@logto/api 1.37.0 → 1.38.0

package/lib/generated-types/management.d.ts

@@ -405,6 +405,30 @@ export interface paths {
         patch: operations["UpdateAdminConsoleConfig"];
         trace?: never;
     };
+    "/api/configs/oidc/session": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get OIDC session config
+         * @description Get the OIDC session configuration for the tenant.
+         */
+        get: operations["GetOidcSessionConfig"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Update OIDC session config
+         * @description Update the OIDC session configuration for the tenant. This method performs a partial update. If the configuration does not exist, it will be created.
+         */
+        patch: operations["UpdateOidcSessionConfig"];
+        trace?: never;
+    };
     "/api/configs/oidc/{keyType}": {
         parameters: {
             query?: never;
@@ -942,7 +966,7 @@ export interface paths {
         };
         /**
          * Get user logto config
-         * @description Retrieve the exposed portion of a user's logto config. This endpoint currently includes only the MFA skip state.
+         * @description Retrieve the exposed portion of a user's logto config. Includes MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in states (skipped).
          */
         get: operations["ListUserLogtoConfigs"];
         put?: never;
@@ -952,7 +976,7 @@ export interface paths {
         head?: never;
         /**
          * Update user logto config
-         * @description Update the exposed portion of a user's logto config. This endpoint currently allows updating only the MFA skip state.
+         * @description Update the exposed portion of a user's logto config. Supports updating MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in states (skipped). All fields are optional — only provided fields will be updated.
          */
         patch: operations["UpdateUserLogtoConfigs"];
         trace?: never;
@@ -1203,6 +1227,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/users/{userId}/grants": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get user active grants
+         * @description Retrieve all non-expired grants of the user. Optionally filter by application type via `appType`; when omitted, grants from all application types are returned.
+         */
+        get: operations["ListUserGrants"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/users/{userId}/grants/{grantId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Revoke a user grant
+         * @description Revoke a specific grant and its associated token chain by grant ID. Also removes the matching session authorization entry for this grant from the related active session. The grant must belong to the user.
+         */
+        delete: operations["DeleteUserGrant"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/users/{userId}/mfa-verifications": {
         parameters: {
             query?: never;
@@ -1359,6 +1423,50 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/users/{userId}/sessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get user active sessions
+         * @description Retrieve all non-expired sessions for the user, including session metadata and interaction details when available.
+         */
+        get: operations["ListUserSessions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/users/{userId}/sessions/{sessionId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get user active session
+         * @description Retrieve a non-expired session for the user by session ID, including session metadata and interaction details when available.
+         */
+        get: operations["GetUserSession"];
+        put?: never;
+        post?: never;
+        /**
+         * Revoke a user session
+         * @description Revoke a specific user session by its ID, optionally revoking associated target grants and tokens.
+         */
+        delete: operations["DeleteUserSession"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/logs": {
         parameters: {
             query?: never;
@@ -3685,6 +3793,10 @@ export interface components {
         "sessionId-root": string;
         /** @description The unique identifier of the session. */
         sessionId: string;
+        /** @description The unique identifier of the grant. */
+        "grantId-root": string;
+        /** @description The unique identifier of the grant. */
+        grantId: string;
         /** @description The ID of the SAML application. */
         "samlId-root": string;
     };
@@ -3748,6 +3860,8 @@ export interface operations {
                             alwaysIssueRefreshToken?: boolean;
                             rotateRefreshToken?: boolean;
                             allowTokenExchange?: boolean;
+                            isDeviceFlow?: boolean;
+                            maxAllowedGrants?: number;
                         };
                         protectedAppMetadata: {
                             host: string;
@@ -3840,6 +3954,8 @@ export interface operations {
                         alwaysIssueRefreshToken?: boolean;
                         rotateRefreshToken?: boolean;
                         allowTokenExchange?: boolean;
+                        isDeviceFlow?: boolean;
+                        maxAllowedGrants?: number;
                     };
                     /** @description arbitrary */
                     customData?: Record<string, never>;
@@ -3886,6 +4002,8 @@ export interface operations {
                             alwaysIssueRefreshToken?: boolean;
                             rotateRefreshToken?: boolean;
                             allowTokenExchange?: boolean;
+                            isDeviceFlow?: boolean;
+                            maxAllowedGrants?: number;
                         };
                         protectedAppMetadata: {
                             host: string;
@@ -4004,6 +4122,8 @@ export interface operations {
                             alwaysIssueRefreshToken?: boolean;
                             rotateRefreshToken?: boolean;
                             allowTokenExchange?: boolean;
+                            isDeviceFlow?: boolean;
+                            maxAllowedGrants?: number;
                         };
                         protectedAppMetadata: {
                             host: string;
@@ -4161,6 +4281,8 @@ export interface operations {
                         alwaysIssueRefreshToken?: boolean;
                         rotateRefreshToken?: boolean;
                         allowTokenExchange?: boolean;
+                        isDeviceFlow?: boolean;
+                        maxAllowedGrants?: number;
                     };
                     /** @description arbitrary */
                     customData?: Record<string, never>;
@@ -4208,6 +4330,8 @@ export interface operations {
                             alwaysIssueRefreshToken?: boolean;
                             rotateRefreshToken?: boolean;
                             allowTokenExchange?: boolean;
+                            isDeviceFlow?: boolean;
+                            maxAllowedGrants?: number;
                         };
                         protectedAppMetadata: {
                             host: string;
@@ -4946,6 +5070,8 @@ export interface operations {
                             alwaysIssueRefreshToken?: boolean;
                             rotateRefreshToken?: boolean;
                             allowTokenExchange?: boolean;
+                            isDeviceFlow?: boolean;
+                            maxAllowedGrants?: number;
                         };
                         protectedAppMetadata: {
                             host: string;
@@ -6118,6 +6244,91 @@ export interface operations {
             };
         };
     };
+    GetOidcSessionConfig: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The OIDC session configuration. Returns empty object if the configuration does not exist. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        ttl: number;
+                    };
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    UpdateOidcSessionConfig: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    ttl?: number;
+                };
+            };
+        };
+        responses: {
+            /** @description The updated OIDC session configuration. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        ttl: number;
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     GetOidcKeys: {
         parameters: {
             query?: never;
@@ -6440,6 +6651,30 @@ export interface operations {
                                         type: string;
                                         value: string;
                                     };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaEmailVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "email" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaPhoneVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "phone" */
+                                        type: string;
+                                        value: string;
+                                    };
                                 } | {
                                     id: string;
                                     connectorId: string;
@@ -6490,7 +6725,7 @@ export interface operations {
                                     id: string;
                                     verified: boolean;
                                     registrationRpId?: string;
-                                    /** Format: "SignInWebAuthn" */
+                                    /** Format: "SignInPasskey" */
                                     type: string;
                                     userId?: string;
                                 } | {
@@ -6544,6 +6779,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -6625,6 +6862,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -6863,6 +7102,30 @@ export interface operations {
                                         type: string;
                                         value: string;
                                     };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaEmailVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "email" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaPhoneVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "phone" */
+                                        type: string;
+                                        value: string;
+                                    };
                                 } | {
                                     id: string;
                                     connectorId: string;
@@ -6913,7 +7176,7 @@ export interface operations {
                                     id: string;
                                     verified: boolean;
                                     registrationRpId?: string;
-                                    /** Format: "SignInWebAuthn" */
+                                    /** Format: "SignInPasskey" */
                                     type: string;
                                     userId?: string;
                                 } | {
@@ -6967,6 +7230,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -7048,6 +7313,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -7231,6 +7498,30 @@ export interface operations {
                                         type: string;
                                         value: string;
                                     };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaEmailVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "email" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaPhoneVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "phone" */
+                                        type: string;
+                                        value: string;
+                                    };
                                 } | {
                                     id: string;
                                     connectorId: string;
@@ -7281,7 +7572,7 @@ export interface operations {
                                     id: string;
                                     verified: boolean;
                                     registrationRpId?: string;
-                                    /** Format: "SignInWebAuthn" */
+                                    /** Format: "SignInPasskey" */
                                     type: string;
                                     userId?: string;
                                 } | {
@@ -7335,6 +7626,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -7416,6 +7709,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -7696,6 +7991,30 @@ export interface operations {
                                         type: string;
                                         value: string;
                                     };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaEmailVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "email" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaPhoneVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "phone" */
+                                        type: string;
+                                        value: string;
+                                    };
                                 } | {
                                     id: string;
                                     connectorId: string;
@@ -7746,7 +8065,7 @@ export interface operations {
                                     id: string;
                                     verified: boolean;
                                     registrationRpId?: string;
-                                    /** Format: "SignInWebAuthn" */
+                                    /** Format: "SignInPasskey" */
                                     type: string;
                                     userId?: string;
                                 } | {
@@ -7800,6 +8119,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -7881,6 +8202,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -8108,12 +8431,36 @@ export interface operations {
                                         };
                                     } | {
                                         id: string;
-                                        connectorId: string;
-                                        /** Format: "Social" */
+                                        /** @enum {string} */
+                                        templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                        verified: boolean;
+                                        /** Format: "MfaEmailVerificationCode" */
                                         type: string;
-                                        socialUserInfo?: {
-                                            id: string;
-                                            email?: string;
+                                        identifier: {
+                                            /** Format: "email" */
+                                            type: string;
+                                            value: string;
+                                        };
+                                    } | {
+                                        id: string;
+                                        /** @enum {string} */
+                                        templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                        verified: boolean;
+                                        /** Format: "MfaPhoneVerificationCode" */
+                                        type: string;
+                                        identifier: {
+                                            /** Format: "phone" */
+                                            type: string;
+                                            value: string;
+                                        };
+                                    } | {
+                                        id: string;
+                                        connectorId: string;
+                                        /** Format: "Social" */
+                                        type: string;
+                                        socialUserInfo?: {
+                                            id: string;
+                                            email?: string;
                                             phone?: string;
                                             name?: string;
                                             avatar?: string;
@@ -8156,7 +8503,7 @@ export interface operations {
                                         id: string;
                                         verified: boolean;
                                         registrationRpId?: string;
-                                        /** Format: "SignInWebAuthn" */
+                                        /** Format: "SignInPasskey" */
                                         type: string;
                                         userId?: string;
                                     } | {
@@ -8210,6 +8557,8 @@ export interface operations {
                                         alwaysIssueRefreshToken?: boolean;
                                         rotateRefreshToken?: boolean;
                                         allowTokenExchange?: boolean;
+                                        isDeviceFlow?: boolean;
+                                        maxAllowedGrants?: number;
                                     };
                                     protectedAppMetadata?: {
                                         host: string;
@@ -8295,6 +8644,8 @@ export interface operations {
                                         alwaysIssueRefreshToken?: boolean;
                                         rotateRefreshToken?: boolean;
                                         allowTokenExchange?: boolean;
+                                        isDeviceFlow?: boolean;
+                                        maxAllowedGrants?: number;
                                     };
                                     protectedAppMetadata?: {
                                         host: string;
@@ -8527,6 +8878,30 @@ export interface operations {
                                     type: string;
                                     value: string;
                                 };
+                            } | {
+                                id: string;
+                                /** @enum {string} */
+                                templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                verified: boolean;
+                                /** Format: "MfaEmailVerificationCode" */
+                                type: string;
+                                identifier: {
+                                    /** Format: "email" */
+                                    type: string;
+                                    value: string;
+                                };
+                            } | {
+                                id: string;
+                                /** @enum {string} */
+                                templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                verified: boolean;
+                                /** Format: "MfaPhoneVerificationCode" */
+                                type: string;
+                                identifier: {
+                                    /** Format: "phone" */
+                                    type: string;
+                                    value: string;
+                                };
                             } | {
                                 id: string;
                                 connectorId: string;
@@ -8577,7 +8952,7 @@ export interface operations {
                                 id: string;
                                 verified: boolean;
                                 registrationRpId?: string;
-                                /** Format: "SignInWebAuthn" */
+                                /** Format: "SignInPasskey" */
                                 type: string;
                                 userId?: string;
                             } | {
@@ -8631,6 +9006,8 @@ export interface operations {
                                 alwaysIssueRefreshToken?: boolean;
                                 rotateRefreshToken?: boolean;
                                 allowTokenExchange?: boolean;
+                                isDeviceFlow?: boolean;
+                                maxAllowedGrants?: number;
                             };
                             protectedAppMetadata?: {
                                 host: string;
@@ -8708,6 +9085,8 @@ export interface operations {
                                 alwaysIssueRefreshToken?: boolean;
                                 rotateRefreshToken?: boolean;
                                 allowTokenExchange?: boolean;
+                                isDeviceFlow?: boolean;
+                                maxAllowedGrants?: number;
                             };
                             protectedAppMetadata?: {
                                 host: string;
@@ -10639,7 +11018,7 @@ export interface operations {
                         languageInfo: {
                             autoDetect: boolean;
                             /** @enum {string} */
-                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                         };
                         termsOfUseUrl: string | null;
                         privacyPolicyUrl: string | null;
@@ -10716,7 +11095,7 @@ export interface operations {
                         mfa: {
                             factors: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
                             /** @enum {string} */
-                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt";
+                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt" | "PromptAtSignInAndSignUpMandatory" | "PromptOnlyAtSignInMandatory";
                             /** @enum {string} */
                             organizationRequiredMfaPolicy?: "NoPrompt" | "Mandatory";
                         };
@@ -10819,7 +11198,7 @@ export interface operations {
                     languageInfo?: {
                         autoDetect: boolean;
                         /** @enum {string} */
-                        fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                        fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                     };
                     /** @enum {string} */
                     agreeToTermsPolicy?: "Automatic" | "ManualRegistrationOnly" | "Manual";
@@ -10893,10 +11272,14 @@ export interface operations {
                     mfa?: {
                         factors: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
                         /** @enum {string} */
-                        policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt";
+                        policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt" | "PromptAtSignInAndSignUpMandatory" | "PromptOnlyAtSignInMandatory";
                         /** @enum {string} */
                         organizationRequiredMfaPolicy?: "NoPrompt" | "Mandatory";
                     };
+                    /** @description Adaptive MFA settings. Only effective when developer features are enabled. */
+                    adaptiveMfa?: {
+                        enabled?: boolean;
+                    };
                     singleSignOnEnabled?: boolean;
                     captchaPolicy?: {
                         enabled?: boolean;
@@ -10930,8 +11313,6 @@ export interface operations {
                     supportWebsiteUrl?: (string | null) | string;
                     /** @description The fallback URL to redirect users when the sign-in session does not exist or unknown. Client should initiate a new authentication flow after the redirection. */
                     unknownSessionRedirectUrl?: (string | null) | string;
-                    /** @description Adaptive MFA settings. Only effective when developer features are enabled. */
-                    adaptiveMfa?: unknown;
                 };
             };
         };
@@ -10966,7 +11347,7 @@ export interface operations {
                         languageInfo: {
                             autoDetect: boolean;
                             /** @enum {string} */
-                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                         };
                         termsOfUseUrl: string | null;
                         privacyPolicyUrl: string | null;
@@ -11033,7 +11414,7 @@ export interface operations {
                         mfa: {
                             factors: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
                             /** @enum {string} */
-                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt";
+                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt" | "PromptAtSignInAndSignUpMandatory" | "PromptOnlyAtSignInMandatory";
                             /** @enum {string} */
                             organizationRequiredMfaPolicy?: "NoPrompt" | "Mandatory";
                         };
@@ -11226,6 +11607,8 @@ export interface operations {
             query?: {
                 /** @description If it's provided with a truthy value (`true`, `1`, `yes`), each user in the response will include a `ssoIdentities` property containing a list of SSO identities associated with the user. */
                 includeSsoIdentities?: string;
+                /** @description If it's provided with a truthy value (`true`, `1`, `yes`), the response will include the `passwordDigest` and `passwordAlgorithm` fields. These fields are omitted by default for security reasons. */
+                includePasswordHash?: string;
             };
             header?: never;
             path: {
@@ -11298,6 +11681,13 @@ export interface operations {
                             updatedAt: number;
                             ssoConnectorId: string;
                         }[];
+                        /** @description The hashed password of the user. Only present when `includePasswordHash` is provided with a truthy value. `null` if the user has no password set. */
+                        passwordDigest?: string | null;
+                        /**
+                         * @description The algorithm used to hash the password. Only present when `includePasswordHash` is provided with a truthy value. `null` if the user has no password set.
+                         * @enum {string|null}
+                         */
+                        passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy" | null;
                     };
                 };
             };
@@ -11491,6 +11881,9 @@ export interface operations {
                             updatedAt: number;
                             ssoConnectorId: string;
                         }[];
+                        passwordDigest?: string | null;
+                        /** @enum {string|null} */
+                        passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy" | null;
                     };
                 };
             };
@@ -11645,7 +12038,7 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description Returns the exposed user logto config fields. Currently, only the MFA skip state is available. */
+            /** @description Returns the exposed user logto config fields, including MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in states (skipped). */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -11653,6 +12046,7 @@ export interface operations {
                 content: {
                     "application/json": {
                         mfa: {
+                            enabled?: boolean;
                             skipped: boolean;
                             skipMfaOnSignIn: boolean;
                         };
@@ -11705,13 +12099,18 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    mfa: {
+                    mfa?: {
+                        /** @description Set whether MFA is enabled for the user. */
+                        enabled?: boolean;
                         /** @description Set whether the user is marked as having skipped MFA binding. */
-                        skipped: boolean;
-                        skipMfaOnSignIn: boolean;
+                        skipped?: boolean;
+                        additionalBindingSuggestionSkipped?: boolean;
+                        /** @description Set whether the user has opted to skip MFA verification on sign-in. This is ignored when the MFA policy is mandatory. */
+                        skipMfaOnSignIn?: boolean;
                     };
-                    passkeySignIn: {
-                        skipped: boolean;
+                    passkeySignIn?: {
+                        /** @description Set whether the user has persistently skipped binding a passkey for sign-in. */
+                        skipped?: boolean;
                     };
                 };
             };
@@ -11725,6 +12124,7 @@ export interface operations {
                 content: {
                     "application/json": {
                         mfa: {
+                            enabled?: boolean;
                             skipped: boolean;
                             skipMfaOnSignIn: boolean;
                         };
@@ -11941,6 +12341,9 @@ export interface operations {
                             updatedAt: number;
                             ssoConnectorId: string;
                         }[];
+                        passwordDigest?: string | null;
+                        /** @enum {string|null} */
+                        passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy" | null;
                     }[];
                 };
             };
@@ -11994,10 +12397,10 @@ export interface operations {
                     username?: string;
                     /** @description Plain text password for the user. */
                     password?: string;
-                    /** @description In case you already have the password digests and not the passwords, you can use them for the newly created user via this property. The value should be generated with one of the supported algorithms. The algorithm can be specified using the `passwordAlgorithm` property. */
+                    /** @description In case you already have the password digests and not the passwords, you can use them for the newly created user via this property. The algorithm can be specified using the `passwordAlgorithm` property. For `Legacy`, pass a JSON string in the format `[algorithm, args, encryptedPassword]`, where `args` is a string array that MUST contain an `@` placeholder, which will be replaced by the plain text password at runtime. For PBKDF2 under `Legacy`, `args` is expected to be in the order `[salt, iterations, keylen, digest, '@']`. The salt supports a plain string or a `hex:`-prefixed hex string (for binary salt bytes). */
                     passwordDigest?: string;
                     /**
-                     * @description The hash algorithm used for the password. It should be one of the supported algorithms: argon2, md5, sha1, sha256. Should the encryption algorithm differ from argon2, it will automatically be upgraded to argon2 upon the user's next sign-in.
+                     * @description The hash algorithm used for the password. It should be one of the supported algorithms, including `Legacy` for custom legacy expressions. Should the encryption algorithm differ from `Argon2i`, it will automatically be upgraded to `Argon2i` upon the user's next sign-in.
                      * @enum {string}
                      */
                     passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy";
@@ -12091,6 +12494,9 @@ export interface operations {
                             updatedAt: number;
                             ssoConnectorId: string;
                         }[];
+                        passwordDigest?: string | null;
+                        /** @enum {string|null} */
+                        passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy" | null;
                     };
                 };
             };
@@ -12211,6 +12617,9 @@ export interface operations {
                             updatedAt: number;
                             ssoConnectorId: string;
                         }[];
+                        passwordDigest?: string | null;
+                        /** @enum {string|null} */
+                        passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy" | null;
                     };
                 };
             };
@@ -12440,6 +12849,9 @@ export interface operations {
                             updatedAt: number;
                             ssoConnectorId: string;
                         }[];
+                        passwordDigest?: string | null;
+                        /** @enum {string|null} */
+                        passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy" | null;
                     };
                 };
             };
@@ -13165,6 +13577,132 @@ export interface operations {
             };
         };
     };
+    ListUserGrants: {
+        parameters: {
+            query?: {
+                /** @description Application type filter. Use 'thirdParty' to list third-party app grants only, or 'firstParty' to list first-party app grants only. If omitted, grants from all applications are returned. */
+                appType?: "firstParty" | "thirdParty";
+            };
+            header?: never;
+            path: {
+                /** @description The unique identifier of the user. */
+                userId: components["parameters"]["userId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Return non-expired grants of the user. Results are filtered by app type when `appType` is provided. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        grants: {
+                            id: string;
+                            payload: {
+                                exp: number;
+                                iat: number;
+                                jti: string;
+                                /** Format: "Grant" */
+                                kind: string;
+                                clientId: string;
+                                accountId: string;
+                            };
+                            expiresAt: number;
+                        }[];
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Internal Server Error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    DeleteUserGrant: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the user. */
+                userId: components["parameters"]["userId"];
+                /** @description The unique identifier of the grant. */
+                grantId: components["parameters"]["grantId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Grant revoked successfully. If the grant already expired, this endpoint returns success without token-chain changes. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Grant not found. This can occur if the grant ID is invalid, or the grant does not belong to the user. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Internal Server Error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     ListUserMfaVerifications: {
         parameters: {
             query?: never;
@@ -13937,6 +14475,504 @@ export interface operations {
             };
         };
     };
+    ListUserSessions: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the user. */
+                userId: components["parameters"]["userId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Return a list of non-expired sessions of the user. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        sessions: {
+                            payload: {
+                                exp: number;
+                                iat: number;
+                                jti: string;
+                                uid: string;
+                                /** Format: "Session" */
+                                kind: string;
+                                loginTs: number;
+                                accountId: string;
+                                authorizations?: {
+                                    [key: string]: {
+                                        sid?: string;
+                                        grantId?: string;
+                                        persistsLogout?: boolean;
+                                    };
+                                };
+                            };
+                            lastSubmission: {
+                                /** @enum {string} */
+                                interactionEvent: "SignIn" | "Register" | "ForgotPassword";
+                                userId: string;
+                                verificationRecords: ({
+                                    id: string;
+                                    /** Format: "Password" */
+                                    type: string;
+                                    identifier: {
+                                        type: ("username" | "email" | "phone") | "userId";
+                                        value: string;
+                                    };
+                                    verified: boolean;
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "EmailVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "email" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "PhoneVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "phone" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaEmailVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "email" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaPhoneVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "phone" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    connectorId: string;
+                                    /** Format: "Social" */
+                                    type: string;
+                                    socialUserInfo?: {
+                                        id: string;
+                                        email?: string;
+                                        phone?: string;
+                                        name?: string;
+                                        avatar?: string;
+                                        rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
+                                    };
+                                } | {
+                                    id: string;
+                                    connectorId: string;
+                                    /** Format: "EnterpriseSso" */
+                                    type: string;
+                                    enterpriseSsoUserInfo?: {
+                                        id: string;
+                                        email?: string;
+                                        phone?: string;
+                                        name?: string;
+                                        avatar?: string;
+                                        rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
+                                    };
+                                    issuer?: string;
+                                } | {
+                                    id: string;
+                                    /** Format: "Totp" */
+                                    type: string;
+                                    userId: string;
+                                    verified: boolean;
+                                } | {
+                                    id: string;
+                                    /** Format: "BackupCode" */
+                                    type: string;
+                                    userId: string;
+                                    code?: string;
+                                } | {
+                                    id: string;
+                                    verified: boolean;
+                                    registrationRpId?: string;
+                                    /** Format: "WebAuthn" */
+                                    type: string;
+                                    userId: string;
+                                } | {
+                                    id: string;
+                                    verified: boolean;
+                                    registrationRpId?: string;
+                                    /** Format: "SignInPasskey" */
+                                    type: string;
+                                    userId?: string;
+                                } | {
+                                    id: string;
+                                    /** Format: "OneTimeToken" */
+                                    type: string;
+                                    verified: boolean;
+                                    identifier: {
+                                        /** Format: "email" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                    oneTimeTokenContext?: {
+                                        jitOrganizationIds?: string[];
+                                    };
+                                } | {
+                                    id: string;
+                                    /** Format: "NewPasswordIdentity" */
+                                    type: string;
+                                    identifier: {
+                                        /** @enum {string} */
+                                        type: "username" | "email" | "phone";
+                                        value: string;
+                                    };
+                                })[];
+                                signInContext?: {
+                                    [key: string]: string;
+                                };
+                            } | null;
+                            clientId: string | null;
+                            accountId: string | null;
+                            expiresAt: number;
+                        }[];
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Internal Server Error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    GetUserSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the user. */
+                userId: components["parameters"]["userId"];
+                /** @description The unique identifier of the session. */
+                sessionId: components["parameters"]["sessionId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Return a non-expired session of the user. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        payload: {
+                            exp: number;
+                            iat: number;
+                            jti: string;
+                            uid: string;
+                            /** Format: "Session" */
+                            kind: string;
+                            loginTs: number;
+                            accountId: string;
+                            authorizations?: {
+                                [key: string]: {
+                                    sid?: string;
+                                    grantId?: string;
+                                    persistsLogout?: boolean;
+                                };
+                            };
+                        };
+                        lastSubmission: {
+                            /** @enum {string} */
+                            interactionEvent: "SignIn" | "Register" | "ForgotPassword";
+                            userId: string;
+                            verificationRecords: ({
+                                id: string;
+                                /** Format: "Password" */
+                                type: string;
+                                identifier: {
+                                    type: ("username" | "email" | "phone") | "userId";
+                                    value: string;
+                                };
+                                verified: boolean;
+                            } | {
+                                id: string;
+                                /** @enum {string} */
+                                templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                verified: boolean;
+                                /** Format: "EmailVerificationCode" */
+                                type: string;
+                                identifier: {
+                                    /** Format: "email" */
+                                    type: string;
+                                    value: string;
+                                };
+                            } | {
+                                id: string;
+                                /** @enum {string} */
+                                templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                verified: boolean;
+                                /** Format: "PhoneVerificationCode" */
+                                type: string;
+                                identifier: {
+                                    /** Format: "phone" */
+                                    type: string;
+                                    value: string;
+                                };
+                            } | {
+                                id: string;
+                                /** @enum {string} */
+                                templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                verified: boolean;
+                                /** Format: "MfaEmailVerificationCode" */
+                                type: string;
+                                identifier: {
+                                    /** Format: "email" */
+                                    type: string;
+                                    value: string;
+                                };
+                            } | {
+                                id: string;
+                                /** @enum {string} */
+                                templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                verified: boolean;
+                                /** Format: "MfaPhoneVerificationCode" */
+                                type: string;
+                                identifier: {
+                                    /** Format: "phone" */
+                                    type: string;
+                                    value: string;
+                                };
+                            } | {
+                                id: string;
+                                connectorId: string;
+                                /** Format: "Social" */
+                                type: string;
+                                socialUserInfo?: {
+                                    id: string;
+                                    email?: string;
+                                    phone?: string;
+                                    name?: string;
+                                    avatar?: string;
+                                    rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
+                                };
+                            } | {
+                                id: string;
+                                connectorId: string;
+                                /** Format: "EnterpriseSso" */
+                                type: string;
+                                enterpriseSsoUserInfo?: {
+                                    id: string;
+                                    email?: string;
+                                    phone?: string;
+                                    name?: string;
+                                    avatar?: string;
+                                    rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
+                                };
+                                issuer?: string;
+                            } | {
+                                id: string;
+                                /** Format: "Totp" */
+                                type: string;
+                                userId: string;
+                                verified: boolean;
+                            } | {
+                                id: string;
+                                /** Format: "BackupCode" */
+                                type: string;
+                                userId: string;
+                                code?: string;
+                            } | {
+                                id: string;
+                                verified: boolean;
+                                registrationRpId?: string;
+                                /** Format: "WebAuthn" */
+                                type: string;
+                                userId: string;
+                            } | {
+                                id: string;
+                                verified: boolean;
+                                registrationRpId?: string;
+                                /** Format: "SignInPasskey" */
+                                type: string;
+                                userId?: string;
+                            } | {
+                                id: string;
+                                /** Format: "OneTimeToken" */
+                                type: string;
+                                verified: boolean;
+                                identifier: {
+                                    /** Format: "email" */
+                                    type: string;
+                                    value: string;
+                                };
+                                oneTimeTokenContext?: {
+                                    jitOrganizationIds?: string[];
+                                };
+                            } | {
+                                id: string;
+                                /** Format: "NewPasswordIdentity" */
+                                type: string;
+                                identifier: {
+                                    /** @enum {string} */
+                                    type: "username" | "email" | "phone";
+                                    value: string;
+                                };
+                            })[];
+                            signInContext?: {
+                                [key: string]: string;
+                            };
+                        } | null;
+                        clientId: string | null;
+                        accountId: string | null;
+                        expiresAt: number;
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Internal Server Error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    DeleteUserSession: {
+        parameters: {
+            query?: {
+                /** @description Optional target for revoking associated grants and tokens. 'all' revokes grants for every application authorized by this session. 'firstParty' revokes only first-party app grants; third-party app grants remain active. If omitted, grants remain active when the session authorizations include offline_access; otherwise they are revoked. */
+                revokeGrantsTarget?: "all" | "firstParty";
+            };
+            header?: never;
+            path: {
+                /** @description The unique identifier of the user. */
+                userId: components["parameters"]["userId"];
+                /** @description The unique identifier of the session. */
+                sessionId: components["parameters"]["sessionId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Session revoked successfully. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Internal Server Error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     ListLogs: {
         parameters: {
             query?: {
@@ -14755,6 +15791,8 @@ export interface operations {
                             alwaysIssueRefreshToken?: boolean;
                             rotateRefreshToken?: boolean;
                             allowTokenExchange?: boolean;
+                            isDeviceFlow?: boolean;
+                            maxAllowedGrants?: number;
                         };
                         protectedAppMetadata: {
                             host: string;
@@ -15335,7 +16373,7 @@ export interface operations {
             query?: never;
             header?: never;
             path: {
-                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
             };
             cookie?: never;
         };
@@ -15390,7 +16428,7 @@ export interface operations {
             query?: never;
             header?: never;
             path: {
-                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
             };
             cookie?: never;
         };
@@ -15453,7 +16491,7 @@ export interface operations {
             query?: never;
             header?: never;
             path: {
-                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
             };
             cookie?: never;
         };
@@ -19139,6 +20177,8 @@ export interface operations {
                             alwaysIssueRefreshToken?: boolean;
                             rotateRefreshToken?: boolean;
                             allowTokenExchange?: boolean;
+                            isDeviceFlow?: boolean;
+                            maxAllowedGrants?: number;
                         };
                         protectedAppMetadata: {
                             host: string;
@@ -23950,7 +24990,7 @@ export interface operations {
                         languageInfo: {
                             autoDetect: boolean;
                             /** @enum {string} */
-                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                         };
                         termsOfUseUrl: string | null;
                         privacyPolicyUrl: string | null;
@@ -24017,7 +25057,7 @@ export interface operations {
                         mfa: {
                             factors: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
                             /** @enum {string} */
-                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt";
+                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt" | "PromptAtSignInAndSignUpMandatory" | "PromptOnlyAtSignInMandatory";
                             /** @enum {string} */
                             organizationRequiredMfaPolicy?: "NoPrompt" | "Mandatory";
                         };
@@ -24222,7 +25262,7 @@ export interface operations {
                         languageInfo: {
                             autoDetect: boolean;
                             /** @enum {string} */
-                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                         };
                         termsOfUseUrl: string | null;
                         privacyPolicyUrl: string | null;
@@ -24289,7 +25329,7 @@ export interface operations {
                         mfa: {
                             factors: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
                             /** @enum {string} */
-                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt";
+                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt" | "PromptAtSignInAndSignUpMandatory" | "PromptOnlyAtSignInMandatory";
                             /** @enum {string} */
                             organizationRequiredMfaPolicy?: "NoPrompt" | "Mandatory";
                         };