@logto/api 1.39.0 → 1.40.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/lib/generated-types/management.d.ts +870 -204
  2. package/package.json +1 -1
package/lib/generated-types/management.d.ts CHANGED
@@ -1477,6 +1477,10 @@ export interface paths {
1477
1477
  /**
1478
1478
  * Get logs
1479
1479
  * @description Get logs that match the given query with pagination.
1480
+ *
1481
+ * ### Pagination on large result sets
1482
+ *
1483
+ * For tenants with very large log volumes, the default exact `count(*)` may exceed Postgres `statement_timeout`. Pass `enableCap=true` to short-circuit the count query: any tenant with more than 10,000 matching logs saturates `Total-Number` at the sentinel value `10001` and the response includes `Total-Number-Is-Capped: true`. In capped responses the `Link` header omits `rel="last"` and `rel="next"`; walk forward by incrementing `page` and stop on an empty response.
1480
1484
  */
1481
1485
  get: operations["ListLogs"];
1482
1486
  put?: never;
@@ -1860,7 +1864,7 @@ export interface paths {
1860
1864
  };
1861
1865
  /**
1862
1866
  * Get recent logs for a hook
1863
- * @description Get recent logs that match the given query for the specified hook with pagination.
1867
+ * @description Get recent logs that match the given query for the specified hook with pagination. See `GET /api/logs` for details on the `enableCap` parameter and capped-response headers.
1864
1868
  */
1865
1869
  get: operations["ListHookRecentLogs"];
1866
1870
  put?: never;
@@ -3864,8 +3868,12 @@ export interface operations {
3864
3868
  /** @enum {string} */
3865
3869
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
3866
3870
  oidcClientMetadata: {
3867
- redirectUris: Record<string, never>[];
3868
- postLogoutRedirectUris: Record<string, never>[];
3871
+ redirectUris: {
3872
+ [key: string]: unknown;
3873
+ }[];
3874
+ postLogoutRedirectUris: {
3875
+ [key: string]: unknown;
3876
+ }[];
3869
3877
  /** Format: url */
3870
3878
  backchannelLogoutUri?: string;
3871
3879
  backchannelLogoutSessionRequired?: boolean;
@@ -3890,6 +3898,7 @@ export interface operations {
3890
3898
  pageRules: {
3891
3899
  path: string;
3892
3900
  }[];
3901
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
3893
3902
  customDomains?: {
3894
3903
  domain: string;
3895
3904
  /** @enum {string} */
@@ -3914,8 +3923,11 @@ export interface operations {
3914
3923
  }[];
3915
3924
  } | null;
3916
3925
  /** @description arbitrary */
3917
- customData: Record<string, never>;
3926
+ customData: {
3927
+ [key: string]: unknown;
3928
+ };
3918
3929
  isThirdParty: boolean;
3930
+ appLevelAccessControlEnabled: boolean;
3919
3931
  createdAt: number;
3920
3932
  }[];
3921
3933
  };
@@ -3958,8 +3970,12 @@ export interface operations {
3958
3970
  /** @enum {string} */
3959
3971
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
3960
3972
  oidcClientMetadata?: {
3961
- redirectUris: Record<string, never>[];
3962
- postLogoutRedirectUris: Record<string, never>[];
3973
+ redirectUris: {
3974
+ [key: string]: unknown;
3975
+ }[];
3976
+ postLogoutRedirectUris: {
3977
+ [key: string]: unknown;
3978
+ }[];
3963
3979
  /** Format: url */
3964
3980
  backchannelLogoutUri?: string;
3965
3981
  backchannelLogoutSessionRequired?: boolean;
@@ -3978,7 +3994,9 @@ export interface operations {
3978
3994
  maxAllowedGrants?: number;
3979
3995
  };
3980
3996
  /** @description arbitrary */
3981
- customData?: Record<string, never>;
3997
+ customData?: {
3998
+ [key: string]: unknown;
3999
+ };
3982
4000
  isThirdParty?: boolean;
3983
4001
  /** @description The data for protected app, this feature is not available for open source version. */
3984
4002
  protectedAppMetadata?: {
@@ -4006,8 +4024,12 @@ export interface operations {
4006
4024
  /** @enum {string} */
4007
4025
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
4008
4026
  oidcClientMetadata: {
4009
- redirectUris: Record<string, never>[];
4010
- postLogoutRedirectUris: Record<string, never>[];
4027
+ redirectUris: {
4028
+ [key: string]: unknown;
4029
+ }[];
4030
+ postLogoutRedirectUris: {
4031
+ [key: string]: unknown;
4032
+ }[];
4011
4033
  /** Format: url */
4012
4034
  backchannelLogoutUri?: string;
4013
4035
  backchannelLogoutSessionRequired?: boolean;
@@ -4032,6 +4054,7 @@ export interface operations {
4032
4054
  pageRules: {
4033
4055
  path: string;
4034
4056
  }[];
4057
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
4035
4058
  customDomains?: {
4036
4059
  domain: string;
4037
4060
  /** @enum {string} */
@@ -4056,8 +4079,11 @@ export interface operations {
4056
4079
  }[];
4057
4080
  } | null;
4058
4081
  /** @description arbitrary */
4059
- customData: Record<string, never>;
4082
+ customData: {
4083
+ [key: string]: unknown;
4084
+ };
4060
4085
  isThirdParty: boolean;
4086
+ appLevelAccessControlEnabled: boolean;
4061
4087
  createdAt: number;
4062
4088
  };
4063
4089
  };
@@ -4126,8 +4152,12 @@ export interface operations {
4126
4152
  /** @enum {string} */
4127
4153
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
4128
4154
  oidcClientMetadata: {
4129
- redirectUris: Record<string, never>[];
4130
- postLogoutRedirectUris: Record<string, never>[];
4155
+ redirectUris: {
4156
+ [key: string]: unknown;
4157
+ }[];
4158
+ postLogoutRedirectUris: {
4159
+ [key: string]: unknown;
4160
+ }[];
4131
4161
  /** Format: url */
4132
4162
  backchannelLogoutUri?: string;
4133
4163
  backchannelLogoutSessionRequired?: boolean;
@@ -4152,6 +4182,7 @@ export interface operations {
4152
4182
  pageRules: {
4153
4183
  path: string;
4154
4184
  }[];
4185
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
4155
4186
  customDomains?: {
4156
4187
  domain: string;
4157
4188
  /** @enum {string} */
@@ -4176,8 +4207,11 @@ export interface operations {
4176
4207
  }[];
4177
4208
  } | null;
4178
4209
  /** @description arbitrary */
4179
- customData: Record<string, never>;
4210
+ customData: {
4211
+ [key: string]: unknown;
4212
+ };
4180
4213
  isThirdParty: boolean;
4214
+ appLevelAccessControlEnabled: boolean;
4181
4215
  createdAt: number;
4182
4216
  isAdmin: boolean;
4183
4217
  };
@@ -4285,8 +4319,12 @@ export interface operations {
4285
4319
  name?: string;
4286
4320
  description?: string | null;
4287
4321
  oidcClientMetadata?: {
4288
- redirectUris: Record<string, never>[];
4289
- postLogoutRedirectUris: Record<string, never>[];
4322
+ redirectUris: {
4323
+ [key: string]: unknown;
4324
+ }[];
4325
+ postLogoutRedirectUris: {
4326
+ [key: string]: unknown;
4327
+ }[];
4290
4328
  /** Format: url */
4291
4329
  backchannelLogoutUri?: string;
4292
4330
  backchannelLogoutSessionRequired?: boolean;
@@ -4305,13 +4343,20 @@ export interface operations {
4305
4343
  maxAllowedGrants?: number;
4306
4344
  };
4307
4345
  /** @description arbitrary */
4308
- customData?: Record<string, never>;
4346
+ customData?: {
4347
+ [key: string]: unknown;
4348
+ };
4349
+ /** @description Validator function */
4350
+ appLevelAccessControlEnabled?: {
4351
+ [key: string]: unknown;
4352
+ };
4309
4353
  protectedAppMetadata?: {
4310
4354
  origin?: string;
4311
4355
  sessionDuration?: number;
4312
4356
  pageRules?: {
4313
4357
  path: string;
4314
4358
  }[];
4359
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
4315
4360
  } | null;
4316
4361
  /** @description Whether the application has admin access. User can enable the admin access for Machine-to-Machine apps. */
4317
4362
  isAdmin?: boolean;
@@ -4334,8 +4379,12 @@ export interface operations {
4334
4379
  /** @enum {string} */
4335
4380
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
4336
4381
  oidcClientMetadata: {
4337
- redirectUris: Record<string, never>[];
4338
- postLogoutRedirectUris: Record<string, never>[];
4382
+ redirectUris: {
4383
+ [key: string]: unknown;
4384
+ }[];
4385
+ postLogoutRedirectUris: {
4386
+ [key: string]: unknown;
4387
+ }[];
4339
4388
  /** Format: url */
4340
4389
  backchannelLogoutUri?: string;
4341
4390
  backchannelLogoutSessionRequired?: boolean;
@@ -4360,6 +4409,7 @@ export interface operations {
4360
4409
  pageRules: {
4361
4410
  path: string;
4362
4411
  }[];
4412
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
4363
4413
  customDomains?: {
4364
4414
  domain: string;
4365
4415
  /** @enum {string} */
@@ -4384,8 +4434,11 @@ export interface operations {
4384
4434
  }[];
4385
4435
  } | null;
4386
4436
  /** @description arbitrary */
4387
- customData: Record<string, never>;
4437
+ customData: {
4438
+ [key: string]: unknown;
4439
+ };
4388
4440
  isThirdParty: boolean;
4441
+ appLevelAccessControlEnabled: boolean;
4389
4442
  createdAt: number;
4390
4443
  };
4391
4444
  };
@@ -4446,7 +4499,9 @@ export interface operations {
4446
4499
  };
4447
4500
  requestBody: {
4448
4501
  content: {
4449
- "application/json": Record<string, never>;
4502
+ "application/json": {
4503
+ [key: string]: unknown;
4504
+ };
4450
4505
  };
4451
4506
  };
4452
4507
  responses: {
@@ -4456,7 +4511,9 @@ export interface operations {
4456
4511
  [name: string]: unknown;
4457
4512
  };
4458
4513
  content: {
4459
- "application/json": Record<string, never>;
4514
+ "application/json": {
4515
+ [key: string]: unknown;
4516
+ };
4460
4517
  };
4461
4518
  };
4462
4519
  /** @description Bad Request */
@@ -4989,7 +5046,9 @@ export interface operations {
4989
5046
  name: string;
4990
5047
  description: string | null;
4991
5048
  /** @description arbitrary */
4992
- customData: Record<string, never>;
5049
+ customData: {
5050
+ [key: string]: unknown;
5051
+ };
4993
5052
  isMfaRequired: boolean;
4994
5053
  color: {
4995
5054
  /** Format: regex */
@@ -5074,8 +5133,12 @@ export interface operations {
5074
5133
  /** @enum {string} */
5075
5134
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
5076
5135
  oidcClientMetadata: {
5077
- redirectUris: Record<string, never>[];
5078
- postLogoutRedirectUris: Record<string, never>[];
5136
+ redirectUris: {
5137
+ [key: string]: unknown;
5138
+ }[];
5139
+ postLogoutRedirectUris: {
5140
+ [key: string]: unknown;
5141
+ }[];
5079
5142
  /** Format: url */
5080
5143
  backchannelLogoutUri?: string;
5081
5144
  backchannelLogoutSessionRequired?: boolean;
@@ -5100,6 +5163,7 @@ export interface operations {
5100
5163
  pageRules: {
5101
5164
  path: string;
5102
5165
  }[];
5166
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
5103
5167
  customDomains?: {
5104
5168
  domain: string;
5105
5169
  /** @enum {string} */
@@ -5124,8 +5188,11 @@ export interface operations {
5124
5188
  }[];
5125
5189
  } | null;
5126
5190
  /** @description arbitrary */
5127
- customData: Record<string, never>;
5191
+ customData: {
5192
+ [key: string]: unknown;
5193
+ };
5128
5194
  isThirdParty: boolean;
5195
+ appLevelAccessControlEnabled: boolean;
5129
5196
  createdAt: number;
5130
5197
  };
5131
5198
  };
@@ -5290,6 +5357,13 @@ export interface operations {
5290
5357
  };
5291
5358
  content?: never;
5292
5359
  };
5360
+ /** @description Internal Server Error */
5361
+ 500: {
5362
+ headers: {
5363
+ [name: string]: unknown;
5364
+ };
5365
+ content?: never;
5366
+ };
5293
5367
  };
5294
5368
  };
5295
5369
  DeleteApplicationSecret: {
@@ -5341,6 +5415,13 @@ export interface operations {
5341
5415
  };
5342
5416
  content?: never;
5343
5417
  };
5418
+ /** @description Internal Server Error */
5419
+ 500: {
5420
+ headers: {
5421
+ [name: string]: unknown;
5422
+ };
5423
+ content?: never;
5424
+ };
5344
5425
  };
5345
5426
  };
5346
5427
  UpdateApplicationSecret: {
@@ -5415,6 +5496,13 @@ export interface operations {
5415
5496
  };
5416
5497
  content?: never;
5417
5498
  };
5499
+ /** @description Internal Server Error */
5500
+ 500: {
5501
+ headers: {
5502
+ [name: string]: unknown;
5503
+ };
5504
+ content?: never;
5505
+ };
5418
5506
  };
5419
5507
  };
5420
5508
  ListApplicationUserConsentScopes: {
@@ -5875,7 +5963,9 @@ export interface operations {
5875
5963
  name: string;
5876
5964
  description: string | null;
5877
5965
  /** @description arbitrary */
5878
- customData: Record<string, never>;
5966
+ customData: {
5967
+ [key: string]: unknown;
5968
+ };
5879
5969
  isMfaRequired: boolean;
5880
5970
  color: {
5881
5971
  /** Format: regex */
@@ -6563,12 +6653,16 @@ export interface operations {
6563
6653
  name?: string | null;
6564
6654
  avatar?: string | null;
6565
6655
  /** @description arbitrary */
6566
- customData?: Record<string, never>;
6656
+ customData?: {
6657
+ [key: string]: unknown;
6658
+ };
6567
6659
  identities?: {
6568
6660
  [key: string]: {
6569
6661
  userId: string;
6570
6662
  /** @description arbitrary */
6571
- details?: Record<string, never>;
6663
+ details?: {
6664
+ [key: string]: unknown;
6665
+ };
6572
6666
  };
6573
6667
  };
6574
6668
  lastSignInAt?: number | null;
@@ -6602,7 +6696,9 @@ export interface operations {
6602
6696
  issuer: string;
6603
6697
  identityId: string;
6604
6698
  /** @description arbitrary */
6605
- detail: Record<string, never>;
6699
+ detail: {
6700
+ [key: string]: unknown;
6701
+ };
6606
6702
  }[];
6607
6703
  mfaVerificationFactors?: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
6608
6704
  roles?: {
@@ -6639,7 +6735,9 @@ export interface operations {
6639
6735
  /** Format: "urn:ietf:params:oauth:grant-type:token-exchange" */
6640
6736
  type?: string;
6641
6737
  /** @description arbitrary */
6642
- subjectTokenContext?: Record<string, never>;
6738
+ subjectTokenContext?: {
6739
+ [key: string]: unknown;
6740
+ };
6643
6741
  };
6644
6742
  interaction?: {
6645
6743
  /** @enum {string} */
@@ -6713,7 +6811,11 @@ export interface operations {
6713
6811
  phone?: string;
6714
6812
  name?: string;
6715
6813
  avatar?: string;
6716
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
6814
+ rawData?: ({
6815
+ [key: string]: unknown;
6816
+ } | (string | number | boolean | (string | null) | {
6817
+ [key: string]: unknown;
6818
+ })[] | string | number | boolean) | null;
6717
6819
  };
6718
6820
  } | {
6719
6821
  id: string;
@@ -6726,7 +6828,11 @@ export interface operations {
6726
6828
  phone?: string;
6727
6829
  name?: string;
6728
6830
  avatar?: string;
6729
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
6831
+ rawData?: ({
6832
+ [key: string]: unknown;
6833
+ } | (string | number | boolean | (string | null) | {
6834
+ [key: string]: unknown;
6835
+ })[] | string | number | boolean) | null;
6730
6836
  };
6731
6837
  issuer?: string;
6732
6838
  } | {
@@ -6790,8 +6896,12 @@ export interface operations {
6790
6896
  /** @enum {string} */
6791
6897
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
6792
6898
  oidcClientMetadata?: {
6793
- redirectUris: Record<string, never>[];
6794
- postLogoutRedirectUris: Record<string, never>[];
6899
+ redirectUris: {
6900
+ [key: string]: unknown;
6901
+ }[];
6902
+ postLogoutRedirectUris: {
6903
+ [key: string]: unknown;
6904
+ }[];
6795
6905
  /** Format: url */
6796
6906
  backchannelLogoutUri?: string;
6797
6907
  backchannelLogoutSessionRequired?: boolean;
@@ -6816,6 +6926,7 @@ export interface operations {
6816
6926
  pageRules: {
6817
6927
  path: string;
6818
6928
  }[];
6929
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
6819
6930
  customDomains?: {
6820
6931
  domain: string;
6821
6932
  /** @enum {string} */
@@ -6840,8 +6951,11 @@ export interface operations {
6840
6951
  }[];
6841
6952
  } | null;
6842
6953
  /** @description arbitrary */
6843
- customData?: Record<string, never>;
6954
+ customData?: {
6955
+ [key: string]: unknown;
6956
+ };
6844
6957
  isThirdParty?: boolean;
6958
+ appLevelAccessControlEnabled?: boolean;
6845
6959
  createdAt?: number;
6846
6960
  };
6847
6961
  };
@@ -6874,8 +6988,12 @@ export interface operations {
6874
6988
  /** @enum {string} */
6875
6989
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
6876
6990
  oidcClientMetadata?: {
6877
- redirectUris: Record<string, never>[];
6878
- postLogoutRedirectUris: Record<string, never>[];
6991
+ redirectUris: {
6992
+ [key: string]: unknown;
6993
+ }[];
6994
+ postLogoutRedirectUris: {
6995
+ [key: string]: unknown;
6996
+ }[];
6879
6997
  /** Format: url */
6880
6998
  backchannelLogoutUri?: string;
6881
6999
  backchannelLogoutSessionRequired?: boolean;
@@ -6900,6 +7018,7 @@ export interface operations {
6900
7018
  pageRules: {
6901
7019
  path: string;
6902
7020
  }[];
7021
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
6903
7022
  customDomains?: {
6904
7023
  domain: string;
6905
7024
  /** @enum {string} */
@@ -6924,8 +7043,11 @@ export interface operations {
6924
7043
  }[];
6925
7044
  } | null;
6926
7045
  /** @description arbitrary */
6927
- customData?: Record<string, never>;
7046
+ customData?: {
7047
+ [key: string]: unknown;
7048
+ };
6928
7049
  isThirdParty?: boolean;
7050
+ appLevelAccessControlEnabled?: boolean;
6929
7051
  createdAt?: number;
6930
7052
  };
6931
7053
  };
@@ -7018,12 +7140,16 @@ export interface operations {
7018
7140
  name?: string | null;
7019
7141
  avatar?: string | null;
7020
7142
  /** @description arbitrary */
7021
- customData?: Record<string, never>;
7143
+ customData?: {
7144
+ [key: string]: unknown;
7145
+ };
7022
7146
  identities?: {
7023
7147
  [key: string]: {
7024
7148
  userId: string;
7025
7149
  /** @description arbitrary */
7026
- details?: Record<string, never>;
7150
+ details?: {
7151
+ [key: string]: unknown;
7152
+ };
7027
7153
  };
7028
7154
  };
7029
7155
  lastSignInAt?: number | null;
@@ -7057,7 +7183,9 @@ export interface operations {
7057
7183
  issuer: string;
7058
7184
  identityId: string;
7059
7185
  /** @description arbitrary */
7060
- detail: Record<string, never>;
7186
+ detail: {
7187
+ [key: string]: unknown;
7188
+ };
7061
7189
  }[];
7062
7190
  mfaVerificationFactors?: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
7063
7191
  roles?: {
@@ -7094,7 +7222,9 @@ export interface operations {
7094
7222
  /** Format: "urn:ietf:params:oauth:grant-type:token-exchange" */
7095
7223
  type?: string;
7096
7224
  /** @description arbitrary */
7097
- subjectTokenContext?: Record<string, never>;
7225
+ subjectTokenContext?: {
7226
+ [key: string]: unknown;
7227
+ };
7098
7228
  };
7099
7229
  interaction?: {
7100
7230
  /** @enum {string} */
@@ -7168,7 +7298,11 @@ export interface operations {
7168
7298
  phone?: string;
7169
7299
  name?: string;
7170
7300
  avatar?: string;
7171
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
7301
+ rawData?: ({
7302
+ [key: string]: unknown;
7303
+ } | (string | number | boolean | (string | null) | {
7304
+ [key: string]: unknown;
7305
+ })[] | string | number | boolean) | null;
7172
7306
  };
7173
7307
  } | {
7174
7308
  id: string;
@@ -7181,7 +7315,11 @@ export interface operations {
7181
7315
  phone?: string;
7182
7316
  name?: string;
7183
7317
  avatar?: string;
7184
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
7318
+ rawData?: ({
7319
+ [key: string]: unknown;
7320
+ } | (string | number | boolean | (string | null) | {
7321
+ [key: string]: unknown;
7322
+ })[] | string | number | boolean) | null;
7185
7323
  };
7186
7324
  issuer?: string;
7187
7325
  } | {
@@ -7245,8 +7383,12 @@ export interface operations {
7245
7383
  /** @enum {string} */
7246
7384
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
7247
7385
  oidcClientMetadata?: {
7248
- redirectUris: Record<string, never>[];
7249
- postLogoutRedirectUris: Record<string, never>[];
7386
+ redirectUris: {
7387
+ [key: string]: unknown;
7388
+ }[];
7389
+ postLogoutRedirectUris: {
7390
+ [key: string]: unknown;
7391
+ }[];
7250
7392
  /** Format: url */
7251
7393
  backchannelLogoutUri?: string;
7252
7394
  backchannelLogoutSessionRequired?: boolean;
@@ -7271,6 +7413,7 @@ export interface operations {
7271
7413
  pageRules: {
7272
7414
  path: string;
7273
7415
  }[];
7416
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
7274
7417
  customDomains?: {
7275
7418
  domain: string;
7276
7419
  /** @enum {string} */
@@ -7295,8 +7438,11 @@ export interface operations {
7295
7438
  }[];
7296
7439
  } | null;
7297
7440
  /** @description arbitrary */
7298
- customData?: Record<string, never>;
7441
+ customData?: {
7442
+ [key: string]: unknown;
7443
+ };
7299
7444
  isThirdParty?: boolean;
7445
+ appLevelAccessControlEnabled?: boolean;
7300
7446
  createdAt?: number;
7301
7447
  };
7302
7448
  };
@@ -7329,8 +7475,12 @@ export interface operations {
7329
7475
  /** @enum {string} */
7330
7476
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
7331
7477
  oidcClientMetadata?: {
7332
- redirectUris: Record<string, never>[];
7333
- postLogoutRedirectUris: Record<string, never>[];
7478
+ redirectUris: {
7479
+ [key: string]: unknown;
7480
+ }[];
7481
+ postLogoutRedirectUris: {
7482
+ [key: string]: unknown;
7483
+ }[];
7334
7484
  /** Format: url */
7335
7485
  backchannelLogoutUri?: string;
7336
7486
  backchannelLogoutSessionRequired?: boolean;
@@ -7355,6 +7505,7 @@ export interface operations {
7355
7505
  pageRules: {
7356
7506
  path: string;
7357
7507
  }[];
7508
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
7358
7509
  customDomains?: {
7359
7510
  domain: string;
7360
7511
  /** @enum {string} */
@@ -7379,8 +7530,11 @@ export interface operations {
7379
7530
  }[];
7380
7531
  } | null;
7381
7532
  /** @description arbitrary */
7382
- customData?: Record<string, never>;
7533
+ customData?: {
7534
+ [key: string]: unknown;
7535
+ };
7383
7536
  isThirdParty?: boolean;
7537
+ appLevelAccessControlEnabled?: boolean;
7384
7538
  createdAt?: number;
7385
7539
  };
7386
7540
  };
@@ -7416,12 +7570,16 @@ export interface operations {
7416
7570
  name?: string | null;
7417
7571
  avatar?: string | null;
7418
7572
  /** @description arbitrary */
7419
- customData?: Record<string, never>;
7573
+ customData?: {
7574
+ [key: string]: unknown;
7575
+ };
7420
7576
  identities?: {
7421
7577
  [key: string]: {
7422
7578
  userId: string;
7423
7579
  /** @description arbitrary */
7424
- details?: Record<string, never>;
7580
+ details?: {
7581
+ [key: string]: unknown;
7582
+ };
7425
7583
  };
7426
7584
  };
7427
7585
  lastSignInAt?: number | null;
@@ -7455,7 +7613,9 @@ export interface operations {
7455
7613
  issuer: string;
7456
7614
  identityId: string;
7457
7615
  /** @description arbitrary */
7458
- detail: Record<string, never>;
7616
+ detail: {
7617
+ [key: string]: unknown;
7618
+ };
7459
7619
  }[];
7460
7620
  mfaVerificationFactors?: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
7461
7621
  roles?: {
@@ -7492,7 +7652,9 @@ export interface operations {
7492
7652
  /** Format: "urn:ietf:params:oauth:grant-type:token-exchange" */
7493
7653
  type?: string;
7494
7654
  /** @description arbitrary */
7495
- subjectTokenContext?: Record<string, never>;
7655
+ subjectTokenContext?: {
7656
+ [key: string]: unknown;
7657
+ };
7496
7658
  };
7497
7659
  interaction?: {
7498
7660
  /** @enum {string} */
@@ -7566,7 +7728,11 @@ export interface operations {
7566
7728
  phone?: string;
7567
7729
  name?: string;
7568
7730
  avatar?: string;
7569
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
7731
+ rawData?: ({
7732
+ [key: string]: unknown;
7733
+ } | (string | number | boolean | (string | null) | {
7734
+ [key: string]: unknown;
7735
+ })[] | string | number | boolean) | null;
7570
7736
  };
7571
7737
  } | {
7572
7738
  id: string;
@@ -7579,7 +7745,11 @@ export interface operations {
7579
7745
  phone?: string;
7580
7746
  name?: string;
7581
7747
  avatar?: string;
7582
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
7748
+ rawData?: ({
7749
+ [key: string]: unknown;
7750
+ } | (string | number | boolean | (string | null) | {
7751
+ [key: string]: unknown;
7752
+ })[] | string | number | boolean) | null;
7583
7753
  };
7584
7754
  issuer?: string;
7585
7755
  } | {
@@ -7643,8 +7813,12 @@ export interface operations {
7643
7813
  /** @enum {string} */
7644
7814
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
7645
7815
  oidcClientMetadata?: {
7646
- redirectUris: Record<string, never>[];
7647
- postLogoutRedirectUris: Record<string, never>[];
7816
+ redirectUris: {
7817
+ [key: string]: unknown;
7818
+ }[];
7819
+ postLogoutRedirectUris: {
7820
+ [key: string]: unknown;
7821
+ }[];
7648
7822
  /** Format: url */
7649
7823
  backchannelLogoutUri?: string;
7650
7824
  backchannelLogoutSessionRequired?: boolean;
@@ -7669,6 +7843,7 @@ export interface operations {
7669
7843
  pageRules: {
7670
7844
  path: string;
7671
7845
  }[];
7846
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
7672
7847
  customDomains?: {
7673
7848
  domain: string;
7674
7849
  /** @enum {string} */
@@ -7693,8 +7868,11 @@ export interface operations {
7693
7868
  }[];
7694
7869
  } | null;
7695
7870
  /** @description arbitrary */
7696
- customData?: Record<string, never>;
7871
+ customData?: {
7872
+ [key: string]: unknown;
7873
+ };
7697
7874
  isThirdParty?: boolean;
7875
+ appLevelAccessControlEnabled?: boolean;
7698
7876
  createdAt?: number;
7699
7877
  };
7700
7878
  };
@@ -7727,8 +7905,12 @@ export interface operations {
7727
7905
  /** @enum {string} */
7728
7906
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
7729
7907
  oidcClientMetadata?: {
7730
- redirectUris: Record<string, never>[];
7731
- postLogoutRedirectUris: Record<string, never>[];
7908
+ redirectUris: {
7909
+ [key: string]: unknown;
7910
+ }[];
7911
+ postLogoutRedirectUris: {
7912
+ [key: string]: unknown;
7913
+ }[];
7732
7914
  /** Format: url */
7733
7915
  backchannelLogoutUri?: string;
7734
7916
  backchannelLogoutSessionRequired?: boolean;
@@ -7753,6 +7935,7 @@ export interface operations {
7753
7935
  pageRules: {
7754
7936
  path: string;
7755
7937
  }[];
7938
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
7756
7939
  customDomains?: {
7757
7940
  domain: string;
7758
7941
  /** @enum {string} */
@@ -7777,8 +7960,11 @@ export interface operations {
7777
7960
  }[];
7778
7961
  } | null;
7779
7962
  /** @description arbitrary */
7780
- customData?: Record<string, never>;
7963
+ customData?: {
7964
+ [key: string]: unknown;
7965
+ };
7781
7966
  isThirdParty?: boolean;
7967
+ appLevelAccessControlEnabled?: boolean;
7782
7968
  createdAt?: number;
7783
7969
  };
7784
7970
  };
@@ -7913,12 +8099,16 @@ export interface operations {
7913
8099
  name?: string | null;
7914
8100
  avatar?: string | null;
7915
8101
  /** @description arbitrary */
7916
- customData?: Record<string, never>;
8102
+ customData?: {
8103
+ [key: string]: unknown;
8104
+ };
7917
8105
  identities?: {
7918
8106
  [key: string]: {
7919
8107
  userId: string;
7920
8108
  /** @description arbitrary */
7921
- details?: Record<string, never>;
8109
+ details?: {
8110
+ [key: string]: unknown;
8111
+ };
7922
8112
  };
7923
8113
  };
7924
8114
  lastSignInAt?: number | null;
@@ -7952,7 +8142,9 @@ export interface operations {
7952
8142
  issuer: string;
7953
8143
  identityId: string;
7954
8144
  /** @description arbitrary */
7955
- detail: Record<string, never>;
8145
+ detail: {
8146
+ [key: string]: unknown;
8147
+ };
7956
8148
  }[];
7957
8149
  mfaVerificationFactors?: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
7958
8150
  roles?: {
@@ -7989,7 +8181,9 @@ export interface operations {
7989
8181
  /** Format: "urn:ietf:params:oauth:grant-type:token-exchange" */
7990
8182
  type?: string;
7991
8183
  /** @description arbitrary */
7992
- subjectTokenContext?: Record<string, never>;
8184
+ subjectTokenContext?: {
8185
+ [key: string]: unknown;
8186
+ };
7993
8187
  };
7994
8188
  interaction?: {
7995
8189
  /** @enum {string} */
@@ -8063,7 +8257,11 @@ export interface operations {
8063
8257
  phone?: string;
8064
8258
  name?: string;
8065
8259
  avatar?: string;
8066
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
8260
+ rawData?: ({
8261
+ [key: string]: unknown;
8262
+ } | (string | number | boolean | (string | null) | {
8263
+ [key: string]: unknown;
8264
+ })[] | string | number | boolean) | null;
8067
8265
  };
8068
8266
  } | {
8069
8267
  id: string;
@@ -8076,7 +8274,11 @@ export interface operations {
8076
8274
  phone?: string;
8077
8275
  name?: string;
8078
8276
  avatar?: string;
8079
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
8277
+ rawData?: ({
8278
+ [key: string]: unknown;
8279
+ } | (string | number | boolean | (string | null) | {
8280
+ [key: string]: unknown;
8281
+ })[] | string | number | boolean) | null;
8080
8282
  };
8081
8283
  issuer?: string;
8082
8284
  } | {
@@ -8140,8 +8342,12 @@ export interface operations {
8140
8342
  /** @enum {string} */
8141
8343
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
8142
8344
  oidcClientMetadata?: {
8143
- redirectUris: Record<string, never>[];
8144
- postLogoutRedirectUris: Record<string, never>[];
8345
+ redirectUris: {
8346
+ [key: string]: unknown;
8347
+ }[];
8348
+ postLogoutRedirectUris: {
8349
+ [key: string]: unknown;
8350
+ }[];
8145
8351
  /** Format: url */
8146
8352
  backchannelLogoutUri?: string;
8147
8353
  backchannelLogoutSessionRequired?: boolean;
@@ -8166,6 +8372,7 @@ export interface operations {
8166
8372
  pageRules: {
8167
8373
  path: string;
8168
8374
  }[];
8375
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
8169
8376
  customDomains?: {
8170
8377
  domain: string;
8171
8378
  /** @enum {string} */
@@ -8190,8 +8397,11 @@ export interface operations {
8190
8397
  }[];
8191
8398
  } | null;
8192
8399
  /** @description arbitrary */
8193
- customData?: Record<string, never>;
8400
+ customData?: {
8401
+ [key: string]: unknown;
8402
+ };
8194
8403
  isThirdParty?: boolean;
8404
+ appLevelAccessControlEnabled?: boolean;
8195
8405
  createdAt?: number;
8196
8406
  };
8197
8407
  };
@@ -8224,8 +8434,12 @@ export interface operations {
8224
8434
  /** @enum {string} */
8225
8435
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
8226
8436
  oidcClientMetadata?: {
8227
- redirectUris: Record<string, never>[];
8228
- postLogoutRedirectUris: Record<string, never>[];
8437
+ redirectUris: {
8438
+ [key: string]: unknown;
8439
+ }[];
8440
+ postLogoutRedirectUris: {
8441
+ [key: string]: unknown;
8442
+ }[];
8229
8443
  /** Format: url */
8230
8444
  backchannelLogoutUri?: string;
8231
8445
  backchannelLogoutSessionRequired?: boolean;
@@ -8250,6 +8464,7 @@ export interface operations {
8250
8464
  pageRules: {
8251
8465
  path: string;
8252
8466
  }[];
8467
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
8253
8468
  customDomains?: {
8254
8469
  domain: string;
8255
8470
  /** @enum {string} */
@@ -8274,8 +8489,11 @@ export interface operations {
8274
8489
  }[];
8275
8490
  } | null;
8276
8491
  /** @description arbitrary */
8277
- customData?: Record<string, never>;
8492
+ customData?: {
8493
+ [key: string]: unknown;
8494
+ };
8278
8495
  isThirdParty?: boolean;
8496
+ appLevelAccessControlEnabled?: boolean;
8279
8497
  createdAt?: number;
8280
8498
  };
8281
8499
  };
@@ -8353,12 +8571,16 @@ export interface operations {
8353
8571
  name?: string | null;
8354
8572
  avatar?: string | null;
8355
8573
  /** @description arbitrary */
8356
- customData?: Record<string, never>;
8574
+ customData?: {
8575
+ [key: string]: unknown;
8576
+ };
8357
8577
  identities?: {
8358
8578
  [key: string]: {
8359
8579
  userId: string;
8360
8580
  /** @description arbitrary */
8361
- details?: Record<string, never>;
8581
+ details?: {
8582
+ [key: string]: unknown;
8583
+ };
8362
8584
  };
8363
8585
  };
8364
8586
  lastSignInAt?: number | null;
@@ -8392,7 +8614,9 @@ export interface operations {
8392
8614
  issuer: string;
8393
8615
  identityId: string;
8394
8616
  /** @description arbitrary */
8395
- detail: Record<string, never>;
8617
+ detail: {
8618
+ [key: string]: unknown;
8619
+ };
8396
8620
  }[];
8397
8621
  mfaVerificationFactors?: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
8398
8622
  roles?: {
@@ -8429,7 +8653,9 @@ export interface operations {
8429
8653
  /** Format: "urn:ietf:params:oauth:grant-type:token-exchange" */
8430
8654
  type?: string;
8431
8655
  /** @description arbitrary */
8432
- subjectTokenContext?: Record<string, never>;
8656
+ subjectTokenContext?: {
8657
+ [key: string]: unknown;
8658
+ };
8433
8659
  };
8434
8660
  interaction?: {
8435
8661
  /** @enum {string} */
@@ -8503,7 +8729,11 @@ export interface operations {
8503
8729
  phone?: string;
8504
8730
  name?: string;
8505
8731
  avatar?: string;
8506
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
8732
+ rawData?: ({
8733
+ [key: string]: unknown;
8734
+ } | (string | number | boolean | (string | null) | {
8735
+ [key: string]: unknown;
8736
+ })[] | string | number | boolean) | null;
8507
8737
  };
8508
8738
  } | {
8509
8739
  id: string;
@@ -8516,7 +8746,11 @@ export interface operations {
8516
8746
  phone?: string;
8517
8747
  name?: string;
8518
8748
  avatar?: string;
8519
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
8749
+ rawData?: ({
8750
+ [key: string]: unknown;
8751
+ } | (string | number | boolean | (string | null) | {
8752
+ [key: string]: unknown;
8753
+ })[] | string | number | boolean) | null;
8520
8754
  };
8521
8755
  issuer?: string;
8522
8756
  } | {
@@ -8580,8 +8814,12 @@ export interface operations {
8580
8814
  /** @enum {string} */
8581
8815
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
8582
8816
  oidcClientMetadata?: {
8583
- redirectUris: Record<string, never>[];
8584
- postLogoutRedirectUris: Record<string, never>[];
8817
+ redirectUris: {
8818
+ [key: string]: unknown;
8819
+ }[];
8820
+ postLogoutRedirectUris: {
8821
+ [key: string]: unknown;
8822
+ }[];
8585
8823
  /** Format: url */
8586
8824
  backchannelLogoutUri?: string;
8587
8825
  backchannelLogoutSessionRequired?: boolean;
@@ -8606,6 +8844,7 @@ export interface operations {
8606
8844
  pageRules: {
8607
8845
  path: string;
8608
8846
  }[];
8847
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
8609
8848
  customDomains?: {
8610
8849
  domain: string;
8611
8850
  /** @enum {string} */
@@ -8630,8 +8869,11 @@ export interface operations {
8630
8869
  }[];
8631
8870
  } | null;
8632
8871
  /** @description arbitrary */
8633
- customData?: Record<string, never>;
8872
+ customData?: {
8873
+ [key: string]: unknown;
8874
+ };
8634
8875
  isThirdParty?: boolean;
8876
+ appLevelAccessControlEnabled?: boolean;
8635
8877
  createdAt?: number;
8636
8878
  };
8637
8879
  };
@@ -8668,8 +8910,12 @@ export interface operations {
8668
8910
  /** @enum {string} */
8669
8911
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
8670
8912
  oidcClientMetadata?: {
8671
- redirectUris: Record<string, never>[];
8672
- postLogoutRedirectUris: Record<string, never>[];
8913
+ redirectUris: {
8914
+ [key: string]: unknown;
8915
+ }[];
8916
+ postLogoutRedirectUris: {
8917
+ [key: string]: unknown;
8918
+ }[];
8673
8919
  /** Format: url */
8674
8920
  backchannelLogoutUri?: string;
8675
8921
  backchannelLogoutSessionRequired?: boolean;
@@ -8694,6 +8940,7 @@ export interface operations {
8694
8940
  pageRules: {
8695
8941
  path: string;
8696
8942
  }[];
8943
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
8697
8944
  customDomains?: {
8698
8945
  domain: string;
8699
8946
  /** @enum {string} */
@@ -8718,8 +8965,11 @@ export interface operations {
8718
8965
  }[];
8719
8966
  } | null;
8720
8967
  /** @description arbitrary */
8721
- customData?: Record<string, never>;
8968
+ customData?: {
8969
+ [key: string]: unknown;
8970
+ };
8722
8971
  isThirdParty?: boolean;
8972
+ appLevelAccessControlEnabled?: boolean;
8723
8973
  createdAt?: number;
8724
8974
  };
8725
8975
  };
@@ -8804,12 +9054,16 @@ export interface operations {
8804
9054
  name?: string | null;
8805
9055
  avatar?: string | null;
8806
9056
  /** @description arbitrary */
8807
- customData?: Record<string, never>;
9057
+ customData?: {
9058
+ [key: string]: unknown;
9059
+ };
8808
9060
  identities?: {
8809
9061
  [key: string]: {
8810
9062
  userId: string;
8811
9063
  /** @description arbitrary */
8812
- details?: Record<string, never>;
9064
+ details?: {
9065
+ [key: string]: unknown;
9066
+ };
8813
9067
  };
8814
9068
  };
8815
9069
  lastSignInAt?: number | null;
@@ -8843,7 +9097,9 @@ export interface operations {
8843
9097
  issuer: string;
8844
9098
  identityId: string;
8845
9099
  /** @description arbitrary */
8846
- detail: Record<string, never>;
9100
+ detail: {
9101
+ [key: string]: unknown;
9102
+ };
8847
9103
  }[];
8848
9104
  mfaVerificationFactors?: ("Totp" | "WebAuthn" | "BackupCode" | "EmailVerificationCode" | "PhoneVerificationCode")[];
8849
9105
  roles?: {
@@ -8880,7 +9136,9 @@ export interface operations {
8880
9136
  /** Format: "urn:ietf:params:oauth:grant-type:token-exchange" */
8881
9137
  type?: string;
8882
9138
  /** @description arbitrary */
8883
- subjectTokenContext?: Record<string, never>;
9139
+ subjectTokenContext?: {
9140
+ [key: string]: unknown;
9141
+ };
8884
9142
  };
8885
9143
  interaction?: {
8886
9144
  /** @enum {string} */
@@ -8954,7 +9212,11 @@ export interface operations {
8954
9212
  phone?: string;
8955
9213
  name?: string;
8956
9214
  avatar?: string;
8957
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
9215
+ rawData?: ({
9216
+ [key: string]: unknown;
9217
+ } | (string | number | boolean | (string | null) | {
9218
+ [key: string]: unknown;
9219
+ })[] | string | number | boolean) | null;
8958
9220
  };
8959
9221
  } | {
8960
9222
  id: string;
@@ -8967,7 +9229,11 @@ export interface operations {
8967
9229
  phone?: string;
8968
9230
  name?: string;
8969
9231
  avatar?: string;
8970
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
9232
+ rawData?: ({
9233
+ [key: string]: unknown;
9234
+ } | (string | number | boolean | (string | null) | {
9235
+ [key: string]: unknown;
9236
+ })[] | string | number | boolean) | null;
8971
9237
  };
8972
9238
  issuer?: string;
8973
9239
  } | {
@@ -9031,8 +9297,12 @@ export interface operations {
9031
9297
  /** @enum {string} */
9032
9298
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
9033
9299
  oidcClientMetadata?: {
9034
- redirectUris: Record<string, never>[];
9035
- postLogoutRedirectUris: Record<string, never>[];
9300
+ redirectUris: {
9301
+ [key: string]: unknown;
9302
+ }[];
9303
+ postLogoutRedirectUris: {
9304
+ [key: string]: unknown;
9305
+ }[];
9036
9306
  /** Format: url */
9037
9307
  backchannelLogoutUri?: string;
9038
9308
  backchannelLogoutSessionRequired?: boolean;
@@ -9057,6 +9327,7 @@ export interface operations {
9057
9327
  pageRules: {
9058
9328
  path: string;
9059
9329
  }[];
9330
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
9060
9331
  customDomains?: {
9061
9332
  domain: string;
9062
9333
  /** @enum {string} */
@@ -9081,8 +9352,11 @@ export interface operations {
9081
9352
  }[];
9082
9353
  } | null;
9083
9354
  /** @description arbitrary */
9084
- customData?: Record<string, never>;
9355
+ customData?: {
9356
+ [key: string]: unknown;
9357
+ };
9085
9358
  isThirdParty?: boolean;
9359
+ appLevelAccessControlEnabled?: boolean;
9086
9360
  createdAt?: number;
9087
9361
  };
9088
9362
  };
@@ -9110,8 +9384,12 @@ export interface operations {
9110
9384
  /** @enum {string} */
9111
9385
  type?: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
9112
9386
  oidcClientMetadata?: {
9113
- redirectUris: Record<string, never>[];
9114
- postLogoutRedirectUris: Record<string, never>[];
9387
+ redirectUris: {
9388
+ [key: string]: unknown;
9389
+ }[];
9390
+ postLogoutRedirectUris: {
9391
+ [key: string]: unknown;
9392
+ }[];
9115
9393
  /** Format: url */
9116
9394
  backchannelLogoutUri?: string;
9117
9395
  backchannelLogoutSessionRequired?: boolean;
@@ -9136,6 +9414,7 @@ export interface operations {
9136
9414
  pageRules: {
9137
9415
  path: string;
9138
9416
  }[];
9417
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
9139
9418
  customDomains?: {
9140
9419
  domain: string;
9141
9420
  /** @enum {string} */
@@ -9160,8 +9439,11 @@ export interface operations {
9160
9439
  }[];
9161
9440
  } | null;
9162
9441
  /** @description arbitrary */
9163
- customData?: Record<string, never>;
9442
+ customData?: {
9443
+ [key: string]: unknown;
9444
+ };
9164
9445
  isThirdParty?: boolean;
9446
+ appLevelAccessControlEnabled?: boolean;
9165
9447
  createdAt?: number;
9166
9448
  };
9167
9449
  };
@@ -9175,7 +9457,9 @@ export interface operations {
9175
9457
  [name: string]: unknown;
9176
9458
  };
9177
9459
  content: {
9178
- "application/json": Record<string, never>;
9460
+ "application/json": {
9461
+ [key: string]: unknown;
9462
+ };
9179
9463
  };
9180
9464
  };
9181
9465
  /** @description Zod errors in cloud service (data type does not match expectation, can be either request body or response body). */
@@ -9324,20 +9608,28 @@ export interface operations {
9324
9608
  syncProfile: boolean;
9325
9609
  enableTokenStorage: boolean;
9326
9610
  /** @description arbitrary */
9327
- config: Record<string, never>;
9611
+ config: {
9612
+ [key: string]: unknown;
9613
+ };
9328
9614
  metadata: {
9329
9615
  target?: string;
9330
9616
  /** @description Validator function */
9331
- name?: Record<string, never>;
9617
+ name?: {
9618
+ [key: string]: unknown;
9619
+ };
9332
9620
  logo?: string;
9333
9621
  logoDark?: string | null;
9334
9622
  };
9335
9623
  connectorId: string;
9336
9624
  target: string;
9337
9625
  /** @description Validator function */
9338
- name: Record<string, never>;
9626
+ name: {
9627
+ [key: string]: unknown;
9628
+ };
9339
9629
  /** @description Validator function */
9340
- description: Record<string, never>;
9630
+ description: {
9631
+ [key: string]: unknown;
9632
+ };
9341
9633
  logo: string;
9342
9634
  logoDark: string | null;
9343
9635
  readme: string;
@@ -9456,14 +9748,18 @@ export interface operations {
9456
9748
  content: {
9457
9749
  "application/json": {
9458
9750
  /** @description The connector config object that will be passed to the connector. The config object should be compatible with the connector factory. */
9459
- config?: Record<string, never>;
9751
+ config?: {
9752
+ [key: string]: unknown;
9753
+ };
9460
9754
  /** @description The connector factory ID for creating the connector. */
9461
9755
  connectorId: string;
9462
9756
  /** @description Custom connector metadata, will be used to overwrite the default connector factory metadata. */
9463
9757
  metadata?: {
9464
9758
  target?: string;
9465
9759
  /** @description Validator function */
9466
- name?: Record<string, never>;
9760
+ name?: {
9761
+ [key: string]: unknown;
9762
+ };
9467
9763
  logo?: string;
9468
9764
  logoDark?: string | null;
9469
9765
  };
@@ -9487,20 +9783,28 @@ export interface operations {
9487
9783
  syncProfile: boolean;
9488
9784
  enableTokenStorage: boolean;
9489
9785
  /** @description arbitrary */
9490
- config: Record<string, never>;
9786
+ config: {
9787
+ [key: string]: unknown;
9788
+ };
9491
9789
  metadata: {
9492
9790
  target?: string;
9493
9791
  /** @description Validator function */
9494
- name?: Record<string, never>;
9792
+ name?: {
9793
+ [key: string]: unknown;
9794
+ };
9495
9795
  logo?: string;
9496
9796
  logoDark?: string | null;
9497
9797
  };
9498
9798
  connectorId: string;
9499
9799
  target: string;
9500
9800
  /** @description Validator function */
9501
- name: Record<string, never>;
9801
+ name: {
9802
+ [key: string]: unknown;
9803
+ };
9502
9804
  /** @description Validator function */
9503
- description: Record<string, never>;
9805
+ description: {
9806
+ [key: string]: unknown;
9807
+ };
9504
9808
  logo: string;
9505
9809
  logoDark: string | null;
9506
9810
  readme: string;
@@ -9638,20 +9942,28 @@ export interface operations {
9638
9942
  syncProfile: boolean;
9639
9943
  enableTokenStorage: boolean;
9640
9944
  /** @description arbitrary */
9641
- config: Record<string, never>;
9945
+ config: {
9946
+ [key: string]: unknown;
9947
+ };
9642
9948
  metadata: {
9643
9949
  target?: string;
9644
9950
  /** @description Validator function */
9645
- name?: Record<string, never>;
9951
+ name?: {
9952
+ [key: string]: unknown;
9953
+ };
9646
9954
  logo?: string;
9647
9955
  logoDark?: string | null;
9648
9956
  };
9649
9957
  connectorId: string;
9650
9958
  target: string;
9651
9959
  /** @description Validator function */
9652
- name: Record<string, never>;
9960
+ name: {
9961
+ [key: string]: unknown;
9962
+ };
9653
9963
  /** @description Validator function */
9654
- description: Record<string, never>;
9964
+ description: {
9965
+ [key: string]: unknown;
9966
+ };
9655
9967
  logo: string;
9656
9968
  logoDark: string | null;
9657
9969
  readme: string;
@@ -9829,12 +10141,16 @@ export interface operations {
9829
10141
  content: {
9830
10142
  "application/json": {
9831
10143
  /** @description The connector config object that will be passed to the connector. The config object should be compatible with the connector factory. */
9832
- config?: Record<string, never>;
10144
+ config?: {
10145
+ [key: string]: unknown;
10146
+ };
9833
10147
  /** @description Custom connector metadata, will be used to overwrite the default connector metadata. */
9834
10148
  metadata?: {
9835
10149
  target?: string;
9836
10150
  /** @description Validator function */
9837
- name?: Record<string, never>;
10151
+ name?: {
10152
+ [key: string]: unknown;
10153
+ };
9838
10154
  logo?: string;
9839
10155
  logoDark?: string | null;
9840
10156
  };
@@ -9856,20 +10172,28 @@ export interface operations {
9856
10172
  syncProfile: boolean;
9857
10173
  enableTokenStorage: boolean;
9858
10174
  /** @description arbitrary */
9859
- config: Record<string, never>;
10175
+ config: {
10176
+ [key: string]: unknown;
10177
+ };
9860
10178
  metadata: {
9861
10179
  target?: string;
9862
10180
  /** @description Validator function */
9863
- name?: Record<string, never>;
10181
+ name?: {
10182
+ [key: string]: unknown;
10183
+ };
9864
10184
  logo?: string;
9865
10185
  logoDark?: string | null;
9866
10186
  };
9867
10187
  connectorId: string;
9868
10188
  target: string;
9869
10189
  /** @description Validator function */
9870
- name: Record<string, never>;
10190
+ name: {
10191
+ [key: string]: unknown;
10192
+ };
9871
10193
  /** @description Validator function */
9872
- description: Record<string, never>;
10194
+ description: {
10195
+ [key: string]: unknown;
10196
+ };
9873
10197
  logo: string;
9874
10198
  logoDark: string | null;
9875
10199
  readme: string;
@@ -10015,7 +10339,9 @@ export interface operations {
10015
10339
  */
10016
10340
  email?: string;
10017
10341
  /** @description Connector configuration object for testing. */
10018
- config: Record<string, never>;
10342
+ config: {
10343
+ [key: string]: unknown;
10344
+ };
10019
10345
  /** @description Preferred language for the message. If not set, the default language will be used. (Applicable only when custom i18n templates are configured.) */
10020
10346
  locale?: string;
10021
10347
  };
@@ -10146,9 +10472,13 @@ export interface operations {
10146
10472
  id: string;
10147
10473
  target: string;
10148
10474
  /** @description Validator function */
10149
- name: Record<string, never>;
10475
+ name: {
10476
+ [key: string]: unknown;
10477
+ };
10150
10478
  /** @description Validator function */
10151
- description: Record<string, never>;
10479
+ description: {
10480
+ [key: string]: unknown;
10481
+ };
10152
10482
  logo: string;
10153
10483
  logoDark: string | null;
10154
10484
  readme: string;
@@ -10267,9 +10597,13 @@ export interface operations {
10267
10597
  id: string;
10268
10598
  target: string;
10269
10599
  /** @description Validator function */
10270
- name: Record<string, never>;
10600
+ name: {
10601
+ [key: string]: unknown;
10602
+ };
10271
10603
  /** @description Validator function */
10272
- description: Record<string, never>;
10604
+ description: {
10605
+ [key: string]: unknown;
10606
+ };
10273
10607
  logo: string;
10274
10608
  logoDark: string | null;
10275
10609
  readme: string;
@@ -11106,6 +11440,13 @@ export interface operations {
11106
11440
  id: string;
11107
11441
  createdAt: number;
11108
11442
  } | null;
11443
+ /** @description Cloud only. Additional Content Security Policy source expressions for Custom UI assets. These values are applied to the hosted sign-in page only when Custom UI assets are configured. */
11444
+ customUiCsp: {
11445
+ /** @description Additional source expressions appended to the `script-src` directive for scripts loaded by Custom UI assets. HTTPS sources are supported. HTTP localhost sources are allowed only outside production. */
11446
+ scriptSrc?: string[];
11447
+ /** @description Additional source expressions appended to the `connect-src` directive for network requests made by Custom UI assets. HTTPS and WSS sources are supported. HTTP localhost sources are allowed only outside production. */
11448
+ connectSrc?: string[];
11449
+ };
11109
11450
  /** @description Password policies to adjust the password strength requirements. */
11110
11451
  passwordPolicy: {
11111
11452
  /** @default {} */
@@ -11286,6 +11627,13 @@ export interface operations {
11286
11627
  id: string;
11287
11628
  createdAt: number;
11288
11629
  } | null;
11630
+ /** @description Cloud only. Configure additional Content Security Policy source expressions for Custom UI assets. These values are applied to the hosted sign-in page only when Custom UI assets are configured. */
11631
+ customUiCsp?: {
11632
+ /** @description Additional source expressions to append to the `script-src` directive for scripts loaded by Custom UI assets. Use HTTPS sources; HTTP localhost sources are allowed only outside production. */
11633
+ scriptSrc?: string[];
11634
+ /** @description Additional source expressions to append to the `connect-src` directive for network requests made by Custom UI assets. Use HTTPS or WSS sources; HTTP localhost sources are allowed only outside production. */
11635
+ connectSrc?: string[];
11636
+ };
11289
11637
  /** @description Password policies to adjust the password strength requirements. */
11290
11638
  passwordPolicy?: {
11291
11639
  /** @default {} */
@@ -11433,6 +11781,10 @@ export interface operations {
11433
11781
  id: string;
11434
11782
  createdAt: number;
11435
11783
  } | null;
11784
+ customUiCsp: {
11785
+ scriptSrc?: string[];
11786
+ connectSrc?: string[];
11787
+ };
11436
11788
  passwordPolicy: {
11437
11789
  /** @default {} */
11438
11790
  length: {
@@ -11683,12 +12035,16 @@ export interface operations {
11683
12035
  name: string | null;
11684
12036
  avatar: string | null;
11685
12037
  /** @description arbitrary */
11686
- customData: Record<string, never>;
12038
+ customData: {
12039
+ [key: string]: unknown;
12040
+ };
11687
12041
  identities: {
11688
12042
  [key: string]: {
11689
12043
  userId: string;
11690
12044
  /** @description arbitrary */
11691
- details?: Record<string, never>;
12045
+ details?: {
12046
+ [key: string]: unknown;
12047
+ };
11692
12048
  };
11693
12049
  };
11694
12050
  lastSignInAt: number | null;
@@ -11726,7 +12082,9 @@ export interface operations {
11726
12082
  issuer: string;
11727
12083
  identityId: string;
11728
12084
  /** @description arbitrary */
11729
- detail: Record<string, never>;
12085
+ detail: {
12086
+ [key: string]: unknown;
12087
+ };
11730
12088
  createdAt: number;
11731
12089
  updatedAt: number;
11732
12090
  ssoConnectorId: string;
@@ -11844,7 +12202,9 @@ export interface operations {
11844
12202
  /** @description Custom data object to update for the given user ID. Note this will replace the entire custom data object.
11845
12203
  *
11846
12204
  * If you want to perform a partial update, use the `PATCH /api/users/{userId}/custom-data` endpoint instead. */
11847
- customData?: Record<string, never>;
12205
+ customData?: {
12206
+ [key: string]: unknown;
12207
+ };
11848
12208
  profile?: {
11849
12209
  familyName?: string;
11850
12210
  givenName?: string;
@@ -11884,12 +12244,16 @@ export interface operations {
11884
12244
  name: string | null;
11885
12245
  avatar: string | null;
11886
12246
  /** @description arbitrary */
11887
- customData: Record<string, never>;
12247
+ customData: {
12248
+ [key: string]: unknown;
12249
+ };
11888
12250
  identities: {
11889
12251
  [key: string]: {
11890
12252
  userId: string;
11891
12253
  /** @description arbitrary */
11892
- details?: Record<string, never>;
12254
+ details?: {
12255
+ [key: string]: unknown;
12256
+ };
11893
12257
  };
11894
12258
  };
11895
12259
  lastSignInAt: number | null;
@@ -11926,7 +12290,9 @@ export interface operations {
11926
12290
  issuer: string;
11927
12291
  identityId: string;
11928
12292
  /** @description arbitrary */
11929
- detail: Record<string, never>;
12293
+ detail: {
12294
+ [key: string]: unknown;
12295
+ };
11930
12296
  createdAt: number;
11931
12297
  updatedAt: number;
11932
12298
  ssoConnectorId: string;
@@ -11992,7 +12358,9 @@ export interface operations {
11992
12358
  [name: string]: unknown;
11993
12359
  };
11994
12360
  content: {
11995
- "application/json": Record<string, never>;
12361
+ "application/json": {
12362
+ [key: string]: unknown;
12363
+ };
11996
12364
  };
11997
12365
  };
11998
12366
  /** @description Bad Request */
@@ -12032,7 +12400,9 @@ export interface operations {
12032
12400
  content: {
12033
12401
  "application/json": {
12034
12402
  /** @description Partial custom data object to update for the given user ID. */
12035
- customData: Record<string, never>;
12403
+ customData: {
12404
+ [key: string]: unknown;
12405
+ };
12036
12406
  };
12037
12407
  };
12038
12408
  };
@@ -12043,7 +12413,9 @@ export interface operations {
12043
12413
  [name: string]: unknown;
12044
12414
  };
12045
12415
  content: {
12046
- "application/json": Record<string, never>;
12416
+ "application/json": {
12417
+ [key: string]: unknown;
12418
+ };
12047
12419
  };
12048
12420
  };
12049
12421
  /** @description Bad Request */
@@ -12344,12 +12716,16 @@ export interface operations {
12344
12716
  name: string | null;
12345
12717
  avatar: string | null;
12346
12718
  /** @description arbitrary */
12347
- customData: Record<string, never>;
12719
+ customData: {
12720
+ [key: string]: unknown;
12721
+ };
12348
12722
  identities: {
12349
12723
  [key: string]: {
12350
12724
  userId: string;
12351
12725
  /** @description arbitrary */
12352
- details?: Record<string, never>;
12726
+ details?: {
12727
+ [key: string]: unknown;
12728
+ };
12353
12729
  };
12354
12730
  };
12355
12731
  lastSignInAt: number | null;
@@ -12386,7 +12762,9 @@ export interface operations {
12386
12762
  issuer: string;
12387
12763
  identityId: string;
12388
12764
  /** @description arbitrary */
12389
- detail: Record<string, never>;
12765
+ detail: {
12766
+ [key: string]: unknown;
12767
+ };
12390
12768
  createdAt: number;
12391
12769
  updatedAt: number;
12392
12770
  ssoConnectorId: string;
@@ -12457,7 +12835,9 @@ export interface operations {
12457
12835
  name?: string;
12458
12836
  avatar?: (string) | null;
12459
12837
  /** @description arbitrary */
12460
- customData?: Record<string, never>;
12838
+ customData?: {
12839
+ [key: string]: unknown;
12840
+ };
12461
12841
  profile?: {
12462
12842
  familyName?: string;
12463
12843
  givenName?: string;
@@ -12497,12 +12877,16 @@ export interface operations {
12497
12877
  name: string | null;
12498
12878
  avatar: string | null;
12499
12879
  /** @description arbitrary */
12500
- customData: Record<string, never>;
12880
+ customData: {
12881
+ [key: string]: unknown;
12882
+ };
12501
12883
  identities: {
12502
12884
  [key: string]: {
12503
12885
  userId: string;
12504
12886
  /** @description arbitrary */
12505
- details?: Record<string, never>;
12887
+ details?: {
12888
+ [key: string]: unknown;
12889
+ };
12506
12890
  };
12507
12891
  };
12508
12892
  lastSignInAt: number | null;
@@ -12539,7 +12923,9 @@ export interface operations {
12539
12923
  issuer: string;
12540
12924
  identityId: string;
12541
12925
  /** @description arbitrary */
12542
- detail: Record<string, never>;
12926
+ detail: {
12927
+ [key: string]: unknown;
12928
+ };
12543
12929
  createdAt: number;
12544
12930
  updatedAt: number;
12545
12931
  ssoConnectorId: string;
@@ -12620,12 +13006,16 @@ export interface operations {
12620
13006
  name: string | null;
12621
13007
  avatar: string | null;
12622
13008
  /** @description arbitrary */
12623
- customData: Record<string, never>;
13009
+ customData: {
13010
+ [key: string]: unknown;
13011
+ };
12624
13012
  identities: {
12625
13013
  [key: string]: {
12626
13014
  userId: string;
12627
13015
  /** @description arbitrary */
12628
- details?: Record<string, never>;
13016
+ details?: {
13017
+ [key: string]: unknown;
13018
+ };
12629
13019
  };
12630
13020
  };
12631
13021
  lastSignInAt: number | null;
@@ -12662,7 +13052,9 @@ export interface operations {
12662
13052
  issuer: string;
12663
13053
  identityId: string;
12664
13054
  /** @description arbitrary */
12665
- detail: Record<string, never>;
13055
+ detail: {
13056
+ [key: string]: unknown;
13057
+ };
12666
13058
  createdAt: number;
12667
13059
  updatedAt: number;
12668
13060
  ssoConnectorId: string;
@@ -12852,12 +13244,16 @@ export interface operations {
12852
13244
  name: string | null;
12853
13245
  avatar: string | null;
12854
13246
  /** @description arbitrary */
12855
- customData: Record<string, never>;
13247
+ customData: {
13248
+ [key: string]: unknown;
13249
+ };
12856
13250
  identities: {
12857
13251
  [key: string]: {
12858
13252
  userId: string;
12859
13253
  /** @description arbitrary */
12860
- details?: Record<string, never>;
13254
+ details?: {
13255
+ [key: string]: unknown;
13256
+ };
12861
13257
  };
12862
13258
  };
12863
13259
  lastSignInAt: number | null;
@@ -12894,7 +13290,9 @@ export interface operations {
12894
13290
  issuer: string;
12895
13291
  identityId: string;
12896
13292
  /** @description arbitrary */
12897
- detail: Record<string, never>;
13293
+ detail: {
13294
+ [key: string]: unknown;
13295
+ };
12898
13296
  createdAt: number;
12899
13297
  updatedAt: number;
12900
13298
  ssoConnectorId: string;
@@ -13219,7 +13617,9 @@ export interface operations {
13219
13617
  identity: {
13220
13618
  userId: string;
13221
13619
  /** @description arbitrary */
13222
- details?: Record<string, never>;
13620
+ details?: {
13621
+ [key: string]: unknown;
13622
+ };
13223
13623
  };
13224
13624
  /** @description The desensitized token set secret associated with the user's social identity.
13225
13625
  * This field is included only if the `includeTokenSecret` query parameter is provided and the corresponding connector has token storage enabled. */
@@ -13291,7 +13691,9 @@ export interface operations {
13291
13691
  /** @description The user's social identity ID. */
13292
13692
  userId: string;
13293
13693
  /** @description The user's social identity details. */
13294
- details?: Record<string, never>;
13694
+ details?: {
13695
+ [key: string]: unknown;
13696
+ };
13295
13697
  };
13296
13698
  };
13297
13699
  };
@@ -13306,7 +13708,9 @@ export interface operations {
13306
13708
  [key: string]: {
13307
13709
  userId: string;
13308
13710
  /** @description arbitrary */
13309
- details?: Record<string, never>;
13711
+ details?: {
13712
+ [key: string]: unknown;
13713
+ };
13310
13714
  };
13311
13715
  };
13312
13716
  };
@@ -13321,7 +13725,9 @@ export interface operations {
13321
13725
  [key: string]: {
13322
13726
  userId: string;
13323
13727
  /** @description arbitrary */
13324
- details?: Record<string, never>;
13728
+ details?: {
13729
+ [key: string]: unknown;
13730
+ };
13325
13731
  };
13326
13732
  };
13327
13733
  };
@@ -13390,12 +13796,16 @@ export interface operations {
13390
13796
  name: string | null;
13391
13797
  avatar: string | null;
13392
13798
  /** @description arbitrary */
13393
- customData: Record<string, never>;
13799
+ customData: {
13800
+ [key: string]: unknown;
13801
+ };
13394
13802
  identities: {
13395
13803
  [key: string]: {
13396
13804
  userId: string;
13397
13805
  /** @description arbitrary */
13398
- details?: Record<string, never>;
13806
+ details?: {
13807
+ [key: string]: unknown;
13808
+ };
13399
13809
  };
13400
13810
  };
13401
13811
  lastSignInAt: number | null;
@@ -13432,7 +13842,9 @@ export interface operations {
13432
13842
  issuer: string;
13433
13843
  identityId: string;
13434
13844
  /** @description arbitrary */
13435
- detail: Record<string, never>;
13845
+ detail: {
13846
+ [key: string]: unknown;
13847
+ };
13436
13848
  createdAt: number;
13437
13849
  updatedAt: number;
13438
13850
  ssoConnectorId: string;
@@ -13503,7 +13915,9 @@ export interface operations {
13503
13915
  [key: string]: {
13504
13916
  userId: string;
13505
13917
  /** @description arbitrary */
13506
- details?: Record<string, never>;
13918
+ details?: {
13919
+ [key: string]: unknown;
13920
+ };
13507
13921
  };
13508
13922
  };
13509
13923
  };
@@ -13569,7 +13983,9 @@ export interface operations {
13569
13983
  name: string;
13570
13984
  description: string | null;
13571
13985
  /** @description arbitrary */
13572
- customData: Record<string, never>;
13986
+ customData: {
13987
+ [key: string]: unknown;
13988
+ };
13573
13989
  isMfaRequired: boolean;
13574
13990
  color: {
13575
13991
  /** Format: regex */
@@ -14351,7 +14767,9 @@ export interface operations {
14351
14767
  issuer: string;
14352
14768
  identityId: string;
14353
14769
  /** @description arbitrary */
14354
- detail: Record<string, never>;
14770
+ detail: {
14771
+ [key: string]: unknown;
14772
+ };
14355
14773
  createdAt: number;
14356
14774
  updatedAt: number;
14357
14775
  ssoConnectorId: string;
@@ -14436,7 +14854,9 @@ export interface operations {
14436
14854
  identity: {
14437
14855
  userId: string;
14438
14856
  /** @description arbitrary */
14439
- details?: Record<string, never>;
14857
+ details?: {
14858
+ [key: string]: unknown;
14859
+ };
14440
14860
  };
14441
14861
  tokenSecret?: {
14442
14862
  tenantId: string;
@@ -14467,7 +14887,9 @@ export interface operations {
14467
14887
  issuer: string;
14468
14888
  identityId: string;
14469
14889
  /** @description arbitrary */
14470
- detail: Record<string, never>;
14890
+ detail: {
14891
+ [key: string]: unknown;
14892
+ };
14471
14893
  createdAt: number;
14472
14894
  updatedAt: number;
14473
14895
  ssoConnectorId: string;
@@ -14634,7 +15056,11 @@ export interface operations {
14634
15056
  phone?: string;
14635
15057
  name?: string;
14636
15058
  avatar?: string;
14637
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
15059
+ rawData?: ({
15060
+ [key: string]: unknown;
15061
+ } | (string | number | boolean | (string | null) | {
15062
+ [key: string]: unknown;
15063
+ })[] | string | number | boolean) | null;
14638
15064
  };
14639
15065
  } | {
14640
15066
  id: string;
@@ -14647,7 +15073,11 @@ export interface operations {
14647
15073
  phone?: string;
14648
15074
  name?: string;
14649
15075
  avatar?: string;
14650
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
15076
+ rawData?: ({
15077
+ [key: string]: unknown;
15078
+ } | (string | number | boolean | (string | null) | {
15079
+ [key: string]: unknown;
15080
+ })[] | string | number | boolean) | null;
14651
15081
  };
14652
15082
  issuer?: string;
14653
15083
  } | {
@@ -14850,7 +15280,11 @@ export interface operations {
14850
15280
  phone?: string;
14851
15281
  name?: string;
14852
15282
  avatar?: string;
14853
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
15283
+ rawData?: ({
15284
+ [key: string]: unknown;
15285
+ } | (string | number | boolean | (string | null) | {
15286
+ [key: string]: unknown;
15287
+ })[] | string | number | boolean) | null;
14854
15288
  };
14855
15289
  } | {
14856
15290
  id: string;
@@ -14863,7 +15297,11 @@ export interface operations {
14863
15297
  phone?: string;
14864
15298
  name?: string;
14865
15299
  avatar?: string;
14866
- rawData?: (Record<string, never> | (string | number | boolean | (string | null) | Record<string, never>)[] | string | number | boolean) | null;
15300
+ rawData?: ({
15301
+ [key: string]: unknown;
15302
+ } | (string | number | boolean | (string | null) | {
15303
+ [key: string]: unknown;
15304
+ })[] | string | number | boolean) | null;
14867
15305
  };
14868
15306
  issuer?: string;
14869
15307
  } | {
@@ -15032,6 +15470,12 @@ export interface operations {
15032
15470
  applicationId?: string;
15033
15471
  /** @description Filter logs by log key. */
15034
15472
  logKey?: string;
15473
+ /** @description When `true`, short-circuits the underlying `count(*)` query: any tenant with more than 10,000 matching logs saturates `Total-Number` at the sentinel value `10001` and the response emits `Total-Number-Is-Capped: true`. The `Link` header then omits `rel="last"` and `rel="next"` because the real total is unknown. Default `false`; recommended `true` for any client whose tenant volume may exceed 10,000 matching logs to avoid `statement_timeout`. */
15474
+ enableCap?: string;
15475
+ /** @description Exclusive lower bound on `createdAt`, in unix milliseconds. When set, returns only logs where `createdAt > start_time`. Recommended for clients paginating across very large log ranges to keep query latency consistent. */
15476
+ start_time?: string;
15477
+ /** @description Exclusive upper bound on `createdAt`, in unix milliseconds. When set, returns only logs where `createdAt < end_time`. Returns `400` if `start_time >= end_time` when both are present. */
15478
+ end_time?: string;
15035
15479
  /** @description Page number (starts from 1). */
15036
15480
  page?: number;
15037
15481
  /** @description Entries per page. */
@@ -15046,6 +15490,12 @@ export interface operations {
15046
15490
  /** @description An array of logs that match the given query. */
15047
15491
  200: {
15048
15492
  headers: {
15493
+ /** @description When `enableCap=false`: exact match count. When `enableCap=true`: either the exact count (≤ 10,000) or the saturation sentinel `10001`; inspect `Total-Number-Is-Capped` to distinguish. */
15494
+ "Total-Number"?: number;
15495
+ /** @description Present and set to `true` only when `enableCap=true` and the result has more than 10,000 matching logs (in which case `Total-Number` is `10001`). Consumers should treat `Total-Number` as `> 10,000` when this header is present. */
15496
+ "Total-Number-Is-Capped"?: "true";
15497
+ /** @description Pagination links per RFC 5988. `rel="first"` and `rel="prev"` are emitted as usual. When the response is capped (`Total-Number-Is-Capped: true`), `rel="last"` and `rel="next"` are omitted because the saturated count makes the derived page count unreliable — clients should walk forward by incrementing `page` and stop on an empty response. */
15498
+ Link?: string;
15049
15499
  [name: string]: unknown;
15050
15500
  };
15051
15501
  content: {
@@ -15098,7 +15548,7 @@ export interface operations {
15098
15548
  }[];
15099
15549
  };
15100
15550
  };
15101
- /** @description Bad Request */
15551
+ /** @description Returned when `start_time` or `end_time` is not a finite number, or when `start_time >= end_time`. */
15102
15552
  400: {
15103
15553
  headers: {
15104
15554
  [name: string]: unknown;
@@ -15593,12 +16043,16 @@ export interface operations {
15593
16043
  name: string | null;
15594
16044
  avatar: string | null;
15595
16045
  /** @description arbitrary */
15596
- customData: Record<string, never>;
16046
+ customData: {
16047
+ [key: string]: unknown;
16048
+ };
15597
16049
  identities: {
15598
16050
  [key: string]: {
15599
16051
  userId: string;
15600
16052
  /** @description arbitrary */
15601
- details?: Record<string, never>;
16053
+ details?: {
16054
+ [key: string]: unknown;
16055
+ };
15602
16056
  };
15603
16057
  };
15604
16058
  lastSignInAt: number | null;
@@ -15635,7 +16089,9 @@ export interface operations {
15635
16089
  issuer: string;
15636
16090
  identityId: string;
15637
16091
  /** @description arbitrary */
15638
- detail: Record<string, never>;
16092
+ detail: {
16093
+ [key: string]: unknown;
16094
+ };
15639
16095
  createdAt: number;
15640
16096
  updatedAt: number;
15641
16097
  ssoConnectorId: string;
@@ -15825,8 +16281,12 @@ export interface operations {
15825
16281
  /** @enum {string} */
15826
16282
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
15827
16283
  oidcClientMetadata: {
15828
- redirectUris: Record<string, never>[];
15829
- postLogoutRedirectUris: Record<string, never>[];
16284
+ redirectUris: {
16285
+ [key: string]: unknown;
16286
+ }[];
16287
+ postLogoutRedirectUris: {
16288
+ [key: string]: unknown;
16289
+ }[];
15830
16290
  /** Format: url */
15831
16291
  backchannelLogoutUri?: string;
15832
16292
  backchannelLogoutSessionRequired?: boolean;
@@ -15851,6 +16311,7 @@ export interface operations {
15851
16311
  pageRules: {
15852
16312
  path: string;
15853
16313
  }[];
16314
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
15854
16315
  customDomains?: {
15855
16316
  domain: string;
15856
16317
  /** @enum {string} */
@@ -15875,8 +16336,11 @@ export interface operations {
15875
16336
  }[];
15876
16337
  } | null;
15877
16338
  /** @description arbitrary */
15878
- customData: Record<string, never>;
16339
+ customData: {
16340
+ [key: string]: unknown;
16341
+ };
15879
16342
  isThirdParty: boolean;
16343
+ appLevelAccessControlEnabled: boolean;
15880
16344
  createdAt: number;
15881
16345
  }[];
15882
16346
  };
@@ -16973,6 +17437,12 @@ export interface operations {
16973
17437
  query?: {
16974
17438
  /** @description The log key to filter logs. */
16975
17439
  logKey?: string;
17440
+ /** @description When `true`, short-circuits the underlying `count(*)` query: results with more than 10,000 matching logs saturate `Total-Number` at the sentinel `10001` and emit `Total-Number-Is-Capped: true`; the `Link` header omits `rel="last"` and `rel="next"`. Default `false`. (This endpoint is already scoped to a single hook over the last 24 hours, so the cap rarely triggers in practice.) */
17441
+ enableCap?: string;
17442
+ /** @description Exclusive lower bound on `createdAt`, in unix milliseconds. Supplying either `start_time` or `end_time` replaces the endpoint's default 24-hour lower bound, so callers can query an arbitrary historical window. Returns `400` if `start_time >= end_time` when both are present. */
17443
+ start_time?: string;
17444
+ /** @description Exclusive upper bound on `createdAt`, in unix milliseconds. Supplying either `start_time` or `end_time` replaces the endpoint's default 24-hour lower bound. */
17445
+ end_time?: string;
16976
17446
  /** @description Page number (starts from 1). */
16977
17447
  page?: number;
16978
17448
  /** @description Entries per page. */
@@ -16990,6 +17460,12 @@ export interface operations {
16990
17460
  /** @description A list of recent logs for the hook. */
16991
17461
  200: {
16992
17462
  headers: {
17463
+ /** @description When `enableCap=false`: exact match count. When `enableCap=true`: either the exact count (≤ 10,000) or the saturation sentinel `10001`. */
17464
+ "Total-Number"?: number;
17465
+ /** @description Present and set to `true` only when `enableCap=true` and the result has more than 10,000 matching logs (in which case `Total-Number` is `10001`). */
17466
+ "Total-Number-Is-Capped"?: "true";
17467
+ /** @description Pagination links per RFC 5988. When the response is capped, `rel="last"` and `rel="next"` are omitted; walk forward by incrementing `page` and stop on an empty response. */
17468
+ Link?: string;
16993
17469
  [name: string]: unknown;
16994
17470
  };
16995
17471
  content: {
@@ -17041,7 +17517,7 @@ export interface operations {
17041
17517
  }[];
17042
17518
  };
17043
17519
  };
17044
- /** @description Bad Request */
17520
+ /** @description Returned when `start_time` or `end_time` is not a finite number, or when `start_time >= end_time`. */
17045
17521
  400: {
17046
17522
  headers: {
17047
17523
  [name: string]: unknown;
@@ -19197,7 +19673,9 @@ export interface operations {
19197
19673
  name: string;
19198
19674
  description: string | null;
19199
19675
  /** @description arbitrary */
19200
- customData: Record<string, never>;
19676
+ customData: {
19677
+ [key: string]: unknown;
19678
+ };
19201
19679
  isMfaRequired: boolean;
19202
19680
  color: {
19203
19681
  /** Format: regex */
@@ -19266,7 +19744,9 @@ export interface operations {
19266
19744
  /** @description The description of the organization. */
19267
19745
  description?: string | null;
19268
19746
  /** @description arbitrary */
19269
- customData?: Record<string, never>;
19747
+ customData?: {
19748
+ [key: string]: unknown;
19749
+ };
19270
19750
  isMfaRequired?: boolean;
19271
19751
  color?: {
19272
19752
  /** Format: regex */
@@ -19303,7 +19783,9 @@ export interface operations {
19303
19783
  name: string;
19304
19784
  description: string | null;
19305
19785
  /** @description arbitrary */
19306
- customData: Record<string, never>;
19786
+ customData: {
19787
+ [key: string]: unknown;
19788
+ };
19307
19789
  isMfaRequired: boolean;
19308
19790
  color: {
19309
19791
  /** Format: regex */
@@ -19374,7 +19856,9 @@ export interface operations {
19374
19856
  name: string;
19375
19857
  description: string | null;
19376
19858
  /** @description arbitrary */
19377
- customData: Record<string, never>;
19859
+ customData: {
19860
+ [key: string]: unknown;
19861
+ };
19378
19862
  isMfaRequired: boolean;
19379
19863
  color: {
19380
19864
  /** Format: regex */
@@ -19497,7 +19981,9 @@ export interface operations {
19497
19981
  /** @description The updated description of the organization. */
19498
19982
  description?: string | null;
19499
19983
  /** @description arbitrary */
19500
- customData?: Record<string, never>;
19984
+ customData?: {
19985
+ [key: string]: unknown;
19986
+ };
19501
19987
  isMfaRequired?: boolean;
19502
19988
  color?: {
19503
19989
  /** Format: regex */
@@ -19534,7 +20020,9 @@ export interface operations {
19534
20020
  name: string;
19535
20021
  description: string | null;
19536
20022
  /** @description arbitrary */
19537
- customData: Record<string, never>;
20023
+ customData: {
20024
+ [key: string]: unknown;
20025
+ };
19538
20026
  isMfaRequired: boolean;
19539
20027
  color: {
19540
20028
  /** Format: regex */
@@ -19623,12 +20111,16 @@ export interface operations {
19623
20111
  name: string | null;
19624
20112
  avatar: string | null;
19625
20113
  /** @description arbitrary */
19626
- customData: Record<string, never>;
20114
+ customData: {
20115
+ [key: string]: unknown;
20116
+ };
19627
20117
  identities: {
19628
20118
  [key: string]: {
19629
20119
  userId: string;
19630
20120
  /** @description arbitrary */
19631
- details?: Record<string, never>;
20121
+ details?: {
20122
+ [key: string]: unknown;
20123
+ };
19632
20124
  };
19633
20125
  };
19634
20126
  lastSignInAt: number | null;
@@ -20270,8 +20762,12 @@ export interface operations {
20270
20762
  /** @enum {string} */
20271
20763
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
20272
20764
  oidcClientMetadata: {
20273
- redirectUris: Record<string, never>[];
20274
- postLogoutRedirectUris: Record<string, never>[];
20765
+ redirectUris: {
20766
+ [key: string]: unknown;
20767
+ }[];
20768
+ postLogoutRedirectUris: {
20769
+ [key: string]: unknown;
20770
+ }[];
20275
20771
  /** Format: url */
20276
20772
  backchannelLogoutUri?: string;
20277
20773
  backchannelLogoutSessionRequired?: boolean;
@@ -20296,6 +20792,7 @@ export interface operations {
20296
20792
  pageRules: {
20297
20793
  path: string;
20298
20794
  }[];
20795
+ additionalScopes?: ("custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles")[];
20299
20796
  customDomains?: {
20300
20797
  domain: string;
20301
20798
  /** @enum {string} */
@@ -20320,8 +20817,11 @@ export interface operations {
20320
20817
  }[];
20321
20818
  } | null;
20322
20819
  /** @description arbitrary */
20323
- customData: Record<string, never>;
20820
+ customData: {
20821
+ [key: string]: unknown;
20822
+ };
20324
20823
  isThirdParty: boolean;
20824
+ appLevelAccessControlEnabled: boolean;
20325
20825
  createdAt: number;
20326
20826
  organizationRoles: {
20327
20827
  id: string;
@@ -21300,7 +21800,9 @@ export interface operations {
21300
21800
  providerName: string;
21301
21801
  connectorName: string;
21302
21802
  /** @description arbitrary */
21303
- config: Record<string, never>;
21803
+ config: {
21804
+ [key: string]: unknown;
21805
+ };
21304
21806
  domains: string[];
21305
21807
  branding: {
21306
21808
  displayName?: string;
@@ -21578,7 +22080,9 @@ export interface operations {
21578
22080
  providerName: "OIDC" | "SAML" | "AzureAD" | "GoogleWorkspace" | "Okta" | "AzureAdOidc";
21579
22081
  connectorName: string;
21580
22082
  /** @description arbitrary */
21581
- config: Record<string, never>;
22083
+ config: {
22084
+ [key: string]: unknown;
22085
+ };
21582
22086
  domains: string[];
21583
22087
  branding: {
21584
22088
  displayName?: string;
@@ -21626,7 +22130,9 @@ export interface operations {
21626
22130
  content: {
21627
22131
  "application/json": {
21628
22132
  /** @description arbitrary */
21629
- config?: Record<string, never>;
22133
+ config?: {
22134
+ [key: string]: unknown;
22135
+ };
21630
22136
  domains?: string[];
21631
22137
  branding?: {
21632
22138
  displayName?: string;
@@ -21653,7 +22159,9 @@ export interface operations {
21653
22159
  providerName: string;
21654
22160
  connectorName: string;
21655
22161
  /** @description arbitrary */
21656
- config: Record<string, never>;
22162
+ config: {
22163
+ [key: string]: unknown;
22164
+ };
21657
22165
  domains: string[];
21658
22166
  branding: {
21659
22167
  displayName?: string;
@@ -21728,7 +22236,9 @@ export interface operations {
21728
22236
  providerName: "OIDC" | "SAML" | "AzureAD" | "GoogleWorkspace" | "Okta" | "AzureAdOidc";
21729
22237
  connectorName: string;
21730
22238
  /** @description arbitrary */
21731
- config: Record<string, never>;
22239
+ config: {
22240
+ [key: string]: unknown;
22241
+ };
21732
22242
  domains: string[];
21733
22243
  branding: {
21734
22244
  displayName?: string;
@@ -21842,7 +22352,9 @@ export interface operations {
21842
22352
  content: {
21843
22353
  "application/json": {
21844
22354
  /** @description arbitrary */
21845
- config?: Record<string, never>;
22355
+ config?: {
22356
+ [key: string]: unknown;
22357
+ };
21846
22358
  domains?: string[];
21847
22359
  branding?: {
21848
22360
  displayName?: string;
@@ -21869,7 +22381,9 @@ export interface operations {
21869
22381
  providerName: "OIDC" | "SAML" | "AzureAD" | "GoogleWorkspace" | "Okta" | "AzureAdOidc";
21870
22382
  connectorName: string;
21871
22383
  /** @description arbitrary */
21872
- config: Record<string, never>;
22384
+ config: {
22385
+ [key: string]: unknown;
22386
+ };
21873
22387
  domains: string[];
21874
22388
  branding: {
21875
22389
  displayName?: string;
@@ -21992,7 +22506,9 @@ export interface operations {
21992
22506
  /** @description The ID of the user to impersonate. */
21993
22507
  userId: string;
21994
22508
  /** @description The additional context to be included in the token, this can be used in custom JWT. */
21995
- context?: Record<string, never>;
22509
+ context?: {
22510
+ [key: string]: unknown;
22511
+ };
21996
22512
  };
21997
22513
  };
21998
22514
  };
@@ -22085,6 +22601,9 @@ export interface operations {
22085
22601
  webauthnRelatedOrigins: string[];
22086
22602
  deleteAccountUrl: string | null;
22087
22603
  customCss: string | null;
22604
+ profileFields: {
22605
+ name: string;
22606
+ }[] | null;
22088
22607
  };
22089
22608
  };
22090
22609
  };
@@ -22144,8 +22663,14 @@ export interface operations {
22144
22663
  /** @description The allowed domains for webauthn. */
22145
22664
  webauthnRelatedOrigins?: string[];
22146
22665
  /** @description The custom endpoint URL for account deletion. */
22147
- deleteAccountUrl?: Record<string, never> | null;
22666
+ deleteAccountUrl?: {
22667
+ [key: string]: unknown;
22668
+ } | null;
22148
22669
  customCss?: string | null;
22670
+ /** @description Ordered list of custom profile fields to show in the prebuilt account center. Each entry references an existing field by name in the custom profile fields catalog. */
22671
+ profileFields?: {
22672
+ name: string;
22673
+ }[] | null;
22149
22674
  };
22150
22675
  };
22151
22676
  };
@@ -22187,6 +22712,9 @@ export interface operations {
22187
22712
  webauthnRelatedOrigins: string[];
22188
22713
  deleteAccountUrl: string | null;
22189
22714
  customCss: string | null;
22715
+ profileFields: {
22716
+ name: string;
22717
+ }[] | null;
22190
22718
  };
22191
22719
  };
22192
22720
  };
@@ -22228,7 +22756,9 @@ export interface operations {
22228
22756
  /** @description Optional description of the SAML application. */
22229
22757
  description?: string | null;
22230
22758
  /** @description Optional custom data for the application. */
22231
- customData?: Record<string, never>;
22759
+ customData?: {
22760
+ [key: string]: unknown;
22761
+ };
22232
22762
  attributeMapping?: {
22233
22763
  sub?: string;
22234
22764
  name?: string;
@@ -22264,7 +22794,9 @@ export interface operations {
22264
22794
  /** @description The Assertion Consumer Service (ACS) URL where the SAML response will be sent. */
22265
22795
  acsUrl?: string | null;
22266
22796
  /** @description Validator function */
22267
- encryption?: Record<string, never> | null;
22797
+ encryption?: {
22798
+ [key: string]: unknown;
22799
+ } | null;
22268
22800
  /**
22269
22801
  * @default urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
22270
22802
  * @enum {string}
@@ -22288,8 +22820,11 @@ export interface operations {
22288
22820
  /** @enum {string} */
22289
22821
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
22290
22822
  /** @description arbitrary */
22291
- customData: Record<string, never>;
22823
+ customData: {
22824
+ [key: string]: unknown;
22825
+ };
22292
22826
  isThirdParty: boolean;
22827
+ appLevelAccessControlEnabled: boolean;
22293
22828
  createdAt: number;
22294
22829
  attributeMapping: {
22295
22830
  sub?: string;
@@ -22330,7 +22865,9 @@ export interface operations {
22330
22865
  url: string;
22331
22866
  } | null;
22332
22867
  /** @description Validator function */
22333
- encryption: Record<string, never> | null;
22868
+ encryption: {
22869
+ [key: string]: unknown;
22870
+ } | null;
22334
22871
  /** @enum {string} */
22335
22872
  nameIdFormat: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" | "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" | "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" | "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified";
22336
22873
  };
@@ -22392,8 +22929,11 @@ export interface operations {
22392
22929
  /** @enum {string} */
22393
22930
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
22394
22931
  /** @description arbitrary */
22395
- customData: Record<string, never>;
22932
+ customData: {
22933
+ [key: string]: unknown;
22934
+ };
22396
22935
  isThirdParty: boolean;
22936
+ appLevelAccessControlEnabled: boolean;
22397
22937
  createdAt: number;
22398
22938
  attributeMapping: {
22399
22939
  sub?: string;
@@ -22434,7 +22974,9 @@ export interface operations {
22434
22974
  url: string;
22435
22975
  } | null;
22436
22976
  /** @description Validator function */
22437
- encryption: Record<string, never> | null;
22977
+ encryption: {
22978
+ [key: string]: unknown;
22979
+ } | null;
22438
22980
  /** @enum {string} */
22439
22981
  nameIdFormat: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" | "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" | "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" | "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified";
22440
22982
  };
@@ -22551,7 +23093,9 @@ export interface operations {
22551
23093
  /** @description Description of the SAML application. */
22552
23094
  description?: string | null;
22553
23095
  /** @description Custom data for the application. */
22554
- customData?: Record<string, never>;
23096
+ customData?: {
23097
+ [key: string]: unknown;
23098
+ };
22555
23099
  attributeMapping?: {
22556
23100
  sub?: string;
22557
23101
  name?: string;
@@ -22587,7 +23131,9 @@ export interface operations {
22587
23131
  /** @description The Assertion Consumer Service (ACS) URL. */
22588
23132
  acsUrl?: string | null;
22589
23133
  /** @description Validator function */
22590
- encryption?: Record<string, never> | null;
23134
+ encryption?: {
23135
+ [key: string]: unknown;
23136
+ } | null;
22591
23137
  /** @enum {string} */
22592
23138
  nameIdFormat?: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" | "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" | "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" | "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified";
22593
23139
  };
@@ -22608,8 +23154,11 @@ export interface operations {
22608
23154
  /** @enum {string} */
22609
23155
  type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
22610
23156
  /** @description arbitrary */
22611
- customData: Record<string, never>;
23157
+ customData: {
23158
+ [key: string]: unknown;
23159
+ };
22612
23160
  isThirdParty: boolean;
23161
+ appLevelAccessControlEnabled: boolean;
22613
23162
  createdAt: number;
22614
23163
  attributeMapping: {
22615
23164
  sub?: string;
@@ -22650,7 +23199,9 @@ export interface operations {
22650
23199
  url: string;
22651
23200
  } | null;
22652
23201
  /** @description Validator function */
22653
- encryption: Record<string, never> | null;
23202
+ encryption: {
23203
+ [key: string]: unknown;
23204
+ } | null;
22654
23205
  /** @enum {string} */
22655
23206
  nameIdFormat: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" | "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" | "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" | "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified";
22656
23207
  };
@@ -25145,6 +25696,10 @@ export interface operations {
25145
25696
  id: string;
25146
25697
  createdAt: number;
25147
25698
  } | null;
25699
+ customUiCsp: {
25700
+ scriptSrc?: string[];
25701
+ connectSrc?: string[];
25702
+ };
25148
25703
  passwordPolicy: {
25149
25704
  /** @default {} */
25150
25705
  length: {
@@ -25208,7 +25763,9 @@ export interface operations {
25208
25763
  id: string;
25209
25764
  target: string;
25210
25765
  /** @description Validator function */
25211
- name: Record<string, never>;
25766
+ name: {
25767
+ [key: string]: unknown;
25768
+ };
25212
25769
  logo: string;
25213
25770
  logoDark: string | null;
25214
25771
  fromEmail?: string;
@@ -25293,6 +25850,55 @@ export interface operations {
25293
25850
  createdAt: number;
25294
25851
  sieOrder: number;
25295
25852
  }[];
25853
+ customProfileFieldCatalog?: {
25854
+ tenantId: string;
25855
+ id: string;
25856
+ name: string;
25857
+ /** @enum {string} */
25858
+ type: "Text" | "Number" | "Date" | "Checkbox" | "Select" | "Url" | "Regex" | "Address" | "Fullname";
25859
+ label: string;
25860
+ description: string | null;
25861
+ required: boolean;
25862
+ config: {
25863
+ placeholder?: string;
25864
+ minLength?: number;
25865
+ maxLength?: number;
25866
+ minValue?: number;
25867
+ maxValue?: number;
25868
+ format?: string;
25869
+ customFormat?: string;
25870
+ options?: {
25871
+ label?: string;
25872
+ value: string;
25873
+ }[];
25874
+ defaultValue?: string;
25875
+ parts?: {
25876
+ enabled: boolean;
25877
+ name: string;
25878
+ /** @enum {string} */
25879
+ type: "Text" | "Number" | "Date" | "Checkbox" | "Select" | "Url" | "Regex" | "Address" | "Fullname";
25880
+ label?: string;
25881
+ description?: string;
25882
+ required: boolean;
25883
+ config?: {
25884
+ placeholder?: string;
25885
+ minLength?: number;
25886
+ maxLength?: number;
25887
+ minValue?: number;
25888
+ maxValue?: number;
25889
+ format?: string;
25890
+ customFormat?: string;
25891
+ options?: {
25892
+ label?: string;
25893
+ value: string;
25894
+ }[];
25895
+ defaultValue?: string;
25896
+ };
25897
+ }[];
25898
+ };
25899
+ createdAt: number;
25900
+ sieOrder: number;
25901
+ }[];
25296
25902
  };
25297
25903
  };
25298
25904
  };
@@ -25420,6 +26026,10 @@ export interface operations {
25420
26026
  id: string;
25421
26027
  createdAt: number;
25422
26028
  } | null;
26029
+ customUiCsp: {
26030
+ scriptSrc?: string[];
26031
+ connectSrc?: string[];
26032
+ };
25423
26033
  passwordPolicy: {
25424
26034
  /** @default {} */
25425
26035
  length: {
@@ -25483,7 +26093,9 @@ export interface operations {
25483
26093
  id: string;
25484
26094
  target: string;
25485
26095
  /** @description Validator function */
25486
- name: Record<string, never>;
26096
+ name: {
26097
+ [key: string]: unknown;
26098
+ };
25487
26099
  logo: string;
25488
26100
  logoDark: string | null;
25489
26101
  fromEmail?: string;
@@ -25568,6 +26180,55 @@ export interface operations {
25568
26180
  createdAt: number;
25569
26181
  sieOrder: number;
25570
26182
  }[];
26183
+ customProfileFieldCatalog?: {
26184
+ tenantId: string;
26185
+ id: string;
26186
+ name: string;
26187
+ /** @enum {string} */
26188
+ type: "Text" | "Number" | "Date" | "Checkbox" | "Select" | "Url" | "Regex" | "Address" | "Fullname";
26189
+ label: string;
26190
+ description: string | null;
26191
+ required: boolean;
26192
+ config: {
26193
+ placeholder?: string;
26194
+ minLength?: number;
26195
+ maxLength?: number;
26196
+ minValue?: number;
26197
+ maxValue?: number;
26198
+ format?: string;
26199
+ customFormat?: string;
26200
+ options?: {
26201
+ label?: string;
26202
+ value: string;
26203
+ }[];
26204
+ defaultValue?: string;
26205
+ parts?: {
26206
+ enabled: boolean;
26207
+ name: string;
26208
+ /** @enum {string} */
26209
+ type: "Text" | "Number" | "Date" | "Checkbox" | "Select" | "Url" | "Regex" | "Address" | "Fullname";
26210
+ label?: string;
26211
+ description?: string;
26212
+ required: boolean;
26213
+ config?: {
26214
+ placeholder?: string;
26215
+ minLength?: number;
26216
+ maxLength?: number;
26217
+ minValue?: number;
26218
+ maxValue?: number;
26219
+ format?: string;
26220
+ customFormat?: string;
26221
+ options?: {
26222
+ label?: string;
26223
+ value: string;
26224
+ }[];
26225
+ defaultValue?: string;
26226
+ };
26227
+ }[];
26228
+ };
26229
+ createdAt: number;
26230
+ sieOrder: number;
26231
+ }[];
25571
26232
  };
25572
26233
  };
25573
26234
  };
@@ -25626,6 +26287,9 @@ export interface operations {
25626
26287
  webauthnRelatedOrigins: string[];
25627
26288
  deleteAccountUrl: string | null;
25628
26289
  customCss: string | null;
26290
+ profileFields: {
26291
+ name: string;
26292
+ }[] | null;
25629
26293
  };
25630
26294
  };
25631
26295
  };
@@ -25701,7 +26365,9 @@ export interface operations {
25701
26365
  };
25702
26366
  requestBody: {
25703
26367
  content: {
25704
- "application/json": Record<string, never>;
26368
+ "application/json": {
26369
+ [key: string]: unknown;
26370
+ };
25705
26371
  };
25706
26372
  };
25707
26373
  responses: {