@faable/auth-sdk 2.7.79 → 2.7.81

package/dist/FaableAuthApi.d.ts

@@ -81,6 +81,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
             passkey_promotion_max_prompts?: number | undefined;
             remember_me?: "optional" | "off" | undefined;
             remember_me_days?: number | undefined;
+            theme?: "system" | "light" | "dark" | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
         mfa_policy?: {
@@ -810,6 +811,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
                 passkey_promotion_max_prompts?: number | undefined;
                 remember_me?: "optional" | "off" | undefined;
                 remember_me_days?: number | undefined;
+                theme?: "system" | "light" | "dark" | undefined;
             } | undefined;
             mfa_policy?: {
                 mode?: "required" | "optional" | "off" | undefined;
@@ -873,6 +875,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
                 passkey_promotion_max_prompts?: number | undefined;
                 remember_me?: "optional" | "off" | undefined;
                 remember_me_days?: number | undefined;
+                theme?: "system" | "light" | "dark" | undefined;
             } | undefined;
             mfa_policy?: {
                 mode?: "required" | "optional" | "off" | undefined;
@@ -939,6 +942,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
                 passkey_promotion_max_prompts?: number | undefined;
                 remember_me?: "optional" | "off" | undefined;
                 remember_me_days?: number | undefined;
+                theme?: "system" | "light" | "dark" | undefined;
             } | undefined;
             mfa_policy?: {
                 mode?: "required" | "optional" | "off" | undefined;
@@ -1004,6 +1008,7 @@ export declare class FaableAuthApi extends GeneratedFaableAuthApi {
             passkey_promotion_max_prompts?: number | undefined;
             remember_me?: "optional" | "off" | undefined;
             remember_me_days?: number | undefined;
+            theme?: "system" | "light" | "dark" | undefined;
         } | undefined;
         mfa_policy?: {
             mode?: "required" | "optional" | "off" | undefined;

package/dist/api/generated-client.d.ts

@@ -80,6 +80,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion_max_prompts?: number | undefined;
             remember_me?: "optional" | "off" | undefined;
             remember_me_days?: number | undefined;
+            theme?: "system" | "light" | "dark" | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
         mfa_policy?: {
@@ -157,6 +158,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion_max_prompts?: number | undefined;
             remember_me?: "optional" | "off" | undefined;
             remember_me_days?: number | undefined;
+            theme?: "system" | "light" | "dark" | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
         mfa_policy?: {
@@ -254,6 +256,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion_max_prompts?: number | undefined;
             remember_me?: "optional" | "off" | undefined;
             remember_me_days?: number | undefined;
+            theme?: "system" | "light" | "dark" | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
         mfa_policy?: {
@@ -334,6 +337,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion_max_prompts?: number | undefined;
             remember_me?: "optional" | "off" | undefined;
             remember_me_days?: number | undefined;
+            theme?: "system" | "light" | "dark" | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
         mfa_policy?: {
@@ -435,6 +439,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 passkey_promotion_max_prompts?: number | undefined;
                 remember_me?: "optional" | "off" | undefined;
                 remember_me_days?: number | undefined;
+                theme?: "system" | "light" | "dark" | undefined;
             } | undefined;
             login_flow?: string | null | undefined;
             mfa_policy?: {
@@ -447,23 +452,6 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 default?: "email" | "sms" | "whatsapp" | "factor" | undefined;
                 visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
             } | undefined;
-            /**
-             * `GET /user/export` — operationId: `user/export`
-             *
-             * Export users, optionally with their password hashes
-             *
-             * Pages through every user of the tenant, 500 at a time, in the row shape `POST /user/import` takes. With `include_hashes` each row carries its `password_hash` (needs the `read:password_hashes` scope, is audited as `credentials.exported` and notifies its subscribers). Provider access and refresh tokens of linked identities are never exported. Available on every plan.
-             *
-             * @throws {FaableApiError} `invalid_connection` (400) — The connection does not exist, is disabled, or is not of the type this flow needs.
-             * @throws {FaableApiError} `validation_error` (400) — The body, query or path failed schema validation. `details.issues` lists each failing field.
-             * @throws {FaableApiError} `unauthorized` (401) — The request carries no valid credentials.
-             * @throws {FaableApiError} `forbidden` (403) — The credentials are valid but do not allow this operation.
-             * @throws {FaableApiError} `insufficient_scope` (403) — The token lacks a scope this operation requires. `message` names it.
-             * @throws {FaableApiError} `user_suspended` (403) — The user is suspended and cannot sign in or be modified.
-             * @throws {FaableApiError} `account_not_found` (404) — No Auth Account matches the request (domain, header or token).
-             * @throws {FaableApiError} `too_many_requests` (429) — Rate limit exceeded. Honour the `Retry-After` header.
-             * @throws {FaableApiError} `internal_error` (500) — Unexpected server error. Retry later; the request id is logged.
-             */
             default_country_iso?: string | null | undefined;
             webauthn_rp_id?: string | null | undefined;
             logout_confirm_required?: boolean | undefined;
@@ -513,6 +501,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 passkey_promotion_max_prompts?: number | undefined;
                 remember_me?: "optional" | "off" | undefined;
                 remember_me_days?: number | undefined;
+                theme?: "system" | "light" | "dark" | undefined;
             } | undefined;
             login_flow?: string | null | undefined;
             mfa_policy?: {
@@ -525,23 +514,6 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 default?: "email" | "sms" | "whatsapp" | "factor" | undefined;
                 visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
             } | undefined;
-            /**
-             * `GET /user/export` — operationId: `user/export`
-             *
-             * Export users, optionally with their password hashes
-             *
-             * Pages through every user of the tenant, 500 at a time, in the row shape `POST /user/import` takes. With `include_hashes` each row carries its `password_hash` (needs the `read:password_hashes` scope, is audited as `credentials.exported` and notifies its subscribers). Provider access and refresh tokens of linked identities are never exported. Available on every plan.
-             *
-             * @throws {FaableApiError} `invalid_connection` (400) — The connection does not exist, is disabled, or is not of the type this flow needs.
-             * @throws {FaableApiError} `validation_error` (400) — The body, query or path failed schema validation. `details.issues` lists each failing field.
-             * @throws {FaableApiError} `unauthorized` (401) — The request carries no valid credentials.
-             * @throws {FaableApiError} `forbidden` (403) — The credentials are valid but do not allow this operation.
-             * @throws {FaableApiError} `insufficient_scope` (403) — The token lacks a scope this operation requires. `message` names it.
-             * @throws {FaableApiError} `user_suspended` (403) — The user is suspended and cannot sign in or be modified.
-             * @throws {FaableApiError} `account_not_found` (404) — No Auth Account matches the request (domain, header or token).
-             * @throws {FaableApiError} `too_many_requests` (429) — Rate limit exceeded. Honour the `Retry-After` header.
-             * @throws {FaableApiError} `internal_error` (500) — Unexpected server error. Retry later; the request id is logged.
-             */
             default_country_iso?: string | null | undefined;
             webauthn_rp_id?: string | null | undefined;
             logout_confirm_required?: boolean | undefined;
@@ -594,6 +566,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 passkey_promotion_max_prompts?: number | undefined;
                 remember_me?: "optional" | "off" | undefined;
                 remember_me_days?: number | undefined;
+                theme?: "system" | "light" | "dark" | undefined;
             } | undefined;
             login_flow?: string | null | undefined;
             mfa_policy?: {
@@ -606,23 +579,6 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 default?: "email" | "sms" | "whatsapp" | "factor" | undefined;
                 visible?: ("email" | "sms" | "whatsapp" | "factor")[] | undefined;
             } | undefined;
-            /**
-             * `GET /user/export` — operationId: `user/export`
-             *
-             * Export users, optionally with their password hashes
-             *
-             * Pages through every user of the tenant, 500 at a time, in the row shape `POST /user/import` takes. With `include_hashes` each row carries its `password_hash` (needs the `read:password_hashes` scope, is audited as `credentials.exported` and notifies its subscribers). Provider access and refresh tokens of linked identities are never exported. Available on every plan.
-             *
-             * @throws {FaableApiError} `invalid_connection` (400) — The connection does not exist, is disabled, or is not of the type this flow needs.
-             * @throws {FaableApiError} `validation_error` (400) — The body, query or path failed schema validation. `details.issues` lists each failing field.
-             * @throws {FaableApiError} `unauthorized` (401) — The request carries no valid credentials.
-             * @throws {FaableApiError} `forbidden` (403) — The credentials are valid but do not allow this operation.
-             * @throws {FaableApiError} `insufficient_scope` (403) — The token lacks a scope this operation requires. `message` names it.
-             * @throws {FaableApiError} `user_suspended` (403) — The user is suspended and cannot sign in or be modified.
-             * @throws {FaableApiError} `account_not_found` (404) — No Auth Account matches the request (domain, header or token).
-             * @throws {FaableApiError} `too_many_requests` (429) — Rate limit exceeded. Honour the `Retry-After` header.
-             * @throws {FaableApiError} `internal_error` (500) — Unexpected server error. Retry later; the request id is logged.
-             */
             default_country_iso?: string | null | undefined;
             webauthn_rp_id?: string | null | undefined;
             logout_confirm_required?: boolean | undefined;
@@ -847,6 +803,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion_max_prompts?: number | undefined;
             remember_me?: "optional" | "off" | undefined;
             remember_me_days?: number | undefined;
+            theme?: "system" | "light" | "dark" | undefined;
         } | undefined;
         login_flow?: string | null | undefined;
         mfa_policy?: {
@@ -1392,6 +1349,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion_max_prompts?: number | undefined;
             remember_me?: "optional" | "off" | undefined;
             remember_me_days?: number | undefined;
+            theme?: "system" | "light" | "dark" | undefined;
         } | undefined;
         mfa_policy?: {
             mode?: "required" | "optional" | "off" | undefined;
@@ -1471,6 +1429,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion_max_prompts?: number | undefined;
             remember_me?: "optional" | "off" | undefined;
             remember_me_days?: number | undefined;
+            theme?: "system" | "light" | "dark" | undefined;
         } | undefined;
         mfa_policy?: {
             mode?: "required" | "optional" | "off" | undefined;
@@ -1551,6 +1510,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion_max_prompts?: number | undefined;
             remember_me?: "optional" | "off" | undefined;
             remember_me_days?: number | undefined;
+            theme?: "system" | "light" | "dark" | undefined;
         } | undefined;
         mfa_policy?: {
             mode?: "required" | "optional" | "off" | undefined;
@@ -1632,6 +1592,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 passkey_promotion_max_prompts?: number | undefined;
                 remember_me?: "optional" | "off" | undefined;
                 remember_me_days?: number | undefined;
+                theme?: "system" | "light" | "dark" | undefined;
             } | undefined;
             mfa_policy?: {
                 mode?: "required" | "optional" | "off" | undefined;
@@ -1695,6 +1656,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 passkey_promotion_max_prompts?: number | undefined;
                 remember_me?: "optional" | "off" | undefined;
                 remember_me_days?: number | undefined;
+                theme?: "system" | "light" | "dark" | undefined;
             } | undefined;
             mfa_policy?: {
                 mode?: "required" | "optional" | "off" | undefined;
@@ -1761,6 +1723,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
                 passkey_promotion_max_prompts?: number | undefined;
                 remember_me?: "optional" | "off" | undefined;
                 remember_me_days?: number | undefined;
+                theme?: "system" | "light" | "dark" | undefined;
             } | undefined;
             mfa_policy?: {
                 mode?: "required" | "optional" | "off" | undefined;
@@ -1843,6 +1806,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion_max_prompts?: number | undefined;
             remember_me?: "optional" | "off" | undefined;
             remember_me_days?: number | undefined;
+            theme?: "system" | "light" | "dark" | undefined;
         } | undefined;
         mfa_policy?: {
             mode?: "required" | "optional" | "off" | undefined;
@@ -1923,6 +1887,7 @@ export declare abstract class GeneratedFaableAuthApi extends FaableApi {
             passkey_promotion_max_prompts?: number | undefined;
             remember_me?: "optional" | "off" | undefined;
             remember_me_days?: number | undefined;
+            theme?: "system" | "light" | "dark" | undefined;
         } | undefined;
         mfa_policy?: {
             mode?: "required" | "optional" | "off" | undefined;

package/dist/api/types.d.ts

@@ -4696,6 +4696,8 @@ export interface components {
                 remember_me?: "off" | "optional";
                 /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                 remember_me_days?: number;
+                /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                theme?: "system" | "light" | "dark";
             };
             /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
             login_flow?: string | null;
@@ -5013,6 +5015,8 @@ export interface components {
                 remember_me?: "off" | "optional";
                 /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                 remember_me_days?: number;
+                /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                theme?: "system" | "light" | "dark";
             };
             /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
             mfa_policy?: {
@@ -5135,6 +5139,8 @@ export interface components {
                 remember_me?: "off" | "optional";
                 /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                 remember_me_days?: number;
+                /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                theme?: "system" | "light" | "dark";
             } | null;
             mfa_policy?: {
                 /** @description `off` (default) never challenges. `optional` challenges a user who has enrolled a factor, and lets everyone else in. `required` challenges everyone and sends users with no factor through enrolment during login — it never locks anyone out in place. */
@@ -6799,6 +6805,8 @@ export interface components {
                 remember_me?: "off" | "optional";
                 /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                 remember_me_days?: number;
+                /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                theme?: "system" | "light" | "dark";
             } | null;
             mfa_policy?: {
                 /** @description `off` (default) never challenges. `optional` challenges a user who has enrolled a factor, and lets everyone else in. `required` challenges everyone and sends users with no factor through enrolment during login — it never locks anyone out in place. */
@@ -6856,6 +6864,8 @@ export interface components {
             audience?: string;
             /** @description RFC 8707 Resource Indicator. Absolute URI of the target Api, no fragment. Matched against `Api.identifier` in the tenant. */
             resource?: string;
+            /** @description client_credentials only. An access token previously returned by this endpoint that a resource server rejected with 401. If it is the cached token for this client, the cache entry is dropped and a new token is issued; otherwise it has no effect. */
+            invalidate_token?: string;
         } & {
             [key: string]: unknown;
         };
@@ -7171,6 +7181,8 @@ export interface operations {
                             remember_me?: "off" | "optional";
                             /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                             remember_me_days?: number;
+                            /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                            theme?: "system" | "light" | "dark";
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -7524,6 +7536,8 @@ export interface operations {
                             remember_me?: "off" | "optional";
                             /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                             remember_me_days?: number;
+                            /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                            theme?: "system" | "light" | "dark";
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -7765,6 +7779,8 @@ export interface operations {
                             remember_me?: "off" | "optional";
                             /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                             remember_me_days?: number;
+                            /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                            theme?: "system" | "light" | "dark";
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -7962,6 +7978,8 @@ export interface operations {
                         remember_me?: "off" | "optional";
                         /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                         remember_me_days?: number;
+                        /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                        theme?: "system" | "light" | "dark";
                     } | null;
                     mfa_policy?: {
                         /** @description `off` (default) never challenges. `optional` challenges a user who has enrolled a factor, and lets everyone else in. `required` challenges everyone and sends users with no factor through enrolment during login — it never locks anyone out in place. */
@@ -8079,6 +8097,8 @@ export interface operations {
                             remember_me?: "off" | "optional";
                             /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                             remember_me_days?: number;
+                            /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                            theme?: "system" | "light" | "dark";
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -9339,6 +9359,8 @@ export interface operations {
                             remember_me?: "off" | "optional";
                             /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                             remember_me_days?: number;
+                            /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                            theme?: "system" | "light" | "dark";
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -10474,6 +10496,11 @@ export interface operations {
                         identifier?: string;
                         /** @description The method key that was moved first because this browser used it last time (`remember_last_method`). Absent otherwise. */
                         last_used?: string;
+                        /**
+                         * @description The colour theme the screens are forced to, and the visitor's switch hidden: `theme` on this login's /authorize, else the tenant/client `login_methods.theme`. Absent when nothing forces it — the visitor's own choice, or the OS, decides.
+                         * @enum {string}
+                         */
+                        theme?: "light" | "dark";
                         /** @description Already filtered and ordered. Render them in this order; do not re-sort or re-filter client-side. */
                         methods: components["schemas"]["LoginOptionMethod"][];
                     };
@@ -10833,6 +10860,8 @@ export interface operations {
                             remember_me?: "off" | "optional";
                             /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                             remember_me_days?: number;
+                            /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                            theme?: "system" | "light" | "dark";
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -11031,6 +11060,8 @@ export interface operations {
                             remember_me?: "off" | "optional";
                             /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                             remember_me_days?: number;
+                            /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                            theme?: "system" | "light" | "dark";
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -11230,6 +11261,8 @@ export interface operations {
                         remember_me?: "off" | "optional";
                         /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                         remember_me_days?: number;
+                        /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                        theme?: "system" | "light" | "dark";
                     } | null;
                     mfa_policy?: {
                         /** @description `off` (default) never challenges. `optional` challenges a user who has enrolled a factor, and lets everyone else in. `required` challenges everyone and sends users with no factor through enrolment during login — it never locks anyone out in place. */
@@ -11322,6 +11355,8 @@ export interface operations {
                             remember_me?: "off" | "optional";
                             /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                             remember_me_days?: number;
+                            /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                            theme?: "system" | "light" | "dark";
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -11526,6 +11561,8 @@ export interface operations {
                             remember_me?: "off" | "optional";
                             /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                             remember_me_days?: number;
+                            /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                            theme?: "system" | "light" | "dark";
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -11728,6 +11765,8 @@ export interface operations {
                             remember_me?: "off" | "optional";
                             /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
                             remember_me_days?: number;
+                            /** @description Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login. */
+                            theme?: "system" | "light" | "dark";
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -28192,6 +28231,11 @@ export interface operations {
                 link?: boolean;
                 /** @description Comma-separated methods the hosted login screen shows for this login: connection ids or connection names, and `passkey`. Each must be one the client already offers; the screen keeps the order configured for the client. Filters the screen only — it does not restrict which method the credential endpoints accept. Not combinable with `connection`, which skips the screen instead of narrowing it. */
                 login_methods?: string;
+                /**
+                 * @description Force the colour theme of the hosted login screens for this login — for an application whose own pages are only light or only dark. Overrides the tenant's `login_methods.theme` and hides the visitor's theme switch on those screens. Omit it to keep the tenant setting.
+                 * @example dark
+                 */
+                theme?: "light" | "dark";
                 /** @description Preview token from `POST /loginflow/:id/preview-token`. This login runs the DRAFT of that flow, for this browser only; nothing is published. Invalid or expired tokens are ignored. */
                 flow_preview?: string;
                 /** @description Resume the login transaction the hosted screen has parked, instead of starting a new one. Used by the screen itself when the person picks a method: everything that belongs to the Relying Party — `code_challenge`, `state`, `redirect_uri`, `nonce`, `scope`, `audience` — is taken from the parked transaction and CANNOT be overridden by the query. Only `connection` is read from the caller. */
@@ -28614,6 +28658,8 @@ export interface operations {
                 audience?: string;
                 /** @description RFC 8707 Resource Indicator. Absolute URI of the target Api, no fragment. Matched against `Api.identifier` in the tenant. */
                 resource?: string;
+                /** @description client_credentials only. An access token previously returned by this endpoint that a resource server rejected with 401. If it is the cached token for this client, the cache entry is dropped and a new token is issued; otherwise it has no effect. */
+                invalidate_token?: string;
             };
             header?: never;
             path?: never;
@@ -28715,6 +28761,8 @@ export interface operations {
                 audience?: string;
                 /** @description RFC 8707 Resource Indicator. Absolute URI of the target Api, no fragment. Matched against `Api.identifier` in the tenant. */
                 resource?: string;
+                /** @description client_credentials only. An access token previously returned by this endpoint that a resource server rejected with 401. If it is the cached token for this client, the cache entry is dropped and a new token is issued; otherwise it has no effect. */
+                invalidate_token?: string;
             };
             header?: never;
             path?: never;
@@ -28748,6 +28796,8 @@ export interface operations {
                     audience?: string;
                     /** @description RFC 8707 Resource Indicator. Absolute URI of the target Api, no fragment. Matched against `Api.identifier` in the tenant. */
                     resource?: string;
+                    /** @description client_credentials only. An access token previously returned by this endpoint that a resource server rejected with 401. If it is the cached token for this client, the cache entry is dropped and a new token is issued; otherwise it has no effect. */
+                    invalidate_token?: string;
                 } & {
                     [key: string]: unknown;
                 };

package/dist/version.js

@@ -9,13 +9,13 @@
 // login pages could not import the SDK at all. Same pattern as auth-js.
 //
 // The sentinels MUST stay byte-identical to the `from` values in `.releaserc`.
-export const version = "2.7.79";
+export const version = "2.7.81";
 // Short git SHA of the released commit. The version dates a build; this names
 // the exact tree, so a canonical log line or an audit entry leads straight to
 // `git show <sha>`. Deliberately NOT hex: an unreleased build (dev, a local
 // link) cannot be mistaken for a real commit — auth only records values that
 // look like a SHA, and this one never will.
-export const commit = "a0f8317";
+export const commit = "8fa14f2";
 // What this SDK writes in `x-faable-client`. Exported for a consumer that
 // builds a strategy on its own (outside `FaableAuthApi`) and still wants the
 // token request attributed — a bare `authClientCredentials` stamps only what

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/auth-sdk",
-  "version": "2.7.79",
+  "version": "2.7.81",
   "author": "Marc Pomar <marc@faable.com>",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/spec/openapi.json

@@ -3,7 +3,7 @@
   "info": {
     "title": "@faablecloud/auth",
     "description": "Auth Platform made by Faable. Manage Users and Roles",
-    "version": "2.62.2",
+    "version": "2.64.0",
     "license": {
       "name": "private",
       "url": "https://faable.com/docs/platform/privacy-policy"
@@ -319,6 +319,29 @@
                 "minimum": 1,
                 "maximum": 365,
                 "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+              },
+              "theme": {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "enum": [
+                      "system"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "light"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "dark"
+                    ]
+                  }
+                ],
+                "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
               }
             },
             "additionalProperties": false,
@@ -1596,6 +1619,29 @@
                 "minimum": 1,
                 "maximum": 365,
                 "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+              },
+              "theme": {
+                "anyOf": [
+                  {
+                    "type": "string",
+                    "enum": [
+                      "system"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "light"
+                    ]
+                  },
+                  {
+                    "type": "string",
+                    "enum": [
+                      "dark"
+                    ]
+                  }
+                ],
+                "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
               }
             },
             "additionalProperties": false,
@@ -2244,6 +2290,29 @@
                     "minimum": 1,
                     "maximum": 365,
                     "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+                  },
+                  "theme": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "enum": [
+                          "system"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "light"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "dark"
+                        ]
+                      }
+                    ],
+                    "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
                   }
                 },
                 "additionalProperties": false,
@@ -6974,6 +7043,29 @@
                     "minimum": 1,
                     "maximum": 365,
                     "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+                  },
+                  "theme": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "enum": [
+                          "system"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "light"
+                        ]
+                      },
+                      {
+                        "type": "string",
+                        "enum": [
+                          "dark"
+                        ]
+                      }
+                    ],
+                    "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
                   }
                 },
                 "additionalProperties": false,
@@ -7345,6 +7437,10 @@
           "resource": {
             "type": "string",
             "description": "RFC 8707 Resource Indicator. Absolute URI of the target Api, no fragment. Matched against `Api.identifier` in the tenant."
+          },
+          "invalidate_token": {
+            "type": "string",
+            "description": "client_credentials only. An access token previously returned by this endpoint that a resource server rejected with 401. If it is the cached token for this client, the cache entry is dropped and a new token is issued; otherwise it has no effect."
           }
         },
         "additionalProperties": true
@@ -8089,6 +8185,29 @@
                           "minimum": 1,
                           "maximum": 365,
                           "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+                        },
+                        "theme": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "system"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "light"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "dark"
+                              ]
+                            }
+                          ],
+                          "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
                         }
                       },
                       "additionalProperties": false,
@@ -8810,6 +8929,29 @@
                           "minimum": 1,
                           "maximum": 365,
                           "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+                        },
+                        "theme": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "system"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "light"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "dark"
+                              ]
+                            }
+                          ],
+                          "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
                         }
                       },
                       "additionalProperties": false,
@@ -9768,6 +9910,29 @@
                           "minimum": 1,
                           "maximum": 365,
                           "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+                        },
+                        "theme": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "system"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "light"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "dark"
+                              ]
+                            }
+                          ],
+                          "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
                         }
                       },
                       "additionalProperties": false,
@@ -10346,6 +10511,29 @@
                             "minimum": 1,
                             "maximum": 365,
                             "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+                          },
+                          "theme": {
+                            "anyOf": [
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "system"
+                                ]
+                              },
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "light"
+                                ]
+                              },
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "dark"
+                                ]
+                              }
+                            ],
+                            "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
                           }
                         },
                         "additionalProperties": false,
@@ -10879,6 +11067,29 @@
                           "minimum": 1,
                           "maximum": 365,
                           "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+                        },
+                        "theme": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "system"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "light"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "dark"
+                              ]
+                            }
+                          ],
+                          "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
                         }
                       },
                       "additionalProperties": false,
@@ -13798,6 +14009,29 @@
                           "minimum": 1,
                           "maximum": 365,
                           "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+                        },
+                        "theme": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "system"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "light"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "dark"
+                              ]
+                            }
+                          ],
+                          "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
                         }
                       },
                       "additionalProperties": false,
@@ -16742,6 +16976,14 @@
                       "type": "string",
                       "description": "The method key that was moved first because this browser used it last time (`remember_last_method`). Absent otherwise."
                     },
+                    "theme": {
+                      "type": "string",
+                      "enum": [
+                        "light",
+                        "dark"
+                      ],
+                      "description": "The colour theme the screens are forced to, and the visitor's switch hidden: `theme` on this login's /authorize, else the tenant/client `login_methods.theme`. Absent when nothing forces it — the visitor's own choice, or the OS, decides."
+                    },
                     "methods": {
                       "type": "array",
                       "items": {
@@ -17647,6 +17889,29 @@
                           "minimum": 1,
                           "maximum": 365,
                           "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+                        },
+                        "theme": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "system"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "light"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "dark"
+                              ]
+                            }
+                          ],
+                          "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
                         }
                       },
                       "additionalProperties": false,
@@ -18266,6 +18531,29 @@
                           "minimum": 1,
                           "maximum": 365,
                           "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+                        },
+                        "theme": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "system"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "light"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "dark"
+                              ]
+                            }
+                          ],
+                          "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
                         }
                       },
                       "additionalProperties": false,
@@ -18910,6 +19198,29 @@
                             "minimum": 1,
                             "maximum": 365,
                             "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+                          },
+                          "theme": {
+                            "anyOf": [
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "system"
+                                ]
+                              },
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "light"
+                                ]
+                              },
+                              {
+                                "type": "string",
+                                "enum": [
+                                  "dark"
+                                ]
+                              }
+                            ],
+                            "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
                           }
                         },
                         "additionalProperties": false,
@@ -19373,6 +19684,29 @@
                           "minimum": 1,
                           "maximum": 365,
                           "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+                        },
+                        "theme": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "system"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "light"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "dark"
+                              ]
+                            }
+                          ],
+                          "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
                         }
                       },
                       "additionalProperties": false,
@@ -19992,6 +20326,29 @@
                           "minimum": 1,
                           "maximum": 365,
                           "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+                        },
+                        "theme": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "system"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "light"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "dark"
+                              ]
+                            }
+                          ],
+                          "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
                         }
                       },
                       "additionalProperties": false,
@@ -20612,6 +20969,29 @@
                           "minimum": 1,
                           "maximum": 365,
                           "description": "How long a session lasts when the user ticked \"Remember me\". Defaults to 30."
+                        },
+                        "theme": {
+                          "anyOf": [
+                            {
+                              "type": "string",
+                              "enum": [
+                                "system"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "light"
+                              ]
+                            },
+                            {
+                              "type": "string",
+                              "enum": [
+                                "dark"
+                              ]
+                            }
+                          ],
+                          "description": "Colour theme of the hosted login screens. `system` (the default): the visitor's OS decides, and the visitor can switch it from the screen. `light` / `dark`: forced, and the switch is hidden — for applications whose own pages are only one of the two. A `theme` query parameter on `/authorize` overrides this for that login."
                         }
                       },
                       "additionalProperties": false,
@@ -60961,6 +61341,29 @@
             "required": false,
             "description": "Comma-separated methods the hosted login screen shows for this login: connection ids or connection names, and `passkey`. Each must be one the client already offers; the screen keeps the order configured for the client. Filters the screen only — it does not restrict which method the credential endpoints accept. Not combinable with `connection`, which skips the screen instead of narrowing it."
           },
+          {
+            "schema": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "enum": [
+                    "light"
+                  ]
+                },
+                {
+                  "type": "string",
+                  "enum": [
+                    "dark"
+                  ]
+                }
+              ]
+            },
+            "example": "dark",
+            "in": "query",
+            "name": "theme",
+            "required": false,
+            "description": "Force the colour theme of the hosted login screens for this login — for an application whose own pages are only light or only dark. Overrides the tenant's `login_methods.theme` and hides the visitor's theme switch on those screens. Omit it to keep the tenant setting."
+          },
           {
             "schema": {
               "type": "string"
@@ -61990,6 +62393,15 @@
             "name": "resource",
             "required": false,
             "description": "RFC 8707 Resource Indicator. Absolute URI of the target Api, no fragment. Matched against `Api.identifier` in the tenant."
+          },
+          {
+            "schema": {
+              "type": "string"
+            },
+            "in": "query",
+            "name": "invalidate_token",
+            "required": false,
+            "description": "client_credentials only. An access token previously returned by this endpoint that a resource server rejected with 401. If it is the cached token for this client, the cache entry is dropped and a new token is issued; otherwise it has no effect."
           }
         ],
         "responses": {
@@ -62259,6 +62671,10 @@
                   "resource": {
                     "type": "string",
                     "description": "RFC 8707 Resource Indicator. Absolute URI of the target Api, no fragment. Matched against `Api.identifier` in the tenant."
+                  },
+                  "invalidate_token": {
+                    "type": "string",
+                    "description": "client_credentials only. An access token previously returned by this endpoint that a resource server rejected with 401. If it is the cached token for this client, the cache entry is dropped and a new token is issued; otherwise it has no effect."
                   }
                 },
                 "additionalProperties": true
@@ -62472,6 +62888,15 @@
             "name": "resource",
             "required": false,
             "description": "RFC 8707 Resource Indicator. Absolute URI of the target Api, no fragment. Matched against `Api.identifier` in the tenant."
+          },
+          {
+            "schema": {
+              "type": "string"
+            },
+            "in": "query",
+            "name": "invalidate_token",
+            "required": false,
+            "description": "client_credentials only. An access token previously returned by this endpoint that a resource server rejected with 401. If it is the cached token for this client, the cache entry is dropped and a new token is issued; otherwise it has no effect."
           }
         ],
         "responses": {