@ory/elements-react 0.0.0-pr.8e964fc1 → 0.0.0-pr.96c07cce

package/dist/index.js

@@ -36,16 +36,30 @@ function useGroupSorter() {
 }
 var defaultNodeOrder = [
   "oidc",
+  "saml",
   "identifier_first",
   "default",
   "profile",
   "password",
+  // CAPTCHA is below password because otherwise the password input field
+  // would be above the captcha. Somehow, we sort the password sign up button somewhere else to be always at the bottom.
+  "captcha",
   "passkey",
   "code",
   "webauthn"
 ];
 function defaultNodeSorter(a, b) {
   var _a, _b;
+  const aIsCaptcha = a.group === "captcha";
+  const bIsCaptcha = b.group === "captcha";
+  const aIsSubmit = clientFetch.isUiNodeInputAttributes(a.attributes) && a.attributes.type === "submit";
+  const bIsSubmit = clientFetch.isUiNodeInputAttributes(b.attributes) && b.attributes.type === "submit";
+  if (aIsCaptcha && bIsSubmit) {
+    return -1;
+  }
+  if (bIsCaptcha && aIsSubmit) {
+    return 1;
+  }
   const aGroupWeight = (_a = defaultNodeOrder.indexOf(a.group)) != null ? _a : 999;
   const bGroupWeight = (_b = defaultNodeOrder.indexOf(b.group)) != null ? _b : 999;
   return aGroupWeight - bGroupWeight;
@@ -85,25 +99,10 @@ function OryComponentProvider({
     }
   );
 }
-function isChoosingMethod(uiNodes) {
-  return uiNodes.some(
-    (node) => "name" in node.attributes && node.attributes.name === "screen" && "value" in node.attributes && node.attributes.value === "previous"
-  ) || uiNodes.some(
-    (node) => node.group === clientFetch.UiNodeGroupEnum.IdentifierFirst && "name" in node.attributes && node.attributes.name === "identifier" && node.attributes.type === "hidden"
-  );
-}
-function filterOidcOut(nodes) {
-  return nodes.filter((node) => node.group !== clientFetch.UiNodeGroupEnum.Oidc);
-}
-function getFinalNodes(uniqueGroups, selectedGroup) {
-  var _a, _b, _c;
-  const selectedNodes = selectedGroup ? (_a = uniqueGroups[selectedGroup]) != null ? _a : [] : [];
-  return [
-    ...(_b = uniqueGroups == null ? void 0 : uniqueGroups.identifier_first) != null ? _b : [],
-    ...(_c = uniqueGroups == null ? void 0 : uniqueGroups.default) != null ? _c : []
-  ].flat().filter(
-    (node) => "type" in node.attributes && node.attributes.type === "hidden"
-  ).concat(selectedNodes);
+
+// src/theme/default/utils/form.ts
+function isGroupImmediateSubmit(group) {
+  return group === "code";
 }
 function triggerToWindowCall(trigger) {
   if (!trigger) {
@@ -172,25 +171,37 @@ function nodesToAuthMethodGroups(nodes, excludeAuthMethods = []) {
       clientFetch.UiNodeGroupEnum.Default,
       clientFetch.UiNodeGroupEnum.IdentifierFirst,
       clientFetch.UiNodeGroupEnum.Profile,
+      clientFetch.UiNodeGroupEnum.Captcha,
       ...excludeAuthMethods
     ].includes(group)
   );
 }
-function useNodesGroups(nodes) {
+function useNodesGroups(nodes, { omit } = {}) {
   const groupSorter = useGroupSorter();
   const groups = react.useMemo(() => {
-    var _a;
+    var _a, _b;
     const groups2 = {};
+    const groupRetained = {};
     for (const node of nodes) {
-      if (node.type === "script") {
-        continue;
-      }
       const groupNodes = (_a = groups2[node.group]) != null ? _a : [];
       groupNodes.push(node);
       groups2[node.group] = groupNodes;
+      if ((omit == null ? void 0 : omit.includes("script")) && clientFetch.isUiNodeScriptAttributes(node.attributes)) {
+        continue;
+      }
+      if ((omit == null ? void 0 : omit.includes("input_hidden")) && clientFetch.isUiNodeInputAttributes(node.attributes) && node.attributes.type === "hidden") {
+        continue;
+      }
+      groupRetained[node.group] = ((_b = groupRetained[node.group]) != null ? _b : 0) + 1;
     }
-    return groups2;
-  }, [nodes]);
+    const finalGroups = {};
+    for (const [group, count] of Object.entries(groupRetained)) {
+      if (count > 0) {
+        finalGroups[group] = groups2[group];
+      }
+    }
+    return finalGroups;
+  }, [nodes, omit]);
   const entries = react.useMemo(
     () => Object.entries(groups).sort(([a], [b]) => groupSorter(a, b)),
     [groups, groupSorter]
@@ -200,6 +211,96 @@ function useNodesGroups(nodes) {
     entries
   };
 }
+var findNode = (nodes, opt) => nodes.find((n) => {
+  return n.attributes.node_type === opt.node_type && (opt.group instanceof RegExp ? n.group.match(opt.group) : n.group === opt.group) && (opt.name && n.attributes.node_type === "input" ? opt.name instanceof RegExp ? n.attributes.name.match(opt.name) : n.attributes.name === opt.name : !opt.name);
+});
+function useFunctionalNodes(nodes) {
+  return nodes.filter(
+    ({ group }) => [
+      clientFetch.UiNodeGroupEnum.Default,
+      clientFetch.UiNodeGroupEnum.IdentifierFirst,
+      clientFetch.UiNodeGroupEnum.Profile,
+      clientFetch.UiNodeGroupEnum.Captcha
+    ].includes(group)
+  );
+}
+function isUiNodeGroupEnum(method) {
+  return Object.values(clientFetch.UiNodeGroupEnum).includes(method);
+}
+function isSingleSignOnNode(node) {
+  return node.group === clientFetch.UiNodeGroupEnum.Oidc || node.group === clientFetch.UiNodeGroupEnum.Saml;
+}
+function hasSingleSignOnNodes(nodes) {
+  return nodes.some(isSingleSignOnNode);
+}
+function withoutSingleSignOnNodes(nodes) {
+  return nodes.filter((node) => !isSingleSignOnNode(node));
+}
+function isNodeVisible(node) {
+  if (clientFetch.isUiNodeScriptAttributes(node.attributes)) {
+    return false;
+  } else if (clientFetch.isUiNodeInputAttributes(node.attributes)) {
+    if (node.attributes.type === "hidden") {
+      return false;
+    }
+  }
+  return true;
+}
+function useNodeGroupsWithVisibleNodes(nodes) {
+  return react.useMemo(() => {
+    var _a, _b;
+    const groups = {};
+    const groupRetained = {};
+    for (const node of nodes) {
+      const groupNodes = (_a = groups[node.group]) != null ? _a : [];
+      const groupCount = (_b = groupRetained[node.group]) != null ? _b : 0;
+      groupNodes.push(node);
+      groups[node.group] = groupNodes;
+      if (!isNodeVisible(node)) {
+        continue;
+      }
+      groupRetained[node.group] = groupCount + 1;
+    }
+    const finalGroups = {};
+    for (const [group, count] of Object.entries(groupRetained)) {
+      if (count > 0) {
+        finalGroups[group] = groups[group];
+      }
+    }
+    return finalGroups;
+  }, [nodes]);
+}
+
+// src/components/card/two-step/utils.ts
+function isChoosingMethod(flow) {
+  return flow.flow.ui.nodes.some(
+    (node) => "name" in node.attributes && node.attributes.name === "screen" && "value" in node.attributes && node.attributes.value === "previous"
+  ) || flow.flow.ui.nodes.some(
+    (node) => node.group === clientFetch.UiNodeGroupEnum.IdentifierFirst && "name" in node.attributes && node.attributes.name === "identifier" && node.attributes.type === "hidden"
+  ) || flow.flowType === clientFetch.FlowType.Login && flow.flow.requested_aal === "aal2";
+}
+function getFinalNodes(uniqueGroups, selectedGroup) {
+  var _a, _b, _c, _d;
+  const selectedNodes = selectedGroup ? (_a = uniqueGroups[selectedGroup]) != null ? _a : [] : [];
+  return [
+    ...(_b = uniqueGroups == null ? void 0 : uniqueGroups.identifier_first) != null ? _b : [],
+    ...(_c = uniqueGroups == null ? void 0 : uniqueGroups.default) != null ? _c : [],
+    ...(_d = uniqueGroups == null ? void 0 : uniqueGroups.captcha) != null ? _d : []
+  ].flat().filter(
+    (node) => "type" in node.attributes && node.attributes.type === "hidden"
+  ).concat(selectedNodes);
+}
+var handleAfterFormSubmit = (dispatchFormState) => (method) => {
+  if (typeof method !== "string" || !isUiNodeGroupEnum(method)) {
+    return;
+  }
+  if (isGroupImmediateSubmit(method)) {
+    dispatchFormState({
+      type: "action_select_method",
+      method
+    });
+  }
+};
 
 // src/context/form-state.ts
 function findMethodWithMessage(nodes) {
@@ -221,9 +322,11 @@ function parseStateFromFlow(flow) {
         return { current: "method_active", method: "code" };
       } else if (methodWithMessage) {
         return { current: "method_active", method: methodWithMessage.group };
-      } else if (flow.flow.active && !["default", "identifier_first", "oidc"].includes(flow.flow.active)) {
+      } else if (flow.flow.active && !["default", "identifier_first", "oidc", "saml"].includes(
+        flow.flow.active
+      )) {
         return { current: "method_active", method: flow.flow.active };
-      } else if (isChoosingMethod(flow.flow.ui.nodes)) {
+      } else if (isChoosingMethod(flow)) {
         const authMethods = nodesToAuthMethodGroups(flow.flow.ui.nodes);
         if (authMethods.length === 1 && authMethods[0] !== "code") {
           return { current: "method_active", method: authMethods[0] };
@@ -245,23 +348,32 @@ function parseStateFromFlow(flow) {
       break;
     case clientFetch.FlowType.Settings:
       return { current: "settings" };
+    case clientFetch.FlowType.OAuth2Consent:
+      return { current: "method_active", method: "oauth2_consent" };
   }
   console.warn(
     `[Ory/Elements React] Encountered an unknown form state on ${flow.flowType} flow with ID ${flow.flow.id}`
   );
   throw new Error("Unknown form state");
 }
-function formStateReducer(state, action) {
-  switch (action.type) {
-    case "action_flow_update":
-      return parseStateFromFlow(action.flow);
-    case "action_select_method":
-      return { current: "method_active", method: action.method };
-  }
-  return state;
-}
 function useFormStateReducer(flow) {
-  return react.useReducer(formStateReducer, parseStateFromFlow(flow));
+  const action = parseStateFromFlow(flow);
+  const [selectedMethod, setSelectedMethod] = react.useState();
+  const formStateReducer = (state, action2) => {
+    switch (action2.type) {
+      case "action_flow_update": {
+        if (selectedMethod)
+          return { current: "method_active", method: selectedMethod };
+        return parseStateFromFlow(action2.flow);
+      }
+      case "action_select_method": {
+        setSelectedMethod(action2.method);
+        return { current: "method_active", method: action2.method };
+      }
+    }
+    return state;
+  };
+  return react.useReducer(formStateReducer, action);
 }
 function useOryFlow() {
   const ctx = react.useContext(OryFlowContext);
@@ -351,6 +463,22 @@ function computeDefaultValues(nodes) {
       if (attrs.name === "method" || attrs.type === "submit" || typeof attrs.value === "undefined") {
         return acc;
       }
+      if (attrs.name.startsWith("grant_scope")) {
+        const scope = attrs.value;
+        if (Array.isArray(acc.grant_scope)) {
+          return {
+            ...acc,
+            // We want to have all scopes accepted by default, so that the user has to actively uncheck them.
+            grant_scope: [...acc.grant_scope, scope]
+          };
+        } else if (!acc.grant_scope) {
+          return {
+            ...acc,
+            grant_scope: [scope]
+          };
+        }
+        return acc;
+      }
       return unrollTrait(
         {
           name: attrs.name,
@@ -438,15 +566,11 @@ function OryCardContent({ children }) {
   const { Card } = useComponents();
   return /* @__PURE__ */ jsxRuntime.jsx(Card.Content, { children });
 }
-
-// src/theme/default/utils/form.ts
-function isGroupImmediateSubmit(group) {
-  return group === "code";
-}
 function frontendClient(sdkUrl, opts = {}) {
   const config = new clientFetch.Configuration({
     ...opts,
     basePath: sdkUrl,
+    credentials: "include",
     headers: {
       Accept: "application/json",
       ...opts.headers
@@ -782,7 +906,7 @@ function useOryFormSubmit(onAfterSubmit) {
         if ("lookup_secret_confirm" in submitData || "lookup_secret_reveal" in submitData || "lookup_secret_regenerate" in submitData || "lookup_secret_disable" in submitData) {
           submitData.method = "lookup_secret";
         }
-        if (submitData.method === "oidc" && submitData.link && supportsSelectAccountPrompt.includes(submitData.link)) {
+        if (submitData.method === clientFetch.UiNodeGroupEnum.Oidc && submitData.link && supportsSelectAccountPrompt.includes(submitData.link)) {
           submitData.upstream_parameters = {
             prompt: "select_account"
           };
@@ -800,6 +924,19 @@ function useOryFormSubmit(onAfterSubmit) {
         });
         break;
       }
+      case clientFetch.FlowType.OAuth2Consent: {
+        const response = await fetch(flowContainer.flow.ui.action, {
+          method: "POST",
+          body: JSON.stringify(data),
+          headers: {
+            "Content-Type": "application/json"
+          }
+        });
+        const oauth2Success = await response.json();
+        if (oauth2Success.redirect_to && typeof oauth2Success.redirect_to === "string") {
+          onRedirect(oauth2Success.redirect_to);
+        }
+      }
     }
     if ("password" in data) {
       methods.setValue("password", "");
@@ -814,15 +951,22 @@ function useOryFormSubmit(onAfterSubmit) {
   };
   return onSubmit;
 }
-function OryForm({ children, onAfterSubmit }) {
-  var _a;
+function OryForm({
+  children,
+  onAfterSubmit,
+  "data-testid": dataTestId
+}) {
   const { Form } = useComponents();
   const flowContainer = useOryFlow();
   const methods = reactHookForm.useFormContext();
+  const { Message } = useComponents();
   const intl = reactIntl.useIntl();
   const onSubmit = useOryFormSubmit(onAfterSubmit);
   const hasMethods = flowContainer.flow.ui.nodes.some((node) => {
     if (clientFetch.isUiNodeInputAttributes(node.attributes)) {
+      if (node.attributes.type === "hidden") {
+        return false;
+      }
       return node.attributes.name !== "csrf_token";
     } else if (clientFetch.isUiNodeAnchorAttributes(node.attributes)) {
       return true;
@@ -833,15 +977,24 @@ function OryForm({ children, onAfterSubmit }) {
     }
     return false;
   });
-  if (!hasMethods && ((_a = flowContainer.flow.ui.messages) != null ? _a : []).length === 0) {
-    return intl.formatMessage({
-      id: `identities.messages.${5000002}`,
-      defaultMessage: "No authentication methods are available for this request. Please contact the site or app owner."
-    });
+  if (!hasMethods) {
+    const m = {
+      id: 5000002,
+      text: intl.formatMessage({
+        id: `identities.messages.${5000002}`,
+        defaultMessage: "No authentication methods are available for this request. Please contact the site or app owner."
+      }),
+      type: "error"
+    };
+    return /* @__PURE__ */ jsxRuntime.jsx("div", { "data-testid": dataTestId, children: /* @__PURE__ */ jsxRuntime.jsx(Message.Root, { children: /* @__PURE__ */ jsxRuntime.jsx(Message.Content, { message: m }, m.id) }) });
+  }
+  if ((flowContainer.flowType === clientFetch.FlowType.Login || flowContainer.flowType === clientFetch.FlowType.Registration) && flowContainer.formState.current === "method_active" && flowContainer.formState.method === "code") {
+    methods.setValue("method", "code");
   }
   return /* @__PURE__ */ jsxRuntime.jsx(
     Form.Root,
     {
+      "data-testid": dataTestId,
       action: flowContainer.flow.ui.action,
       method: flowContainer.flow.ui.method,
       onSubmit: (e) => void methods.handleSubmit(onSubmit)(e),
@@ -849,7 +1002,15 @@ function OryForm({ children, onAfterSubmit }) {
     }
   );
 }
-var messageIdsToHide = [1040009, 1060003, 1080003, 1010014, 1040005, 1010016];
+var messageIdsToHide = [
+  1040009,
+  1060003,
+  1080003,
+  1010004,
+  1010014,
+  1040005,
+  1010016
+];
 function OryCardValidationMessages({ ...props }) {
   var _a;
   const { flow } = useOryFlow();
@@ -868,7 +1029,7 @@ var NodeInput = ({
 }) => {
   var _a;
   const { Node: Node2 } = useComponents();
-  const { setValue } = reactHookForm.useFormContext();
+  const { setValue, watch } = reactHookForm.useFormContext();
   const {
     onloadTrigger,
     onclickTrigger,
@@ -881,7 +1042,7 @@ var NodeInput = ({
   const isResendNode = ((_a = node.meta.label) == null ? void 0 : _a.id) === 1070008;
   const isScreenSelectionNode = "name" in node.attributes && node.attributes.name === "screen";
   const setFormValue = () => {
-    if (attrs.value && !(isResendNode || isScreenSelectionNode)) {
+    if (attrs.value && !(isResendNode || isScreenSelectionNode || node.group === clientFetch.UiNodeGroupEnum.Oauth2Consent)) {
       setValue(attrs.name, attrs.value);
     }
   };
@@ -904,8 +1065,21 @@ var NodeInput = ({
       triggerToWindowCall(onclickTrigger);
     }
   };
-  const isSocial = (attrs.name === "provider" || attrs.name === "link") && node.group === "oidc";
+  const isSocial = (attrs.name === "provider" || attrs.name === "link") && (node.group === clientFetch.UiNodeGroupEnum.Oidc || node.group === clientFetch.UiNodeGroupEnum.Saml);
   const isPinCodeInput = attrs.name === "code" && node.group === "code" || attrs.name === "totp_code" && node.group === "totp";
+  const handleScopeChange = (checked) => {
+    const scopes = watch("grant_scope");
+    if (Array.isArray(scopes)) {
+      if (checked) {
+        setValue("grant_scope", Array.from(/* @__PURE__ */ new Set([...scopes, attrs.value])));
+      } else {
+        setValue(
+          "grant_scope",
+          scopes.filter((scope) => scope !== attrs.value)
+        );
+      }
+    }
+  };
   switch (attributes.type) {
     case clientFetch.UiNodeInputAttributesTypeEnum.Submit:
     case clientFetch.UiNodeInputAttributesTypeEnum.Button:
@@ -915,6 +1089,9 @@ var NodeInput = ({
       if (isResendNode || isScreenSelectionNode) {
         return null;
       }
+      if (node.group === "oauth2_consent") {
+        return null;
+      }
       return /* @__PURE__ */ jsxRuntime.jsx(
         Node2.Label,
         {
@@ -926,6 +1103,21 @@ var NodeInput = ({
     case clientFetch.UiNodeInputAttributesTypeEnum.DatetimeLocal:
       throw new Error("Not implemented");
     case clientFetch.UiNodeInputAttributesTypeEnum.Checkbox:
+      if (node.group === "oauth2_consent" && node.attributes.node_type === "input") {
+        switch (node.attributes.name) {
+          case "grant_scope":
+            return /* @__PURE__ */ jsxRuntime.jsx(
+              Node2.ConsentScopeCheckbox,
+              {
+                attributes: attrs,
+                node,
+                onCheckedChange: handleScopeChange
+              }
+            );
+          default:
+            return null;
+        }
+      }
       return /* @__PURE__ */ jsxRuntime.jsx(
         Node2.Label,
         {
@@ -952,6 +1144,9 @@ var NodeInput = ({
 };
 var Node = ({ node, onClick }) => {
   const { Node: Node2 } = useComponents();
+  if (node.group === clientFetch.UiNodeGroupEnum.Captcha) {
+    return /* @__PURE__ */ jsxRuntime.jsx(Node2.Captcha, { node });
+  }
   if (clientFetch.isUiNodeImageAttributes(node.attributes)) {
     return /* @__PURE__ */ jsxRuntime.jsx(Node2.Image, { node, attributes: node.attributes });
   } else if (clientFetch.isUiNodeTextAttributes(node.attributes)) {
@@ -984,12 +1179,14 @@ function OryFormOidcButtons() {
     flow: { ui }
   } = useOryFlow();
   const { setValue } = reactHookForm.useFormContext();
-  const filteredNodes = ui.nodes.filter((node) => node.group === "oidc");
+  const filteredNodes = ui.nodes.filter(
+    (node) => node.group === clientFetch.UiNodeGroupEnum.Oidc || node.group === clientFetch.UiNodeGroupEnum.Saml
+  );
   const { Form, Node: Node2 } = useComponents();
   if (filteredNodes.length === 0) {
     return null;
   }
-  return /* @__PURE__ */ jsxRuntime.jsx(Form.OidcRoot, { nodes: filteredNodes, children: filteredNodes.map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(
+  return /* @__PURE__ */ jsxRuntime.jsx(Form.OidcRoot, { nodes: filteredNodes, children: filteredNodes.map((node) => /* @__PURE__ */ jsxRuntime.jsx(
     Node2.OidcButton,
     {
       node,
@@ -999,114 +1196,217 @@ function OryFormOidcButtons() {
           "provider",
           node.attributes.value
         );
-        setValue("method", "oidc");
+        setValue("method", node.group);
       }
     },
-    k
+    clientFetch.getNodeId(node)
   )) });
 }
 function OryFormSocialButtonsForm() {
   const {
     flow: { ui }
   } = useOryFlow();
-  const filteredNodes = ui.nodes.filter((node) => node.group === "oidc");
+  const filteredNodes = ui.nodes.filter(
+    (node) => node.group === clientFetch.UiNodeGroupEnum.Saml || node.group === clientFetch.UiNodeGroupEnum.Oidc
+  );
   if (filteredNodes.length === 0) {
     return null;
   }
-  return /* @__PURE__ */ jsxRuntime.jsx(OryFormProvider, { children: /* @__PURE__ */ jsxRuntime.jsx(OryForm, { children: /* @__PURE__ */ jsxRuntime.jsx(OryFormOidcButtons, {}) }) });
+  return /* @__PURE__ */ jsxRuntime.jsx(OryFormProvider, { children: /* @__PURE__ */ jsxRuntime.jsx(OryForm, { "data-testid": `ory/form/methods/oidc-saml`, children: /* @__PURE__ */ jsxRuntime.jsx(OryFormOidcButtons, {}) }) });
 }
-function isUINodeGroupEnum(method) {
-  return Object.values(clientFetch.UiNodeGroupEnum).includes(method);
+function OryTwoStepCardStateMethodActive({
+  formState
+}) {
+  const { Form } = useComponents();
+  const { flow, flowType, dispatchFormState } = useOryFlow();
+  const { ui } = flow;
+  const nodeSorter = useNodeSorter();
+  const sortNodes = (a, b) => nodeSorter(a, b, { flowType });
+  const groupsToShow = useNodeGroupsWithVisibleNodes(ui.nodes);
+  const finalNodes = getFinalNodes(groupsToShow, formState.method);
+  const selectedMethodIsSocial = formState.method === clientFetch.UiNodeGroupEnum.Oidc || formState.method === clientFetch.UiNodeGroupEnum.Saml;
+  return /* @__PURE__ */ jsxRuntime.jsxs(OryCard, { children: [
+    /* @__PURE__ */ jsxRuntime.jsx(OryCardHeader, {}),
+    /* @__PURE__ */ jsxRuntime.jsxs(OryCardContent, { children: [
+      /* @__PURE__ */ jsxRuntime.jsx(OryCardValidationMessages, {}),
+      selectedMethodIsSocial && /* @__PURE__ */ jsxRuntime.jsx(OryFormSocialButtonsForm, {}),
+      /* @__PURE__ */ jsxRuntime.jsx(
+        OryForm,
+        {
+          "data-testid": `ory/form/methods/local`,
+          onAfterSubmit: handleAfterFormSubmit(dispatchFormState),
+          children: /* @__PURE__ */ jsxRuntime.jsxs(Form.Group, { children: [
+            ui.nodes.filter(
+              (n) => clientFetch.isUiNodeScriptAttributes(n.attributes) || n.group === clientFetch.UiNodeGroupEnum.Captcha || n.group === clientFetch.UiNodeGroupEnum.Default || n.group === clientFetch.UiNodeGroupEnum.Profile
+            ).map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k)),
+            finalNodes.sort(sortNodes).map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k))
+          ] })
+        }
+      )
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsx(OryCardFooter, {})
+  ] });
 }
-function OryTwoStepCard() {
-  const {
-    flow: { ui },
-    flowType,
-    formState,
-    dispatchFormState
-  } = useOryFlow();
+function OryTwoStepCardStateProvideIdentifier() {
   const { Form, Card } = useComponents();
+  const { flowType, flow, dispatchFormState } = useOryFlow();
   const nodeSorter = useNodeSorter();
   const sortNodes = (a, b) => nodeSorter(a, b, { flowType });
-  const uniqueGroups = useNodesGroups(ui.nodes);
-  const options = Object.values(clientFetch.UiNodeGroupEnum).filter((group) => {
-    var _a;
-    return (_a = uniqueGroups.groups[group]) == null ? void 0 : _a.length;
-  }).filter(
-    (group) => ![
-      clientFetch.UiNodeGroupEnum.Oidc,
-      clientFetch.UiNodeGroupEnum.Default,
-      clientFetch.UiNodeGroupEnum.IdentifierFirst,
-      clientFetch.UiNodeGroupEnum.Profile
-    ].includes(group)
+  const nonSsoNodes = withoutSingleSignOnNodes(flow.ui.nodes).sort(sortNodes);
+  const hasSso = flow.ui.nodes.filter(isNodeVisible).some(
+    (node) => node.group === clientFetch.UiNodeGroupEnum.Oidc || node.group === clientFetch.UiNodeGroupEnum.Saml
   );
-  const nonOidcNodes = filterOidcOut(ui.nodes);
-  const finalNodes = formState.current === "method_active" ? getFinalNodes(uniqueGroups.groups, formState.method) : [];
-  const handleAfterFormSubmit = (method) => {
-    if (typeof method !== "string" || !isUINodeGroupEnum(method)) {
-      return;
+  const showSsoDivider = hasSso && nonSsoNodes.some(isNodeVisible);
+  return /* @__PURE__ */ jsxRuntime.jsxs(OryCard, { children: [
+    /* @__PURE__ */ jsxRuntime.jsx(OryCardHeader, {}),
+    /* @__PURE__ */ jsxRuntime.jsxs(OryCardContent, { children: [
+      /* @__PURE__ */ jsxRuntime.jsx(OryCardValidationMessages, {}),
+      /* @__PURE__ */ jsxRuntime.jsx(OryFormSocialButtonsForm, {}),
+      /* @__PURE__ */ jsxRuntime.jsx(
+        OryForm,
+        {
+          "data-testid": `ory/form/methods/local`,
+          onAfterSubmit: handleAfterFormSubmit(dispatchFormState),
+          children: /* @__PURE__ */ jsxRuntime.jsxs(Form.Group, { children: [
+            showSsoDivider && /* @__PURE__ */ jsxRuntime.jsx(Card.Divider, {}),
+            nonSsoNodes.map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k))
+          ] })
+        }
+      )
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsx(OryCardFooter, {})
+  ] });
+}
+function AuthMethodList({
+  options,
+  setSelectedGroup
+}) {
+  const { Card } = useComponents();
+  const { setValue, getValues } = reactHookForm.useFormContext();
+  if (Object.entries(options).length === 0) {
+    return null;
+  }
+  const handleClick = (group, options2) => {
+    var _a, _b, _c, _d;
+    if (isGroupImmediateSubmit(group)) {
+      if (group === "code" && !getValues("identifier") && ((_b = (_a = options2 == null ? void 0 : options2.title) == null ? void 0 : _a.values) == null ? void 0 : _b.address)) {
+        setValue("identifier", (_d = (_c = options2 == null ? void 0 : options2.title) == null ? void 0 : _c.values) == null ? void 0 : _d.address);
+      }
+      setValue("method", group);
+    } else {
+      setSelectedGroup(group);
     }
-    if (isGroupImmediateSubmit(method)) {
-      dispatchFormState({
-        type: "action_select_method",
-        method
-      });
+  };
+  return /* @__PURE__ */ jsxRuntime.jsx(Card.AuthMethodListContainer, { children: Object.entries(options).map(([group, options2]) => /* @__PURE__ */ jsxRuntime.jsx(
+    Card.AuthMethodListItem,
+    {
+      group,
+      title: options2.title,
+      onClick: () => handleClick(group, options2)
+    },
+    group
+  )) });
+}
+function toAuthMethodPickerOptions(visibleGroups) {
+  return Object.fromEntries(
+    Object.values(clientFetch.UiNodeGroupEnum).filter((group) => {
+      var _a;
+      return (_a = visibleGroups[group]) == null ? void 0 : _a.length;
+    }).filter(
+      (group) => ![
+        clientFetch.UiNodeGroupEnum.Oidc,
+        clientFetch.UiNodeGroupEnum.Saml,
+        clientFetch.UiNodeGroupEnum.Default,
+        clientFetch.UiNodeGroupEnum.IdentifierFirst,
+        clientFetch.UiNodeGroupEnum.Profile,
+        clientFetch.UiNodeGroupEnum.Captcha
+      ].includes(group)
+    ).map((g) => [g, {}])
+  );
+}
+function OryTwoStepCardStateSelectMethod() {
+  var _a, _b, _c, _d;
+  const { Form, Card, Message } = useComponents();
+  const { flow, flowType, dispatchFormState } = useOryFlow();
+  const { ui } = flow;
+  const intl = reactIntl.useIntl();
+  const nodeSorter = useNodeSorter();
+  const sortNodes = (a, b) => nodeSorter(a, b, { flowType });
+  const visibleGroups = useNodeGroupsWithVisibleNodes(ui.nodes);
+  const authMethodBlocks = toAuthMethodPickerOptions(visibleGroups);
+  const authMethodAdditionalNodes = useFunctionalNodes(ui.nodes);
+  if (clientFetch.UiNodeGroupEnum.Code in authMethodBlocks) {
+    let identifier = (_b = (_a = findNode(ui.nodes, {
+      group: "identifier_first",
+      node_type: "input",
+      name: "identifier"
+    })) == null ? void 0 : _a.attributes) == null ? void 0 : _b.value;
+    identifier || (identifier = (_d = (_c = findNode(ui.nodes, {
+      group: "code",
+      node_type: "input",
+      name: "address"
+    })) == null ? void 0 : _c.attributes) == null ? void 0 : _d.value);
+    if (identifier) {
+      authMethodBlocks[clientFetch.UiNodeGroupEnum.Code] = {
+        title: {
+          id: "identities.messages.1010023",
+          values: { address: identifier }
+        }
+      };
     }
+  }
+  const noMethods = {
+    id: 5000002,
+    text: intl.formatMessage({
+      id: `identities.messages.5000002`,
+      defaultMessage: "No authentication methods are available for this request. Please contact the site or app owner."
+    }),
+    type: "error"
   };
-  const hasOidc = ui.nodes.some((node) => node.group === clientFetch.UiNodeGroupEnum.Oidc);
-  const showOidc = !(formState.current === "method_active" && formState.method !== "oidc");
   return /* @__PURE__ */ jsxRuntime.jsxs(OryCard, { children: [
     /* @__PURE__ */ jsxRuntime.jsx(OryCardHeader, {}),
     /* @__PURE__ */ jsxRuntime.jsxs(OryCardContent, { children: [
       /* @__PURE__ */ jsxRuntime.jsx(OryCardValidationMessages, {}),
-      showOidc && /* @__PURE__ */ jsxRuntime.jsx(OryFormSocialButtonsForm, {}),
-      /* @__PURE__ */ jsxRuntime.jsxs(OryForm, { onAfterSubmit: handleAfterFormSubmit, children: [
-        /* @__PURE__ */ jsxRuntime.jsxs(Form.Group, { children: [
-          formState.current === "provide_identifier" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
-            hasOidc && /* @__PURE__ */ jsxRuntime.jsx(Card.Divider, {}),
-            nonOidcNodes.sort(sortNodes).map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k))
-          ] }),
-          formState.current === "select_method" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+      /* @__PURE__ */ jsxRuntime.jsx(OryFormSocialButtonsForm, {}),
+      Object.entries(authMethodBlocks).length > 0 ? /* @__PURE__ */ jsxRuntime.jsx(
+        OryForm,
+        {
+          "data-testid": `ory/form/methods/local`,
+          onAfterSubmit: handleAfterFormSubmit(dispatchFormState),
+          children: /* @__PURE__ */ jsxRuntime.jsxs(Form.Group, { children: [
             /* @__PURE__ */ jsxRuntime.jsx(Card.Divider, {}),
             /* @__PURE__ */ jsxRuntime.jsx(
               AuthMethodList,
               {
-                options,
+                options: authMethodBlocks,
                 setSelectedGroup: (group) => dispatchFormState({
                   type: "action_select_method",
                   method: group
                 })
               }
-            )
-          ] }),
-          formState.current === "method_active" && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
-            ui.nodes.filter((n) => n.type === "script").map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k)),
-            finalNodes.sort(sortNodes).map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k))
+            ),
+            authMethodAdditionalNodes.sort(sortNodes).map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k))
           ] })
-        ] }),
-        /* @__PURE__ */ jsxRuntime.jsx(OryCardFooter, {})
-      ] })
-    ] })
+        }
+      ) : !hasSingleSignOnNodes(ui.nodes) && /* @__PURE__ */ jsxRuntime.jsx("div", { "data-testid": `ory/form/methods/local`, children: /* @__PURE__ */ jsxRuntime.jsx(Message.Root, { children: /* @__PURE__ */ jsxRuntime.jsx(Message.Content, { message: noMethods }, noMethods.id) }) })
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsx(OryCardFooter, {})
   ] });
 }
-function AuthMethodList({ options, setSelectedGroup }) {
-  const { Card } = useComponents();
-  const { setValue } = reactHookForm.useFormContext();
-  const handleClick = (group) => {
-    if (isGroupImmediateSubmit(group)) {
-      setValue("method", group);
-    } else {
-      setSelectedGroup(group);
-    }
-  };
-  return /* @__PURE__ */ jsxRuntime.jsx(Card.AuthMethodListContainer, { children: options.map((option) => /* @__PURE__ */ jsxRuntime.jsx(
-    Card.AuthMethodListItem,
-    {
-      group: option,
-      onClick: () => handleClick(option)
-    },
-    option
-  )) });
+function OryTwoStepCard() {
+  const { formState } = useOryFlow();
+  switch (formState.current) {
+    case "provide_identifier":
+      return /* @__PURE__ */ jsxRuntime.jsx(OryTwoStepCardStateProvideIdentifier, {});
+    case "select_method":
+      return /* @__PURE__ */ jsxRuntime.jsx(OryTwoStepCardStateSelectMethod, {});
+    case "method_active":
+      return /* @__PURE__ */ jsxRuntime.jsx(OryTwoStepCardStateMethodActive, { formState });
+  }
+  return /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+    "unknown form state: ",
+    formState.current
+  ] });
 }
 function OryFormGroups({ groups }) {
   const {
@@ -1116,8 +1416,8 @@ function OryFormGroups({ groups }) {
   const { flowType } = useOryFlow();
   const { Form } = useComponents();
   const nodes = ui.nodes.filter((node) => groups.indexOf(node.group) > -1).sort((a, b) => nodeSorter(a, b, { flowType }));
-  return /* @__PURE__ */ jsxRuntime.jsx(Form.Group, { children: nodes.map((node, k) => {
-    return /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k);
+  return /* @__PURE__ */ jsxRuntime.jsx(Form.Group, { children: nodes.map((node) => {
+    return /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, clientFetch.getNodeId(node));
   }) });
 }
 function OryFormSection({
@@ -1146,14 +1446,29 @@ function OryFormSectionInner({
     }
   );
 }
+function OryConsentCard() {
+  const { Form, Card } = useComponents();
+  const flow = useOryFlow();
+  return /* @__PURE__ */ jsxRuntime.jsxs(OryCard, { children: [
+    /* @__PURE__ */ jsxRuntime.jsx(OryCardHeader, {}),
+    /* @__PURE__ */ jsxRuntime.jsx(OryCardContent, { children: /* @__PURE__ */ jsxRuntime.jsxs(OryForm, { children: [
+      /* @__PURE__ */ jsxRuntime.jsx(Card.Divider, {}),
+      /* @__PURE__ */ jsxRuntime.jsx(Form.Group, { children: flow.flow.ui.nodes.map((node) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, clientFetch.getNodeId(node))) }),
+      /* @__PURE__ */ jsxRuntime.jsx(Card.Divider, {}),
+      /* @__PURE__ */ jsxRuntime.jsx(OryCardFooter, {})
+    ] }) })
+  ] });
+}
 function OryFormGroupDivider() {
   const { Card } = useComponents();
   const {
     flow: { ui }
   } = useOryFlow();
-  const filteredNodes = ui.nodes.filter((node) => node.group === "oidc");
+  const filteredNodes = ui.nodes.filter(
+    (node) => node.group === clientFetch.UiNodeGroupEnum.Oidc || node.group === clientFetch.UiNodeGroupEnum.Saml
+  );
   const otherNodes = ui.nodes.filter(
-    (node) => node.group !== "oidc" && node.group !== "default"
+    (node) => !(node.group === clientFetch.UiNodeGroupEnum.Oidc || node.group === clientFetch.UiNodeGroupEnum.Saml) && node.group !== "default"
   );
   if (filteredNodes.length > 0 && otherNodes.length > 0) {
     return /* @__PURE__ */ jsxRuntime.jsx(Card.Divider, {});
@@ -1179,7 +1494,7 @@ function OrySettingsOidc({ nodes }) {
     onClick: () => {
       if (node.attributes.node_type === "input") {
         setValue("link", node.attributes.value);
-        setValue("method", "oidc");
+        setValue("method", node.group);
       }
     }
   }));
@@ -1188,7 +1503,7 @@ function OrySettingsOidc({ nodes }) {
     onClick: () => {
       if (node.attributes.node_type === "input") {
         setValue("unlink", node.attributes.value);
-        setValue("method", "oidc");
+        setValue("method", node.group);
       }
     }
   }));
@@ -1497,16 +1812,19 @@ function SettingsSectionContent({ group, nodes }) {
   const { Card } = useComponents();
   const intl = reactIntl.useIntl();
   const { flow } = useOryFlow();
-  const uniqueGroups = useNodesGroups(flow.ui.nodes);
+  const groupedNodes = useNodesGroups(flow.ui.nodes, {
+    // Script nodes are already handled by the parent component.
+    omit: ["script"]
+  });
   if (group === clientFetch.UiNodeGroupEnum.Totp) {
     return /* @__PURE__ */ jsxRuntime.jsxs(
       OryFormSection,
       {
-        nodes: uniqueGroups.groups.totp,
+        nodes: groupedNodes.groups.totp,
         "data-testid": "ory/screen/settings/group/totp",
         children: [
-          /* @__PURE__ */ jsxRuntime.jsx(OrySettingsTotp, { nodes: (_a = uniqueGroups.groups.totp) != null ? _a : [] }),
-          (_b = uniqueGroups.groups.default) == null ? void 0 : _b.map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k))
+          /* @__PURE__ */ jsxRuntime.jsx(OrySettingsTotp, { nodes: (_a = groupedNodes.groups.totp) != null ? _a : [] }),
+          (_b = groupedNodes.groups.default) == null ? void 0 : _b.map((node) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, clientFetch.getNodeId(node)))
         ]
       }
     );
@@ -1515,16 +1833,16 @@ function SettingsSectionContent({ group, nodes }) {
     return /* @__PURE__ */ jsxRuntime.jsxs(
       OryFormSection,
       {
-        nodes: uniqueGroups.groups.lookup_secret,
+        nodes: groupedNodes.groups.lookup_secret,
         "data-testid": "ory/screen/settings/group/lookup_secret",
         children: [
           /* @__PURE__ */ jsxRuntime.jsx(
             OrySettingsRecoveryCodes,
             {
-              nodes: (_c = uniqueGroups.groups.lookup_secret) != null ? _c : []
+              nodes: (_c = groupedNodes.groups.lookup_secret) != null ? _c : []
             }
           ),
-          (_d = uniqueGroups.groups.default) == null ? void 0 : _d.map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k))
+          (_d = groupedNodes.groups.default) == null ? void 0 : _d.map((node) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, clientFetch.getNodeId(node)))
         ]
       }
     );
@@ -1533,11 +1851,11 @@ function SettingsSectionContent({ group, nodes }) {
     return /* @__PURE__ */ jsxRuntime.jsxs(
       OryFormSection,
       {
-        nodes: uniqueGroups.groups.oidc,
+        nodes: groupedNodes.groups.oidc,
         "data-testid": "ory/screen/settings/group/oidc",
         children: [
-          /* @__PURE__ */ jsxRuntime.jsx(OrySettingsOidc, { nodes: (_e = uniqueGroups.groups.oidc) != null ? _e : [] }),
-          (_f = uniqueGroups.groups.default) == null ? void 0 : _f.map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k))
+          /* @__PURE__ */ jsxRuntime.jsx(OrySettingsOidc, { nodes: (_e = groupedNodes.groups.oidc) != null ? _e : [] }),
+          (_f = groupedNodes.groups.default) == null ? void 0 : _f.map((node) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, clientFetch.getNodeId(node)))
         ]
       }
     );
@@ -1546,11 +1864,11 @@ function SettingsSectionContent({ group, nodes }) {
     return /* @__PURE__ */ jsxRuntime.jsxs(
       OryFormSection,
       {
-        nodes: uniqueGroups.groups.webauthn,
+        nodes: groupedNodes.groups.webauthn,
         "data-testid": "ory/screen/settings/group/webauthn",
         children: [
-          /* @__PURE__ */ jsxRuntime.jsx(OrySettingsWebauthn, { nodes: (_g = uniqueGroups.groups.webauthn) != null ? _g : [] }),
-          (_h = uniqueGroups.groups.default) == null ? void 0 : _h.map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k))
+          /* @__PURE__ */ jsxRuntime.jsx(OrySettingsWebauthn, { nodes: (_g = groupedNodes.groups.webauthn) != null ? _g : [] }),
+          (_h = groupedNodes.groups.default) == null ? void 0 : _h.map((node) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, clientFetch.getNodeId(node)))
         ]
       }
     );
@@ -1559,11 +1877,11 @@ function SettingsSectionContent({ group, nodes }) {
     return /* @__PURE__ */ jsxRuntime.jsxs(
       OryFormSection,
       {
-        nodes: uniqueGroups.groups.passkey,
+        nodes: groupedNodes.groups.passkey,
         "data-testid": "ory/screen/settings/group/passkey",
         children: [
-          /* @__PURE__ */ jsxRuntime.jsx(OrySettingsPasskey, { nodes: (_i = uniqueGroups.groups.passkey) != null ? _i : [] }),
-          (_j = uniqueGroups.groups.default) == null ? void 0 : _j.map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k))
+          /* @__PURE__ */ jsxRuntime.jsx(OrySettingsPasskey, { nodes: (_i = groupedNodes.groups.passkey) != null ? _i : [] }),
+          (_j = groupedNodes.groups.default) == null ? void 0 : _j.map((node) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, clientFetch.getNodeId(node)))
         ]
       }
     );
@@ -1584,30 +1902,30 @@ function SettingsSectionContent({ group, nodes }) {
               id: `settings.${group}.description`
             }),
             children: [
-              (_k = uniqueGroups.groups.default) == null ? void 0 : _k.map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k)),
+              (_k = groupedNodes.groups.default) == null ? void 0 : _k.map((node) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, clientFetch.getNodeId(node))),
               nodes.filter(
                 (node) => "type" in node.attributes && node.attributes.type !== "submit"
-              ).map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k))
+              ).map((node) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, clientFetch.getNodeId(node)))
             ]
           }
         ),
         /* @__PURE__ */ jsxRuntime.jsx(Card.SettingsSectionFooter, { children: nodes.filter(
           (node) => "type" in node.attributes && node.attributes.type === "submit"
-        ).map((node, k) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, k)) })
+        ).map((node) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node }, clientFetch.getNodeId(node))) })
       ]
     }
   );
 }
-var getScriptNode = (nodes) => nodes.find(
-  (node) => "id" in node.attributes && node.attributes.id === "webauthn_script"
+var onlyScriptNodes = (nodes) => nodes.filter(
+  (node) => clientFetch.isUiNodeScriptAttributes(node.attributes) && node.attributes.id === "webauthn_script"
 );
 function OrySettingsCard() {
   const { flow } = useOryFlow();
-  const uniqueGroups = useNodesGroups(flow.ui.nodes);
-  const scriptNode = getScriptNode(flow.ui.nodes);
+  const uniqueGroups = useNodesGroups(flow.ui.nodes, { omit: ["script"] });
+  const scriptNodes = onlyScriptNodes(flow.ui.nodes);
   return /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
     /* @__PURE__ */ jsxRuntime.jsx(OryCardValidationMessages, {}),
-    scriptNode && /* @__PURE__ */ jsxRuntime.jsx(Node, { node: scriptNode }),
+    scriptNodes.map((n) => /* @__PURE__ */ jsxRuntime.jsx(Node, { node: n }, clientFetch.getNodeId(n))),
     uniqueGroups.entries.map(([group, nodes]) => {
       if (group === clientFetch.UiNodeGroupEnum.Default) {
         return null;
@@ -1703,9 +2021,9 @@ var en_default = {
   "identities.messages.1010005": "Verify",
   "identities.messages.1010006": "Authentication code",
   "identities.messages.1010007": "Backup recovery code",
-  "identities.messages.1010008": "Sign in with hardware key",
-  "identities.messages.1010009": "Use Authenticator",
-  "identities.messages.1010010": "Use backup recovery code",
+  "identities.messages.1010008": "Continue with hardware key",
+  "identities.messages.1010009": "Continue",
+  "identities.messages.1010010": "Continue",
   "identities.messages.1010011": "Sign in with hardware key",
   "identities.messages.1010012": "Prepare your WebAuthn device (e.g. security key, biometrics scanner, ...) and press continue.",
   "identities.messages.1010013": "Continue",
@@ -1842,9 +2160,17 @@ var en_default = {
   "login.subtitle-oauth2": "To authenticate {clientName}",
   "login.title": "Sign in",
   "login.subtitle": "Sign in with {parts}",
-  "login.title-aal2": "Two-Factor Authentication",
+  "login.title-aal2": "Second factor authentication",
+  "login.subtitle-aal2": "Choose a way to complete your second factor authentication",
+  "login.code.subtitle": "A verification code will be sent by email",
+  "login.webauthn.subtitle": "Please prepare your WebAuthN device",
+  "login.totp.subtitle": "Please enter the code generated by your Authenticator App",
+  "login.lookup_secret.subtitle": "Please enter one of your 8-digit backup recovery codes",
   "login.title-refresh": "Reauthenticate",
   "login.subtitle-refresh": "Confirm your identity with {parts}",
+  "login.2fa.go-back": "Something isn't working?",
+  "login.2fa.go-back.link": "Go back",
+  "login.2fa.method.go-back": "Choose another method",
   "logout.accept-button": "Yes",
   "logout.reject-button": "No",
   "logout.title": "Do you wish to log out?",
@@ -1893,18 +2219,24 @@ var en_default = {
   "two-step.password.description": "Enter your password associated with your account",
   "two-step.code.title": "Email code",
   "two-step.code.description": "A verification code will be sent to your email",
-  "two-step.webauthn.title": "Security Key",
+  "two-step.webauthn.title": "Security key",
   "two-step.webauthn.description": "Use your security key to authenticate",
   "two-step.passkey.title": "Passkey (recommended)",
   "two-step.passkey.description": "Use your device's for fingerprint or face recognition",
+  "two-step.totp.title": "Use your Authenticator App (TOTP)",
+  "two-step.totp.description": "Use a 6-digit one-time code from your authenticator app",
+  "two-step.lookup_secret.title": "Backup recovery code",
+  "two-step.lookup_secret.description": "Use up one of your 8-digit backup codes to authenticate",
   "identities.messages.1010020": "",
   "input.placeholder": "Enter your {placeholder}",
   "card.header.parts.oidc": "a social provider",
   "card.header.parts.password.registration": "your {identifierLabel} and a password",
   "card.header.parts.password.login": "your {identifierLabel} and password",
-  "card.header.parts.code": "a code sent to your email",
+  "card.header.parts.code": "a code sent to you",
   "card.header.parts.passkey": "a Passkey",
   "card.header.parts.webauthn": "a security key",
+  "card.header.parts.totp": "your authenticator app",
+  "card.header.parts.lookup_secret": "a backup recovery code",
   "card.header.parts.identifier-first": "your {identifierLabel}",
   "card.header.description.login": "Sign in with {identifierLabel}",
   "card.header.description.registration": "Sign up with {identifierLabel}",
@@ -1930,7 +2262,27 @@ var en_default = {
   "property.phone": "phone",
   "property.username": "username",
   "property.identifier": "identifier",
-  "property.code": "code"
+  "property.code": "code",
+  "consent.title": "Authorize {party}",
+  "consent.subtitle": "A third party application wants to access information associated with your account {identifier}.",
+  "consent.scope.openid.title": "Identity",
+  "consent.scope.openid.description": "Allows the application to verify your identity. This is required for authentication and a trusted login experience.",
+  "consent.scope.offline_access.title": "Offline Access",
+  "consent.scope.offline_access.description": "Allows this application to keep you signed in even when you're not actively using it.",
+  "consent.scope.profile.title": "Profile Information",
+  "consent.scope.profile.description": "Allows access to your basic profile details, including your username, first name, and last name.",
+  "consent.scope.email.title": "Email Address",
+  "consent.scope.email.description": "Retrieve your email address and its verification status.",
+  "consent.scope.address.title": "Physical Address",
+  "consent.scope.address.description": "Access your postal address.",
+  "consent.scope.phone.title": "Phone Number",
+  "consent.scope.phone.description": "Retrieve your phone number and its verification status.",
+  "error.title.what-happened": "What happened?",
+  "error.title.what-can-i-do": "What can I do?",
+  "error.instructions": "Please try again in a few minutes or contact the website operator.",
+  "error.footer.text": "When reporting this error, please include the following information:",
+  "error.footer.copy": "Copy",
+  "error.action.go-back": "Go back"
 };
 
 // src/locales/de.json
@@ -1956,9 +2308,9 @@ var de_default = {
   "identities.messages.1010005": "Verifizieren",
   "identities.messages.1010006": "Authentifizierungscode",
   "identities.messages.1010007": "Backup-Wiederherstellungscode",
-  "identities.messages.1010008": "Sicherheitsschl\xFCssel verwenden",
-  "identities.messages.1010009": "Authentifizierungs-App verwenden",
-  "identities.messages.1010010": "Backup-Wiederherstellungscode verwenden",
+  "identities.messages.1010008": "Mit Sicherheitsschl\xFCssel fortfahren",
+  "identities.messages.1010009": "Weiter",
+  "identities.messages.1010010": "Weiter",
   "identities.messages.1010011": "Mit Sicherheitsschl\xFCssel fortfahren",
   "identities.messages.1010012": "Bereiten Sie Ihr WebAuthn-Ger\xE4t vor (z. B. Sicherheitsschl\xFCssel, biometrischer Scanner, ...) und dr\xFCcken Sie auf Weiter.",
   "identities.messages.1010013": "Weiter",
@@ -2074,8 +2426,16 @@ var de_default = {
   "login.registration-label": "Sie haben noch kein Konto?",
   "login.subtitle-oauth2": "Zur Authentifizierung bei {clientName}",
   "login.title": "Anmelden",
-  "login.title-aal2": "Zwei-Faktor-Authentifizierung",
+  "login.title-aal2": "Zweitfaktor-Authentifizierung",
+  "login.subtitle-aal2": "W\xE4hlen Sie eine Methode zur Best\xE4tigung Ihrer Zwei-Faktor-Authentifizierung",
+  "login.code.subtitle": "Ein Best\xE4tigungscode wird per E-Mail gesendet",
+  "login.webauthn.subtitle": "Bitte bereiten Sie Ihr WebAuthN-Ger\xE4t vor",
+  "login.totp.subtitle": "Bitte geben Sie den Code aus Ihrer Authenticator-App ein",
+  "login.lookup_secret.subtitle": "Bitte geben Sie einen Ihrer 8-stelligen Backup-Wiederherstellungscodes ein",
   "login.title-refresh": "Best\xE4tigen Sie, dass Sie es sind",
+  "login.2fa.go-back": "Funktioniert etwas nicht?",
+  "login.2fa.go-back.link": "Zur\xFCck",
+  "login.2fa.method.go-back": "Eine andere Methode w\xE4hlen",
   "logout.accept-button": "Ja",
   "logout.reject-button": "Nein",
   "logout.title": "M\xF6chten Sie sich abmelden?",
@@ -2093,11 +2453,15 @@ var de_default = {
   "two-step.code.description": "Ein Best\xE4tigungscode wird an Ihre E-Mail gesendet.",
   "two-step.code.title": "E-Mail-Code",
   "two-step.passkey.description": "Verwenden Sie die Fingerabdruck- oder Gesichtserkennung Ihres Ger\xE4ts",
-  "two-step.passkey.title": "Passwort (empfohlen)",
+  "two-step.passkey.title": "Passkey (empfohlen)",
   "two-step.password.description": "Geben Sie Ihr Passwort ein, das mit Ihrem Konto verkn\xFCpft ist",
   "two-step.password.title": "Passwort",
-  "two-step.webauthn.description": "Verwenden Sie Ihren Sicherheitsschl\xFCssel zur Authentifizierung",
   "two-step.webauthn.title": "Sicherheitsschl\xFCssel",
+  "two-step.webauthn.description": "Verwenden Sie Ihren Sicherheitsschl\xFCssel zur Authentifizierung",
+  "two-step.totp.title": "Verwenden Sie Ihre Authenticator-App (TOTP)",
+  "two-step.totp.description": "Verwenden Sie einen 6-stelligen Einmal-Code aus Ihrer Authenticator-App",
+  "two-step.lookup_secret.title": "Backup-Wiederherstellungscode",
+  "two-step.lookup_secret.description": "Verwenden Sie einen Ihrer 8-stelligen Backup-Codes, um sich zu authentifizieren",
   "identities.messages.1070014": "Login- und Link-Zugangsdaten",
   "identities.messages.1070015": "Bitte schlie\xDFen Sie die Captcha-Challenge ab, um fortzufahren.",
   "identities.messages.4000038": "Die Captcha-\xDCberpr\xFCfung ist fehlgeschlagen. Bitte versuchen Sie es erneut.",
@@ -2105,28 +2469,30 @@ var de_default = {
   "login.cancel-label": "Nicht das richtige Konto?",
   "identities.messages.1010023": "Code an {address} senden",
   "identities.messages.1010016": "Sie haben versucht, sich mit \u201E{duplicateIdentifier}\u201C anzumelden, aber diese E-Mail-Adresse wird bereits von einem anderen Konto verwendet. \nMelden Sie sich mit einer der folgenden Optionen bei Ihrem Konto an, um Ihr Konto \u201E{duplicateIdentifier}\u201C bei \u201E{provider}\u201C als weitere Anmeldem\xF6glichkeit hinzuzuf\xFCgen.",
-  "identities.messages.1010017": "",
-  "identities.messages.1010018": "",
-  "identities.messages.1010019": "",
+  "identities.messages.1010017": "Anmelden und verbinden",
+  "identities.messages.1010018": "Mit {provider} best\xE4tigen",
+  "identities.messages.1010019": "Code senden um fortzufahren",
   "identities.messages.1010020": "",
-  "identities.messages.1010021": "",
-  "identities.messages.1010022": "",
-  "identities.messages.1040007": "",
-  "identities.messages.1040008": "",
-  "identities.messages.1040009": "",
+  "identities.messages.1010021": "Mit Paskey anmelden",
+  "identities.messages.1010022": "Mit Passwort anmelden",
+  "identities.messages.1040007": "Mit Passkey registrieren",
+  "identities.messages.1040008": "Zur\xFCck",
+  "identities.messages.1040009": "Bitte w\xE4hlen Sie eine Authentifizierungsmethode, um fortzufahren.",
   "identities.messages.1050019": "Passkey hinzuf\xFCgen",
-  "identities.messages.1050020": "",
-  "identities.messages.4000037": "",
-  "identities.messages.4010009": "",
-  "identities.messages.4010010": "",
+  "identities.messages.1050020": 'Passkey "{display_name}" entfernen',
+  "identities.messages.4000037": "F\xFCr die eingegebenen Daten existiert kein Account",
+  "identities.messages.4010009": "Die Authentifizierungsmethode stimmt nicht mit der vorherigen Authentifizierungsmethode \xFCberein. Bitte versuchen Sie es erneut.",
+  "identities.messages.4010010": "Die eingegebene Adresse stimmt nicht mit der Adresse \xFCberein, die Sie bei der Registrierung angegeben haben. Bitte versuchen Sie es erneut.",
   "input.placeholder": "{placeholder} eingeben",
-  "card.header.parts.code": "einem Code per E-Mail",
+  "card.header.parts.code": "ein an Sie gesendeter Code",
   "card.header.parts.identifier-first": "Ihr {identifierLabel}",
   "card.header.parts.oidc": "ein sozialer Anbieter",
   "card.header.parts.passkey": "ein Passkey",
   "card.header.parts.password.login": "Ihrer {identifierLabel} und Ihrem Passwort",
   "card.header.parts.password.registration": "Ihrer {identifierLabel} und einem Passwort",
   "card.header.parts.webauthn": "ein Sicherheitsschl\xFCssel",
+  "card.header.parts.totp": "deine Authentifikator-App",
+  "card.header.parts.lookup_secret": "ein Backup-Wiederherstellungscode",
   "recovery.subtitle": "Geben Sie die mit Ihrem Konto verkn\xFCpfte E-Mail-Adresse ein, um einen einmaligen Zugangscode zu erhalten",
   "verification.subtitle": "Geben Sie die mit Ihrem Konto verkn\xFCpfte E-Mail-Adresse ein, um es zu best\xE4tigen",
   "card.header.description.login": "Melden Sie sich mit {identifierLabel} an",
@@ -2183,7 +2549,27 @@ var de_default = {
   "property.password": "Passwort",
   "property.phone": "Telefon",
   "property.code": "Code",
-  "property.username": "Benutzername"
+  "property.username": "Benutzername",
+  "consent.title": "Autorisieren {party}",
+  "consent.subtitle": "Eine Drittanbieteranwendung m\xF6chte auf Informationen zugreifen, die mit Ihrem Konto {identifier} verkn\xFCpft sind.",
+  "consent.scope.openid.title": "Identit\xE4t",
+  "consent.scope.openid.description": "Erm\xF6glicht der Anwendung, Ihre Identit\xE4t zu \xFCberpr\xFCfen. Dies ist f\xFCr die Authentifizierung und eine vertrauensw\xFCrdige Login-Erfahrung erforderlich.",
+  "consent.scope.offline_access.title": "Offline-Zugriff",
+  "consent.scope.offline_access.description": "Erm\xF6glicht dieser Anwendung, Sie angemeldet zu lassen, auch wenn Sie sie nicht aktiv nutzen.",
+  "consent.scope.profile.title": "Profilinformationen",
+  "consent.scope.profile.description": "Erm\xF6glicht den Zugriff auf Ihre grundlegenden Profildetails, einschlie\xDFlich Ihres Benutzernamens, Vornamens und Nachnamens.",
+  "consent.scope.email.title": "E-Mail-Adresse",
+  "consent.scope.email.description": "Erm\xF6glicht den Abruf Ihrer E-Mail-Adresse und deren \xDCberpr\xFCfungsstatus.",
+  "consent.scope.address.title": "Physische Adresse",
+  "consent.scope.address.description": "Erm\xF6glicht den Zugriff auf Ihre Postanschrift.",
+  "consent.scope.phone.title": "Telefonnummer",
+  "consent.scope.phone.description": "Erm\xF6glicht den Abruf Ihrer Telefonnummer und deren \xDCberpr\xFCfungsstatus.",
+  "error.title.what-happened": "Was ist passiert?",
+  "error.footer.copy": "Kopieren",
+  "error.footer.text": "Bitte f\xFCgen Sie bei der Meldung dieses Fehlers die folgenden Informationen hinzu:",
+  "error.instructions": "Bitte versuchen Sie es in wenigen Minuten erneut oder wenden Sie sich an den Website-Betreiber.",
+  "error.title.what-can-i-do": "Was kann ich tun?",
+  "error.action.go-back": "Zur\xFCck"
 };
 
 // src/locales/es.json
@@ -2199,7 +2585,6 @@ var es_default = {
   "error.back-button": "Regresar",
   "error.description": "Ocurri\xF3 un error con el siguiente mensaje:",
   "error.support-email-link": "Si el problema persiste, por favor contacte a <a>{contactSupportEmail}</a>",
-  "error.title": "Ocurri\xF3 un error",
   "error.title-internal-server-error": "Error Interno del Servidor",
   "error.title-not-found": "404 - P\xE1gina no encontrada",
   "identities.messages.1010001": "Iniciar sesi\xF3n",
@@ -2209,9 +2594,9 @@ var es_default = {
   "identities.messages.1010005": "Verificar",
   "identities.messages.1010006": "C\xF3digo de autenticaci\xF3n",
   "identities.messages.1010007": "C\xF3digo de recuperaci\xF3n de respaldo",
-  "identities.messages.1010008": "Usar llave de seguridad",
-  "identities.messages.1010009": "Usar Autenticador",
-  "identities.messages.1010010": "Usar c\xF3digo de recuperaci\xF3n de respaldo",
+  "identities.messages.1010008": "Continuar con la llave de hardware",
+  "identities.messages.1010009": "Continuar",
+  "identities.messages.1010010": "Continuar",
   "identities.messages.1010011": "Continuar con llave de seguridad",
   "identities.messages.1010012": "Prepare su dispositivo WebAuthn (por ejemplo, llave de seguridad, esc\xE1ner biom\xE9trico, ...) y presione continuar.",
   "identities.messages.1010013": "Continuar",
@@ -2327,8 +2712,16 @@ var es_default = {
   "login.registration-label": "\xBFNo tiene una cuenta?",
   "login.subtitle-oauth2": "Para autenticar a {clientName}",
   "login.title": "Iniciar sesi\xF3n",
-  "login.title-aal2": "Autenticaci\xF3n de Dos Factores",
+  "login.title-aal2": "Autenticaci\xF3n de dos factores",
+  "login.subtitle-aal2": "Elija una forma de completar su autenticaci\xF3n de segundo factor",
+  "login.code.subtitle": "Se enviar\xE1 un c\xF3digo de verificaci\xF3n por correo electr\xF3nico",
+  "login.webauthn.subtitle": "Por favor, prepare su dispositivo WebAuthN",
+  "login.totp.subtitle": "Ingrese el c\xF3digo generado por su aplicaci\xF3n de autenticaci\xF3n",
+  "login.lookup_secret.subtitle": "Ingrese uno de sus c\xF3digos de recuperaci\xF3n de respaldo de 8 d\xEDgitos",
   "login.title-refresh": "Confirme que es usted",
+  "login.2fa.go-back": "\xBFAlgo no funciona?",
+  "login.2fa.go-back.link": "Volver",
+  "login.2fa.method.go-back": "Elegir otro m\xE9todo",
   "logout.accept-button": "S\xED",
   "logout.reject-button": "No",
   "logout.title": "\xBFDesea cerrar sesi\xF3n?",
@@ -2360,47 +2753,12 @@ var es_default = {
   "two-step.passkey.title": "Clave de acceso (recomendada)",
   "two-step.password.description": "Ingrese la contrase\xF1a asociada con su cuenta",
   "two-step.password.title": "Contrase\xF1a",
-  "two-step.webauthn.description": "Utiliza tu llave de seguridad para autenticarte",
   "two-step.webauthn.title": "Clave de Seguridad",
-  "identities.messages.1010016": "",
-  "identities.messages.1010017": "",
-  "identities.messages.1010018": "",
-  "identities.messages.1010019": "",
-  "identities.messages.1010020": "",
-  "identities.messages.1010021": "",
-  "identities.messages.1010022": "",
-  "identities.messages.1010023": "",
-  "identities.messages.1040007": "",
-  "identities.messages.1040008": "",
-  "identities.messages.1040009": "",
-  "identities.messages.1050019": "",
-  "identities.messages.1050020": "",
-  "identities.messages.1070014": "",
-  "identities.messages.1070015": "",
-  "identities.messages.4000037": "",
-  "identities.messages.4000038": "",
-  "identities.messages.4010009": "",
-  "identities.messages.4010010": "",
-  "login.cancel-button": "",
-  "login.cancel-label": "",
-  "input.placeholder": "",
-  "card.header.description.login": "",
-  "card.header.description.registration": "",
-  "card.header.parts.code": "",
-  "card.header.parts.identifier-first": "",
-  "card.header.parts.oidc": "",
-  "card.header.parts.passkey": "",
-  "card.header.parts.password.login": "",
-  "card.header.parts.password.registration": "",
-  "card.header.parts.webauthn": "",
-  "forms.label.forgot-password": "",
-  "login.subtitle": "",
-  "login.subtitle-refresh": "",
-  "misc.or": "",
-  "recovery.subtitle": "",
-  "registration.subtitle": "",
-  "settings.subtitle": "",
-  "verification.subtitle": "",
+  "two-step.webauthn.description": "Utilice su llave de seguridad para autenticase",
+  "two-step.totp.title": "Utilice su aplicaci\xF3n de autenticaci\xF3n (TOTP)",
+  "two-step.totp.description": "Utilice un c\xF3digo de un solo uso de 6 d\xEDgitos de su aplicaci\xF3n de autenticaci\xF3n",
+  "two-step.lookup_secret.title": "C\xF3digo de recuperaci\xF3n de respaldo",
+  "two-step.lookup_secret.description": "Utilice uno de sus c\xF3digos de respaldo de 8 d\xEDgitos para autenticarse",
   "settings.totp.info.linked": "Actualmente tienes una aplicaci\xF3n de autenticaci\xF3n conectada.",
   "settings.totp.info.not-linked": "Para habilitar, escanea el c\xF3digo QR con tu autenticador e ingresa el c\xF3digo.",
   "settings.totp.title": "Aplicaci\xF3n Autenticadora",
@@ -2418,25 +2776,87 @@ var es_default = {
   "settings.profile.title": "Configuraci\xF3n de Perfil",
   "settings.webauthn.description": "Administra la configuraci\xF3n de tu token de hardware",
   "settings.webauthn.title": "Gestionar Tokens de Hardware",
-  "settings.oidc.info": "",
-  "settings.passkey.info": "",
-  "settings.title-lookup-secret": "",
-  "settings.title-navigation": "",
-  "settings.title-oidc": "",
-  "settings.title-passkey": "",
-  "settings.title-password": "",
-  "settings.title-profile": "",
-  "settings.title-totp": "",
-  "settings.title-webauthn": "",
-  "settings.webauthn.info": "",
-  "card.footer.select-another-method": "",
-  "account-linking.title": "",
-  "property.code": "",
-  "property.email": "",
-  "property.identifier": "",
-  "property.password": "",
-  "property.phone": "",
-  "property.username": ""
+  "consent.title": "Autorizar {party}",
+  "consent.subtitle": "Una aplicaci\xF3n de terceros quiere acceder a la informaci\xF3n asociada a su cuenta {identifier}.",
+  "consent.scope.openid.title": "Identidad",
+  "consent.scope.openid.description": "Permite que la aplicaci\xF3n verifique su identidad. Esto es necesario para la autenticaci\xF3n y una experiencia de inicio de sesi\xF3n confiable.",
+  "consent.scope.offline_access.title": "Acceso sin conexi\xF3n",
+  "consent.scope.offline_access.description": "Permite que esta aplicaci\xF3n le mantenga conectado incluso cuando no la est\xE9 utilizando activamente.",
+  "consent.scope.profile.title": "Informaci\xF3n del perfil",
+  "consent.scope.profile.description": "Permite el acceso a los detalles b\xE1sicos de su perfil, incluyendo su nombre de usuario, nombre y apellido.",
+  "consent.scope.email.title": "Direcci\xF3n de correo electr\xF3nico",
+  "consent.scope.email.description": "Recupere su direcci\xF3n de correo electr\xF3nico y su estado de verificaci\xF3n.",
+  "consent.scope.address.title": "Direcci\xF3n f\xEDsica",
+  "consent.scope.address.description": "Acceda a su direcci\xF3n postal.",
+  "consent.scope.phone.title": "N\xFAmero de tel\xE9fono",
+  "consent.scope.phone.description": "Recupere su n\xFAmero de tel\xE9fono y su estado de verificaci\xF3n.",
+  "error.title": "Ocurri\xF3 un error",
+  "identities.messages.1010016": 'Intentaste iniciar sesi\xF3n con "{duplicateIdentifier}", pero ese correo electr\xF3nico ya est\xE1 en uso por otra cuenta. Inicia sesi\xF3n en tu cuenta con una de las opciones a continuaci\xF3n para agregar tu cuenta "{duplicateIdentifier}" en "{provider}" como otra forma de iniciar sesi\xF3n.',
+  "identities.messages.1010017": "Iniciar sesi\xF3n y vincular",
+  "identities.messages.1010018": "Confirmar con {provider}",
+  "identities.messages.1010019": "Solicitar c\xF3digo para continuar",
+  "identities.messages.1010021": "Iniciar sesi\xF3n con clave de acceso",
+  "identities.messages.1010022": "Iniciar sesi\xF3n con contrase\xF1a",
+  "identities.messages.1010023": "Enviar c\xF3digo a {address}",
+  "identities.messages.1040007": "Registrarse con clave de acceso",
+  "identities.messages.1040008": "Atr\xE1s",
+  "identities.messages.1040009": "Por favor, elige una credencial para autenticarte.",
+  "identities.messages.1050019": "Agregar clave de acceso",
+  "identities.messages.1070014": "Iniciar sesi\xF3n y vincular credencial",
+  "identities.messages.1070015": "Por favor, completa el desaf\xEDo captcha para continuar.",
+  "identities.messages.4000037": "Esta cuenta no existe o no tiene ning\xFAn m\xE9todo de inicio de sesi\xF3n configurado.",
+  "identities.messages.4000038": "Fall\xF3 la verificaci\xF3n de Captcha, por favor intenta de nuevo.",
+  "identities.messages.4010009": "Las credenciales vinculadas no coinciden.",
+  "identities.messages.4010010": "La direcci\xF3n que ingresaste no coincide con ninguna direcci\xF3n conocida en la cuenta actual.",
+  "login.cancel-button": "Cancelar",
+  "login.cancel-label": "\xBFNo es la cuenta correcta?",
+  "login.subtitle": "Iniciar sesi\xF3n con {parts}",
+  "login.subtitle-refresh": "Confirma tu identidad con {parts}",
+  "recovery.subtitle": "Ingresa la direcci\xF3n de correo electr\xF3nico asociada con tu cuenta para recibir un c\xF3digo de acceso \xFAnico",
+  "registration.subtitle": "Registrarse con {parts}",
+  "settings.subtitle": "Actualiza la configuraci\xF3n de tu cuenta",
+  "settings.title-lookup-secret": "Administrar c\xF3digos de recuperaci\xF3n de respaldo 2FA",
+  "settings.title-navigation": "Configuraci\xF3n de la cuenta",
+  "settings.title-oidc": "Inicio de sesi\xF3n social",
+  "settings.title-password": "Cambiar contrase\xF1a",
+  "settings.title-profile": "Configuraci\xF3n del perfil",
+  "settings.title-totp": "Administrar la aplicaci\xF3n de autenticaci\xF3n 2FA TOTP",
+  "settings.title-webauthn": "Administrar tokens de hardware",
+  "settings.title-passkey": "Administrar claves de acceso",
+  "verification.subtitle": "Ingresa la direcci\xF3n de correo electr\xF3nico asociada con tu cuenta para verificarla",
+  "input.placeholder": "Ingresa tu {placeholder}",
+  "card.header.parts.oidc": "un proveedor social",
+  "card.header.parts.password.registration": "tu {identifierLabel} y una contrase\xF1a",
+  "card.header.parts.password.login": "tu {identifierLabel} y contrase\xF1a",
+  "card.header.parts.code": "un c\xF3digo enviado a tu correo electr\xF3nico",
+  "card.header.parts.passkey": "una clave de acceso",
+  "card.header.parts.webauthn": "una clave de seguridad",
+  "card.header.parts.totp": "su aplicaci\xF3n de autenticaci\xF3n",
+  "card.header.parts.lookup_secret": "un c\xF3digo de recuperaci\xF3n de copia de seguridad",
+  "card.header.parts.identifier-first": "tu {identifierLabel}",
+  "card.header.description.login": "Iniciar sesi\xF3n con {identifierLabel}",
+  "card.header.description.registration": "Registrarse con {identifierLabel}",
+  "misc.or": "o",
+  "forms.label.forgot-password": "\xBFOlvidaste tu contrase\xF1a?",
+  "settings.oidc.info": "Las cuentas conectadas de estos proveedores se pueden utilizar para iniciar sesi\xF3n en tu cuenta",
+  "settings.webauthn.info": "Los tokens de hardware se utilizan para la autenticaci\xF3n de segundo factor o como primer factor con las claves de acceso",
+  "settings.passkey.info": "Administra la configuraci\xF3n de tus claves de acceso",
+  "card.footer.select-another-method": "Seleccionar otro m\xE9todo",
+  "account-linking.title": "Vincular cuenta",
+  "property.password": "contrase\xF1a",
+  "property.email": "correo electr\xF3nico",
+  "property.phone": "tel\xE9fono",
+  "property.username": "nombre de usuario",
+  "property.identifier": "identificador",
+  "property.code": "c\xF3digo",
+  "error.title.what-happened": "\xBFQu\xE9 pas\xF3?",
+  "error.title.what-can-i-do": "\xBFQu\xE9 puedo hacer?",
+  "error.instructions": "Por favor, int\xE9ntalo de nuevo en unos minutos o contacta al operador del sitio web.",
+  "error.footer.text": "Al informar este error, incluye la siguiente informaci\xF3n:",
+  "error.footer.copy": "Copiar",
+  "error.action.go-back": "Regresar",
+  "identities.messages.1010020": "",
+  "identities.messages.1050020": 'Eliminar passkey "{display_name}"'
 };
 
 // src/locales/fr.json
@@ -2462,9 +2882,9 @@ var fr_default = {
   "identities.messages.1010005": "V\xE9rifier",
   "identities.messages.1010006": "Code d'authentification",
   "identities.messages.1010007": "Code de r\xE9cup\xE9ration de secours",
-  "identities.messages.1010008": "Utiliser une cl\xE9 de s\xE9curit\xE9",
-  "identities.messages.1010009": "Utiliser un authentificateur",
-  "identities.messages.1010010": "Utiliser un code de r\xE9cup\xE9ration de secours",
+  "identities.messages.1010008": "Continuer avec la cl\xE9 mat\xE9rielle",
+  "identities.messages.1010009": "Continuer",
+  "identities.messages.1010010": "Continuer",
   "identities.messages.1010011": "Continuer avec la cl\xE9 de s\xE9curit\xE9",
   "identities.messages.1010012": "Pr\xE9parez votre appareil WebAuthn (par exemple, une cl\xE9 de s\xE9curit\xE9, un scanner biom\xE9trique, ...) et appuyez sur Continuer.",
   "identities.messages.1010013": "Continuer",
@@ -2581,7 +3001,15 @@ var fr_default = {
   "login.subtitle-oauth2": "Pour vous authentifier sur {clientName}",
   "login.title": "Se connecter",
   "login.title-aal2": "Authentification \xE0 deux facteurs",
+  "login.subtitle-aal2": "Choisissez une m\xE9thode pour compl\xE9ter votre authentification \xE0 deux facteurs",
+  "login.code.subtitle": "Un code de v\xE9rification sera envoy\xE9 par e-mail",
+  "login.webauthn.subtitle": "Veuillez pr\xE9parer votre dispositif WebAuthN",
+  "login.totp.subtitle": "Veuillez saisir le code g\xE9n\xE9r\xE9 par votre application d'authentification",
+  "login.lookup_secret.subtitle": "Veuillez saisir l'un de vos codes de r\xE9cup\xE9ration de secours \xE0 8 chiffres",
   "login.title-refresh": "Confirmez que c'est bien vous",
+  "login.2fa.go-back": "Quelque chose ne fonctionne pas ?",
+  "login.2fa.go-back.link": "Retour",
+  "login.2fa.method.go-back": "Choisir une autre m\xE9thode",
   "logout.accept-button": "Oui",
   "logout.reject-button": "Non",
   "logout.title": "Souhaitez-vous vous d\xE9connecter ?",
@@ -2613,83 +3041,109 @@ var fr_default = {
   "two-step.passkey.title": "Cl\xE9 de passe (recommand\xE9e)",
   "two-step.password.description": "Entrez votre mot de passe associ\xE9 \xE0 votre compte",
   "two-step.password.title": "Mot de passe",
-  "two-step.webauthn.description": "Utilisez votre cl\xE9 de s\xE9curit\xE9 pour vous authentifier",
   "two-step.webauthn.title": "Cl\xE9 de S\xE9curit\xE9",
-  "identities.messages.1010023": "",
-  "identities.messages.1070015": "",
-  "identities.messages.4000038": "",
-  "login.cancel-button": "",
-  "login.cancel-label": "",
-  "identities.messages.1010016": "",
-  "identities.messages.1010017": "",
-  "identities.messages.1010018": "",
-  "identities.messages.1010019": "",
-  "identities.messages.1010020": "",
-  "identities.messages.1010021": "",
-  "identities.messages.1010022": "",
-  "identities.messages.1040007": "",
-  "identities.messages.1040008": "",
-  "identities.messages.1040009": "",
-  "identities.messages.1050019": "",
-  "identities.messages.1050020": "",
-  "identities.messages.1070014": "",
-  "identities.messages.4000037": "",
-  "identities.messages.4010009": "",
-  "identities.messages.4010010": "",
-  "input.placeholder": "",
-  "card.header.description.login": "",
-  "card.header.description.registration": "",
-  "card.header.parts.code": "",
-  "card.header.parts.identifier-first": "",
-  "card.header.parts.oidc": "",
-  "card.header.parts.passkey": "",
-  "card.header.parts.password.login": "",
-  "card.header.parts.password.registration": "",
-  "card.header.parts.webauthn": "",
-  "forms.label.forgot-password": "",
-  "login.subtitle": "",
-  "login.subtitle-refresh": "",
-  "misc.or": "",
-  "recovery.subtitle": "",
-  "registration.subtitle": "",
-  "settings.subtitle": "",
-  "verification.subtitle": "",
+  "two-step.webauthn.description": "Utilisez votre cl\xE9 de s\xE9curit\xE9 pour vous authentifier",
+  "two-step.totp.title": "Utilisez votre application d'authentification (TOTP)",
+  "two-step.totp.description": "Utilisez un code \xE0 usage unique \xE0 6 chiffres provenant de votre application d'authentification",
+  "two-step.lookup_secret.title": "Code de r\xE9cup\xE9ration de secours",
+  "two-step.lookup_secret.description": "Utilisez l'un de vos codes de secours \xE0 8 chiffres pour vous authentifier",
   "settings.totp.info.linked": "Vous avez actuellement une application d'authentification connect\xE9e.",
   "settings.totp.info.not-linked": "Pour activer, scannez le QR code avec votre authentificateur et entrez le code.",
   "settings.totp.title": "Application d'authentification",
   "settings.totp.description": "Ajoutez une application d'authentification TOTP \xE0 votre compte pour am\xE9liorer la s\xE9curit\xE9 de votre compte. Les applications d'authentification populaires sont LastPass et Google Authenticator.",
-  "settings.lookup_secret.description": "",
-  "settings.lookup_secret.title": "",
-  "settings.navigation.title": "",
-  "settings.oidc.description": "",
-  "settings.oidc.info": "",
-  "settings.oidc.title": "",
-  "settings.passkey.description": "",
-  "settings.passkey.info": "",
-  "settings.passkey.title": "",
-  "settings.password.description": "",
-  "settings.password.title": "",
-  "settings.profile.description": "",
-  "settings.profile.title": "",
-  "settings.title-lookup-secret": "",
-  "settings.title-navigation": "",
-  "settings.title-oidc": "",
-  "settings.title-passkey": "",
-  "settings.title-password": "",
-  "settings.title-profile": "",
-  "settings.title-totp": "",
-  "settings.title-webauthn": "",
-  "settings.webauthn.description": "",
-  "settings.webauthn.info": "",
-  "settings.webauthn.title": "",
-  "card.footer.select-another-method": "",
-  "account-linking.title": "",
-  "property.code": "",
-  "property.email": "",
-  "property.identifier": "",
-  "property.password": "",
-  "property.phone": "",
-  "property.username": ""
+  "consent.title": "Autoriser {party}",
+  "consent.subtitle": "Une application tierce souhaite acc\xE9der aux informations associ\xE9es \xE0 votre compte {identifier}.",
+  "consent.scope.openid.title": "Identit\xE9",
+  "consent.scope.openid.description": "Permet \xE0 l'application de v\xE9rifier votre identit\xE9. Cela est n\xE9cessaire pour l'authentification et une exp\xE9rience de connexion fiable.",
+  "consent.scope.offline_access.title": "Acc\xE8s hors ligne",
+  "consent.scope.offline_access.description": "Permet \xE0 cette application de vous maintenir connect\xE9 m\xEAme lorsque vous ne l'utilisez pas activement.",
+  "consent.scope.profile.title": "Informations de profil",
+  "consent.scope.profile.description": "Permet l'acc\xE8s aux d\xE9tails de base de votre profil, y compris votre nom d'utilisateur, pr\xE9nom et nom.",
+  "consent.scope.email.title": "Adresse e-mail",
+  "consent.scope.email.description": "R\xE9cup\xE8re votre adresse e-mail et son statut de v\xE9rification.",
+  "consent.scope.address.title": "Adresse physique",
+  "consent.scope.address.description": "Acc\xE8de \xE0 votre adresse postale.",
+  "consent.scope.phone.title": "Num\xE9ro de t\xE9l\xE9phone",
+  "consent.scope.phone.description": "R\xE9cup\xE8re votre num\xE9ro de t\xE9l\xE9phone et son statut de v\xE9rification.",
+  "identities.messages.1010016": "Vous avez essay\xE9 de vous connecter avec \xAB {duplicateIdentifier} \xBB, mais cet e-mail est d\xE9j\xE0 utilis\xE9 par un autre compte. Connectez-vous \xE0 votre compte avec l'une des options ci-dessous pour ajouter votre compte \xAB {duplicateIdentifier} \xBB sur \xAB {provider} \xBB comme autre moyen de vous connecter.",
+  "identities.messages.1010017": "Se connecter et lier",
+  "identities.messages.1010018": "Confirmer avec {provider}",
+  "identities.messages.1010019": "Demander un code pour continuer",
+  "identities.messages.1010021": "Se connecter avec une cl\xE9 d'acc\xE8s",
+  "identities.messages.1010022": "Se connecter avec un mot de passe",
+  "identities.messages.1010023": "Envoyer le code \xE0 {address}",
+  "identities.messages.1040007": "S'inscrire avec une cl\xE9 d'acc\xE8s",
+  "identities.messages.1040008": "Retour",
+  "identities.messages.1040009": "Veuillez choisir une identification pour vous authentifier.",
+  "identities.messages.1050019": "Ajouter une cl\xE9 d'acc\xE8s",
+  "identities.messages.1050020": "Supprimer la cl\xE9 d'acc\xE8s \xAB {display_name} \xBB",
+  "identities.messages.1070014": "Se connecter et lier l'identification",
+  "identities.messages.1070015": "Veuillez compl\xE9ter le d\xE9fi captcha pour continuer.",
+  "identities.messages.4000037": "Ce compte n'existe pas ou n'a aucune m\xE9thode de connexion configur\xE9e.",
+  "identities.messages.4000038": "La v\xE9rification Captcha a \xE9chou\xE9, veuillez r\xE9essayer.",
+  "identities.messages.4010009": "Les identifications li\xE9es ne correspondent pas.",
+  "identities.messages.4010010": "L'adresse que vous avez saisie ne correspond \xE0 aucune adresse connue dans le compte actuel.",
+  "login.cancel-button": "Annuler",
+  "login.cancel-label": "Ce n'est pas le bon compte\xA0?",
+  "login.subtitle": "Se connecter avec {parts}",
+  "login.subtitle-refresh": "Confirmez votre identit\xE9 avec {parts}",
+  "recovery.subtitle": "Saisissez l'adresse e-mail associ\xE9e \xE0 votre compte pour recevoir un code d'acc\xE8s unique",
+  "registration.subtitle": "S'inscrire avec {parts}",
+  "settings.subtitle": "Mettre \xE0 jour les param\xE8tres de votre compte",
+  "settings.title-lookup-secret": "G\xE9rer les codes de r\xE9cup\xE9ration de sauvegarde 2FA",
+  "settings.title-navigation": "Param\xE8tres du compte",
+  "settings.title-oidc": "Connexion via les r\xE9seaux sociaux",
+  "settings.title-password": "Changer le mot de passe",
+  "settings.title-profile": "Param\xE8tres du profil",
+  "settings.title-totp": "G\xE9rer l'application d'authentification 2FA TOTP",
+  "settings.title-webauthn": "G\xE9rer les jetons mat\xE9riels",
+  "settings.title-passkey": "G\xE9rer les cl\xE9s d'acc\xE8s",
+  "settings.navigation.title": "Param\xE8tres du compte",
+  "settings.password.title": "Changer le mot de passe",
+  "settings.password.description": "Modifier votre mot de passe",
+  "settings.profile.title": "Param\xE8tres du profil",
+  "settings.profile.description": "Mettre \xE0 jour les informations de votre profil",
+  "settings.webauthn.title": "G\xE9rer les jetons mat\xE9riels",
+  "settings.webauthn.description": "G\xE9rer les param\xE8tres de votre jeton mat\xE9riel",
+  "verification.subtitle": "Saisissez l'adresse e-mail associ\xE9e \xE0 votre compte pour la v\xE9rifier",
+  "input.placeholder": "Saisissez votre {placeholder}",
+  "card.header.parts.oidc": "un fournisseur de r\xE9seaux sociaux",
+  "card.header.parts.password.registration": "votre {identifierLabel} et un mot de passe",
+  "card.header.parts.password.login": "votre {identifierLabel} et votre mot de passe",
+  "card.header.parts.passkey": "une cl\xE9 d'acc\xE8s",
+  "card.header.parts.webauthn": "une cl\xE9 de s\xE9curit\xE9",
+  "card.header.parts.identifier-first": "votre {identifierLabel}",
+  "card.header.parts.code": "un code qui vous a \xE9t\xE9 envoy\xE9",
+  "card.header.parts.totp": "votre application d'authentification",
+  "card.header.parts.lookup_secret": "un code de r\xE9cup\xE9ration de secours",
+  "card.header.description.login": "Se connecter avec {identifierLabel}",
+  "card.header.description.registration": "S'inscrire avec {identifierLabel}",
+  "misc.or": "ou",
+  "forms.label.forgot-password": "Mot de passe oubli\xE9?",
+  "settings.lookup_secret.title": "Codes de r\xE9cup\xE9ration de sauvegarde (second facteur)",
+  "settings.lookup_secret.description": "Les codes de r\xE9cup\xE9ration sont une sauvegarde s\xE9curis\xE9e pour l'authentification \xE0 deux facteurs (2FA), vous permettant de retrouver l'acc\xE8s \xE0 votre compte si vous perdez votre appareil 2FA.",
+  "settings.oidc.title": "Comptes connect\xE9s",
+  "settings.oidc.description": "Connectez un fournisseur de connexion sociale \xE0 votre compte.",
+  "settings.oidc.info": "Les comptes connect\xE9s de ces fournisseurs peuvent \xEAtre utilis\xE9s pour vous connecter \xE0 votre compte",
+  "settings.webauthn.info": "Les jetons mat\xE9riels sont utilis\xE9s pour l'authentification \xE0 deux facteurs ou comme premier facteur avec les cl\xE9s d'acc\xE8s",
+  "settings.passkey.title": "G\xE9rer les cl\xE9s d'acc\xE8s",
+  "settings.passkey.description": "G\xE9rer les param\xE8tres de vos cl\xE9s d'acc\xE8s",
+  "settings.passkey.info": "G\xE9rer les param\xE8tres de vos cl\xE9s d'acc\xE8s",
+  "card.footer.select-another-method": "S\xE9lectionner une autre m\xE9thode",
+  "account-linking.title": "Lier le compte",
+  "property.password": "mot de passe",
+  "property.email": "e-mail",
+  "property.phone": "t\xE9l\xE9phone",
+  "property.username": "nom d'utilisateur",
+  "property.identifier": "identifiant",
+  "property.code": "code",
+  "error.title.what-happened": "Que s'est-il pass\xE9?",
+  "error.title.what-can-i-do": "Que puis-je faire?",
+  "error.instructions": "Veuillez r\xE9essayer dans quelques minutes ou contacter l'op\xE9rateur du site Web.",
+  "error.footer.text": "Lorsque vous signalez cette erreur, veuillez inclure les informations suivantes:",
+  "error.footer.copy": "Copier",
+  "error.action.go-back": "Retour",
+  "identities.messages.1010020": ""
 };
 
 // src/locales/nl.json
@@ -2715,9 +3169,9 @@ var nl_default = {
   "identities.messages.1010005": "Verifi\xEBren",
   "identities.messages.1010006": "Verificatiecode",
   "identities.messages.1010007": "Back-up herstelcode",
-  "identities.messages.1010008": "Beveiligingssleutel gebruiken",
-  "identities.messages.1010009": "Authenticator gebruiken",
-  "identities.messages.1010010": "Back-up herstelcode gebruiken",
+  "identities.messages.1010008": "Ga verder met hardware-sleutel",
+  "identities.messages.1010009": "Doorgaan",
+  "identities.messages.1010010": "Doorgaan",
   "identities.messages.1010011": "Doorgaan met beveiligingssleutel",
   "identities.messages.1010012": "Bereid uw WebAuthn-apparaat voor (bijv. beveiligingssleutel, biometrische scanner, ...) en druk op doorgaan.",
   "identities.messages.1010013": "Doorgaan",
@@ -2833,8 +3287,16 @@ var nl_default = {
   "login.registration-label": "Heb je nog geen account?",
   "login.subtitle-oauth2": "Om te authenticeren bij {clientName}",
   "login.title": "Inloggen",
-  "login.title-aal2": "Twee-Factor Authenticatie",
+  "login.title-aal2": "Tweefactorauthenticatie",
+  "login.subtitle-aal2": "Kies een manier om uw tweefactorauthenticatie te voltooien",
+  "login.code.subtitle": "Er wordt een verificatiecode per e-mail verzonden",
+  "login.webauthn.subtitle": "Bereid uw WebAuthN-apparaat voor",
+  "login.totp.subtitle": "Voer de code in die door uw Authenticator-app is gegenereerd",
+  "login.lookup_secret.subtitle": "Voer een van uw 8-cijferige back-up herstelcodes in",
   "login.title-refresh": "Bevestig dat jij het bent",
+  "login.2fa.go-back": "Werkt er iets niet?",
+  "login.2fa.go-back.link": "Ga terug",
+  "login.2fa.method.go-back": "Kies een andere methode",
   "logout.accept-button": "Ja",
   "logout.reject-button": "Nee",
   "logout.title": "Wil je uitloggen?",
@@ -2866,8 +3328,12 @@ var nl_default = {
   "two-step.passkey.title": "Toegangscode (aanbevolen)",
   "two-step.password.description": "Voer uw wachtwoord in dat is gekoppeld aan uw account",
   "two-step.password.title": "Wachtwoord",
-  "two-step.webauthn.description": "Gebruik uw beveiligingssleutel om te verifi\xEBren",
   "two-step.webauthn.title": "Beveiligingssleutel",
+  "two-step.webauthn.description": "Gebruik uw beveiligingssleutel om te verifi\xEBren",
+  "two-step.totp.title": "Gebruik uw Authenticator-app (TOTP)",
+  "two-step.totp.description": "Gebruik een 6-cijferige eenmalige code van uw authenticator-app",
+  "two-step.lookup_secret.title": "Herstelcode",
+  "two-step.lookup_secret.description": "Gebruik een van uw 8-cijferige back-upcodes om te authenticeren",
   "identities.messages.1010023": "",
   "identities.messages.1070014": "",
   "identities.messages.1070015": "",
@@ -2892,7 +3358,9 @@ var nl_default = {
   "input.placeholder": "",
   "card.header.description.login": "",
   "card.header.description.registration": "",
-  "card.header.parts.code": "",
+  "card.header.parts.code": "een code die naar je is verzonden",
+  "card.header.parts.totp": "je authenticator-app",
+  "card.header.parts.lookup_secret": "een backup herstelcode",
   "card.header.parts.identifier-first": "",
   "card.header.parts.oidc": "",
   "card.header.parts.passkey": "",
@@ -2942,7 +3410,27 @@ var nl_default = {
   "property.identifier": "",
   "property.password": "",
   "property.phone": "",
-  "property.username": ""
+  "property.username": "",
+  "consent.title": "Autoriseren {party}",
+  "consent.subtitle": "Een derde partij applicatie wil toegang tot informatie die aan uw account {identifier} is gekoppeld.",
+  "consent.scope.openid.title": "Identiteit",
+  "consent.scope.openid.description": "Stelt de applicatie in staat uw identiteit te verifi\xEBren. Dit is vereist voor authenticatie en een betrouwbare inlogervaring.",
+  "consent.scope.offline_access.title": "Offline toegang",
+  "consent.scope.offline_access.description": "Stelt deze applicatie in staat u ingelogd te houden, zelfs wanneer u deze niet actief gebruikt.",
+  "consent.scope.profile.title": "Profielinformatie",
+  "consent.scope.profile.description": "Geeft toegang tot uw basisprofielgegevens, inclusief uw gebruikersnaam, voornaam en achternaam.",
+  "consent.scope.email.title": "E-mailadres",
+  "consent.scope.email.description": "Haal uw e-mailadres en de verificatiestatus ervan op.",
+  "consent.scope.address.title": "Fysiek adres",
+  "consent.scope.address.description": "Toegang tot uw postadres.",
+  "consent.scope.phone.title": "Telefoonnummer",
+  "consent.scope.phone.description": "Haal uw telefoonnummer en de verificatiestatus ervan op.",
+  "error.action.go-back": "",
+  "error.footer.copy": "",
+  "error.footer.text": "",
+  "error.title.what-can-i-do": "",
+  "error.title.what-happened": "",
+  "error.instructions": ""
 };
 
 // src/locales/pl.json
@@ -2968,9 +3456,9 @@ var pl_default = {
   "identities.messages.1010005": "Zweryifkuj",
   "identities.messages.1010006": "Kod autentykacyjny",
   "identities.messages.1010007": "Zapasowe kody odzyskiwania",
-  "identities.messages.1010008": "U\u017Cyj klucza bezpiecze\u0144stwa",
-  "identities.messages.1010009": "U\u017Cyj Autentykatora",
-  "identities.messages.1010010": "U\u017Cyj zapasowych kod\xF3w odzyskiwania",
+  "identities.messages.1010008": "Kontynuuj z kluczem sprz\u0119towym",
+  "identities.messages.1010009": "Kontynuuj",
+  "identities.messages.1010010": "Kontynuuj",
   "identities.messages.1010011": "Kontynuuj za pomoc\u0105 klucza bezpiecze\u0144stwa",
   "identities.messages.1010012": "Przygotuj swoje urz\u0105dzenie WebAuthn (np. klucz bezpiecze\u0144stwa, czytnik biometryczny, ...) a nast\u0119pnie kliknij kontynuuj.",
   "identities.messages.1010013": "Kontynuuj",
@@ -3086,8 +3574,16 @@ var pl_default = {
   "login.registration-label": "Nie posiadasz konta?",
   "login.subtitle-oauth2": "Do autentykacji {clientName}",
   "login.title": "Zaloguj si\u0119",
-  "login.title-aal2": "Autentykacja Dwu-Etapowa",
+  "login.title-aal2": "Uwierzytelnianie dwusk\u0142adnikowe",
+  "login.subtitle-aal2": "Wybierz spos\xF3b, aby zako\u0144czy\u0107 uwierzytelnianie dwusk\u0142adnikowe",
+  "login.code.subtitle": "Kod weryfikacyjny zostanie wys\u0142any e-mailem",
+  "login.webauthn.subtitle": "Prosz\u0119 przygotowa\u0107 urz\u0105dzenie WebAuthN",
+  "login.totp.subtitle": "Prosz\u0119 wprowadzi\u0107 kod wygenerowany przez Twoj\u0105 aplikacj\u0119 uwierzytelniaj\u0105c\u0105",
+  "login.lookup_secret.subtitle": "Prosz\u0119 wprowadzi\u0107 jeden z Twoich 8-cyfrowych kod\xF3w odzyskiwania zapasowego",
   "login.title-refresh": "Potwierd\u017A \u017Ce to Ty",
+  "login.2fa.go-back": "Co\u015B nie dzia\u0142a?",
+  "login.2fa.go-back.link": "Wr\xF3\u0107",
+  "login.2fa.method.go-back": "Wybierz inn\u0105 metod\u0119",
   "logout.accept-button": "Tak",
   "logout.reject-button": "Nie",
   "logout.title": "Czy chcesz si\u0119 wylogowa\u0107?",
@@ -3119,8 +3615,12 @@ var pl_default = {
   "two-step.passkey.title": "Klucz dost\u0119pu (zalecany)",
   "two-step.password.description": "Wprowad\u017A has\u0142o powi\u0105zane z twoim kontem",
   "two-step.password.title": "Has\u0142o",
-  "two-step.webauthn.description": "U\u017Cyj swojego klucza bezpiecze\u0144stwa do uwierzytelnienia",
   "two-step.webauthn.title": "Klucz bezpiecze\u0144stwa",
+  "two-step.webauthn.description": "U\u017Cyj swojego klucza bezpiecze\u0144stwa do uwierzytelnienia",
+  "two-step.totp.title": "U\u017Cyj swojej aplikacji uwierzytelniaj\u0105cej (TOTP)",
+  "two-step.totp.description": "U\u017Cyj 6-cyfrowego jednorazowego kodu z Twojej aplikacji uwierzytelniaj\u0105cej",
+  "two-step.lookup_secret.title": "Kod odzyskiwania zapasowego",
+  "two-step.lookup_secret.description": "U\u017Cyj jednego z Twoich 8-cyfrowych kod\xF3w zapasowych, aby si\u0119 uwierzytelni\u0107",
   "identities.messages.1010016": "",
   "identities.messages.1010017": "",
   "identities.messages.1010018": "",
@@ -3145,13 +3645,15 @@ var pl_default = {
   "input.placeholder": "",
   "card.header.description.login": "",
   "card.header.description.registration": "",
-  "card.header.parts.code": "",
   "card.header.parts.identifier-first": "",
   "card.header.parts.oidc": "",
   "card.header.parts.passkey": "",
   "card.header.parts.password.login": "",
   "card.header.parts.password.registration": "",
   "card.header.parts.webauthn": "",
+  "card.header.parts.code": "kod wys\u0142any do Ciebie",
+  "card.header.parts.totp": "Twoja aplikacja uwierzytelniaj\u0105ca",
+  "card.header.parts.lookup_secret": "kod odzyskiwania kopii zapasowej",
   "forms.label.forgot-password": "",
   "login.subtitle": "",
   "login.subtitle-refresh": "",
@@ -3195,7 +3697,27 @@ var pl_default = {
   "property.password": "",
   "property.phone": "",
   "property.username": "",
-  "property.identifier": ""
+  "property.identifier": "",
+  "consent.title": "Autoryzuj {party}",
+  "consent.subtitle": "Aplikacja trzeciej strony chce uzyska\u0107 dost\u0119p do informacji powi\u0105zanych z Twoim kontem {identifier}.",
+  "consent.scope.openid.title": "To\u017Csamo\u015B\u0107",
+  "consent.scope.openid.description": "Pozwala aplikacji zweryfikowa\u0107 Twoj\u0105 to\u017Csamo\u015B\u0107. Jest to wymagane do uwierzytelniania i zapewnienia zaufanej sesji logowania.",
+  "consent.scope.offline_access.title": "Dost\u0119p offline",
+  "consent.scope.offline_access.description": "Pozwala aplikacji utrzyma\u0107 Twoje logowanie, nawet gdy nie korzystasz z niej aktywnie.",
+  "consent.scope.profile.title": "Informacje profilowe",
+  "consent.scope.profile.description": "Pozwala na dost\u0119p do podstawowych danych profilowych, w tym nazwy u\u017Cytkownika, imienia i nazwiska.",
+  "consent.scope.email.title": "Adres e-mail",
+  "consent.scope.email.description": "Pobierz sw\xF3j adres e-mail oraz status jego weryfikacji.",
+  "consent.scope.address.title": "Adres fizyczny",
+  "consent.scope.address.description": "Dost\u0119p do Twojego adresu pocztowego.",
+  "consent.scope.phone.title": "Numer telefonu",
+  "consent.scope.phone.description": "Pobierz sw\xF3j numer telefonu oraz status jego weryfikacji.",
+  "error.action.go-back": "",
+  "error.footer.copy": "",
+  "error.footer.text": "",
+  "error.title.what-can-i-do": "",
+  "error.title.what-happened": "",
+  "error.instructions": ""
 };
 
 // src/locales/pt.json
@@ -3221,9 +3743,9 @@ var pt_default = {
   "identities.messages.1010005": "Verificar",
   "identities.messages.1010006": "C\xF3digo de Autentica\xE7\xE3o",
   "identities.messages.1010007": "C\xF3digo de Recupera\xE7\xE3o de Backup",
-  "identities.messages.1010008": "Usar chave de seguran\xE7a",
-  "identities.messages.1010009": "Usar o Autenticador",
-  "identities.messages.1010010": "Usar c\xF3digo de recupera\xE7\xE3o de backup",
+  "identities.messages.1010008": "Continuar com chave de hardware",
+  "identities.messages.1010009": "Continuar",
+  "identities.messages.1010010": "Continuar",
   "identities.messages.1010011": "Continuar com a chave de seguran\xE7a",
   "identities.messages.1010012": "Prepare o seu dispositivo WebAuthn (por exemplo, chave de seguran\xE7a, scanner biom\xE9trico, ...) e pressione continuar.",
   "identities.messages.1010013": "Continuar",
@@ -3339,8 +3861,16 @@ var pt_default = {
   "login.registration-label": "N\xE3o tem uma conta?",
   "login.subtitle-oauth2": "Para autenticar {clientName}",
   "login.title": "Entrar",
-  "login.title-aal2": "Autentica\xE7\xE3o de Dois Fatores",
+  "login.title-aal2": "Autentica\xE7\xE3o de dois fatores",
+  "login.subtitle-aal2": "Escolha uma forma de completar sua autentica\xE7\xE3o de segundo fator",
+  "login.code.subtitle": "Um c\xF3digo de verifica\xE7\xE3o ser\xE1 enviado por e-mail",
+  "login.webauthn.subtitle": "Por favor, prepare seu dispositivo WebAuthN",
+  "login.totp.subtitle": "Digite o c\xF3digo gerado pelo seu aplicativo autenticador",
+  "login.lookup_secret.subtitle": "Digite um dos seus c\xF3digos de recupera\xE7\xE3o de 8 d\xEDgitos",
   "login.title-refresh": "Confirme que \xE9 voc\xEA",
+  "login.2fa.go-back": "Algo n\xE3o est\xE1 funcionando?",
+  "login.2fa.go-back.link": "Voltar",
+  "login.2fa.method.go-back": "Escolher outro m\xE9todo",
   "logout.accept-button": "Sim",
   "logout.reject-button": "N\xE3o",
   "logout.title": "Deseja sair?",
@@ -3372,8 +3902,12 @@ var pt_default = {
   "two-step.passkey.title": "Chave de acesso (recomendado)",
   "two-step.password.description": "Insira a sua senha associada \xE0 sua conta",
   "two-step.password.title": "Senha",
-  "two-step.webauthn.description": "Use sua chave de seguran\xE7a para autenticar",
   "two-step.webauthn.title": "Chave de Seguran\xE7a",
+  "two-step.webauthn.description": "Use sua chave de seguran\xE7a para autenticar",
+  "two-step.totp.title": "Use seu aplicativo autenticador (TOTP)",
+  "two-step.totp.description": "Use um c\xF3digo \xFAnico de 6 d\xEDgitos do seu aplicativo autenticador",
+  "two-step.lookup_secret.title": "C\xF3digo de recupera\xE7\xE3o de backup",
+  "two-step.lookup_secret.description": "Use um dos seus c\xF3digos de backup de 8 d\xEDgitos para autenticar",
   "identities.messages.1010016": "",
   "identities.messages.1010017": "",
   "identities.messages.1010018": "",
@@ -3398,7 +3932,9 @@ var pt_default = {
   "input.placeholder": "",
   "card.header.description.login": "",
   "card.header.description.registration": "",
-  "card.header.parts.code": "",
+  "card.header.parts.code": "um c\xF3digo enviado para voc\xEA",
+  "card.header.parts.totp": "seu aplicativo autenticador",
+  "card.header.parts.lookup_secret": "um c\xF3digo de recupera\xE7\xE3o de backup",
   "card.header.parts.identifier-first": "",
   "card.header.parts.oidc": "",
   "card.header.parts.passkey": "",
@@ -3448,7 +3984,27 @@ var pt_default = {
   "property.identifier": "",
   "property.password": "",
   "property.phone": "",
-  "property.username": ""
+  "property.username": "",
+  "consent.title": "Autorizar {party}",
+  "consent.subtitle": "Um aplicativo de terceiros deseja acessar as informa\xE7\xF5es associadas \xE0 sua conta {identifier}.",
+  "consent.scope.openid.title": "Identidade",
+  "consent.scope.openid.description": "Permite que a aplica\xE7\xE3o verifique sua identidade. Isso \xE9 necess\xE1rio para a autentica\xE7\xE3o e uma experi\xEAncia de login confi\xE1vel.",
+  "consent.scope.offline_access.title": "Acesso Offline",
+  "consent.scope.offline_access.description": "Permite que este aplicativo mantenha voc\xEA conectado mesmo quando n\xE3o estiver usando-o ativamente.",
+  "consent.scope.profile.title": "Informa\xE7\xF5es do Perfil",
+  "consent.scope.profile.description": "Permite o acesso aos detalhes b\xE1sicos do seu perfil, incluindo seu nome de usu\xE1rio, primeiro nome e sobrenome.",
+  "consent.scope.email.title": "Endere\xE7o de E-mail",
+  "consent.scope.email.description": "Recupere seu endere\xE7o de e-mail e seu status de verifica\xE7\xE3o.",
+  "consent.scope.address.title": "Endere\xE7o F\xEDsico",
+  "consent.scope.address.description": "Acesse seu endere\xE7o postal.",
+  "consent.scope.phone.title": "N\xFAmero de Telefone",
+  "consent.scope.phone.description": "Recupere seu n\xFAmero de telefone e seu status de verifica\xE7\xE3o.",
+  "error.action.go-back": "",
+  "error.footer.copy": "",
+  "error.footer.text": "",
+  "error.title.what-can-i-do": "",
+  "error.title.what-happened": "",
+  "error.instructions": ""
 };
 
 // src/locales/sv.json
@@ -3474,9 +4030,9 @@ var sv_default = {
   "identities.messages.1010005": "Verifiera",
   "identities.messages.1010006": "Autentiseringskod",
   "identities.messages.1010007": "\xC5terst\xE4llningskod f\xF6r backup",
-  "identities.messages.1010008": "Anv\xE4nd s\xE4kerhetsnyckel",
-  "identities.messages.1010009": "Anv\xE4nd autentiserings-app",
-  "identities.messages.1010010": "Anv\xE4nd reserv\xE5terst\xE4llningskod",
+  "identities.messages.1010008": "Forts\xE4tt med s\xE4kerhetsnyckel",
+  "identities.messages.1010009": "Forts\xE4tt",
+  "identities.messages.1010010": "Forts\xE4tt",
   "identities.messages.1010011": "Forts\xE4tt med s\xE4kerhetsnyckel",
   "identities.messages.1010012": "F\xF6rbered din WebAuthn-enhet (t.ex. s\xE4kerhetsnyckel, biometriska skanner, ...) och tryck p\xE5 forts\xE4tt.",
   "identities.messages.1010013": "Forts\xE4tt",
@@ -3611,7 +4167,15 @@ var sv_default = {
   "login.subtitle-oauth2": "Att autentisera {clientName}",
   "login.title": "Logga in",
   "login.title-aal2": "Tv\xE5faktorsautentisering",
+  "login.subtitle-aal2": "V\xE4lj ett s\xE4tt att slutf\xF6ra din tv\xE5faktorsautentisering",
+  "login.code.subtitle": "En verifieringskod kommer att skickas via e-post",
+  "login.webauthn.subtitle": "F\xF6rbered din WebAuthN-enhet",
+  "login.totp.subtitle": "Ange koden som genererats av din autentiseringsapp",
+  "login.lookup_secret.subtitle": "Ange en av dina 8-siffriga \xE5terst\xE4llningskoder",
   "login.title-refresh": "Bekr\xE4fta att det \xE4r du",
+  "login.2fa.go-back": "N\xE5got fungerar inte?",
+  "login.2fa.go-back.link": "G\xE5 tillbaka",
+  "login.2fa.method.go-back": "V\xE4lj en annan metod",
   "logout.accept-button": "Ja",
   "logout.reject-button": "Nej",
   "logout.title": "Vill du logga ut?",
@@ -3643,15 +4207,21 @@ var sv_default = {
   "two-step.passkey.title": "Passerkod (rekommenderad)",
   "two-step.password.description": "Ange ditt l\xF6senord kopplat till ditt konto",
   "two-step.password.title": "L\xF6senord",
-  "two-step.webauthn.description": "Anv\xE4nd din s\xE4kerhetsnyckel f\xF6r att autentisera",
   "two-step.webauthn.title": "S\xE4kerhetsnyckel",
+  "two-step.webauthn.description": "Anv\xE4nd din s\xE4kerhetsnyckel f\xF6r att autentisera",
+  "two-step.totp.title": "Anv\xE4nd din autentiseringsapp (TOTP)",
+  "two-step.totp.description": "Anv\xE4nd en 6-siffrig eng\xE5ngskod fr\xE5n din autentiseringsapp",
+  "two-step.lookup_secret.title": "Reserv\xE5terst\xE4llningskod",
+  "two-step.lookup_secret.description": "Anv\xE4nd en av dina 8-siffriga reservkoder f\xF6r att autentisera",
   "identities.messages.4000037": "Detta konto finns inte eller har ingen inloggningsmetod konfigurerad.",
   "identities.messages.4000038": "Captcha-verifiering misslyckades, f\xF6rs\xF6k igen.",
   "identities.messages.1010020": "",
   "input.placeholder": "Ange din {placeholder}",
   "card.header.description.login": "Logga in med {identifierLabel}",
   "card.header.description.registration": "Registrera dig med {identifierLabel}",
-  "card.header.parts.code": "en kod skickad till din e-post",
+  "card.header.parts.code": "en kod skickad till dig",
+  "card.header.parts.totp": "din autentiseringsapp",
+  "card.header.parts.lookup_secret": "en s\xE4kerhetskopieringskod",
   "card.header.parts.identifier-first": "din {identifierLabel}",
   "card.header.parts.oidc": "en social leverant\xF6r",
   "card.header.parts.passkey": "en Passkey",
@@ -3701,7 +4271,27 @@ var sv_default = {
   "property.phone": "telefon",
   "property.username": "anv\xE4ndarnamn",
   "property.identifier": "identifier",
-  "property.code": "kod"
+  "property.code": "kod",
+  "consent.title": "Auktorisera {party}",
+  "consent.subtitle": "En tredjepartsapplikation vill f\xE5 tillg\xE5ng till information kopplad till ditt konto {identifier}.",
+  "consent.scope.openid.title": "Identitet",
+  "consent.scope.openid.description": "G\xF6r det m\xF6jligt f\xF6r applikationen att verifiera din identitet. Detta kr\xE4vs f\xF6r autentisering och en p\xE5litlig inloggningsupplevelse.",
+  "consent.scope.offline_access.title": "Offline-\xE5tkomst",
+  "consent.scope.offline_access.description": "G\xF6r det m\xF6jligt f\xF6r denna applikation att h\xE5lla dig inloggad \xE4ven n\xE4r du inte aktivt anv\xE4nder den.",
+  "consent.scope.profile.title": "Profilinformation",
+  "consent.scope.profile.description": "Ger tillg\xE5ng till dina grundl\xE4ggande profiluppgifter, inklusive ditt anv\xE4ndarnamn, f\xF6rnamn och efternamn.",
+  "consent.scope.email.title": "E-postadress",
+  "consent.scope.email.description": "H\xE4mta din e-postadress och dess verifieringsstatus.",
+  "consent.scope.address.title": "Fysisk adress",
+  "consent.scope.address.description": "F\xE5 \xE5tkomst till din postadress.",
+  "consent.scope.phone.title": "Telefonnummer",
+  "consent.scope.phone.description": "H\xE4mta ditt telefonnummer och dess verifieringsstatus.",
+  "error.action.go-back": "",
+  "error.footer.copy": "",
+  "error.footer.text": "",
+  "error.title.what-can-i-do": "",
+  "error.title.what-happened": "",
+  "error.instructions": ""
 };
 
 // src/locales/index.ts
@@ -3722,6 +4312,7 @@ exports.OryCardContent = OryCardContent;
 exports.OryCardFooter = OryCardFooter;
 exports.OryCardHeader = OryCardHeader;
 exports.OryCardValidationMessages = OryCardValidationMessages;
+exports.OryConsentCard = OryConsentCard;
 exports.OryForm = OryForm;
 exports.OryFormGroupDivider = OryFormGroupDivider;
 exports.OryFormGroups = OryFormGroups;