@logto/api 1.38.0 → 1.40.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1477,6 +1477,10 @@ export interface paths {
1477
1477
  /**
1478
1478
  * Get logs
1479
1479
  * @description Get logs that match the given query with pagination.
1480
+ *
1481
+ * ### Pagination on large result sets
1482
+ *
1483
+ * For tenants with very large log volumes, the default exact `count(*)` may exceed Postgres `statement_timeout`. Pass `enableCap=true` to short-circuit the count query: any tenant with more than 10,000 matching logs saturates `Total-Number` at the sentinel value `10001` and the response includes `Total-Number-Is-Capped: true`. In capped responses the `Link` header omits `rel="last"` and `rel="next"`; walk forward by incrementing `page` and stop on an empty response.
1480
1484
  */
1481
1485
  get: operations["ListLogs"];
1482
1486
  put?: never;
@@ -1860,7 +1864,7 @@ export interface paths {
1860
1864
  };
1861
1865
  /**
1862
1866
  * Get recent logs for a hook
1863
- * @description Get recent logs that match the given query for the specified hook with pagination.
1867
+ * @description Get recent logs that match the given query for the specified hook with pagination. See `GET /api/logs` for details on the `enableCap` parameter and capped-response headers.
1864
1868
  */
1865
1869
  get: operations["ListHookRecentLogs"];
1866
1870
  put?: never;
@@ -2043,6 +2047,26 @@ export interface paths {
2043
2047
  patch?: never;
2044
2048
  trace?: never;
2045
2049
  };
2050
+ "/api/domains/cleanup": {
2051
+ parameters: {
2052
+ query?: never;
2053
+ header?: never;
2054
+ path?: never;
2055
+ cookie?: never;
2056
+ };
2057
+ get?: never;
2058
+ put?: never;
2059
+ /**
2060
+ * Cleanup stale domains
2061
+ * @description Clean up custom domains that have been inactive (not verified) for a specified number of days. This uses Cloudflare as the source of truth to determine domain activity.
2062
+ */
2063
+ post: operations["CleanupDomains"];
2064
+ delete?: never;
2065
+ options?: never;
2066
+ head?: never;
2067
+ patch?: never;
2068
+ trace?: never;
2069
+ };
2046
2070
  "/api/organization-roles/{id}": {
2047
2071
  parameters: {
2048
2072
  query?: never;
@@ -3844,8 +3868,12 @@ export interface operations {
3844
3868
  /** @enum {string} */
3845
3869
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
3846
3870
  oidcClientMetadata: {
3847
- redirectUris: Record<string, never>[];
3848
- postLogoutRedirectUris: Record<string, never>[];
3871
+ redirectUris: {
3872
+ [key: string]: unknown;
3873
+ }[];
3874
+ postLogoutRedirectUris: {
3875
+ [key: string]: unknown;
3876
+ }[];
3849
3877
  /** Format: url */
3850
3878
  backchannelLogoutUri?: string;
3851
3879
  backchannelLogoutSessionRequired?: boolean;
@@ -3870,6 +3898,7 @@ export interface operations {
3870
3898
  pageRules: {
3871
3899
  path: string;
3872
3900
  }[];
3901
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
3873
3902
  customDomains?: {
3874
3903
  domain: string;
3875
3904
  /** @enum {string} */
@@ -3894,8 +3923,11 @@ export interface operations {
3894
3923
  }[];
3895
3924
  } | null;
3896
3925
  /** @description arbitrary */
3897
- customData: Record<string, never>;
3926
+ customData: {
3927
+ [key: string]: unknown;
3928
+ };
3898
3929
  isThirdParty: boolean;
3930
+ appLevelAccessControlEnabled: boolean;
3899
3931
  createdAt: number;
3900
3932
  }[];
3901
3933
  };
@@ -3938,8 +3970,12 @@ export interface operations {
3938
3970
  /** @enum {string} */
3939
3971
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
3940
3972
  oidcClientMetadata?: {
3941
- redirectUris: Record<string, never>[];
3942
- postLogoutRedirectUris: Record<string, never>[];
3973
+ redirectUris: {
3974
+ [key: string]: unknown;
3975
+ }[];
3976
+ postLogoutRedirectUris: {
3977
+ [key: string]: unknown;
3978
+ }[];
3943
3979
  /** Format: url */
3944
3980
  backchannelLogoutUri?: string;
3945
3981
  backchannelLogoutSessionRequired?: boolean;
@@ -3958,7 +3994,9 @@ export interface operations {
3958
3994
  maxAllowedGrants?: number;
3959
3995
  };
3960
3996
  /** @description arbitrary */
3961
- customData?: Record<string, never>;
3997
+ customData?: {
3998
+ [key: string]: unknown;
3999
+ };
3962
4000
  isThirdParty?: boolean;
3963
4001
  /** @description The data for protected app, this feature is not available for open source version. */
3964
4002
  protectedAppMetadata?: {
@@ -3986,8 +4024,12 @@ export interface operations {
3986
4024
  /** @enum {string} */
3987
4025
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
3988
4026
  oidcClientMetadata: {
3989
- redirectUris: Record<string, never>[];
3990
- postLogoutRedirectUris: Record<string, never>[];
4027
+ redirectUris: {
4028
+ [key: string]: unknown;
4029
+ }[];
4030
+ postLogoutRedirectUris: {
4031
+ [key: string]: unknown;
4032
+ }[];
3991
4033
  /** Format: url */
3992
4034
  backchannelLogoutUri?: string;
3993
4035
  backchannelLogoutSessionRequired?: boolean;
@@ -4012,6 +4054,7 @@ export interface operations {
4012
4054
  pageRules: {
4013
4055
  path: string;
4014
4056
  }[];
4057
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
4015
4058
  customDomains?: {
4016
4059
  domain: string;
4017
4060
  /** @enum {string} */
@@ -4036,8 +4079,11 @@ export interface operations {
4036
4079
  }[];
4037
4080
  } | null;
4038
4081
  /** @description arbitrary */
4039
- customData: Record<string, never>;
4082
+ customData: {
4083
+ [key: string]: unknown;
4084
+ };
4040
4085
  isThirdParty: boolean;
4086
+ appLevelAccessControlEnabled: boolean;
4041
4087
  createdAt: number;
4042
4088
  };
4043
4089
  };
@@ -4106,8 +4152,12 @@ export interface operations {
4106
4152
  /** @enum {string} */
4107
4153
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
4108
4154
  oidcClientMetadata: {
4109
- redirectUris: Record<string, never>[];
4110
- postLogoutRedirectUris: Record<string, never>[];
4155
+ redirectUris: {
4156
+ [key: string]: unknown;
4157
+ }[];
4158
+ postLogoutRedirectUris: {
4159
+ [key: string]: unknown;
4160
+ }[];
4111
4161
  /** Format: url */
4112
4162
  backchannelLogoutUri?: string;
4113
4163
  backchannelLogoutSessionRequired?: boolean;
@@ -4132,6 +4182,7 @@ export interface operations {
4132
4182
  pageRules: {
4133
4183
  path: string;
4134
4184
  }[];
4185
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
4135
4186
  customDomains?: {
4136
4187
  domain: string;
4137
4188
  /** @enum {string} */
@@ -4156,8 +4207,11 @@ export interface operations {
4156
4207
  }[];
4157
4208
  } | null;
4158
4209
  /** @description arbitrary */
4159
- customData: Record<string, never>;
4210
+ customData: {
4211
+ [key: string]: unknown;
4212
+ };
4160
4213
  isThirdParty: boolean;
4214
+ appLevelAccessControlEnabled: boolean;
4161
4215
  createdAt: number;
4162
4216
  isAdmin: boolean;
4163
4217
  };
@@ -4265,8 +4319,12 @@ export interface operations {
4265
4319
  name?: string;
4266
4320
  description?: string | null;
4267
4321
  oidcClientMetadata?: {
4268
- redirectUris: Record<string, never>[];
4269
- postLogoutRedirectUris: Record<string, never>[];
4322
+ redirectUris: {
4323
+ [key: string]: unknown;
4324
+ }[];
4325
+ postLogoutRedirectUris: {
4326
+ [key: string]: unknown;
4327
+ }[];
4270
4328
  /** Format: url */
4271
4329
  backchannelLogoutUri?: string;
4272
4330
  backchannelLogoutSessionRequired?: boolean;
@@ -4285,13 +4343,20 @@ export interface operations {
4285
4343
  maxAllowedGrants?: number;
4286
4344
  };
4287
4345
  /** @description arbitrary */
4288
- customData?: Record<string, never>;
4346
+ customData?: {
4347
+ [key: string]: unknown;
4348
+ };
4349
+ /** @description Validator function */
4350
+ appLevelAccessControlEnabled?: {
4351
+ [key: string]: unknown;
4352
+ };
4289
4353
  protectedAppMetadata?: {
4290
4354
  origin?: string;
4291
4355
  sessionDuration?: number;
4292
4356
  pageRules?: {
4293
4357
  path: string;
4294
4358
  }[];
4359
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
4295
4360
  } | null;
4296
4361
  /** @description Whether the application has admin access. User can enable the admin access for Machine-to-Machine apps. */
4297
4362
  isAdmin?: boolean;
@@ -4314,8 +4379,12 @@ export interface operations {
4314
4379
  /** @enum {string} */
4315
4380
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
4316
4381
  oidcClientMetadata: {
4317
- redirectUris: Record<string, never>[];
4318
- postLogoutRedirectUris: Record<string, never>[];
4382
+ redirectUris: {
4383
+ [key: string]: unknown;
4384
+ }[];
4385
+ postLogoutRedirectUris: {
4386
+ [key: string]: unknown;
4387
+ }[];
4319
4388
  /** Format: url */
4320
4389
  backchannelLogoutUri?: string;
4321
4390
  backchannelLogoutSessionRequired?: boolean;
@@ -4340,6 +4409,7 @@ export interface operations {
4340
4409
  pageRules: {
4341
4410
  path: string;
4342
4411
  }[];
4412
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
4343
4413
  customDomains?: {
4344
4414
  domain: string;
4345
4415
  /** @enum {string} */
@@ -4364,8 +4434,11 @@ export interface operations {
4364
4434
  }[];
4365
4435
  } | null;
4366
4436
  /** @description arbitrary */
4367
- customData: Record<string, never>;
4437
+ customData: {
4438
+ [key: string]: unknown;
4439
+ };
4368
4440
  isThirdParty: boolean;
4441
+ appLevelAccessControlEnabled: boolean;
4369
4442
  createdAt: number;
4370
4443
  };
4371
4444
  };
@@ -4426,7 +4499,9 @@ export interface operations {
4426
4499
  };
4427
4500
  requestBody: {
4428
4501
  content: {
4429
- "application/json": Record<string, never>;
4502
+ "application/json": {
4503
+ [key: string]: unknown;
4504
+ };
4430
4505
  };
4431
4506
  };
4432
4507
  responses: {
@@ -4436,7 +4511,9 @@ export interface operations {
4436
4511
  [name: string]: unknown;
4437
4512
  };
4438
4513
  content: {
4439
- "application/json": Record<string, never>;
4514
+ "application/json": {
4515
+ [key: string]: unknown;
4516
+ };
4440
4517
  };
4441
4518
  };
4442
4519
  /** @description Bad Request */
@@ -4969,7 +5046,9 @@ export interface operations {
4969
5046
  name: string;
4970
5047
  description: string | null;
4971
5048
  /** @description arbitrary */
4972
- customData: Record<string, never>;
5049
+ customData: {
5050
+ [key: string]: unknown;
5051
+ };
4973
5052
  isMfaRequired: boolean;
4974
5053
  color: {
4975
5054
  /** Format: regex */
@@ -5054,8 +5133,12 @@ export interface operations {
5054
5133
  /** @enum {string} */
5055
5134
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
5056
5135
  oidcClientMetadata: {
5057
- redirectUris: Record<string, never>[];
5058
- postLogoutRedirectUris: Record<string, never>[];
5136
+ redirectUris: {
5137
+ [key: string]: unknown;
5138
+ }[];
5139
+ postLogoutRedirectUris: {
5140
+ [key: string]: unknown;
5141
+ }[];
5059
5142
  /** Format: url */
5060
5143
  backchannelLogoutUri?: string;
5061
5144
  backchannelLogoutSessionRequired?: boolean;
@@ -5080,6 +5163,7 @@ export interface operations {
5080
5163
  pageRules: {
5081
5164
  path: string;
5082
5165
  }[];
5166
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
5083
5167
  customDomains?: {
5084
5168
  domain: string;
5085
5169
  /** @enum {string} */
@@ -5104,8 +5188,11 @@ export interface operations {
5104
5188
  }[];
5105
5189
  } | null;
5106
5190
  /** @description arbitrary */
5107
- customData: Record<string, never>;
5191
+ customData: {
5192
+ [key: string]: unknown;
5193
+ };
5108
5194
  isThirdParty: boolean;
5195
+ appLevelAccessControlEnabled: boolean;
5109
5196
  createdAt: number;
5110
5197
  };
5111
5198
  };
@@ -5270,6 +5357,13 @@ export interface operations {
5270
5357
  };
5271
5358
  content?: never;
5272
5359
  };
5360
+ /** @description Internal Server Error */
5361
+ 500: {
5362
+ headers: {
5363
+ [name: string]: unknown;
5364
+ };
5365
+ content?: never;
5366
+ };
5273
5367
  };
5274
5368
  };
5275
5369
  DeleteApplicationSecret: {
@@ -5321,6 +5415,13 @@ export interface operations {
5321
5415
  };
5322
5416
  content?: never;
5323
5417
  };
5418
+ /** @description Internal Server Error */
5419
+ 500: {
5420
+ headers: {
5421
+ [name: string]: unknown;
5422
+ };
5423
+ content?: never;
5424
+ };
5324
5425
  };
5325
5426
  };
5326
5427
  UpdateApplicationSecret: {
@@ -5395,6 +5496,13 @@ export interface operations {
5395
5496
  };
5396
5497
  content?: never;
5397
5498
  };
5499
+ /** @description Internal Server Error */
5500
+ 500: {
5501
+ headers: {
5502
+ [name: string]: unknown;
5503
+ };
5504
+ content?: never;
5505
+ };
5398
5506
  };
5399
5507
  };
5400
5508
  ListApplicationUserConsentScopes: {
@@ -5855,7 +5963,9 @@ export interface operations {
5855
5963
  name: string;
5856
5964
  description: string | null;
5857
5965
  /** @description arbitrary */
5858
- customData: Record<string, never>;
5966
+ customData: {
5967
+ [key: string]: unknown;
5968
+ };
5859
5969
  isMfaRequired: boolean;
5860
5970
  color: {
5861
5971
  /** Format: regex */
@@ -6352,6 +6462,9 @@ export interface operations {
6352
6462
  createdAt: number;
6353
6463
  /** @enum {string} */
6354
6464
  signingKeyAlgorithm?: "RSA" | "EC";
6465
+ /** @enum {string} */
6466
+ status?: "Next" | "Current" | "Previous";
6467
+ effectiveAt?: number;
6355
6468
  }[];
6356
6469
  };
6357
6470
  };
@@ -6456,6 +6569,7 @@ export interface operations {
6456
6569
  * @enum {string}
6457
6570
  */
6458
6571
  signingKeyAlgorithm?: "RSA" | "EC";
6572
+ rotationGracePeriod?: number;
6459
6573
  };
6460
6574
  };
6461
6575
  };
@@ -6471,6 +6585,9 @@ export interface operations {
6471
6585
  createdAt: number;
6472
6586
  /** @enum {string} */
6473
6587
  signingKeyAlgorithm?: "RSA" | "EC";
6588
+ /** @enum {string} */
6589
+ status?: "Next" | "Current" | "Previous";
6590
+ effectiveAt?: number;
6474
6591
  }[];
6475
6592
  };
6476
6593
  };
@@ -6536,12 +6653,16 @@ export interface operations {
6536
6653
  name?: string | null;
6537
6654
  avatar?: string | null;
6538
6655
  /** @description arbitrary */
6539
- customData?: Record<string, never>;
6656
+ customData?: {
6657
+ [key: string]: unknown;
6658
+ };
6540
6659
  identities?: {
6541
6660
  [key: string]: {
6542
6661
  userId: string;
6543
6662
  /** @description arbitrary */
6544
- details?: Record<string, never>;
6663
+ details?: {
6664
+ [key: string]: unknown;
6665
+ };
6545
6666
  };
6546
6667
  };
6547
6668
  lastSignInAt?: number | null;
@@ -6575,7 +6696,9 @@ export interface operations {
6575
6696
  issuer: string;
6576
6697
  identityId: string;
6577
6698
  /** @description arbitrary */
6578
- detail: Record<string, never>;
6699
+ detail: {
6700
+ [key: string]: unknown;
6701
+ };
6579
6702
  }[];
6580
6703
  mfaVerificationFactors?: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
6581
6704
  roles?: {
@@ -6612,7 +6735,9 @@ export interface operations {
6612
6735
  /** Format: "urn:ietf:params:oauth:grant-type:token-exchange" */
6613
6736
  type?: string;
6614
6737
  /** @description arbitrary */
6615
- subjectTokenContext?: Record<string, never>;
6738
+ subjectTokenContext?: {
6739
+ [key: string]: unknown;
6740
+ };
6616
6741
  };
6617
6742
  interaction?: {
6618
6743
  /** @enum {string} */
@@ -6686,7 +6811,11 @@ export interface operations {
6686
6811
  phone?: string;
6687
6812
  name?: string;
6688
6813
  avatar?: string;
6689
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
6814
+ rawData?: ({
6815
+ [key: string]: unknown;
6816
+ } | (string | number | boolean | (string | null) | {
6817
+ [key: string]: unknown;
6818
+ })[] | string | number | boolean) | null;
6690
6819
  };
6691
6820
  } | {
6692
6821
  id: string;
@@ -6699,7 +6828,11 @@ export interface operations {
6699
6828
  phone?: string;
6700
6829
  name?: string;
6701
6830
  avatar?: string;
6702
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
6831
+ rawData?: ({
6832
+ [key: string]: unknown;
6833
+ } | (string | number | boolean | (string | null) | {
6834
+ [key: string]: unknown;
6835
+ })[] | string | number | boolean) | null;
6703
6836
  };
6704
6837
  issuer?: string;
6705
6838
  } | {
@@ -6763,8 +6896,12 @@ export interface operations {
6763
6896
  /** @enum {string} */
6764
6897
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
6765
6898
  oidcClientMetadata?: {
6766
- redirectUris: Record<string, never>[];
6767
- postLogoutRedirectUris: Record<string, never>[];
6899
+ redirectUris: {
6900
+ [key: string]: unknown;
6901
+ }[];
6902
+ postLogoutRedirectUris: {
6903
+ [key: string]: unknown;
6904
+ }[];
6768
6905
  /** Format: url */
6769
6906
  backchannelLogoutUri?: string;
6770
6907
  backchannelLogoutSessionRequired?: boolean;
@@ -6789,6 +6926,7 @@ export interface operations {
6789
6926
  pageRules: {
6790
6927
  path: string;
6791
6928
  }[];
6929
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
6792
6930
  customDomains?: {
6793
6931
  domain: string;
6794
6932
  /** @enum {string} */
@@ -6813,11 +6951,15 @@ export interface operations {
6813
6951
  }[];
6814
6952
  } | null;
6815
6953
  /** @description arbitrary */
6816
- customData?: Record<string, never>;
6954
+ customData?: {
6955
+ [key: string]: unknown;
6956
+ };
6817
6957
  isThirdParty?: boolean;
6958
+ appLevelAccessControlEnabled?: boolean;
6818
6959
  createdAt?: number;
6819
6960
  };
6820
6961
  };
6962
+ blockIssuanceOnError?: boolean;
6821
6963
  tokenSample?: {
6822
6964
  jti?: string;
6823
6965
  aud?: string | string[];
@@ -6846,8 +6988,12 @@ export interface operations {
6846
6988
  /** @enum {string} */
6847
6989
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
6848
6990
  oidcClientMetadata?: {
6849
- redirectUris: Record<string, never>[];
6850
- postLogoutRedirectUris: Record<string, never>[];
6991
+ redirectUris: {
6992
+ [key: string]: unknown;
6993
+ }[];
6994
+ postLogoutRedirectUris: {
6995
+ [key: string]: unknown;
6996
+ }[];
6851
6997
  /** Format: url */
6852
6998
  backchannelLogoutUri?: string;
6853
6999
  backchannelLogoutSessionRequired?: boolean;
@@ -6872,6 +7018,7 @@ export interface operations {
6872
7018
  pageRules: {
6873
7019
  path: string;
6874
7020
  }[];
7021
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
6875
7022
  customDomains?: {
6876
7023
  domain: string;
6877
7024
  /** @enum {string} */
@@ -6896,11 +7043,15 @@ export interface operations {
6896
7043
  }[];
6897
7044
  } | null;
6898
7045
  /** @description arbitrary */
6899
- customData?: Record<string, never>;
7046
+ customData?: {
7047
+ [key: string]: unknown;
7048
+ };
6900
7049
  isThirdParty?: boolean;
7050
+ appLevelAccessControlEnabled?: boolean;
6901
7051
  createdAt?: number;
6902
7052
  };
6903
7053
  };
7054
+ blockIssuanceOnError?: boolean;
6904
7055
  tokenSample?: {
6905
7056
  jti?: string;
6906
7057
  aud?: string | string[];
@@ -6963,6 +7114,8 @@ export interface operations {
6963
7114
  contextSample?: unknown;
6964
7115
  /** @description The sample raw token payload for the JWT customizer script testing purpose. */
6965
7116
  tokenSample?: unknown;
7117
+ /** @description Whether to block token issuance when the JWT customizer script fails. */
7118
+ blockIssuanceOnError?: unknown;
6966
7119
  };
6967
7120
  };
6968
7121
  };
@@ -6987,12 +7140,16 @@ export interface operations {
6987
7140
  name?: string | null;
6988
7141
  avatar?: string | null;
6989
7142
  /** @description arbitrary */
6990
- customData?: Record<string, never>;
7143
+ customData?: {
7144
+ [key: string]: unknown;
7145
+ };
6991
7146
  identities?: {
6992
7147
  [key: string]: {
6993
7148
  userId: string;
6994
7149
  /** @description arbitrary */
6995
- details?: Record<string, never>;
7150
+ details?: {
7151
+ [key: string]: unknown;
7152
+ };
6996
7153
  };
6997
7154
  };
6998
7155
  lastSignInAt?: number | null;
@@ -7026,7 +7183,9 @@ export interface operations {
7026
7183
  issuer: string;
7027
7184
  identityId: string;
7028
7185
  /** @description arbitrary */
7029
- detail: Record<string, never>;
7186
+ detail: {
7187
+ [key: string]: unknown;
7188
+ };
7030
7189
  }[];
7031
7190
  mfaVerificationFactors?: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
7032
7191
  roles?: {
@@ -7063,7 +7222,9 @@ export interface operations {
7063
7222
  /** Format: "urn:ietf:params:oauth:grant-type:token-exchange" */
7064
7223
  type?: string;
7065
7224
  /** @description arbitrary */
7066
- subjectTokenContext?: Record<string, never>;
7225
+ subjectTokenContext?: {
7226
+ [key: string]: unknown;
7227
+ };
7067
7228
  };
7068
7229
  interaction?: {
7069
7230
  /** @enum {string} */
@@ -7137,7 +7298,11 @@ export interface operations {
7137
7298
  phone?: string;
7138
7299
  name?: string;
7139
7300
  avatar?: string;
7140
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
7301
+ rawData?: ({
7302
+ [key: string]: unknown;
7303
+ } | (string | number | boolean | (string | null) | {
7304
+ [key: string]: unknown;
7305
+ })[] | string | number | boolean) | null;
7141
7306
  };
7142
7307
  } | {
7143
7308
  id: string;
@@ -7150,7 +7315,11 @@ export interface operations {
7150
7315
  phone?: string;
7151
7316
  name?: string;
7152
7317
  avatar?: string;
7153
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
7318
+ rawData?: ({
7319
+ [key: string]: unknown;
7320
+ } | (string | number | boolean | (string | null) | {
7321
+ [key: string]: unknown;
7322
+ })[] | string | number | boolean) | null;
7154
7323
  };
7155
7324
  issuer?: string;
7156
7325
  } | {
@@ -7214,8 +7383,12 @@ export interface operations {
7214
7383
  /** @enum {string} */
7215
7384
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
7216
7385
  oidcClientMetadata?: {
7217
- redirectUris: Record<string, never>[];
7218
- postLogoutRedirectUris: Record<string, never>[];
7386
+ redirectUris: {
7387
+ [key: string]: unknown;
7388
+ }[];
7389
+ postLogoutRedirectUris: {
7390
+ [key: string]: unknown;
7391
+ }[];
7219
7392
  /** Format: url */
7220
7393
  backchannelLogoutUri?: string;
7221
7394
  backchannelLogoutSessionRequired?: boolean;
@@ -7240,6 +7413,7 @@ export interface operations {
7240
7413
  pageRules: {
7241
7414
  path: string;
7242
7415
  }[];
7416
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
7243
7417
  customDomains?: {
7244
7418
  domain: string;
7245
7419
  /** @enum {string} */
@@ -7264,11 +7438,15 @@ export interface operations {
7264
7438
  }[];
7265
7439
  } | null;
7266
7440
  /** @description arbitrary */
7267
- customData?: Record<string, never>;
7441
+ customData?: {
7442
+ [key: string]: unknown;
7443
+ };
7268
7444
  isThirdParty?: boolean;
7445
+ appLevelAccessControlEnabled?: boolean;
7269
7446
  createdAt?: number;
7270
7447
  };
7271
7448
  };
7449
+ blockIssuanceOnError?: boolean;
7272
7450
  tokenSample?: {
7273
7451
  jti?: string;
7274
7452
  aud?: string | string[];
@@ -7297,8 +7475,12 @@ export interface operations {
7297
7475
  /** @enum {string} */
7298
7476
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
7299
7477
  oidcClientMetadata?: {
7300
- redirectUris: Record<string, never>[];
7301
- postLogoutRedirectUris: Record<string, never>[];
7478
+ redirectUris: {
7479
+ [key: string]: unknown;
7480
+ }[];
7481
+ postLogoutRedirectUris: {
7482
+ [key: string]: unknown;
7483
+ }[];
7302
7484
  /** Format: url */
7303
7485
  backchannelLogoutUri?: string;
7304
7486
  backchannelLogoutSessionRequired?: boolean;
@@ -7323,6 +7505,7 @@ export interface operations {
7323
7505
  pageRules: {
7324
7506
  path: string;
7325
7507
  }[];
7508
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
7326
7509
  customDomains?: {
7327
7510
  domain: string;
7328
7511
  /** @enum {string} */
@@ -7347,11 +7530,15 @@ export interface operations {
7347
7530
  }[];
7348
7531
  } | null;
7349
7532
  /** @description arbitrary */
7350
- customData?: Record<string, never>;
7533
+ customData?: {
7534
+ [key: string]: unknown;
7535
+ };
7351
7536
  isThirdParty?: boolean;
7537
+ appLevelAccessControlEnabled?: boolean;
7352
7538
  createdAt?: number;
7353
7539
  };
7354
7540
  };
7541
+ blockIssuanceOnError?: boolean;
7355
7542
  tokenSample?: {
7356
7543
  jti?: string;
7357
7544
  aud?: string | string[];
@@ -7383,12 +7570,16 @@ export interface operations {
7383
7570
  name?: string | null;
7384
7571
  avatar?: string | null;
7385
7572
  /** @description arbitrary */
7386
- customData?: Record<string, never>;
7573
+ customData?: {
7574
+ [key: string]: unknown;
7575
+ };
7387
7576
  identities?: {
7388
7577
  [key: string]: {
7389
7578
  userId: string;
7390
7579
  /** @description arbitrary */
7391
- details?: Record<string, never>;
7580
+ details?: {
7581
+ [key: string]: unknown;
7582
+ };
7392
7583
  };
7393
7584
  };
7394
7585
  lastSignInAt?: number | null;
@@ -7422,7 +7613,9 @@ export interface operations {
7422
7613
  issuer: string;
7423
7614
  identityId: string;
7424
7615
  /** @description arbitrary */
7425
- detail: Record<string, never>;
7616
+ detail: {
7617
+ [key: string]: unknown;
7618
+ };
7426
7619
  }[];
7427
7620
  mfaVerificationFactors?: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
7428
7621
  roles?: {
@@ -7459,7 +7652,9 @@ export interface operations {
7459
7652
  /** Format: "urn:ietf:params:oauth:grant-type:token-exchange" */
7460
7653
  type?: string;
7461
7654
  /** @description arbitrary */
7462
- subjectTokenContext?: Record<string, never>;
7655
+ subjectTokenContext?: {
7656
+ [key: string]: unknown;
7657
+ };
7463
7658
  };
7464
7659
  interaction?: {
7465
7660
  /** @enum {string} */
@@ -7533,7 +7728,11 @@ export interface operations {
7533
7728
  phone?: string;
7534
7729
  name?: string;
7535
7730
  avatar?: string;
7536
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
7731
+ rawData?: ({
7732
+ [key: string]: unknown;
7733
+ } | (string | number | boolean | (string | null) | {
7734
+ [key: string]: unknown;
7735
+ })[] | string | number | boolean) | null;
7537
7736
  };
7538
7737
  } | {
7539
7738
  id: string;
@@ -7546,7 +7745,11 @@ export interface operations {
7546
7745
  phone?: string;
7547
7746
  name?: string;
7548
7747
  avatar?: string;
7549
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
7748
+ rawData?: ({
7749
+ [key: string]: unknown;
7750
+ } | (string | number | boolean | (string | null) | {
7751
+ [key: string]: unknown;
7752
+ })[] | string | number | boolean) | null;
7550
7753
  };
7551
7754
  issuer?: string;
7552
7755
  } | {
@@ -7610,8 +7813,12 @@ export interface operations {
7610
7813
  /** @enum {string} */
7611
7814
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
7612
7815
  oidcClientMetadata?: {
7613
- redirectUris: Record<string, never>[];
7614
- postLogoutRedirectUris: Record<string, never>[];
7816
+ redirectUris: {
7817
+ [key: string]: unknown;
7818
+ }[];
7819
+ postLogoutRedirectUris: {
7820
+ [key: string]: unknown;
7821
+ }[];
7615
7822
  /** Format: url */
7616
7823
  backchannelLogoutUri?: string;
7617
7824
  backchannelLogoutSessionRequired?: boolean;
@@ -7636,6 +7843,7 @@ export interface operations {
7636
7843
  pageRules: {
7637
7844
  path: string;
7638
7845
  }[];
7846
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
7639
7847
  customDomains?: {
7640
7848
  domain: string;
7641
7849
  /** @enum {string} */
@@ -7660,11 +7868,15 @@ export interface operations {
7660
7868
  }[];
7661
7869
  } | null;
7662
7870
  /** @description arbitrary */
7663
- customData?: Record<string, never>;
7871
+ customData?: {
7872
+ [key: string]: unknown;
7873
+ };
7664
7874
  isThirdParty?: boolean;
7875
+ appLevelAccessControlEnabled?: boolean;
7665
7876
  createdAt?: number;
7666
7877
  };
7667
7878
  };
7879
+ blockIssuanceOnError?: boolean;
7668
7880
  tokenSample?: {
7669
7881
  jti?: string;
7670
7882
  aud?: string | string[];
@@ -7693,8 +7905,12 @@ export interface operations {
7693
7905
  /** @enum {string} */
7694
7906
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
7695
7907
  oidcClientMetadata?: {
7696
- redirectUris: Record<string, never>[];
7697
- postLogoutRedirectUris: Record<string, never>[];
7908
+ redirectUris: {
7909
+ [key: string]: unknown;
7910
+ }[];
7911
+ postLogoutRedirectUris: {
7912
+ [key: string]: unknown;
7913
+ }[];
7698
7914
  /** Format: url */
7699
7915
  backchannelLogoutUri?: string;
7700
7916
  backchannelLogoutSessionRequired?: boolean;
@@ -7719,6 +7935,7 @@ export interface operations {
7719
7935
  pageRules: {
7720
7936
  path: string;
7721
7937
  }[];
7938
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
7722
7939
  customDomains?: {
7723
7940
  domain: string;
7724
7941
  /** @enum {string} */
@@ -7743,11 +7960,15 @@ export interface operations {
7743
7960
  }[];
7744
7961
  } | null;
7745
7962
  /** @description arbitrary */
7746
- customData?: Record<string, never>;
7963
+ customData?: {
7964
+ [key: string]: unknown;
7965
+ };
7747
7966
  isThirdParty?: boolean;
7967
+ appLevelAccessControlEnabled?: boolean;
7748
7968
  createdAt?: number;
7749
7969
  };
7750
7970
  };
7971
+ blockIssuanceOnError?: boolean;
7751
7972
  tokenSample?: {
7752
7973
  jti?: string;
7753
7974
  aud?: string | string[];
@@ -7852,6 +8073,8 @@ export interface operations {
7852
8073
  contextSample?: unknown;
7853
8074
  /** @description The sample raw token payload for the JWT customizer script testing purpose. */
7854
8075
  tokenSample?: unknown;
8076
+ /** @description Whether to block token issuance when the JWT customizer script fails. */
8077
+ blockIssuanceOnError?: unknown;
7855
8078
  };
7856
8079
  };
7857
8080
  };
@@ -7876,12 +8099,16 @@ export interface operations {
7876
8099
  name?: string | null;
7877
8100
  avatar?: string | null;
7878
8101
  /** @description arbitrary */
7879
- customData?: Record<string, never>;
8102
+ customData?: {
8103
+ [key: string]: unknown;
8104
+ };
7880
8105
  identities?: {
7881
8106
  [key: string]: {
7882
8107
  userId: string;
7883
8108
  /** @description arbitrary */
7884
- details?: Record<string, never>;
8109
+ details?: {
8110
+ [key: string]: unknown;
8111
+ };
7885
8112
  };
7886
8113
  };
7887
8114
  lastSignInAt?: number | null;
@@ -7915,7 +8142,9 @@ export interface operations {
7915
8142
  issuer: string;
7916
8143
  identityId: string;
7917
8144
  /** @description arbitrary */
7918
- detail: Record<string, never>;
8145
+ detail: {
8146
+ [key: string]: unknown;
8147
+ };
7919
8148
  }[];
7920
8149
  mfaVerificationFactors?: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
7921
8150
  roles?: {
@@ -7952,7 +8181,9 @@ export interface operations {
7952
8181
  /** Format: "urn:ietf:params:oauth:grant-type:token-exchange" */
7953
8182
  type?: string;
7954
8183
  /** @description arbitrary */
7955
- subjectTokenContext?: Record<string, never>;
8184
+ subjectTokenContext?: {
8185
+ [key: string]: unknown;
8186
+ };
7956
8187
  };
7957
8188
  interaction?: {
7958
8189
  /** @enum {string} */
@@ -8026,7 +8257,11 @@ export interface operations {
8026
8257
  phone?: string;
8027
8258
  name?: string;
8028
8259
  avatar?: string;
8029
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
8260
+ rawData?: ({
8261
+ [key: string]: unknown;
8262
+ } | (string | number | boolean | (string | null) | {
8263
+ [key: string]: unknown;
8264
+ })[] | string | number | boolean) | null;
8030
8265
  };
8031
8266
  } | {
8032
8267
  id: string;
@@ -8039,7 +8274,11 @@ export interface operations {
8039
8274
  phone?: string;
8040
8275
  name?: string;
8041
8276
  avatar?: string;
8042
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
8277
+ rawData?: ({
8278
+ [key: string]: unknown;
8279
+ } | (string | number | boolean | (string | null) | {
8280
+ [key: string]: unknown;
8281
+ })[] | string | number | boolean) | null;
8043
8282
  };
8044
8283
  issuer?: string;
8045
8284
  } | {
@@ -8103,8 +8342,12 @@ export interface operations {
8103
8342
  /** @enum {string} */
8104
8343
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
8105
8344
  oidcClientMetadata?: {
8106
- redirectUris: Record<string, never>[];
8107
- postLogoutRedirectUris: Record<string, never>[];
8345
+ redirectUris: {
8346
+ [key: string]: unknown;
8347
+ }[];
8348
+ postLogoutRedirectUris: {
8349
+ [key: string]: unknown;
8350
+ }[];
8108
8351
  /** Format: url */
8109
8352
  backchannelLogoutUri?: string;
8110
8353
  backchannelLogoutSessionRequired?: boolean;
@@ -8129,6 +8372,7 @@ export interface operations {
8129
8372
  pageRules: {
8130
8373
  path: string;
8131
8374
  }[];
8375
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
8132
8376
  customDomains?: {
8133
8377
  domain: string;
8134
8378
  /** @enum {string} */
@@ -8153,11 +8397,15 @@ export interface operations {
8153
8397
  }[];
8154
8398
  } | null;
8155
8399
  /** @description arbitrary */
8156
- customData?: Record<string, never>;
8400
+ customData?: {
8401
+ [key: string]: unknown;
8402
+ };
8157
8403
  isThirdParty?: boolean;
8404
+ appLevelAccessControlEnabled?: boolean;
8158
8405
  createdAt?: number;
8159
8406
  };
8160
8407
  };
8408
+ blockIssuanceOnError?: boolean;
8161
8409
  tokenSample?: {
8162
8410
  jti?: string;
8163
8411
  aud?: string | string[];
@@ -8186,8 +8434,12 @@ export interface operations {
8186
8434
  /** @enum {string} */
8187
8435
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
8188
8436
  oidcClientMetadata?: {
8189
- redirectUris: Record<string, never>[];
8190
- postLogoutRedirectUris: Record<string, never>[];
8437
+ redirectUris: {
8438
+ [key: string]: unknown;
8439
+ }[];
8440
+ postLogoutRedirectUris: {
8441
+ [key: string]: unknown;
8442
+ }[];
8191
8443
  /** Format: url */
8192
8444
  backchannelLogoutUri?: string;
8193
8445
  backchannelLogoutSessionRequired?: boolean;
@@ -8212,6 +8464,7 @@ export interface operations {
8212
8464
  pageRules: {
8213
8465
  path: string;
8214
8466
  }[];
8467
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
8215
8468
  customDomains?: {
8216
8469
  domain: string;
8217
8470
  /** @enum {string} */
@@ -8236,11 +8489,15 @@ export interface operations {
8236
8489
  }[];
8237
8490
  } | null;
8238
8491
  /** @description arbitrary */
8239
- customData?: Record<string, never>;
8492
+ customData?: {
8493
+ [key: string]: unknown;
8494
+ };
8240
8495
  isThirdParty?: boolean;
8496
+ appLevelAccessControlEnabled?: boolean;
8241
8497
  createdAt?: number;
8242
8498
  };
8243
8499
  };
8500
+ blockIssuanceOnError?: boolean;
8244
8501
  tokenSample?: {
8245
8502
  jti?: string;
8246
8503
  aud?: string | string[];
@@ -8314,12 +8571,16 @@ export interface operations {
8314
8571
  name?: string | null;
8315
8572
  avatar?: string | null;
8316
8573
  /** @description arbitrary */
8317
- customData?: Record<string, never>;
8574
+ customData?: {
8575
+ [key: string]: unknown;
8576
+ };
8318
8577
  identities?: {
8319
8578
  [key: string]: {
8320
8579
  userId: string;
8321
8580
  /** @description arbitrary */
8322
- details?: Record<string, never>;
8581
+ details?: {
8582
+ [key: string]: unknown;
8583
+ };
8323
8584
  };
8324
8585
  };
8325
8586
  lastSignInAt?: number | null;
@@ -8353,7 +8614,9 @@ export interface operations {
8353
8614
  issuer: string;
8354
8615
  identityId: string;
8355
8616
  /** @description arbitrary */
8356
- detail: Record<string, never>;
8617
+ detail: {
8618
+ [key: string]: unknown;
8619
+ };
8357
8620
  }[];
8358
8621
  mfaVerificationFactors?: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
8359
8622
  roles?: {
@@ -8390,7 +8653,9 @@ export interface operations {
8390
8653
  /** Format: "urn:ietf:params:oauth:grant-type:token-exchange" */
8391
8654
  type?: string;
8392
8655
  /** @description arbitrary */
8393
- subjectTokenContext?: Record<string, never>;
8656
+ subjectTokenContext?: {
8657
+ [key: string]: unknown;
8658
+ };
8394
8659
  };
8395
8660
  interaction?: {
8396
8661
  /** @enum {string} */
@@ -8464,7 +8729,11 @@ export interface operations {
8464
8729
  phone?: string;
8465
8730
  name?: string;
8466
8731
  avatar?: string;
8467
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
8732
+ rawData?: ({
8733
+ [key: string]: unknown;
8734
+ } | (string | number | boolean | (string | null) | {
8735
+ [key: string]: unknown;
8736
+ })[] | string | number | boolean) | null;
8468
8737
  };
8469
8738
  } | {
8470
8739
  id: string;
@@ -8477,7 +8746,11 @@ export interface operations {
8477
8746
  phone?: string;
8478
8747
  name?: string;
8479
8748
  avatar?: string;
8480
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
8749
+ rawData?: ({
8750
+ [key: string]: unknown;
8751
+ } | (string | number | boolean | (string | null) | {
8752
+ [key: string]: unknown;
8753
+ })[] | string | number | boolean) | null;
8481
8754
  };
8482
8755
  issuer?: string;
8483
8756
  } | {
@@ -8541,8 +8814,12 @@ export interface operations {
8541
8814
  /** @enum {string} */
8542
8815
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
8543
8816
  oidcClientMetadata?: {
8544
- redirectUris: Record<string, never>[];
8545
- postLogoutRedirectUris: Record<string, never>[];
8817
+ redirectUris: {
8818
+ [key: string]: unknown;
8819
+ }[];
8820
+ postLogoutRedirectUris: {
8821
+ [key: string]: unknown;
8822
+ }[];
8546
8823
  /** Format: url */
8547
8824
  backchannelLogoutUri?: string;
8548
8825
  backchannelLogoutSessionRequired?: boolean;
@@ -8567,6 +8844,7 @@ export interface operations {
8567
8844
  pageRules: {
8568
8845
  path: string;
8569
8846
  }[];
8847
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
8570
8848
  customDomains?: {
8571
8849
  domain: string;
8572
8850
  /** @enum {string} */
@@ -8591,11 +8869,15 @@ export interface operations {
8591
8869
  }[];
8592
8870
  } | null;
8593
8871
  /** @description arbitrary */
8594
- customData?: Record<string, never>;
8872
+ customData?: {
8873
+ [key: string]: unknown;
8874
+ };
8595
8875
  isThirdParty?: boolean;
8876
+ appLevelAccessControlEnabled?: boolean;
8596
8877
  createdAt?: number;
8597
8878
  };
8598
8879
  };
8880
+ blockIssuanceOnError?: boolean;
8599
8881
  tokenSample?: {
8600
8882
  jti?: string;
8601
8883
  aud?: string | string[];
@@ -8628,8 +8910,12 @@ export interface operations {
8628
8910
  /** @enum {string} */
8629
8911
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
8630
8912
  oidcClientMetadata?: {
8631
- redirectUris: Record<string, never>[];
8632
- postLogoutRedirectUris: Record<string, never>[];
8913
+ redirectUris: {
8914
+ [key: string]: unknown;
8915
+ }[];
8916
+ postLogoutRedirectUris: {
8917
+ [key: string]: unknown;
8918
+ }[];
8633
8919
  /** Format: url */
8634
8920
  backchannelLogoutUri?: string;
8635
8921
  backchannelLogoutSessionRequired?: boolean;
@@ -8654,6 +8940,7 @@ export interface operations {
8654
8940
  pageRules: {
8655
8941
  path: string;
8656
8942
  }[];
8943
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
8657
8944
  customDomains?: {
8658
8945
  domain: string;
8659
8946
  /** @enum {string} */
@@ -8678,11 +8965,15 @@ export interface operations {
8678
8965
  }[];
8679
8966
  } | null;
8680
8967
  /** @description arbitrary */
8681
- customData?: Record<string, never>;
8968
+ customData?: {
8969
+ [key: string]: unknown;
8970
+ };
8682
8971
  isThirdParty?: boolean;
8972
+ appLevelAccessControlEnabled?: boolean;
8683
8973
  createdAt?: number;
8684
8974
  };
8685
8975
  };
8976
+ blockIssuanceOnError?: boolean;
8686
8977
  tokenSample?: {
8687
8978
  jti?: string;
8688
8979
  aud?: string | string[];
@@ -8763,12 +9054,16 @@ export interface operations {
8763
9054
  name?: string | null;
8764
9055
  avatar?: string | null;
8765
9056
  /** @description arbitrary */
8766
- customData?: Record<string, never>;
9057
+ customData?: {
9058
+ [key: string]: unknown;
9059
+ };
8767
9060
  identities?: {
8768
9061
  [key: string]: {
8769
9062
  userId: string;
8770
9063
  /** @description arbitrary */
8771
- details?: Record<string, never>;
9064
+ details?: {
9065
+ [key: string]: unknown;
9066
+ };
8772
9067
  };
8773
9068
  };
8774
9069
  lastSignInAt?: number | null;
@@ -8802,7 +9097,9 @@ export interface operations {
8802
9097
  issuer: string;
8803
9098
  identityId: string;
8804
9099
  /** @description arbitrary */
8805
- detail: Record<string, never>;
9100
+ detail: {
9101
+ [key: string]: unknown;
9102
+ };
8806
9103
  }[];
8807
9104
  mfaVerificationFactors?: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
8808
9105
  roles?: {
@@ -8839,7 +9136,9 @@ export interface operations {
8839
9136
  /** Format: "urn:ietf:params:oauth:grant-type:token-exchange" */
8840
9137
  type?: string;
8841
9138
  /** @description arbitrary */
8842
- subjectTokenContext?: Record<string, never>;
9139
+ subjectTokenContext?: {
9140
+ [key: string]: unknown;
9141
+ };
8843
9142
  };
8844
9143
  interaction?: {
8845
9144
  /** @enum {string} */
@@ -8913,7 +9212,11 @@ export interface operations {
8913
9212
  phone?: string;
8914
9213
  name?: string;
8915
9214
  avatar?: string;
8916
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
9215
+ rawData?: ({
9216
+ [key: string]: unknown;
9217
+ } | (string | number | boolean | (string | null) | {
9218
+ [key: string]: unknown;
9219
+ })[] | string | number | boolean) | null;
8917
9220
  };
8918
9221
  } | {
8919
9222
  id: string;
@@ -8926,7 +9229,11 @@ export interface operations {
8926
9229
  phone?: string;
8927
9230
  name?: string;
8928
9231
  avatar?: string;
8929
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
9232
+ rawData?: ({
9233
+ [key: string]: unknown;
9234
+ } | (string | number | boolean | (string | null) | {
9235
+ [key: string]: unknown;
9236
+ })[] | string | number | boolean) | null;
8930
9237
  };
8931
9238
  issuer?: string;
8932
9239
  } | {
@@ -8990,8 +9297,12 @@ export interface operations {
8990
9297
  /** @enum {string} */
8991
9298
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
8992
9299
  oidcClientMetadata?: {
8993
- redirectUris: Record<string, never>[];
8994
- postLogoutRedirectUris: Record<string, never>[];
9300
+ redirectUris: {
9301
+ [key: string]: unknown;
9302
+ }[];
9303
+ postLogoutRedirectUris: {
9304
+ [key: string]: unknown;
9305
+ }[];
8995
9306
  /** Format: url */
8996
9307
  backchannelLogoutUri?: string;
8997
9308
  backchannelLogoutSessionRequired?: boolean;
@@ -9016,6 +9327,7 @@ export interface operations {
9016
9327
  pageRules: {
9017
9328
  path: string;
9018
9329
  }[];
9330
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
9019
9331
  customDomains?: {
9020
9332
  domain: string;
9021
9333
  /** @enum {string} */
@@ -9040,8 +9352,11 @@ export interface operations {
9040
9352
  }[];
9041
9353
  } | null;
9042
9354
  /** @description arbitrary */
9043
- customData?: Record<string, never>;
9355
+ customData?: {
9356
+ [key: string]: unknown;
9357
+ };
9044
9358
  isThirdParty?: boolean;
9359
+ appLevelAccessControlEnabled?: boolean;
9045
9360
  createdAt?: number;
9046
9361
  };
9047
9362
  };
@@ -9069,8 +9384,12 @@ export interface operations {
9069
9384
  /** @enum {string} */
9070
9385
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
9071
9386
  oidcClientMetadata?: {
9072
- redirectUris: Record<string, never>[];
9073
- postLogoutRedirectUris: Record<string, never>[];
9387
+ redirectUris: {
9388
+ [key: string]: unknown;
9389
+ }[];
9390
+ postLogoutRedirectUris: {
9391
+ [key: string]: unknown;
9392
+ }[];
9074
9393
  /** Format: url */
9075
9394
  backchannelLogoutUri?: string;
9076
9395
  backchannelLogoutSessionRequired?: boolean;
@@ -9095,6 +9414,7 @@ export interface operations {
9095
9414
  pageRules: {
9096
9415
  path: string;
9097
9416
  }[];
9417
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
9098
9418
  customDomains?: {
9099
9419
  domain: string;
9100
9420
  /** @enum {string} */
@@ -9119,8 +9439,11 @@ export interface operations {
9119
9439
  }[];
9120
9440
  } | null;
9121
9441
  /** @description arbitrary */
9122
- customData?: Record<string, never>;
9442
+ customData?: {
9443
+ [key: string]: unknown;
9444
+ };
9123
9445
  isThirdParty?: boolean;
9446
+ appLevelAccessControlEnabled?: boolean;
9124
9447
  createdAt?: number;
9125
9448
  };
9126
9449
  };
@@ -9134,7 +9457,9 @@ export interface operations {
9134
9457
  [name: string]: unknown;
9135
9458
  };
9136
9459
  content: {
9137
- "application/json": Record<string, never>;
9460
+ "application/json": {
9461
+ [key: string]: unknown;
9462
+ };
9138
9463
  };
9139
9464
  };
9140
9465
  /** @description Zod errors in cloud service (data type does not match expectation, can be either request body or response body). */
@@ -9283,20 +9608,28 @@ export interface operations {
9283
9608
  syncProfile: boolean;
9284
9609
  enableTokenStorage: boolean;
9285
9610
  /** @description arbitrary */
9286
- config: Record<string, never>;
9611
+ config: {
9612
+ [key: string]: unknown;
9613
+ };
9287
9614
  metadata: {
9288
9615
  target?: string;
9289
9616
  /** @description Validator function */
9290
- name?: Record<string, never>;
9617
+ name?: {
9618
+ [key: string]: unknown;
9619
+ };
9291
9620
  logo?: string;
9292
9621
  logoDark?: string | null;
9293
9622
  };
9294
9623
  connectorId: string;
9295
9624
  target: string;
9296
9625
  /** @description Validator function */
9297
- name: Record<string, never>;
9626
+ name: {
9627
+ [key: string]: unknown;
9628
+ };
9298
9629
  /** @description Validator function */
9299
- description: Record<string, never>;
9630
+ description: {
9631
+ [key: string]: unknown;
9632
+ };
9300
9633
  logo: string;
9301
9634
  logoDark: string | null;
9302
9635
  readme: string;
@@ -9415,14 +9748,18 @@ export interface operations {
9415
9748
  content: {
9416
9749
  "application/json": {
9417
9750
  /** @description The connector config object that will be passed to the connector. The config object should be compatible with the connector factory. */
9418
- config?: Record<string, never>;
9751
+ config?: {
9752
+ [key: string]: unknown;
9753
+ };
9419
9754
  /** @description The connector factory ID for creating the connector. */
9420
9755
  connectorId: string;
9421
9756
  /** @description Custom connector metadata, will be used to overwrite the default connector factory metadata. */
9422
9757
  metadata?: {
9423
9758
  target?: string;
9424
9759
  /** @description Validator function */
9425
- name?: Record<string, never>;
9760
+ name?: {
9761
+ [key: string]: unknown;
9762
+ };
9426
9763
  logo?: string;
9427
9764
  logoDark?: string | null;
9428
9765
  };
@@ -9446,20 +9783,28 @@ export interface operations {
9446
9783
  syncProfile: boolean;
9447
9784
  enableTokenStorage: boolean;
9448
9785
  /** @description arbitrary */
9449
- config: Record<string, never>;
9786
+ config: {
9787
+ [key: string]: unknown;
9788
+ };
9450
9789
  metadata: {
9451
9790
  target?: string;
9452
9791
  /** @description Validator function */
9453
- name?: Record<string, never>;
9792
+ name?: {
9793
+ [key: string]: unknown;
9794
+ };
9454
9795
  logo?: string;
9455
9796
  logoDark?: string | null;
9456
9797
  };
9457
9798
  connectorId: string;
9458
9799
  target: string;
9459
9800
  /** @description Validator function */
9460
- name: Record<string, never>;
9801
+ name: {
9802
+ [key: string]: unknown;
9803
+ };
9461
9804
  /** @description Validator function */
9462
- description: Record<string, never>;
9805
+ description: {
9806
+ [key: string]: unknown;
9807
+ };
9463
9808
  logo: string;
9464
9809
  logoDark: string | null;
9465
9810
  readme: string;
@@ -9597,20 +9942,28 @@ export interface operations {
9597
9942
  syncProfile: boolean;
9598
9943
  enableTokenStorage: boolean;
9599
9944
  /** @description arbitrary */
9600
- config: Record<string, never>;
9945
+ config: {
9946
+ [key: string]: unknown;
9947
+ };
9601
9948
  metadata: {
9602
9949
  target?: string;
9603
9950
  /** @description Validator function */
9604
- name?: Record<string, never>;
9951
+ name?: {
9952
+ [key: string]: unknown;
9953
+ };
9605
9954
  logo?: string;
9606
9955
  logoDark?: string | null;
9607
9956
  };
9608
9957
  connectorId: string;
9609
9958
  target: string;
9610
9959
  /** @description Validator function */
9611
- name: Record<string, never>;
9960
+ name: {
9961
+ [key: string]: unknown;
9962
+ };
9612
9963
  /** @description Validator function */
9613
- description: Record<string, never>;
9964
+ description: {
9965
+ [key: string]: unknown;
9966
+ };
9614
9967
  logo: string;
9615
9968
  logoDark: string | null;
9616
9969
  readme: string;
@@ -9788,12 +10141,16 @@ export interface operations {
9788
10141
  content: {
9789
10142
  "application/json": {
9790
10143
  /** @description The connector config object that will be passed to the connector. The config object should be compatible with the connector factory. */
9791
- config?: Record<string, never>;
10144
+ config?: {
10145
+ [key: string]: unknown;
10146
+ };
9792
10147
  /** @description Custom connector metadata, will be used to overwrite the default connector metadata. */
9793
10148
  metadata?: {
9794
10149
  target?: string;
9795
10150
  /** @description Validator function */
9796
- name?: Record<string, never>;
10151
+ name?: {
10152
+ [key: string]: unknown;
10153
+ };
9797
10154
  logo?: string;
9798
10155
  logoDark?: string | null;
9799
10156
  };
@@ -9815,20 +10172,28 @@ export interface operations {
9815
10172
  syncProfile: boolean;
9816
10173
  enableTokenStorage: boolean;
9817
10174
  /** @description arbitrary */
9818
- config: Record<string, never>;
10175
+ config: {
10176
+ [key: string]: unknown;
10177
+ };
9819
10178
  metadata: {
9820
10179
  target?: string;
9821
10180
  /** @description Validator function */
9822
- name?: Record<string, never>;
10181
+ name?: {
10182
+ [key: string]: unknown;
10183
+ };
9823
10184
  logo?: string;
9824
10185
  logoDark?: string | null;
9825
10186
  };
9826
10187
  connectorId: string;
9827
10188
  target: string;
9828
10189
  /** @description Validator function */
9829
- name: Record<string, never>;
10190
+ name: {
10191
+ [key: string]: unknown;
10192
+ };
9830
10193
  /** @description Validator function */
9831
- description: Record<string, never>;
10194
+ description: {
10195
+ [key: string]: unknown;
10196
+ };
9832
10197
  logo: string;
9833
10198
  logoDark: string | null;
9834
10199
  readme: string;
@@ -9974,7 +10339,9 @@ export interface operations {
9974
10339
  */
9975
10340
  email?: string;
9976
10341
  /** @description Connector configuration object for testing. */
9977
- config: Record<string, never>;
10342
+ config: {
10343
+ [key: string]: unknown;
10344
+ };
9978
10345
  /** @description Preferred language for the message. If not set, the default language will be used. (Applicable only when custom i18n templates are configured.) */
9979
10346
  locale?: string;
9980
10347
  };
@@ -10105,9 +10472,13 @@ export interface operations {
10105
10472
  id: string;
10106
10473
  target: string;
10107
10474
  /** @description Validator function */
10108
- name: Record<string, never>;
10475
+ name: {
10476
+ [key: string]: unknown;
10477
+ };
10109
10478
  /** @description Validator function */
10110
- description: Record<string, never>;
10479
+ description: {
10480
+ [key: string]: unknown;
10481
+ };
10111
10482
  logo: string;
10112
10483
  logoDark: string | null;
10113
10484
  readme: string;
@@ -10226,9 +10597,13 @@ export interface operations {
10226
10597
  id: string;
10227
10598
  target: string;
10228
10599
  /** @description Validator function */
10229
- name: Record<string, never>;
10600
+ name: {
10601
+ [key: string]: unknown;
10602
+ };
10230
10603
  /** @description Validator function */
10231
- description: Record<string, never>;
10604
+ description: {
10605
+ [key: string]: unknown;
10606
+ };
10232
10607
  logo: string;
10233
10608
  logoDark: string | null;
10234
10609
  readme: string;
@@ -11065,6 +11440,13 @@ export interface operations {
11065
11440
  id: string;
11066
11441
  createdAt: number;
11067
11442
  } | null;
11443
+ /** @description Cloud only. Additional Content Security Policy source expressions for Custom UI assets. These values are applied to the hosted sign-in page only when Custom UI assets are configured. */
11444
+ customUiCsp: {
11445
+ /** @description Additional source expressions appended to the `script-src` directive for scripts loaded by Custom UI assets. HTTPS sources are supported. HTTP localhost sources are allowed only outside production. */
11446
+ scriptSrc?: string[];
11447
+ /** @description Additional source expressions appended to the `connect-src` directive for network requests made by Custom UI assets. HTTPS and WSS sources are supported. HTTP localhost sources are allowed only outside production. */
11448
+ connectSrc?: string[];
11449
+ };
11068
11450
  /** @description Password policies to adjust the password strength requirements. */
11069
11451
  passwordPolicy: {
11070
11452
  /** @default {} */
@@ -11134,6 +11516,9 @@ export interface operations {
11134
11516
  showPasskeyButton?: boolean;
11135
11517
  allowAutofill?: boolean;
11136
11518
  };
11519
+ signUpProfileFields: {
11520
+ name: string;
11521
+ }[] | null;
11137
11522
  };
11138
11523
  };
11139
11524
  };
@@ -11242,6 +11627,13 @@ export interface operations {
11242
11627
  id: string;
11243
11628
  createdAt: number;
11244
11629
  } | null;
11630
+ /** @description Cloud only. Configure additional Content Security Policy source expressions for Custom UI assets. These values are applied to the hosted sign-in page only when Custom UI assets are configured. */
11631
+ customUiCsp?: {
11632
+ /** @description Additional source expressions to append to the `script-src` directive for scripts loaded by Custom UI assets. Use HTTPS sources; HTTP localhost sources are allowed only outside production. */
11633
+ scriptSrc?: string[];
11634
+ /** @description Additional source expressions to append to the `connect-src` directive for network requests made by Custom UI assets. Use HTTPS or WSS sources; HTTP localhost sources are allowed only outside production. */
11635
+ connectSrc?: string[];
11636
+ };
11245
11637
  /** @description Password policies to adjust the password strength requirements. */
11246
11638
  passwordPolicy?: {
11247
11639
  /** @default {} */
@@ -11305,6 +11697,9 @@ export interface operations {
11305
11697
  showPasskeyButton?: boolean;
11306
11698
  allowAutofill?: boolean;
11307
11699
  };
11700
+ signUpProfileFields?: {
11701
+ name: string;
11702
+ }[] | null;
11308
11703
  termsOfUseUrl?: (string | null) | string;
11309
11704
  privacyPolicyUrl?: (string | null) | string;
11310
11705
  /** @description The support email address to display on the error pages. */
@@ -11386,6 +11781,10 @@ export interface operations {
11386
11781
  id: string;
11387
11782
  createdAt: number;
11388
11783
  } | null;
11784
+ customUiCsp: {
11785
+ scriptSrc?: string[];
11786
+ connectSrc?: string[];
11787
+ };
11389
11788
  passwordPolicy: {
11390
11789
  /** @default {} */
11391
11790
  length: {
@@ -11443,6 +11842,9 @@ export interface operations {
11443
11842
  showPasskeyButton?: boolean;
11444
11843
  allowAutofill?: boolean;
11445
11844
  };
11845
+ signUpProfileFields: {
11846
+ name: string;
11847
+ }[] | null;
11446
11848
  };
11447
11849
  };
11448
11850
  };
@@ -11633,12 +12035,16 @@ export interface operations {
11633
12035
  name: string | null;
11634
12036
  avatar: string | null;
11635
12037
  /** @description arbitrary */
11636
- customData: Record<string, never>;
12038
+ customData: {
12039
+ [key: string]: unknown;
12040
+ };
11637
12041
  identities: {
11638
12042
  [key: string]: {
11639
12043
  userId: string;
11640
12044
  /** @description arbitrary */
11641
- details?: Record<string, never>;
12045
+ details?: {
12046
+ [key: string]: unknown;
12047
+ };
11642
12048
  };
11643
12049
  };
11644
12050
  lastSignInAt: number | null;
@@ -11676,7 +12082,9 @@ export interface operations {
11676
12082
  issuer: string;
11677
12083
  identityId: string;
11678
12084
  /** @description arbitrary */
11679
- detail: Record<string, never>;
12085
+ detail: {
12086
+ [key: string]: unknown;
12087
+ };
11680
12088
  createdAt: number;
11681
12089
  updatedAt: number;
11682
12090
  ssoConnectorId: string;
@@ -11794,7 +12202,9 @@ export interface operations {
11794
12202
  /** @description Custom data object to update for the given user ID. Note this will replace the entire custom data object.
11795
12203
  *
11796
12204
  * If you want to perform a partial update, use the `PATCH /api/users/{userId}/custom-data` endpoint instead. */
11797
- customData?: Record<string, never>;
12205
+ customData?: {
12206
+ [key: string]: unknown;
12207
+ };
11798
12208
  profile?: {
11799
12209
  familyName?: string;
11800
12210
  givenName?: string;
@@ -11834,12 +12244,16 @@ export interface operations {
11834
12244
  name: string | null;
11835
12245
  avatar: string | null;
11836
12246
  /** @description arbitrary */
11837
- customData: Record<string, never>;
12247
+ customData: {
12248
+ [key: string]: unknown;
12249
+ };
11838
12250
  identities: {
11839
12251
  [key: string]: {
11840
12252
  userId: string;
11841
12253
  /** @description arbitrary */
11842
- details?: Record<string, never>;
12254
+ details?: {
12255
+ [key: string]: unknown;
12256
+ };
11843
12257
  };
11844
12258
  };
11845
12259
  lastSignInAt: number | null;
@@ -11876,7 +12290,9 @@ export interface operations {
11876
12290
  issuer: string;
11877
12291
  identityId: string;
11878
12292
  /** @description arbitrary */
11879
- detail: Record<string, never>;
12293
+ detail: {
12294
+ [key: string]: unknown;
12295
+ };
11880
12296
  createdAt: number;
11881
12297
  updatedAt: number;
11882
12298
  ssoConnectorId: string;
@@ -11942,7 +12358,9 @@ export interface operations {
11942
12358
  [name: string]: unknown;
11943
12359
  };
11944
12360
  content: {
11945
- "application/json": Record<string, never>;
12361
+ "application/json": {
12362
+ [key: string]: unknown;
12363
+ };
11946
12364
  };
11947
12365
  };
11948
12366
  /** @description Bad Request */
@@ -11982,7 +12400,9 @@ export interface operations {
11982
12400
  content: {
11983
12401
  "application/json": {
11984
12402
  /** @description Partial custom data object to update for the given user ID. */
11985
- customData: Record<string, never>;
12403
+ customData: {
12404
+ [key: string]: unknown;
12405
+ };
11986
12406
  };
11987
12407
  };
11988
12408
  };
@@ -11993,7 +12413,9 @@ export interface operations {
11993
12413
  [name: string]: unknown;
11994
12414
  };
11995
12415
  content: {
11996
- "application/json": Record<string, never>;
12416
+ "application/json": {
12417
+ [key: string]: unknown;
12418
+ };
11997
12419
  };
11998
12420
  };
11999
12421
  /** @description Bad Request */
@@ -12294,12 +12716,16 @@ export interface operations {
12294
12716
  name: string | null;
12295
12717
  avatar: string | null;
12296
12718
  /** @description arbitrary */
12297
- customData: Record<string, never>;
12719
+ customData: {
12720
+ [key: string]: unknown;
12721
+ };
12298
12722
  identities: {
12299
12723
  [key: string]: {
12300
12724
  userId: string;
12301
12725
  /** @description arbitrary */
12302
- details?: Record<string, never>;
12726
+ details?: {
12727
+ [key: string]: unknown;
12728
+ };
12303
12729
  };
12304
12730
  };
12305
12731
  lastSignInAt: number | null;
@@ -12336,7 +12762,9 @@ export interface operations {
12336
12762
  issuer: string;
12337
12763
  identityId: string;
12338
12764
  /** @description arbitrary */
12339
- detail: Record<string, never>;
12765
+ detail: {
12766
+ [key: string]: unknown;
12767
+ };
12340
12768
  createdAt: number;
12341
12769
  updatedAt: number;
12342
12770
  ssoConnectorId: string;
@@ -12407,7 +12835,9 @@ export interface operations {
12407
12835
  name?: string;
12408
12836
  avatar?: (string) | null;
12409
12837
  /** @description arbitrary */
12410
- customData?: Record<string, never>;
12838
+ customData?: {
12839
+ [key: string]: unknown;
12840
+ };
12411
12841
  profile?: {
12412
12842
  familyName?: string;
12413
12843
  givenName?: string;
@@ -12447,12 +12877,16 @@ export interface operations {
12447
12877
  name: string | null;
12448
12878
  avatar: string | null;
12449
12879
  /** @description arbitrary */
12450
- customData: Record<string, never>;
12880
+ customData: {
12881
+ [key: string]: unknown;
12882
+ };
12451
12883
  identities: {
12452
12884
  [key: string]: {
12453
12885
  userId: string;
12454
12886
  /** @description arbitrary */
12455
- details?: Record<string, never>;
12887
+ details?: {
12888
+ [key: string]: unknown;
12889
+ };
12456
12890
  };
12457
12891
  };
12458
12892
  lastSignInAt: number | null;
@@ -12489,7 +12923,9 @@ export interface operations {
12489
12923
  issuer: string;
12490
12924
  identityId: string;
12491
12925
  /** @description arbitrary */
12492
- detail: Record<string, never>;
12926
+ detail: {
12927
+ [key: string]: unknown;
12928
+ };
12493
12929
  createdAt: number;
12494
12930
  updatedAt: number;
12495
12931
  ssoConnectorId: string;
@@ -12570,12 +13006,16 @@ export interface operations {
12570
13006
  name: string | null;
12571
13007
  avatar: string | null;
12572
13008
  /** @description arbitrary */
12573
- customData: Record<string, never>;
13009
+ customData: {
13010
+ [key: string]: unknown;
13011
+ };
12574
13012
  identities: {
12575
13013
  [key: string]: {
12576
13014
  userId: string;
12577
13015
  /** @description arbitrary */
12578
- details?: Record<string, never>;
13016
+ details?: {
13017
+ [key: string]: unknown;
13018
+ };
12579
13019
  };
12580
13020
  };
12581
13021
  lastSignInAt: number | null;
@@ -12612,7 +13052,9 @@ export interface operations {
12612
13052
  issuer: string;
12613
13053
  identityId: string;
12614
13054
  /** @description arbitrary */
12615
- detail: Record<string, never>;
13055
+ detail: {
13056
+ [key: string]: unknown;
13057
+ };
12616
13058
  createdAt: number;
12617
13059
  updatedAt: number;
12618
13060
  ssoConnectorId: string;
@@ -12802,12 +13244,16 @@ export interface operations {
12802
13244
  name: string | null;
12803
13245
  avatar: string | null;
12804
13246
  /** @description arbitrary */
12805
- customData: Record<string, never>;
13247
+ customData: {
13248
+ [key: string]: unknown;
13249
+ };
12806
13250
  identities: {
12807
13251
  [key: string]: {
12808
13252
  userId: string;
12809
13253
  /** @description arbitrary */
12810
- details?: Record<string, never>;
13254
+ details?: {
13255
+ [key: string]: unknown;
13256
+ };
12811
13257
  };
12812
13258
  };
12813
13259
  lastSignInAt: number | null;
@@ -12844,7 +13290,9 @@ export interface operations {
12844
13290
  issuer: string;
12845
13291
  identityId: string;
12846
13292
  /** @description arbitrary */
12847
- detail: Record<string, never>;
13293
+ detail: {
13294
+ [key: string]: unknown;
13295
+ };
12848
13296
  createdAt: number;
12849
13297
  updatedAt: number;
12850
13298
  ssoConnectorId: string;
@@ -13169,7 +13617,9 @@ export interface operations {
13169
13617
  identity: {
13170
13618
  userId: string;
13171
13619
  /** @description arbitrary */
13172
- details?: Record<string, never>;
13620
+ details?: {
13621
+ [key: string]: unknown;
13622
+ };
13173
13623
  };
13174
13624
  /** @description The desensitized token set secret associated with the user's social identity.
13175
13625
  * This field is included only if the `includeTokenSecret` query parameter is provided and the corresponding connector has token storage enabled. */
@@ -13241,7 +13691,9 @@ export interface operations {
13241
13691
  /** @description The user's social identity ID. */
13242
13692
  userId: string;
13243
13693
  /** @description The user's social identity details. */
13244
- details?: Record<string, never>;
13694
+ details?: {
13695
+ [key: string]: unknown;
13696
+ };
13245
13697
  };
13246
13698
  };
13247
13699
  };
@@ -13256,7 +13708,9 @@ export interface operations {
13256
13708
  [key: string]: {
13257
13709
  userId: string;
13258
13710
  /** @description arbitrary */
13259
- details?: Record<string, never>;
13711
+ details?: {
13712
+ [key: string]: unknown;
13713
+ };
13260
13714
  };
13261
13715
  };
13262
13716
  };
@@ -13271,7 +13725,9 @@ export interface operations {
13271
13725
  [key: string]: {
13272
13726
  userId: string;
13273
13727
  /** @description arbitrary */
13274
- details?: Record<string, never>;
13728
+ details?: {
13729
+ [key: string]: unknown;
13730
+ };
13275
13731
  };
13276
13732
  };
13277
13733
  };
@@ -13340,12 +13796,16 @@ export interface operations {
13340
13796
  name: string | null;
13341
13797
  avatar: string | null;
13342
13798
  /** @description arbitrary */
13343
- customData: Record<string, never>;
13799
+ customData: {
13800
+ [key: string]: unknown;
13801
+ };
13344
13802
  identities: {
13345
13803
  [key: string]: {
13346
13804
  userId: string;
13347
13805
  /** @description arbitrary */
13348
- details?: Record<string, never>;
13806
+ details?: {
13807
+ [key: string]: unknown;
13808
+ };
13349
13809
  };
13350
13810
  };
13351
13811
  lastSignInAt: number | null;
@@ -13382,7 +13842,9 @@ export interface operations {
13382
13842
  issuer: string;
13383
13843
  identityId: string;
13384
13844
  /** @description arbitrary */
13385
- detail: Record<string, never>;
13845
+ detail: {
13846
+ [key: string]: unknown;
13847
+ };
13386
13848
  createdAt: number;
13387
13849
  updatedAt: number;
13388
13850
  ssoConnectorId: string;
@@ -13453,7 +13915,9 @@ export interface operations {
13453
13915
  [key: string]: {
13454
13916
  userId: string;
13455
13917
  /** @description arbitrary */
13456
- details?: Record<string, never>;
13918
+ details?: {
13919
+ [key: string]: unknown;
13920
+ };
13457
13921
  };
13458
13922
  };
13459
13923
  };
@@ -13519,7 +13983,9 @@ export interface operations {
13519
13983
  name: string;
13520
13984
  description: string | null;
13521
13985
  /** @description arbitrary */
13522
- customData: Record<string, never>;
13986
+ customData: {
13987
+ [key: string]: unknown;
13988
+ };
13523
13989
  isMfaRequired: boolean;
13524
13990
  color: {
13525
13991
  /** Format: regex */
@@ -14301,7 +14767,9 @@ export interface operations {
14301
14767
  issuer: string;
14302
14768
  identityId: string;
14303
14769
  /** @description arbitrary */
14304
- detail: Record<string, never>;
14770
+ detail: {
14771
+ [key: string]: unknown;
14772
+ };
14305
14773
  createdAt: number;
14306
14774
  updatedAt: number;
14307
14775
  ssoConnectorId: string;
@@ -14386,7 +14854,9 @@ export interface operations {
14386
14854
  identity: {
14387
14855
  userId: string;
14388
14856
  /** @description arbitrary */
14389
- details?: Record<string, never>;
14857
+ details?: {
14858
+ [key: string]: unknown;
14859
+ };
14390
14860
  };
14391
14861
  tokenSecret?: {
14392
14862
  tenantId: string;
@@ -14417,7 +14887,9 @@ export interface operations {
14417
14887
  issuer: string;
14418
14888
  identityId: string;
14419
14889
  /** @description arbitrary */
14420
- detail: Record<string, never>;
14890
+ detail: {
14891
+ [key: string]: unknown;
14892
+ };
14421
14893
  createdAt: number;
14422
14894
  updatedAt: number;
14423
14895
  ssoConnectorId: string;
@@ -14584,7 +15056,11 @@ export interface operations {
14584
15056
  phone?: string;
14585
15057
  name?: string;
14586
15058
  avatar?: string;
14587
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
15059
+ rawData?: ({
15060
+ [key: string]: unknown;
15061
+ } | (string | number | boolean | (string | null) | {
15062
+ [key: string]: unknown;
15063
+ })[] | string | number | boolean) | null;
14588
15064
  };
14589
15065
  } | {
14590
15066
  id: string;
@@ -14597,7 +15073,11 @@ export interface operations {
14597
15073
  phone?: string;
14598
15074
  name?: string;
14599
15075
  avatar?: string;
14600
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
15076
+ rawData?: ({
15077
+ [key: string]: unknown;
15078
+ } | (string | number | boolean | (string | null) | {
15079
+ [key: string]: unknown;
15080
+ })[] | string | number | boolean) | null;
14601
15081
  };
14602
15082
  issuer?: string;
14603
15083
  } | {
@@ -14800,7 +15280,11 @@ export interface operations {
14800
15280
  phone?: string;
14801
15281
  name?: string;
14802
15282
  avatar?: string;
14803
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
15283
+ rawData?: ({
15284
+ [key: string]: unknown;
15285
+ } | (string | number | boolean | (string | null) | {
15286
+ [key: string]: unknown;
15287
+ })[] | string | number | boolean) | null;
14804
15288
  };
14805
15289
  } | {
14806
15290
  id: string;
@@ -14813,7 +15297,11 @@ export interface operations {
14813
15297
  phone?: string;
14814
15298
  name?: string;
14815
15299
  avatar?: string;
14816
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
15300
+ rawData?: ({
15301
+ [key: string]: unknown;
15302
+ } | (string | number | boolean | (string | null) | {
15303
+ [key: string]: unknown;
15304
+ })[] | string | number | boolean) | null;
14817
15305
  };
14818
15306
  issuer?: string;
14819
15307
  } | {
@@ -14982,6 +15470,12 @@ export interface operations {
14982
15470
  applicationId?: string;
14983
15471
  /** @description Filter logs by log key. */
14984
15472
  logKey?: string;
15473
+ /** @description When `true`, short-circuits the underlying `count(*)` query: any tenant with more than 10,000 matching logs saturates `Total-Number` at the sentinel value `10001` and the response emits `Total-Number-Is-Capped: true`. The `Link` header then omits `rel="last"` and `rel="next"` because the real total is unknown. Default `false`; recommended `true` for any client whose tenant volume may exceed 10,000 matching logs to avoid `statement_timeout`. */
15474
+ enableCap?: string;
15475
+ /** @description Exclusive lower bound on `createdAt`, in unix milliseconds. When set, returns only logs where `createdAt > start_time`. Recommended for clients paginating across very large log ranges to keep query latency consistent. */
15476
+ start_time?: string;
15477
+ /** @description Exclusive upper bound on `createdAt`, in unix milliseconds. When set, returns only logs where `createdAt < end_time`. Returns `400` if `start_time >= end_time` when both are present. */
15478
+ end_time?: string;
14985
15479
  /** @description Page number (starts from 1). */
14986
15480
  page?: number;
14987
15481
  /** @description Entries per page. */
@@ -14996,6 +15490,12 @@ export interface operations {
14996
15490
  /** @description An array of logs that match the given query. */
14997
15491
  200: {
14998
15492
  headers: {
15493
+ /** @description When `enableCap=false`: exact match count. When `enableCap=true`: either the exact count (≤ 10,000) or the saturation sentinel `10001`; inspect `Total-Number-Is-Capped` to distinguish. */
15494
+ "Total-Number"?: number;
15495
+ /** @description Present and set to `true` only when `enableCap=true` and the result has more than 10,000 matching logs (in which case `Total-Number` is `10001`). Consumers should treat `Total-Number` as `> 10,000` when this header is present. */
15496
+ "Total-Number-Is-Capped"?: "true";
15497
+ /** @description Pagination links per RFC 5988. `rel="first"` and `rel="prev"` are emitted as usual. When the response is capped (`Total-Number-Is-Capped: true`), `rel="last"` and `rel="next"` are omitted because the saturated count makes the derived page count unreliable — clients should walk forward by incrementing `page` and stop on an empty response. */
15498
+ Link?: string;
14999
15499
  [name: string]: unknown;
15000
15500
  };
15001
15501
  content: {
@@ -15048,7 +15548,7 @@ export interface operations {
15048
15548
  }[];
15049
15549
  };
15050
15550
  };
15051
- /** @description Bad Request */
15551
+ /** @description Returned when `start_time` or `end_time` is not a finite number, or when `start_time >= end_time`. */
15052
15552
  400: {
15053
15553
  headers: {
15054
15554
  [name: string]: unknown;
@@ -15543,12 +16043,16 @@ export interface operations {
15543
16043
  name: string | null;
15544
16044
  avatar: string | null;
15545
16045
  /** @description arbitrary */
15546
- customData: Record<string, never>;
16046
+ customData: {
16047
+ [key: string]: unknown;
16048
+ };
15547
16049
  identities: {
15548
16050
  [key: string]: {
15549
16051
  userId: string;
15550
16052
  /** @description arbitrary */
15551
- details?: Record<string, never>;
16053
+ details?: {
16054
+ [key: string]: unknown;
16055
+ };
15552
16056
  };
15553
16057
  };
15554
16058
  lastSignInAt: number | null;
@@ -15585,7 +16089,9 @@ export interface operations {
15585
16089
  issuer: string;
15586
16090
  identityId: string;
15587
16091
  /** @description arbitrary */
15588
- detail: Record<string, never>;
16092
+ detail: {
16093
+ [key: string]: unknown;
16094
+ };
15589
16095
  createdAt: number;
15590
16096
  updatedAt: number;
15591
16097
  ssoConnectorId: string;
@@ -15775,8 +16281,12 @@ export interface operations {
15775
16281
  /** @enum {string} */
15776
16282
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
15777
16283
  oidcClientMetadata: {
15778
- redirectUris: Record<string, never>[];
15779
- postLogoutRedirectUris: Record<string, never>[];
16284
+ redirectUris: {
16285
+ [key: string]: unknown;
16286
+ }[];
16287
+ postLogoutRedirectUris: {
16288
+ [key: string]: unknown;
16289
+ }[];
15780
16290
  /** Format: url */
15781
16291
  backchannelLogoutUri?: string;
15782
16292
  backchannelLogoutSessionRequired?: boolean;
@@ -15801,6 +16311,7 @@ export interface operations {
15801
16311
  pageRules: {
15802
16312
  path: string;
15803
16313
  }[];
16314
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
15804
16315
  customDomains?: {
15805
16316
  domain: string;
15806
16317
  /** @enum {string} */
@@ -15825,8 +16336,11 @@ export interface operations {
15825
16336
  }[];
15826
16337
  } | null;
15827
16338
  /** @description arbitrary */
15828
- customData: Record<string, never>;
16339
+ customData: {
16340
+ [key: string]: unknown;
16341
+ };
15829
16342
  isThirdParty: boolean;
16343
+ appLevelAccessControlEnabled: boolean;
15830
16344
  createdAt: number;
15831
16345
  }[];
15832
16346
  };
@@ -16923,6 +17437,12 @@ export interface operations {
16923
17437
  query?: {
16924
17438
  /** @description The log key to filter logs. */
16925
17439
  logKey?: string;
17440
+ /** @description When `true`, short-circuits the underlying `count(*)` query: results with more than 10,000 matching logs saturate `Total-Number` at the sentinel `10001` and emit `Total-Number-Is-Capped: true`; the `Link` header omits `rel="last"` and `rel="next"`. Default `false`. (This endpoint is already scoped to a single hook over the last 24 hours, so the cap rarely triggers in practice.) */
17441
+ enableCap?: string;
17442
+ /** @description Exclusive lower bound on `createdAt`, in unix milliseconds. Supplying either `start_time` or `end_time` replaces the endpoint's default 24-hour lower bound, so callers can query an arbitrary historical window. Returns `400` if `start_time >= end_time` when both are present. */
17443
+ start_time?: string;
17444
+ /** @description Exclusive upper bound on `createdAt`, in unix milliseconds. Supplying either `start_time` or `end_time` replaces the endpoint's default 24-hour lower bound. */
17445
+ end_time?: string;
16926
17446
  /** @description Page number (starts from 1). */
16927
17447
  page?: number;
16928
17448
  /** @description Entries per page. */
@@ -16940,6 +17460,12 @@ export interface operations {
16940
17460
  /** @description A list of recent logs for the hook. */
16941
17461
  200: {
16942
17462
  headers: {
17463
+ /** @description When `enableCap=false`: exact match count. When `enableCap=true`: either the exact count (≤ 10,000) or the saturation sentinel `10001`. */
17464
+ "Total-Number"?: number;
17465
+ /** @description Present and set to `true` only when `enableCap=true` and the result has more than 10,000 matching logs (in which case `Total-Number` is `10001`). */
17466
+ "Total-Number-Is-Capped"?: "true";
17467
+ /** @description Pagination links per RFC 5988. When the response is capped, `rel="last"` and `rel="next"` are omitted; walk forward by incrementing `page` and stop on an empty response. */
17468
+ Link?: string;
16943
17469
  [name: string]: unknown;
16944
17470
  };
16945
17471
  content: {
@@ -16991,7 +17517,7 @@ export interface operations {
16991
17517
  }[];
16992
17518
  };
16993
17519
  };
16994
- /** @description Bad Request */
17520
+ /** @description Returned when `start_time` or `end_time` is not a finite number, or when `start_time >= end_time`. */
16995
17521
  400: {
16996
17522
  headers: {
16997
17523
  [name: string]: unknown;
@@ -17575,6 +18101,59 @@ export interface operations {
17575
18101
  };
17576
18102
  };
17577
18103
  };
18104
+ CleanupDomains: {
18105
+ parameters: {
18106
+ query?: never;
18107
+ header?: never;
18108
+ path?: never;
18109
+ cookie?: never;
18110
+ };
18111
+ requestBody: {
18112
+ content: {
18113
+ "application/json": {
18114
+ /** @description The number of days a domain must be inactive before it is considered stale and eligible for cleanup. */
18115
+ staleDays: number;
18116
+ };
18117
+ };
18118
+ };
18119
+ responses: {
18120
+ /** @description The cleanup result summary. */
18121
+ 200: {
18122
+ headers: {
18123
+ [name: string]: unknown;
18124
+ };
18125
+ content: {
18126
+ "application/json": {
18127
+ scannedCount: number;
18128
+ deletedCount: number;
18129
+ skippedActiveCount: number;
18130
+ failedCount: number;
18131
+ };
18132
+ };
18133
+ };
18134
+ /** @description Bad Request */
18135
+ 400: {
18136
+ headers: {
18137
+ [name: string]: unknown;
18138
+ };
18139
+ content?: never;
18140
+ };
18141
+ /** @description Unauthorized */
18142
+ 401: {
18143
+ headers: {
18144
+ [name: string]: unknown;
18145
+ };
18146
+ content?: never;
18147
+ };
18148
+ /** @description Forbidden */
18149
+ 403: {
18150
+ headers: {
18151
+ [name: string]: unknown;
18152
+ };
18153
+ content?: never;
18154
+ };
18155
+ };
18156
+ };
17578
18157
  GetOrganizationRole: {
17579
18158
  parameters: {
17580
18159
  query?: never;
@@ -19094,7 +19673,9 @@ export interface operations {
19094
19673
  name: string;
19095
19674
  description: string | null;
19096
19675
  /** @description arbitrary */
19097
- customData: Record<string, never>;
19676
+ customData: {
19677
+ [key: string]: unknown;
19678
+ };
19098
19679
  isMfaRequired: boolean;
19099
19680
  color: {
19100
19681
  /** Format: regex */
@@ -19163,7 +19744,9 @@ export interface operations {
19163
19744
  /** @description The description of the organization. */
19164
19745
  description?: string | null;
19165
19746
  /** @description arbitrary */
19166
- customData?: Record<string, never>;
19747
+ customData?: {
19748
+ [key: string]: unknown;
19749
+ };
19167
19750
  isMfaRequired?: boolean;
19168
19751
  color?: {
19169
19752
  /** Format: regex */
@@ -19200,7 +19783,9 @@ export interface operations {
19200
19783
  name: string;
19201
19784
  description: string | null;
19202
19785
  /** @description arbitrary */
19203
- customData: Record<string, never>;
19786
+ customData: {
19787
+ [key: string]: unknown;
19788
+ };
19204
19789
  isMfaRequired: boolean;
19205
19790
  color: {
19206
19791
  /** Format: regex */
@@ -19271,7 +19856,9 @@ export interface operations {
19271
19856
  name: string;
19272
19857
  description: string | null;
19273
19858
  /** @description arbitrary */
19274
- customData: Record<string, never>;
19859
+ customData: {
19860
+ [key: string]: unknown;
19861
+ };
19275
19862
  isMfaRequired: boolean;
19276
19863
  color: {
19277
19864
  /** Format: regex */
@@ -19394,7 +19981,9 @@ export interface operations {
19394
19981
  /** @description The updated description of the organization. */
19395
19982
  description?: string | null;
19396
19983
  /** @description arbitrary */
19397
- customData?: Record<string, never>;
19984
+ customData?: {
19985
+ [key: string]: unknown;
19986
+ };
19398
19987
  isMfaRequired?: boolean;
19399
19988
  color?: {
19400
19989
  /** Format: regex */
@@ -19431,7 +20020,9 @@ export interface operations {
19431
20020
  name: string;
19432
20021
  description: string | null;
19433
20022
  /** @description arbitrary */
19434
- customData: Record<string, never>;
20023
+ customData: {
20024
+ [key: string]: unknown;
20025
+ };
19435
20026
  isMfaRequired: boolean;
19436
20027
  color: {
19437
20028
  /** Format: regex */
@@ -19520,12 +20111,16 @@ export interface operations {
19520
20111
  name: string | null;
19521
20112
  avatar: string | null;
19522
20113
  /** @description arbitrary */
19523
- customData: Record<string, never>;
20114
+ customData: {
20115
+ [key: string]: unknown;
20116
+ };
19524
20117
  identities: {
19525
20118
  [key: string]: {
19526
20119
  userId: string;
19527
20120
  /** @description arbitrary */
19528
- details?: Record<string, never>;
20121
+ details?: {
20122
+ [key: string]: unknown;
20123
+ };
19529
20124
  };
19530
20125
  };
19531
20126
  lastSignInAt: number | null;
@@ -19672,7 +20267,10 @@ export interface operations {
19672
20267
  [name: string]: unknown;
19673
20268
  };
19674
20269
  content: {
19675
- "application/json": unknown;
20270
+ "application/json": {
20271
+ /** @description An array of user IDs processed from the request. This may include IDs that were already members of the organization. */
20272
+ userIds: string[];
20273
+ };
19676
20274
  };
19677
20275
  };
19678
20276
  /** @description Bad Request */
@@ -19977,7 +20575,10 @@ export interface operations {
19977
20575
  [name: string]: unknown;
19978
20576
  };
19979
20577
  content: {
19980
- "application/json": unknown;
20578
+ "application/json": {
20579
+ /** @description An array of organization role IDs that were assigned to the user, deduplicated and resolved from any provided role names. */
20580
+ organizationRoleIds: string[];
20581
+ };
19981
20582
  };
19982
20583
  };
19983
20584
  /** @description Bad Request */
@@ -20161,8 +20762,12 @@ export interface operations {
20161
20762
  /** @enum {string} */
20162
20763
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
20163
20764
  oidcClientMetadata: {
20164
- redirectUris: Record<string, never>[];
20165
- postLogoutRedirectUris: Record<string, never>[];
20765
+ redirectUris: {
20766
+ [key: string]: unknown;
20767
+ }[];
20768
+ postLogoutRedirectUris: {
20769
+ [key: string]: unknown;
20770
+ }[];
20166
20771
  /** Format: url */
20167
20772
  backchannelLogoutUri?: string;
20168
20773
  backchannelLogoutSessionRequired?: boolean;
@@ -20187,6 +20792,7 @@ export interface operations {
20187
20792
  pageRules: {
20188
20793
  path: string;
20189
20794
  }[];
20795
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
20190
20796
  customDomains?: {
20191
20797
  domain: string;
20192
20798
  /** @enum {string} */
@@ -20211,8 +20817,11 @@ export interface operations {
20211
20817
  }[];
20212
20818
  } | null;
20213
20819
  /** @description arbitrary */
20214
- customData: Record<string, never>;
20820
+ customData: {
20821
+ [key: string]: unknown;
20822
+ };
20215
20823
  isThirdParty: boolean;
20824
+ appLevelAccessControlEnabled: boolean;
20216
20825
  createdAt: number;
20217
20826
  organizationRoles: {
20218
20827
  id: string;
@@ -21191,7 +21800,9 @@ export interface operations {
21191
21800
  providerName: string;
21192
21801
  connectorName: string;
21193
21802
  /** @description arbitrary */
21194
- config: Record<string, never>;
21803
+ config: {
21804
+ [key: string]: unknown;
21805
+ };
21195
21806
  domains: string[];
21196
21807
  branding: {
21197
21808
  displayName?: string;
@@ -21469,7 +22080,9 @@ export interface operations {
21469
22080
  providerName: "OIDC" | "SAML" | "AzureAD" | "GoogleWorkspace" | "Okta" | "AzureAdOidc";
21470
22081
  connectorName: string;
21471
22082
  /** @description arbitrary */
21472
- config: Record<string, never>;
22083
+ config: {
22084
+ [key: string]: unknown;
22085
+ };
21473
22086
  domains: string[];
21474
22087
  branding: {
21475
22088
  displayName?: string;
@@ -21517,7 +22130,9 @@ export interface operations {
21517
22130
  content: {
21518
22131
  "application/json": {
21519
22132
  /** @description arbitrary */
21520
- config?: Record<string, never>;
22133
+ config?: {
22134
+ [key: string]: unknown;
22135
+ };
21521
22136
  domains?: string[];
21522
22137
  branding?: {
21523
22138
  displayName?: string;
@@ -21544,7 +22159,9 @@ export interface operations {
21544
22159
  providerName: string;
21545
22160
  connectorName: string;
21546
22161
  /** @description arbitrary */
21547
- config: Record<string, never>;
22162
+ config: {
22163
+ [key: string]: unknown;
22164
+ };
21548
22165
  domains: string[];
21549
22166
  branding: {
21550
22167
  displayName?: string;
@@ -21619,7 +22236,9 @@ export interface operations {
21619
22236
  providerName: "OIDC" | "SAML" | "AzureAD" | "GoogleWorkspace" | "Okta" | "AzureAdOidc";
21620
22237
  connectorName: string;
21621
22238
  /** @description arbitrary */
21622
- config: Record<string, never>;
22239
+ config: {
22240
+ [key: string]: unknown;
22241
+ };
21623
22242
  domains: string[];
21624
22243
  branding: {
21625
22244
  displayName?: string;
@@ -21733,7 +22352,9 @@ export interface operations {
21733
22352
  content: {
21734
22353
  "application/json": {
21735
22354
  /** @description arbitrary */
21736
- config?: Record<string, never>;
22355
+ config?: {
22356
+ [key: string]: unknown;
22357
+ };
21737
22358
  domains?: string[];
21738
22359
  branding?: {
21739
22360
  displayName?: string;
@@ -21760,7 +22381,9 @@ export interface operations {
21760
22381
  providerName: "OIDC" | "SAML" | "AzureAD" | "GoogleWorkspace" | "Okta" | "AzureAdOidc";
21761
22382
  connectorName: string;
21762
22383
  /** @description arbitrary */
21763
- config: Record<string, never>;
22384
+ config: {
22385
+ [key: string]: unknown;
22386
+ };
21764
22387
  domains: string[];
21765
22388
  branding: {
21766
22389
  displayName?: string;
@@ -21883,7 +22506,9 @@ export interface operations {
21883
22506
  /** @description The ID of the user to impersonate. */
21884
22507
  userId: string;
21885
22508
  /** @description The additional context to be included in the token, this can be used in custom JWT. */
21886
- context?: Record<string, never>;
22509
+ context?: {
22510
+ [key: string]: unknown;
22511
+ };
21887
22512
  };
21888
22513
  };
21889
22514
  };
@@ -21974,6 +22599,11 @@ export interface operations {
21974
22599
  session?: "Off" | "ReadOnly" | "Edit";
21975
22600
  };
21976
22601
  webauthnRelatedOrigins: string[];
22602
+ deleteAccountUrl: string | null;
22603
+ customCss: string | null;
22604
+ profileFields: {
22605
+ name: string;
22606
+ }[] | null;
21977
22607
  };
21978
22608
  };
21979
22609
  };
@@ -22032,6 +22662,15 @@ export interface operations {
22032
22662
  };
22033
22663
  /** @description The allowed domains for webauthn. */
22034
22664
  webauthnRelatedOrigins?: string[];
22665
+ /** @description The custom endpoint URL for account deletion. */
22666
+ deleteAccountUrl?: {
22667
+ [key: string]: unknown;
22668
+ } | null;
22669
+ customCss?: string | null;
22670
+ /** @description Ordered list of custom profile fields to show in the prebuilt account center. Each entry references an existing field by name in the custom profile fields catalog. */
22671
+ profileFields?: {
22672
+ name: string;
22673
+ }[] | null;
22035
22674
  };
22036
22675
  };
22037
22676
  };
@@ -22071,6 +22710,11 @@ export interface operations {
22071
22710
  session?: "Off" | "ReadOnly" | "Edit";
22072
22711
  };
22073
22712
  webauthnRelatedOrigins: string[];
22713
+ deleteAccountUrl: string | null;
22714
+ customCss: string | null;
22715
+ profileFields: {
22716
+ name: string;
22717
+ }[] | null;
22074
22718
  };
22075
22719
  };
22076
22720
  };
@@ -22112,7 +22756,9 @@ export interface operations {
22112
22756
  /** @description Optional description of the SAML application. */
22113
22757
  description?: string | null;
22114
22758
  /** @description Optional custom data for the application. */
22115
- customData?: Record<string, never>;
22759
+ customData?: {
22760
+ [key: string]: unknown;
22761
+ };
22116
22762
  attributeMapping?: {
22117
22763
  sub?: string;
22118
22764
  name?: string;
@@ -22148,7 +22794,9 @@ export interface operations {
22148
22794
  /** @description The Assertion Consumer Service (ACS) URL where the SAML response will be sent. */
22149
22795
  acsUrl?: string | null;
22150
22796
  /** @description Validator function */
22151
- encryption?: Record<string, never> | null;
22797
+ encryption?: {
22798
+ [key: string]: unknown;
22799
+ } | null;
22152
22800
  /**
22153
22801
  * @default urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
22154
22802
  * @enum {string}
@@ -22172,8 +22820,11 @@ export interface operations {
22172
22820
  /** @enum {string} */
22173
22821
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
22174
22822
  /** @description arbitrary */
22175
- customData: Record<string, never>;
22823
+ customData: {
22824
+ [key: string]: unknown;
22825
+ };
22176
22826
  isThirdParty: boolean;
22827
+ appLevelAccessControlEnabled: boolean;
22177
22828
  createdAt: number;
22178
22829
  attributeMapping: {
22179
22830
  sub?: string;
@@ -22214,7 +22865,9 @@ export interface operations {
22214
22865
  url: string;
22215
22866
  } | null;
22216
22867
  /** @description Validator function */
22217
- encryption: Record<string, never> | null;
22868
+ encryption: {
22869
+ [key: string]: unknown;
22870
+ } | null;
22218
22871
  /** @enum {string} */
22219
22872
  nameIdFormat: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" | "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" | "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" | "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified";
22220
22873
  };
@@ -22276,8 +22929,11 @@ export interface operations {
22276
22929
  /** @enum {string} */
22277
22930
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
22278
22931
  /** @description arbitrary */
22279
- customData: Record<string, never>;
22932
+ customData: {
22933
+ [key: string]: unknown;
22934
+ };
22280
22935
  isThirdParty: boolean;
22936
+ appLevelAccessControlEnabled: boolean;
22281
22937
  createdAt: number;
22282
22938
  attributeMapping: {
22283
22939
  sub?: string;
@@ -22318,7 +22974,9 @@ export interface operations {
22318
22974
  url: string;
22319
22975
  } | null;
22320
22976
  /** @description Validator function */
22321
- encryption: Record<string, never> | null;
22977
+ encryption: {
22978
+ [key: string]: unknown;
22979
+ } | null;
22322
22980
  /** @enum {string} */
22323
22981
  nameIdFormat: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" | "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" | "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" | "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified";
22324
22982
  };
@@ -22435,7 +23093,9 @@ export interface operations {
22435
23093
  /** @description Description of the SAML application. */
22436
23094
  description?: string | null;
22437
23095
  /** @description Custom data for the application. */
22438
- customData?: Record<string, never>;
23096
+ customData?: {
23097
+ [key: string]: unknown;
23098
+ };
22439
23099
  attributeMapping?: {
22440
23100
  sub?: string;
22441
23101
  name?: string;
@@ -22471,7 +23131,9 @@ export interface operations {
22471
23131
  /** @description The Assertion Consumer Service (ACS) URL. */
22472
23132
  acsUrl?: string | null;
22473
23133
  /** @description Validator function */
22474
- encryption?: Record<string, never> | null;
23134
+ encryption?: {
23135
+ [key: string]: unknown;
23136
+ } | null;
22475
23137
  /** @enum {string} */
22476
23138
  nameIdFormat?: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" | "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" | "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" | "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified";
22477
23139
  };
@@ -22492,8 +23154,11 @@ export interface operations {
22492
23154
  /** @enum {string} */
22493
23155
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
22494
23156
  /** @description arbitrary */
22495
- customData: Record<string, never>;
23157
+ customData: {
23158
+ [key: string]: unknown;
23159
+ };
22496
23160
  isThirdParty: boolean;
23161
+ appLevelAccessControlEnabled: boolean;
22497
23162
  createdAt: number;
22498
23163
  attributeMapping: {
22499
23164
  sub?: string;
@@ -22534,7 +23199,9 @@ export interface operations {
22534
23199
  url: string;
22535
23200
  } | null;
22536
23201
  /** @description Validator function */
22537
- encryption: Record<string, never> | null;
23202
+ encryption: {
23203
+ [key: string]: unknown;
23204
+ } | null;
22538
23205
  /** @enum {string} */
22539
23206
  nameIdFormat: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" | "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" | "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" | "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified";
22540
23207
  };
@@ -25029,6 +25696,10 @@ export interface operations {
25029
25696
  id: string;
25030
25697
  createdAt: number;
25031
25698
  } | null;
25699
+ customUiCsp: {
25700
+ scriptSrc?: string[];
25701
+ connectSrc?: string[];
25702
+ };
25032
25703
  passwordPolicy: {
25033
25704
  /** @default {} */
25034
25705
  length: {
@@ -25085,11 +25756,16 @@ export interface operations {
25085
25756
  showPasskeyButton?: boolean;
25086
25757
  allowAutofill?: boolean;
25087
25758
  };
25759
+ signUpProfileFields: {
25760
+ name: string;
25761
+ }[] | null;
25088
25762
  socialConnectors: {
25089
25763
  id: string;
25090
25764
  target: string;
25091
25765
  /** @description Validator function */
25092
- name: Record<string, never>;
25766
+ name: {
25767
+ [key: string]: unknown;
25768
+ };
25093
25769
  logo: string;
25094
25770
  logoDark: string | null;
25095
25771
  fromEmail?: string;
@@ -25174,6 +25850,55 @@ export interface operations {
25174
25850
  createdAt: number;
25175
25851
  sieOrder: number;
25176
25852
  }[];
25853
+ customProfileFieldCatalog?: {
25854
+ tenantId: string;
25855
+ id: string;
25856
+ name: string;
25857
+ /** @enum {string} */
25858
+ type: "Text" | "Number" | "Date" | "Checkbox" | "Select" | "Url" | "Regex" | "Address" | "Fullname";
25859
+ label: string;
25860
+ description: string | null;
25861
+ required: boolean;
25862
+ config: {
25863
+ placeholder?: string;
25864
+ minLength?: number;
25865
+ maxLength?: number;
25866
+ minValue?: number;
25867
+ maxValue?: number;
25868
+ format?: string;
25869
+ customFormat?: string;
25870
+ options?: {
25871
+ label?: string;
25872
+ value: string;
25873
+ }[];
25874
+ defaultValue?: string;
25875
+ parts?: {
25876
+ enabled: boolean;
25877
+ name: string;
25878
+ /** @enum {string} */
25879
+ type: "Text" | "Number" | "Date" | "Checkbox" | "Select" | "Url" | "Regex" | "Address" | "Fullname";
25880
+ label?: string;
25881
+ description?: string;
25882
+ required: boolean;
25883
+ config?: {
25884
+ placeholder?: string;
25885
+ minLength?: number;
25886
+ maxLength?: number;
25887
+ minValue?: number;
25888
+ maxValue?: number;
25889
+ format?: string;
25890
+ customFormat?: string;
25891
+ options?: {
25892
+ label?: string;
25893
+ value: string;
25894
+ }[];
25895
+ defaultValue?: string;
25896
+ };
25897
+ }[];
25898
+ };
25899
+ createdAt: number;
25900
+ sieOrder: number;
25901
+ }[];
25177
25902
  };
25178
25903
  };
25179
25904
  };
@@ -25301,6 +26026,10 @@ export interface operations {
25301
26026
  id: string;
25302
26027
  createdAt: number;
25303
26028
  } | null;
26029
+ customUiCsp: {
26030
+ scriptSrc?: string[];
26031
+ connectSrc?: string[];
26032
+ };
25304
26033
  passwordPolicy: {
25305
26034
  /** @default {} */
25306
26035
  length: {
@@ -25357,11 +26086,16 @@ export interface operations {
25357
26086
  showPasskeyButton?: boolean;
25358
26087
  allowAutofill?: boolean;
25359
26088
  };
26089
+ signUpProfileFields: {
26090
+ name: string;
26091
+ }[] | null;
25360
26092
  socialConnectors: {
25361
26093
  id: string;
25362
26094
  target: string;
25363
26095
  /** @description Validator function */
25364
- name: Record<string, never>;
26096
+ name: {
26097
+ [key: string]: unknown;
26098
+ };
25365
26099
  logo: string;
25366
26100
  logoDark: string | null;
25367
26101
  fromEmail?: string;
@@ -25446,6 +26180,55 @@ export interface operations {
25446
26180
  createdAt: number;
25447
26181
  sieOrder: number;
25448
26182
  }[];
26183
+ customProfileFieldCatalog?: {
26184
+ tenantId: string;
26185
+ id: string;
26186
+ name: string;
26187
+ /** @enum {string} */
26188
+ type: "Text" | "Number" | "Date" | "Checkbox" | "Select" | "Url" | "Regex" | "Address" | "Fullname";
26189
+ label: string;
26190
+ description: string | null;
26191
+ required: boolean;
26192
+ config: {
26193
+ placeholder?: string;
26194
+ minLength?: number;
26195
+ maxLength?: number;
26196
+ minValue?: number;
26197
+ maxValue?: number;
26198
+ format?: string;
26199
+ customFormat?: string;
26200
+ options?: {
26201
+ label?: string;
26202
+ value: string;
26203
+ }[];
26204
+ defaultValue?: string;
26205
+ parts?: {
26206
+ enabled: boolean;
26207
+ name: string;
26208
+ /** @enum {string} */
26209
+ type: "Text" | "Number" | "Date" | "Checkbox" | "Select" | "Url" | "Regex" | "Address" | "Fullname";
26210
+ label?: string;
26211
+ description?: string;
26212
+ required: boolean;
26213
+ config?: {
26214
+ placeholder?: string;
26215
+ minLength?: number;
26216
+ maxLength?: number;
26217
+ minValue?: number;
26218
+ maxValue?: number;
26219
+ format?: string;
26220
+ customFormat?: string;
26221
+ options?: {
26222
+ label?: string;
26223
+ value: string;
26224
+ }[];
26225
+ defaultValue?: string;
26226
+ };
26227
+ }[];
26228
+ };
26229
+ createdAt: number;
26230
+ sieOrder: number;
26231
+ }[];
25449
26232
  };
25450
26233
  };
25451
26234
  };
@@ -25502,6 +26285,11 @@ export interface operations {
25502
26285
  session?: "Off" | "ReadOnly" | "Edit";
25503
26286
  };
25504
26287
  webauthnRelatedOrigins: string[];
26288
+ deleteAccountUrl: string | null;
26289
+ customCss: string | null;
26290
+ profileFields: {
26291
+ name: string;
26292
+ }[] | null;
25505
26293
  };
25506
26294
  };
25507
26295
  };
@@ -25577,7 +26365,9 @@ export interface operations {
25577
26365
  };
25578
26366
  requestBody: {
25579
26367
  content: {
25580
- "application/json": Record<string, never>;
26368
+ "application/json": {
26369
+ [key: string]: unknown;
26370
+ };
25581
26371
  };
25582
26372
  };
25583
26373
  responses: {