@authup/server-core 1.0.0-beta.58 → 1.0.0-beta.60

package/dist/swagger.json

@@ -405,8 +405,29 @@
                 "type": "object",
                 "description": "JSON-serializable snapshot of the fields constraints a schema\ndeclares. The shape is uniform across schemas: a `null` constraint\nwas never declared (fallback semantics apply); an empty array is an\nexplicit \"nothing\"."
             },
+            "IndexedMode": {
+                "type": "string",
+                "enum": [
+                    "anchor",
+                    "cover"
+                ],
+                "description": "How the filters parameter is checked against the declared indexes:\n- `anchor`: every AND group must contain at least one conjunct whose\n  field leads an index (the rest is residual filtering);\n- `cover`: additionally, per relation path, the AND group's field set\n  must equal a leftmost prefix of one index."
+            },
             "FiltersSchemaDescription": {
                 "properties": {
+                    "indexed": {
+                        "anyOf": [
+                            {
+                                "$ref": "#/components/schemas/IndexedMode"
+                            },
+                            {
+                                "type": "boolean",
+                                "enum": [
+                                    false
+                                ]
+                            }
+                        ]
+                    },
                     "allowed": {
                         "anyOf": [
                             {
@@ -422,6 +443,7 @@
                     }
                 },
                 "required": [
+                    "indexed",
                     "allowed"
                 ],
                 "type": "object",
@@ -484,8 +506,11 @@
                 "type": "object",
                 "description": "JSON-serializable snapshot of the relation constraints a schema\ndeclares. `schemas` maps each allowed relation to the name of the\nschema governing it (composed by {@link Schema.describe} via the\nparent `schemaMapping`; an unmapped relation maps to itself,\nmirroring registry resolution) — nested capabilities are looked up\non that schema's own description instead of being expanded inline.\nThe shape is uniform across schemas: a `null` allow-list was never\ndeclared (fallback semantics apply; the targets cannot be\nenumerated then, so `schemas` is `null` alongside it), an empty\narray is an explicit \"nothing\" (with an empty `schemas` record)."
             },
-            "SortSchemaDescription": {
+            "SortsSchemaDescription": {
                 "properties": {
+                    "indexed": {
+                        "type": "boolean"
+                    },
                     "default": {
                         "oneOf": [
                             {
@@ -512,15 +537,6 @@
                                     "type": "string"
                                 }
                             },
-                            {
-                                "type": "array",
-                                "items": {
-                                    "type": "array",
-                                    "items": {
-                                        "type": "string"
-                                    }
-                                }
-                            },
                             {
                                 "type": "null"
                             }
@@ -528,16 +544,17 @@
                     }
                 },
                 "required": [
+                    "indexed",
                     "default",
                     "allowed"
                 ],
                 "type": "object",
-                "description": "JSON-serializable snapshot of the sort constraints a schema\ndeclares. `allowed` may hold tuple groups (keys only usable\ntogether, in order). The shape is uniform across schemas: a `null`\nconstraint was never declared (fallback semantics apply); an empty\narray is an explicit \"nothing\"."
+                "description": "JSON-serializable snapshot of the sort constraints a schema\ndeclares. The shape is uniform across schemas: a `null`\nconstraint was never declared (fallback semantics apply); an empty\narray is an explicit \"nothing\"."
             },
             "SchemaDescription": {
                 "properties": {
-                    "sort": {
-                        "$ref": "#/components/schemas/SortSchemaDescription"
+                    "sorts": {
+                        "$ref": "#/components/schemas/SortsSchemaDescription"
                     },
                     "relations": {
                         "$ref": "#/components/schemas/RelationsSchemaDescription"
@@ -551,6 +568,22 @@
                     "fields": {
                         "$ref": "#/components/schemas/FieldsSchemaDescription"
                     },
+                    "indexes": {
+                        "anyOf": [
+                            {
+                                "type": "array",
+                                "items": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    }
+                                }
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
                     "strict": {
                         "type": "boolean"
                     },
@@ -566,6 +599,7 @@
                     }
                 },
                 "required": [
+                    "indexes",
                     "strict",
                     "name"
                 ],
@@ -3012,6 +3046,8 @@
                             "mfaRemoved",
                             "mfaVerified",
                             "mfaChallengeFailed",
+                            "identityProviderLinked",
+                            "identityProviderUnlinked",
                             "created",
                             "updated",
                             "deleted"
@@ -3051,6 +3087,17 @@
                         ],
                         "description": "The OAuth2 client involved, if any."
                     },
+                    "sessionId": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "The auth_sessions row acting or affected. NULL = not attributable to\na session (rows predating the column, session-less flows such as a\nfailed login or registration)."
+                    },
                     "actorType": {
                         "anyOf": [
                             {
@@ -3178,6 +3225,7 @@
                     "refType",
                     "refId",
                     "clientId",
+                    "sessionId",
                     "actorType",
                     "actorId",
                     "actorName",
@@ -3545,6 +3593,163 @@
             "IdentityProviderSavePayload": {
                 "$ref": "#/components/schemas/IdentityProviderCreatePayload"
             },
+            "IdentityProviderLinkRequestResponse": {
+                "properties": {
+                    "url": {
+                        "type": "string"
+                    }
+                },
+                "required": [
+                    "url"
+                ],
+                "type": "object",
+                "description": "Response of `POST /identity-providers/:id/link-request` (plan 091):\nthe external provider's authorize URL the browser navigates to."
+            },
+            "IdentityProviderAccount": {
+                "properties": {
+                    "id": {
+                        "type": "string"
+                    },
+                    "providerUserId": {
+                        "type": "string"
+                    },
+                    "providerUserName": {
+                        "type": "string"
+                    },
+                    "providerUserEmail": {
+                        "type": "string"
+                    },
+                    "createdAt": {
+                        "type": "string"
+                    },
+                    "updatedAt": {
+                        "type": "string"
+                    },
+                    "userId": {
+                        "type": "string"
+                    },
+                    "user": {
+                        "$ref": "#/components/schemas/User"
+                    },
+                    "userRealmId": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
+                    "userRealm": {
+                        "oneOf": [
+                            {
+                                "$ref": "#/components/schemas/Realm"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
+                    "providerId": {
+                        "type": "string"
+                    },
+                    "provider": {
+                        "$ref": "#/components/schemas/IdentityProvider"
+                    },
+                    "providerRealmId": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
+                    "providerRealm": {
+                        "oneOf": [
+                            {
+                                "$ref": "#/components/schemas/Realm"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    }
+                },
+                "required": [
+                    "id",
+                    "providerUserId",
+                    "providerUserName",
+                    "providerUserEmail",
+                    "createdAt",
+                    "updatedAt",
+                    "userId",
+                    "user",
+                    "userRealmId",
+                    "userRealm",
+                    "providerId",
+                    "provider",
+                    "providerRealmId",
+                    "providerRealm"
+                ],
+                "type": "object"
+            },
+            "EntityCollectionResponseIdentityProviderAccount": {
+                "properties": {
+                    "meta": {
+                        "properties": {
+                            "schema": {
+                                "$ref": "#/components/schemas/SchemaDescription"
+                            },
+                            "total": {
+                                "type": "number",
+                                "format": "double"
+                            },
+                            "offset": {
+                                "type": "number",
+                                "format": "double"
+                            },
+                            "limit": {
+                                "type": "number",
+                                "format": "double"
+                            }
+                        },
+                        "required": [
+                            "total"
+                        ],
+                        "type": "object"
+                    },
+                    "data": {
+                        "type": "array",
+                        "items": {
+                            "$ref": "#/components/schemas/IdentityProviderAccount"
+                        }
+                    }
+                },
+                "required": [
+                    "meta",
+                    "data"
+                ],
+                "type": "object"
+            },
+            "EntityRecordResponseIdentityProviderAccount": {
+                "properties": {
+                    "meta": {
+                        "$ref": "#/components/schemas/EntityRecordMeta"
+                    },
+                    "data": {
+                        "$ref": "#/components/schemas/IdentityProviderAccount"
+                    }
+                },
+                "required": [
+                    "meta",
+                    "data"
+                ],
+                "type": "object",
+                "description": "The wire shape of every entity-record response: the record under\n`data`, response-scoped extras under `meta` (mirroring\n`EntityCollectionResponse`)."
+            },
             "IdentityProviderRoleMapping": {
                 "properties": {
                     "name": {
@@ -4789,6 +4994,9 @@
             },
             "StatusResponseFeatures": {
                 "properties": {
+                    "accountConsole": {
+                        "type": "boolean"
+                    },
                     "emailVerification": {
                         "type": "boolean"
                     },
@@ -4800,6 +5008,7 @@
                     }
                 },
                 "required": [
+                    "accountConsole",
                     "emailVerification",
                     "passwordRecovery",
                     "registration"
@@ -4961,8 +5170,8 @@
                             "kind": {
                                 "type": "string",
                                 "enum": [
-                                    "id_token",
                                     "access_token",
+                                    "id_token",
                                     "refresh_token",
                                     "mfa_token"
                                 ],
@@ -5250,9 +5459,9 @@
                             "type": "string",
                             "enum": [
                                 "none",
+                                "id_token",
                                 "code",
-                                "token",
-                                "id_token"
+                                "token"
                             ]
                         },
                         "description": "List of the supported OAuth 2.0 response_type values."
@@ -6456,44 +6665,232 @@
                 ],
                 "type": "object"
             },
-            "TrustAnchor": {
+            "SessionTokenKind": {
+                "type": "string",
+                "enum": [
+                    "access",
+                    "refresh"
+                ]
+            },
+            "SessionToken": {
                 "properties": {
                     "id": {
-                        "type": "string"
-                    },
-                    "name": {
-                        "type": "string"
+                        "type": "string",
+                        "description": "Token jti (application-populated, matches the JWT payload jti)."
                     },
-                    "certificate": {
+                    "sessionId": {
                         "type": "string",
-                        "description": "PEM-encoded CA certificate or CA chain."
+                        "description": "Owning session."
                     },
-                    "enabled": {
-                        "type": "boolean"
+                    "clientId": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "The client the token was issued for. Attribution sits here rather than\non the session, because one browser session may serve several\napplications.\n\nNull when the issuing path does not know the client (an MFA-login\ncompletion rides a client-less session) and on rows created before the\ncolumn existed."
                     },
-                    "createdAt": {
-                        "type": "string"
+                    "kind": {
+                        "$ref": "#/components/schemas/SessionTokenKind",
+                        "description": "Token kind."
                     },
-                    "updatedAt": {
-                        "type": "string"
+                    "parentId": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "Refresh tokens: previous refresh token in the rotation chain.\nInformational — null on the initial refresh token and on access tokens."
                     },
-                    "realmId": {
-                        "type": "string"
+                    "refreshTokenId": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "Access tokens: the refresh token this access token was issued alongside.\nInformational — null on refresh tokens."
                     },
-                    "realm": {
-                        "$ref": "#/components/schemas/Realm"
-                    }
-                },
-                "required": [
-                    "id",
-                    "name",
-                    "certificate",
-                    "enabled",
-                    "createdAt",
-                    "updatedAt",
-                    "realmId",
-                    "realm"
-                ],
+                    "ipAddress": {
+                        "type": "string",
+                        "description": "IP address captured from the issuing request."
+                    },
+                    "userAgent": {
+                        "type": "string",
+                        "description": "User agent captured from the issuing request."
+                    },
+                    "consumedAt": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "Refresh tokens: timestamp the token was consumed by a rotation (iso).\nnull on access tokens and on a not-yet-used refresh token."
+                    },
+                    "revokedAt": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "Timestamp the token was revoked (iso) — single-token revoke or family revoke."
+                    },
+                    "expiresAt": {
+                        "type": "string",
+                        "description": "Expiration date (iso) — mirrors the JWT exp. Drives cleanup."
+                    },
+                    "createdAt": {
+                        "type": "string",
+                        "description": "Creation date (iso)."
+                    },
+                    "session": {
+                        "$ref": "#/components/schemas/Session"
+                    },
+                    "client": {
+                        "oneOf": [
+                            {
+                                "$ref": "#/components/schemas/Client"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    }
+                },
+                "required": [
+                    "id",
+                    "sessionId",
+                    "clientId",
+                    "kind",
+                    "parentId",
+                    "refreshTokenId",
+                    "ipAddress",
+                    "userAgent",
+                    "consumedAt",
+                    "revokedAt",
+                    "expiresAt",
+                    "createdAt"
+                ],
+                "type": "object"
+            },
+            "EntityCollectionResponseSessionToken": {
+                "properties": {
+                    "meta": {
+                        "properties": {
+                            "schema": {
+                                "$ref": "#/components/schemas/SchemaDescription"
+                            },
+                            "total": {
+                                "type": "number",
+                                "format": "double"
+                            },
+                            "offset": {
+                                "type": "number",
+                                "format": "double"
+                            },
+                            "limit": {
+                                "type": "number",
+                                "format": "double"
+                            }
+                        },
+                        "required": [
+                            "total"
+                        ],
+                        "type": "object"
+                    },
+                    "data": {
+                        "type": "array",
+                        "items": {
+                            "$ref": "#/components/schemas/SessionToken"
+                        }
+                    }
+                },
+                "required": [
+                    "meta",
+                    "data"
+                ],
+                "type": "object"
+            },
+            "EntityRecordResponseSessionToken": {
+                "properties": {
+                    "meta": {
+                        "$ref": "#/components/schemas/EntityRecordMeta"
+                    },
+                    "data": {
+                        "$ref": "#/components/schemas/SessionToken"
+                    }
+                },
+                "required": [
+                    "meta",
+                    "data"
+                ],
+                "type": "object",
+                "description": "The wire shape of every entity-record response: the record under\n`data`, response-scoped extras under `meta` (mirroring\n`EntityCollectionResponse`)."
+            },
+            "SessionTokenDeleteManyResult": {
+                "properties": {
+                    "count": {
+                        "type": "number",
+                        "format": "double"
+                    }
+                },
+                "required": [
+                    "count"
+                ],
+                "type": "object"
+            },
+            "TrustAnchor": {
+                "properties": {
+                    "id": {
+                        "type": "string"
+                    },
+                    "name": {
+                        "type": "string"
+                    },
+                    "certificate": {
+                        "type": "string",
+                        "description": "PEM-encoded CA certificate or CA chain."
+                    },
+                    "enabled": {
+                        "type": "boolean"
+                    },
+                    "createdAt": {
+                        "type": "string"
+                    },
+                    "updatedAt": {
+                        "type": "string"
+                    },
+                    "realmId": {
+                        "type": "string"
+                    },
+                    "realm": {
+                        "$ref": "#/components/schemas/Realm"
+                    }
+                },
+                "required": [
+                    "id",
+                    "name",
+                    "certificate",
+                    "enabled",
+                    "createdAt",
+                    "updatedAt",
+                    "realmId",
+                    "realm"
+                ],
                 "type": "object"
             },
             "EntityCollectionResponseTrustAnchor": {
@@ -9183,6 +9580,72 @@
                 ]
             }
         },
+        "/identity-providers/{id}/link-request": {
+            "post": {
+                "operationId": "LinkRequest",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/IdentityProviderLinkRequestResponse"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
+        "/realms/{realmId}/identity-providers/{id}/link-request": {
+            "post": {
+                "operationId": "LinkRequest_2",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/IdentityProviderLinkRequestResponse"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
         "/identity-providers/{id}/authorize-in": {
             "get": {
                 "operationId": "AuthorizeIn",
@@ -9225,7 +9688,175 @@
                         "content": {
                             "application/json": {
                                 "schema": {
-                                    "$ref": "#/components/schemas/Response"
+                                    "$ref": "#/components/schemas/Response"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
+        "/identity-provider-accounts": {
+            "get": {
+                "operationId": "GetMany_10",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityCollectionResponseIdentityProviderAccount"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": []
+            }
+        },
+        "/realms/{realmId}/identity-provider-accounts": {
+            "get": {
+                "operationId": "GetMany_11",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityCollectionResponseIdentityProviderAccount"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": []
+            }
+        },
+        "/identity-provider-accounts/{id}": {
+            "get": {
+                "operationId": "GetOne_8",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityRecordResponseIdentityProviderAccount"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            },
+            "delete": {
+                "operationId": "Drop_8",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityRecordResponseIdentityProviderAccount"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
+        "/realms/{realmId}/identity-provider-accounts/{id}": {
+            "get": {
+                "operationId": "GetOne_9",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityRecordResponseIdentityProviderAccount"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            },
+            "delete": {
+                "operationId": "Drop_9",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityRecordResponseIdentityProviderAccount"
                                 }
                             }
                         }
@@ -9251,7 +9882,7 @@
         },
         "/identity-provider-role-mappings": {
             "get": {
-                "operationId": "GetMany_10",
+                "operationId": "GetMany_12",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9300,7 +9931,7 @@
         },
         "/identity-provider-role-mappings/{id}": {
             "get": {
-                "operationId": "GetOne_8",
+                "operationId": "GetOne_10",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9373,7 +10004,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_8",
+                "operationId": "Drop_10",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9406,7 +10037,7 @@
         },
         "/keys": {
             "get": {
-                "operationId": "GetMany_11",
+                "operationId": "GetMany_13",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9455,7 +10086,7 @@
         },
         "/realms/{realmId}/keys": {
             "get": {
-                "operationId": "GetMany_12",
+                "operationId": "GetMany_14",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9504,7 +10135,7 @@
         },
         "/keys/{id}": {
             "get": {
-                "operationId": "GetOne_9",
+                "operationId": "GetOne_11",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9577,7 +10208,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_9",
+                "operationId": "Drop_11",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9610,7 +10241,7 @@
         },
         "/realms/{realmId}/keys/{id}": {
             "get": {
-                "operationId": "GetOne_10",
+                "operationId": "GetOne_12",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9683,7 +10314,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_10",
+                "operationId": "Drop_12",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9716,7 +10347,7 @@
         },
         "/permissions": {
             "get": {
-                "operationId": "GetMany_13",
+                "operationId": "GetMany_15",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9765,7 +10396,7 @@
         },
         "/realms/{realmId}/permissions": {
             "get": {
-                "operationId": "GetMany_14",
+                "operationId": "GetMany_16",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10017,7 +10648,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_11",
+                "operationId": "Drop_13",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10165,7 +10796,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_12",
+                "operationId": "Drop_14",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10198,7 +10829,7 @@
         },
         "/permission-policies": {
             "get": {
-                "operationId": "GetMany_15",
+                "operationId": "GetMany_17",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10247,7 +10878,7 @@
         },
         "/permission-policies/{id}": {
             "get": {
-                "operationId": "GetOne_11",
+                "operationId": "GetOne_13",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10278,7 +10909,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_13",
+                "operationId": "Drop_15",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10309,7 +10940,7 @@
                 ]
             }
         },
-        "/activate": {
+        "/account": {
             "get": {
                 "operationId": "Serve",
                 "responses": {
@@ -10327,6 +10958,46 @@
                 "description": "",
                 "tags": [],
                 "parameters": []
+            }
+        },
+        "/account/{page}": {
+            "get": {
+                "operationId": "ServePage",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "type": "string"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": []
+            }
+        },
+        "/activate": {
+            "get": {
+                "operationId": "Serve_2",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "type": "string"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": []
             },
             "post": {
                 "operationId": "Execute",
@@ -10483,7 +11154,7 @@
                 "parameters": []
             },
             "get": {
-                "operationId": "Serve_2",
+                "operationId": "Serve_3",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10567,7 +11238,7 @@
         },
         "/logout": {
             "get": {
-                "operationId": "Serve_3",
+                "operationId": "Serve_4",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10639,7 +11310,7 @@
         },
         "/password-forgot": {
             "get": {
-                "operationId": "Serve_4",
+                "operationId": "Serve_5",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10688,7 +11359,7 @@
         },
         "/password-reset": {
             "get": {
-                "operationId": "Serve_5",
+                "operationId": "Serve_6",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10737,7 +11408,7 @@
         },
         "/register": {
             "get": {
-                "operationId": "Serve_6",
+                "operationId": "Serve_7",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10910,7 +11581,7 @@
         },
         "/realms": {
             "get": {
-                "operationId": "GetMany_16",
+                "operationId": "GetMany_18",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11074,7 +11745,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_14",
+                "operationId": "Drop_16",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11229,7 +11900,7 @@
         },
         "/roles": {
             "get": {
-                "operationId": "GetMany_17",
+                "operationId": "GetMany_19",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11393,7 +12064,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_15",
+                "operationId": "Drop_17",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11426,7 +12097,7 @@
         },
         "/role-attributes": {
             "get": {
-                "operationId": "GetMany_18",
+                "operationId": "GetMany_20",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11548,7 +12219,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_16",
+                "operationId": "Drop_18",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11581,7 +12252,7 @@
         },
         "/role-permissions": {
             "get": {
-                "operationId": "GetMany_19",
+                "operationId": "GetMany_21",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11672,7 +12343,7 @@
                 }
             },
             "get": {
-                "operationId": "GetOne_12",
+                "operationId": "GetOne_14",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11703,7 +12374,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_17",
+                "operationId": "Drop_19",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11736,7 +12407,7 @@
         },
         "/policies": {
             "get": {
-                "operationId": "GetMany_20",
+                "operationId": "GetMany_22",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11785,7 +12456,7 @@
         },
         "/realms/{realmId}/policies": {
             "get": {
-                "operationId": "GetMany_21",
+                "operationId": "GetMany_23",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11900,7 +12571,7 @@
         },
         "/policies/{id}": {
             "get": {
-                "operationId": "GetOne_13",
+                "operationId": "GetOne_15",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12031,7 +12702,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_18",
+                "operationId": "Drop_20",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12064,7 +12735,7 @@
         },
         "/realms/{realmId}/policies/{id}": {
             "get": {
-                "operationId": "GetOne_14",
+                "operationId": "GetOne_16",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12195,7 +12866,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_19",
+                "operationId": "Drop_21",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12316,7 +12987,7 @@
         },
         "/scopes": {
             "get": {
-                "operationId": "GetMany_22",
+                "operationId": "GetMany_24",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12480,7 +13151,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_20",
+                "operationId": "Drop_22",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12513,7 +13184,7 @@
         },
         "/sessions": {
             "get": {
-                "operationId": "GetMany_23",
+                "operationId": "GetMany_25",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12551,7 +13222,7 @@
         },
         "/realms/{realmId}/sessions": {
             "get": {
-                "operationId": "GetMany_24",
+                "operationId": "GetMany_26",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12589,7 +13260,7 @@
         },
         "/sessions/{id}": {
             "get": {
-                "operationId": "GetOne_15",
+                "operationId": "GetOne_17",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12620,7 +13291,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_21",
+                "operationId": "Drop_23",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12653,7 +13324,7 @@
         },
         "/realms/{realmId}/sessions/{id}": {
             "get": {
-                "operationId": "GetOne_16",
+                "operationId": "GetOne_18",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12684,7 +13355,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_22",
+                "operationId": "Drop_24",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12715,9 +13386,111 @@
                 ]
             }
         },
+        "/session-tokens": {
+            "get": {
+                "operationId": "GetMany_27",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityCollectionResponseSessionToken"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": []
+            },
+            "delete": {
+                "operationId": "DropMany_3",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/SessionTokenDeleteManyResult"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "Revoke every token matching the query. Requires a target filter, so it\ncannot degenerate into an unscoped mass revoke.\n\nScoped to one client this is \"sign out of this application\": the session\nitself survives, so the other applications riding it stay signed in.",
+                "tags": [],
+                "parameters": []
+            }
+        },
+        "/session-tokens/{id}": {
+            "get": {
+                "operationId": "GetOne_19",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityRecordResponseSessionToken"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            },
+            "delete": {
+                "operationId": "Drop_25",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityRecordResponseSessionToken"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
         "/trust-anchors": {
             "get": {
-                "operationId": "GetMany_25",
+                "operationId": "GetMany_28",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12766,7 +13539,7 @@
         },
         "/realms/{realmId}/trust-anchors": {
             "get": {
-                "operationId": "GetMany_26",
+                "operationId": "GetMany_29",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12815,7 +13588,7 @@
         },
         "/trust-anchors/{id}": {
             "get": {
-                "operationId": "GetOne_17",
+                "operationId": "GetOne_20",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12888,7 +13661,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_23",
+                "operationId": "Drop_26",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12921,7 +13694,7 @@
         },
         "/realms/{realmId}/trust-anchors/{id}": {
             "get": {
-                "operationId": "GetOne_18",
+                "operationId": "GetOne_21",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12994,7 +13767,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_24",
+                "operationId": "Drop_27",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13027,7 +13800,7 @@
         },
         "/users": {
             "get": {
-                "operationId": "GetMany_27",
+                "operationId": "GetMany_30",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13076,7 +13849,7 @@
         },
         "/realms/{realmId}/users": {
             "get": {
-                "operationId": "GetMany_28",
+                "operationId": "GetMany_31",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13240,7 +14013,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_25",
+                "operationId": "Drop_28",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13388,7 +14161,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_26",
+                "operationId": "Drop_29",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13421,7 +14194,7 @@
         },
         "/user-attributes": {
             "get": {
-                "operationId": "GetMany_29",
+                "operationId": "GetMany_32",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13543,7 +14316,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_27",
+                "operationId": "Drop_30",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13576,7 +14349,7 @@
         },
         "/users/{id}/authenticators": {
             "get": {
-                "operationId": "GetMany_30",
+                "operationId": "GetMany_33",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13651,7 +14424,7 @@
         },
         "/users/{id}/authenticators/{deviceId}": {
             "get": {
-                "operationId": "GetOne_19",
+                "operationId": "GetOne_22",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13694,7 +14467,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_28",
+                "operationId": "Drop_31",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13795,7 +14568,7 @@
         },
         "/user-permissions": {
             "get": {
-                "operationId": "GetMany_31",
+                "operationId": "GetMany_34",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13886,7 +14659,7 @@
                 }
             },
             "get": {
-                "operationId": "GetOne_20",
+                "operationId": "GetOne_23",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13917,7 +14690,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_29",
+                "operationId": "Drop_32",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13950,7 +14723,7 @@
         },
         "/user-roles": {
             "get": {
-                "operationId": "GetMany_32",
+                "operationId": "GetMany_35",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13999,7 +14772,7 @@
         },
         "/user-roles/{id}": {
             "get": {
-                "operationId": "GetOne_21",
+                "operationId": "GetOne_24",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -14030,7 +14803,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_30",
+                "operationId": "Drop_33",
                 "responses": {
                     "200": {
                         "description": "Ok",