field is nilable +String+.
       # delivery_method::
       #   The method that should be used to verify a member's new email address. The options are `EMAIL_MAGIC_LINK` or `EMAIL_OTP`. This field is optional, if no value is provided, `EMAIL_MAGIC_LINK` will be used.

data/lib/stytch/b2b_otp.rb

@@ -60,7 +60,7 @@ module StytchB2B
       #   The phone number to send the OTP to. If the Member already has a phone number, this argument is not needed.
       #   The type of this field is nilable +String+.
       # locale::
-      #   Used to determine which language to use when sending the user this delivery method. Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+      #   Used to determine which language to use when sending the user this delivery method. Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
       #
       # Currently supported languages are English (`"en"`), Spanish (`"es"`), French (`"fr"`) and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
       #
@@ -271,13 +271,13 @@ module StytchB2B
       #   The email address of the Member.
       #   The type of this field is +String+.
       # login_template_id::
-      #   Use a custom template for login emails. By default, it will use your default email template. The template must be a template using our built-in customizations or a custom HTML email for OTP - Login.
+      #   Use a custom template for login emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “OTP - Login”.
       #   The type of this field is nilable +String+.
       # signup_template_id::
-      #   Use a custom template for signup emails. By default, it will use your default email template. The template must be a template using our built-in customizations or a custom HTML email for OTP - Signup.
+      #   Use a custom template for signup emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “OTP - Signup”.
       #   The type of this field is nilable +String+.
       # locale::
-      #   Used to determine which language to use when sending the user this delivery method. Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+      #   Used to determine which language to use when sending the user this delivery method. Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
       #
       # Currently supported languages are English (`"en"`), Spanish (`"es"`), French (`"fr"`) and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
       #
@@ -384,7 +384,7 @@ module StytchB2B
       #   Total custom claims size cannot exceed four kilobytes.
       #   The type of this field is nilable +object+.
       # locale::
-      #   Used to determine which language to use when sending the user this delivery method. Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+      #   Used to determine which language to use when sending the user this delivery method. Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
       #
       # Currently supported languages are English (`"en"`), Spanish (`"es"`), French (`"fr"`) and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
       #
@@ -442,6 +442,9 @@ module StytchB2B
       # member_device::
       #   If a valid `telemetry_id` was passed in the request and the [Fingerprint Lookup API](https://stytch.com/docs/fraud/api/fingerprint-lookup) returned results, the `member_device` response field will contain information about the member's device attributes.
       #   The type of this field is nilable +DeviceInfo+ (+object+).
+      # intermediate_session_token_expires_at::
+      #   (no documentation yet)
+      #   The type of this field is nilable +String+.
       def authenticate(
         organization_id:,
         email_address:,
@@ -485,10 +488,10 @@ module StytchB2B
         #   The email address to start the discovery flow for.
         #   The type of this field is +String+.
         # login_template_id::
-        #   Use a custom template for login emails. By default, it will use your default email template. The template must be a template using our built-in customizations or a custom HTML email for OTP - Login.
+        #   Use a custom template for login emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “OTP - Login”.
         #   The type of this field is nilable +String+.
         # locale::
-        #   Used to determine which language to use when sending the user this delivery method. Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+        #   Used to determine which language to use when sending the user this delivery method. Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
         #
         # Currently supported languages are English (`"en"`), Spanish (`"es"`), French (`"fr"`) and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
         #
@@ -562,6 +565,9 @@ module StytchB2B
         # status_code::
         #   The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
         #   The type of this field is +Integer+.
+        # intermediate_session_token_expires_at::
+        #   (no documentation yet)
+        #   The type of this field is nilable +String+.
         def authenticate(
           email_address:,
           code:

data/lib/stytch/b2b_passwords.rb

@@ -52,7 +52,8 @@ module StytchB2B
     # valid_password::
     #   Returns `true` if the password passes our password validation. We offer two validation options,
     #   [zxcvbn](https://stytch.com/docs/guides/passwords/strength-policy) is the default option which offers a high level of sophistication.
-    #   We also offer [LUDS](https://stytch.com/docs/b2b/guides/passwords/strength-policy). If an email address is included in the call we also
+    #   We also offer [LUDS](https://stytch.com/docs/b2b/guides/passwords/strength-policy) which is less sophisticated
+    #   but easier to understand. If an email address is included in the call we also
     #   require that the password hasn't been compromised using built-in breach detection powered by [HaveIBeenPwned](https://haveibeenpwned.com/)
     #   The type of this field is +Boolean+.
     # score::
@@ -66,7 +67,7 @@ module StytchB2B
     #   The type of this field is +String+.
     # breach_detection_on_create::
     #   Will return `true` if breach detection will be evaluated. By default this option is enabled.
-    #   This option can be disabled by contacting [support@stytch.com](mailto:support@stytch.com?subject=Password%20strength%20configuration).
+    #   This option can be disabled in the [dashboard](https://stytch.com/dashboard/password-strength-config#breach-detection).
     #   If this value is false then `breached_password` will always be `false` as well.
     #   The type of this field is +Boolean+.
     # status_code::
@@ -282,7 +283,7 @@ module StytchB2B
     # locale::
     #   If the Member needs to complete an MFA step, and the Member has a phone number, this endpoint will pre-emptively send a one-time passcode (OTP) to the Member's phone number. The locale argument will be used to determine which language to use when sending the passcode.
     #
-    # Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+    # Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
     #
     # Currently supported languages are English (`"en"`), Spanish (`"es"`), and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
     #
@@ -340,6 +341,9 @@ module StytchB2B
     # member_device::
     #   If a valid `telemetry_id` was passed in the request and the [Fingerprint Lookup API](https://stytch.com/docs/fraud/api/fingerprint-lookup) returned results, the `member_device` response field will contain information about the member's device attributes.
     #   The type of this field is nilable +DeviceInfo+ (+object+).
+    # intermediate_session_token_expires_at::
+    #   (no documentation yet)
+    #   The type of this field is nilable +String+.
     def authenticate(
       organization_id:,
       email_address:,
@@ -411,9 +415,9 @@ module StytchB2B
       #   The email address of the Member to start the email reset process for.
       #   The type of this field is +String+.
       # reset_password_redirect_url::
-      #   The URL that the Member clicks from the reset password link. This URL should be an endpoint in the backend server that verifies the request by querying
-      #   Stytch's authenticate endpoint and finishes the reset password flow. If this value is not passed, the default `reset_password_redirect_url` that you set in your Dashboard is used.
-      #   If you have not set a default `reset_password_redirect_url`, an error is returned.
+      #   The URL that the Member is redirected to from the reset password magic link. This URL should display your application's reset password page.
+      #   Before rendering the reset page, extract the `token` from the query parameters. On the reset page, collect the new password and complete the flow by calling the corresponding Password Reset by Email endpoint.
+      #   If this parameter is not specified, the default Reset Password redirect URL configured in the Dashboard will be used. If you have not set a default Reset Password redirect URL, an error is returned.
       #   The type of this field is nilable +String+.
       # reset_password_expiration_minutes::
       #   Sets a time limit after which the email link to reset the member's password will no longer be valid. The minimum allowed expiration is 5 minutes and the maximum is 10080 minutes (7 days). By default, the expiration is 30 minutes.
@@ -427,7 +431,7 @@ module StytchB2B
       #       After Members are redirected to the login redirect URL, your application should retrieve the `token` value from the URL parameters and call the [Magic Link Authenticate endpoint](https://stytch.com/docs/api/authenticate-magic-link) to log the Member in without requiring a password reset. If this value is not provided, your project's default login redirect URL will be used. If you have not set a default login redirect URL, an error will be returned.
       #   The type of this field is nilable +String+.
       # locale::
-      #   Used to determine which language to use when sending the user this delivery method. Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+      #   Used to determine which language to use when sending the user this delivery method. Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
       #
       # Currently supported languages are English (`"en"`), Spanish (`"es"`), French (`"fr"`) and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
       #
@@ -435,11 +439,11 @@ module StytchB2B
       #
       #   The type of this field is nilable +ResetStartRequestLocale+ (string enum).
       # reset_password_template_id::
-      #   Use a custom template for reset password emails. By default, it will use your default email template. The template must be a template using our built-in customizations or a custom HTML email for Passwords - Reset Password.
+      #   Use a custom template for reset password emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “Passwords - Reset Password”.
       #   The type of this field is nilable +String+.
       # verify_email_template_id::
       #   Use a custom template for verification emails sent during password reset flows. When cross-organization passwords are enabled for your Project, this template will be used the first time a user sets a password via a
-      #   password reset flow. By default, it will use your default email template. The template must be a template using our built-in customizations or a custom HTML email for Passwords - Email Verification.
+      #   password reset flow. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “Passwords - Email Verification”.
       #   The type of this field is nilable +String+.
       #
       # == Returns:
@@ -539,7 +543,7 @@ module StytchB2B
       # locale::
       #   If the Member needs to complete an MFA step, and the Member has a phone number, this endpoint will pre-emptively send a one-time passcode (OTP) to the Member's phone number. The locale argument will be used to determine which language to use when sending the passcode.
       #
-      # Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+      # Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
       #
       # Currently supported languages are English (`"en"`), Spanish (`"es"`), and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
       #
@@ -600,6 +604,9 @@ module StytchB2B
       # member_device::
       #   If a valid `telemetry_id` was passed in the request and the [Fingerprint Lookup API](https://stytch.com/docs/fraud/api/fingerprint-lookup) returned results, the `member_device` response field will contain information about the member's device attributes.
       #   The type of this field is nilable +DeviceInfo+ (+object+).
+      # intermediate_session_token_expires_at::
+      #   (no documentation yet)
+      #   The type of this field is nilable +String+.
       def reset(
         password_reset_token:,
         password:,
@@ -725,7 +732,7 @@ module StytchB2B
       #   Total custom claims size cannot exceed four kilobytes.
       #   The type of this field is nilable +object+.
       # locale::
-      #   Used to determine which language to use when sending the user this delivery method. Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+      #   Used to determine which language to use when sending the user this delivery method. Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
       #
       # Currently supported languages are English (`"en"`), Spanish (`"es"`), French (`"fr"`) and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
       #
@@ -774,6 +781,9 @@ module StytchB2B
       # member_device::
       #   If a valid `telemetry_id` was passed in the request and the [Fingerprint Lookup API](https://stytch.com/docs/fraud/api/fingerprint-lookup) returned results, the `member_device` response field will contain information about the member's device attributes.
       #   The type of this field is nilable +DeviceInfo+ (+object+).
+      # intermediate_session_token_expires_at::
+      #   (no documentation yet)
+      #   The type of this field is nilable +String+.
       def reset(
         organization_id:,
         password:,
@@ -863,7 +873,7 @@ module StytchB2B
       # locale::
       #   If the Member needs to complete an MFA step, and the Member has a phone number, this endpoint will pre-emptively send a one-time passcode (OTP) to the Member's phone number. The locale argument will be used to determine which language to use when sending the passcode.
       #
-      # Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+      # Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
       #
       # Currently supported languages are English (`"en"`), Spanish (`"es"`), and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
       #
@@ -915,6 +925,9 @@ module StytchB2B
       # member_device::
       #   If a valid `telemetry_id` was passed in the request and the [Fingerprint Lookup API](https://stytch.com/docs/fraud/api/fingerprint-lookup) returned results, the `member_device` response field will contain information about the member's device attributes.
       #   The type of this field is nilable +DeviceInfo+ (+object+).
+      # intermediate_session_token_expires_at::
+      #   (no documentation yet)
+      #   The type of this field is nilable +String+.
       def reset(
         email_address:,
         existing_password:,
@@ -997,6 +1010,9 @@ module StytchB2B
       # status_code::
       #   The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
       #   The type of this field is +Integer+.
+      # intermediate_session_token_expires_at::
+      #   (no documentation yet)
+      #   The type of this field is nilable +String+.
       def authenticate(
         email_address:,
         password:
@@ -1030,9 +1046,9 @@ module StytchB2B
         #   The email address of the Member to start the email reset process for.
         #   The type of this field is +String+.
         # reset_password_redirect_url::
-        #   The URL that the Member clicks from the reset password link. This URL should be an endpoint in the backend server that verifies the request by querying
-        #   Stytch's authenticate endpoint and finishes the reset password flow. If this value is not passed, the default `reset_password_redirect_url` that you set in your Dashboard is used.
-        #   If you have not set a default `reset_password_redirect_url`, an error is returned.
+        #   The URL that the Member is redirected to from the reset password magic link. This URL should display your application's reset password page.
+        #   Before rendering the reset page, extract the `token` from the query parameters. On the reset page, collect the new password and complete the flow by calling the corresponding Password Reset by Email endpoint.
+        #   If this parameter is not specified, the default Reset Password redirect URL configured in the Dashboard will be used. If you have not set a default Reset Password redirect URL, an error is returned.
         #   The type of this field is nilable +String+.
         # discovery_redirect_url::
         #   The URL that the end user clicks from the discovery Magic Link. This URL should be an endpoint in the backend server that
@@ -1040,7 +1056,7 @@ module StytchB2B
         #   discovery redirect URL that you set in your Dashboard is used. If you have not set a default discovery redirect URL, an error is returned.
         #   The type of this field is nilable +String+.
         # reset_password_template_id::
-        #   Use a custom template for reset password emails. By default, it will use your default email template. The template must be a template using our built-in customizations or a custom HTML email for Passwords - Reset Password.
+        #   Use a custom template for reset password emails. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “Passwords - Reset Password”.
         #   The type of this field is nilable +String+.
         # reset_password_expiration_minutes::
         #   Sets a time limit after which the email link to reset the member's password will no longer be valid. The minimum allowed expiration is 5 minutes and the maximum is 10080 minutes (7 days). By default, the expiration is 30 minutes.
@@ -1049,7 +1065,7 @@ module StytchB2B
         #   (no documentation yet)
         #   The type of this field is nilable +String+.
         # locale::
-        #   Used to determine which language to use when sending the user this delivery method. Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+        #   Used to determine which language to use when sending the user this delivery method. Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
         #
         # Currently supported languages are English (`"en"`), Spanish (`"es"`), French (`"fr"`) and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
         #
@@ -1058,7 +1074,7 @@ module StytchB2B
         #   The type of this field is nilable +String+.
         # verify_email_template_id::
         #   Use a custom template for verification emails sent during password reset flows. When cross-organization passwords are enabled for your Project, this template will be used the first time a user sets a password via a
-        #   password reset flow. By default, it will use your default email template. The template must be a template using our built-in customizations or a custom HTML email for Passwords - Email Verification.
+        #   password reset flow. By default, it will use your default email template. Templates can be added in the [Stytch dashboard](https://stytch.com/dashboard/templates) using our built-in customization options or custom HTML templates with type “Passwords - Email Verification”.
         #   The type of this field is nilable +String+.
         #
         # == Returns:
@@ -1139,6 +1155,9 @@ module StytchB2B
         # status_code::
         #   The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
         #   The type of this field is +Integer+.
+        # intermediate_session_token_expires_at::
+        #   (no documentation yet)
+        #   The type of this field is nilable +String+.
         def reset(
           password_reset_token:,
           password:,

data/lib/stytch/b2b_rbac.rb

@@ -55,6 +55,9 @@ module StytchB2B
         @connection = connection
       end
 
+      #
+      # The organization RBAC policy feature is currently in private beta and must be enabled for your Workspace. Please contact Stytch support at support@stytch.com to request access.
+      #
       # Get the active RBAC Policy for a specific Organization within your Stytch Project. An Organization RBAC Policy contains the roles that have been defined specifically for that organization, allowing for organization-specific permissioning models.
       #
       # This endpoint returns the organization-scoped roles that supplement the project-level RBAC policy. Organization policies allow you to define custom roles that are specific to individual organizations within your project.
@@ -90,6 +93,9 @@ module StytchB2B
         get_request(request, headers)
       end
 
+      #
+      # The organization RBAC policy feature is currently in private beta and must be enabled for your Workspace. Please contact Stytch support at support@stytch.com to request access.
+      #
       # Set the RBAC Policy for a specific Organization within your Stytch Project. An Organization RBAC Policy allows you to define roles that are specific to that organization, providing fine-grained control over permissions at the organization level.
       #
       # This endpoint allows you to create, update, or replace the organization-scoped roles for a given organization. Organization policies supplement the project-level RBAC policy with additional roles that are only applicable within the context of that specific organization.

data/lib/stytch/b2b_scim.rb

@@ -206,7 +206,7 @@ module StytchB2B
       #   The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
       #   The type of this field is +Integer+.
       # connection::
-      #   The `SAML Connection` object affected by this API call. See the [SAML Connection Object](https://stytch.com/docs/b2b/api/saml-connection-object) for complete response field details.
+      #   The [SCIM Connection Object](https://stytch.com/docs/b2b/api/scim-connection-object).
       #   The type of this field is nilable +SCIMConnection+ (+object+).
       #
       # == Method Options:
@@ -282,7 +282,7 @@ module StytchB2B
       #   The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
       #   The type of this field is +Integer+.
       # connection::
-      #   The `SCIM Connection` object affected by this API call. See the [SCIM Connection Object](https://stytch.com/docs/b2b/api/scim-connection-object) for complete response field details.
+      #   The [SCIM Connection Object](https://stytch.com/docs/b2b/api/scim-connection-object).
       #   The type of this field is nilable +SCIMConnectionWithNextToken+ (+object+).
       #
       # == Method Options:
@@ -318,7 +318,7 @@ module StytchB2B
       #   The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
       #   The type of this field is +Integer+.
       # connection::
-      #   The `SCIM Connection` object affected by this API call. See the [SCIM Connection Object](https://stytch.com/docs/b2b/api/scim-connection-object) for complete response field details.
+      #   The [SCIM Connection Object](https://stytch.com/docs/b2b/api/scim-connection-object).
       #   The type of this field is nilable +SCIMConnection+ (+object+).
       #
       # == Method Options:
@@ -354,7 +354,7 @@ module StytchB2B
       #   The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
       #   The type of this field is +Integer+.
       # connection::
-      #   The `SCIM Connection` object affected by this API call. See the [SCIM Connection Object](https://stytch.com/docs/b2b/api/scim-connection-object) for complete response field details.
+      #   The [SCIM Connection Object](https://stytch.com/docs/b2b/api/scim-connection-object).
       #   The type of this field is nilable +SCIMConnection+ (+object+).
       #
       # == Method Options:
@@ -440,7 +440,7 @@ module StytchB2B
       #   The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
       #   The type of this field is +Integer+.
       # connection::
-      #   The `SCIM Connection` object affected by this API call. See the [SCIM Connection Object](https://stytch.com/docs/b2b/api/scim-connection-object) for complete response field details.
+      #   The [SCIM Connection Object](https://stytch.com/docs/b2b/api/scim-connection-object).
       #   The type of this field is nilable +SCIMConnectionWithToken+ (+object+).
       #
       # == Method Options:
@@ -476,7 +476,7 @@ module StytchB2B
       #   The HTTP status code of the response. Stytch follows standard HTTP response status code patterns, e.g. 2XX values equate to success, 3XX values are redirects, 4XX are client errors, and 5XX are server errors.
       #   The type of this field is +Integer+.
       # connection::
-      #   A [SCIM Connection](https://stytch.com/docs/b2b/api/scim-connection-object) connection belonging to the organization (currently limited to one).
+      #   The [SCIM Connection Object](https://stytch.com/docs/b2b/api/scim-connection-object).
       #   The type of this field is nilable +SCIMConnection+ (+object+).
       #
       # == Method Options:

data/lib/stytch/b2b_sessions.rb

@@ -266,7 +266,7 @@ module StytchB2B
     # locale::
     #   If the Member needs to complete an MFA step, and the Member has a phone number, this endpoint will pre-emptively send a one-time passcode (OTP) to the Member's phone number. The locale argument will be used to determine which language to use when sending the passcode.
     #
-    # Parameter is a [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
+    # Parameter is an [IETF BCP 47 language tag](https://www.w3.org/International/articles/language-tags/), e.g. `"en"`.
     #
     # Currently supported languages are English (`"en"`), Spanish (`"es"`), and Brazilian Portuguese (`"pt-br"`); if no value is provided, the copy defaults to English.
     #
@@ -318,6 +318,9 @@ module StytchB2B
     # member_device::
     #   If a valid `telemetry_id` was passed in the request and the [Fingerprint Lookup API](https://stytch.com/docs/fraud/api/fingerprint-lookup) returned results, the `member_device` response field will contain information about the member's device attributes.
     #   The type of this field is nilable +DeviceInfo+ (+object+).
+    # intermediate_session_token_expires_at::
+    #   (no documentation yet)
+    #   The type of this field is nilable +String+.
     def exchange(
       organization_id:,
       session_token: nil,
@@ -346,8 +349,6 @@ module StytchB2B
     #
     # The Access Token must contain the `full_access` scope (only available to First Party clients) and must not be more than 5 minutes old. Access Tokens may only be exchanged a single time.
     #
-    # The Member Session returned will be the same Member Session that was active in your application (the authorizing party) during the initial authorization flow.
-    #
     # Because the Member previously completed MFA and satisfied all Organization authentication requirements at the time of the original Access Token issuance, this endpoint will never return an `intermediate_session_token` or require MFA.
     #
     # == Parameters: