zyphr 0.1.43 → 0.1.45

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ebdab8198569c4cb0ec3851df67ee2f92dc78b98cd10814fdc338141fe394c0a
-  data.tar.gz: 6093a93aa1280e8b7885ca65d8110badf25cd77bba988ed3cea53c39cea80984
+  metadata.gz: 7e7566aa2d26c6c57823ded661edaf884ed4e3aaefa9760ac9e9d75ba552aa6f
+  data.tar.gz: 375575ac49fc49d697a2d47b12222e6771a6d0171a116ea93b2b21f1e6ea292b
 SHA512:
-  metadata.gz: 458f05916058c46f4af69e41fa2921737cd03f7fba339284f3728d3335269cd7b5f78a5a05ee9d8bf2cbd2b615d5ec0f3cdd958feac2f107ecf41e4f04793d62
-  data.tar.gz: 83cb0d9771508e9761f720c73f6769ef72864d47a524b593ebbf4645f343196cea6b7ef5f96bf774a748a769f928631ea217c90987c5de06d5bdb9d771f19bc6
+  metadata.gz: 4469bc22bf4a139e723b8f1cf339cafd440d2de808459f31ce67cbe0fbbad5462ce127c45ff61ee87b2d3571f1d509a7410592833fb0e68859e1d66606697fef
+  data.tar.gz: 821c2fc9241c4ce1ba257668d00056b1d628da96b9b632eaa478a63833915725cec8d44ec69ad598ce74c59be09bc6c53e8ff6943916fa2b994e9e158bea79d9

data/README.md

@@ -104,6 +104,13 @@ require 'zyphr'
 
 # Setup authorization
 Zyphr.configure do |config|
+  # Configure API key authorization: ApplicationSecret
+  config.api_key['X-Application-Secret'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Secret'] = 'Bearer'
+  # Configure faraday connection
+  config.configure_faraday_connection { |connection| 'YOUR CONNECTION CONFIG PROC' }
+
   # Configure API key authorization: ApplicationPublicKey
   config.api_key['X-Application-Key'] = 'YOUR API KEY'
   # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
@@ -112,14 +119,14 @@ Zyphr.configure do |config|
   config.configure_faraday_connection { |connection| 'YOUR CONNECTION CONFIG PROC' }
 end
 
-api_instance = Zyphr::AuthEmailOTPApi.new
+api_instance = Zyphr::AuthApplicationApi.new
 
 begin
-  #Check email OTP availability
-  result = api_instance.check_email_otp_availability
+  #Get the authenticating application
+  result = api_instance.get_self_application
   p result
 rescue Zyphr::ApiError => e
-  puts "Exception when calling AuthEmailOTPApi->check_email_otp_availability: #{e}"
+  puts "Exception when calling AuthApplicationApi->get_self_application: #{e}"
 end
 
 ```
@@ -130,6 +137,8 @@ All URIs are relative to *https://api.zyphr.dev/v1*
 
 Class | Method | HTTP request | Description
 ------------ | ------------- | ------------- | -------------
+*Zyphr::AuthApplicationApi* | [**get_self_application**](docs/AuthApplicationApi.md#get_self_application) | **GET** /auth/application | Get the authenticating application
+*Zyphr::AuthApplicationApi* | [**set_self_application_test_recipients**](docs/AuthApplicationApi.md#set_self_application_test_recipients) | **PATCH** /auth/application | Set the authenticating application's auth-email test allowlist
 *Zyphr::AuthEmailOTPApi* | [**check_email_otp_availability**](docs/AuthEmailOTPApi.md#check_email_otp_availability) | **GET** /auth/email-otp/available | Check email OTP availability
 *Zyphr::AuthEmailOTPApi* | [**send_email_otp_login**](docs/AuthEmailOTPApi.md#send_email_otp_login) | **POST** /auth/email-otp/login/send | Send email OTP for login
 *Zyphr::AuthEmailOTPApi* | [**send_email_otp_registration**](docs/AuthEmailOTPApi.md#send_email_otp_registration) | **POST** /auth/email-otp/register/send | Send email OTP for registration
@@ -195,6 +204,7 @@ Class | Method | HTTP request | Description
 *Zyphr::AuthSessionsApi* | [**revoke_all_end_user_sessions**](docs/AuthSessionsApi.md#revoke_all_end_user_sessions) | **POST** /auth/sessions/revoke-all | Revoke all sessions
 *Zyphr::AuthSessionsApi* | [**revoke_end_user_session**](docs/AuthSessionsApi.md#revoke_end_user_session) | **POST** /auth/sessions/revoke | Revoke a session
 *Zyphr::AuthUserDirectoryApi* | [**delete_end_user_by_application**](docs/AuthUserDirectoryApi.md#delete_end_user_by_application) | **DELETE** /auth/users/{user_id} | Delete an end user (server-side admin)
+*Zyphr::AuthUserDirectoryApi* | [**get_end_user_auth_methods**](docs/AuthUserDirectoryApi.md#get_end_user_auth_methods) | **GET** /auth/users/{user_id}/auth-methods | Get an end user's sign-in methods (server-side admin)
 *Zyphr::AuthUserDirectoryApi* | [**get_end_user_by_email**](docs/AuthUserDirectoryApi.md#get_end_user_by_email) | **GET** /auth/users/by-email | Look up an end user by email (server-side admin)
 *Zyphr::AuthUserDirectoryApi* | [**get_end_user_by_id**](docs/AuthUserDirectoryApi.md#get_end_user_by_id) | **GET** /auth/users/{user_id} | Get an end user by id (server-side admin)
 *Zyphr::AuthUserDirectoryApi* | [**get_end_user_claims**](docs/AuthUserDirectoryApi.md#get_end_user_claims) | **GET** /auth/users/{user_id}/claims | Get an end user's stored custom claims (server-side admin)
@@ -202,6 +212,7 @@ Class | Method | HTTP request | Description
 *Zyphr::AuthUserDirectoryApi* | [**list_end_users**](docs/AuthUserDirectoryApi.md#list_end_users) | **GET** /auth/users | List / search end users (server-side admin)
 *Zyphr::AuthUserDirectoryApi* | [**set_end_user_claims**](docs/AuthUserDirectoryApi.md#set_end_user_claims) | **PUT** /auth/users/{user_id}/claims | Set an end user's stored custom claims (server-side admin)
 *Zyphr::AuthUserDirectoryApi* | [**update_end_user_by_application**](docs/AuthUserDirectoryApi.md#update_end_user_by_application) | **PATCH** /auth/users/{user_id} | Update an end user (server-side admin)
+*Zyphr::AuthUserProfileApi* | [**change_end_user_password**](docs/AuthUserProfileApi.md#change_end_user_password) | **POST** /auth/users/change-password | Change password (authenticated session)
 *Zyphr::AuthUserProfileApi* | [**delete_end_user**](docs/AuthUserProfileApi.md#delete_end_user) | **DELETE** /auth/users/me | Delete current end user account
 *Zyphr::AuthUserProfileApi* | [**get_end_user**](docs/AuthUserProfileApi.md#get_end_user) | **GET** /auth/users/me | Get current end user profile
 *Zyphr::AuthUserProfileApi* | [**update_end_user**](docs/AuthUserProfileApi.md#update_end_user) | **PATCH** /auth/users/me | Update current end user profile
@@ -393,6 +404,8 @@ Class | Method | HTTP request | Description
  - [Zyphr::ApiError](docs/ApiError.md)
  - [Zyphr::ApiErrorError](docs/ApiErrorError.md)
  - [Zyphr::ApiErrorMeta](docs/ApiErrorMeta.md)
+ - [Zyphr::ApplicationSelf](docs/ApplicationSelf.md)
+ - [Zyphr::ApplicationSelfResponse](docs/ApplicationSelfResponse.md)
  - [Zyphr::AuthEmailTemplate](docs/AuthEmailTemplate.md)
  - [Zyphr::AuthEmailTemplateDefault](docs/AuthEmailTemplateDefault.md)
  - [Zyphr::AuthEmailTemplateDefaultResponse](docs/AuthEmailTemplateDefaultResponse.md)
@@ -413,6 +426,7 @@ Class | Method | HTTP request | Description
  - [Zyphr::AuthLoginResponse](docs/AuthLoginResponse.md)
  - [Zyphr::AuthLoginResult](docs/AuthLoginResult.md)
  - [Zyphr::AuthLoginResultMfaChallenge](docs/AuthLoginResultMfaChallenge.md)
+ - [Zyphr::AuthMethods](docs/AuthMethods.md)
  - [Zyphr::AuthResult](docs/AuthResult.md)
  - [Zyphr::AuthResultResponse](docs/AuthResultResponse.md)
  - [Zyphr::AuthSession](docs/AuthSession.md)
@@ -428,6 +442,7 @@ Class | Method | HTTP request | Description
  - [Zyphr::Category](docs/Category.md)
  - [Zyphr::CategoryListResponse](docs/CategoryListResponse.md)
  - [Zyphr::CategoryResponse](docs/CategoryResponse.md)
+ - [Zyphr::ChangePasswordRequest](docs/ChangePasswordRequest.md)
  - [Zyphr::CloseWaaSEndpointCircuit200Response](docs/CloseWaaSEndpointCircuit200Response.md)
  - [Zyphr::CloseWaaSEndpointCircuit200ResponseData](docs/CloseWaaSEndpointCircuit200ResponseData.md)
  - [Zyphr::ConfirmEmailVerificationRequest](docs/ConfirmEmailVerificationRequest.md)
@@ -506,6 +521,7 @@ Class | Method | HTTP request | Description
  - [Zyphr::GenerateWaaSPortalToken201Response](docs/GenerateWaaSPortalToken201Response.md)
  - [Zyphr::GetDomain200Response](docs/GetDomain200Response.md)
  - [Zyphr::GetDomain200ResponseMeta](docs/GetDomain200ResponseMeta.md)
+ - [Zyphr::GetEndUserAuthMethods200Response](docs/GetEndUserAuthMethods200Response.md)
  - [Zyphr::GetEndUserById200Response](docs/GetEndUserById200Response.md)
  - [Zyphr::GetEndUserClaims200Response](docs/GetEndUserClaims200Response.md)
  - [Zyphr::GetEndUserClaims200ResponseData](docs/GetEndUserClaims200ResponseData.md)
@@ -706,6 +722,7 @@ Class | Method | HTTP request | Description
  - [Zyphr::SetEndUserClaimsRequest](docs/SetEndUserClaimsRequest.md)
  - [Zyphr::SetPreferencesRequest](docs/SetPreferencesRequest.md)
  - [Zyphr::SetPreferencesRequestPreferencesInner](docs/SetPreferencesRequestPreferencesInner.md)
+ - [Zyphr::SetSelfApplicationTestRecipientsRequest](docs/SetSelfApplicationTestRecipientsRequest.md)
  - [Zyphr::SignInAnonymouslyRequest](docs/SignInAnonymouslyRequest.md)
  - [Zyphr::SignInWithGameCenterRequest](docs/SignInWithGameCenterRequest.md)
  - [Zyphr::SignInWithGooglePlayGamesRequest](docs/SignInWithGooglePlayGamesRequest.md)
@@ -843,6 +860,7 @@ Class | Method | HTTP request | Description
  - [Zyphr::WebhookDeliveryResponse](docs/WebhookDeliveryResponse.md)
  - [Zyphr::WebhookDeliveryRetryResponse](docs/WebhookDeliveryRetryResponse.md)
  - [Zyphr::WebhookDeliveryRetryResponseData](docs/WebhookDeliveryRetryResponseData.md)
+ - [Zyphr::WebhookEventType](docs/WebhookEventType.md)
  - [Zyphr::WebhookEventTypesResponse](docs/WebhookEventTypesResponse.md)
  - [Zyphr::WebhookEventTypesResponseData](docs/WebhookEventTypesResponseData.md)
  - [Zyphr::WebhookIpsResponse](docs/WebhookIpsResponse.md)

data/docs/ApplicationSelf.md

@@ -0,0 +1,26 @@
+# Zyphr::ApplicationSelf
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **id** | **String** | The application's unique id (application_id). |  |
+| **name** | **String** | Human-readable application name. |  |
+| **environment** | **String** | The environment mode of the credentials used to authenticate this request. `null` when the environment cannot be determined (e.g. a legacy application-level key that predates environment-scoped keys) — not defaulted to a guessed value. |  |
+| **signing_algorithm** | **String** | JWT signing algorithm for this application's end-user tokens. |  |
+| **test_recipients** | **Array<String>** | The auth-email test allowlist. When non-empty, only these addresses receive auth emails (the gate from sc-7443); an empty array disables the gate. Settable via PATCH /auth/application (sc-7600). |  |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::ApplicationSelf.new(
+  id: null,
+  name: null,
+  environment: null,
+  signing_algorithm: null,
+  test_recipients: null
+)
+```
+

data/docs/ApplicationSelfResponse.md

@@ -0,0 +1,20 @@
+# Zyphr::ApplicationSelfResponse
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **data** | [**ApplicationSelf**](ApplicationSelf.md) |  | [optional] |
+| **meta** | [**RequestMeta**](RequestMeta.md) |  | [optional] |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::ApplicationSelfResponse.new(
+  data: null,
+  meta: null
+)
+```
+

data/docs/AuthApplicationApi.md

@@ -0,0 +1,158 @@
+# Zyphr::AuthApplicationApi
+
+All URIs are relative to *https://api.zyphr.dev/v1*
+
+| Method | HTTP request | Description |
+| ------ | ------------ | ----------- |
+| [**get_self_application**](AuthApplicationApi.md#get_self_application) | **GET** /auth/application | Get the authenticating application |
+| [**set_self_application_test_recipients**](AuthApplicationApi.md#set_self_application_test_recipients) | **PATCH** /auth/application | Set the authenticating application's auth-email test allowlist |
+
+
+## get_self_application
+
+> <ApplicationSelfResponse> get_self_application
+
+Get the authenticating application
+
+Return non-sensitive metadata about the application whose credentials authenticated this request. Lets an integrator read their own application_id (the sole tenant discriminator embedded in every end-user token) directly from the API, rather than only from the dashboard UI or by decoding a token. Returns only id, name, the calling environment's mode, and the JWT signing algorithm — never secrets, signing keys, or account-internal fields. 
+
+### Examples
+
+```ruby
+require 'time'
+require 'zyphr'
+# setup authorization
+Zyphr.configure do |config|
+  # Configure API key authorization: ApplicationSecret
+  config.api_key['X-Application-Secret'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Secret'] = 'Bearer'
+
+  # Configure API key authorization: ApplicationPublicKey
+  config.api_key['X-Application-Key'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Key'] = 'Bearer'
+end
+
+api_instance = Zyphr::AuthApplicationApi.new
+
+begin
+  # Get the authenticating application
+  result = api_instance.get_self_application
+  p result
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthApplicationApi->get_self_application: #{e}"
+end
+```
+
+#### Using the get_self_application_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<ApplicationSelfResponse>, Integer, Hash)> get_self_application_with_http_info
+
+```ruby
+begin
+  # Get the authenticating application
+  data, status_code, headers = api_instance.get_self_application_with_http_info
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <ApplicationSelfResponse>
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthApplicationApi->get_self_application_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+This endpoint does not need any parameter.
+
+### Return type
+
+[**ApplicationSelfResponse**](ApplicationSelfResponse.md)
+
+### Authorization
+
+[ApplicationSecret](../README.md#ApplicationSecret), [ApplicationPublicKey](../README.md#ApplicationPublicKey)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: application/json
+
+
+## set_self_application_test_recipients
+
+> <ApplicationSelfResponse> set_self_application_test_recipients(set_self_application_test_recipients_request)
+
+Set the authenticating application's auth-email test allowlist
+
+Set `test_recipients` — the per-application auth-email allowlist — on the application whose credentials authenticated this request. When non-empty, this allowlist gates ALL auth emails (only listed addresses receive them); an EMPTY array clears it and disables the gate. Lets an integrator manage the allowlist from their own infrastructure config instead of the dashboard.  Application-SECRET scoped (server-side write): requires X-Application-Key AND X-Application-Secret. Mutates ONLY the authenticating application — it never takes an application id from the request, so there is no cross-tenant write path. The response mirrors GET /auth/application exactly (never returns secrets). 
+
+### Examples
+
+```ruby
+require 'time'
+require 'zyphr'
+# setup authorization
+Zyphr.configure do |config|
+  # Configure API key authorization: ApplicationSecret
+  config.api_key['X-Application-Secret'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Secret'] = 'Bearer'
+
+  # Configure API key authorization: ApplicationPublicKey
+  config.api_key['X-Application-Key'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Key'] = 'Bearer'
+end
+
+api_instance = Zyphr::AuthApplicationApi.new
+set_self_application_test_recipients_request = Zyphr::SetSelfApplicationTestRecipientsRequest.new({test_recipients: ['test_recipients_example']}) # SetSelfApplicationTestRecipientsRequest | 
+
+begin
+  # Set the authenticating application's auth-email test allowlist
+  result = api_instance.set_self_application_test_recipients(set_self_application_test_recipients_request)
+  p result
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthApplicationApi->set_self_application_test_recipients: #{e}"
+end
+```
+
+#### Using the set_self_application_test_recipients_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<ApplicationSelfResponse>, Integer, Hash)> set_self_application_test_recipients_with_http_info(set_self_application_test_recipients_request)
+
+```ruby
+begin
+  # Set the authenticating application's auth-email test allowlist
+  data, status_code, headers = api_instance.set_self_application_test_recipients_with_http_info(set_self_application_test_recipients_request)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <ApplicationSelfResponse>
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthApplicationApi->set_self_application_test_recipients_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **set_self_application_test_recipients_request** | [**SetSelfApplicationTestRecipientsRequest**](SetSelfApplicationTestRecipientsRequest.md) |  |  |
+
+### Return type
+
+[**ApplicationSelfResponse**](ApplicationSelfResponse.md)
+
+### Authorization
+
+[ApplicationSecret](../README.md#ApplicationSecret), [ApplicationPublicKey](../README.md#ApplicationPublicKey)
+
+### HTTP request headers
+
+- **Content-Type**: application/json
+- **Accept**: application/json
+

data/docs/AuthEmailTemplateTestRequest.md

@@ -4,7 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **to** | **String** | Recipient email. Must be in the application's `test_recipients` allowlist. |  |
+| **to** | **String** | Recipient email. Must be in the application's `test_recipients` allowlist. When non-empty, `test_recipients` gates ALL auth emails the application sends (magic link, password reset, verification, OTP) — only listed recipients receive auth email — which keeps non-production applications safe from mass sends. An empty allowlist imposes no restriction. |  |
 | **variables** | **Hash<String, Object>** |  | [optional] |
 
 ## Example

data/docs/AuthEmailTemplatesApi.md

@@ -631,7 +631,7 @@ end
 
 Send a test render of a template
 
-Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited. 
+Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited.  When non-empty, `test_recipients` gates ALL auth emails this application sends (magic link, password reset, email verification, and email OTP) — not just these test renders. Only listed recipients receive auth email; any other recipient is silently blocked. Use it to make a non-production application safe from mass sends. An empty allowlist (the default) imposes no restriction and every recipient receives auth email normally. 
 
 ### Examples
 

data/docs/AuthMethods.md

@@ -0,0 +1,28 @@
+# Zyphr::AuthMethods
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **has_password** | **Boolean** | True if the user has a password credential (false for OAuth-only / passwordless users). |  |
+| **oauth_providers** | **Array<String>** | Distinct OAuth providers linked to the user (e.g. google, apple). |  |
+| **mfa_enabled** | **Boolean** | True if the user has multi-factor authentication enabled. |  |
+| **email_verified** | **Boolean** | True if the user's email address has been verified. |  |
+| **phone_verified** | **Boolean** | True if the user's phone number has been verified. |  |
+| **passkeys** | **Integer** | Number of WebAuthn passkeys registered for the user. |  |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::AuthMethods.new(
+  has_password: null,
+  oauth_providers: null,
+  mfa_enabled: null,
+  email_verified: null,
+  phone_verified: null,
+  passkeys: null
+)
+```
+

data/docs/AuthUserDirectoryApi.md

@@ -5,6 +5,7 @@ All URIs are relative to *https://api.zyphr.dev/v1*
 | Method | HTTP request | Description |
 | ------ | ------------ | ----------- |
 | [**delete_end_user_by_application**](AuthUserDirectoryApi.md#delete_end_user_by_application) | **DELETE** /auth/users/{user_id} | Delete an end user (server-side admin) |
+| [**get_end_user_auth_methods**](AuthUserDirectoryApi.md#get_end_user_auth_methods) | **GET** /auth/users/{user_id}/auth-methods | Get an end user's sign-in methods (server-side admin) |
 | [**get_end_user_by_email**](AuthUserDirectoryApi.md#get_end_user_by_email) | **GET** /auth/users/by-email | Look up an end user by email (server-side admin) |
 | [**get_end_user_by_id**](AuthUserDirectoryApi.md#get_end_user_by_id) | **GET** /auth/users/{user_id} | Get an end user by id (server-side admin) |
 | [**get_end_user_claims**](AuthUserDirectoryApi.md#get_end_user_claims) | **GET** /auth/users/{user_id}/claims | Get an end user's stored custom claims (server-side admin) |
@@ -89,6 +90,82 @@ nil (empty response body)
 - **Accept**: Not defined
 
 
+## get_end_user_auth_methods
+
+> <GetEndUserAuthMethods200Response> get_end_user_auth_methods(user_id)
+
+Get an end user's sign-in methods (server-side admin)
+
+Secret-key-scoped, aggregate view of the sign-in methods configured for a single end user within the authenticating application. Reports whether the user has a password, which OAuth providers are linked, whether MFA is enabled, whether email/phone are verified, and how many passkeys are registered — everything a customer admin needs to build a \"sign-in methods\" screen. Scoped to the application — a caller can never read a user belonging to another application. 
+
+### Examples
+
+```ruby
+require 'time'
+require 'zyphr'
+# setup authorization
+Zyphr.configure do |config|
+  # Configure API key authorization: ApplicationSecret
+  config.api_key['X-Application-Secret'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Secret'] = 'Bearer'
+
+  # Configure API key authorization: ApplicationPublicKey
+  config.api_key['X-Application-Key'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Key'] = 'Bearer'
+end
+
+api_instance = Zyphr::AuthUserDirectoryApi.new
+user_id = '38400000-8cf0-11bd-b23e-10b96e4ef00d' # String | 
+
+begin
+  # Get an end user's sign-in methods (server-side admin)
+  result = api_instance.get_end_user_auth_methods(user_id)
+  p result
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthUserDirectoryApi->get_end_user_auth_methods: #{e}"
+end
+```
+
+#### Using the get_end_user_auth_methods_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<GetEndUserAuthMethods200Response>, Integer, Hash)> get_end_user_auth_methods_with_http_info(user_id)
+
+```ruby
+begin
+  # Get an end user's sign-in methods (server-side admin)
+  data, status_code, headers = api_instance.get_end_user_auth_methods_with_http_info(user_id)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <GetEndUserAuthMethods200Response>
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthUserDirectoryApi->get_end_user_auth_methods_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **user_id** | **String** |  |  |
+
+### Return type
+
+[**GetEndUserAuthMethods200Response**](GetEndUserAuthMethods200Response.md)
+
+### Authorization
+
+[ApplicationSecret](../README.md#ApplicationSecret), [ApplicationPublicKey](../README.md#ApplicationPublicKey)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: application/json
+
+
 ## get_end_user_by_email
 
 > <GetEndUserById200Response> get_end_user_by_email(email)

data/docs/AuthUserProfileApi.md

@@ -4,11 +4,86 @@ All URIs are relative to *https://api.zyphr.dev/v1*
 
 | Method | HTTP request | Description |
 | ------ | ------------ | ----------- |
+| [**change_end_user_password**](AuthUserProfileApi.md#change_end_user_password) | **POST** /auth/users/change-password | Change password (authenticated session) |
 | [**delete_end_user**](AuthUserProfileApi.md#delete_end_user) | **DELETE** /auth/users/me | Delete current end user account |
 | [**get_end_user**](AuthUserProfileApi.md#get_end_user) | **GET** /auth/users/me | Get current end user profile |
 | [**update_end_user**](AuthUserProfileApi.md#update_end_user) | **PATCH** /auth/users/me | Update current end user profile |
 
 
+## change_end_user_password
+
+> <RefreshTokenResponse> change_end_user_password(change_password_request)
+
+Change password (authenticated session)
+
+Change the currently authenticated end user's password from a logged-in session. The caller must prove possession of the CURRENT password (`current_password`); the user is identified from the end-user token, not the request body, so a user can only change their own password.  On success, all existing sessions are revoked and a fresh token pair is returned so the current session stays authenticated. Emits the `user.password_changed` webhook.
+
+### Examples
+
+```ruby
+require 'time'
+require 'zyphr'
+# setup authorization
+Zyphr.configure do |config|
+  # Configure Bearer authorization (JWT): EndUserToken
+  config.access_token = 'YOUR_BEARER_TOKEN'
+
+  # Configure API key authorization: ApplicationPublicKey
+  config.api_key['X-Application-Key'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Key'] = 'Bearer'
+end
+
+api_instance = Zyphr::AuthUserProfileApi.new
+change_password_request = Zyphr::ChangePasswordRequest.new({current_password: 'current_password_example', new_password: 'new_password_example'}) # ChangePasswordRequest | 
+
+begin
+  # Change password (authenticated session)
+  result = api_instance.change_end_user_password(change_password_request)
+  p result
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthUserProfileApi->change_end_user_password: #{e}"
+end
+```
+
+#### Using the change_end_user_password_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<RefreshTokenResponse>, Integer, Hash)> change_end_user_password_with_http_info(change_password_request)
+
+```ruby
+begin
+  # Change password (authenticated session)
+  data, status_code, headers = api_instance.change_end_user_password_with_http_info(change_password_request)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <RefreshTokenResponse>
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthUserProfileApi->change_end_user_password_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **change_password_request** | [**ChangePasswordRequest**](ChangePasswordRequest.md) |  |  |
+
+### Return type
+
+[**RefreshTokenResponse**](RefreshTokenResponse.md)
+
+### Authorization
+
+[EndUserToken](../README.md#EndUserToken), [ApplicationPublicKey](../README.md#ApplicationPublicKey)
+
+### HTTP request headers
+
+- **Content-Type**: application/json
+- **Accept**: application/json
+
+
 ## delete_end_user
 
 > <EndUserDeleteResponse> delete_end_user

data/docs/ChangePasswordRequest.md

@@ -0,0 +1,20 @@
+# Zyphr::ChangePasswordRequest
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **current_password** | **String** | The user's current password, for verification. |  |
+| **new_password** | **String** | The new password. Must satisfy the application's password policy. |  |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::ChangePasswordRequest.new(
+  current_password: null,
+  new_password: null
+)
+```
+

data/docs/GetEndUserAuthMethods200Response.md

@@ -0,0 +1,20 @@
+# Zyphr::GetEndUserAuthMethods200Response
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **data** | [**AuthMethods**](AuthMethods.md) |  | [optional] |
+| **meta** | [**GetDomain200ResponseMeta**](GetDomain200ResponseMeta.md) |  | [optional] |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::GetEndUserAuthMethods200Response.new(
+  data: null,
+  meta: null
+)
+```
+

data/docs/SetSelfApplicationTestRecipientsRequest.md

@@ -0,0 +1,18 @@
+# Zyphr::SetSelfApplicationTestRecipientsRequest
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **test_recipients** | **Array<String>** | Email addresses allowed to receive auth emails. An empty array clears the allowlist (disables the gate). |  |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::SetSelfApplicationTestRecipientsRequest.new(
+  test_recipients: null
+)
+```
+

data/docs/WebhookDelivery.md

@@ -7,7 +7,7 @@
 | **id** | **String** |  | [optional] |
 | **msg_id** | **String** |  | [optional] |
 | **event_id** | **String** |  | [optional] |
-| **event_type** | **String** |  | [optional] |
+| **event_type** | [**WebhookEventType**](WebhookEventType.md) |  | [optional] |
 | **status** | **String** |  | [optional] |
 | **attempts** | **Integer** |  | [optional] |
 | **max_attempts** | **Integer** |  | [optional] |

data/docs/WebhookDeliveryDetail.md

@@ -7,7 +7,7 @@
 | **id** | **String** |  | [optional] |
 | **msg_id** | **String** |  | [optional] |
 | **event_id** | **String** |  | [optional] |
-| **event_type** | **String** |  | [optional] |
+| **event_type** | [**WebhookEventType**](WebhookEventType.md) |  | [optional] |
 | **status** | **String** |  | [optional] |
 | **attempts** | **Integer** |  | [optional] |
 | **max_attempts** | **Integer** |  | [optional] |

data/docs/WebhookEventType.md

@@ -0,0 +1,15 @@
+# Zyphr::WebhookEventType
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::WebhookEventType.new()
+```
+

data/docs/WebhookEventTypesResponseData.md

@@ -4,7 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **event_types** | **Array<String>** |  | [optional] |
+| **event_types** | [**Array<WebhookEventType>**](WebhookEventType.md) |  | [optional] |
 | **registry** | **Array<Object>** |  | [optional] |
 | **categories** | **Array<String>** |  | [optional] |
 | **api_version** | **String** |  | [optional] |