@logto/api 1.37.1 → 1.39.0

package/lib/generated-types/management.d.ts

@@ -405,6 +405,30 @@ export interface paths {
         patch: operations["UpdateAdminConsoleConfig"];
         trace?: never;
     };
+    "/api/configs/oidc/session": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get OIDC session config
+         * @description Get the OIDC session configuration for the tenant.
+         */
+        get: operations["GetOidcSessionConfig"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Update OIDC session config
+         * @description Update the OIDC session configuration for the tenant. This method performs a partial update. If the configuration does not exist, it will be created.
+         */
+        patch: operations["UpdateOidcSessionConfig"];
+        trace?: never;
+    };
     "/api/configs/oidc/{keyType}": {
         parameters: {
             query?: never;
@@ -942,7 +966,7 @@ export interface paths {
         };
         /**
          * Get user logto config
-         * @description Retrieve the exposed portion of a user's logto config. This endpoint currently includes only the MFA skip state.
+         * @description Retrieve the exposed portion of a user's logto config. Includes MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in states (skipped).
          */
         get: operations["ListUserLogtoConfigs"];
         put?: never;
@@ -952,7 +976,7 @@ export interface paths {
         head?: never;
         /**
          * Update user logto config
-         * @description Update the exposed portion of a user's logto config. This endpoint currently allows updating only the MFA skip state.
+         * @description Update the exposed portion of a user's logto config. Supports updating MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in states (skipped). All fields are optional — only provided fields will be updated.
          */
         patch: operations["UpdateUserLogtoConfigs"];
         trace?: never;
@@ -1203,6 +1227,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/users/{userId}/grants": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get user active grants
+         * @description Retrieve all non-expired grants of the user. Optionally filter by application type via `appType`; when omitted, grants from all application types are returned.
+         */
+        get: operations["ListUserGrants"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/users/{userId}/grants/{grantId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Revoke a user grant
+         * @description Revoke a specific grant and its associated token chain by grant ID. Also removes the matching session authorization entry for this grant from the related active session. The grant must belong to the user.
+         */
+        delete: operations["DeleteUserGrant"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/users/{userId}/mfa-verifications": {
         parameters: {
             query?: never;
@@ -1359,6 +1423,50 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/users/{userId}/sessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get user active sessions
+         * @description Retrieve all non-expired sessions for the user, including session metadata and interaction details when available.
+         */
+        get: operations["ListUserSessions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/users/{userId}/sessions/{sessionId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get user active session
+         * @description Retrieve a non-expired session for the user by session ID, including session metadata and interaction details when available.
+         */
+        get: operations["GetUserSession"];
+        put?: never;
+        post?: never;
+        /**
+         * Revoke a user session
+         * @description Revoke a specific user session by its ID, optionally revoking associated target grants and tokens.
+         */
+        delete: operations["DeleteUserSession"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/logs": {
         parameters: {
             query?: never;
@@ -1935,6 +2043,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/domains/cleanup": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Cleanup stale domains
+         * @description Clean up custom domains that have been inactive (not verified) for a specified number of days. This uses Cloudflare as the source of truth to determine domain activity.
+         */
+        post: operations["CleanupDomains"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/organization-roles/{id}": {
         parameters: {
             query?: never;
@@ -3685,6 +3813,10 @@ export interface components {
         "sessionId-root": string;
         /** @description The unique identifier of the session. */
         sessionId: string;
+        /** @description The unique identifier of the grant. */
+        "grantId-root": string;
+        /** @description The unique identifier of the grant. */
+        grantId: string;
         /** @description The ID of the SAML application. */
         "samlId-root": string;
     };
@@ -3748,6 +3880,8 @@ export interface operations {
                             alwaysIssueRefreshToken?: boolean;
                             rotateRefreshToken?: boolean;
                             allowTokenExchange?: boolean;
+                            isDeviceFlow?: boolean;
+                            maxAllowedGrants?: number;
                         };
                         protectedAppMetadata: {
                             host: string;
@@ -3840,6 +3974,8 @@ export interface operations {
                         alwaysIssueRefreshToken?: boolean;
                         rotateRefreshToken?: boolean;
                         allowTokenExchange?: boolean;
+                        isDeviceFlow?: boolean;
+                        maxAllowedGrants?: number;
                     };
                     /** @description arbitrary */
                     customData?: Record<string, never>;
@@ -3886,6 +4022,8 @@ export interface operations {
                             alwaysIssueRefreshToken?: boolean;
                             rotateRefreshToken?: boolean;
                             allowTokenExchange?: boolean;
+                            isDeviceFlow?: boolean;
+                            maxAllowedGrants?: number;
                         };
                         protectedAppMetadata: {
                             host: string;
@@ -4004,6 +4142,8 @@ export interface operations {
                             alwaysIssueRefreshToken?: boolean;
                             rotateRefreshToken?: boolean;
                             allowTokenExchange?: boolean;
+                            isDeviceFlow?: boolean;
+                            maxAllowedGrants?: number;
                         };
                         protectedAppMetadata: {
                             host: string;
@@ -4161,6 +4301,8 @@ export interface operations {
                         alwaysIssueRefreshToken?: boolean;
                         rotateRefreshToken?: boolean;
                         allowTokenExchange?: boolean;
+                        isDeviceFlow?: boolean;
+                        maxAllowedGrants?: number;
                     };
                     /** @description arbitrary */
                     customData?: Record<string, never>;
@@ -4208,6 +4350,8 @@ export interface operations {
                             alwaysIssueRefreshToken?: boolean;
                             rotateRefreshToken?: boolean;
                             allowTokenExchange?: boolean;
+                            isDeviceFlow?: boolean;
+                            maxAllowedGrants?: number;
                         };
                         protectedAppMetadata: {
                             host: string;
@@ -4946,6 +5090,8 @@ export interface operations {
                             alwaysIssueRefreshToken?: boolean;
                             rotateRefreshToken?: boolean;
                             allowTokenExchange?: boolean;
+                            isDeviceFlow?: boolean;
+                            maxAllowedGrants?: number;
                         };
                         protectedAppMetadata: {
                             host: string;
@@ -6118,6 +6264,91 @@ export interface operations {
             };
         };
     };
+    GetOidcSessionConfig: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The OIDC session configuration. Returns empty object if the configuration does not exist. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        ttl: number;
+                    };
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    UpdateOidcSessionConfig: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    ttl?: number;
+                };
+            };
+        };
+        responses: {
+            /** @description The updated OIDC session configuration. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        ttl: number;
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     GetOidcKeys: {
         parameters: {
             query?: never;
@@ -6141,6 +6372,9 @@ export interface operations {
                         createdAt: number;
                         /** @enum {string} */
                         signingKeyAlgorithm?: "RSA" | "EC";
+                        /** @enum {string} */
+                        status?: "Next" | "Current" | "Previous";
+                        effectiveAt?: number;
                     }[];
                 };
             };
@@ -6245,6 +6479,7 @@ export interface operations {
                      * @enum {string}
                      */
                     signingKeyAlgorithm?: "RSA" | "EC";
+                    rotationGracePeriod?: number;
                 };
             };
         };
@@ -6260,6 +6495,9 @@ export interface operations {
                         createdAt: number;
                         /** @enum {string} */
                         signingKeyAlgorithm?: "RSA" | "EC";
+                        /** @enum {string} */
+                        status?: "Next" | "Current" | "Previous";
+                        effectiveAt?: number;
                     }[];
                 };
             };
@@ -6440,6 +6678,30 @@ export interface operations {
                                         type: string;
                                         value: string;
                                     };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaEmailVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "email" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaPhoneVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "phone" */
+                                        type: string;
+                                        value: string;
+                                    };
                                 } | {
                                     id: string;
                                     connectorId: string;
@@ -6490,7 +6752,7 @@ export interface operations {
                                     id: string;
                                     verified: boolean;
                                     registrationRpId?: string;
-                                    /** Format: "SignInWebAuthn" */
+                                    /** Format: "SignInPasskey" */
                                     type: string;
                                     userId?: string;
                                 } | {
@@ -6544,6 +6806,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -6581,6 +6845,7 @@ export interface operations {
                                 createdAt?: number;
                             };
                         };
+                        blockIssuanceOnError?: boolean;
                         tokenSample?: {
                             jti?: string;
                             aud?: string | string[];
@@ -6625,6 +6890,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -6662,6 +6929,7 @@ export interface operations {
                                 createdAt?: number;
                             };
                         };
+                        blockIssuanceOnError?: boolean;
                         tokenSample?: {
                             jti?: string;
                             aud?: string | string[];
@@ -6724,6 +6992,8 @@ export interface operations {
                     contextSample?: unknown;
                     /** @description The sample raw token payload for the JWT customizer script testing purpose. */
                     tokenSample?: unknown;
+                    /** @description Whether to block token issuance when the JWT customizer script fails. */
+                    blockIssuanceOnError?: unknown;
                 };
             };
         };
@@ -6863,6 +7133,30 @@ export interface operations {
                                         type: string;
                                         value: string;
                                     };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaEmailVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "email" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaPhoneVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "phone" */
+                                        type: string;
+                                        value: string;
+                                    };
                                 } | {
                                     id: string;
                                     connectorId: string;
@@ -6913,7 +7207,7 @@ export interface operations {
                                     id: string;
                                     verified: boolean;
                                     registrationRpId?: string;
-                                    /** Format: "SignInWebAuthn" */
+                                    /** Format: "SignInPasskey" */
                                     type: string;
                                     userId?: string;
                                 } | {
@@ -6967,6 +7261,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -7004,6 +7300,7 @@ export interface operations {
                                 createdAt?: number;
                             };
                         };
+                        blockIssuanceOnError?: boolean;
                         tokenSample?: {
                             jti?: string;
                             aud?: string | string[];
@@ -7048,6 +7345,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -7085,6 +7384,7 @@ export interface operations {
                                 createdAt?: number;
                             };
                         };
+                        blockIssuanceOnError?: boolean;
                         tokenSample?: {
                             jti?: string;
                             aud?: string | string[];
@@ -7231,6 +7531,30 @@ export interface operations {
                                         type: string;
                                         value: string;
                                     };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaEmailVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "email" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaPhoneVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "phone" */
+                                        type: string;
+                                        value: string;
+                                    };
                                 } | {
                                     id: string;
                                     connectorId: string;
@@ -7281,7 +7605,7 @@ export interface operations {
                                     id: string;
                                     verified: boolean;
                                     registrationRpId?: string;
-                                    /** Format: "SignInWebAuthn" */
+                                    /** Format: "SignInPasskey" */
                                     type: string;
                                     userId?: string;
                                 } | {
@@ -7335,6 +7659,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -7372,6 +7698,7 @@ export interface operations {
                                 createdAt?: number;
                             };
                         };
+                        blockIssuanceOnError?: boolean;
                         tokenSample?: {
                             jti?: string;
                             aud?: string | string[];
@@ -7416,6 +7743,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -7453,6 +7782,7 @@ export interface operations {
                                 createdAt?: number;
                             };
                         };
+                        blockIssuanceOnError?: boolean;
                         tokenSample?: {
                             jti?: string;
                             aud?: string | string[];
@@ -7557,6 +7887,8 @@ export interface operations {
                     contextSample?: unknown;
                     /** @description The sample raw token payload for the JWT customizer script testing purpose. */
                     tokenSample?: unknown;
+                    /** @description Whether to block token issuance when the JWT customizer script fails. */
+                    blockIssuanceOnError?: unknown;
                 };
             };
         };
@@ -7698,16 +8030,40 @@ export interface operations {
                                     };
                                 } | {
                                     id: string;
-                                    connectorId: string;
-                                    /** Format: "Social" */
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaEmailVerificationCode" */
                                     type: string;
-                                    socialUserInfo?: {
-                                        id: string;
-                                        email?: string;
-                                        phone?: string;
-                                        name?: string;
-                                        avatar?: string;
-                                        rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
+                                    identifier: {
+                                        /** Format: "email" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaPhoneVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "phone" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    connectorId: string;
+                                    /** Format: "Social" */
+                                    type: string;
+                                    socialUserInfo?: {
+                                        id: string;
+                                        email?: string;
+                                        phone?: string;
+                                        name?: string;
+                                        avatar?: string;
+                                        rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
                                     };
                                 } | {
                                     id: string;
@@ -7746,7 +8102,7 @@ export interface operations {
                                     id: string;
                                     verified: boolean;
                                     registrationRpId?: string;
-                                    /** Format: "SignInWebAuthn" */
+                                    /** Format: "SignInPasskey" */
                                     type: string;
                                     userId?: string;
                                 } | {
@@ -7800,6 +8156,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -7837,6 +8195,7 @@ export interface operations {
                                 createdAt?: number;
                             };
                         };
+                        blockIssuanceOnError?: boolean;
                         tokenSample?: {
                             jti?: string;
                             aud?: string | string[];
@@ -7881,6 +8240,8 @@ export interface operations {
                                     alwaysIssueRefreshToken?: boolean;
                                     rotateRefreshToken?: boolean;
                                     allowTokenExchange?: boolean;
+                                    isDeviceFlow?: boolean;
+                                    maxAllowedGrants?: number;
                                 };
                                 protectedAppMetadata?: {
                                     host: string;
@@ -7918,6 +8279,7 @@ export interface operations {
                                 createdAt?: number;
                             };
                         };
+                        blockIssuanceOnError?: boolean;
                         tokenSample?: {
                             jti?: string;
                             aud?: string | string[];
@@ -8106,6 +8468,30 @@ export interface operations {
                                             type: string;
                                             value: string;
                                         };
+                                    } | {
+                                        id: string;
+                                        /** @enum {string} */
+                                        templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                        verified: boolean;
+                                        /** Format: "MfaEmailVerificationCode" */
+                                        type: string;
+                                        identifier: {
+                                            /** Format: "email" */
+                                            type: string;
+                                            value: string;
+                                        };
+                                    } | {
+                                        id: string;
+                                        /** @enum {string} */
+                                        templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                        verified: boolean;
+                                        /** Format: "MfaPhoneVerificationCode" */
+                                        type: string;
+                                        identifier: {
+                                            /** Format: "phone" */
+                                            type: string;
+                                            value: string;
+                                        };
                                     } | {
                                         id: string;
                                         connectorId: string;
@@ -8156,7 +8542,7 @@ export interface operations {
                                         id: string;
                                         verified: boolean;
                                         registrationRpId?: string;
-                                        /** Format: "SignInWebAuthn" */
+                                        /** Format: "SignInPasskey" */
                                         type: string;
                                         userId?: string;
                                     } | {
@@ -8210,6 +8596,8 @@ export interface operations {
                                         alwaysIssueRefreshToken?: boolean;
                                         rotateRefreshToken?: boolean;
                                         allowTokenExchange?: boolean;
+                                        isDeviceFlow?: boolean;
+                                        maxAllowedGrants?: number;
                                     };
                                     protectedAppMetadata?: {
                                         host: string;
@@ -8247,6 +8635,7 @@ export interface operations {
                                     createdAt?: number;
                                 };
                             };
+                            blockIssuanceOnError?: boolean;
                             tokenSample?: {
                                 jti?: string;
                                 aud?: string | string[];
@@ -8295,6 +8684,8 @@ export interface operations {
                                         alwaysIssueRefreshToken?: boolean;
                                         rotateRefreshToken?: boolean;
                                         allowTokenExchange?: boolean;
+                                        isDeviceFlow?: boolean;
+                                        maxAllowedGrants?: number;
                                     };
                                     protectedAppMetadata?: {
                                         host: string;
@@ -8332,6 +8723,7 @@ export interface operations {
                                     createdAt?: number;
                                 };
                             };
+                            blockIssuanceOnError?: boolean;
                             tokenSample?: {
                                 jti?: string;
                                 aud?: string | string[];
@@ -8527,6 +8919,30 @@ export interface operations {
                                     type: string;
                                     value: string;
                                 };
+                            } | {
+                                id: string;
+                                /** @enum {string} */
+                                templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                verified: boolean;
+                                /** Format: "MfaEmailVerificationCode" */
+                                type: string;
+                                identifier: {
+                                    /** Format: "email" */
+                                    type: string;
+                                    value: string;
+                                };
+                            } | {
+                                id: string;
+                                /** @enum {string} */
+                                templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                verified: boolean;
+                                /** Format: "MfaPhoneVerificationCode" */
+                                type: string;
+                                identifier: {
+                                    /** Format: "phone" */
+                                    type: string;
+                                    value: string;
+                                };
                             } | {
                                 id: string;
                                 connectorId: string;
@@ -8577,7 +8993,7 @@ export interface operations {
                                 id: string;
                                 verified: boolean;
                                 registrationRpId?: string;
-                                /** Format: "SignInWebAuthn" */
+                                /** Format: "SignInPasskey" */
                                 type: string;
                                 userId?: string;
                             } | {
@@ -8631,6 +9047,8 @@ export interface operations {
                                 alwaysIssueRefreshToken?: boolean;
                                 rotateRefreshToken?: boolean;
                                 allowTokenExchange?: boolean;
+                                isDeviceFlow?: boolean;
+                                maxAllowedGrants?: number;
                             };
                             protectedAppMetadata?: {
                                 host: string;
@@ -8708,6 +9126,8 @@ export interface operations {
                                 alwaysIssueRefreshToken?: boolean;
                                 rotateRefreshToken?: boolean;
                                 allowTokenExchange?: boolean;
+                                isDeviceFlow?: boolean;
+                                maxAllowedGrants?: number;
                             };
                             protectedAppMetadata?: {
                                 host: string;
@@ -10639,7 +11059,7 @@ export interface operations {
                         languageInfo: {
                             autoDetect: boolean;
                             /** @enum {string} */
-                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                         };
                         termsOfUseUrl: string | null;
                         privacyPolicyUrl: string | null;
@@ -10716,7 +11136,7 @@ export interface operations {
                         mfa: {
                             factors: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
                             /** @enum {string} */
-                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt";
+                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt" | "PromptAtSignInAndSignUpMandatory" | "PromptOnlyAtSignInMandatory";
                             /** @enum {string} */
                             organizationRequiredMfaPolicy?: "NoPrompt" | "Mandatory";
                         };
@@ -10755,6 +11175,9 @@ export interface operations {
                             showPasskeyButton?: boolean;
                             allowAutofill?: boolean;
                         };
+                        signUpProfileFields: {
+                            name: string;
+                        }[] | null;
                     };
                 };
             };
@@ -10819,7 +11242,7 @@ export interface operations {
                     languageInfo?: {
                         autoDetect: boolean;
                         /** @enum {string} */
-                        fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                        fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                     };
                     /** @enum {string} */
                     agreeToTermsPolicy?: "Automatic" | "ManualRegistrationOnly" | "Manual";
@@ -10893,10 +11316,14 @@ export interface operations {
                     mfa?: {
                         factors: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
                         /** @enum {string} */
-                        policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt";
+                        policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt" | "PromptAtSignInAndSignUpMandatory" | "PromptOnlyAtSignInMandatory";
                         /** @enum {string} */
                         organizationRequiredMfaPolicy?: "NoPrompt" | "Mandatory";
                     };
+                    /** @description Adaptive MFA settings. Only effective when developer features are enabled. */
+                    adaptiveMfa?: {
+                        enabled?: boolean;
+                    };
                     singleSignOnEnabled?: boolean;
                     captchaPolicy?: {
                         enabled?: boolean;
@@ -10922,6 +11349,9 @@ export interface operations {
                         showPasskeyButton?: boolean;
                         allowAutofill?: boolean;
                     };
+                    signUpProfileFields?: {
+                        name: string;
+                    }[] | null;
                     termsOfUseUrl?: (string | null) | string;
                     privacyPolicyUrl?: (string | null) | string;
                     /** @description The support email address to display on the error pages. */
@@ -10930,8 +11360,6 @@ export interface operations {
                     supportWebsiteUrl?: (string | null) | string;
                     /** @description The fallback URL to redirect users when the sign-in session does not exist or unknown. Client should initiate a new authentication flow after the redirection. */
                     unknownSessionRedirectUrl?: (string | null) | string;
-                    /** @description Adaptive MFA settings. Only effective when developer features are enabled. */
-                    adaptiveMfa?: unknown;
                 };
             };
         };
@@ -10966,7 +11394,7 @@ export interface operations {
                         languageInfo: {
                             autoDetect: boolean;
                             /** @enum {string} */
-                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                         };
                         termsOfUseUrl: string | null;
                         privacyPolicyUrl: string | null;
@@ -11033,7 +11461,7 @@ export interface operations {
                         mfa: {
                             factors: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
                             /** @enum {string} */
-                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt";
+                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt" | "PromptAtSignInAndSignUpMandatory" | "PromptOnlyAtSignInMandatory";
                             /** @enum {string} */
                             organizationRequiredMfaPolicy?: "NoPrompt" | "Mandatory";
                         };
@@ -11062,6 +11490,9 @@ export interface operations {
                             showPasskeyButton?: boolean;
                             allowAutofill?: boolean;
                         };
+                        signUpProfileFields: {
+                            name: string;
+                        }[] | null;
                     };
                 };
             };
@@ -11226,6 +11657,8 @@ export interface operations {
             query?: {
                 /** @description If it's provided with a truthy value (`true`, `1`, `yes`), each user in the response will include a `ssoIdentities` property containing a list of SSO identities associated with the user. */
                 includeSsoIdentities?: string;
+                /** @description If it's provided with a truthy value (`true`, `1`, `yes`), the response will include the `passwordDigest` and `passwordAlgorithm` fields. These fields are omitted by default for security reasons. */
+                includePasswordHash?: string;
             };
             header?: never;
             path: {
@@ -11298,6 +11731,13 @@ export interface operations {
                             updatedAt: number;
                             ssoConnectorId: string;
                         }[];
+                        /** @description The hashed password of the user. Only present when `includePasswordHash` is provided with a truthy value. `null` if the user has no password set. */
+                        passwordDigest?: string | null;
+                        /**
+                         * @description The algorithm used to hash the password. Only present when `includePasswordHash` is provided with a truthy value. `null` if the user has no password set.
+                         * @enum {string|null}
+                         */
+                        passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy" | null;
                     };
                 };
             };
@@ -11491,6 +11931,9 @@ export interface operations {
                             updatedAt: number;
                             ssoConnectorId: string;
                         }[];
+                        passwordDigest?: string | null;
+                        /** @enum {string|null} */
+                        passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy" | null;
                     };
                 };
             };
@@ -11645,7 +12088,7 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description Returns the exposed user logto config fields. Currently, only the MFA skip state is available. */
+            /** @description Returns the exposed user logto config fields, including MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in states (skipped). */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -11653,6 +12096,7 @@ export interface operations {
                 content: {
                     "application/json": {
                         mfa: {
+                            enabled?: boolean;
                             skipped: boolean;
                             skipMfaOnSignIn: boolean;
                         };
@@ -11705,13 +12149,18 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    mfa: {
+                    mfa?: {
+                        /** @description Set whether MFA is enabled for the user. */
+                        enabled?: boolean;
                         /** @description Set whether the user is marked as having skipped MFA binding. */
-                        skipped: boolean;
-                        skipMfaOnSignIn: boolean;
+                        skipped?: boolean;
+                        additionalBindingSuggestionSkipped?: boolean;
+                        /** @description Set whether the user has opted to skip MFA verification on sign-in. This is ignored when the MFA policy is mandatory. */
+                        skipMfaOnSignIn?: boolean;
                     };
-                    passkeySignIn: {
-                        skipped: boolean;
+                    passkeySignIn?: {
+                        /** @description Set whether the user has persistently skipped binding a passkey for sign-in. */
+                        skipped?: boolean;
                     };
                 };
             };
@@ -11725,6 +12174,7 @@ export interface operations {
                 content: {
                     "application/json": {
                         mfa: {
+                            enabled?: boolean;
                             skipped: boolean;
                             skipMfaOnSignIn: boolean;
                         };
@@ -11941,6 +12391,9 @@ export interface operations {
                             updatedAt: number;
                             ssoConnectorId: string;
                         }[];
+                        passwordDigest?: string | null;
+                        /** @enum {string|null} */
+                        passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy" | null;
                     }[];
                 };
             };
@@ -11994,10 +12447,10 @@ export interface operations {
                     username?: string;
                     /** @description Plain text password for the user. */
                     password?: string;
-                    /** @description In case you already have the password digests and not the passwords, you can use them for the newly created user via this property. The value should be generated with one of the supported algorithms. The algorithm can be specified using the `passwordAlgorithm` property. */
+                    /** @description In case you already have the password digests and not the passwords, you can use them for the newly created user via this property. The algorithm can be specified using the `passwordAlgorithm` property. For `Legacy`, pass a JSON string in the format `[algorithm, args, encryptedPassword]`, where `args` is a string array that MUST contain an `@` placeholder, which will be replaced by the plain text password at runtime. For PBKDF2 under `Legacy`, `args` is expected to be in the order `[salt, iterations, keylen, digest, '@']`. The salt supports a plain string or a `hex:`-prefixed hex string (for binary salt bytes). */
                     passwordDigest?: string;
                     /**
-                     * @description The hash algorithm used for the password. It should be one of the supported algorithms: argon2, md5, sha1, sha256. Should the encryption algorithm differ from argon2, it will automatically be upgraded to argon2 upon the user's next sign-in.
+                     * @description The hash algorithm used for the password. It should be one of the supported algorithms, including `Legacy` for custom legacy expressions. Should the encryption algorithm differ from `Argon2i`, it will automatically be upgraded to `Argon2i` upon the user's next sign-in.
                      * @enum {string}
                      */
                     passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy";
@@ -12091,6 +12544,9 @@ export interface operations {
                             updatedAt: number;
                             ssoConnectorId: string;
                         }[];
+                        passwordDigest?: string | null;
+                        /** @enum {string|null} */
+                        passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy" | null;
                     };
                 };
             };
@@ -12211,6 +12667,9 @@ export interface operations {
                             updatedAt: number;
                             ssoConnectorId: string;
                         }[];
+                        passwordDigest?: string | null;
+                        /** @enum {string|null} */
+                        passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy" | null;
                     };
                 };
             };
@@ -12440,6 +12899,9 @@ export interface operations {
                             updatedAt: number;
                             ssoConnectorId: string;
                         }[];
+                        passwordDigest?: string | null;
+                        /** @enum {string|null} */
+                        passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy" | null;
                     };
                 };
             };
@@ -13165,6 +13627,132 @@ export interface operations {
             };
         };
     };
+    ListUserGrants: {
+        parameters: {
+            query?: {
+                /** @description Application type filter. Use 'thirdParty' to list third-party app grants only, or 'firstParty' to list first-party app grants only. If omitted, grants from all applications are returned. */
+                appType?: "firstParty" | "thirdParty";
+            };
+            header?: never;
+            path: {
+                /** @description The unique identifier of the user. */
+                userId: components["parameters"]["userId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Return non-expired grants of the user. Results are filtered by app type when `appType` is provided. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        grants: {
+                            id: string;
+                            payload: {
+                                exp: number;
+                                iat: number;
+                                jti: string;
+                                /** Format: "Grant" */
+                                kind: string;
+                                clientId: string;
+                                accountId: string;
+                            };
+                            expiresAt: number;
+                        }[];
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Internal Server Error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    DeleteUserGrant: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the user. */
+                userId: components["parameters"]["userId"];
+                /** @description The unique identifier of the grant. */
+                grantId: components["parameters"]["grantId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Grant revoked successfully. If the grant already expired, this endpoint returns success without token-chain changes. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Grant not found. This can occur if the grant ID is invalid, or the grant does not belong to the user. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Internal Server Error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     ListUserMfaVerifications: {
         parameters: {
             query?: never;
@@ -13699,7 +14287,643 @@ export interface operations {
                 headers: {
                     [name: string]: unknown;
                 };
-                content?: never;
+                content?: never;
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    GetUserSsoIdentity: {
+        parameters: {
+            query?: {
+                /** @description Whether to include the token secret in the response. Defaults to false. Token storage must be supported and enabled by the connector to return the token secret. */
+                includeTokenSecret?: string;
+            };
+            header?: never;
+            path: {
+                /** @description The unique identifier of the user. */
+                userId: components["parameters"]["userId"];
+                /** @description The unique identifier of the sso connector. */
+                ssoConnectorId: components["parameters"]["ssoConnectorId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Returns the user's enterprise SSO identity and associated token secret. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @description The user's enterprise SSO identity. */
+                        ssoIdentity: {
+                            tenantId: string;
+                            id: string;
+                            userId: string;
+                            issuer: string;
+                            identityId: string;
+                            /** @description arbitrary */
+                            detail: Record<string, never>;
+                            createdAt: number;
+                            updatedAt: number;
+                            ssoConnectorId: string;
+                        };
+                        /** @description The desensitized token set secret associated with the user's SSO identity.
+                         *     This field is included only if the `includeTokenSecret` query parameter is provided and the corresponding connector has token storage enabled. */
+                        tokenSecret?: {
+                            tenantId: string;
+                            id: string;
+                            userId: string;
+                            /** Format: "federated_token_set" */
+                            type: string;
+                            metadata: {
+                                scope?: string;
+                                expiresAt?: number;
+                                tokenType?: string;
+                                hasRefreshToken: boolean;
+                            };
+                            createdAt: number;
+                            updatedAt: number;
+                            ssoConnectorId: string;
+                            issuer: string;
+                            identityId: string;
+                        };
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description User enterprise SSO identity not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    ListUserAllIdentities: {
+        parameters: {
+            query?: {
+                /** @description Whether to include the token secret in the response. Defaults to false. Token storage must be supported and enabled by the connector to return the token secret. */
+                includeTokenSecret?: string;
+            };
+            header?: never;
+            path: {
+                /** @description The unique identifier of the user. */
+                userId: components["parameters"]["userId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Returns the user's social identities, enterprise SSO identities and associated token secret. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @description The user's social identities. */
+                        socialIdentities: {
+                            identity: {
+                                userId: string;
+                                /** @description arbitrary */
+                                details?: Record<string, never>;
+                            };
+                            tokenSecret?: {
+                                tenantId: string;
+                                id: string;
+                                userId: string;
+                                /** Format: "federated_token_set" */
+                                type: string;
+                                metadata: {
+                                    scope?: string;
+                                    expiresAt?: number;
+                                    tokenType?: string;
+                                    hasRefreshToken: boolean;
+                                };
+                                createdAt: number;
+                                updatedAt: number;
+                                connectorId: string;
+                                identityId: string;
+                                target: string;
+                            };
+                            target: string;
+                        }[];
+                        /** @description The user's enterprise SSO identities. */
+                        ssoIdentities: {
+                            ssoIdentity: {
+                                tenantId: string;
+                                id: string;
+                                userId: string;
+                                issuer: string;
+                                identityId: string;
+                                /** @description arbitrary */
+                                detail: Record<string, never>;
+                                createdAt: number;
+                                updatedAt: number;
+                                ssoConnectorId: string;
+                            };
+                            tokenSecret?: {
+                                tenantId: string;
+                                id: string;
+                                userId: string;
+                                /** Format: "federated_token_set" */
+                                type: string;
+                                metadata: {
+                                    scope?: string;
+                                    expiresAt?: number;
+                                    tokenType?: string;
+                                    hasRefreshToken: boolean;
+                                };
+                                createdAt: number;
+                                updatedAt: number;
+                                ssoConnectorId: string;
+                                issuer: string;
+                                identityId: string;
+                            };
+                            ssoConnectorId: string;
+                        }[];
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description User not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    ListUserSessions: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the user. */
+                userId: components["parameters"]["userId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Return a list of non-expired sessions of the user. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        sessions: {
+                            payload: {
+                                exp: number;
+                                iat: number;
+                                jti: string;
+                                uid: string;
+                                /** Format: "Session" */
+                                kind: string;
+                                loginTs: number;
+                                accountId: string;
+                                authorizations?: {
+                                    [key: string]: {
+                                        sid?: string;
+                                        grantId?: string;
+                                        persistsLogout?: boolean;
+                                    };
+                                };
+                            };
+                            lastSubmission: {
+                                /** @enum {string} */
+                                interactionEvent: "SignIn" | "Register" | "ForgotPassword";
+                                userId: string;
+                                verificationRecords: ({
+                                    id: string;
+                                    /** Format: "Password" */
+                                    type: string;
+                                    identifier: {
+                                        type: ("username" | "email" | "phone") | "userId";
+                                        value: string;
+                                    };
+                                    verified: boolean;
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "EmailVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "email" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "PhoneVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "phone" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaEmailVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "email" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    /** @enum {string} */
+                                    templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                    verified: boolean;
+                                    /** Format: "MfaPhoneVerificationCode" */
+                                    type: string;
+                                    identifier: {
+                                        /** Format: "phone" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                } | {
+                                    id: string;
+                                    connectorId: string;
+                                    /** Format: "Social" */
+                                    type: string;
+                                    socialUserInfo?: {
+                                        id: string;
+                                        email?: string;
+                                        phone?: string;
+                                        name?: string;
+                                        avatar?: string;
+                                        rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
+                                    };
+                                } | {
+                                    id: string;
+                                    connectorId: string;
+                                    /** Format: "EnterpriseSso" */
+                                    type: string;
+                                    enterpriseSsoUserInfo?: {
+                                        id: string;
+                                        email?: string;
+                                        phone?: string;
+                                        name?: string;
+                                        avatar?: string;
+                                        rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
+                                    };
+                                    issuer?: string;
+                                } | {
+                                    id: string;
+                                    /** Format: "Totp" */
+                                    type: string;
+                                    userId: string;
+                                    verified: boolean;
+                                } | {
+                                    id: string;
+                                    /** Format: "BackupCode" */
+                                    type: string;
+                                    userId: string;
+                                    code?: string;
+                                } | {
+                                    id: string;
+                                    verified: boolean;
+                                    registrationRpId?: string;
+                                    /** Format: "WebAuthn" */
+                                    type: string;
+                                    userId: string;
+                                } | {
+                                    id: string;
+                                    verified: boolean;
+                                    registrationRpId?: string;
+                                    /** Format: "SignInPasskey" */
+                                    type: string;
+                                    userId?: string;
+                                } | {
+                                    id: string;
+                                    /** Format: "OneTimeToken" */
+                                    type: string;
+                                    verified: boolean;
+                                    identifier: {
+                                        /** Format: "email" */
+                                        type: string;
+                                        value: string;
+                                    };
+                                    oneTimeTokenContext?: {
+                                        jitOrganizationIds?: string[];
+                                    };
+                                } | {
+                                    id: string;
+                                    /** Format: "NewPasswordIdentity" */
+                                    type: string;
+                                    identifier: {
+                                        /** @enum {string} */
+                                        type: "username" | "email" | "phone";
+                                        value: string;
+                                    };
+                                })[];
+                                signInContext?: {
+                                    [key: string]: string;
+                                };
+                            } | null;
+                            clientId: string | null;
+                            accountId: string | null;
+                            expiresAt: number;
+                        }[];
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Internal Server Error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    GetUserSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the user. */
+                userId: components["parameters"]["userId"];
+                /** @description The unique identifier of the session. */
+                sessionId: components["parameters"]["sessionId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Return a non-expired session of the user. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        payload: {
+                            exp: number;
+                            iat: number;
+                            jti: string;
+                            uid: string;
+                            /** Format: "Session" */
+                            kind: string;
+                            loginTs: number;
+                            accountId: string;
+                            authorizations?: {
+                                [key: string]: {
+                                    sid?: string;
+                                    grantId?: string;
+                                    persistsLogout?: boolean;
+                                };
+                            };
+                        };
+                        lastSubmission: {
+                            /** @enum {string} */
+                            interactionEvent: "SignIn" | "Register" | "ForgotPassword";
+                            userId: string;
+                            verificationRecords: ({
+                                id: string;
+                                /** Format: "Password" */
+                                type: string;
+                                identifier: {
+                                    type: ("username" | "email" | "phone") | "userId";
+                                    value: string;
+                                };
+                                verified: boolean;
+                            } | {
+                                id: string;
+                                /** @enum {string} */
+                                templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                verified: boolean;
+                                /** Format: "EmailVerificationCode" */
+                                type: string;
+                                identifier: {
+                                    /** Format: "email" */
+                                    type: string;
+                                    value: string;
+                                };
+                            } | {
+                                id: string;
+                                /** @enum {string} */
+                                templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                verified: boolean;
+                                /** Format: "PhoneVerificationCode" */
+                                type: string;
+                                identifier: {
+                                    /** Format: "phone" */
+                                    type: string;
+                                    value: string;
+                                };
+                            } | {
+                                id: string;
+                                /** @enum {string} */
+                                templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                verified: boolean;
+                                /** Format: "MfaEmailVerificationCode" */
+                                type: string;
+                                identifier: {
+                                    /** Format: "email" */
+                                    type: string;
+                                    value: string;
+                                };
+                            } | {
+                                id: string;
+                                /** @enum {string} */
+                                templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
+                                verified: boolean;
+                                /** Format: "MfaPhoneVerificationCode" */
+                                type: string;
+                                identifier: {
+                                    /** Format: "phone" */
+                                    type: string;
+                                    value: string;
+                                };
+                            } | {
+                                id: string;
+                                connectorId: string;
+                                /** Format: "Social" */
+                                type: string;
+                                socialUserInfo?: {
+                                    id: string;
+                                    email?: string;
+                                    phone?: string;
+                                    name?: string;
+                                    avatar?: string;
+                                    rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
+                                };
+                            } | {
+                                id: string;
+                                connectorId: string;
+                                /** Format: "EnterpriseSso" */
+                                type: string;
+                                enterpriseSsoUserInfo?: {
+                                    id: string;
+                                    email?: string;
+                                    phone?: string;
+                                    name?: string;
+                                    avatar?: string;
+                                    rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
+                                };
+                                issuer?: string;
+                            } | {
+                                id: string;
+                                /** Format: "Totp" */
+                                type: string;
+                                userId: string;
+                                verified: boolean;
+                            } | {
+                                id: string;
+                                /** Format: "BackupCode" */
+                                type: string;
+                                userId: string;
+                                code?: string;
+                            } | {
+                                id: string;
+                                verified: boolean;
+                                registrationRpId?: string;
+                                /** Format: "WebAuthn" */
+                                type: string;
+                                userId: string;
+                            } | {
+                                id: string;
+                                verified: boolean;
+                                registrationRpId?: string;
+                                /** Format: "SignInPasskey" */
+                                type: string;
+                                userId?: string;
+                            } | {
+                                id: string;
+                                /** Format: "OneTimeToken" */
+                                type: string;
+                                verified: boolean;
+                                identifier: {
+                                    /** Format: "email" */
+                                    type: string;
+                                    value: string;
+                                };
+                                oneTimeTokenContext?: {
+                                    jitOrganizationIds?: string[];
+                                };
+                            } | {
+                                id: string;
+                                /** Format: "NewPasswordIdentity" */
+                                type: string;
+                                identifier: {
+                                    /** @enum {string} */
+                                    type: "username" | "email" | "phone";
+                                    value: string;
+                                };
+                            })[];
+                            signInContext?: {
+                                [key: string]: string;
+                            };
+                        } | null;
+                        clientId: string | null;
+                        accountId: string | null;
+                        expiresAt: number;
+                    };
+                };
             };
             /** @description Bad Request */
             400: {
@@ -13729,91 +14953,8 @@ export interface operations {
                 };
                 content?: never;
             };
-        };
-    };
-    GetUserSsoIdentity: {
-        parameters: {
-            query?: {
-                /** @description Whether to include the token secret in the response. Defaults to false. Token storage must be supported and enabled by the connector to return the token secret. */
-                includeTokenSecret?: string;
-            };
-            header?: never;
-            path: {
-                /** @description The unique identifier of the user. */
-                userId: components["parameters"]["userId"];
-                /** @description The unique identifier of the sso connector. */
-                ssoConnectorId: components["parameters"]["ssoConnectorId"];
-            };
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Returns the user's enterprise SSO identity and associated token secret. */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": {
-                        /** @description The user's enterprise SSO identity. */
-                        ssoIdentity: {
-                            tenantId: string;
-                            id: string;
-                            userId: string;
-                            issuer: string;
-                            identityId: string;
-                            /** @description arbitrary */
-                            detail: Record<string, never>;
-                            createdAt: number;
-                            updatedAt: number;
-                            ssoConnectorId: string;
-                        };
-                        /** @description The desensitized token set secret associated with the user's SSO identity.
-                         *     This field is included only if the `includeTokenSecret` query parameter is provided and the corresponding connector has token storage enabled. */
-                        tokenSecret?: {
-                            tenantId: string;
-                            id: string;
-                            userId: string;
-                            /** Format: "federated_token_set" */
-                            type: string;
-                            metadata: {
-                                scope?: string;
-                                expiresAt?: number;
-                                tokenType?: string;
-                                hasRefreshToken: boolean;
-                            };
-                            createdAt: number;
-                            updatedAt: number;
-                            ssoConnectorId: string;
-                            issuer: string;
-                            identityId: string;
-                        };
-                    };
-                };
-            };
-            /** @description Bad Request */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Unauthorized */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Forbidden */
-            403: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description User enterprise SSO identity not found. */
-            404: {
+            /** @description Internal Server Error */
+            500: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -13821,91 +14962,29 @@ export interface operations {
             };
         };
     };
-    ListUserAllIdentities: {
+    DeleteUserSession: {
         parameters: {
             query?: {
-                /** @description Whether to include the token secret in the response. Defaults to false. Token storage must be supported and enabled by the connector to return the token secret. */
-                includeTokenSecret?: string;
+                /** @description Optional target for revoking associated grants and tokens. 'all' revokes grants for every application authorized by this session. 'firstParty' revokes only first-party app grants; third-party app grants remain active. If omitted, grants remain active when the session authorizations include offline_access; otherwise they are revoked. */
+                revokeGrantsTarget?: "all" | "firstParty";
             };
             header?: never;
             path: {
                 /** @description The unique identifier of the user. */
                 userId: components["parameters"]["userId"];
+                /** @description The unique identifier of the session. */
+                sessionId: components["parameters"]["sessionId"];
             };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description Returns the user's social identities, enterprise SSO identities and associated token secret. */
-            200: {
+            /** @description Session revoked successfully. */
+            204: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    "application/json": {
-                        /** @description The user's social identities. */
-                        socialIdentities: {
-                            identity: {
-                                userId: string;
-                                /** @description arbitrary */
-                                details?: Record<string, never>;
-                            };
-                            tokenSecret?: {
-                                tenantId: string;
-                                id: string;
-                                userId: string;
-                                /** Format: "federated_token_set" */
-                                type: string;
-                                metadata: {
-                                    scope?: string;
-                                    expiresAt?: number;
-                                    tokenType?: string;
-                                    hasRefreshToken: boolean;
-                                };
-                                createdAt: number;
-                                updatedAt: number;
-                                connectorId: string;
-                                identityId: string;
-                                target: string;
-                            };
-                            target: string;
-                        }[];
-                        /** @description The user's enterprise SSO identities. */
-                        ssoIdentities: {
-                            ssoIdentity: {
-                                tenantId: string;
-                                id: string;
-                                userId: string;
-                                issuer: string;
-                                identityId: string;
-                                /** @description arbitrary */
-                                detail: Record<string, never>;
-                                createdAt: number;
-                                updatedAt: number;
-                                ssoConnectorId: string;
-                            };
-                            tokenSecret?: {
-                                tenantId: string;
-                                id: string;
-                                userId: string;
-                                /** Format: "federated_token_set" */
-                                type: string;
-                                metadata: {
-                                    scope?: string;
-                                    expiresAt?: number;
-                                    tokenType?: string;
-                                    hasRefreshToken: boolean;
-                                };
-                                createdAt: number;
-                                updatedAt: number;
-                                ssoConnectorId: string;
-                                issuer: string;
-                                identityId: string;
-                            };
-                            ssoConnectorId: string;
-                        }[];
-                    };
-                };
+                content?: never;
             };
             /** @description Bad Request */
             400: {
@@ -13928,13 +15007,20 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description User not found. */
+            /** @description Not Found */
             404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
+            /** @description Internal Server Error */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
         };
     };
     ListLogs: {
@@ -14755,6 +15841,8 @@ export interface operations {
                             alwaysIssueRefreshToken?: boolean;
                             rotateRefreshToken?: boolean;
                             allowTokenExchange?: boolean;
+                            isDeviceFlow?: boolean;
+                            maxAllowedGrants?: number;
                         };
                         protectedAppMetadata: {
                             host: string;
@@ -15335,7 +16423,7 @@ export interface operations {
             query?: never;
             header?: never;
             path: {
-                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
             };
             cookie?: never;
         };
@@ -15390,7 +16478,7 @@ export interface operations {
             query?: never;
             header?: never;
             path: {
-                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
             };
             cookie?: never;
         };
@@ -15453,7 +16541,7 @@ export interface operations {
             query?: never;
             header?: never;
             path: {
-                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
             };
             cookie?: never;
         };
@@ -16537,6 +17625,59 @@ export interface operations {
             };
         };
     };
+    CleanupDomains: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description The number of days a domain must be inactive before it is considered stale and eligible for cleanup. */
+                    staleDays: number;
+                };
+            };
+        };
+        responses: {
+            /** @description The cleanup result summary. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        scannedCount: number;
+                        deletedCount: number;
+                        skippedActiveCount: number;
+                        failedCount: number;
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     GetOrganizationRole: {
         parameters: {
             query?: never;
@@ -18634,7 +19775,10 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": unknown;
+                    "application/json": {
+                        /** @description An array of user IDs processed from the request. This may include IDs that were already members of the organization. */
+                        userIds: string[];
+                    };
                 };
             };
             /** @description Bad Request */
@@ -18939,7 +20083,10 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": unknown;
+                    "application/json": {
+                        /** @description An array of organization role IDs that were assigned to the user, deduplicated and resolved from any provided role names. */
+                        organizationRoleIds: string[];
+                    };
                 };
             };
             /** @description Bad Request */
@@ -19139,6 +20286,8 @@ export interface operations {
                             alwaysIssueRefreshToken?: boolean;
                             rotateRefreshToken?: boolean;
                             allowTokenExchange?: boolean;
+                            isDeviceFlow?: boolean;
+                            maxAllowedGrants?: number;
                         };
                         protectedAppMetadata: {
                             host: string;
@@ -20934,6 +22083,8 @@ export interface operations {
                             session?: "Off" | "ReadOnly" | "Edit";
                         };
                         webauthnRelatedOrigins: string[];
+                        deleteAccountUrl: string | null;
+                        customCss: string | null;
                     };
                 };
             };
@@ -20992,6 +22143,9 @@ export interface operations {
                     };
                     /** @description The allowed domains for webauthn. */
                     webauthnRelatedOrigins?: string[];
+                    /** @description The custom endpoint URL for account deletion. */
+                    deleteAccountUrl?: Record<string, never> | null;
+                    customCss?: string | null;
                 };
             };
         };
@@ -21031,6 +22185,8 @@ export interface operations {
                             session?: "Off" | "ReadOnly" | "Edit";
                         };
                         webauthnRelatedOrigins: string[];
+                        deleteAccountUrl: string | null;
+                        customCss: string | null;
                     };
                 };
             };
@@ -23950,7 +25106,7 @@ export interface operations {
                         languageInfo: {
                             autoDetect: boolean;
                             /** @enum {string} */
-                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                         };
                         termsOfUseUrl: string | null;
                         privacyPolicyUrl: string | null;
@@ -24017,7 +25173,7 @@ export interface operations {
                         mfa: {
                             factors: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
                             /** @enum {string} */
-                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt";
+                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt" | "PromptAtSignInAndSignUpMandatory" | "PromptOnlyAtSignInMandatory";
                             /** @enum {string} */
                             organizationRequiredMfaPolicy?: "NoPrompt" | "Mandatory";
                         };
@@ -24045,6 +25201,9 @@ export interface operations {
                             showPasskeyButton?: boolean;
                             allowAutofill?: boolean;
                         };
+                        signUpProfileFields: {
+                            name: string;
+                        }[] | null;
                         socialConnectors: {
                             id: string;
                             target: string;
@@ -24222,7 +25381,7 @@ export interface operations {
                         languageInfo: {
                             autoDetect: boolean;
                             /** @enum {string} */
-                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                         };
                         termsOfUseUrl: string | null;
                         privacyPolicyUrl: string | null;
@@ -24289,7 +25448,7 @@ export interface operations {
                         mfa: {
                             factors: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
                             /** @enum {string} */
-                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt";
+                            policy: "UserControlled" | "Mandatory" | "PromptOnlyAtSignIn" | "PromptAtSignInAndSignUp" | "NoPrompt" | "PromptAtSignInAndSignUpMandatory" | "PromptOnlyAtSignInMandatory";
                             /** @enum {string} */
                             organizationRequiredMfaPolicy?: "NoPrompt" | "Mandatory";
                         };
@@ -24317,6 +25476,9 @@ export interface operations {
                             showPasskeyButton?: boolean;
                             allowAutofill?: boolean;
                         };
+                        signUpProfileFields: {
+                            name: string;
+                        }[] | null;
                         socialConnectors: {
                             id: string;
                             target: string;
@@ -24462,6 +25624,8 @@ export interface operations {
                             session?: "Off" | "ReadOnly" | "Edit";
                         };
                         webauthnRelatedOrigins: string[];
+                        deleteAccountUrl: string | null;
+                        customCss: string | null;
                     };
                 };
             };