@faable/auth-sdk 2.5.78 → 2.5.79

package/dist/FaableAuthApi.d.ts

@@ -56,6 +56,8 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
             passkey_promotion?: "offer" | "off" | undefined;
             passkey_promotion_snooze_days?: number | undefined;
             passkey_promotion_max_prompts?: number | undefined;
+            remember_me?: "optional" | "off" | undefined;
+            remember_me_days?: number | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
         mfa_policy?: {
@@ -757,6 +759,8 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
                 passkey_promotion?: "offer" | "off" | undefined;
                 passkey_promotion_snooze_days?: number | undefined;
                 passkey_promotion_max_prompts?: number | undefined;
+                remember_me?: "optional" | "off" | undefined;
+                remember_me_days?: number | undefined;
             } | undefined;
             mfa_policy?: {
                 mode?: "required" | "optional" | "off" | undefined;
@@ -810,6 +814,8 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
                 passkey_promotion?: "offer" | "off" | undefined;
                 passkey_promotion_snooze_days?: number | undefined;
                 passkey_promotion_max_prompts?: number | undefined;
+                remember_me?: "optional" | "off" | undefined;
+                remember_me_days?: number | undefined;
             } | undefined;
             mfa_policy?: {
                 mode?: "required" | "optional" | "off" | undefined;
@@ -866,6 +872,8 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
                 passkey_promotion?: "offer" | "off" | undefined;
                 passkey_promotion_snooze_days?: number | undefined;
                 passkey_promotion_max_prompts?: number | undefined;
+                remember_me?: "optional" | "off" | undefined;
+                remember_me_days?: number | undefined;
             } | undefined;
             mfa_policy?: {
                 mode?: "required" | "optional" | "off" | undefined;
@@ -921,6 +929,8 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
             passkey_promotion?: "offer" | "off" | undefined;
             passkey_promotion_snooze_days?: number | undefined;
             passkey_promotion_max_prompts?: number | undefined;
+            remember_me?: "optional" | "off" | undefined;
+            remember_me_days?: number | undefined;
         } | undefined;
         mfa_policy?: {
             mode?: "required" | "optional" | "off" | undefined;

package/dist/api/generated-client.d.ts

@@ -52,6 +52,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion?: "offer" | "off" | undefined;
             passkey_promotion_snooze_days?: number | undefined;
             passkey_promotion_max_prompts?: number | undefined;
+            remember_me?: "optional" | "off" | undefined;
+            remember_me_days?: number | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
         mfa_policy?: {
@@ -97,6 +99,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion?: "offer" | "off" | undefined;
             passkey_promotion_snooze_days?: number | undefined;
             passkey_promotion_max_prompts?: number | undefined;
+            remember_me?: "optional" | "off" | undefined;
+            remember_me_days?: number | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
         mfa_policy?: {
@@ -148,6 +152,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion?: "offer" | "off" | undefined;
             passkey_promotion_snooze_days?: number | undefined;
             passkey_promotion_max_prompts?: number | undefined;
+            remember_me?: "optional" | "off" | undefined;
+            remember_me_days?: number | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
         mfa_policy?: {
@@ -204,6 +210,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 passkey_promotion?: "offer" | "off" | undefined;
                 passkey_promotion_snooze_days?: number | undefined;
                 passkey_promotion_max_prompts?: number | undefined;
+                remember_me?: "optional" | "off" | undefined;
+                remember_me_days?: number | undefined;
             } | undefined;
             login_flow?: string | null | undefined;
             mfa_policy?: {
@@ -244,6 +252,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 passkey_promotion?: "offer" | "off" | undefined;
                 passkey_promotion_snooze_days?: number | undefined;
                 passkey_promotion_max_prompts?: number | undefined;
+                remember_me?: "optional" | "off" | undefined;
+                remember_me_days?: number | undefined;
             } | undefined;
             login_flow?: string | null | undefined;
             mfa_policy?: {
@@ -287,6 +297,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 passkey_promotion?: "offer" | "off" | undefined;
                 passkey_promotion_snooze_days?: number | undefined;
                 passkey_promotion_max_prompts?: number | undefined;
+                remember_me?: "optional" | "off" | undefined;
+                remember_me_days?: number | undefined;
             } | undefined;
             login_flow?: string | null | undefined;
             mfa_policy?: {
@@ -345,6 +357,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion?: "offer" | "off" | undefined;
             passkey_promotion_snooze_days?: number | undefined;
             passkey_promotion_max_prompts?: number | undefined;
+            remember_me?: "optional" | "off" | undefined;
+            remember_me_days?: number | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
         mfa_policy?: {
@@ -754,6 +768,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion?: "offer" | "off" | undefined;
             passkey_promotion_snooze_days?: number | undefined;
             passkey_promotion_max_prompts?: number | undefined;
+            remember_me?: "optional" | "off" | undefined;
+            remember_me_days?: number | undefined;
         } | undefined;
         mfa_policy?: {
             mode?: "required" | "optional" | "off" | undefined;
@@ -812,6 +828,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion?: "offer" | "off" | undefined;
             passkey_promotion_snooze_days?: number | undefined;
             passkey_promotion_max_prompts?: number | undefined;
+            remember_me?: "optional" | "off" | undefined;
+            remember_me_days?: number | undefined;
         } | undefined;
         mfa_policy?: {
             mode?: "required" | "optional" | "off" | undefined;
@@ -870,6 +888,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion?: "offer" | "off" | undefined;
             passkey_promotion_snooze_days?: number | undefined;
             passkey_promotion_max_prompts?: number | undefined;
+            remember_me?: "optional" | "off" | undefined;
+            remember_me_days?: number | undefined;
         } | undefined;
         mfa_policy?: {
             mode?: "required" | "optional" | "off" | undefined;
@@ -929,6 +949,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 passkey_promotion?: "offer" | "off" | undefined;
                 passkey_promotion_snooze_days?: number | undefined;
                 passkey_promotion_max_prompts?: number | undefined;
+                remember_me?: "optional" | "off" | undefined;
+                remember_me_days?: number | undefined;
             } | undefined;
             mfa_policy?: {
                 mode?: "required" | "optional" | "off" | undefined;
@@ -982,6 +1004,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 passkey_promotion?: "offer" | "off" | undefined;
                 passkey_promotion_snooze_days?: number | undefined;
                 passkey_promotion_max_prompts?: number | undefined;
+                remember_me?: "optional" | "off" | undefined;
+                remember_me_days?: number | undefined;
             } | undefined;
             mfa_policy?: {
                 mode?: "required" | "optional" | "off" | undefined;
@@ -1038,6 +1062,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 passkey_promotion?: "offer" | "off" | undefined;
                 passkey_promotion_snooze_days?: number | undefined;
                 passkey_promotion_max_prompts?: number | undefined;
+                remember_me?: "optional" | "off" | undefined;
+                remember_me_days?: number | undefined;
             } | undefined;
             mfa_policy?: {
                 mode?: "required" | "optional" | "off" | undefined;
@@ -1097,6 +1123,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion?: "offer" | "off" | undefined;
             passkey_promotion_snooze_days?: number | undefined;
             passkey_promotion_max_prompts?: number | undefined;
+            remember_me?: "optional" | "off" | undefined;
+            remember_me_days?: number | undefined;
         } | undefined;
         mfa_policy?: {
             mode?: "required" | "optional" | "off" | undefined;
@@ -1155,6 +1183,8 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion?: "offer" | "off" | undefined;
             passkey_promotion_snooze_days?: number | undefined;
             passkey_promotion_max_prompts?: number | undefined;
+            remember_me?: "optional" | "off" | undefined;
+            remember_me_days?: number | undefined;
         } | undefined;
         mfa_policy?: {
             mode?: "required" | "optional" | "off" | undefined;

package/dist/api/types.d.ts

@@ -220,7 +220,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/flow/identify": {
+    "/login/identify": {
         parameters: {
             query?: never;
             header?: never;
@@ -233,7 +233,7 @@ export interface paths {
          * Leave the identifier-first screen
          * @description Records the identifier the user typed on the hosted `/flow/identify` screen and advances the login to the method chooser. `state` is the id the screen was opened with; it stays valid, so the chooser is reached with the same `?state=`.
          */
-        post: operations["flow/identify"];
+        post: operations["login/identify"];
         delete?: never;
         options?: never;
         head?: never;
@@ -1529,6 +1529,54 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/mfa/challenge/options": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * What the second-factor screen should offer
+         * @description For a login parked on the hosted challenge screen: which factors the user can answer with, in the order and with the default the login flow chose, and whether recovery codes are an option. Reads the state without consuming it.
+         */
+        get: {
+            parameters: {
+                query: {
+                    state: string;
+                };
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Default Response */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /** @description The ways this user can answer, in the order the screen should offer them. Only factors the user actually has and the policy accepts. */
+                            factors: ("totp" | "webauthn")[];
+                            /** @description The one to mark as the default, when there are several. */
+                            preferred?: "totp" | "webauthn";
+                            /** @description Whether to offer the recovery-code way in: the flow allows it and the user has codes. */
+                            recovery: boolean;
+                        };
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/mfa/verify": {
         parameters: {
             query?: never;
@@ -2123,6 +2171,8 @@ export interface paths {
                         client_id: string;
                         redirect_to?: string;
                         state?: string;
+                        /** @description The "Remember me on this device" checkbox. Honoured only when the tenant shows one (`login_methods.remember_me: "optional"`). */
+                        remember_me?: boolean;
                     };
                 };
             };
@@ -2705,6 +2755,10 @@ export interface components {
                 passkey_promotion_snooze_days?: number;
                 /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                 passkey_promotion_max_prompts?: number;
+                /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                remember_me?: "off" | "optional";
+                /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                remember_me_days?: number;
             };
             /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
             login_flow?: string | null;
@@ -2993,6 +3047,10 @@ export interface components {
                 passkey_promotion_snooze_days?: number;
                 /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                 passkey_promotion_max_prompts?: number;
+                /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                remember_me?: "off" | "optional";
+                /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                remember_me_days?: number;
             };
             /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
             mfa_policy?: {
@@ -3094,6 +3152,10 @@ export interface components {
                 passkey_promotion_snooze_days?: number;
                 /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                 passkey_promotion_max_prompts?: number;
+                /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                remember_me?: "off" | "optional";
+                /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                remember_me_days?: number;
             } | null;
             mfa_policy?: {
                 /** @description `off` (default) never challenges. `optional` challenges a user who has enrolled a factor, and lets everyone else in. `required` challenges everyone and sends users with no factor through enrolment during login — it never locks anyone out in place. */
@@ -4522,6 +4584,10 @@ export interface components {
                 passkey_promotion_snooze_days?: number;
                 /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                 passkey_promotion_max_prompts?: number;
+                /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                remember_me?: "off" | "optional";
+                /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                remember_me_days?: number;
             } | null;
             mfa_policy?: {
                 /** @description `off` (default) never challenges. `optional` challenges a user who has enrolled a factor, and lets everyone else in. `required` challenges everyone and sends users with no factor through enrolment during login — it never locks anyone out in place. */
@@ -4579,6 +4645,8 @@ export interface components {
             response_type?: string;
             /** @description Same-origin path to return the user to after authentication, instead of the OAuth client redirect. Used by first-party interactive flows (e.g. device-code confirm). Non same-origin values are ignored. */
             redirect_to?: string;
+            /** @description The "Remember me on this device" checkbox. Honoured only when the tenant shows one (`login_methods.remember_me: "optional"`): `true` keeps the session for `remember_me_days`, `false` ends it when the browser closes. */
+            remember_me?: boolean;
             client_id: string;
             /** @description Deprecated. Use connection_id */
             connection?: string;
@@ -4689,6 +4757,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -4835,6 +4907,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -4935,6 +5011,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -5007,6 +5087,10 @@ export interface operations {
                         passkey_promotion_snooze_days?: number;
                         /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                         passkey_promotion_max_prompts?: number;
+                        /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                        remember_me?: "off" | "optional";
+                        /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                        remember_me_days?: number;
                     } | null;
                     mfa_policy?: {
                         /** @description `off` (default) never challenges. `optional` challenges a user who has enrolled a factor, and lets everyone else in. `required` challenges everyone and sends users with no factor through enrolment during login — it never locks anyone out in place. */
@@ -5085,6 +5169,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -5194,6 +5282,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -5744,6 +5836,8 @@ export interface operations {
                         } | null;
                         identifier_first: boolean;
                         remember_last_method: boolean;
+                        /** @description Render a "Remember me on this device" checkbox on the password and email-code forms, and send its value as `remember_me` when posting the credential. */
+                        remember_me: boolean;
                         /** @description What the user typed on the identifier-first screen, when the flow has one. Prefill the email field with it. */
                         identifier?: string;
                         /** @description The method key that was moved first because this browser used it last time (`remember_last_method`). Absent otherwise. */
@@ -5755,7 +5849,7 @@ export interface operations {
             };
         };
     };
-    "flow/identify": {
+    "login/identify": {
         parameters: {
             query?: never;
             header?: never;
@@ -5900,6 +5994,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -5999,6 +6097,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -6092,6 +6194,10 @@ export interface operations {
                         passkey_promotion_snooze_days?: number;
                         /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                         passkey_promotion_max_prompts?: number;
+                        /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                        remember_me?: "off" | "optional";
+                        /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                        remember_me_days?: number;
                     } | null;
                     mfa_policy?: {
                         /** @description `off` (default) never challenges. `optional` challenges a user who has enrolled a factor, and lets everyone else in. `required` challenges everyone and sends users with no factor through enrolment during login — it never locks anyone out in place. */
@@ -6171,6 +6277,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -6270,6 +6380,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -6369,6 +6483,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -11652,6 +11770,8 @@ export interface operations {
                     otp: string;
                     /** @description Same-origin path to return the user to after authentication, instead of the OAuth client redirect. Used by first-party interactive flows (e.g. device-code confirm). Non same-origin values are ignored. */
                     redirect_to?: string;
+                    /** @description The "Remember me on this device" checkbox. Honoured only when the tenant shows one (`login_methods.remember_me: "optional"`). */
+                    remember_me?: boolean;
                 };
             };
         };
@@ -12480,6 +12600,8 @@ export interface operations {
                     response_type?: string;
                     /** @description Same-origin path to return the user to after authentication, instead of the OAuth client redirect. Used by first-party interactive flows (e.g. device-code confirm). Non same-origin values are ignored. */
                     redirect_to?: string;
+                    /** @description The "Remember me on this device" checkbox. Honoured only when the tenant shows one (`login_methods.remember_me: "optional"`): `true` keeps the session for `remember_me_days`, `false` ends it when the browser closes. */
+                    remember_me?: boolean;
                     client_id: string;
                     /** @description Deprecated. Use connection_id */
                     connection?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/auth-sdk",
-  "version": "2.5.78",
+  "version": "2.5.79",
   "author": "Marc Pomar <marc@faable.com>",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/spec/openapi.json

@@ -3,7 +3,7 @@
   "info": {
     "title": "@faablecloud/auth",
     "description": "Auth Platform made by Faable. Manage Users and Roles",
-    "version": "2.4.0",
+    "version": "2.5.1",
     "license": {
       "name": "private",
       "url": "https://faable.com/docs/platform/privacy-policy"
@@ -232,6 +232,29 @@
                 "minimum": 0,
                 "maximum": 10,
                 "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+              },
+              "remember_me": {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "enum": [
+                      "off"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "optional"
+                    ]
+                  }
+                ],
+                "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+              },
+              "remember_me_days": {
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 365,
+                "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
               }
             },
             "additionalProperties": false,
@@ -1267,6 +1290,29 @@
                 "minimum": 0,
                 "maximum": 10,
                 "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+              },
+              "remember_me": {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "enum": [
+                      "off"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "optional"
+                    ]
+                  }
+                ],
+                "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+              },
+              "remember_me_days": {
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 365,
+                "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
               }
             },
             "additionalProperties": false,
@@ -1596,6 +1642,29 @@
                     "minimum": 0,
                     "maximum": 10,
                     "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+                  },
+                  "remember_me": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "enum": [
+                          "off"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "optional"
+                        ]
+                      }
+                    ],
+                    "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+                  },
+                  "remember_me_days": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "maximum": 365,
+                    "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
                   }
                 },
                 "additionalProperties": false,
@@ -5755,6 +5824,29 @@
                     "minimum": 0,
                     "maximum": 10,
                     "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+                  },
+                  "remember_me": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "enum": [
+                          "off"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "optional"
+                        ]
+                      }
+                    ],
+                    "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+                  },
+                  "remember_me_days": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "maximum": 365,
+                    "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
                   }
                 },
                 "additionalProperties": false,
@@ -6070,6 +6162,10 @@
             "type": "string",
             "description": "Same-origin path to return the user to after authentication, instead of the OAuth client redirect. Used by first-party interactive flows (e.g. device-code confirm). Non same-origin values are ignored."
           },
+          "remember_me": {
+            "type": "boolean",
+            "description": "The \"Remember me on this device\" checkbox. Honoured only when the tenant shows one (`login_methods.remember_me: \"optional\"`): `true` keeps the session for `remember_me_days`, `false` ends it when the browser closes."
+          },
           "client_id": {
             "type": "string"
           },
@@ -6375,6 +6471,29 @@
                           "minimum": 0,
                           "maximum": 10,
                           "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+                        },
+                        "remember_me": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "off"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "optional"
+                              ]
+                            }
+                          ],
+                          "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+                        },
+                        "remember_me_days": {
+                          "type": "integer",
+                          "minimum": 1,
+                          "maximum": 365,
+                          "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
                         }
                       },
                       "additionalProperties": false,
@@ -6737,6 +6856,29 @@
                           "minimum": 0,
                           "maximum": 10,
                           "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+                        },
+                        "remember_me": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "off"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "optional"
+                              ]
+                            }
+                          ],
+                          "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+                        },
+                        "remember_me_days": {
+                          "type": "integer",
+                          "minimum": 1,
+                          "maximum": 365,
+                          "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
                         }
                       },
                       "additionalProperties": false,
@@ -7153,6 +7295,29 @@
                           "minimum": 0,
                           "maximum": 10,
                           "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+                        },
+                        "remember_me": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "off"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "optional"
+                              ]
+                            }
+                          ],
+                          "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+                        },
+                        "remember_me_days": {
+                          "type": "integer",
+                          "minimum": 1,
+                          "maximum": 365,
+                          "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
                         }
                       },
                       "additionalProperties": false,
@@ -7369,6 +7534,29 @@
                             "minimum": 0,
                             "maximum": 10,
                             "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+                          },
+                          "remember_me": {
+                            "anyOf": [
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "off"
+                                ]
+                              },
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "optional"
+                                ]
+                              }
+                            ],
+                            "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+                          },
+                          "remember_me_days": {
+                            "type": "integer",
+                            "minimum": 1,
+                            "maximum": 365,
+                            "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
                           }
                         },
                         "additionalProperties": false,
@@ -7678,6 +7866,29 @@
                           "minimum": 0,
                           "maximum": 10,
                           "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+                        },
+                        "remember_me": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "off"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "optional"
+                              ]
+                            }
+                          ],
+                          "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+                        },
+                        "remember_me_days": {
+                          "type": "integer",
+                          "minimum": 1,
+                          "maximum": 365,
+                          "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
                         }
                       },
                       "additionalProperties": false,
@@ -8013,6 +8224,29 @@
                           "minimum": 0,
                           "maximum": 10,
                           "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+                        },
+                        "remember_me": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "off"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "optional"
+                              ]
+                            }
+                          ],
+                          "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+                        },
+                        "remember_me_days": {
+                          "type": "integer",
+                          "minimum": 1,
+                          "maximum": 365,
+                          "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
                         }
                       },
                       "additionalProperties": false,
@@ -9600,6 +9834,7 @@
                     "client",
                     "identifier_first",
                     "remember_last_method",
+                    "remember_me",
                     "methods"
                   ],
                   "properties": {
@@ -9673,6 +9908,10 @@
                     "remember_last_method": {
                       "type": "boolean"
                     },
+                    "remember_me": {
+                      "type": "boolean",
+                      "description": "Render a \"Remember me on this device\" checkbox on the password and email-code forms, and send its value as `remember_me` when posting the credential."
+                    },
                     "identifier": {
                       "type": "string",
                       "description": "What the user typed on the identifier-first screen, when the flow has one. Prefill the email field with it."
@@ -9697,9 +9936,9 @@
         }
       }
     },
-    "/flow/identify": {
+    "/login/identify": {
       "post": {
-        "operationId": "flow/identify",
+        "operationId": "login/identify",
         "summary": "Leave the identifier-first screen",
         "tags": [
           "connection"
@@ -10111,6 +10350,29 @@
                           "minimum": 0,
                           "maximum": 10,
                           "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+                        },
+                        "remember_me": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "off"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "optional"
+                              ]
+                            }
+                          ],
+                          "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+                        },
+                        "remember_me_days": {
+                          "type": "integer",
+                          "minimum": 1,
+                          "maximum": 365,
+                          "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
                         }
                       },
                       "additionalProperties": false,
@@ -10438,6 +10700,29 @@
                           "minimum": 0,
                           "maximum": 10,
                           "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+                        },
+                        "remember_me": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "off"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "optional"
+                              ]
+                            }
+                          ],
+                          "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+                        },
+                        "remember_me_days": {
+                          "type": "integer",
+                          "minimum": 1,
+                          "maximum": 365,
+                          "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
                         }
                       },
                       "additionalProperties": false,
@@ -10730,6 +11015,29 @@
                             "minimum": 0,
                             "maximum": 10,
                             "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+                          },
+                          "remember_me": {
+                            "anyOf": [
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "off"
+                                ]
+                              },
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "optional"
+                                ]
+                              }
+                            ],
+                            "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+                          },
+                          "remember_me_days": {
+                            "type": "integer",
+                            "minimum": 1,
+                            "maximum": 365,
+                            "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
                           }
                         },
                         "additionalProperties": false,
@@ -11047,6 +11355,29 @@
                           "minimum": 0,
                           "maximum": 10,
                           "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+                        },
+                        "remember_me": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "off"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "optional"
+                              ]
+                            }
+                          ],
+                          "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+                        },
+                        "remember_me_days": {
+                          "type": "integer",
+                          "minimum": 1,
+                          "maximum": 365,
+                          "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
                         }
                       },
                       "additionalProperties": false,
@@ -11372,6 +11703,29 @@
                           "minimum": 0,
                           "maximum": 10,
                           "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+                        },
+                        "remember_me": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "off"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "optional"
+                              ]
+                            }
+                          ],
+                          "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+                        },
+                        "remember_me_days": {
+                          "type": "integer",
+                          "minimum": 1,
+                          "maximum": 365,
+                          "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
                         }
                       },
                       "additionalProperties": false,
@@ -11699,6 +12053,29 @@
                           "minimum": 0,
                           "maximum": 10,
                           "description": "How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3."
+                        },
+                        "remember_me": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "off"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "optional"
+                              ]
+                            }
+                          ],
+                          "description": "Show a \"Remember me on this device\" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days."
+                        },
+                        "remember_me_days": {
+                          "type": "integer",
+                          "minimum": 1,
+                          "maximum": 365,
+                          "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
                         }
                       },
                       "additionalProperties": false,
@@ -27383,6 +27760,10 @@
                   "redirect_to": {
                     "type": "string",
                     "description": "Same-origin path to return the user to after authentication, instead of the OAuth client redirect. Used by first-party interactive flows (e.g. device-code confirm). Non same-origin values are ignored."
+                  },
+                  "remember_me": {
+                    "type": "boolean",
+                    "description": "The \"Remember me on this device\" checkbox. Honoured only when the tenant shows one (`login_methods.remember_me: \"optional\"`)."
                   }
                 }
               }
@@ -27462,6 +27843,85 @@
         }
       }
     },
+    "/mfa/challenge/options": {
+      "get": {
+        "summary": "What the second-factor screen should offer",
+        "tags": [
+          "mfa"
+        ],
+        "description": "For a login parked on the hosted challenge screen: which factors the user can answer with, in the order and with the default the login flow chose, and whether recovery codes are an option. Reads the state without consuming it.",
+        "parameters": [
+          {
+            "schema": {
+              "type": "string"
+            },
+            "in": "query",
+            "name": "state",
+            "required": true
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Default Response",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "required": [
+                    "factors",
+                    "recovery"
+                  ],
+                  "properties": {
+                    "factors": {
+                      "type": "array",
+                      "items": {
+                        "anyOf": [
+                          {
+                            "type": "string",
+                            "enum": [
+                              "totp"
+                            ]
+                          },
+                          {
+                            "type": "string",
+                            "enum": [
+                              "webauthn"
+                            ]
+                          }
+                        ]
+                      },
+                      "description": "The ways this user can answer, in the order the screen should offer them. Only factors the user actually has and the policy accepts."
+                    },
+                    "preferred": {
+                      "anyOf": [
+                        {
+                          "type": "string",
+                          "enum": [
+                            "totp"
+                          ]
+                        },
+                        {
+                          "type": "string",
+                          "enum": [
+                            "webauthn"
+                          ]
+                        }
+                      ],
+                      "description": "The one to mark as the default, when there are several."
+                    },
+                    "recovery": {
+                      "type": "boolean",
+                      "description": "Whether to offer the recovery-code way in: the flow allows it and the user has codes."
+                    }
+                  },
+                  "additionalProperties": false
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/mfa/verify": {
       "post": {
         "summary": "Answer an MFA challenge with a TOTP code",
@@ -28116,6 +28576,10 @@
                   },
                   "state": {
                     "type": "string"
+                  },
+                  "remember_me": {
+                    "type": "boolean",
+                    "description": "The \"Remember me on this device\" checkbox. Honoured only when the tenant shows one (`login_methods.remember_me: \"optional\"`)."
                   }
                 }
               }
@@ -30221,6 +30685,10 @@
                     "type": "string",
                     "description": "Same-origin path to return the user to after authentication, instead of the OAuth client redirect. Used by first-party interactive flows (e.g. device-code confirm). Non same-origin values are ignored."
                   },
+                  "remember_me": {
+                    "type": "boolean",
+                    "description": "The \"Remember me on this device\" checkbox. Honoured only when the tenant shows one (`login_methods.remember_me: \"optional\"`): `true` keeps the session for `remember_me_days`, `false` ends it when the browser closes."
+                  },
                   "client_id": {
                     "type": "string"
                   },