@logto/api 1.44.0-beta.0 → 1.44.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -700,7 +700,7 @@ export interface paths {
700
700
  head?: never;
701
701
  /**
702
702
  * Update CIMD config
703
- * @description Update the tenant-level OAuth Client ID Metadata Document (CIMD) switch. Enabling requires the OIDC provider SSRF protection to be active.
703
+ * @description Update the tenant-level OAuth Client ID Metadata Document (CIMD) configuration. Enabling requires the OIDC provider SSRF protection to be active.
704
704
  */
705
705
  patch: operations["UpdateCimdConfig"];
706
706
  trace?: never;
@@ -1625,6 +1625,46 @@ export interface paths {
1625
1625
  patch?: never;
1626
1626
  trace?: never;
1627
1627
  };
1628
+ "/api/users/{userId}/trusted-devices": {
1629
+ parameters: {
1630
+ query?: never;
1631
+ header?: never;
1632
+ path?: never;
1633
+ cookie?: never;
1634
+ };
1635
+ /**
1636
+ * Get user trusted devices
1637
+ * @description Retrieve all active trusted devices for the user.
1638
+ */
1639
+ get: operations["ListUserTrustedDevices"];
1640
+ put?: never;
1641
+ post?: never;
1642
+ delete?: never;
1643
+ options?: never;
1644
+ head?: never;
1645
+ patch?: never;
1646
+ trace?: never;
1647
+ };
1648
+ "/api/users/{userId}/trusted-devices/{trustedDeviceId}": {
1649
+ parameters: {
1650
+ query?: never;
1651
+ header?: never;
1652
+ path?: never;
1653
+ cookie?: never;
1654
+ };
1655
+ get?: never;
1656
+ put?: never;
1657
+ post?: never;
1658
+ /**
1659
+ * Delete a user trusted device
1660
+ * @description Delete a trusted device that belongs to the user.
1661
+ */
1662
+ delete: operations["DeleteUserTrustedDevice"];
1663
+ options?: never;
1664
+ head?: never;
1665
+ patch?: never;
1666
+ trace?: never;
1667
+ };
1628
1668
  "/api/logs": {
1629
1669
  parameters: {
1630
1670
  query?: never;
@@ -3847,13 +3887,13 @@ export interface paths {
3847
3887
  };
3848
3888
  /**
3849
3889
  * Handle SAML authentication request (Redirect binding)
3850
- * @description Process SAML authentication request using HTTP Redirect binding.
3890
+ * @description Process SAML authentication request using HTTP Redirect binding. The application policy or ForceAuthn can require fresh authentication; otherwise an existing session may be reused. The response assertion preserves the actual authentication time. When authnRequestConfig.requireSignedAuthnRequests is true, the request must be signed using the configured service provider signing certificate.
3851
3891
  */
3852
3892
  get: operations["GetSamlAuthn"];
3853
3893
  put?: never;
3854
3894
  /**
3855
3895
  * Handle SAML authentication request (POST binding)
3856
- * @description Process SAML authentication request using HTTP POST binding.
3896
+ * @description Process SAML authentication request using HTTP POST binding. The application policy or ForceAuthn can require fresh authentication; otherwise an existing session may be reused. The response assertion preserves the actual authentication time. When authnRequestConfig.requireSignedAuthnRequests is true, the request must be signed using the configured service provider signing certificate.
3857
3897
  */
3858
3898
  post: operations["CreateSamlAuthn"];
3859
3899
  delete?: never;
@@ -3983,6 +4023,21 @@ export interface components {
3983
4023
  * @description The creation time of the SAML application.
3984
4024
  */
3985
4025
  createdAt?: string;
4026
+ /** @description IdP-side authentication policy. Fresh authentication is forced unless forceAuthn is explicitly false, including when this object is null or empty. PATCH replaces this object. */
4027
+ authnRequestConfig?: {
4028
+ /**
4029
+ * @description Require fresh authentication for every sign-in to this application. Set to false to reuse an existing session unless the SP requests ForceAuthn.
4030
+ * @default true
4031
+ */
4032
+ forceAuthn: boolean;
4033
+ /**
4034
+ * @description Require signed AuthnRequests for both HTTP-POST and HTTP-Redirect bindings. Defaults to false.
4035
+ * @default false
4036
+ */
4037
+ requireSignedAuthnRequests: boolean;
4038
+ /** @description PEM-encoded RSA X.509 signing certificate of the service provider. Required when requireSignedAuthnRequests is true. Used independently of the assertion encryption certificate. */
4039
+ signingCertificate?: string;
4040
+ } | null;
3986
4041
  };
3987
4042
  /** @description Base64-encoded SAML request message. */
3988
4043
  SamlRequest: string;
@@ -4091,6 +4146,10 @@ export interface components {
4091
4146
  "sessionId-root": string;
4092
4147
  /** @description The unique identifier of the session. */
4093
4148
  sessionId: string;
4149
+ /** @description The unique identifier of the trusted device. */
4150
+ "trustedDeviceId-root": string;
4151
+ /** @description The unique identifier of the trusted device. */
4152
+ trustedDeviceId: string;
4094
4153
  /** @description The unique identifier of the grant. */
4095
4154
  "grantId-root": string;
4096
4155
  /** @description The unique identifier of the grant. */
@@ -5468,6 +5527,7 @@ export interface operations {
5468
5527
  [key: string]: unknown;
5469
5528
  };
5470
5529
  isMfaRequired: boolean;
5530
+ isTrustedDeviceAllowed: boolean;
5471
5531
  color: {
5472
5532
  /** Format: regex */
5473
5533
  primaryColor?: string;
@@ -6378,6 +6438,7 @@ export interface operations {
6378
6438
  [key: string]: unknown;
6379
6439
  };
6380
6440
  isMfaRequired: boolean;
6441
+ isTrustedDeviceAllowed: boolean;
6381
6442
  color: {
6382
6443
  /** Format: regex */
6383
6444
  primaryColor?: string;
@@ -7169,6 +7230,7 @@ export interface operations {
7169
7230
  /** @enum {string} */
7170
7231
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
7171
7232
  verified: boolean;
7233
+ userId?: string;
7172
7234
  /** Format: "EmailVerificationCode" */
7173
7235
  type: string;
7174
7236
  identifier: {
@@ -7181,6 +7243,7 @@ export interface operations {
7181
7243
  /** @enum {string} */
7182
7244
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
7183
7245
  verified: boolean;
7246
+ userId?: string;
7184
7247
  /** Format: "PhoneVerificationCode" */
7185
7248
  type: string;
7186
7249
  identifier: {
@@ -7193,6 +7256,7 @@ export interface operations {
7193
7256
  /** @enum {string} */
7194
7257
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
7195
7258
  verified: boolean;
7259
+ userId?: string;
7196
7260
  /** Format: "MfaEmailVerificationCode" */
7197
7261
  type: string;
7198
7262
  identifier: {
@@ -7205,6 +7269,7 @@ export interface operations {
7205
7269
  /** @enum {string} */
7206
7270
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
7207
7271
  verified: boolean;
7272
+ userId?: string;
7208
7273
  /** Format: "MfaPhoneVerificationCode" */
7209
7274
  type: string;
7210
7275
  identifier: {
@@ -7668,6 +7733,7 @@ export interface operations {
7668
7733
  /** @enum {string} */
7669
7734
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
7670
7735
  verified: boolean;
7736
+ userId?: string;
7671
7737
  /** Format: "EmailVerificationCode" */
7672
7738
  type: string;
7673
7739
  identifier: {
@@ -7680,6 +7746,7 @@ export interface operations {
7680
7746
  /** @enum {string} */
7681
7747
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
7682
7748
  verified: boolean;
7749
+ userId?: string;
7683
7750
  /** Format: "PhoneVerificationCode" */
7684
7751
  type: string;
7685
7752
  identifier: {
@@ -7692,6 +7759,7 @@ export interface operations {
7692
7759
  /** @enum {string} */
7693
7760
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
7694
7761
  verified: boolean;
7762
+ userId?: string;
7695
7763
  /** Format: "MfaEmailVerificationCode" */
7696
7764
  type: string;
7697
7765
  identifier: {
@@ -7704,6 +7772,7 @@ export interface operations {
7704
7772
  /** @enum {string} */
7705
7773
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
7706
7774
  verified: boolean;
7775
+ userId?: string;
7707
7776
  /** Format: "MfaPhoneVerificationCode" */
7708
7777
  type: string;
7709
7778
  identifier: {
@@ -8110,6 +8179,7 @@ export interface operations {
8110
8179
  /** @enum {string} */
8111
8180
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
8112
8181
  verified: boolean;
8182
+ userId?: string;
8113
8183
  /** Format: "EmailVerificationCode" */
8114
8184
  type: string;
8115
8185
  identifier: {
@@ -8122,6 +8192,7 @@ export interface operations {
8122
8192
  /** @enum {string} */
8123
8193
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
8124
8194
  verified: boolean;
8195
+ userId?: string;
8125
8196
  /** Format: "PhoneVerificationCode" */
8126
8197
  type: string;
8127
8198
  identifier: {
@@ -8134,6 +8205,7 @@ export interface operations {
8134
8205
  /** @enum {string} */
8135
8206
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
8136
8207
  verified: boolean;
8208
+ userId?: string;
8137
8209
  /** Format: "MfaEmailVerificationCode" */
8138
8210
  type: string;
8139
8211
  identifier: {
@@ -8146,6 +8218,7 @@ export interface operations {
8146
8218
  /** @enum {string} */
8147
8219
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
8148
8220
  verified: boolean;
8221
+ userId?: string;
8149
8222
  /** Format: "MfaPhoneVerificationCode" */
8150
8223
  type: string;
8151
8224
  identifier: {
@@ -8651,6 +8724,7 @@ export interface operations {
8651
8724
  /** @enum {string} */
8652
8725
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
8653
8726
  verified: boolean;
8727
+ userId?: string;
8654
8728
  /** Format: "EmailVerificationCode" */
8655
8729
  type: string;
8656
8730
  identifier: {
@@ -8663,6 +8737,7 @@ export interface operations {
8663
8737
  /** @enum {string} */
8664
8738
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
8665
8739
  verified: boolean;
8740
+ userId?: string;
8666
8741
  /** Format: "PhoneVerificationCode" */
8667
8742
  type: string;
8668
8743
  identifier: {
@@ -8675,6 +8750,7 @@ export interface operations {
8675
8750
  /** @enum {string} */
8676
8751
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
8677
8752
  verified: boolean;
8753
+ userId?: string;
8678
8754
  /** Format: "MfaEmailVerificationCode" */
8679
8755
  type: string;
8680
8756
  identifier: {
@@ -8687,6 +8763,7 @@ export interface operations {
8687
8763
  /** @enum {string} */
8688
8764
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
8689
8765
  verified: boolean;
8766
+ userId?: string;
8690
8767
  /** Format: "MfaPhoneVerificationCode" */
8691
8768
  type: string;
8692
8769
  identifier: {
@@ -9135,6 +9212,7 @@ export interface operations {
9135
9212
  /** @enum {string} */
9136
9213
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
9137
9214
  verified: boolean;
9215
+ userId?: string;
9138
9216
  /** Format: "EmailVerificationCode" */
9139
9217
  type: string;
9140
9218
  identifier: {
@@ -9147,6 +9225,7 @@ export interface operations {
9147
9225
  /** @enum {string} */
9148
9226
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
9149
9227
  verified: boolean;
9228
+ userId?: string;
9150
9229
  /** Format: "PhoneVerificationCode" */
9151
9230
  type: string;
9152
9231
  identifier: {
@@ -9159,6 +9238,7 @@ export interface operations {
9159
9238
  /** @enum {string} */
9160
9239
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
9161
9240
  verified: boolean;
9241
+ userId?: string;
9162
9242
  /** Format: "MfaEmailVerificationCode" */
9163
9243
  type: string;
9164
9244
  identifier: {
@@ -9171,6 +9251,7 @@ export interface operations {
9171
9251
  /** @enum {string} */
9172
9252
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
9173
9253
  verified: boolean;
9254
+ userId?: string;
9174
9255
  /** Format: "MfaPhoneVerificationCode" */
9175
9256
  type: string;
9176
9257
  identifier: {
@@ -9630,6 +9711,7 @@ export interface operations {
9630
9711
  /** @enum {string} */
9631
9712
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
9632
9713
  verified: boolean;
9714
+ userId?: string;
9633
9715
  /** Format: "EmailVerificationCode" */
9634
9716
  type: string;
9635
9717
  identifier: {
@@ -9642,6 +9724,7 @@ export interface operations {
9642
9724
  /** @enum {string} */
9643
9725
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
9644
9726
  verified: boolean;
9727
+ userId?: string;
9645
9728
  /** Format: "PhoneVerificationCode" */
9646
9729
  type: string;
9647
9730
  identifier: {
@@ -9654,6 +9737,7 @@ export interface operations {
9654
9737
  /** @enum {string} */
9655
9738
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
9656
9739
  verified: boolean;
9740
+ userId?: string;
9657
9741
  /** Format: "MfaEmailVerificationCode" */
9658
9742
  type: string;
9659
9743
  identifier: {
@@ -9666,6 +9750,7 @@ export interface operations {
9666
9750
  /** @enum {string} */
9667
9751
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
9668
9752
  verified: boolean;
9753
+ userId?: string;
9669
9754
  /** Format: "MfaPhoneVerificationCode" */
9670
9755
  type: string;
9671
9756
  identifier: {
@@ -10521,6 +10606,8 @@ export interface operations {
10521
10606
  content: {
10522
10607
  "application/json": {
10523
10608
  enabled: boolean;
10609
+ /** @description Experimental. When enabled, Logto adds `consent` to the `prompt` parameter of CIMD authorization requests that include the `offline_access` scope without it, so the client can receive a refresh token. Requests with `prompt=none` are not changed. Defaults to `false`. */
10610
+ addConsentPromptForOfflineAccess?: boolean;
10524
10611
  };
10525
10612
  };
10526
10613
  };
@@ -10550,7 +10637,10 @@ export interface operations {
10550
10637
  requestBody: {
10551
10638
  content: {
10552
10639
  "application/json": {
10640
+ /** @description Whether CIMD is enabled for the tenant. */
10553
10641
  enabled?: boolean;
10642
+ /** @description Experimental. When enabled, Logto adds `consent` to the `prompt` parameter of CIMD authorization requests that include the `offline_access` scope without it, so the client can receive a refresh token. Requests with `prompt=none` are not changed. Defaults to `false`. */
10643
+ addConsentPromptForOfflineAccess?: boolean;
10554
10644
  };
10555
10645
  };
10556
10646
  };
@@ -10563,6 +10653,8 @@ export interface operations {
10563
10653
  content: {
10564
10654
  "application/json": {
10565
10655
  enabled: boolean;
10656
+ /** @description Experimental. When enabled, Logto adds `consent` to the `prompt` parameter of CIMD authorization requests that include the `offline_access` scope without it, so the client can receive a refresh token. Requests with `prompt=none` are not changed. Defaults to `false`. */
10657
+ addConsentPromptForOfflineAccess?: boolean;
10566
10658
  };
10567
10659
  };
10568
10660
  };
@@ -12503,6 +12595,10 @@ export interface operations {
12503
12595
  adaptiveMfa: {
12504
12596
  enabled?: boolean;
12505
12597
  };
12598
+ trustedDevice: {
12599
+ enabled?: boolean;
12600
+ durationDays?: number;
12601
+ };
12506
12602
  singleSignOnEnabled: boolean;
12507
12603
  /** @description The support email address to display on the error pages. */
12508
12604
  supportEmail: string | null;
@@ -12714,6 +12810,10 @@ export interface operations {
12714
12810
  adaptiveMfa?: {
12715
12811
  enabled?: boolean;
12716
12812
  };
12813
+ trustedDevice?: {
12814
+ enabled?: boolean;
12815
+ durationDays?: number;
12816
+ };
12717
12817
  singleSignOnEnabled?: boolean;
12718
12818
  captchaPolicy?: {
12719
12819
  enabled?: boolean;
@@ -12886,6 +12986,10 @@ export interface operations {
12886
12986
  adaptiveMfa: {
12887
12987
  enabled?: boolean;
12888
12988
  };
12989
+ trustedDevice: {
12990
+ enabled?: boolean;
12991
+ durationDays?: number;
12992
+ };
12889
12993
  singleSignOnEnabled: boolean;
12890
12994
  supportEmail: string | null;
12891
12995
  supportWebsiteUrl: string | null;
@@ -13841,6 +13945,12 @@ export interface operations {
13841
13945
  search_params?: {
13842
13946
  [key: string]: string;
13843
13947
  };
13948
+ /** @description The external identity type to use for an exact user lookup. Use `social` for a social connector identity or `sso` for an enterprise SSO identity. Must be provided together with `identityProvider` and `identityId`. External identity filters are combined with other user filters using AND logic. */
13949
+ identityType?: "social" | "sso";
13950
+ /** @description The connector target for a social identity (for example, `dingtalk`), or the issuer for an enterprise SSO identity. Must be provided together with `identityType` and `identityId`. */
13951
+ identityProvider?: string;
13952
+ /** @description The user identifier issued by the external identity provider, such as a DingTalk OpenID. Must be provided together with `identityType` and `identityProvider`. */
13953
+ identityId?: string;
13844
13954
  };
13845
13955
  header?: never;
13846
13956
  path?: never;
@@ -13957,6 +14067,11 @@ export interface operations {
13957
14067
  requestBody: {
13958
14068
  content: {
13959
14069
  "application/json": {
14070
+ /**
14071
+ * Format: regex
14072
+ * @description The unique ID for the user, up to 128 characters of letters, numbers, and `_ - . @ : + = |`, excluding `.` and `..`. If not provided, a random ID will be generated. Useful for keeping existing user IDs when migrating from another identity provider.
14073
+ */
14074
+ id?: string;
13960
14075
  /**
13961
14076
  * Format: regex
13962
14077
  * @description Primary phone number for the user. It should be unique across all users.
@@ -14123,6 +14238,13 @@ export interface operations {
14123
14238
  };
14124
14239
  content?: never;
14125
14240
  };
14241
+ /** @description Not Implemented */
14242
+ 501: {
14243
+ headers: {
14244
+ [name: string]: unknown;
14245
+ };
14246
+ content?: never;
14247
+ };
14126
14248
  };
14127
14249
  };
14128
14250
  UpdateUserPassword: {
@@ -15273,6 +15395,7 @@ export interface operations {
15273
15395
  [key: string]: unknown;
15274
15396
  };
15275
15397
  isMfaRequired: boolean;
15398
+ isTrustedDeviceAllowed: boolean;
15276
15399
  color: {
15277
15400
  /** Format: regex */
15278
15401
  primaryColor?: string;
@@ -16292,6 +16415,7 @@ export interface operations {
16292
16415
  /** @enum {string} */
16293
16416
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
16294
16417
  verified: boolean;
16418
+ userId?: string;
16295
16419
  /** Format: "EmailVerificationCode" */
16296
16420
  type: string;
16297
16421
  identifier: {
@@ -16304,6 +16428,7 @@ export interface operations {
16304
16428
  /** @enum {string} */
16305
16429
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
16306
16430
  verified: boolean;
16431
+ userId?: string;
16307
16432
  /** Format: "PhoneVerificationCode" */
16308
16433
  type: string;
16309
16434
  identifier: {
@@ -16316,6 +16441,7 @@ export interface operations {
16316
16441
  /** @enum {string} */
16317
16442
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
16318
16443
  verified: boolean;
16444
+ userId?: string;
16319
16445
  /** Format: "MfaEmailVerificationCode" */
16320
16446
  type: string;
16321
16447
  identifier: {
@@ -16328,6 +16454,7 @@ export interface operations {
16328
16454
  /** @enum {string} */
16329
16455
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
16330
16456
  verified: boolean;
16457
+ userId?: string;
16331
16458
  /** Format: "MfaPhoneVerificationCode" */
16332
16459
  type: string;
16333
16460
  identifier: {
@@ -16518,6 +16645,7 @@ export interface operations {
16518
16645
  /** @enum {string} */
16519
16646
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
16520
16647
  verified: boolean;
16648
+ userId?: string;
16521
16649
  /** Format: "EmailVerificationCode" */
16522
16650
  type: string;
16523
16651
  identifier: {
@@ -16530,6 +16658,7 @@ export interface operations {
16530
16658
  /** @enum {string} */
16531
16659
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
16532
16660
  verified: boolean;
16661
+ userId?: string;
16533
16662
  /** Format: "PhoneVerificationCode" */
16534
16663
  type: string;
16535
16664
  identifier: {
@@ -16542,6 +16671,7 @@ export interface operations {
16542
16671
  /** @enum {string} */
16543
16672
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
16544
16673
  verified: boolean;
16674
+ userId?: string;
16545
16675
  /** Format: "MfaEmailVerificationCode" */
16546
16676
  type: string;
16547
16677
  identifier: {
@@ -16554,6 +16684,7 @@ export interface operations {
16554
16684
  /** @enum {string} */
16555
16685
  templateType: "SignIn" | "Register" | "ForgotPassword" | "OrganizationInvitation" | "Generic" | "UserPermissionValidation" | "BindNewIdentifier" | "MfaVerification" | "BindMfa";
16556
16686
  verified: boolean;
16687
+ userId?: string;
16557
16688
  /** Format: "MfaPhoneVerificationCode" */
16558
16689
  type: string;
16559
16690
  identifier: {
@@ -16755,6 +16886,116 @@ export interface operations {
16755
16886
  };
16756
16887
  };
16757
16888
  };
16889
+ ListUserTrustedDevices: {
16890
+ parameters: {
16891
+ query?: never;
16892
+ header?: never;
16893
+ path: {
16894
+ /** @description The unique identifier of the user. */
16895
+ userId: components["parameters"]["userId"];
16896
+ };
16897
+ cookie?: never;
16898
+ };
16899
+ requestBody?: never;
16900
+ responses: {
16901
+ /** @description A list of the user's active trusted devices. */
16902
+ 200: {
16903
+ headers: {
16904
+ [name: string]: unknown;
16905
+ };
16906
+ content: {
16907
+ "application/json": {
16908
+ id: string;
16909
+ userAgent: string | null;
16910
+ country: string | null;
16911
+ city: string | null;
16912
+ createdAt: number;
16913
+ lastUsedAt: number;
16914
+ expiresAt: number;
16915
+ }[];
16916
+ };
16917
+ };
16918
+ /** @description Bad Request */
16919
+ 400: {
16920
+ headers: {
16921
+ [name: string]: unknown;
16922
+ };
16923
+ content?: never;
16924
+ };
16925
+ /** @description Unauthorized */
16926
+ 401: {
16927
+ headers: {
16928
+ [name: string]: unknown;
16929
+ };
16930
+ content?: never;
16931
+ };
16932
+ /** @description Forbidden */
16933
+ 403: {
16934
+ headers: {
16935
+ [name: string]: unknown;
16936
+ };
16937
+ content?: never;
16938
+ };
16939
+ /** @description The user was not found. */
16940
+ 404: {
16941
+ headers: {
16942
+ [name: string]: unknown;
16943
+ };
16944
+ content?: never;
16945
+ };
16946
+ };
16947
+ };
16948
+ DeleteUserTrustedDevice: {
16949
+ parameters: {
16950
+ query?: never;
16951
+ header?: never;
16952
+ path: {
16953
+ /** @description The unique identifier of the user. */
16954
+ userId: components["parameters"]["userId"];
16955
+ /** @description The unique identifier of the trusted device. */
16956
+ trustedDeviceId: components["parameters"]["trustedDeviceId"];
16957
+ };
16958
+ cookie?: never;
16959
+ };
16960
+ requestBody?: never;
16961
+ responses: {
16962
+ /** @description The trusted device was deleted successfully. */
16963
+ 204: {
16964
+ headers: {
16965
+ [name: string]: unknown;
16966
+ };
16967
+ content?: never;
16968
+ };
16969
+ /** @description Bad Request */
16970
+ 400: {
16971
+ headers: {
16972
+ [name: string]: unknown;
16973
+ };
16974
+ content?: never;
16975
+ };
16976
+ /** @description Unauthorized */
16977
+ 401: {
16978
+ headers: {
16979
+ [name: string]: unknown;
16980
+ };
16981
+ content?: never;
16982
+ };
16983
+ /** @description Forbidden */
16984
+ 403: {
16985
+ headers: {
16986
+ [name: string]: unknown;
16987
+ };
16988
+ content?: never;
16989
+ };
16990
+ /** @description The user or trusted device was not found. */
16991
+ 404: {
16992
+ headers: {
16993
+ [name: string]: unknown;
16994
+ };
16995
+ content?: never;
16996
+ };
16997
+ };
16998
+ };
16758
16999
  ListLogs: {
16759
17000
  parameters: {
16760
17001
  query?: {
@@ -18381,8 +18622,8 @@ export interface operations {
18381
18622
  id: string;
18382
18623
  name: string;
18383
18624
  /** @enum {string|null} */
18384
- event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
18385
- events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
18625
+ event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
18626
+ events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
18386
18627
  config: {
18387
18628
  url: string;
18388
18629
  headers?: {
@@ -18441,9 +18682,9 @@ export interface operations {
18441
18682
  * @description Use `events` instead.
18442
18683
  * @enum {string}
18443
18684
  */
18444
- event?: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded";
18685
+ event?: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded";
18445
18686
  /** @description An array of hook events. */
18446
- events?: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
18687
+ events?: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
18447
18688
  config: {
18448
18689
  url: string;
18449
18690
  headers?: {
@@ -18472,8 +18713,8 @@ export interface operations {
18472
18713
  id: string;
18473
18714
  name: string;
18474
18715
  /** @enum {string|null} */
18475
- event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
18476
- events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
18716
+ event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
18717
+ events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
18477
18718
  config: {
18478
18719
  url: string;
18479
18720
  headers?: {
@@ -18536,8 +18777,8 @@ export interface operations {
18536
18777
  id: string;
18537
18778
  name: string;
18538
18779
  /** @enum {string|null} */
18539
- event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
18540
- events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
18780
+ event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
18781
+ events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
18541
18782
  config: {
18542
18783
  url: string;
18543
18784
  headers?: {
@@ -18655,9 +18896,9 @@ export interface operations {
18655
18896
  * @description Use `events` instead.
18656
18897
  * @enum {string|null}
18657
18898
  */
18658
- event?: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
18899
+ event?: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
18659
18900
  /** @description An array of updated hook events. */
18660
- events?: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
18901
+ events?: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
18661
18902
  config?: {
18662
18903
  url: string;
18663
18904
  headers?: {
@@ -18686,8 +18927,8 @@ export interface operations {
18686
18927
  id: string;
18687
18928
  name: string;
18688
18929
  /** @enum {string|null} */
18689
- event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
18690
- events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
18930
+ event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
18931
+ events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
18691
18932
  config: {
18692
18933
  url: string;
18693
18934
  headers?: {
@@ -18854,7 +19095,7 @@ export interface operations {
18854
19095
  content: {
18855
19096
  "application/json": {
18856
19097
  /** @description An array of hook events for testing. */
18857
- events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
19098
+ events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
18858
19099
  /** @description The hook configuration for testing. */
18859
19100
  config: {
18860
19101
  url: string;
@@ -18943,8 +19184,8 @@ export interface operations {
18943
19184
  id: string;
18944
19185
  name: string;
18945
19186
  /** @enum {string|null} */
18946
- event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
18947
- events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
19187
+ event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
19188
+ events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "TrustedDevice.Created" | "TrustedDevice.Deleted" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
18948
19189
  config: {
18949
19190
  url: string;
18950
19191
  headers?: {
@@ -21112,6 +21353,7 @@ export interface operations {
21112
21353
  [key: string]: unknown;
21113
21354
  };
21114
21355
  isMfaRequired: boolean;
21356
+ isTrustedDeviceAllowed: boolean;
21115
21357
  color: {
21116
21358
  /** Format: regex */
21117
21359
  primaryColor?: string;
@@ -21183,6 +21425,7 @@ export interface operations {
21183
21425
  [key: string]: unknown;
21184
21426
  };
21185
21427
  isMfaRequired?: boolean;
21428
+ isTrustedDeviceAllowed?: boolean;
21186
21429
  color?: {
21187
21430
  /** Format: regex */
21188
21431
  primaryColor?: string;
@@ -21222,6 +21465,7 @@ export interface operations {
21222
21465
  [key: string]: unknown;
21223
21466
  };
21224
21467
  isMfaRequired: boolean;
21468
+ isTrustedDeviceAllowed: boolean;
21225
21469
  color: {
21226
21470
  /** Format: regex */
21227
21471
  primaryColor?: string;
@@ -21302,6 +21546,7 @@ export interface operations {
21302
21546
  [key: string]: unknown;
21303
21547
  };
21304
21548
  isMfaRequired: boolean;
21549
+ isTrustedDeviceAllowed: boolean;
21305
21550
  color: {
21306
21551
  /** Format: regex */
21307
21552
  primaryColor?: string;
@@ -21426,6 +21671,7 @@ export interface operations {
21426
21671
  [key: string]: unknown;
21427
21672
  };
21428
21673
  isMfaRequired?: boolean;
21674
+ isTrustedDeviceAllowed?: boolean;
21429
21675
  color?: {
21430
21676
  /** Format: regex */
21431
21677
  primaryColor?: string;
@@ -21465,6 +21711,7 @@ export interface operations {
21465
21711
  [key: string]: unknown;
21466
21712
  };
21467
21713
  isMfaRequired: boolean;
21714
+ isTrustedDeviceAllowed: boolean;
21468
21715
  color: {
21469
21716
  /** Format: regex */
21470
21717
  primaryColor?: string;
@@ -24312,6 +24559,8 @@ export interface operations {
24312
24559
  passkey?: "Off" | "ReadOnly" | "Edit";
24313
24560
  /** @enum {string} */
24314
24561
  session?: "Off" | "ReadOnly" | "Edit";
24562
+ /** @enum {string} */
24563
+ trustedDevice?: "Off" | "ReadOnly" | "Edit";
24315
24564
  };
24316
24565
  webauthnRelatedOrigins: string[];
24317
24566
  deleteAccountUrl: string | null;
@@ -24376,6 +24625,8 @@ export interface operations {
24376
24625
  passkey?: "Off" | "ReadOnly" | "Edit";
24377
24626
  /** @enum {string} */
24378
24627
  session?: "Off" | "ReadOnly" | "Edit";
24628
+ /** @enum {string} */
24629
+ trustedDevice?: "Off" | "ReadOnly" | "Edit";
24379
24630
  };
24380
24631
  /** @description The allowed domains for webauthn. */
24381
24632
  webauthnRelatedOrigins?: string[];
@@ -24427,6 +24678,8 @@ export interface operations {
24427
24678
  passkey?: "Off" | "ReadOnly" | "Edit";
24428
24679
  /** @enum {string} */
24429
24680
  session?: "Off" | "ReadOnly" | "Edit";
24681
+ /** @enum {string} */
24682
+ trustedDevice?: "Off" | "ReadOnly" | "Edit";
24430
24683
  };
24431
24684
  webauthnRelatedOrigins: string[];
24432
24685
  deleteAccountUrl: string | null;
@@ -24516,6 +24769,23 @@ export interface operations {
24516
24769
  encryption?: {
24517
24770
  [key: string]: unknown;
24518
24771
  } | null;
24772
+ /** @description IdP-side authentication policy. Fresh authentication is forced unless forceAuthn is explicitly false, including when this object is null or empty. PATCH replaces this object. */
24773
+ authnRequestConfig?: ({
24774
+ /**
24775
+ * @description Require fresh authentication for every sign-in to this application. Set to false to reuse an existing session unless the SP requests ForceAuthn.
24776
+ * @default true
24777
+ */
24778
+ forceAuthn?: boolean;
24779
+ /**
24780
+ * @description Require signed AuthnRequests for both HTTP-POST and HTTP-Redirect bindings. Defaults to false.
24781
+ * @default false
24782
+ */
24783
+ requireSignedAuthnRequests?: boolean;
24784
+ /** @description PEM-encoded RSA X.509 signing certificate of the service provider. Required when requireSignedAuthnRequests is true. Used independently of the assertion encryption certificate. */
24785
+ signingCertificate?: string;
24786
+ } & {
24787
+ [key: string]: unknown;
24788
+ }) | null;
24519
24789
  /**
24520
24790
  * @default urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
24521
24791
  * @enum {string}
@@ -24587,6 +24857,10 @@ export interface operations {
24587
24857
  encryption: {
24588
24858
  [key: string]: unknown;
24589
24859
  } | null;
24860
+ /** @description Validator function */
24861
+ authnRequestConfig: {
24862
+ [key: string]: unknown;
24863
+ } | null;
24590
24864
  /** @enum {string} */
24591
24865
  nameIdFormat: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" | "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" | "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" | "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified";
24592
24866
  };
@@ -24696,6 +24970,10 @@ export interface operations {
24696
24970
  encryption: {
24697
24971
  [key: string]: unknown;
24698
24972
  } | null;
24973
+ /** @description Validator function */
24974
+ authnRequestConfig: {
24975
+ [key: string]: unknown;
24976
+ } | null;
24699
24977
  /** @enum {string} */
24700
24978
  nameIdFormat: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" | "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" | "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" | "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified";
24701
24979
  };
@@ -24855,6 +25133,23 @@ export interface operations {
24855
25133
  encryption?: {
24856
25134
  [key: string]: unknown;
24857
25135
  } | null;
25136
+ /** @description IdP-side authentication policy. Fresh authentication is forced unless forceAuthn is explicitly false, including when this object is null or empty. PATCH replaces this object. */
25137
+ authnRequestConfig?: ({
25138
+ /**
25139
+ * @description Require fresh authentication for every sign-in to this application. Set to false to reuse an existing session unless the SP requests ForceAuthn.
25140
+ * @default true
25141
+ */
25142
+ forceAuthn?: boolean;
25143
+ /**
25144
+ * @description Require signed AuthnRequests for both HTTP-POST and HTTP-Redirect bindings. Defaults to false.
25145
+ * @default false
25146
+ */
25147
+ requireSignedAuthnRequests?: boolean;
25148
+ /** @description PEM-encoded RSA X.509 signing certificate of the service provider. Required when requireSignedAuthnRequests is true. Used independently of the assertion encryption certificate. */
25149
+ signingCertificate?: string;
25150
+ } & {
25151
+ [key: string]: unknown;
25152
+ }) | null;
24858
25153
  /** @enum {string} */
24859
25154
  nameIdFormat?: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" | "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" | "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" | "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified";
24860
25155
  };
@@ -24923,6 +25218,10 @@ export interface operations {
24923
25218
  encryption: {
24924
25219
  [key: string]: unknown;
24925
25220
  } | null;
25221
+ /** @description Validator function */
25222
+ authnRequestConfig: {
25223
+ [key: string]: unknown;
25224
+ } | null;
24926
25225
  /** @enum {string} */
24927
25226
  nameIdFormat: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" | "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress" | "urn:oasis:names:tc:SAML:2.0:nameid-format:transient" | "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified";
24928
25227
  };
@@ -26056,6 +26355,16 @@ export interface operations {
26056
26355
  domain?: string;
26057
26356
  /** @enum {string} */
26058
26357
  mode?: "invisible" | "checkbox";
26358
+ scoreThreshold?: number;
26359
+ } | {
26360
+ /** Format: "Cap" */
26361
+ type: string;
26362
+ /** @description Validator function */
26363
+ endpoint: {
26364
+ [key: string]: unknown;
26365
+ };
26366
+ siteKey: string;
26367
+ secretKey: string;
26059
26368
  };
26060
26369
  createdAt: number;
26061
26370
  updatedAt: number;
@@ -26110,6 +26419,16 @@ export interface operations {
26110
26419
  domain?: string;
26111
26420
  /** @enum {string} */
26112
26421
  mode?: "invisible" | "checkbox";
26422
+ scoreThreshold?: number;
26423
+ } | {
26424
+ /** Format: "Cap" */
26425
+ type: string;
26426
+ /** @description Validator function */
26427
+ endpoint: {
26428
+ [key: string]: unknown;
26429
+ };
26430
+ siteKey: string;
26431
+ secretKey: string;
26113
26432
  };
26114
26433
  };
26115
26434
  };
@@ -26138,6 +26457,16 @@ export interface operations {
26138
26457
  domain?: string;
26139
26458
  /** @enum {string} */
26140
26459
  mode?: "invisible" | "checkbox";
26460
+ scoreThreshold?: number;
26461
+ } | {
26462
+ /** Format: "Cap" */
26463
+ type: string;
26464
+ /** @description Validator function */
26465
+ endpoint: {
26466
+ [key: string]: unknown;
26467
+ };
26468
+ siteKey: string;
26469
+ secretKey: string;
26141
26470
  };
26142
26471
  createdAt: number;
26143
26472
  updatedAt: number;
@@ -27641,6 +27970,10 @@ export interface operations {
27641
27970
  adaptiveMfa: {
27642
27971
  enabled?: boolean;
27643
27972
  };
27973
+ trustedDevice: {
27974
+ enabled?: boolean;
27975
+ durationDays?: number;
27976
+ };
27644
27977
  singleSignOnEnabled: boolean;
27645
27978
  supportEmail: string | null;
27646
27979
  supportWebsiteUrl: string | null;
@@ -27677,10 +28010,6 @@ export interface operations {
27677
28010
  usernamePolicy: {
27678
28011
  [key: string]: unknown;
27679
28012
  };
27680
- trustedDevice?: {
27681
- enabled?: boolean;
27682
- durationDays?: number;
27683
- };
27684
28013
  socialConnectors: {
27685
28014
  id: string;
27686
28015
  target: string;
@@ -27717,8 +28046,9 @@ export interface operations {
27717
28046
  };
27718
28047
  captchaConfig?: {
27719
28048
  /** @enum {string} */
27720
- type: "RecaptchaEnterprise" | "Turnstile";
28049
+ type: "RecaptchaEnterprise" | "Turnstile" | "Cap";
27721
28050
  siteKey: string;
28051
+ endpoint?: string;
27722
28052
  domain?: string;
27723
28053
  /** @enum {string} */
27724
28054
  mode?: "invisible" | "checkbox";
@@ -27987,6 +28317,10 @@ export interface operations {
27987
28317
  adaptiveMfa: {
27988
28318
  enabled?: boolean;
27989
28319
  };
28320
+ trustedDevice: {
28321
+ enabled?: boolean;
28322
+ durationDays?: number;
28323
+ };
27990
28324
  singleSignOnEnabled: boolean;
27991
28325
  supportEmail: string | null;
27992
28326
  supportWebsiteUrl: string | null;
@@ -28023,10 +28357,6 @@ export interface operations {
28023
28357
  usernamePolicy: {
28024
28358
  [key: string]: unknown;
28025
28359
  };
28026
- trustedDevice?: {
28027
- enabled?: boolean;
28028
- durationDays?: number;
28029
- };
28030
28360
  socialConnectors: {
28031
28361
  id: string;
28032
28362
  target: string;
@@ -28063,8 +28393,9 @@ export interface operations {
28063
28393
  };
28064
28394
  captchaConfig?: {
28065
28395
  /** @enum {string} */
28066
- type: "RecaptchaEnterprise" | "Turnstile";
28396
+ type: "RecaptchaEnterprise" | "Turnstile" | "Cap";
28067
28397
  siteKey: string;
28398
+ endpoint?: string;
28068
28399
  domain?: string;
28069
28400
  /** @enum {string} */
28070
28401
  mode?: "invisible" | "checkbox";
@@ -28223,6 +28554,8 @@ export interface operations {
28223
28554
  passkey?: "Off" | "ReadOnly" | "Edit";
28224
28555
  /** @enum {string} */
28225
28556
  session?: "Off" | "ReadOnly" | "Edit";
28557
+ /** @enum {string} */
28558
+ trustedDevice?: "Off" | "ReadOnly" | "Edit";
28226
28559
  };
28227
28560
  webauthnRelatedOrigins: string[];
28228
28561
  deleteAccountUrl: string | null;