zyphr 0.1.44 → 0.1.45

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bdb232c25df3ba83aad2f1e205941038b186be722997d3f4a0b9a4d4866c5fec
-  data.tar.gz: c5e28ca2a16b510deca00ff1f99d769f273363bdde11c34afcd8617df54860e4
+  metadata.gz: 7e7566aa2d26c6c57823ded661edaf884ed4e3aaefa9760ac9e9d75ba552aa6f
+  data.tar.gz: 375575ac49fc49d697a2d47b12222e6771a6d0171a116ea93b2b21f1e6ea292b
 SHA512:
-  metadata.gz: 187ff2bea23ac4b9bd35b5c999a63f25a14e659924d5382d57062fae4a0d20ebb8a64eca421ceb1b517ef17ff855f8465ee9e9a8f64c962af4088f975df3dcd9
-  data.tar.gz: 54e87dc5d28157446a0feb49196231cf49789db4f2f87982fc2cffde9d2efced47d662e42bd4fa5610f28c64ff19d73900cf65c69b4eaa6fdcbaffab66d6e8f4
+  metadata.gz: 4469bc22bf4a139e723b8f1cf339cafd440d2de808459f31ce67cbe0fbbad5462ce127c45ff61ee87b2d3571f1d509a7410592833fb0e68859e1d66606697fef
+  data.tar.gz: 821c2fc9241c4ce1ba257668d00056b1d628da96b9b632eaa478a63833915725cec8d44ec69ad598ce74c59be09bc6c53e8ff6943916fa2b994e9e158bea79d9

data/README.md

@@ -138,6 +138,7 @@ All URIs are relative to *https://api.zyphr.dev/v1*
 Class | Method | HTTP request | Description
 ------------ | ------------- | ------------- | -------------
 *Zyphr::AuthApplicationApi* | [**get_self_application**](docs/AuthApplicationApi.md#get_self_application) | **GET** /auth/application | Get the authenticating application
+*Zyphr::AuthApplicationApi* | [**set_self_application_test_recipients**](docs/AuthApplicationApi.md#set_self_application_test_recipients) | **PATCH** /auth/application | Set the authenticating application's auth-email test allowlist
 *Zyphr::AuthEmailOTPApi* | [**check_email_otp_availability**](docs/AuthEmailOTPApi.md#check_email_otp_availability) | **GET** /auth/email-otp/available | Check email OTP availability
 *Zyphr::AuthEmailOTPApi* | [**send_email_otp_login**](docs/AuthEmailOTPApi.md#send_email_otp_login) | **POST** /auth/email-otp/login/send | Send email OTP for login
 *Zyphr::AuthEmailOTPApi* | [**send_email_otp_registration**](docs/AuthEmailOTPApi.md#send_email_otp_registration) | **POST** /auth/email-otp/register/send | Send email OTP for registration
@@ -211,6 +212,7 @@ Class | Method | HTTP request | Description
 *Zyphr::AuthUserDirectoryApi* | [**list_end_users**](docs/AuthUserDirectoryApi.md#list_end_users) | **GET** /auth/users | List / search end users (server-side admin)
 *Zyphr::AuthUserDirectoryApi* | [**set_end_user_claims**](docs/AuthUserDirectoryApi.md#set_end_user_claims) | **PUT** /auth/users/{user_id}/claims | Set an end user's stored custom claims (server-side admin)
 *Zyphr::AuthUserDirectoryApi* | [**update_end_user_by_application**](docs/AuthUserDirectoryApi.md#update_end_user_by_application) | **PATCH** /auth/users/{user_id} | Update an end user (server-side admin)
+*Zyphr::AuthUserProfileApi* | [**change_end_user_password**](docs/AuthUserProfileApi.md#change_end_user_password) | **POST** /auth/users/change-password | Change password (authenticated session)
 *Zyphr::AuthUserProfileApi* | [**delete_end_user**](docs/AuthUserProfileApi.md#delete_end_user) | **DELETE** /auth/users/me | Delete current end user account
 *Zyphr::AuthUserProfileApi* | [**get_end_user**](docs/AuthUserProfileApi.md#get_end_user) | **GET** /auth/users/me | Get current end user profile
 *Zyphr::AuthUserProfileApi* | [**update_end_user**](docs/AuthUserProfileApi.md#update_end_user) | **PATCH** /auth/users/me | Update current end user profile
@@ -440,6 +442,7 @@ Class | Method | HTTP request | Description
  - [Zyphr::Category](docs/Category.md)
  - [Zyphr::CategoryListResponse](docs/CategoryListResponse.md)
  - [Zyphr::CategoryResponse](docs/CategoryResponse.md)
+ - [Zyphr::ChangePasswordRequest](docs/ChangePasswordRequest.md)
  - [Zyphr::CloseWaaSEndpointCircuit200Response](docs/CloseWaaSEndpointCircuit200Response.md)
  - [Zyphr::CloseWaaSEndpointCircuit200ResponseData](docs/CloseWaaSEndpointCircuit200ResponseData.md)
  - [Zyphr::ConfirmEmailVerificationRequest](docs/ConfirmEmailVerificationRequest.md)
@@ -719,6 +722,7 @@ Class | Method | HTTP request | Description
  - [Zyphr::SetEndUserClaimsRequest](docs/SetEndUserClaimsRequest.md)
  - [Zyphr::SetPreferencesRequest](docs/SetPreferencesRequest.md)
  - [Zyphr::SetPreferencesRequestPreferencesInner](docs/SetPreferencesRequestPreferencesInner.md)
+ - [Zyphr::SetSelfApplicationTestRecipientsRequest](docs/SetSelfApplicationTestRecipientsRequest.md)
  - [Zyphr::SignInAnonymouslyRequest](docs/SignInAnonymouslyRequest.md)
  - [Zyphr::SignInWithGameCenterRequest](docs/SignInWithGameCenterRequest.md)
  - [Zyphr::SignInWithGooglePlayGamesRequest](docs/SignInWithGooglePlayGamesRequest.md)
@@ -856,6 +860,7 @@ Class | Method | HTTP request | Description
  - [Zyphr::WebhookDeliveryResponse](docs/WebhookDeliveryResponse.md)
  - [Zyphr::WebhookDeliveryRetryResponse](docs/WebhookDeliveryRetryResponse.md)
  - [Zyphr::WebhookDeliveryRetryResponseData](docs/WebhookDeliveryRetryResponseData.md)
+ - [Zyphr::WebhookEventType](docs/WebhookEventType.md)
  - [Zyphr::WebhookEventTypesResponse](docs/WebhookEventTypesResponse.md)
  - [Zyphr::WebhookEventTypesResponseData](docs/WebhookEventTypesResponseData.md)
  - [Zyphr::WebhookIpsResponse](docs/WebhookIpsResponse.md)

data/docs/ApplicationSelf.md

@@ -8,6 +8,7 @@
 | **name** | **String** | Human-readable application name. |  |
 | **environment** | **String** | The environment mode of the credentials used to authenticate this request. `null` when the environment cannot be determined (e.g. a legacy application-level key that predates environment-scoped keys) — not defaulted to a guessed value. |  |
 | **signing_algorithm** | **String** | JWT signing algorithm for this application's end-user tokens. |  |
+| **test_recipients** | **Array<String>** | The auth-email test allowlist. When non-empty, only these addresses receive auth emails (the gate from sc-7443); an empty array disables the gate. Settable via PATCH /auth/application (sc-7600). |  |
 
 ## Example
 
@@ -18,7 +19,8 @@ instance = Zyphr::ApplicationSelf.new(
   id: null,
   name: null,
   environment: null,
-  signing_algorithm: null
+  signing_algorithm: null,
+  test_recipients: null
 )
 ```
 

data/docs/AuthApplicationApi.md

@@ -5,6 +5,7 @@ All URIs are relative to *https://api.zyphr.dev/v1*
 | Method | HTTP request | Description |
 | ------ | ------------ | ----------- |
 | [**get_self_application**](AuthApplicationApi.md#get_self_application) | **GET** /auth/application | Get the authenticating application |
+| [**set_self_application_test_recipients**](AuthApplicationApi.md#set_self_application_test_recipients) | **PATCH** /auth/application | Set the authenticating application's auth-email test allowlist |
 
 
 ## get_self_application
@@ -79,3 +80,79 @@ This endpoint does not need any parameter.
 - **Content-Type**: Not defined
 - **Accept**: application/json
 
+
+## set_self_application_test_recipients
+
+> <ApplicationSelfResponse> set_self_application_test_recipients(set_self_application_test_recipients_request)
+
+Set the authenticating application's auth-email test allowlist
+
+Set `test_recipients` — the per-application auth-email allowlist — on the application whose credentials authenticated this request. When non-empty, this allowlist gates ALL auth emails (only listed addresses receive them); an EMPTY array clears it and disables the gate. Lets an integrator manage the allowlist from their own infrastructure config instead of the dashboard.  Application-SECRET scoped (server-side write): requires X-Application-Key AND X-Application-Secret. Mutates ONLY the authenticating application — it never takes an application id from the request, so there is no cross-tenant write path. The response mirrors GET /auth/application exactly (never returns secrets). 
+
+### Examples
+
+```ruby
+require 'time'
+require 'zyphr'
+# setup authorization
+Zyphr.configure do |config|
+  # Configure API key authorization: ApplicationSecret
+  config.api_key['X-Application-Secret'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Secret'] = 'Bearer'
+
+  # Configure API key authorization: ApplicationPublicKey
+  config.api_key['X-Application-Key'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Key'] = 'Bearer'
+end
+
+api_instance = Zyphr::AuthApplicationApi.new
+set_self_application_test_recipients_request = Zyphr::SetSelfApplicationTestRecipientsRequest.new({test_recipients: ['test_recipients_example']}) # SetSelfApplicationTestRecipientsRequest | 
+
+begin
+  # Set the authenticating application's auth-email test allowlist
+  result = api_instance.set_self_application_test_recipients(set_self_application_test_recipients_request)
+  p result
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthApplicationApi->set_self_application_test_recipients: #{e}"
+end
+```
+
+#### Using the set_self_application_test_recipients_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<ApplicationSelfResponse>, Integer, Hash)> set_self_application_test_recipients_with_http_info(set_self_application_test_recipients_request)
+
+```ruby
+begin
+  # Set the authenticating application's auth-email test allowlist
+  data, status_code, headers = api_instance.set_self_application_test_recipients_with_http_info(set_self_application_test_recipients_request)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <ApplicationSelfResponse>
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthApplicationApi->set_self_application_test_recipients_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **set_self_application_test_recipients_request** | [**SetSelfApplicationTestRecipientsRequest**](SetSelfApplicationTestRecipientsRequest.md) |  |  |
+
+### Return type
+
+[**ApplicationSelfResponse**](ApplicationSelfResponse.md)
+
+### Authorization
+
+[ApplicationSecret](../README.md#ApplicationSecret), [ApplicationPublicKey](../README.md#ApplicationPublicKey)
+
+### HTTP request headers
+
+- **Content-Type**: application/json
+- **Accept**: application/json
+

data/docs/AuthUserProfileApi.md

@@ -4,11 +4,86 @@ All URIs are relative to *https://api.zyphr.dev/v1*
 
 | Method | HTTP request | Description |
 | ------ | ------------ | ----------- |
+| [**change_end_user_password**](AuthUserProfileApi.md#change_end_user_password) | **POST** /auth/users/change-password | Change password (authenticated session) |
 | [**delete_end_user**](AuthUserProfileApi.md#delete_end_user) | **DELETE** /auth/users/me | Delete current end user account |
 | [**get_end_user**](AuthUserProfileApi.md#get_end_user) | **GET** /auth/users/me | Get current end user profile |
 | [**update_end_user**](AuthUserProfileApi.md#update_end_user) | **PATCH** /auth/users/me | Update current end user profile |
 
 
+## change_end_user_password
+
+> <RefreshTokenResponse> change_end_user_password(change_password_request)
+
+Change password (authenticated session)
+
+Change the currently authenticated end user's password from a logged-in session. The caller must prove possession of the CURRENT password (`current_password`); the user is identified from the end-user token, not the request body, so a user can only change their own password.  On success, all existing sessions are revoked and a fresh token pair is returned so the current session stays authenticated. Emits the `user.password_changed` webhook.
+
+### Examples
+
+```ruby
+require 'time'
+require 'zyphr'
+# setup authorization
+Zyphr.configure do |config|
+  # Configure Bearer authorization (JWT): EndUserToken
+  config.access_token = 'YOUR_BEARER_TOKEN'
+
+  # Configure API key authorization: ApplicationPublicKey
+  config.api_key['X-Application-Key'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Key'] = 'Bearer'
+end
+
+api_instance = Zyphr::AuthUserProfileApi.new
+change_password_request = Zyphr::ChangePasswordRequest.new({current_password: 'current_password_example', new_password: 'new_password_example'}) # ChangePasswordRequest | 
+
+begin
+  # Change password (authenticated session)
+  result = api_instance.change_end_user_password(change_password_request)
+  p result
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthUserProfileApi->change_end_user_password: #{e}"
+end
+```
+
+#### Using the change_end_user_password_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<RefreshTokenResponse>, Integer, Hash)> change_end_user_password_with_http_info(change_password_request)
+
+```ruby
+begin
+  # Change password (authenticated session)
+  data, status_code, headers = api_instance.change_end_user_password_with_http_info(change_password_request)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <RefreshTokenResponse>
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthUserProfileApi->change_end_user_password_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **change_password_request** | [**ChangePasswordRequest**](ChangePasswordRequest.md) |  |  |
+
+### Return type
+
+[**RefreshTokenResponse**](RefreshTokenResponse.md)
+
+### Authorization
+
+[EndUserToken](../README.md#EndUserToken), [ApplicationPublicKey](../README.md#ApplicationPublicKey)
+
+### HTTP request headers
+
+- **Content-Type**: application/json
+- **Accept**: application/json
+
+
 ## delete_end_user
 
 > <EndUserDeleteResponse> delete_end_user

data/docs/ChangePasswordRequest.md

@@ -0,0 +1,20 @@
+# Zyphr::ChangePasswordRequest
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **current_password** | **String** | The user's current password, for verification. |  |
+| **new_password** | **String** | The new password. Must satisfy the application's password policy. |  |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::ChangePasswordRequest.new(
+  current_password: null,
+  new_password: null
+)
+```
+

data/docs/SetSelfApplicationTestRecipientsRequest.md

@@ -0,0 +1,18 @@
+# Zyphr::SetSelfApplicationTestRecipientsRequest
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **test_recipients** | **Array<String>** | Email addresses allowed to receive auth emails. An empty array clears the allowlist (disables the gate). |  |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::SetSelfApplicationTestRecipientsRequest.new(
+  test_recipients: null
+)
+```
+

data/docs/WebhookDelivery.md

@@ -7,7 +7,7 @@
 | **id** | **String** |  | [optional] |
 | **msg_id** | **String** |  | [optional] |
 | **event_id** | **String** |  | [optional] |
-| **event_type** | **String** |  | [optional] |
+| **event_type** | [**WebhookEventType**](WebhookEventType.md) |  | [optional] |
 | **status** | **String** |  | [optional] |
 | **attempts** | **Integer** |  | [optional] |
 | **max_attempts** | **Integer** |  | [optional] |

data/docs/WebhookDeliveryDetail.md

@@ -7,7 +7,7 @@
 | **id** | **String** |  | [optional] |
 | **msg_id** | **String** |  | [optional] |
 | **event_id** | **String** |  | [optional] |
-| **event_type** | **String** |  | [optional] |
+| **event_type** | [**WebhookEventType**](WebhookEventType.md) |  | [optional] |
 | **status** | **String** |  | [optional] |
 | **attempts** | **Integer** |  | [optional] |
 | **max_attempts** | **Integer** |  | [optional] |

data/docs/WebhookEventType.md

@@ -0,0 +1,15 @@
+# Zyphr::WebhookEventType
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::WebhookEventType.new()
+```
+

data/docs/WebhookEventTypesResponseData.md

@@ -4,7 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **event_types** | **Array<String>** |  | [optional] |
+| **event_types** | [**Array<WebhookEventType>**](WebhookEventType.md) |  | [optional] |
 | **registry** | **Array<Object>** |  | [optional] |
 | **categories** | **Array<String>** |  | [optional] |
 | **api_version** | **String** |  | [optional] |

data/docs/WebhookTestEventResponseData.md

@@ -5,7 +5,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **delivery_id** | **String** |  | [optional] |
-| **event_type** | **String** |  | [optional] |
+| **event_type** | [**WebhookEventType**](WebhookEventType.md) |  | [optional] |
 | **payload** | **Object** |  | [optional] |
 | **status** | **String** |  | [optional] |
 

data/lib/zyphr/api/auth_application_api.rb

@@ -75,5 +75,73 @@ module Zyphr
       end
       return data, status_code, headers
     end
+
+    # Set the authenticating application's auth-email test allowlist
+    # Set `test_recipients` — the per-application auth-email allowlist — on the application whose credentials authenticated this request. When non-empty, this allowlist gates ALL auth emails (only listed addresses receive them); an EMPTY array clears it and disables the gate. Lets an integrator manage the allowlist from their own infrastructure config instead of the dashboard.  Application-SECRET scoped (server-side write): requires X-Application-Key AND X-Application-Secret. Mutates ONLY the authenticating application — it never takes an application id from the request, so there is no cross-tenant write path. The response mirrors GET /auth/application exactly (never returns secrets). 
+    # @param set_self_application_test_recipients_request [SetSelfApplicationTestRecipientsRequest] 
+    # @param [Hash] opts the optional parameters
+    # @return [ApplicationSelfResponse]
+    def set_self_application_test_recipients(set_self_application_test_recipients_request, opts = {})
+      data, _status_code, _headers = set_self_application_test_recipients_with_http_info(set_self_application_test_recipients_request, opts)
+      data
+    end
+
+    # Set the authenticating application's auth-email test allowlist
+    # Set `test_recipients` — the per-application auth-email allowlist — on the application whose credentials authenticated this request. When non-empty, this allowlist gates ALL auth emails (only listed addresses receive them); an EMPTY array clears it and disables the gate. Lets an integrator manage the allowlist from their own infrastructure config instead of the dashboard.  Application-SECRET scoped (server-side write): requires X-Application-Key AND X-Application-Secret. Mutates ONLY the authenticating application — it never takes an application id from the request, so there is no cross-tenant write path. The response mirrors GET /auth/application exactly (never returns secrets). 
+    # @param set_self_application_test_recipients_request [SetSelfApplicationTestRecipientsRequest] 
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(ApplicationSelfResponse, Integer, Hash)>] ApplicationSelfResponse data, response status code and response headers
+    def set_self_application_test_recipients_with_http_info(set_self_application_test_recipients_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AuthApplicationApi.set_self_application_test_recipients ...'
+      end
+      # verify the required parameter 'set_self_application_test_recipients_request' is set
+      if @api_client.config.client_side_validation && set_self_application_test_recipients_request.nil?
+        fail ArgumentError, "Missing the required parameter 'set_self_application_test_recipients_request' when calling AuthApplicationApi.set_self_application_test_recipients"
+      end
+      # resource path
+      local_var_path = '/auth/application'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(set_self_application_test_recipients_request)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'ApplicationSelfResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApplicationSecret', 'ApplicationPublicKey']
+
+      new_options = opts.merge(
+        :operation => :"AuthApplicationApi.set_self_application_test_recipients",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:PATCH, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AuthApplicationApi#set_self_application_test_recipients\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
   end
 end

data/lib/zyphr/api/auth_user_profile_api.rb

@@ -19,6 +19,74 @@ module Zyphr
     def initialize(api_client = ApiClient.default)
       @api_client = api_client
     end
+    # Change password (authenticated session)
+    # Change the currently authenticated end user's password from a logged-in session. The caller must prove possession of the CURRENT password (`current_password`); the user is identified from the end-user token, not the request body, so a user can only change their own password.  On success, all existing sessions are revoked and a fresh token pair is returned so the current session stays authenticated. Emits the `user.password_changed` webhook.
+    # @param change_password_request [ChangePasswordRequest] 
+    # @param [Hash] opts the optional parameters
+    # @return [RefreshTokenResponse]
+    def change_end_user_password(change_password_request, opts = {})
+      data, _status_code, _headers = change_end_user_password_with_http_info(change_password_request, opts)
+      data
+    end
+
+    # Change password (authenticated session)
+    # Change the currently authenticated end user's password from a logged-in session. The caller must prove possession of the CURRENT password (`current_password`); the user is identified from the end-user token, not the request body, so a user can only change their own password.  On success, all existing sessions are revoked and a fresh token pair is returned so the current session stays authenticated. Emits the `user.password_changed` webhook.
+    # @param change_password_request [ChangePasswordRequest] 
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(RefreshTokenResponse, Integer, Hash)>] RefreshTokenResponse data, response status code and response headers
+    def change_end_user_password_with_http_info(change_password_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AuthUserProfileApi.change_end_user_password ...'
+      end
+      # verify the required parameter 'change_password_request' is set
+      if @api_client.config.client_side_validation && change_password_request.nil?
+        fail ArgumentError, "Missing the required parameter 'change_password_request' when calling AuthUserProfileApi.change_end_user_password"
+      end
+      # resource path
+      local_var_path = '/auth/users/change-password'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(change_password_request)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'RefreshTokenResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['EndUserToken', 'ApplicationPublicKey']
+
+      new_options = opts.merge(
+        :operation => :"AuthUserProfileApi.change_end_user_password",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AuthUserProfileApi#change_end_user_password\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Delete current end user account
     # Delete the current end user account (GDPR right to erasure). This is a soft delete — the account is marked as deleted but data is retained for a period to allow for recovery or legal requirements. 
     # @param [Hash] opts the optional parameters

data/lib/zyphr/models/application_self.rb

@@ -28,6 +28,9 @@ module Zyphr
     # JWT signing algorithm for this application's end-user tokens.
     attr_accessor :signing_algorithm
 
+    # The auth-email test allowlist. When non-empty, only these addresses receive auth emails (the gate from sc-7443); an empty array disables the gate. Settable via PATCH /auth/application (sc-7600).
+    attr_accessor :test_recipients
+
     class EnumAttributeValidator
       attr_reader :datatype
       attr_reader :allowable_values
@@ -56,7 +59,8 @@ module Zyphr
         :'id' => :'id',
         :'name' => :'name',
         :'environment' => :'environment',
-        :'signing_algorithm' => :'signing_algorithm'
+        :'signing_algorithm' => :'signing_algorithm',
+        :'test_recipients' => :'test_recipients'
       }
     end
 
@@ -76,7 +80,8 @@ module Zyphr
         :'id' => :'String',
         :'name' => :'String',
         :'environment' => :'String',
-        :'signing_algorithm' => :'String'
+        :'signing_algorithm' => :'String',
+        :'test_recipients' => :'Array<String>'
       }
     end
 
@@ -126,6 +131,14 @@ module Zyphr
       else
         self.signing_algorithm = nil
       end
+
+      if attributes.key?(:'test_recipients')
+        if (value = attributes[:'test_recipients']).is_a?(Array)
+          self.test_recipients = value
+        end
+      else
+        self.test_recipients = nil
+      end
     end
 
     # Show invalid properties with the reasons. Usually used together with valid?
@@ -145,6 +158,10 @@ module Zyphr
         invalid_properties.push('invalid value for "signing_algorithm", signing_algorithm cannot be nil.')
       end
 
+      if @test_recipients.nil?
+        invalid_properties.push('invalid value for "test_recipients", test_recipients cannot be nil.')
+      end
+
       invalid_properties
     end
 
@@ -159,6 +176,7 @@ module Zyphr
       return false if @signing_algorithm.nil?
       signing_algorithm_validator = EnumAttributeValidator.new('String', ["HS256", "RS256", "ES256"])
       return false unless signing_algorithm_validator.valid?(@signing_algorithm)
+      return false if @test_recipients.nil?
       true
     end
 
@@ -202,6 +220,16 @@ module Zyphr
       @signing_algorithm = signing_algorithm
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] test_recipients Value to be assigned
+    def test_recipients=(test_recipients)
+      if test_recipients.nil?
+        fail ArgumentError, 'test_recipients cannot be nil'
+      end
+
+      @test_recipients = test_recipients
+    end
+
     # Checks equality by comparing each attribute.
     # @param [Object] Object to be compared
     def ==(o)
@@ -210,7 +238,8 @@ module Zyphr
           id == o.id &&
           name == o.name &&
           environment == o.environment &&
-          signing_algorithm == o.signing_algorithm
+          signing_algorithm == o.signing_algorithm &&
+          test_recipients == o.test_recipients
     end
 
     # @see the `==` method
@@ -222,7 +251,7 @@ module Zyphr
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [id, name, environment, signing_algorithm].hash
+      [id, name, environment, signing_algorithm, test_recipients].hash
     end
 
     # Builds the object from hash