@randock/nameshift-api-client 0.0.504 → 0.0.505

package/src/apis/UsersApi.ts

@@ -16,10 +16,10 @@
 import * as runtime from '../runtime';
 import type {
   ActivateUserTotpInput,
-  ChangeUserAuthenticationMethodInput,
   ChangeUserEmailWithOtpInput,
   ChangeUserLoginLocationVerificationInput,
   ChangeUserPasswordInput,
+  ChangeUserSignInStepsInput,
   CurrentPasswordInput,
   ListUserLoginAttempts200Response,
   PasskeyOptionsDto,
@@ -42,14 +42,14 @@ import type {
 import {
     ActivateUserTotpInputFromJSON,
     ActivateUserTotpInputToJSON,
-    ChangeUserAuthenticationMethodInputFromJSON,
-    ChangeUserAuthenticationMethodInputToJSON,
     ChangeUserEmailWithOtpInputFromJSON,
     ChangeUserEmailWithOtpInputToJSON,
     ChangeUserLoginLocationVerificationInputFromJSON,
     ChangeUserLoginLocationVerificationInputToJSON,
     ChangeUserPasswordInputFromJSON,
     ChangeUserPasswordInputToJSON,
+    ChangeUserSignInStepsInputFromJSON,
+    ChangeUserSignInStepsInputToJSON,
     CurrentPasswordInputFromJSON,
     CurrentPasswordInputToJSON,
     ListUserLoginAttempts200ResponseFromJSON,
@@ -96,11 +96,6 @@ export interface UsersApiActivateUserTotpReplacementRequest {
     activateUserTotpInput: ActivateUserTotpInput;
 }
 
-export interface UsersApiChangeUserAuthenticationMethodRequest {
-    xReauthenticationToken: string;
-    changeUserAuthenticationMethodInput: ChangeUserAuthenticationMethodInput;
-}
-
 export interface UsersApiChangeUserEmailWithOtpRequest {
     changeUserEmailWithOtpInput: ChangeUserEmailWithOtpInput;
 }
@@ -114,6 +109,11 @@ export interface UsersApiChangeUserPasswordRequest {
     changeUserPasswordInput: ChangeUserPasswordInput;
 }
 
+export interface UsersApiChangeUserSignInStepsRequest {
+    xReauthenticationToken: string;
+    changeUserSignInStepsInput: ChangeUserSignInStepsInput;
+}
+
 export interface UsersApiDisableUserRecoveryCodesRequest {
     xReauthenticationToken: string;
 }
@@ -195,7 +195,7 @@ export interface UsersApiStartUserTotpEnrolmentRequest {
 }
 
 export interface UsersApiStartUserTotpReplacementRequest {
-    xReauthenticationToken: string;
+    totpCodeInput: TotpCodeInput;
 }
 
 export interface UsersApiUpdateUserNotificationSettingsRequest {
@@ -295,63 +295,6 @@ export class UsersApi extends runtime.BaseAPI {
         await this.activateUserTotpReplacementRaw(requestParameters, initOverrides);
     }
 
-    /**
-     * Only to a method the factors set up allow (see allowedAuthenticationMethods). Needs the reauthentication token: a stronger method can also lock the user out of a sign-in they rely on.
-     * Change the method the user signs in with
-     */
-    async changeUserAuthenticationMethodRaw(requestParameters: UsersApiChangeUserAuthenticationMethodRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<UserSecurityDto>> {
-        if (requestParameters['xReauthenticationToken'] == null) {
-            throw new runtime.RequiredError(
-                'xReauthenticationToken',
-                'Required parameter "xReauthenticationToken" was null or undefined when calling changeUserAuthenticationMethod().'
-            );
-        }
-
-        if (requestParameters['changeUserAuthenticationMethodInput'] == null) {
-            throw new runtime.RequiredError(
-                'changeUserAuthenticationMethodInput',
-                'Required parameter "changeUserAuthenticationMethodInput" was null or undefined when calling changeUserAuthenticationMethod().'
-            );
-        }
-
-        const queryParameters: any = {};
-
-        const headerParameters: runtime.HTTPHeaders = {};
-
-        headerParameters['Content-Type'] = 'application/json';
-
-        if (requestParameters['xReauthenticationToken'] != null) {
-            headerParameters['x-reauthentication-token'] = String(requestParameters['xReauthenticationToken']);
-        }
-
-        if (this.configuration && this.configuration.accessToken) {
-            const token = this.configuration.accessToken;
-            const tokenString = await token("bearer", []);
-
-            if (tokenString) {
-                headerParameters["Authorization"] = `Bearer ${tokenString}`;
-            }
-        }
-        const response = await this.request({
-            path: `/private/users/security/authentication-method`,
-            method: 'PATCH',
-            headers: headerParameters,
-            query: queryParameters,
-            body: ChangeUserAuthenticationMethodInputToJSON(requestParameters['changeUserAuthenticationMethodInput']),
-        }, initOverrides);
-
-        return new runtime.JSONApiResponse(response, (jsonValue) => UserSecurityDtoFromJSON(jsonValue));
-    }
-
-    /**
-     * Only to a method the factors set up allow (see allowedAuthenticationMethods). Needs the reauthentication token: a stronger method can also lock the user out of a sign-in they rely on.
-     * Change the method the user signs in with
-     */
-    async changeUserAuthenticationMethod(requestParameters: UsersApiChangeUserAuthenticationMethodRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<UserSecurityDto> {
-        const response = await this.changeUserAuthenticationMethodRaw(requestParameters, initOverrides);
-        return await response.value();
-    }
-
     /**
      * Changes the seller user email after validating the OTP sent to the new address.  **API key scope required:** `USER_EMAIL_WRITE`. Requests authenticated with a seller session do not need any scope.
      * Change user email with OTP
@@ -496,6 +439,63 @@ export class UsersApi extends runtime.BaseAPI {
         await this.changeUserPasswordRaw(requestParameters, initOverrides);
     }
 
+    /**
+     * Only factors the user set up (see setUpSignInFactors), at least minSignInSteps steps, no authenticator app in the first step and no factor in two steps; otherwise a SIGN_IN_STEPS_* error. Needs the reauthentication token: other steps can also lock the user out of a sign-in they rely on.
+     * Change the steps the user signs in with
+     */
+    async changeUserSignInStepsRaw(requestParameters: UsersApiChangeUserSignInStepsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<UserSecurityDto>> {
+        if (requestParameters['xReauthenticationToken'] == null) {
+            throw new runtime.RequiredError(
+                'xReauthenticationToken',
+                'Required parameter "xReauthenticationToken" was null or undefined when calling changeUserSignInSteps().'
+            );
+        }
+
+        if (requestParameters['changeUserSignInStepsInput'] == null) {
+            throw new runtime.RequiredError(
+                'changeUserSignInStepsInput',
+                'Required parameter "changeUserSignInStepsInput" was null or undefined when calling changeUserSignInSteps().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (requestParameters['xReauthenticationToken'] != null) {
+            headerParameters['x-reauthentication-token'] = String(requestParameters['xReauthenticationToken']);
+        }
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearer", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        const response = await this.request({
+            path: `/private/users/security/sign-in-steps`,
+            method: 'PATCH',
+            headers: headerParameters,
+            query: queryParameters,
+            body: ChangeUserSignInStepsInputToJSON(requestParameters['changeUserSignInStepsInput']),
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => UserSecurityDtoFromJSON(jsonValue));
+    }
+
+    /**
+     * Only factors the user set up (see setUpSignInFactors), at least minSignInSteps steps, no authenticator app in the first step and no factor in two steps; otherwise a SIGN_IN_STEPS_* error. Needs the reauthentication token: other steps can also lock the user out of a sign-in they rely on.
+     * Change the steps the user signs in with
+     */
+    async changeUserSignInSteps(requestParameters: UsersApiChangeUserSignInStepsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<UserSecurityDto> {
+        const response = await this.changeUserSignInStepsRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
     /**
      * The current codes stop working.
      * Turn recovery codes off
@@ -1468,14 +1468,14 @@ export class UsersApi extends runtime.BaseAPI {
     }
 
     /**
-     * Returns the QR code URI and the secret of the new app. The current app keeps working until a code of the new one is checked.
+     * Needs a code of the app being replaced; wrong codes count towards locking the verification step. Returns the QR code URI and the secret of the new app. The current app keeps working until a code of the new one is checked.
      * Start moving to another authenticator app
      */
     async startUserTotpReplacementRaw(requestParameters: UsersApiStartUserTotpReplacementRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TotpEnrolmentDto>> {
-        if (requestParameters['xReauthenticationToken'] == null) {
+        if (requestParameters['totpCodeInput'] == null) {
             throw new runtime.RequiredError(
-                'xReauthenticationToken',
-                'Required parameter "xReauthenticationToken" was null or undefined when calling startUserTotpReplacement().'
+                'totpCodeInput',
+                'Required parameter "totpCodeInput" was null or undefined when calling startUserTotpReplacement().'
             );
         }
 
@@ -1483,9 +1483,7 @@ export class UsersApi extends runtime.BaseAPI {
 
         const headerParameters: runtime.HTTPHeaders = {};
 
-        if (requestParameters['xReauthenticationToken'] != null) {
-            headerParameters['x-reauthentication-token'] = String(requestParameters['xReauthenticationToken']);
-        }
+        headerParameters['Content-Type'] = 'application/json';
 
         if (this.configuration && this.configuration.accessToken) {
             const token = this.configuration.accessToken;
@@ -1500,13 +1498,14 @@ export class UsersApi extends runtime.BaseAPI {
             method: 'POST',
             headers: headerParameters,
             query: queryParameters,
+            body: TotpCodeInputToJSON(requestParameters['totpCodeInput']),
         }, initOverrides);
 
         return new runtime.JSONApiResponse(response, (jsonValue) => TotpEnrolmentDtoFromJSON(jsonValue));
     }
 
     /**
-     * Returns the QR code URI and the secret of the new app. The current app keeps working until a code of the new one is checked.
+     * Needs a code of the app being replaced; wrong codes count towards locking the verification step. Returns the QR code URI and the secret of the new app. The current app keeps working until a code of the new one is checked.
      * Start moving to another authenticator app
      */
     async startUserTotpReplacement(requestParameters: UsersApiStartUserTotpReplacementRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TotpEnrolmentDto> {

package/src/apis/UsersPublicApi.ts

@@ -23,6 +23,7 @@ import type {
   LoginInput,
   LoginPasskeyInput,
   LoginPasskeyOptionsInput,
+  LoginPasswordInput,
   LoginRecoveryCodeInput,
   NotificationsUnsubscribeResultDto,
   PasskeyOptionsDto,
@@ -49,6 +50,8 @@ import {
     LoginPasskeyInputToJSON,
     LoginPasskeyOptionsInputFromJSON,
     LoginPasskeyOptionsInputToJSON,
+    LoginPasswordInputFromJSON,
+    LoginPasswordInputToJSON,
     LoginRecoveryCodeInputFromJSON,
     LoginRecoveryCodeInputToJSON,
     NotificationsUnsubscribeResultDtoFromJSON,
@@ -101,6 +104,10 @@ export interface UsersPublicApiLoginWithPasskeyRequest {
     loginPasskeyInput: LoginPasskeyInput;
 }
 
+export interface UsersPublicApiLoginWithPasswordStepRequest {
+    loginPasswordInput: LoginPasswordInput;
+}
+
 export interface UsersPublicApiLoginWithRecoveryCodeRequest {
     loginCodeInput: LoginCodeInput;
 }
@@ -327,7 +334,7 @@ export class UsersPublicApi extends runtime.BaseAPI {
     }
 
     /**
-     * Without a challenge token, any passkey of the site on the device can answer and signs in on its own. With one, the passkey is the second factor of that sign-in.
+     * Without a challenge token, any passkey of the site on the device can answer, for users whose first sign-in step accepts a passkey. With one, the passkey proves the next step of that sign-in.
      * Start signing in with a passkey
      */
     async getLoginPasskeyOptionsRaw(requestParameters: UsersPublicApiGetLoginPasskeyOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PasskeyOptionsDto>> {
@@ -356,7 +363,7 @@ export class UsersPublicApi extends runtime.BaseAPI {
     }
 
     /**
-     * Without a challenge token, any passkey of the site on the device can answer and signs in on its own. With one, the passkey is the second factor of that sign-in.
+     * Without a challenge token, any passkey of the site on the device can answer, for users whose first sign-in step accepts a passkey. With one, the passkey proves the next step of that sign-in.
      * Start signing in with a passkey
      */
     async getLoginPasskeyOptions(requestParameters: UsersPublicApiGetLoginPasskeyOptionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PasskeyOptionsDto> {
@@ -403,7 +410,7 @@ export class UsersPublicApi extends runtime.BaseAPI {
     }
 
     /**
-     * Sign in with a passkey, or prove the second factor with one
+     * Sign in with a passkey, or prove a later step with one
      */
     async loginWithPasskeyRaw(requestParameters: UsersPublicApiLoginWithPasskeyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<LoginDto>> {
         if (requestParameters['loginPasskeyInput'] == null) {
@@ -431,13 +438,51 @@ export class UsersPublicApi extends runtime.BaseAPI {
     }
 
     /**
-     * Sign in with a passkey, or prove the second factor with one
+     * Sign in with a passkey, or prove a later step with one
      */
     async loginWithPasskey(requestParameters: UsersPublicApiLoginWithPasskeyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<LoginDto> {
         const response = await this.loginWithPasskeyRaw(requestParameters, initOverrides);
         return await response.value();
     }
 
+    /**
+     * For users who enter the password after another step, e.g. a passkey first. Wrong passwords count towards the lock of the later steps.
+     * Prove a later sign-in step with the password
+     */
+    async loginWithPasswordStepRaw(requestParameters: UsersPublicApiLoginWithPasswordStepRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<LoginDto>> {
+        if (requestParameters['loginPasswordInput'] == null) {
+            throw new runtime.RequiredError(
+                'loginPasswordInput',
+                'Required parameter "loginPasswordInput" was null or undefined when calling loginWithPasswordStep().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        const response = await this.request({
+            path: `/users/login/password`,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: LoginPasswordInputToJSON(requestParameters['loginPasswordInput']),
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => LoginDtoFromJSON(jsonValue));
+    }
+
+    /**
+     * For users who enter the password after another step, e.g. a passkey first. Wrong passwords count towards the lock of the later steps.
+     * Prove a later sign-in step with the password
+     */
+    async loginWithPasswordStep(requestParameters: UsersPublicApiLoginWithPasswordStepRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<LoginDto> {
+        const response = await this.loginWithPasswordStepRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
     /**
      * Each recovery code works once.
      * Prove the second factor with a recovery code
@@ -477,7 +522,7 @@ export class UsersPublicApi extends runtime.BaseAPI {
     }
 
     /**
-     * For users who sign in without a password: the recovery code stands in for the passkey (and the authenticator app is still asked for when the method needs it). Users who sign in with a password enter it first, then the recovery code as their verification step; here they get the same error as for a wrong code.
+     * For users whose first sign-in step is a passkey alone: the recovery code stands in for it, and the next steps are still asked for. Users who can start with the password enter it first, then the recovery code in a later step; here they get the same error as for a wrong code.
      * Sign in with a recovery code instead of a lost passkey
      */
     async loginWithRecoveryCodeInsteadOfPasskeyRaw(requestParameters: UsersPublicApiLoginWithRecoveryCodeInsteadOfPasskeyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<LoginDto>> {
@@ -506,7 +551,7 @@ export class UsersPublicApi extends runtime.BaseAPI {
     }
 
     /**
-     * For users who sign in without a password: the recovery code stands in for the passkey (and the authenticator app is still asked for when the method needs it). Users who sign in with a password enter it first, then the recovery code as their verification step; here they get the same error as for a wrong code.
+     * For users whose first sign-in step is a passkey alone: the recovery code stands in for it, and the next steps are still asked for. Users who can start with the password enter it first, then the recovery code in a later step; here they get the same error as for a wrong code.
      * Sign in with a recovery code instead of a lost passkey
      */
     async loginWithRecoveryCodeInsteadOfPasskey(requestParameters: UsersPublicApiLoginWithRecoveryCodeInsteadOfPasskeyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<LoginDto> {

package/src/models/AdminUserSecurityDto.ts

@@ -13,13 +13,13 @@
  */
 
 import { mapValues } from '../runtime';
-import type { UserAuthenticationMethod } from './UserAuthenticationMethod';
+import type { UserSignInFactor } from './UserSignInFactor';
 import {
-    UserAuthenticationMethodFromJSON,
-    UserAuthenticationMethodFromJSONTyped,
-    UserAuthenticationMethodToJSON,
-    UserAuthenticationMethodToJSONTyped,
-} from './UserAuthenticationMethod';
+    UserSignInFactorFromJSON,
+    UserSignInFactorFromJSONTyped,
+    UserSignInFactorToJSON,
+    UserSignInFactorToJSONTyped,
+} from './UserSignInFactor';
 
 /**
  * 
@@ -58,11 +58,11 @@ export interface AdminUserSecurityDto {
      */
     isStaff: boolean;
     /**
-     * Method the user signs in with.
-     * @type {UserAuthenticationMethod}
+     * Steps the user signs in with, in order; each step lists the factors to choose from.
+     * @type {Array<Array<UserSignInFactor>>}
      * @memberof AdminUserSecurityDto
      */
-    authenticationMethod: UserAuthenticationMethod;
+    signInSteps: Array<Array<UserSignInFactor>>;
     /**
      * Whether an authenticator app is set up.
      * @type {boolean}
@@ -89,8 +89,6 @@ export interface AdminUserSecurityDto {
     lastLoginAt: Date | null;
 }
 
-
-
 /**
  * Check if a given object implements the AdminUserSecurityDto interface.
  */
@@ -100,7 +98,7 @@ export function instanceOfAdminUserSecurityDto(value: object): value is AdminUse
     if (!('name' in value) || value['name'] === undefined) return false;
     if (!('roles' in value) || value['roles'] === undefined) return false;
     if (!('isStaff' in value) || value['isStaff'] === undefined) return false;
-    if (!('authenticationMethod' in value) || value['authenticationMethod'] === undefined) return false;
+    if (!('signInSteps' in value) || value['signInSteps'] === undefined) return false;
     if (!('totpEnabled' in value) || value['totpEnabled'] === undefined) return false;
     if (!('passkeys' in value) || value['passkeys'] === undefined) return false;
     if (!('loginLocationVerificationEnabled' in value) || value['loginLocationVerificationEnabled'] === undefined) return false;
@@ -123,7 +121,7 @@ export function AdminUserSecurityDtoFromJSONTyped(json: any, ignoreDiscriminator
         'name': json['name'],
         'roles': json['roles'],
         'isStaff': json['isStaff'],
-        'authenticationMethod': UserAuthenticationMethodFromJSON(json['authenticationMethod']),
+        'signInSteps': json['signInSteps'],
         'totpEnabled': json['totpEnabled'],
         'passkeys': json['passkeys'],
         'loginLocationVerificationEnabled': json['loginLocationVerificationEnabled'],
@@ -147,7 +145,7 @@ export function AdminUserSecurityDtoToJSONTyped(value?: AdminUserSecurityDto | n
         'name': value['name'],
         'roles': value['roles'],
         'isStaff': value['isStaff'],
-        'authenticationMethod': UserAuthenticationMethodToJSON(value['authenticationMethod']),
+        'signInSteps': value['signInSteps'],
         'totpEnabled': value['totpEnabled'],
         'passkeys': value['passkeys'],
         'loginLocationVerificationEnabled': value['loginLocationVerificationEnabled'],

package/src/models/ChangeUserSignInStepsInput.ts

@@ -0,0 +1,74 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Nameshift
+ * Nameshift domain marketplace and management API.  ## Authentication - **Bearer JWT** — Seller and buyer sessions obtained via login endpoints. - **API key** — Pass the `apikey` header for programmatic seller access.  ## Audiences - **(public)** tags — Unauthenticated or buyer-facing endpoints. - **Accounts / Domains / Leads / Buyers** — Seller or buyer resources. - **Partner** — Partner integrations.
+ *
+ * The version of the OpenAPI document: 1.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+import type { UserSignInFactor } from './UserSignInFactor';
+import {
+    UserSignInFactorFromJSON,
+    UserSignInFactorFromJSONTyped,
+    UserSignInFactorToJSON,
+    UserSignInFactorToJSONTyped,
+} from './UserSignInFactor';
+
+/**
+ * 
+ * @export
+ * @interface ChangeUserSignInStepsInput
+ */
+export interface ChangeUserSignInStepsInput {
+    /**
+     * Steps to sign in with from now on, in order. Each step lists the factors the user can choose from; the authenticator app cannot be the first step, and no factor can be in two steps.
+     * @type {Array<Array<UserSignInFactor>>}
+     * @memberof ChangeUserSignInStepsInput
+     */
+    steps: Array<Array<UserSignInFactor>>;
+}
+
+/**
+ * Check if a given object implements the ChangeUserSignInStepsInput interface.
+ */
+export function instanceOfChangeUserSignInStepsInput(value: object): value is ChangeUserSignInStepsInput {
+    if (!('steps' in value) || value['steps'] === undefined) return false;
+    return true;
+}
+
+export function ChangeUserSignInStepsInputFromJSON(json: any): ChangeUserSignInStepsInput {
+    return ChangeUserSignInStepsInputFromJSONTyped(json, false);
+}
+
+export function ChangeUserSignInStepsInputFromJSONTyped(json: any, ignoreDiscriminator: boolean): ChangeUserSignInStepsInput {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'steps': json['steps'],
+    };
+}
+
+export function ChangeUserSignInStepsInputToJSON(json: any): ChangeUserSignInStepsInput {
+    return ChangeUserSignInStepsInputToJSONTyped(json, false);
+}
+
+export function ChangeUserSignInStepsInputToJSONTyped(value?: ChangeUserSignInStepsInput | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'steps': value['steps'],
+    };
+}
+

package/src/models/LoginPasswordInput.ts

@@ -0,0 +1,75 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Nameshift
+ * Nameshift domain marketplace and management API.  ## Authentication - **Bearer JWT** — Seller and buyer sessions obtained via login endpoints. - **API key** — Pass the `apikey` header for programmatic seller access.  ## Audiences - **(public)** tags — Unauthenticated or buyer-facing endpoints. - **Accounts / Domains / Leads / Buyers** — Seller or buyer resources. - **Partner** — Partner integrations.
+ *
+ * The version of the OpenAPI document: 1.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+/**
+ * 
+ * @export
+ * @interface LoginPasswordInput
+ */
+export interface LoginPasswordInput {
+    /**
+     * Challenge token returned by the previous sign-in step.
+     * @type {string}
+     * @memberof LoginPasswordInput
+     */
+    challengeToken: string;
+    /**
+     * 
+     * @type {string}
+     * @memberof LoginPasswordInput
+     */
+    password: string;
+}
+
+/**
+ * Check if a given object implements the LoginPasswordInput interface.
+ */
+export function instanceOfLoginPasswordInput(value: object): value is LoginPasswordInput {
+    if (!('challengeToken' in value) || value['challengeToken'] === undefined) return false;
+    if (!('password' in value) || value['password'] === undefined) return false;
+    return true;
+}
+
+export function LoginPasswordInputFromJSON(json: any): LoginPasswordInput {
+    return LoginPasswordInputFromJSONTyped(json, false);
+}
+
+export function LoginPasswordInputFromJSONTyped(json: any, ignoreDiscriminator: boolean): LoginPasswordInput {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'challengeToken': json['challengeToken'],
+        'password': json['password'],
+    };
+}
+
+export function LoginPasswordInputToJSON(json: any): LoginPasswordInput {
+    return LoginPasswordInputToJSONTyped(json, false);
+}
+
+export function LoginPasswordInputToJSONTyped(value?: LoginPasswordInput | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'challengeToken': value['challengeToken'],
+        'password': value['password'],
+    };
+}
+

package/src/models/SecondFactorMethod.ts

@@ -18,6 +18,7 @@
  * @export
  */
 export const SecondFactorMethod = {
+    PASSWORD: 'password',
     PASSKEY: 'passkey',
     TOTP: 'totp',
     RECOVERY_CODE: 'recovery_code'

package/src/models/UserLoginAttemptResult.ts

@@ -24,6 +24,7 @@ export const UserLoginAttemptResult = {
     SECOND_FACTOR_FAILED: 'second_factor_failed',
     SECOND_FACTOR_LOCKED: 'second_factor_locked',
     PASSWORD_LOGIN_DISABLED: 'password_login_disabled',
+    PASSKEY_LOGIN_DISABLED: 'passkey_login_disabled',
     LOCATION_CONFIRMATION_REQUIRED: 'location_confirmation_required'
 } as const;
 export type UserLoginAttemptResult = typeof UserLoginAttemptResult[keyof typeof UserLoginAttemptResult];