firebase-tools 12.4.7 → 12.5.0

package/lib/emulator/auth/apiSpec.js

@@ -20,6 +20,7 @@ exports.default = {
         { name: "projects" },
         { name: "v1" },
         { name: "defaultSupportedIdps" },
+        { name: "v2" },
         { name: "secureToken" },
         { name: "emulator" },
     ],
@@ -404,7 +405,7 @@ exports.default = {
         },
         "/v1/accounts:signInWithGameCenter": {
             post: {
-                description: "Signs in or signs up a user with iOS Game Center credentials. If the sign-in succeeds, a new Identity Platform ID token and refresh token are issued for the authenticated user. The bundle ID is required in the request header as `x-ios-bundle-identifier`. An [API key](https://cloud.google.com/docs/authentication/api-keys) is required in the request in order to identify the Google Cloud project.",
+                description: "Signs in or signs up a user with iOS Game Center credentials. If the sign-in succeeds, a new Identity Platform ID token and refresh token are issued for the authenticated user. The bundle ID is required in the request header as `x-ios-bundle-identifier`. An [API key](https://cloud.google.com/docs/authentication/api-keys) is required in the request in order to identify the Google Cloud project. Apple has [deprecated the `playerID` field](https://developer.apple.com/documentation/gamekit/gkplayer/1521127-playerid/). The Apple platform Firebase SDK will use `gamePlayerID` and `teamPlayerID` from version 10.5.0 and onwards. Upgrading to SDK version 10.5.0 or later updates existing integrations that use `playerID` to instead use `gamePlayerID` and `teamPlayerID`. When making calls to `signInWithGameCenter`, you must include `playerID` along with the new fields `gamePlayerID` and `teamPlayerID` to successfully identify all existing users. Upgrading existing Game Center sign in integrations to SDK version 10.5.0 or later is irreversible.",
                 operationId: "identitytoolkit.accounts.signInWithGameCenter",
                 responses: {
                     "200": {
@@ -1420,7 +1421,7 @@ exports.default = {
                     {
                         name: "tenantId",
                         in: "path",
-                        description: "If the accounts belong to an Identity Platform tenant, the ID of the tenant. If the accounts belong to an default Identity Platform project, the field is not needed.",
+                        description: "If the accounts belong to an Identity Platform tenant, the ID of the tenant. If the accounts belong to a default Identity Platform project, the field is not needed.",
                         required: true,
                         schema: { type: "string" },
                     },
@@ -1935,6 +1936,50 @@ exports.default = {
                 { $ref: "#/components/parameters/upload_protocol" },
             ],
         },
+        "/v2/accounts:revokeToken": {
+            post: {
+                description: "Revokes a user's token from an Identity Provider (IdP). This is done by manually providing an IdP credential, and the token types for revocation. An [API key](https://cloud.google.com/docs/authentication/api-keys) is required in the request in order to identify the Google Cloud project.",
+                operationId: "identitytoolkit.accounts.revokeToken",
+                responses: {
+                    "200": {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2RevokeTokenResponse",
+                                },
+                            },
+                        },
+                    },
+                },
+                requestBody: {
+                    content: {
+                        "application/json": {
+                            schema: {
+                                $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2RevokeTokenRequest",
+                            },
+                        },
+                    },
+                },
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { apiKeyQuery: [] },
+                    { apiKeyHeader: [] },
+                ],
+                tags: ["accounts"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
         "/v2/accounts/mfaEnrollment:finalize": {
             post: {
                 description: "Finishes enrolling a second factor for the user.",
@@ -3762,6 +3807,113 @@ exports.default = {
                 { $ref: "#/components/parameters/upload_protocol" },
             ],
         },
+        "/v2/passwordPolicy": {
+            get: {
+                description: "Gets password policy config set on the project or tenant.",
+                operationId: "identitytoolkit.getPasswordPolicy",
+                responses: {
+                    "200": {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2PasswordPolicy" },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    {
+                        name: "tenantId",
+                        in: "query",
+                        description: "The id of a tenant.",
+                        schema: { type: "string" },
+                    },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { apiKeyQuery: [] },
+                    { apiKeyHeader: [] },
+                ],
+                tags: ["v2"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
+        "/v2/recaptchaConfig": {
+            get: {
+                description: "Gets parameters needed for reCAPTCHA analysis.",
+                operationId: "identitytoolkit.getRecaptchaConfig",
+                responses: {
+                    "200": {
+                        description: "Successful response",
+                        content: {
+                            "*/*": {
+                                schema: {
+                                    $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2RecaptchaConfig",
+                                },
+                            },
+                        },
+                    },
+                },
+                parameters: [
+                    {
+                        name: "clientType",
+                        in: "query",
+                        description: "reCAPTCHA Enterprise uses separate site keys for different client types. Specify the client type to get the corresponding key.",
+                        schema: {
+                            type: "string",
+                            enum: [
+                                "CLIENT_TYPE_UNSPECIFIED",
+                                "CLIENT_TYPE_WEB",
+                                "CLIENT_TYPE_ANDROID",
+                                "CLIENT_TYPE_IOS",
+                            ],
+                        },
+                    },
+                    {
+                        name: "tenantId",
+                        in: "query",
+                        description: "The id of a tenant.",
+                        schema: { type: "string" },
+                    },
+                    {
+                        name: "version",
+                        in: "query",
+                        description: "The reCAPTCHA version.",
+                        schema: {
+                            type: "string",
+                            enum: ["RECAPTCHA_VERSION_UNSPECIFIED", "RECAPTCHA_ENTERPRISE"],
+                        },
+                    },
+                ],
+                security: [
+                    { Oauth2: ["https://www.googleapis.com/auth/cloud-platform"] },
+                    { apiKeyQuery: [] },
+                    { apiKeyHeader: [] },
+                ],
+                tags: ["v2"],
+            },
+            parameters: [
+                { $ref: "#/components/parameters/access_token" },
+                { $ref: "#/components/parameters/alt" },
+                { $ref: "#/components/parameters/callback" },
+                { $ref: "#/components/parameters/fields" },
+                { $ref: "#/components/parameters/oauth_token" },
+                { $ref: "#/components/parameters/prettyPrint" },
+                { $ref: "#/components/parameters/quotaUser" },
+                { $ref: "#/components/parameters/uploadType" },
+                { $ref: "#/components/parameters/upload_protocol" },
+            ],
+        },
         "/v1/token": {
             post: {
                 description: "The Token Service API lets you exchange either an ID token or a refresh token for an access token and a new refresh token. You can use the access token to securely call APIs that require user authorization.",
@@ -4095,7 +4247,7 @@ exports.default = {
                         type: "array",
                     },
                     tenantId: {
-                        description: "If the accounts belong to an Identity Platform tenant, the ID of the tenant. If the accounts belong to an default Identity Platform project, the field is not needed.",
+                        description: "If the accounts belong to an Identity Platform tenant, the ID of the tenant. If the accounts belong to a default Identity Platform project, the field is not needed.",
                         type: "string",
                     },
                 },
@@ -4130,7 +4282,7 @@ exports.default = {
             GoogleCloudIdentitytoolkitV1CreateAuthUriRequest: {
                 description: "Request message for CreateAuthUri.",
                 properties: {
-                    appId: { type: "string" },
+                    appId: { deprecated: true, type: "string" },
                     authFlowType: {
                         description: "Used for the Google provider. The type of the authentication flow to be used. If present, this should be `CODE_FLOW` to specify the authorization code flow. Otherwise, the default ID Token flow will be used.",
                         type: "string",
@@ -4156,13 +4308,13 @@ exports.default = {
                         description: "The email identifier of the user account to fetch associated providers for. At least one of the fields `identifier` and `provider_id` must be set. The length of the email address should be less than 256 characters and in the format of `name@domain.tld`. The email address should also match the [RFC 822](https://tools.ietf.org/html/rfc822) addr-spec production.",
                         type: "string",
                     },
-                    oauthConsumerKey: { type: "string" },
+                    oauthConsumerKey: { deprecated: true, type: "string" },
                     oauthScope: {
                         description: "Additional space-delimited OAuth 2.0 scopes specifying the scope of the authentication request with the IdP. Used for OAuth 2.0 IdPs. For the Google provider, the authorization code flow will be used if this field is set.",
                         type: "string",
                     },
-                    openidRealm: { type: "string" },
-                    otaApp: { type: "string" },
+                    openidRealm: { deprecated: true, type: "string" },
+                    otaApp: { deprecated: true, type: "string" },
                     providerId: {
                         description: "The provider ID of the IdP for the user to sign in with. This should be a provider ID enabled for sign-in, which is either from the list of [default supported IdPs](https://cloud.google.com/identity-platform/docs/reference/rest/v2/defaultSupportedIdps/list), or of the format `oidc.*` or `saml.*`. Some examples are `google.com`, `facebook.com`, `oidc.testapp`, and `saml.testapp`. At least one of the fields `identifier` and `provider_id` must be set.",
                         type: "string",
@@ -4181,7 +4333,7 @@ exports.default = {
             GoogleCloudIdentitytoolkitV1CreateAuthUriResponse: {
                 description: "Response message for CreateAuthUri.",
                 properties: {
-                    allProviders: { items: { type: "string" }, type: "array" },
+                    allProviders: { deprecated: true, items: { type: "string" }, type: "array" },
                     authUri: {
                         description: "The authorization URI for the requested provider. Present only when a provider ID is set in the request.",
                         type: "string",
@@ -4194,7 +4346,7 @@ exports.default = {
                         description: "Whether the user has previously signed in with the provider ID in the request. Present only when a registered email identifier is set in the request.",
                         type: "boolean",
                     },
-                    kind: { type: "string" },
+                    kind: { deprecated: true, type: "string" },
                     providerId: {
                         description: "The provider ID from the request, if provided.",
                         type: "string",
@@ -4244,7 +4396,7 @@ exports.default = {
             GoogleCloudIdentitytoolkitV1DeleteAccountRequest: {
                 description: "Request message for DeleteAccount.",
                 properties: {
-                    delegatedProjectNumber: { format: "int64", type: "string" },
+                    delegatedProjectNumber: { deprecated: true, format: "int64", type: "string" },
                     idToken: {
                         description: "The Identity Platform ID token of the account to delete. Require to be specified for requests from end users that lack Google OAuth 2.0 credential. Authenticated requests bearing a Google OAuth2 credential with proper permissions may pass local_id to specify the account to delete alternatively.",
                         type: "string",
@@ -4266,13 +4418,13 @@ exports.default = {
             },
             GoogleCloudIdentitytoolkitV1DeleteAccountResponse: {
                 description: "Response message for DeleteAccount.",
-                properties: { kind: { type: "string" } },
+                properties: { kind: { deprecated: true, type: "string" } },
                 type: "object",
             },
             GoogleCloudIdentitytoolkitV1DownloadAccountResponse: {
                 description: "Response message for DownloadAccount.",
                 properties: {
-                    kind: { type: "string" },
+                    kind: { deprecated: true, type: "string" },
                     nextPageToken: {
                         description: "If there are more accounts to be downloaded, a token that can be passed back to DownloadAccount to get more accounts. Otherwise, this is blank.",
                         type: "string",
@@ -4285,6 +4437,16 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitV1EmailInfo: {
+                description: "Information about email MFA.",
+                properties: {
+                    emailAddress: {
+                        description: "Email address that a MFA verification should be sent to.",
+                        type: "string",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitV1EmailTemplate: {
                 description: "Email template",
                 properties: {
@@ -4343,7 +4505,7 @@ exports.default = {
             GoogleCloudIdentitytoolkitV1GetAccountInfoRequest: {
                 description: "Request message for GetAccountInfo.",
                 properties: {
-                    delegatedProjectNumber: { format: "int64", type: "string" },
+                    delegatedProjectNumber: { deprecated: true, format: "int64", type: "string" },
                     email: {
                         description: "The email address of one or more accounts to fetch. The length of email should be less than 256 characters and in the format of `name@domain.tld`. The email should also match the [RFC 822](https://tools.ietf.org/html/rfc822) addr-spec production. Should only be specified by authenticated requests from a developer.",
                         items: { type: "string" },
@@ -4389,7 +4551,7 @@ exports.default = {
             GoogleCloudIdentitytoolkitV1GetAccountInfoResponse: {
                 description: "Response message for GetAccountInfo.",
                 properties: {
-                    kind: { type: "string" },
+                    kind: { deprecated: true, type: "string" },
                     users: {
                         description: "The information of specific user account(s) matching the parameters in the request.",
                         items: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV1UserInfo" },
@@ -4421,7 +4583,17 @@ exports.default = {
                         description: "For a PASSWORD_RESET request, a reCaptcha response is required when the system detects possible abuse activity. In those cases, this is the response from the reCaptcha challenge used to verify the caller.",
                         type: "string",
                     },
-                    challenge: { type: "string" },
+                    challenge: { deprecated: true, type: "string" },
+                    clientType: {
+                        description: "The client type: web, Android or iOS. Required when reCAPTCHA Enterprise protection is enabled.",
+                        enum: [
+                            "CLIENT_TYPE_UNSPECIFIED",
+                            "CLIENT_TYPE_WEB",
+                            "CLIENT_TYPE_ANDROID",
+                            "CLIENT_TYPE_IOS",
+                        ],
+                        type: "string",
+                    },
                     continueUrl: {
                         description: "The Url to continue after user clicks the link sent in email. This is the url that will allow the web widget to handle the OOB code.",
                         type: "string",
@@ -4450,6 +4622,11 @@ exports.default = {
                         description: "The email address the account is being updated to. Required only for VERIFY_AND_CHANGE_EMAIL requests.",
                         type: "string",
                     },
+                    recaptchaVersion: {
+                        description: "The reCAPTCHA version of the reCAPTCHA token in the captcha_response.",
+                        enum: ["RECAPTCHA_VERSION_UNSPECIFIED", "RECAPTCHA_ENTERPRISE"],
+                        type: "string",
+                    },
                     requestType: {
                         description: "Required. The type of out-of-band (OOB) code to send. Depending on this value, other fields in this request will be required and/or have different meanings. There are 4 different OOB codes that can be sent: * PASSWORD_RESET * EMAIL_SIGNIN * VERIFY_EMAIL * VERIFY_AND_CHANGE_EMAIL",
                         enum: [
@@ -4463,6 +4640,7 @@ exports.default = {
                             "VERIFY_AND_CHANGE_EMAIL",
                             "REVERT_SECOND_FACTOR_ADDITION",
                         ],
+                        enumDeprecated: [false, false, true, true, false, true, false, false, true],
                         type: "string",
                     },
                     returnOobLink: {
@@ -4491,7 +4669,7 @@ exports.default = {
                         description: "If return_oob_link is false in the request, the email address the verification was sent to.",
                         type: "string",
                     },
-                    kind: { type: "string" },
+                    kind: { deprecated: true, type: "string" },
                     oobCode: {
                         description: "If return_oob_link is true in the request, the OOB code to send.",
                         type: "string",
@@ -4561,7 +4739,7 @@ exports.default = {
             GoogleCloudIdentitytoolkitV1GetRecaptchaParamResponse: {
                 description: "Response message for GetRecaptchaParam.",
                 properties: {
-                    kind: { type: "string" },
+                    kind: { deprecated: true, type: "string" },
                     producerProjectNumber: {
                         description: "The producer project number used to generate PIA tokens",
                         type: "string",
@@ -4570,7 +4748,7 @@ exports.default = {
                         description: "The reCAPTCHA v2 site key used to invoke the reCAPTCHA service. Always present.",
                         type: "string",
                     },
-                    recaptchaStoken: { type: "string" },
+                    recaptchaStoken: { deprecated: true, type: "string" },
                 },
                 type: "object",
             },
@@ -4672,6 +4850,7 @@ exports.default = {
                         description: 'Display name for this mfa option e.g. "corp cell phone".',
                         type: "string",
                     },
+                    emailInfo: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV1EmailInfo" },
                     enrolledAt: {
                         description: "Timestamp when the account enrolled this second factor.",
                         format: "google-datetime",
@@ -4682,6 +4861,7 @@ exports.default = {
                         description: "Normally this will show the phone number associated with this enrollment. In some situations, such as after a first factor sign in, it will only show the obfuscated version of the associated phone number.",
                         type: "string",
                     },
+                    totpInfo: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV1TotpInfo" },
                     unobfuscatedPhoneInfo: {
                         description: "Output only. Unobfuscated phone_info.",
                         readOnly: true,
@@ -4859,7 +5039,7 @@ exports.default = {
                         description: "The email associated with the out-of-band code that was used.",
                         type: "string",
                     },
-                    kind: { type: "string" },
+                    kind: { deprecated: true, type: "string" },
                     mfaInfo: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV1MfaEnrollment" },
                     newEmail: { type: "string" },
                     requestType: {
@@ -4874,6 +5054,7 @@ exports.default = {
                             "VERIFY_AND_CHANGE_EMAIL",
                             "REVERT_SECOND_FACTOR_ADDITION",
                         ],
+                        enumDeprecated: [false, false, true, true, false, true, false, false, true],
                         type: "string",
                     },
                 },
@@ -4897,6 +5078,10 @@ exports.default = {
                         description: "The phone number to send the verification code to in E.164 format.",
                         type: "string",
                     },
+                    playIntegrityToken: {
+                        description: "Android only. Used to assert application identity in place of a recaptcha token (and safety_net_token). At least one of (`ios_receipt` and `ios_secret`), `recaptcha_token`, , or `play_integrity_token` must be specified to verify the verification code is being sent on behalf of a real app and not an emulator. A Play Integrity Token can be generated via the [PlayIntegrity API](https://developer.android.com/google/play/integrity) with applying SHA256 to the `phone_number` field as the nonce.",
+                        type: "string",
+                    },
                     recaptchaToken: {
                         description: "Recaptcha token for app verification. At least one of (`ios_receipt` and `ios_secret`), `recaptcha_token`, or `safety_net_token` must be specified to verify the verification code is being sent on behalf of a real app and not an emulator. The recaptcha should be generated by calling getRecaptchaParams and the recaptcha token will be generated on user completion of the recaptcha challenge.",
                         type: "string",
@@ -4925,7 +5110,7 @@ exports.default = {
             GoogleCloudIdentitytoolkitV1SetAccountInfoRequest: {
                 description: "Request message for SetAccountInfo.",
                 properties: {
-                    captchaChallenge: { type: "string" },
+                    captchaChallenge: { deprecated: true, type: "string" },
                     captchaResponse: {
                         description: "The response from reCaptcha challenge. This is required when the system detects possible abuse activities.",
                         type: "string",
@@ -4939,7 +5124,7 @@ exports.default = {
                         description: "JSON formatted custom attributes to be stored in the Identity Platform ID token. Specifying this field requires a Google OAuth 2.0 credential with proper [permissions] (https://cloud.google.com/identity-platform/docs/access-control).",
                         type: "string",
                     },
-                    delegatedProjectNumber: { format: "int64", type: "string" },
+                    delegatedProjectNumber: { deprecated: true, format: "int64", type: "string" },
                     deleteAttribute: {
                         description: "The account's attributes to be deleted.",
                         items: {
@@ -4981,7 +5166,7 @@ exports.default = {
                         description: "A valid Identity Platform ID token. Required when attempting to change user-related information.",
                         type: "string",
                     },
-                    instanceId: { type: "string" },
+                    instanceId: { deprecated: true, type: "string" },
                     lastLoginAt: {
                         description: "The timestamp in milliseconds when the account last logged in.",
                         format: "int64",
@@ -5043,8 +5228,12 @@ exports.default = {
             GoogleCloudIdentitytoolkitV1SetAccountInfoResponse: {
                 description: "Response message for SetAccountInfo",
                 properties: {
-                    displayName: { description: "The account's display name.", type: "string" },
-                    email: { description: "The account's email address.", type: "string" },
+                    displayName: {
+                        deprecated: true,
+                        description: "The account's display name.",
+                        type: "string",
+                    },
+                    email: { deprecated: true, description: "The account's email address.", type: "string" },
                     emailVerified: {
                         description: "Whether the account's email has been verified.",
                         type: "boolean",
@@ -5058,17 +5247,19 @@ exports.default = {
                         description: "An Identity Platform ID token for the account. This is used for legacy user sign up.",
                         type: "string",
                     },
-                    kind: { type: "string" },
+                    kind: { deprecated: true, type: "string" },
                     localId: { description: "The ID of the authenticated user.", type: "string" },
                     newEmail: {
                         description: "The new email that has been set on the user's account attributes.",
                         type: "string",
                     },
                     passwordHash: {
+                        deprecated: true,
                         description: "Deprecated. No actual password hash is currently returned.",
                         type: "string",
                     },
                     photoUrl: {
+                        deprecated: true,
                         description: "The user's photo URL for the account's profile photo.",
                         type: "string",
                     },
@@ -5087,8 +5278,8 @@ exports.default = {
             GoogleCloudIdentitytoolkitV1SignInWithCustomTokenRequest: {
                 description: "Request message for SignInWithCustomToken.",
                 properties: {
-                    delegatedProjectNumber: { format: "int64", type: "string" },
-                    instanceId: { type: "string" },
+                    delegatedProjectNumber: { deprecated: true, format: "int64", type: "string" },
+                    instanceId: { deprecated: true, type: "string" },
                     returnSecureToken: { description: "Should always be true.", type: "boolean" },
                     tenantId: {
                         description: "The ID of the Identity Platform tenant the user is signing in to. If present, the ID should match the tenant_id in the token.",
@@ -5117,7 +5308,7 @@ exports.default = {
                         description: "Whether the authenticated user was created by this request.",
                         type: "boolean",
                     },
-                    kind: { type: "string" },
+                    kind: { deprecated: true, type: "string" },
                     refreshToken: {
                         description: "An Identity Platform refresh token for the authenticated user.",
                         type: "string",
@@ -5167,7 +5358,7 @@ exports.default = {
                         description: "Whether the authenticated user was created by this request.",
                         type: "boolean",
                     },
-                    kind: { type: "string" },
+                    kind: { deprecated: true, type: "string" },
                     localId: {
                         description: "The ID of the authenticated user. Always present in the response.",
                         type: "string",
@@ -5200,7 +5391,10 @@ exports.default = {
                         description: "A valid ID token for an Identity Platform account. If present, this request will link the Game Center player ID to the account represented by this ID token.",
                         type: "string",
                     },
-                    playerId: { description: "Required. The user's Game Center player ID.", type: "string" },
+                    playerId: {
+                        description: "Required. The user's Game Center player ID. Deprecated by Apple. Pass `playerID` along with `gamePlayerID` and `teamPlayerID` to initiate the migration of a user's Game Center player ID to `gamePlayerID`.",
+                        type: "string",
+                    },
                     publicKeyUrl: {
                         description: "Required. The URL to fetch the Apple public key in order to verify the given signature is signed by Apple.",
                         type: "string",
@@ -5254,7 +5448,10 @@ exports.default = {
                         description: "The ID of the authenticated user. Always present in the response.",
                         type: "string",
                     },
-                    playerId: { description: "The user's Game Center player ID.", type: "string" },
+                    playerId: {
+                        description: "The user's Game Center player ID. Pass `playerID` along with `gamePlayerID` and `teamPlayerID` to initiate the migration of a user's Game Center player ID to `gamePlayerID`.",
+                        type: "string",
+                    },
                     refreshToken: {
                         description: "An Identity Platform refresh token for the authenticated user.",
                         type: "string",
@@ -5269,19 +5466,19 @@ exports.default = {
             GoogleCloudIdentitytoolkitV1SignInWithIdpRequest: {
                 description: "Request message for SignInWithIdp.",
                 properties: {
-                    autoCreate: { type: "boolean" },
-                    delegatedProjectNumber: { format: "int64", type: "string" },
+                    autoCreate: { deprecated: true, type: "boolean" },
+                    delegatedProjectNumber: { deprecated: true, format: "int64", type: "string" },
                     idToken: {
                         description: "A valid Identity Platform ID token. If passed, the user's account at the IdP will be linked to the account represented by this ID token.",
                         type: "string",
                     },
-                    pendingIdToken: { type: "string" },
+                    pendingIdToken: { deprecated: true, type: "string" },
                     pendingToken: {
-                        description: "An opaque string from a previous SignInWithIdp response. If set, it can be used to repeat the sign-in operation from the previous SignInWithIdp operation.",
+                        description: "An opaque string from a previous SignInWithIdp response. If set, it can be used to repeat the sign-in operation from the previous SignInWithIdp operation. This may be present if the user needs to confirm their account information as part of a previous federated login attempt, or perform account linking.",
                         type: "string",
                     },
                     postBody: {
-                        description: "If the user is signing in with an authorization response obtained via a previous CreateAuthUri authorization request, this is the body of the HTTP POST callback from the IdP, if present. Otherwise, if the user is signing in with a manually provided IdP credential, this should be a URL-encoded form that contains the credential (e.g. an ID token or access token for OAuth 2.0 IdPs) and the provider ID of the IdP that issued the credential. For example, if the user is signing in to the Google provider using a Google ID token, this should be set to `id_token=[GOOGLE_ID_TOKEN]&providerId=google.com`, where `[GOOGLE_ID_TOKEN]` should be replaced with the Google ID token. If the user is signing in to the Facebook provider using a Facebook authentication token, this should be set to `id_token=[FACEBOOK_AUTHENTICATION_TOKEN]&providerId=facebook.com&nonce= [NONCE]`, where `[FACEBOOK_AUTHENTICATION_TOKEN]` should be replaced with the Facebook authentication token. Nonce is required for validating the token. The request will fail if no nonce is provided. If the user is signing in to the Facebook provider using a Facebook access token, this should be set to `access_token=[FACEBOOK_ACCESS_TOKEN]&providerId=facebook.com`, where `[FACEBOOK_ACCESS_TOKEN]` should be replaced with the Facebook access token. If the user is signing in to the Twitter provider using a Twitter OAuth 1.0 credential, this should be set to `access_token=[TWITTER_ACCESS_TOKEN]&oauth_token_secret=[TWITTER_TOKEN_SECRET]&providerId=twitter.com`, where `[TWITTER_ACCESS_TOKEN]` and `[TWITTER_TOKEN_SECRET]` should be replaced with the Twitter OAuth access token and Twitter OAuth token secret respectively.",
+                        description: "If the user is signing in with an authorization response obtained via a previous CreateAuthUri authorization request, this is the body of the HTTP POST callback from the IdP, if present. Otherwise, if the user is signing in with a manually provided IdP credential, this should be a URL-encoded form that contains the credential (e.g. an ID token or access token for OAuth 2.0 IdPs) and the provider ID of the IdP that issued the credential. For example, if the user is signing in to the Google provider using a Google ID token, this should be set to id_token`=[GOOGLE_ID_TOKEN]&providerId=google.com`, where `[GOOGLE_ID_TOKEN]` should be replaced with the Google ID token. If the user is signing in to the Facebook provider using a Facebook authentication token, this should be set to id_token`=[FACEBOOK_AUTHENTICATION_TOKEN]&providerId=facebook. com&nonce= [NONCE]`, where `[FACEBOOK_AUTHENTICATION_TOKEN]` should be replaced with the Facebook authentication token. Nonce is required for validating the token. The request will fail if no nonce is provided. If the user is signing in to the Facebook provider using a Facebook access token, this should be set to access_token`=[FACEBOOK_ACCESS_TOKEN]&providerId=facebook. com`, where `[FACEBOOK_ACCESS_TOKEN]` should be replaced with the Facebook access token. If the user is signing in to the Twitter provider using a Twitter OAuth 1.0 credential, this should be set to access_token`=[TWITTER_ACCESS_TOKEN]&oauth_token_secret= [TWITTER_TOKEN_SECRET]&providerId=twitter.com`, where `[TWITTER_ACCESS_TOKEN]` and `[TWITTER_TOKEN_SECRET]` should be replaced with the Twitter OAuth access token and Twitter OAuth token secret respectively.",
                         type: "string",
                     },
                     requestUri: {
@@ -5360,12 +5557,12 @@ exports.default = {
                         description: "An Identity Platform ID token for the authenticated user.",
                         type: "string",
                     },
-                    inputEmail: { type: "string" },
+                    inputEmail: { deprecated: true, type: "string" },
                     isNewUser: {
                         description: "Whether or not a new Identity Platform account was created for the authenticated user.",
                         type: "boolean",
                     },
-                    kind: { type: "string" },
+                    kind: { deprecated: true, type: "string" },
                     language: {
                         description: "The language preference for the user's account at the IdP.",
                         type: "string",
@@ -5391,7 +5588,7 @@ exports.default = {
                         description: 'Whether or not there is an existing Identity Platform user account with the same email address as the current account signed in at the IdP, and the account\'s email addresss is not verified at the IdP. The user will need to sign in to the existing Identity Platform account and then link the current credential from the IdP to it. Only present if the "One account per email address" setting is enabled.',
                         type: "boolean",
                     },
-                    needEmail: { type: "boolean" },
+                    needEmail: { deprecated: true, type: "boolean" },
                     nickName: {
                         description: "The nickname for the user's account at the IdP.",
                         type: "string",
@@ -5468,23 +5665,38 @@ exports.default = {
             GoogleCloudIdentitytoolkitV1SignInWithPasswordRequest: {
                 description: "Request message for SignInWithPassword.",
                 properties: {
-                    captchaChallenge: { type: "string" },
+                    captchaChallenge: { deprecated: true, type: "string" },
                     captchaResponse: {
                         description: "The reCAPTCHA token provided by the reCAPTCHA client-side integration. reCAPTCHA Enterprise uses it for risk assessment. Required when reCAPTCHA Enterprise is enabled.",
                         type: "string",
                     },
-                    delegatedProjectNumber: { format: "int64", type: "string" },
+                    clientType: {
+                        description: "The client type, web, android or ios. Required when reCAPTCHA Enterprise is enabled.",
+                        enum: [
+                            "CLIENT_TYPE_UNSPECIFIED",
+                            "CLIENT_TYPE_WEB",
+                            "CLIENT_TYPE_ANDROID",
+                            "CLIENT_TYPE_IOS",
+                        ],
+                        type: "string",
+                    },
+                    delegatedProjectNumber: { deprecated: true, format: "int64", type: "string" },
                     email: {
                         description: "Required. The email the user is signing in with. The length of email should be less than 256 characters and in the format of `name@domain.tld`. The email should also match the [RFC 822](https://tools.ietf.org/html/rfc822) addr-spec production.",
                         type: "string",
                     },
-                    idToken: { type: "string" },
-                    instanceId: { type: "string" },
+                    idToken: { deprecated: true, type: "string" },
+                    instanceId: { deprecated: true, type: "string" },
                     password: {
                         description: "Required. The password the user provides to sign in to the account.",
                         type: "string",
                     },
-                    pendingIdToken: { type: "string" },
+                    pendingIdToken: { deprecated: true, type: "string" },
+                    recaptchaVersion: {
+                        description: "The reCAPTCHA version of the reCAPTCHA token in the captcha_response.",
+                        enum: ["RECAPTCHA_VERSION_UNSPECIFIED", "RECAPTCHA_ENTERPRISE"],
+                        type: "string",
+                    },
                     returnSecureToken: { description: "Should always be true.", type: "boolean" },
                     tenantId: {
                         description: "The ID of the Identity Platform tenant the user is signing in to. If not set, the user will sign in to the default Identity Platform instance in the project.",
@@ -5513,7 +5725,7 @@ exports.default = {
                         description: "An Identity Platform ID token for the authenticated user.",
                         type: "string",
                     },
-                    kind: { type: "string" },
+                    kind: { deprecated: true, type: "string" },
                     localId: {
                         description: "The ID of the authenticated user. Always present in the response.",
                         type: "string",
@@ -5527,9 +5739,14 @@ exports.default = {
                         description: "An opaque string that functions as proof that the user has successfully passed the first factor authentication.",
                         type: "string",
                     },
-                    oauthAccessToken: { description: "The OAuth2 access token.", type: "string" },
-                    oauthAuthorizationCode: { type: "string" },
+                    oauthAccessToken: {
+                        deprecated: true,
+                        description: "The OAuth2 access token.",
+                        type: "string",
+                    },
+                    oauthAuthorizationCode: { deprecated: true, type: "string" },
                     oauthExpireIn: {
+                        deprecated: true,
                         description: "The access token expiration time in seconds.",
                         format: "int32",
                         type: "integer",
@@ -5543,9 +5760,15 @@ exports.default = {
                         type: "string",
                     },
                     registered: {
+                        deprecated: true,
                         description: "Whether the email is for an existing account. Always true.",
                         type: "boolean",
                     },
+                    userNotifications: {
+                        description: "Warning notifications for the user.",
+                        items: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV1UserNotification" },
+                        type: "array",
+                    },
                 },
                 type: "object",
             },
@@ -5561,6 +5784,7 @@ exports.default = {
                         type: "string",
                     },
                     operation: {
+                        deprecated: true,
                         enum: ["VERIFY_OP_UNSPECIFIED", "SIGN_UP_OR_IN", "REAUTH", "UPDATE", "LINK"],
                         type: "string",
                     },
@@ -5633,11 +5857,21 @@ exports.default = {
             GoogleCloudIdentitytoolkitV1SignUpRequest: {
                 description: "Request message for SignUp.",
                 properties: {
-                    captchaChallenge: { type: "string" },
+                    captchaChallenge: { deprecated: true, type: "string" },
                     captchaResponse: {
                         description: "The reCAPTCHA token provided by the reCAPTCHA client-side integration. reCAPTCHA Enterprise uses it for assessment. Required when reCAPTCHA enterprise is enabled.",
                         type: "string",
                     },
+                    clientType: {
+                        description: "The client type: web, Android or iOS. Required when enabling reCAPTCHA enterprise protection.",
+                        enum: [
+                            "CLIENT_TYPE_UNSPECIFIED",
+                            "CLIENT_TYPE_WEB",
+                            "CLIENT_TYPE_ANDROID",
+                            "CLIENT_TYPE_IOS",
+                        ],
+                        type: "string",
+                    },
                     disabled: {
                         description: "Whether the user will be disabled upon creation. Disabled accounts are inaccessible except for requests bearing a Google OAuth2 credential with proper [permissions](https://cloud.google.com/identity-platform/docs/access-control).",
                         type: "boolean",
@@ -5658,7 +5892,7 @@ exports.default = {
                         description: "A valid ID token for an Identity Platform user. If set, this request will link the authentication credential to the user represented by this ID token. For a non-admin request, both the `email` and `password` fields must be set. For an admin request, `local_id` must not be set.",
                         type: "string",
                     },
-                    instanceId: { type: "string" },
+                    instanceId: { deprecated: true, type: "string" },
                     localId: {
                         description: "The ID of the user to create. The ID must be unique within the project that the user is being created under. Specifying this field requires a Google OAuth 2.0 credential with the proper [permissions](https://cloud.google.com/identity-platform/docs/access-control).",
                         type: "string",
@@ -5677,6 +5911,11 @@ exports.default = {
                         type: "string",
                     },
                     photoUrl: { description: "The profile photo url of the user to create.", type: "string" },
+                    recaptchaVersion: {
+                        description: "The reCAPTCHA version of the reCAPTCHA token in the captcha_response.",
+                        enum: ["RECAPTCHA_VERSION_UNSPECIFIED", "RECAPTCHA_ENTERPRISE"],
+                        type: "string",
+                    },
                     targetProjectId: {
                         description: "The project ID of the project which the user should belong to. Specifying this field requires a Google OAuth 2.0 credential with the proper [permissions](https://cloud.google.com/identity-platform/docs/access-control). If this is not set, the target project is inferred from the scope associated to the Bearer access token.",
                         type: "string",
@@ -5732,6 +5971,11 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitV1TotpInfo: {
+                description: "Information about TOTP MFA.",
+                properties: {},
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitV1UploadAccountRequest: {
                 description: "Request message for UploadAccount.",
                 properties: {
@@ -5752,7 +5996,7 @@ exports.default = {
                         format: "int32",
                         type: "integer",
                     },
-                    delegatedProjectNumber: { format: "int64", type: "string" },
+                    delegatedProjectNumber: { deprecated: true, format: "int64", type: "string" },
                     dkLen: {
                         description: "The desired key length for the STANDARD_SCRYPT hashing function. Must be at least 1.",
                         format: "int32",
@@ -5816,7 +6060,7 @@ exports.default = {
                         items: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV1ErrorInfo" },
                         type: "array",
                     },
-                    kind: { type: "string" },
+                    kind: { deprecated: true, type: "string" },
                 },
                 type: "object",
             },
@@ -5944,6 +6188,29 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitV1UserNotification: {
+                description: "Warning notifications for the user.",
+                properties: {
+                    notificationCode: {
+                        description: "Warning notification enum. Can be used for localization.",
+                        enum: [
+                            "NOTIFICATION_CODE_UNSPECIFIED",
+                            "MISSING_LOWERCASE_CHARACTER",
+                            "MISSING_UPPERCASE_CHARACTER",
+                            "MISSING_NUMERIC_CHARACTER",
+                            "MISSING_NON_ALPHANUMERIC_CHARACTER",
+                            "MINIMUM_PASSWORD_LENGTH",
+                            "MAXIMUM_PASSWORD_LENGTH",
+                        ],
+                        type: "string",
+                    },
+                    notificationMessage: {
+                        description: "Warning notification string. Can be used as fallback.",
+                        type: "string",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitV1VerifyIosClientRequest: {
                 description: "Request message for VerifyIosClient",
                 properties: {
@@ -6122,7 +6389,13 @@ exports.default = {
                     notification: {
                         $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2NotificationConfig",
                     },
+                    passwordPolicyConfig: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2PasswordPolicyConfig",
+                    },
                     quota: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2QuotaConfig" },
+                    recaptchaConfig: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2RecaptchaConfig",
+                    },
                     signIn: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2SignInConfig" },
                     smsRegionConfig: {
                         $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2SmsRegionConfig",
@@ -6136,6 +6409,38 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitAdminV2CustomStrengthOptions: {
+                description: "Custom strength options to enforce on user passwords.",
+                properties: {
+                    containsLowercaseCharacter: {
+                        description: "The password must contain a lower case character.",
+                        type: "boolean",
+                    },
+                    containsNonAlphanumericCharacter: {
+                        description: "The password must contain a non alpha numeric character.",
+                        type: "boolean",
+                    },
+                    containsNumericCharacter: {
+                        description: "The password must contain a number.",
+                        type: "boolean",
+                    },
+                    containsUppercaseCharacter: {
+                        description: "The password must contain an upper case character.",
+                        type: "boolean",
+                    },
+                    maxPasswordLength: {
+                        description: "Maximum password length. No default max length",
+                        format: "int32",
+                        type: "integer",
+                    },
+                    minPasswordLength: {
+                        description: "Minimum password length. Range from 6 to 30",
+                        format: "int32",
+                        type: "integer",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitAdminV2DefaultSupportedIdp: {
                 description: "Standard Identity Toolkit-trusted IDPs.",
                 properties: {
@@ -6470,6 +6775,11 @@ exports.default = {
                         items: { enum: ["PROVIDER_UNSPECIFIED", "PHONE_SMS"], type: "string" },
                         type: "array",
                     },
+                    providerConfigs: {
+                        description: "A list of usable second factors for this project along with their configurations. This field does not support phone based MFA, for that use the 'enabled_providers' field.",
+                        items: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2ProviderConfig" },
+                        type: "array",
+                    },
                     state: {
                         description: "Whether MultiFactor Authentication has been enabled for this project.",
                         enum: ["STATE_UNSPECIFIED", "DISABLED", "ENABLED", "MANDATORY"],
@@ -6543,12 +6853,56 @@ exports.default = {
                         type: "boolean",
                     },
                     token: {
+                        deprecated: true,
                         description: "Do not use. The `token` response type is not supported at the moment.",
                         type: "boolean",
                     },
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitAdminV2PasswordPolicyConfig: {
+                description: "The configuration for the password policy on the project.",
+                properties: {
+                    forceUpgradeOnSignin: {
+                        description: "Users must have a password compliant with the password policy to sign-in.",
+                        type: "boolean",
+                    },
+                    lastUpdateTime: {
+                        description: "Output only. The last time the password policy on the project was updated.",
+                        format: "google-datetime",
+                        readOnly: true,
+                        type: "string",
+                    },
+                    passwordPolicyEnforcementState: {
+                        description: "Which enforcement mode to use for the password policy.",
+                        enum: ["PASSWORD_POLICY_ENFORCEMENT_STATE_UNSPECIFIED", "OFF", "ENFORCE"],
+                        type: "string",
+                    },
+                    passwordPolicyVersions: {
+                        description: "Must be of length 1. Contains the strength attributes for the password policy.",
+                        items: {
+                            $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2PasswordPolicyVersion",
+                        },
+                        type: "array",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2PasswordPolicyVersion: {
+                description: "The strength attributes for the password policy on the project.",
+                properties: {
+                    customStrengthOptions: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2CustomStrengthOptions",
+                    },
+                    schemaVersion: {
+                        description: "Output only. schema version number for the password policy",
+                        format: "int32",
+                        readOnly: true,
+                        type: "integer",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitAdminV2Permissions: {
                 description: "Configuration related to restricting a user's ability to affect their account.",
                 properties: {
@@ -6578,6 +6932,20 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitAdminV2ProviderConfig: {
+                description: "ProviderConfig describes the supported MFA providers along with their configurations.",
+                properties: {
+                    state: {
+                        description: "Describes the state of the MultiFactor Authentication type.",
+                        enum: ["MFA_STATE_UNSPECIFIED", "DISABLED", "ENABLED", "MANDATORY"],
+                        type: "string",
+                    },
+                    totpProviderConfig: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2TotpMfaProviderConfig",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitAdminV2QuotaConfig: {
                 description: "Configuration related to quotas.",
                 properties: {
@@ -6587,6 +6955,65 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitAdminV2RecaptchaConfig: {
+                description: "The reCAPTCHA Enterprise integration config.",
+                properties: {
+                    emailPasswordEnforcementState: {
+                        description: "The reCAPTCHA config for email/password provider, containing the enforcement status. The email/password provider contains all related user flows protected by reCAPTCHA.",
+                        enum: ["RECAPTCHA_PROVIDER_ENFORCEMENT_STATE_UNSPECIFIED", "OFF", "AUDIT", "ENFORCE"],
+                        type: "string",
+                    },
+                    managedRules: {
+                        description: "The managed rules for authentication action based on reCAPTCHA scores. The rules are shared across providers for a given tenant project.",
+                        items: {
+                            $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2RecaptchaManagedRule",
+                        },
+                        type: "array",
+                    },
+                    recaptchaKeys: {
+                        description: "Output only. The reCAPTCHA keys.",
+                        items: { $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2RecaptchaKey" },
+                        readOnly: true,
+                        type: "array",
+                    },
+                    useAccountDefender: {
+                        description: "Whether to use the account defender for reCAPTCHA assessment. Defaults to `false`.",
+                        type: "boolean",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2RecaptchaKey: {
+                description: "The reCAPTCHA key config. reCAPTCHA Enterprise offers different keys for different client platforms.",
+                properties: {
+                    key: {
+                        description: 'The reCAPTCHA Enterprise key resource name, e.g. "projects/{project}/keys/{key}"',
+                        type: "string",
+                    },
+                    type: {
+                        description: "The client's platform type.",
+                        enum: ["CLIENT_TYPE_UNSPECIFIED", "WEB", "IOS", "ANDROID"],
+                        type: "string",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitAdminV2RecaptchaManagedRule: {
+                description: "The config for a reCAPTCHA managed rule. Models a single interval [start_score, end_score]. The start_score is implicit. It is either the closest smaller end_score (if one is available) or 0. Intervals in aggregate span [0, 1] without overlapping.",
+                properties: {
+                    action: {
+                        description: "The action taken if the reCAPTCHA score of a request is within the interval [start_score, end_score].",
+                        enum: ["RECAPTCHA_ACTION_UNSPECIFIED", "BLOCK"],
+                        type: "string",
+                    },
+                    endScore: {
+                        description: "The end score (inclusive) of the score range for an action. Must be a value between 0.0 and 1.0, at 11 discrete values; e.g. 0, 0.1, 0.2, 0.3, ... 0.9, 1.0. A score of 0.0 indicates the riskiest request (likely a bot), whereas 1.0 indicates the safest request (likely a human). See https://cloud.google.com/recaptcha-enterprise/docs/interpret-assessment.",
+                        format: "float",
+                        type: "number",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitAdminV2RequestLogging: {
                 description: "Configuration for logging requests made to this project to Stackdriver Logging",
                 properties: {
@@ -6789,6 +7216,12 @@ exports.default = {
                         readOnly: true,
                         type: "string",
                     },
+                    passwordPolicyConfig: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2PasswordPolicyConfig",
+                    },
+                    recaptchaConfig: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2RecaptchaConfig",
+                    },
                     smsRegionConfig: {
                         $ref: "#/components/schemas/GoogleCloudIdentitytoolkitAdminV2SmsRegionConfig",
                     },
@@ -6800,6 +7233,17 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitAdminV2TotpMfaProviderConfig: {
+                description: "TotpMFAProviderConfig represents the TOTP based MFA provider.",
+                properties: {
+                    adjacentIntervals: {
+                        description: "The allowed number of adjacent intervals that will be used for verification to avoid clock skew.",
+                        format: "int32",
+                        type: "integer",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitAdminV2Trigger: {
                 description: "Synchronous Cloud Function with HTTP Trigger",
                 properties: {
@@ -6822,6 +7266,38 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitV2CustomStrengthOptions: {
+                description: "Custom strength options to enforce on user passwords.",
+                properties: {
+                    containsLowercaseCharacter: {
+                        description: "The password must contain a lower case character.",
+                        type: "boolean",
+                    },
+                    containsNonAlphanumericCharacter: {
+                        description: "The password must contain a non alpha numeric character.",
+                        type: "boolean",
+                    },
+                    containsNumericCharacter: {
+                        description: "The password must contain a number.",
+                        type: "boolean",
+                    },
+                    containsUppercaseCharacter: {
+                        description: "The password must contain an upper case character.",
+                        type: "boolean",
+                    },
+                    maxPasswordLength: {
+                        description: "Maximum password length. No default max length",
+                        format: "int32",
+                        type: "integer",
+                    },
+                    minPasswordLength: {
+                        description: "Minimum password length. Range from 6 to 30",
+                        format: "int32",
+                        type: "integer",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitV2FinalizeMfaEnrollmentRequest: {
                 description: "Finishes enrolling a second factor for the user.",
                 properties: {
@@ -6837,6 +7313,9 @@ exports.default = {
                         description: "The ID of the Identity Platform tenant that the user enrolling MFA belongs to. If not set, the user belongs to the default Identity Platform project.",
                         type: "string",
                     },
+                    totpVerificationInfo: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2FinalizeMfaTotpEnrollmentRequestInfo",
+                    },
                 },
                 type: "object",
             },
@@ -6851,6 +7330,9 @@ exports.default = {
                         description: "Refresh token updated to reflect MFA enrollment.",
                         type: "string",
                     },
+                    totpAuthInfo: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2FinalizeMfaTotpEnrollmentResponseInfo",
+                    },
                 },
                 type: "object",
             },
@@ -6892,6 +7374,10 @@ exports.default = {
             GoogleCloudIdentitytoolkitV2FinalizeMfaSignInRequest: {
                 description: "Finalizes sign-in by verifying MFA challenge.",
                 properties: {
+                    mfaEnrollmentId: {
+                        description: "The MFA enrollment ID from the user's list of current MFA enrollments.",
+                        type: "string",
+                    },
                     mfaPendingCredential: {
                         description: "Required. Pending credential from first factor sign-in.",
                         type: "string",
@@ -6903,6 +7389,9 @@ exports.default = {
                         description: "The ID of the Identity Platform tenant the user is signing in to. If not set, the user will sign in to the default Identity Platform project.",
                         type: "string",
                     },
+                    totpVerificationInfo: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2MfaTotpSignInRequestInfo",
+                    },
                 },
                 type: "object",
             },
@@ -6920,6 +7409,129 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitV2FinalizeMfaTotpEnrollmentRequestInfo: {
+                description: "Mfa request info specific to TOTP auth for FinalizeMfa.",
+                properties: {
+                    sessionInfo: {
+                        description: "An opaque string that represents the enrollment session.",
+                        type: "string",
+                    },
+                    verificationCode: { description: "User-entered verification code.", type: "string" },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitV2FinalizeMfaTotpEnrollmentResponseInfo: {
+                description: "Mfa response info specific to TOTP auth for FinalizeMfa.",
+                properties: {},
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitV2MfaTotpSignInRequestInfo: {
+                description: "TOTP verification info for FinalizeMfaSignInRequest.",
+                properties: {
+                    verificationCode: { description: "User-entered verification code.", type: "string" },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitV2PasswordPolicy: {
+                description: "Configuration for password policy.",
+                properties: {
+                    allowedNonAlphanumericCharacters: {
+                        description: "Output only. Allowed characters which satisfy the non_alphanumeric requirement.",
+                        items: { type: "string" },
+                        readOnly: true,
+                        type: "array",
+                    },
+                    customStrengthOptions: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2CustomStrengthOptions",
+                    },
+                    enforcementState: {
+                        description: "Output only. Which enforcement mode to use for the password policy.",
+                        enum: ["ENFORCEMENT_STATE_UNSPECIFIED", "OFF", "ENFORCE"],
+                        readOnly: true,
+                        type: "string",
+                    },
+                    forceUpgradeOnSignin: {
+                        description: "Users must have a password compliant with the password policy to sign-in.",
+                        type: "boolean",
+                    },
+                    schemaVersion: {
+                        description: "Output only. schema version number for the password policy",
+                        format: "int32",
+                        readOnly: true,
+                        type: "integer",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitV2RecaptchaConfig: {
+                description: "Configuration for reCAPTCHA",
+                properties: {
+                    recaptchaEnforcementState: {
+                        description: "The reCAPTCHA enforcement state for the providers that GCIP supports reCAPTCHA protection.",
+                        items: {
+                            $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2RecaptchaEnforcementState",
+                        },
+                        type: "array",
+                    },
+                    recaptchaKey: {
+                        description: 'The reCAPTCHA Enterprise key resource name, e.g. "projects/{project}/keys/{key}". This will only be returned when the reCAPTCHA enforcement state is AUDIT or ENFORCE on at least one of the reCAPTCHA providers.',
+                        type: "string",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitV2RecaptchaEnforcementState: {
+                description: "Enforcement states for reCAPTCHA protection.",
+                properties: {
+                    enforcementState: {
+                        description: "The reCAPTCHA enforcement state for the provider.",
+                        enum: ["ENFORCEMENT_STATE_UNSPECIFIED", "OFF", "AUDIT", "ENFORCE"],
+                        type: "string",
+                    },
+                    provider: {
+                        description: "The provider that has reCAPTCHA protection.",
+                        enum: ["RECAPTCHA_PROVIDER_UNSPECIFIED", "EMAIL_PASSWORD_PROVIDER"],
+                        type: "string",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitV2RevokeTokenRequest: {
+                description: "Request message for RevokeToken.",
+                properties: {
+                    idToken: {
+                        description: "Required. A valid Identity Platform ID token to link the account. If there was a successful token revocation request on the account and no tokens are generated after the revocation, the duplicate requests will be ignored and returned immediately.",
+                        type: "string",
+                    },
+                    providerId: {
+                        description: 'Required. The idp provider for the token. Currently only supports Apple Idp. The format should be "apple.com".',
+                        type: "string",
+                    },
+                    redirectUri: {
+                        description: "The redirect URI provided in the initial authorization request made by the client to the IDP. The URI must use the HTTPS protocol, include a domain name, and can't contain an IP address or localhost. Required if token_type is CODE.",
+                        type: "string",
+                    },
+                    tenantId: {
+                        description: "The ID of the Identity Platform tenant the user is signing in to. If not set, the user will sign in to the default Identity Platform project.",
+                        type: "string",
+                    },
+                    token: {
+                        description: "Required. The token to be revoked. If an authorization_code is passed in, the API will first exchange the code for access token and then revoke the token exchanged.",
+                        type: "string",
+                    },
+                    tokenType: {
+                        description: "Required. The type of the token to be revoked.",
+                        enum: ["TOKEN_TYPE_UNSPECIFIED", "REFRESH_TOKEN", "ACCESS_TOKEN", "CODE"],
+                        type: "string",
+                    },
+                },
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitV2RevokeTokenResponse: {
+                description: "Response message for RevokeToken. Empty for now.",
+                properties: {},
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitV2StartMfaEnrollmentRequest: {
                 description: "Sends MFA enrollment verification SMS for a user.",
                 properties: {
@@ -6931,6 +7543,9 @@ exports.default = {
                         description: "The ID of the Identity Platform tenant that the user enrolling MFA belongs to. If not set, the user belongs to the default Identity Platform project.",
                         type: "string",
                     },
+                    totpEnrollmentInfo: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2StartMfaTotpEnrollmentRequestInfo",
+                    },
                 },
                 type: "object",
             },
@@ -6940,6 +7555,9 @@ exports.default = {
                     phoneSessionInfo: {
                         $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2StartMfaPhoneResponseInfo",
                     },
+                    totpSessionInfo: {
+                        $ref: "#/components/schemas/GoogleCloudIdentitytoolkitV2StartMfaTotpEnrollmentResponseInfo",
+                    },
                 },
                 type: "object",
             },
@@ -6961,6 +7579,10 @@ exports.default = {
                         description: "Required for enrollment. Phone number to be enrolled as MFA.",
                         type: "string",
                     },
+                    playIntegrityToken: {
+                        description: "Android only. Used to assert application identity in place of a recaptcha token (or safety net token). A Play Integrity Token can be generated via the [PlayIntegrity API] (https://developer.android.com/google/play/integrity) with applying SHA256 to the `phone_number` field as the nonce.",
+                        type: "string",
+                    },
                     recaptchaToken: { description: "Web only. Recaptcha solution.", type: "string" },
                     safetyNetToken: {
                         description: "Android only. Used to assert application identity in place of a recaptcha token. A SafetyNet Token can be generated via the [SafetyNet Android Attestation API](https://developer.android.com/training/safetynet/attestation.html), with the Base64 encoding of the `phone_number` field as the nonce.",
@@ -7009,6 +7631,44 @@ exports.default = {
                 },
                 type: "object",
             },
+            GoogleCloudIdentitytoolkitV2StartMfaTotpEnrollmentRequestInfo: {
+                description: "Mfa request info specific to TOTP auth for StartMfa.",
+                properties: {},
+                type: "object",
+            },
+            GoogleCloudIdentitytoolkitV2StartMfaTotpEnrollmentResponseInfo: {
+                description: "Mfa response info specific to TOTP auth for StartMfa.",
+                properties: {
+                    finalizeEnrollmentTime: {
+                        description: "The time by which the enrollment must finish.",
+                        format: "google-datetime",
+                        type: "string",
+                    },
+                    hashingAlgorithm: {
+                        description: "The hashing algorithm used to generate the verification code.",
+                        type: "string",
+                    },
+                    periodSec: {
+                        description: "Duration in seconds at which the verification code will change.",
+                        format: "int32",
+                        type: "integer",
+                    },
+                    sessionInfo: {
+                        description: "An encoded string that represents the enrollment session.",
+                        type: "string",
+                    },
+                    sharedSecretKey: {
+                        description: "A base 32 encoded string that represents the shared TOTP secret. The base 32 encoding is the one specified by [RFC4648#section-6](https://datatracker.ietf.org/doc/html/rfc4648#section-6). (This is the same as the base 32 encoding from [RFC3548#section-5](https://datatracker.ietf.org/doc/html/rfc3548#section-5).)",
+                        type: "string",
+                    },
+                    verificationCodeLength: {
+                        description: "The length of the verification code that needs to be generated.",
+                        format: "int32",
+                        type: "integer",
+                    },
+                },
+                type: "object",
+            },
             GoogleCloudIdentitytoolkitV2WithdrawMfaRequest: {
                 description: "Withdraws MFA.",
                 properties: {
@@ -7191,6 +7851,7 @@ exports.default = {
             GrantTokenRequest: {
                 properties: {
                     code: {
+                        deprecated: true,
                         description: "ID token to exchange for an access token and a refresh token. This field is called `code` to conform with the OAuth 2.0 specification. This field is deprecated and is ignored.",
                         type: "string",
                     },