@randock/nameshift-api-client 0.0.504 → 0.0.505

package/.openapi-generator/FILES

@@ -198,10 +198,10 @@ src/models/ChallengeRewardBalanceDto.ts
 src/models/ChangeInvoiceStatusInput.ts
 src/models/ChangeOrderStatusInput.ts
 src/models/ChangeSubscriptionStatusInput.ts
-src/models/ChangeUserAuthenticationMethodInput.ts
 src/models/ChangeUserEmailWithOtpInput.ts
 src/models/ChangeUserLoginLocationVerificationInput.ts
 src/models/ChangeUserPasswordInput.ts
+src/models/ChangeUserSignInStepsInput.ts
 src/models/ChartDataPoint.ts
 src/models/CheckDomainsNsInput.ts
 src/models/CommissionAccountDto.ts
@@ -448,6 +448,7 @@ src/models/LoginDto.ts
 src/models/LoginInput.ts
 src/models/LoginPasskeyInput.ts
 src/models/LoginPasskeyOptionsInput.ts
+src/models/LoginPasswordInput.ts
 src/models/LoginRecoveryCodeInput.ts
 src/models/LoginStatus.ts
 src/models/MajesticMetrics.ts
@@ -646,7 +647,6 @@ src/models/UpdateSubscriptionInput.ts
 src/models/UpdateTaskMuteStatusForBuyerInput.ts
 src/models/UpdateTaskMuteStatusInput.ts
 src/models/UpdateUserNotificationSettingsInput.ts
-src/models/UserAuthenticationMethod.ts
 src/models/UserLoginAttemptDto.ts
 src/models/UserLoginAttemptMethod.ts
 src/models/UserLoginAttemptResult.ts
@@ -658,6 +658,7 @@ src/models/UserNotificationSettingsDto.ts
 src/models/UserPasskeyDto.ts
 src/models/UserPasswordResetDto.ts
 src/models/UserSecurityDto.ts
+src/models/UserSignInFactor.ts
 src/models/UserSignedTokenInput.ts
 src/models/ValidateTaxNumberDto.ts
 src/models/ValidateTaxNumberInput.ts

package/README.md

@@ -1,4 +1,4 @@
-## @randock/nameshift-api-client@0.0.504
+## @randock/nameshift-api-client@0.0.505
 
 This generator creates TypeScript/JavaScript client that utilizes [Fetch API](https://fetch.spec.whatwg.org/). The generated Node module can be used in the following environments:
 
@@ -36,7 +36,7 @@ navigate to the folder of your consuming project and run one of the following co
 _published:_
 
 ```
-npm install @randock/nameshift-api-client@0.0.504 --save
+npm install @randock/nameshift-api-client@0.0.505 --save
 ```
 
 _unPublished (not recommended):_
@@ -44,4 +44,4 @@ _unPublished (not recommended):_
 ```
 npm install PATH_TO_GENERATED_PACKAGE --save
 ```
-49c61ba46ba7fdf2fc00cb1f8cbdcdb4c90a1a8c41f98fb1c1faf6713cecfddeeb67d8216fcc8a6344c5e525168de762
+21090f00f434eb586609919b92f9223ba13fff5928311f2bcd77341ac2151ca4c2fd04f7a8240da4b62db5a4e9a26f53

package/dist/apis/UsersApi.d.ts

@@ -10,17 +10,13 @@
  * Do not edit the class manually.
  */
 import * as runtime from '../runtime';
-import type { ActivateUserTotpInput, ChangeUserAuthenticationMethodInput, ChangeUserEmailWithOtpInput, ChangeUserLoginLocationVerificationInput, ChangeUserPasswordInput, CurrentPasswordInput, ListUserLoginAttempts200Response, PasskeyOptionsDto, ReauthenticateWithPasskeyInput, ReauthenticationDto, RecoveryCodesDto, RegisterUserPasskeyInput, RegisterUserPushTokenInput, RemoveUserPasskeyInput, RenameUserPasskeyInput, RequestUserEmailChangeOtpInput, StoreUserLocaleInput, TotpCodeInput, TotpEnrolmentDto, UpdateUserNotificationSettingsInput, UserNotificationSettingsDto, UserSecurityDto } from '../models/index';
+import type { ActivateUserTotpInput, ChangeUserEmailWithOtpInput, ChangeUserLoginLocationVerificationInput, ChangeUserPasswordInput, ChangeUserSignInStepsInput, CurrentPasswordInput, ListUserLoginAttempts200Response, PasskeyOptionsDto, ReauthenticateWithPasskeyInput, ReauthenticationDto, RecoveryCodesDto, RegisterUserPasskeyInput, RegisterUserPushTokenInput, RemoveUserPasskeyInput, RenameUserPasskeyInput, RequestUserEmailChangeOtpInput, StoreUserLocaleInput, TotpCodeInput, TotpEnrolmentDto, UpdateUserNotificationSettingsInput, UserNotificationSettingsDto, UserSecurityDto } from '../models/index';
 export interface UsersApiActivateUserTotpRequest {
     activateUserTotpInput: ActivateUserTotpInput;
 }
 export interface UsersApiActivateUserTotpReplacementRequest {
     activateUserTotpInput: ActivateUserTotpInput;
 }
-export interface UsersApiChangeUserAuthenticationMethodRequest {
-    xReauthenticationToken: string;
-    changeUserAuthenticationMethodInput: ChangeUserAuthenticationMethodInput;
-}
 export interface UsersApiChangeUserEmailWithOtpRequest {
     changeUserEmailWithOtpInput: ChangeUserEmailWithOtpInput;
 }
@@ -31,6 +27,10 @@ export interface UsersApiChangeUserLoginLocationVerificationRequest {
 export interface UsersApiChangeUserPasswordRequest {
     changeUserPasswordInput: ChangeUserPasswordInput;
 }
+export interface UsersApiChangeUserSignInStepsRequest {
+    xReauthenticationToken: string;
+    changeUserSignInStepsInput: ChangeUserSignInStepsInput;
+}
 export interface UsersApiDisableUserRecoveryCodesRequest {
     xReauthenticationToken: string;
 }
@@ -96,7 +96,7 @@ export interface UsersApiStartUserTotpEnrolmentRequest {
     xReauthenticationToken: string;
 }
 export interface UsersApiStartUserTotpReplacementRequest {
-    xReauthenticationToken: string;
+    totpCodeInput: TotpCodeInput;
 }
 export interface UsersApiUpdateUserNotificationSettingsRequest {
     updateUserNotificationSettingsInput: UpdateUserNotificationSettingsInput;
@@ -123,16 +123,6 @@ export declare class UsersApi extends runtime.BaseAPI {
      * Move to the new authenticator app with one of its codes
      */
     activateUserTotpReplacement(requestParameters: UsersApiActivateUserTotpReplacementRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
-    /**
-     * Only to a method the factors set up allow (see allowedAuthenticationMethods). Needs the reauthentication token: a stronger method can also lock the user out of a sign-in they rely on.
-     * Change the method the user signs in with
-     */
-    changeUserAuthenticationMethodRaw(requestParameters: UsersApiChangeUserAuthenticationMethodRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<UserSecurityDto>>;
-    /**
-     * Only to a method the factors set up allow (see allowedAuthenticationMethods). Needs the reauthentication token: a stronger method can also lock the user out of a sign-in they rely on.
-     * Change the method the user signs in with
-     */
-    changeUserAuthenticationMethod(requestParameters: UsersApiChangeUserAuthenticationMethodRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<UserSecurityDto>;
     /**
      * Changes the seller user email after validating the OTP sent to the new address.  **API key scope required:** `USER_EMAIL_WRITE`. Requests authenticated with a seller session do not need any scope.
      * Change user email with OTP
@@ -163,6 +153,16 @@ export declare class UsersApi extends runtime.BaseAPI {
      * Change the password
      */
     changeUserPassword(requestParameters: UsersApiChangeUserPasswordRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    /**
+     * Only factors the user set up (see setUpSignInFactors), at least minSignInSteps steps, no authenticator app in the first step and no factor in two steps; otherwise a SIGN_IN_STEPS_* error. Needs the reauthentication token: other steps can also lock the user out of a sign-in they rely on.
+     * Change the steps the user signs in with
+     */
+    changeUserSignInStepsRaw(requestParameters: UsersApiChangeUserSignInStepsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<UserSecurityDto>>;
+    /**
+     * Only factors the user set up (see setUpSignInFactors), at least minSignInSteps steps, no authenticator app in the first step and no factor in two steps; otherwise a SIGN_IN_STEPS_* error. Needs the reauthentication token: other steps can also lock the user out of a sign-in they rely on.
+     * Change the steps the user signs in with
+     */
+    changeUserSignInSteps(requestParameters: UsersApiChangeUserSignInStepsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<UserSecurityDto>;
     /**
      * The current codes stop working.
      * Turn recovery codes off
@@ -368,12 +368,12 @@ export declare class UsersApi extends runtime.BaseAPI {
      */
     startUserTotpEnrolment(requestParameters: UsersApiStartUserTotpEnrolmentRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TotpEnrolmentDto>;
     /**
-     * Returns the QR code URI and the secret of the new app. The current app keeps working until a code of the new one is checked.
+     * Needs a code of the app being replaced; wrong codes count towards locking the verification step. Returns the QR code URI and the secret of the new app. The current app keeps working until a code of the new one is checked.
      * Start moving to another authenticator app
      */
     startUserTotpReplacementRaw(requestParameters: UsersApiStartUserTotpReplacementRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TotpEnrolmentDto>>;
     /**
-     * Returns the QR code URI and the secret of the new app. The current app keeps working until a code of the new one is checked.
+     * Needs a code of the app being replaced; wrong codes count towards locking the verification step. Returns the QR code URI and the secret of the new app. The current app keeps working until a code of the new one is checked.
      * Start moving to another authenticator app
      */
     startUserTotpReplacement(requestParameters: UsersApiStartUserTotpReplacementRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TotpEnrolmentDto>;

package/dist/apis/UsersApi.js

@@ -183,69 +183,6 @@ var UsersApi = /** @class */ (function (_super) {
             });
         });
     };
-    /**
-     * Only to a method the factors set up allow (see allowedAuthenticationMethods). Needs the reauthentication token: a stronger method can also lock the user out of a sign-in they rely on.
-     * Change the method the user signs in with
-     */
-    UsersApi.prototype.changeUserAuthenticationMethodRaw = function (requestParameters, initOverrides) {
-        return __awaiter(this, void 0, void 0, function () {
-            var queryParameters, headerParameters, token, tokenString, response;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        if (requestParameters['xReauthenticationToken'] == null) {
-                            throw new runtime.RequiredError('xReauthenticationToken', 'Required parameter "xReauthenticationToken" was null or undefined when calling changeUserAuthenticationMethod().');
-                        }
-                        if (requestParameters['changeUserAuthenticationMethodInput'] == null) {
-                            throw new runtime.RequiredError('changeUserAuthenticationMethodInput', 'Required parameter "changeUserAuthenticationMethodInput" was null or undefined when calling changeUserAuthenticationMethod().');
-                        }
-                        queryParameters = {};
-                        headerParameters = {};
-                        headerParameters['Content-Type'] = 'application/json';
-                        if (requestParameters['xReauthenticationToken'] != null) {
-                            headerParameters['x-reauthentication-token'] = String(requestParameters['xReauthenticationToken']);
-                        }
-                        if (!(this.configuration && this.configuration.accessToken)) return [3 /*break*/, 2];
-                        token = this.configuration.accessToken;
-                        return [4 /*yield*/, token("bearer", [])];
-                    case 1:
-                        tokenString = _a.sent();
-                        if (tokenString) {
-                            headerParameters["Authorization"] = "Bearer ".concat(tokenString);
-                        }
-                        _a.label = 2;
-                    case 2: return [4 /*yield*/, this.request({
-                            path: "/private/users/security/authentication-method",
-                            method: 'PATCH',
-                            headers: headerParameters,
-                            query: queryParameters,
-                            body: (0, index_1.ChangeUserAuthenticationMethodInputToJSON)(requestParameters['changeUserAuthenticationMethodInput']),
-                        }, initOverrides)];
-                    case 3:
-                        response = _a.sent();
-                        return [2 /*return*/, new runtime.JSONApiResponse(response, function (jsonValue) { return (0, index_1.UserSecurityDtoFromJSON)(jsonValue); })];
-                }
-            });
-        });
-    };
-    /**
-     * Only to a method the factors set up allow (see allowedAuthenticationMethods). Needs the reauthentication token: a stronger method can also lock the user out of a sign-in they rely on.
-     * Change the method the user signs in with
-     */
-    UsersApi.prototype.changeUserAuthenticationMethod = function (requestParameters, initOverrides) {
-        return __awaiter(this, void 0, void 0, function () {
-            var response;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.changeUserAuthenticationMethodRaw(requestParameters, initOverrides)];
-                    case 1:
-                        response = _a.sent();
-                        return [4 /*yield*/, response.value()];
-                    case 2: return [2 /*return*/, _a.sent()];
-                }
-            });
-        });
-    };
     /**
      * Changes the seller user email after validating the OTP sent to the new address.  **API key scope required:** `USER_EMAIL_WRITE`. Requests authenticated with a seller session do not need any scope.
      * Change user email with OTP
@@ -424,6 +361,69 @@ var UsersApi = /** @class */ (function (_super) {
             });
         });
     };
+    /**
+     * Only factors the user set up (see setUpSignInFactors), at least minSignInSteps steps, no authenticator app in the first step and no factor in two steps; otherwise a SIGN_IN_STEPS_* error. Needs the reauthentication token: other steps can also lock the user out of a sign-in they rely on.
+     * Change the steps the user signs in with
+     */
+    UsersApi.prototype.changeUserSignInStepsRaw = function (requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function () {
+            var queryParameters, headerParameters, token, tokenString, response;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        if (requestParameters['xReauthenticationToken'] == null) {
+                            throw new runtime.RequiredError('xReauthenticationToken', 'Required parameter "xReauthenticationToken" was null or undefined when calling changeUserSignInSteps().');
+                        }
+                        if (requestParameters['changeUserSignInStepsInput'] == null) {
+                            throw new runtime.RequiredError('changeUserSignInStepsInput', 'Required parameter "changeUserSignInStepsInput" was null or undefined when calling changeUserSignInSteps().');
+                        }
+                        queryParameters = {};
+                        headerParameters = {};
+                        headerParameters['Content-Type'] = 'application/json';
+                        if (requestParameters['xReauthenticationToken'] != null) {
+                            headerParameters['x-reauthentication-token'] = String(requestParameters['xReauthenticationToken']);
+                        }
+                        if (!(this.configuration && this.configuration.accessToken)) return [3 /*break*/, 2];
+                        token = this.configuration.accessToken;
+                        return [4 /*yield*/, token("bearer", [])];
+                    case 1:
+                        tokenString = _a.sent();
+                        if (tokenString) {
+                            headerParameters["Authorization"] = "Bearer ".concat(tokenString);
+                        }
+                        _a.label = 2;
+                    case 2: return [4 /*yield*/, this.request({
+                            path: "/private/users/security/sign-in-steps",
+                            method: 'PATCH',
+                            headers: headerParameters,
+                            query: queryParameters,
+                            body: (0, index_1.ChangeUserSignInStepsInputToJSON)(requestParameters['changeUserSignInStepsInput']),
+                        }, initOverrides)];
+                    case 3:
+                        response = _a.sent();
+                        return [2 /*return*/, new runtime.JSONApiResponse(response, function (jsonValue) { return (0, index_1.UserSecurityDtoFromJSON)(jsonValue); })];
+                }
+            });
+        });
+    };
+    /**
+     * Only factors the user set up (see setUpSignInFactors), at least minSignInSteps steps, no authenticator app in the first step and no factor in two steps; otherwise a SIGN_IN_STEPS_* error. Needs the reauthentication token: other steps can also lock the user out of a sign-in they rely on.
+     * Change the steps the user signs in with
+     */
+    UsersApi.prototype.changeUserSignInSteps = function (requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function () {
+            var response;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.changeUserSignInStepsRaw(requestParameters, initOverrides)];
+                    case 1:
+                        response = _a.sent();
+                        return [4 /*yield*/, response.value()];
+                    case 2: return [2 /*return*/, _a.sent()];
+                }
+            });
+        });
+    };
     /**
      * The current codes stop working.
      * Turn recovery codes off
@@ -1634,7 +1634,7 @@ var UsersApi = /** @class */ (function (_super) {
         });
     };
     /**
-     * Returns the QR code URI and the secret of the new app. The current app keeps working until a code of the new one is checked.
+     * Needs a code of the app being replaced; wrong codes count towards locking the verification step. Returns the QR code URI and the secret of the new app. The current app keeps working until a code of the new one is checked.
      * Start moving to another authenticator app
      */
     UsersApi.prototype.startUserTotpReplacementRaw = function (requestParameters, initOverrides) {
@@ -1643,14 +1643,12 @@ var UsersApi = /** @class */ (function (_super) {
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
-                        if (requestParameters['xReauthenticationToken'] == null) {
-                            throw new runtime.RequiredError('xReauthenticationToken', 'Required parameter "xReauthenticationToken" was null or undefined when calling startUserTotpReplacement().');
+                        if (requestParameters['totpCodeInput'] == null) {
+                            throw new runtime.RequiredError('totpCodeInput', 'Required parameter "totpCodeInput" was null or undefined when calling startUserTotpReplacement().');
                         }
                         queryParameters = {};
                         headerParameters = {};
-                        if (requestParameters['xReauthenticationToken'] != null) {
-                            headerParameters['x-reauthentication-token'] = String(requestParameters['xReauthenticationToken']);
-                        }
+                        headerParameters['Content-Type'] = 'application/json';
                         if (!(this.configuration && this.configuration.accessToken)) return [3 /*break*/, 2];
                         token = this.configuration.accessToken;
                         return [4 /*yield*/, token("bearer", [])];
@@ -1665,6 +1663,7 @@ var UsersApi = /** @class */ (function (_super) {
                             method: 'POST',
                             headers: headerParameters,
                             query: queryParameters,
+                            body: (0, index_1.TotpCodeInputToJSON)(requestParameters['totpCodeInput']),
                         }, initOverrides)];
                     case 3:
                         response = _a.sent();
@@ -1674,7 +1673,7 @@ var UsersApi = /** @class */ (function (_super) {
         });
     };
     /**
-     * Returns the QR code URI and the secret of the new app. The current app keeps working until a code of the new one is checked.
+     * Needs a code of the app being replaced; wrong codes count towards locking the verification step. Returns the QR code URI and the secret of the new app. The current app keeps working until a code of the new one is checked.
      * Start moving to another authenticator app
      */
     UsersApi.prototype.startUserTotpReplacement = function (requestParameters, initOverrides) {

package/dist/apis/UsersPublicApi.d.ts

@@ -10,7 +10,7 @@
  * Do not edit the class manually.
  */
 import * as runtime from '../runtime';
-import type { ConfirmLoginLocationInput, ForgotPasswordRequestInput, LoginChallengeInput, LoginCodeInput, LoginDto, LoginInput, LoginPasskeyInput, LoginPasskeyOptionsInput, LoginRecoveryCodeInput, NotificationsUnsubscribeResultDto, PasskeyOptionsDto, SetNewPasswordInput, UserLoginLocationConfirmationDetailsDto, UserPasswordResetDto, UserSignedTokenInput } from '../models/index';
+import type { ConfirmLoginLocationInput, ForgotPasswordRequestInput, LoginChallengeInput, LoginCodeInput, LoginDto, LoginInput, LoginPasskeyInput, LoginPasskeyOptionsInput, LoginPasswordInput, LoginRecoveryCodeInput, NotificationsUnsubscribeResultDto, PasskeyOptionsDto, SetNewPasswordInput, UserLoginLocationConfirmationDetailsDto, UserPasswordResetDto, UserSignedTokenInput } from '../models/index';
 export interface UsersPublicApiConfirmLoginLocationRequest {
     confirmationId: string;
     confirmLoginLocationInput: ConfirmLoginLocationInput;
@@ -37,6 +37,9 @@ export interface UsersPublicApiLoginRequest {
 export interface UsersPublicApiLoginWithPasskeyRequest {
     loginPasskeyInput: LoginPasskeyInput;
 }
+export interface UsersPublicApiLoginWithPasswordStepRequest {
+    loginPasswordInput: LoginPasswordInput;
+}
 export interface UsersPublicApiLoginWithRecoveryCodeRequest {
     loginCodeInput: LoginCodeInput;
 }
@@ -108,12 +111,12 @@ export declare class UsersPublicApi extends runtime.BaseAPI {
      */
     getLoginLocationConfirmationStatus(requestParameters: UsersPublicApiGetLoginLocationConfirmationStatusRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<LoginDto>;
     /**
-     * Without a challenge token, any passkey of the site on the device can answer and signs in on its own. With one, the passkey is the second factor of that sign-in.
+     * Without a challenge token, any passkey of the site on the device can answer, for users whose first sign-in step accepts a passkey. With one, the passkey proves the next step of that sign-in.
      * Start signing in with a passkey
      */
     getLoginPasskeyOptionsRaw(requestParameters: UsersPublicApiGetLoginPasskeyOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PasskeyOptionsDto>>;
     /**
-     * Without a challenge token, any passkey of the site on the device can answer and signs in on its own. With one, the passkey is the second factor of that sign-in.
+     * Without a challenge token, any passkey of the site on the device can answer, for users whose first sign-in step accepts a passkey. With one, the passkey proves the next step of that sign-in.
      * Start signing in with a passkey
      */
     getLoginPasskeyOptions(requestParameters: UsersPublicApiGetLoginPasskeyOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PasskeyOptionsDto>;
@@ -128,13 +131,23 @@ export declare class UsersPublicApi extends runtime.BaseAPI {
      */
     login(requestParameters: UsersPublicApiLoginRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<LoginDto>;
     /**
-     * Sign in with a passkey, or prove the second factor with one
+     * Sign in with a passkey, or prove a later step with one
      */
     loginWithPasskeyRaw(requestParameters: UsersPublicApiLoginWithPasskeyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<LoginDto>>;
     /**
-     * Sign in with a passkey, or prove the second factor with one
+     * Sign in with a passkey, or prove a later step with one
      */
     loginWithPasskey(requestParameters: UsersPublicApiLoginWithPasskeyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<LoginDto>;
+    /**
+     * For users who enter the password after another step, e.g. a passkey first. Wrong passwords count towards the lock of the later steps.
+     * Prove a later sign-in step with the password
+     */
+    loginWithPasswordStepRaw(requestParameters: UsersPublicApiLoginWithPasswordStepRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<LoginDto>>;
+    /**
+     * For users who enter the password after another step, e.g. a passkey first. Wrong passwords count towards the lock of the later steps.
+     * Prove a later sign-in step with the password
+     */
+    loginWithPasswordStep(requestParameters: UsersPublicApiLoginWithPasswordStepRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<LoginDto>;
     /**
      * Each recovery code works once.
      * Prove the second factor with a recovery code
@@ -146,12 +159,12 @@ export declare class UsersPublicApi extends runtime.BaseAPI {
      */
     loginWithRecoveryCode(requestParameters: UsersPublicApiLoginWithRecoveryCodeRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<LoginDto>;
     /**
-     * For users who sign in without a password: the recovery code stands in for the passkey (and the authenticator app is still asked for when the method needs it). Users who sign in with a password enter it first, then the recovery code as their verification step; here they get the same error as for a wrong code.
+     * For users whose first sign-in step is a passkey alone: the recovery code stands in for it, and the next steps are still asked for. Users who can start with the password enter it first, then the recovery code in a later step; here they get the same error as for a wrong code.
      * Sign in with a recovery code instead of a lost passkey
      */
     loginWithRecoveryCodeInsteadOfPasskeyRaw(requestParameters: UsersPublicApiLoginWithRecoveryCodeInsteadOfPasskeyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<LoginDto>>;
     /**
-     * For users who sign in without a password: the recovery code stands in for the passkey (and the authenticator app is still asked for when the method needs it). Users who sign in with a password enter it first, then the recovery code as their verification step; here they get the same error as for a wrong code.
+     * For users whose first sign-in step is a passkey alone: the recovery code stands in for it, and the next steps are still asked for. Users who can start with the password enter it first, then the recovery code in a later step; here they get the same error as for a wrong code.
      * Sign in with a recovery code instead of a lost passkey
      */
     loginWithRecoveryCodeInsteadOfPasskey(requestParameters: UsersPublicApiLoginWithRecoveryCodeInsteadOfPasskeyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<LoginDto>;

package/dist/apis/UsersPublicApi.js

@@ -316,7 +316,7 @@ var UsersPublicApi = /** @class */ (function (_super) {
         });
     };
     /**
-     * Without a challenge token, any passkey of the site on the device can answer and signs in on its own. With one, the passkey is the second factor of that sign-in.
+     * Without a challenge token, any passkey of the site on the device can answer, for users whose first sign-in step accepts a passkey. With one, the passkey proves the next step of that sign-in.
      * Start signing in with a passkey
      */
     UsersPublicApi.prototype.getLoginPasskeyOptionsRaw = function (requestParameters, initOverrides) {
@@ -346,7 +346,7 @@ var UsersPublicApi = /** @class */ (function (_super) {
         });
     };
     /**
-     * Without a challenge token, any passkey of the site on the device can answer and signs in on its own. With one, the passkey is the second factor of that sign-in.
+     * Without a challenge token, any passkey of the site on the device can answer, for users whose first sign-in step accepts a passkey. With one, the passkey proves the next step of that sign-in.
      * Start signing in with a passkey
      */
     UsersPublicApi.prototype.getLoginPasskeyOptions = function (requestParameters, initOverrides) {
@@ -412,7 +412,7 @@ var UsersPublicApi = /** @class */ (function (_super) {
         });
     };
     /**
-     * Sign in with a passkey, or prove the second factor with one
+     * Sign in with a passkey, or prove a later step with one
      */
     UsersPublicApi.prototype.loginWithPasskeyRaw = function (requestParameters, initOverrides) {
         return __awaiter(this, void 0, void 0, function () {
@@ -441,7 +441,7 @@ var UsersPublicApi = /** @class */ (function (_super) {
         });
     };
     /**
-     * Sign in with a passkey, or prove the second factor with one
+     * Sign in with a passkey, or prove a later step with one
      */
     UsersPublicApi.prototype.loginWithPasskey = function (requestParameters, initOverrides) {
         return __awaiter(this, void 0, void 0, function () {
@@ -457,6 +457,54 @@ var UsersPublicApi = /** @class */ (function (_super) {
             });
         });
     };
+    /**
+     * For users who enter the password after another step, e.g. a passkey first. Wrong passwords count towards the lock of the later steps.
+     * Prove a later sign-in step with the password
+     */
+    UsersPublicApi.prototype.loginWithPasswordStepRaw = function (requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function () {
+            var queryParameters, headerParameters, response;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        if (requestParameters['loginPasswordInput'] == null) {
+                            throw new runtime.RequiredError('loginPasswordInput', 'Required parameter "loginPasswordInput" was null or undefined when calling loginWithPasswordStep().');
+                        }
+                        queryParameters = {};
+                        headerParameters = {};
+                        headerParameters['Content-Type'] = 'application/json';
+                        return [4 /*yield*/, this.request({
+                                path: "/users/login/password",
+                                method: 'POST',
+                                headers: headerParameters,
+                                query: queryParameters,
+                                body: (0, index_1.LoginPasswordInputToJSON)(requestParameters['loginPasswordInput']),
+                            }, initOverrides)];
+                    case 1:
+                        response = _a.sent();
+                        return [2 /*return*/, new runtime.JSONApiResponse(response, function (jsonValue) { return (0, index_1.LoginDtoFromJSON)(jsonValue); })];
+                }
+            });
+        });
+    };
+    /**
+     * For users who enter the password after another step, e.g. a passkey first. Wrong passwords count towards the lock of the later steps.
+     * Prove a later sign-in step with the password
+     */
+    UsersPublicApi.prototype.loginWithPasswordStep = function (requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function () {
+            var response;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.loginWithPasswordStepRaw(requestParameters, initOverrides)];
+                    case 1:
+                        response = _a.sent();
+                        return [4 /*yield*/, response.value()];
+                    case 2: return [2 /*return*/, _a.sent()];
+                }
+            });
+        });
+    };
     /**
      * Each recovery code works once.
      * Prove the second factor with a recovery code
@@ -506,7 +554,7 @@ var UsersPublicApi = /** @class */ (function (_super) {
         });
     };
     /**
-     * For users who sign in without a password: the recovery code stands in for the passkey (and the authenticator app is still asked for when the method needs it). Users who sign in with a password enter it first, then the recovery code as their verification step; here they get the same error as for a wrong code.
+     * For users whose first sign-in step is a passkey alone: the recovery code stands in for it, and the next steps are still asked for. Users who can start with the password enter it first, then the recovery code in a later step; here they get the same error as for a wrong code.
      * Sign in with a recovery code instead of a lost passkey
      */
     UsersPublicApi.prototype.loginWithRecoveryCodeInsteadOfPasskeyRaw = function (requestParameters, initOverrides) {
@@ -536,7 +584,7 @@ var UsersPublicApi = /** @class */ (function (_super) {
         });
     };
     /**
-     * For users who sign in without a password: the recovery code stands in for the passkey (and the authenticator app is still asked for when the method needs it). Users who sign in with a password enter it first, then the recovery code as their verification step; here they get the same error as for a wrong code.
+     * For users whose first sign-in step is a passkey alone: the recovery code stands in for it, and the next steps are still asked for. Users who can start with the password enter it first, then the recovery code in a later step; here they get the same error as for a wrong code.
      * Sign in with a recovery code instead of a lost passkey
      */
     UsersPublicApi.prototype.loginWithRecoveryCodeInsteadOfPasskey = function (requestParameters, initOverrides) {

package/dist/models/AdminUserSecurityDto.d.ts

@@ -9,7 +9,7 @@
  * https://openapi-generator.tech
  * Do not edit the class manually.
  */
-import type { UserAuthenticationMethod } from './UserAuthenticationMethod';
+import type { UserSignInFactor } from './UserSignInFactor';
 /**
  *
  * @export
@@ -47,11 +47,11 @@ export interface AdminUserSecurityDto {
      */
     isStaff: boolean;
     /**
-     * Method the user signs in with.
-     * @type {UserAuthenticationMethod}
+     * Steps the user signs in with, in order; each step lists the factors to choose from.
+     * @type {Array<Array<UserSignInFactor>>}
      * @memberof AdminUserSecurityDto
      */
-    authenticationMethod: UserAuthenticationMethod;
+    signInSteps: Array<Array<UserSignInFactor>>;
     /**
      * Whether an authenticator app is set up.
      * @type {boolean}

package/dist/models/AdminUserSecurityDto.js

@@ -18,7 +18,6 @@ exports.AdminUserSecurityDtoFromJSON = AdminUserSecurityDtoFromJSON;
 exports.AdminUserSecurityDtoFromJSONTyped = AdminUserSecurityDtoFromJSONTyped;
 exports.AdminUserSecurityDtoToJSON = AdminUserSecurityDtoToJSON;
 exports.AdminUserSecurityDtoToJSONTyped = AdminUserSecurityDtoToJSONTyped;
-var UserAuthenticationMethod_1 = require("./UserAuthenticationMethod");
 /**
  * Check if a given object implements the AdminUserSecurityDto interface.
  */
@@ -33,7 +32,7 @@ function instanceOfAdminUserSecurityDto(value) {
         return false;
     if (!('isStaff' in value) || value['isStaff'] === undefined)
         return false;
-    if (!('authenticationMethod' in value) || value['authenticationMethod'] === undefined)
+    if (!('signInSteps' in value) || value['signInSteps'] === undefined)
         return false;
     if (!('totpEnabled' in value) || value['totpEnabled'] === undefined)
         return false;
@@ -58,7 +57,7 @@ function AdminUserSecurityDtoFromJSONTyped(json, ignoreDiscriminator) {
         'name': json['name'],
         'roles': json['roles'],
         'isStaff': json['isStaff'],
-        'authenticationMethod': (0, UserAuthenticationMethod_1.UserAuthenticationMethodFromJSON)(json['authenticationMethod']),
+        'signInSteps': json['signInSteps'],
         'totpEnabled': json['totpEnabled'],
         'passkeys': json['passkeys'],
         'loginLocationVerificationEnabled': json['loginLocationVerificationEnabled'],
@@ -79,7 +78,7 @@ function AdminUserSecurityDtoToJSONTyped(value, ignoreDiscriminator) {
         'name': value['name'],
         'roles': value['roles'],
         'isStaff': value['isStaff'],
-        'authenticationMethod': (0, UserAuthenticationMethod_1.UserAuthenticationMethodToJSON)(value['authenticationMethod']),
+        'signInSteps': value['signInSteps'],
         'totpEnabled': value['totpEnabled'],
         'passkeys': value['passkeys'],
         'loginLocationVerificationEnabled': value['loginLocationVerificationEnabled'],

package/dist/models/ChangeUserSignInStepsInput.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Nameshift
+ * Nameshift domain marketplace and management API.  ## Authentication - **Bearer JWT** — Seller and buyer sessions obtained via login endpoints. - **API key** — Pass the `apikey` header for programmatic seller access.  ## Audiences - **(public)** tags — Unauthenticated or buyer-facing endpoints. - **Accounts / Domains / Leads / Buyers** — Seller or buyer resources. - **Partner** — Partner integrations.
+ *
+ * The version of the OpenAPI document: 1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import type { UserSignInFactor } from './UserSignInFactor';
+/**
+ *
+ * @export
+ * @interface ChangeUserSignInStepsInput
+ */
+export interface ChangeUserSignInStepsInput {
+    /**
+     * Steps to sign in with from now on, in order. Each step lists the factors the user can choose from; the authenticator app cannot be the first step, and no factor can be in two steps.
+     * @type {Array<Array<UserSignInFactor>>}
+     * @memberof ChangeUserSignInStepsInput
+     */
+    steps: Array<Array<UserSignInFactor>>;
+}
+/**
+ * Check if a given object implements the ChangeUserSignInStepsInput interface.
+ */
+export declare function instanceOfChangeUserSignInStepsInput(value: object): value is ChangeUserSignInStepsInput;
+export declare function ChangeUserSignInStepsInputFromJSON(json: any): ChangeUserSignInStepsInput;
+export declare function ChangeUserSignInStepsInputFromJSONTyped(json: any, ignoreDiscriminator: boolean): ChangeUserSignInStepsInput;
+export declare function ChangeUserSignInStepsInputToJSON(json: any): ChangeUserSignInStepsInput;
+export declare function ChangeUserSignInStepsInputToJSONTyped(value?: ChangeUserSignInStepsInput | null, ignoreDiscriminator?: boolean): any;