google-api-python-client 2.149.0__py2.py3-none-any.whl → 2.151.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/healthcare.v1.json

@@ -4783,7 +4783,7 @@
 }
 }
 },
-"revision": "20240910",
+"revision": "20241017",
 "rootUrl": "https://healthcare.googleapis.com/",
 "schemas": {
 "ActivateConsentRequest": {
@@ -5413,7 +5413,7 @@
 "description": "The configuration to use when de-identifying resources that are added to this store."
 },
 "store": {
-"description": "The full resource name of a Cloud Healthcare FHIR store, for example, `projects/{project_id}/locations/{location_id}/datasets/{dataset_id}/fhirStores/{fhir_store_id}`.",
+"description": "Optional. The full resource name of a Cloud Healthcare FHIR store, for example, `projects/{project_id}/locations/{location_id}/datasets/{dataset_id}/fhirStores/{fhir_store_id}`.",
 "type": "string"
 }
 },
@@ -5982,7 +5982,7 @@
 "id": "FhirStore",
 "properties": {
 "complexDataTypeReferenceParsing": {
-"description": "Enable parsing of references within complex FHIR data types such as Extensions. If this value is set to ENABLED, then features like referential integrity and Bundle reference rewriting apply to all references. If this flag has not been specified the behavior of the FHIR store will not change, references in complex data types will not be parsed. New stores will have this value set to ENABLED after a notification period. Warning: turning on this flag causes processing existing resources to fail if they contain references to non-existent resources.",
+"description": "Optional. Enable parsing of references within complex FHIR data types such as Extensions. If this value is set to ENABLED, then features like referential integrity and Bundle reference rewriting apply to all references. If this flag has not been specified the behavior of the FHIR store will not change, references in complex data types will not be parsed. New stores will have this value set to ENABLED after a notification period. Warning: turning on this flag causes processing existing resources to fail if they contain references to non-existent resources.",
 "enum": [
 "COMPLEX_DATA_TYPE_REFERENCE_PARSING_UNSPECIFIED",
 "DISABLED",
@@ -6043,7 +6043,7 @@
 },
 "validationConfig": {
 "$ref": "ValidationConfig",
-"description": "Configuration for how to validate incoming FHIR resources against configured profiles."
+"description": "Optional. Configuration for how to validate incoming FHIR resources against configured profiles."
 },
 "version": {
 "description": "Required. Immutable. The FHIR specification version that this FHIR store supports natively. This field is immutable after store creation. Requests are rejected if they contain FHIR resources of a different version. Version is required for every FHIR store.",
@@ -6262,15 +6262,15 @@
 "id": "GoogleCloudHealthcareV1DicomBigQueryDestination",
 "properties": {
 "force": {
-"description": "Use `write_disposition` instead. If `write_disposition` is specified, this parameter is ignored. force=false is equivalent to write_disposition=WRITE_EMPTY and force=true is equivalent to write_disposition=WRITE_TRUNCATE.",
+"description": "Optional. Use `write_disposition` instead. If `write_disposition` is specified, this parameter is ignored. force=false is equivalent to write_disposition=WRITE_EMPTY and force=true is equivalent to write_disposition=WRITE_TRUNCATE.",
 "type": "boolean"
 },
 "tableUri": {
-"description": "BigQuery URI to a table, up to 2000 characters long, in the format `bq://projectId.bqDatasetId.tableId`",
+"description": "Optional. BigQuery URI to a table, up to 2000 characters long, in the format `bq://projectId.bqDatasetId.tableId`",
 "type": "string"
 },
 "writeDisposition": {
-"description": "Determines whether the existing table in the destination is to be overwritten or appended to. If a write_disposition is specified, the `force` parameter is ignored.",
+"description": "Optional. Determines whether the existing table in the destination is to be overwritten or appended to. If a write_disposition is specified, the `force` parameter is ignored.",
 "enum": [
 "WRITE_DISPOSITION_UNSPECIFIED",
 "WRITE_EMPTY",
@@ -7185,7 +7185,7 @@
 "description": "Optional. Schemas used to parse messages in this store, if schematized parsing is desired."
 },
 "segmentTerminator": {
-"description": "Byte(s) to use as the segment terminator. If this is unset, '\\r' is used as segment terminator, matching the HL7 version 2 specification.",
+"description": "Optional. Byte(s) to use as the segment terminator. If this is unset, '\\r' is used as segment terminator, matching the HL7 version 2 specification.",
 "format": "byte",
 "type": "string"
 },
@@ -7889,7 +7889,7 @@
 },
 "deidentifiedStoreDestination": {
 "$ref": "DeidentifiedStoreDestination",
-"description": "The destination FHIR store for de-identified resources. After this field is added, all subsequent creates/updates/patches to the source store will be de-identified using the provided configuration and applied to the destination store. Importing resources to the source store will not trigger the streaming. If the source store already contains resources when this option is enabled, those resources will not be copied to the destination store unless they are subsequently updated. This may result in invalid references in the destination store. Before adding this config, you must grant the healthcare.fhirResources.update permission on the destination store to your project's **Cloud Healthcare Service Agent** [service account](https://cloud.google.com/healthcare/docs/how-tos/permissions-healthcare-api-gcp-products#the_cloud_healthcare_service_agent). The destination store must set enable_update_create to true. The destination store must have disable_referential_integrity set to true. If a resource cannot be de-identified, errors will be logged to Cloud Logging (see [Viewing error logs in Cloud Logging](https://cloud.google.com/healthcare/docs/how-tos/logging))."
+"description": "The destination FHIR store for de-identified resources. After this field is added, all subsequent creates/updates/patches to the source store will be de-identified using the provided configuration and applied to the destination store. Resources deleted from the source store will be deleted from the destination store. Importing resources to the source store will not trigger the streaming. If the source store already contains resources when this option is enabled, those resources will not be copied to the destination store unless they are subsequently updated. This may result in invalid references in the destination store. Before adding this config, you must grant the healthcare.fhirResources.update permission on the destination store to your project's **Cloud Healthcare Service Agent** [service account](https://cloud.google.com/healthcare/docs/how-tos/permissions-healthcare-api-gcp-products#the_cloud_healthcare_service_agent). The destination store must set enable_update_create to true. The destination store must have disable_referential_integrity set to true. If a resource cannot be de-identified, errors will be logged to Cloud Logging (see [Viewing error logs in Cloud Logging](https://cloud.google.com/healthcare/docs/how-tos/logging))."
 },
 "resourceTypes": {
 "description": "Optional. Supply a FHIR resource type (such as \"Patient\" or \"Observation\"). See https://www.hl7.org/fhir/valueset-resource-types.html for a list of all FHIR resource types. The server treats an empty list as an intent to stream all the supported resource types in this FHIR store.",
@@ -8135,23 +8135,23 @@
 "id": "ValidationConfig",
 "properties": {
 "disableFhirpathValidation": {
-"description": "Whether to disable FHIRPath validation for incoming resources. The default value is false. Set this to true to disable checking incoming resources for conformance against FHIRPath requirement defined in the FHIR specification. This property only affects resource types that do not have profiles configured for them, any rules in enabled implementation guides will still be enforced.",
+"description": "Optional. Whether to disable FHIRPath validation for incoming resources. The default value is false. Set this to true to disable checking incoming resources for conformance against FHIRPath requirement defined in the FHIR specification. This property only affects resource types that do not have profiles configured for them, any rules in enabled implementation guides will still be enforced.",
 "type": "boolean"
 },
 "disableProfileValidation": {
-"description": "Whether to disable profile validation for this FHIR store. The default value is false. Set this to true to disable checking incoming resources for conformance against structure definitions in this FHIR store.",
+"description": "Optional. Whether to disable profile validation for this FHIR store. The default value is false. Set this to true to disable checking incoming resources for conformance against structure definitions in this FHIR store.",
 "type": "boolean"
 },
 "disableReferenceTypeValidation": {
-"description": "Whether to disable reference type validation for incoming resources. The default value is false. Set this to true to disable checking incoming resources for conformance against reference type requirement defined in the FHIR specification. This property only affects resource types that do not have profiles configured for them, any rules in enabled implementation guides will still be enforced.",
+"description": "Optional. Whether to disable reference type validation for incoming resources. The default value is false. Set this to true to disable checking incoming resources for conformance against reference type requirement defined in the FHIR specification. This property only affects resource types that do not have profiles configured for them, any rules in enabled implementation guides will still be enforced.",
 "type": "boolean"
 },
 "disableRequiredFieldValidation": {
-"description": "Whether to disable required fields validation for incoming resources. The default value is false. Set this to true to disable checking incoming resources for conformance against required fields requirement defined in the FHIR specification. This property only affects resource types that do not have profiles configured for them, any rules in enabled implementation guides will still be enforced.",
+"description": "Optional. Whether to disable required fields validation for incoming resources. The default value is false. Set this to true to disable checking incoming resources for conformance against required fields requirement defined in the FHIR specification. This property only affects resource types that do not have profiles configured for them, any rules in enabled implementation guides will still be enforced.",
 "type": "boolean"
 },
 "enabledImplementationGuides": {
-"description": "A list of implementation guide URLs in this FHIR store that are used to configure the profiles to use for validation. For example, to use the US Core profiles for validation, set `enabled_implementation_guides` to `[\"http://hl7.org/fhir/us/core/ImplementationGuide/ig\"]`. If `enabled_implementation_guides` is empty or omitted, then incoming resources are only required to conform to the base FHIR profiles. Otherwise, a resource must conform to at least one profile listed in the `global` property of one of the enabled ImplementationGuides. The Cloud Healthcare API does not currently enforce all of the rules in a StructureDefinition. The following rules are supported: - min/max - minValue/maxValue - maxLength - type - fixed[x] - pattern[x] on simple types - slicing, when using \"value\" as the discriminator type When a URL cannot be resolved (for example, in a type assertion), the server does not return an error.",
+"description": "Optional. A list of implementation guide URLs in this FHIR store that are used to configure the profiles to use for validation. For example, to use the US Core profiles for validation, set `enabled_implementation_guides` to `[\"http://hl7.org/fhir/us/core/ImplementationGuide/ig\"]`. If `enabled_implementation_guides` is empty or omitted, then incoming resources are only required to conform to the base FHIR profiles. Otherwise, a resource must conform to at least one profile listed in the `global` property of one of the enabled ImplementationGuides. The Cloud Healthcare API does not currently enforce all of the rules in a StructureDefinition. The following rules are supported: - min/max - minValue/maxValue - maxLength - type - fixed[x] - pattern[x] on simple types - slicing, when using \"value\" as the discriminator type When a URL cannot be resolved (for example, in a type assertion), the server does not return an error.",
 "items": {
 "type": "string"
 },

googleapiclient/discovery_cache/documents/healthcare.v1beta1.json

@@ -5858,7 +5858,7 @@
 }
 }
 },
-"revision": "20240822",
+"revision": "20241009",
 "rootUrl": "https://healthcare.googleapis.com/",
 "schemas": {
 "AccessDeterminationLogConfig": {
@@ -10246,7 +10246,7 @@
 },
 "deidentifiedStoreDestination": {
 "$ref": "DeidentifiedStoreDestination",
-"description": "The destination FHIR store for de-identified resources. After this field is added, all subsequent creates/updates/patches to the source store will be de-identified using the provided configuration and applied to the destination store. Importing resources to the source store will not trigger the streaming. If the source store already contains resources when this option is enabled, those resources will not be copied to the destination store unless they are subsequently updated. This may result in invalid references in the destination store. Before adding this config, you must grant the healthcare.fhirResources.update permission on the destination store to your project's **Cloud Healthcare Service Agent** [service account](https://cloud.google.com/healthcare/docs/how-tos/permissions-healthcare-api-gcp-products#the_cloud_healthcare_service_agent). The destination store must set enable_update_create to true. The destination store must have disable_referential_integrity set to true. If a resource cannot be de-identified, errors will be logged to Cloud Logging (see [Viewing error logs in Cloud Logging](https://cloud.google.com/healthcare/docs/how-tos/logging))."
+"description": "The destination FHIR store for de-identified resources. After this field is added, all subsequent creates/updates/patches to the source store will be de-identified using the provided configuration and applied to the destination store. Resources deleted from the source store will be deleted from the destination store. Importing resources to the source store will not trigger the streaming. If the source store already contains resources when this option is enabled, those resources will not be copied to the destination store unless they are subsequently updated. This may result in invalid references in the destination store. Before adding this config, you must grant the healthcare.fhirResources.update permission on the destination store to your project's **Cloud Healthcare Service Agent** [service account](https://cloud.google.com/healthcare/docs/how-tos/permissions-healthcare-api-gcp-products#the_cloud_healthcare_service_agent). The destination store must set enable_update_create to true. The destination store must have disable_referential_integrity set to true. If a resource cannot be de-identified, errors will be logged to Cloud Logging (see [Viewing error logs in Cloud Logging](https://cloud.google.com/healthcare/docs/how-tos/logging))."
 },
 "resourceTypes": {
 "description": "Supply a FHIR resource type (such as \"Patient\" or \"Observation\"). See https://www.hl7.org/fhir/valueset-resource-types.html for a list of all FHIR resource types. The server treats an empty list as an intent to stream all the supported resource types in this FHIR store.",

googleapiclient/discovery_cache/documents/iam.v1.json

@@ -159,14 +159,14 @@
 ],
 "parameters": {
 "location": {
-"description": "The location of the pool to create. Format: `locations/{location}`.",
+"description": "Optional. The location of the pool to create. Format: `locations/{location}`.",
 "location": "path",
 "pattern": "^locations/[^/]+$",
 "required": true,
 "type": "string"
 },
 "workforcePoolId": {
-"description": "The ID to use for the pool, which becomes the final component of the resource name. The IDs must be a globally unique string of 6 to 63 lowercase letters, digits, or hyphens. It must start with a letter, and cannot have a trailing hyphen. The prefix `gcp-` is reserved for use by Google, and may not be specified.",
+"description": "Optional. The ID to use for the pool, which becomes the final component of the resource name. The IDs must be a globally unique string of 6 to 63 lowercase letters, digits, or hyphens. It must start with a letter, and cannot have a trailing hyphen. The prefix `gcp-` is reserved for use by Google, and may not be specified.",
 "location": "query",
 "type": "string"
 }
@@ -3188,7 +3188,7 @@
 }
 }
 },
-"revision": "20240918",
+"revision": "20241028",
 "rootUrl": "https://iam.googleapis.com/",
 "schemas": {
 "AccessRestrictions": {
@@ -3599,14 +3599,14 @@
 },
 "clientSecret": {
 "$ref": "GoogleIamAdminV1WorkforcePoolProviderOidcClientSecret",
-"description": "The optional client secret. Required to enable Authorization Code flow for web sign-in."
+"description": "Optional. The optional client secret. Required to enable Authorization Code flow for web sign-in."
 },
 "issuerUri": {
 "description": "Required. The OIDC issuer URI. Must be a valid URI using the `https` scheme.",
 "type": "string"
 },
 "jwksJson": {
-"description": "OIDC JWKs in JSON String format. For details on the definition of a JWK, see https://tools.ietf.org/html/rfc7517. If not set, the `jwks_uri` from the discovery document(fetched from the .well-known path of the `issuer_uri`) will be used. Currently, RSA and EC asymmetric keys are supported. The JWK must use following format and include only the following fields: { \"keys\": [ { \"kty\": \"RSA/EC\", \"alg\": \"\", \"use\": \"sig\", \"kid\": \"\", \"n\": \"\", \"e\": \"\", \"x\": \"\", \"y\": \"\", \"crv\": \"\" } ] }",
+"description": "Optional. OIDC JWKs in JSON String format. For details on the definition of a JWK, see https://tools.ietf.org/html/rfc7517. If not set, the `jwks_uri` from the discovery document(fetched from the .well-known path of the `issuer_uri`) will be used. Currently, RSA and EC asymmetric keys are supported. The JWK must use following format and include only the following fields: { \"keys\": [ { \"kty\": \"RSA/EC\", \"alg\": \"\", \"use\": \"sig\", \"kid\": \"\", \"n\": \"\", \"e\": \"\", \"x\": \"\", \"y\": \"\", \"crv\": \"\" } ] }",
 "type": "string"
 },
 "webSsoConfig": {
@@ -3632,7 +3632,7 @@
 "id": "GoogleIamAdminV1WorkforcePoolProviderOidcClientSecretValue",
 "properties": {
 "plainText": {
-"description": "Input only. The plain text of the client secret value. For security reasons, this field is only used for input and will never be populated in any response.",
+"description": "Optional. Input only. The plain text of the client secret value. For security reasons, this field is only used for input and will never be populated in any response.",
 "type": "string"
 },
 "thumbprint": {
@@ -3648,7 +3648,7 @@
 "id": "GoogleIamAdminV1WorkforcePoolProviderOidcWebSsoConfig",
 "properties": {
 "additionalScopes": {
-"description": "Additional scopes to request for in the OIDC authentication request on top of scopes requested by default. By default, the `openid`, `profile` and `email` scopes that are supported by the identity provider are requested. Each additional scope may be at most 256 characters. A maximum of 10 additional scopes may be configured.",
+"description": "Optional. Additional scopes to request for in the OIDC authentication request on top of scopes requested by default. By default, the `openid`, `profile` and `email` scopes that are supported by the identity provider are requested. Each additional scope may be at most 256 characters. A maximum of 10 additional scopes may be configured.",
 "items": {
 "type": "string"
 },
@@ -4280,7 +4280,7 @@
 "type": "string"
 },
 "description": {
-"description": "A brief description of what this Permission is used for. This permission can ONLY be used in predefined roles.",
+"description": "A brief description of what this Permission is used for.",
 "type": "string"
 },
 "name": {
@@ -4998,15 +4998,15 @@ false
 "description": "Optional. Configure access restrictions on the workforce pool users. This is an optional field. If specified web sign-in can be restricted to given set of services or programmatic sign-in can be disabled for pool users."
 },
 "description": {
-"description": "A user-specified description of the pool. Cannot exceed 256 characters.",
+"description": "Optional. A user-specified description of the pool. Cannot exceed 256 characters.",
 "type": "string"
 },
 "disabled": {
-"description": "Disables the workforce pool. You cannot use a disabled pool to exchange tokens, or use existing tokens to access resources. If the pool is re-enabled, existing tokens grant access again.",
+"description": "Optional. Disables the workforce pool. You cannot use a disabled pool to exchange tokens, or use existing tokens to access resources. If the pool is re-enabled, existing tokens grant access again.",
 "type": "boolean"
 },
 "displayName": {
-"description": "A user-specified display name of the pool in Google Cloud Console. Cannot exceed 32 characters.",
+"description": "Optional. A user-specified display name of the pool in Google Cloud Console. Cannot exceed 32 characters.",
 "type": "string"
 },
 "expireTime": {
@@ -5025,7 +5025,7 @@ false
 "type": "string"
 },
 "sessionDuration": {
-"description": "Duration that the Google Cloud access tokens, console sign-in sessions, and `gcloud` sign-in sessions from this pool are valid. Must be greater than 15 minutes (900s) and less than 12 hours (43200s). If `session_duration` is not configured, minted credentials have a default duration of one hour (3600s). For SAML providers, the lifetime of the token is the minimum of the `session_duration` and the `SessionNotOnOrAfter` claim in the SAML assertion.",
+"description": "Optional. Duration that the Google Cloud access tokens, console sign-in sessions, and `gcloud` sign-in sessions from this pool are valid. Must be greater than 15 minutes (900s) and less than 12 hours (43200s). If `session_duration` is not configured, minted credentials have a default duration of one hour (3600s). For SAML providers, the lifetime of the token is the minimum of the `session_duration` and the `SessionNotOnOrAfter` claim in the SAML assertion.",
 "format": "google-duration",
 "type": "string"
 },
@@ -5052,7 +5052,7 @@ false
 "id": "WorkforcePoolProvider",
 "properties": {
 "attributeCondition": {
-"description": "A [Common Expression Language](https://opensource.google/projects/cel) expression, in plain text, to restrict what otherwise valid authentication credentials issued by the provider should not be accepted. The expression must output a boolean representing whether to allow the federation. The following keywords may be referenced in the expressions: * `assertion`: JSON representing the authentication credential issued by the provider. * `google`: The Google attributes mapped from the assertion in the `attribute_mappings`. `google.profile_photo`, `google.display_name` and `google.posix_username` are not supported. * `attribute`: The custom attributes mapped from the assertion in the `attribute_mappings`. The maximum length of the attribute condition expression is 4096 characters. If unspecified, all valid authentication credentials will be accepted. The following example shows how to only allow credentials with a mapped `google.groups` value of `admins`: ``` \"'admins' in google.groups\" ```",
+"description": "Optional. A [Common Expression Language](https://opensource.google/projects/cel) expression, in plain text, to restrict what otherwise valid authentication credentials issued by the provider should not be accepted. The expression must output a boolean representing whether to allow the federation. The following keywords may be referenced in the expressions: * `assertion`: JSON representing the authentication credential issued by the provider. * `google`: The Google attributes mapped from the assertion in the `attribute_mappings`. `google.profile_photo`, `google.display_name` and `google.posix_username` are not supported. * `attribute`: The custom attributes mapped from the assertion in the `attribute_mappings`. The maximum length of the attribute condition expression is 4096 characters. If unspecified, all valid authentication credentials will be accepted. The following example shows how to only allow credentials with a mapped `google.groups` value of `admins`: ``` \"'admins' in google.groups\" ```",
 "type": "string"
 },
 "attributeMapping": {
@@ -5063,15 +5063,15 @@ false
 "type": "object"
 },
 "description": {
-"description": "A user-specified description of the provider. Cannot exceed 256 characters.",
+"description": "Optional. A user-specified description of the provider. Cannot exceed 256 characters.",
 "type": "string"
 },
 "disabled": {
-"description": "Disables the workforce pool provider. You cannot use a disabled provider to exchange tokens. However, existing tokens still grant access.",
+"description": "Optional. Disables the workforce pool provider. You cannot use a disabled provider to exchange tokens. However, existing tokens still grant access.",
 "type": "boolean"
 },
 "displayName": {
-"description": "A user-specified display name for the provider. Cannot exceed 32 characters.",
+"description": "Optional. A user-specified display name for the provider. Cannot exceed 32 characters.",
 "type": "string"
 },
 "expireTime": {

googleapiclient/discovery_cache/documents/iamcredentials.v1.json

@@ -165,6 +165,28 @@
 "https://www.googleapis.com/auth/cloud-platform"
 ]
 },
+"getAllowedLocations": {
+"description": "Returns the trust boundary info for a given service account.",
+"flatPath": "v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}/allowedLocations",
+"httpMethod": "GET",
+"id": "iamcredentials.projects.serviceAccounts.getAllowedLocations",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. Resource name of service account.",
+"location": "path",
+"pattern": "^projects/[^/]+/serviceAccounts/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+name}/allowedLocations",
+"response": {
+"$ref": "ServiceAccountAllowedLocations"
+}
+},
 "signBlob": {
 "description": "Signs a blob using a service account's system-managed private key.",
 "flatPath": "v1/projects/{projectsId}/serviceAccounts/{serviceAccountsId}:signBlob",
@@ -226,7 +248,7 @@
 }
 }
 },
-"revision": "20240624",
+"revision": "20241024",
 "rootUrl": "https://iamcredentials.googleapis.com/",
 "schemas": {
 "GenerateAccessTokenRequest": {
@@ -300,6 +322,26 @@
 },
 "type": "object"
 },
+"ServiceAccountAllowedLocations": {
+"description": "Represents a list of allowed locations for given service account.",
+"id": "ServiceAccountAllowedLocations",
+"properties": {
+"encodedLocations": {
+"description": "Output only. The hex encoded bitmap of the trust boundary locations",
+"readOnly": true,
+"type": "string"
+},
+"locations": {
+"description": "Output only. The human readable trust boundary locations. For example, [\"us-central1\", \"europe-west1\"]",
+"items": {
+"type": "string"
+},
+"readOnly": true,
+"type": "array"
+}
+},
+"type": "object"
+},
 "SignBlobRequest": {
 "id": "SignBlobRequest",
 "properties": {

googleapiclient/discovery_cache/documents/identitytoolkit.v1.json

@@ -1239,7 +1239,7 @@
 }
 }
 },
-"revision": "20240621",
+"revision": "20241024",
 "rootUrl": "https://identitytoolkit.googleapis.com/",
 "schemas": {
 "GoogleCloudIdentitytoolkitV1Argon2Parameters": {
@@ -2441,15 +2441,35 @@ true
 "type": "object"
 },
 "GoogleCloudIdentitytoolkitV1SendVerificationCodeRequest": {
-"description": "Request message for SendVerificationCode. At least one of (`ios_receipt` and `ios_secret`), `recaptcha_token`, or `safety_net_token` must be specified to verify the verification code is being sent on behalf of a real app and not an emulator.",
+"description": "Request message for SendVerificationCode. 'captcha_response' is required when reCAPTCHA enterprise is enabled, or otherwise at least one of (`ios_receipt` and `ios_secret`), `recaptcha_token`, or `safety_net_token` must be specified to verify the verification code is being sent on behalf of a real app and not an emulator.",
 "id": "GoogleCloudIdentitytoolkitV1SendVerificationCodeRequest",
 "properties": {
 "autoRetrievalInfo": {
 "$ref": "GoogleCloudIdentitytoolkitV1AutoRetrievalInfo",
 "description": "Android only. Used by Google Play Services to identify the app for auto-retrieval."
 },
+"captchaResponse": {
+"description": "Optional. The reCAPTCHA Enterprise token provided by the reCAPTCHA client-side integration. Required when reCAPTCHA enterprise is enabled.",
+"type": "string"
+},
+"clientType": {
+"description": "Optional. The client type, web, android or ios. Required when reCAPTCHA Enterprise is enabled.",
+"enum": [
+"CLIENT_TYPE_UNSPECIFIED",
+"CLIENT_TYPE_WEB",
+"CLIENT_TYPE_ANDROID",
+"CLIENT_TYPE_IOS"
+],
+"enumDescriptions": [
+"Client type is not specified.",
+"Client type is web.",
+"Client type is android.",
+"Client type is ios."
+],
+"type": "string"
+},
 "iosReceipt": {
-"description": "Receipt of successful iOS app token validation. At least one of (`ios_receipt` and `ios_secret`), `recaptcha_token`, or `safety_net_token` must be specified to verify the verification code is being sent on behalf of a real app and not an emulator. This should come from the response of verifyIosClient. If present, the caller should also provide the `ios_secret`, as well as a bundle ID in the `x-ios-bundle-identifier` header, which must match the bundle ID from the verifyIosClient request.",
+"description": "Receipt of successful iOS app token validation. At least one of (`ios_receipt` and `ios_secret`), `recaptcha_token`, or `safety_net_token` must be specified to verify the verification code is being sent on behalf of a real app and not an emulator, if 'captcha_response' is not used (reCAPTCHA enterprise is not enabled). This should come from the response of verifyIosClient. If present, the caller should also provide the `ios_secret`, as well as a bundle ID in the `x-ios-bundle-identifier` header, which must match the bundle ID from the verifyIosClient request.",
 "type": "string"
 },
 "iosSecret": {
@@ -2461,15 +2481,27 @@ true
 "type": "string"
 },
 "playIntegrityToken": {
-"description": "Android only. Used to assert application identity in place of a recaptcha token (and safety_net_token). At least one of (`ios_receipt` and `ios_secret`), `recaptcha_token`, , or `play_integrity_token` must be specified to verify the verification code is being sent on behalf of a real app and not an emulator. A Play Integrity Token can be generated via the [PlayIntegrity API](https://developer.android.com/google/play/integrity) with applying SHA256 to the `phone_number` field as the nonce.",
+"description": "Android only. Used to assert application identity in place of a recaptcha token (and safety_net_token). At least one of (`ios_receipt` and `ios_secret`), `recaptcha_token`, , or `play_integrity_token` must be specified to verify the verification code is being sent on behalf of a real app and not an emulator, if 'captcha_response' is not used (reCAPTCHA enterprise is not enabled). A Play Integrity Token can be generated via the [PlayIntegrity API](https://developer.android.com/google/play/integrity) with applying SHA256 to the `phone_number` field as the nonce.",
 "type": "string"
 },
 "recaptchaToken": {
-"description": "Recaptcha token for app verification. At least one of (`ios_receipt` and `ios_secret`), `recaptcha_token`, or `safety_net_token` must be specified to verify the verification code is being sent on behalf of a real app and not an emulator. The recaptcha should be generated by calling getRecaptchaParams and the recaptcha token will be generated on user completion of the recaptcha challenge.",
+"description": "Recaptcha token for app verification. At least one of (`ios_receipt` and `ios_secret`), `recaptcha_token`, or `safety_net_token` must be specified to verify the verification code is being sent on behalf of a real app and not an emulator, if 'captcha_response' is not used (reCAPTCHA enterprise is not enabled). The recaptcha should be generated by calling getRecaptchaParams and the recaptcha token will be generated on user completion of the recaptcha challenge.",
+"type": "string"
+},
+"recaptchaVersion": {
+"description": "Optional. The reCAPTCHA version of the reCAPTCHA token in the captcha_response. Required when reCAPTCHA Enterprise is enabled.",
+"enum": [
+"RECAPTCHA_VERSION_UNSPECIFIED",
+"RECAPTCHA_ENTERPRISE"
+],
+"enumDescriptions": [
+"The reCAPTCHA version is not specified.",
+"The reCAPTCHA enterprise."
+],
 "type": "string"
 },
 "safetyNetToken": {
-"description": "Android only. Used to assert application identity in place of a recaptcha token. At least one of (`ios_receipt` and `ios_secret`), `recaptcha_token`, or `safety_net_token` must be specified to verify the verification code is being sent on behalf of a real app and not an emulator. A SafetyNet Token can be generated via the [SafetyNet Android Attestation API](https://developer.android.com/training/safetynet/attestation.html), with the Base64 encoding of the `phone_number` field as the nonce.",
+"description": "Android only. Used to assert application identity in place of a recaptcha token. At least one of (`ios_receipt` and `ios_secret`), `recaptcha_token`, or `safety_net_token` must be specified to verify the verification code is being sent on behalf of a real app and not an emulator, if 'captcha_response' is not used (reCAPTCHA enterprise is not enabled). A SafetyNet Token can be generated via the [SafetyNet Android Attestation API](https://developer.android.com/training/safetynet/attestation.html), with the Base64 encoding of the `phone_number` field as the nonce.",
 "type": "string"
 },
 "tenantId": {

googleapiclient/discovery_cache/documents/identitytoolkit.v2.json

@@ -1655,7 +1655,7 @@
 }
 }
 },
-"revision": "20240621",
+"revision": "20241024",
 "rootUrl": "https://identitytoolkit.googleapis.com/",
 "schemas": {
 "GoogleCloudIdentitytoolkitAdminV2AllowByDefault": {
@@ -2616,7 +2616,7 @@
 "id": "GoogleCloudIdentitytoolkitAdminV2RecaptchaConfig",
 "properties": {
 "emailPasswordEnforcementState": {
-"description": "The reCAPTCHA config for email/password provider, containing the enforcement status. The email/password provider contains all related user flows protected by reCAPTCHA.",
+"description": "The reCAPTCHA config for email/password provider, containing the enforcement status. The email/password provider contains all email related user flows protected by reCAPTCHA.",
 "enum": [
 "RECAPTCHA_PROVIDER_ENFORCEMENT_STATE_UNSPECIFIED",
 "OFF",
@@ -2638,6 +2638,22 @@
 },
 "type": "array"
 },
+"phoneEnforcementState": {
+"description": "The reCAPTCHA config for phone provider, containing the enforcement status. The phone provider contains all SMS related user flows protected by reCAPTCHA.",
+"enum": [
+"RECAPTCHA_PROVIDER_ENFORCEMENT_STATE_UNSPECIFIED",
+"OFF",
+"AUDIT",
+"ENFORCE"
+],
+"enumDescriptions": [
+"Enforcement state has not been set.",
+"Unenforced.",
+"reCAPTCHA assessment is created, result is not used to enforce.",
+"reCAPTCHA assessment is created, result is used to enforce."
+],
+"type": "string"
+},
 "recaptchaKeys": {
 "description": "The reCAPTCHA keys.",
 "items": {
@@ -2645,9 +2661,24 @@
 },
 "type": "array"
 },
+"tollFraudManagedRules": {
+"description": "The managed rules for the authentication action based on reCAPTCHA toll fraud risk scores. Toll fraud managed rules will only take effect when the phone_enforcement_state is AUDIT or ENFORCE and use_sms_toll_fraud_protection is true.",
+"items": {
+"$ref": "GoogleCloudIdentitytoolkitAdminV2RecaptchaTollFraudManagedRule"
+},
+"type": "array"
+},
 "useAccountDefender": {
 "description": "Whether to use the account defender for reCAPTCHA assessment. Defaults to `false`.",
 "type": "boolean"
+},
+"useSmsBotScore": {
+"description": "Whether to use the rCE bot score for reCAPTCHA phone provider. Can only be true when the phone_enforcement_state is AUDIT or ENFORCE.",
+"type": "boolean"
+},
+"useSmsTollFraudProtection": {
+"description": "Whether to use the rCE sms toll fraud protection risk score for reCAPTCHA phone provider. Can only be true when the phone_enforcement_state is AUDIT or ENFORCE.",
+"type": "boolean"
 }
 },
 "type": "object"
@@ -2703,6 +2734,30 @@
 },
 "type": "object"
 },
+"GoogleCloudIdentitytoolkitAdminV2RecaptchaTollFraudManagedRule": {
+"description": "The config for a reCAPTCHA toll fraud assessment managed rule. Models a single interval [start_score, end_score]. The end_score is implicit. It is either the closest smaller end_score (if one is available) or 0. Intervals in aggregate span [0, 1] without overlapping.",
+"id": "GoogleCloudIdentitytoolkitAdminV2RecaptchaTollFraudManagedRule",
+"properties": {
+"action": {
+"description": "The action taken if the reCAPTCHA score of a request is within the interval [start_score, end_score].",
+"enum": [
+"RECAPTCHA_ACTION_UNSPECIFIED",
+"BLOCK"
+],
+"enumDescriptions": [
+"The reCAPTCHA action is not specified.",
+"The reCAPTCHA-protected request will be blocked."
+],
+"type": "string"
+},
+"startScore": {
+"description": "The start score (inclusive) for an action. Must be a value between 0.0 and 1.0, at 11 discrete values; e.g. 0, 0.1, 0.2, 0.3, ... 0.9, 1.0. A score of 0.0 indicates the safest request (likely legitimate), whereas 1.0 indicates the riskiest request (likely toll fraud). See https://cloud.google.com/recaptcha-enterprise/docs/sms-fraud-detection#create-assessment-sms.",
+"format": "float",
+"type": "number"
+}
+},
+"type": "object"
+},
 "GoogleCloudIdentitytoolkitAdminV2RequestLogging": {
 "description": "Configuration for logging requests made to this project to Stackdriver Logging",
 "id": "GoogleCloudIdentitytoolkitAdminV2RequestLogging",
@@ -3322,6 +3377,14 @@
 "recaptchaKey": {
 "description": "The reCAPTCHA Enterprise key resource name, e.g. \"projects/{project}/keys/{key}\". This will only be returned when the reCAPTCHA enforcement state is AUDIT or ENFORCE on at least one of the reCAPTCHA providers.",
 "type": "string"
+},
+"useSmsBotScore": {
+"description": "Whether to use the rCE bot score for reCAPTCHA phone provider.",
+"type": "boolean"
+},
+"useSmsTollFraudProtection": {
+"description": "Whether to use the rCE sms toll fraud protection risk score for reCAPTCHA phone provider.",
+"type": "boolean"
 }
 },
 "type": "object"
@@ -3350,11 +3413,13 @@
 "description": "The provider that has reCAPTCHA protection.",
 "enum": [
 "RECAPTCHA_PROVIDER_UNSPECIFIED",
-"EMAIL_PASSWORD_PROVIDER"
+"EMAIL_PASSWORD_PROVIDER",
+"PHONE_PROVIDER"
 ],
 "enumDescriptions": [
 "reCAPTCHA provider not specified",
-"Email password provider"
+"Email password provider",
+"Phone auth provider"
 ],
 "type": "string"
 }
@@ -3456,6 +3521,26 @@
 "$ref": "GoogleCloudIdentitytoolkitV2AutoRetrievalInfo",
 "description": "Android only. Used by Google Play Services to identify the app for auto-retrieval."
 },
+"captchaResponse": {
+"description": "The reCAPTCHA Enterprise token provided by the reCAPTCHA client-side integration. Required when reCAPTCHA enterprise is enabled.",
+"type": "string"
+},
+"clientType": {
+"description": "The client type, web, android or ios. Required when reCAPTCHA Enterprise is enabled.",
+"enum": [
+"CLIENT_TYPE_UNSPECIFIED",
+"CLIENT_TYPE_WEB",
+"CLIENT_TYPE_ANDROID",
+"CLIENT_TYPE_IOS"
+],
+"enumDescriptions": [
+"Client type is not specified.",
+"Client type is web.",
+"Client type is android.",
+"Client type is ios."
+],
+"type": "string"
+},
 "iosReceipt": {
 "description": "iOS only. Receipt of successful app token validation with APNS.",
 "type": "string"
@@ -3476,6 +3561,18 @@
 "description": "Web only. Recaptcha solution.",
 "type": "string"
 },
+"recaptchaVersion": {
+"description": "The reCAPTCHA version of the reCAPTCHA token in the captcha_response. Required when reCAPTCHA Enterprise is enabled.",
+"enum": [
+"RECAPTCHA_VERSION_UNSPECIFIED",
+"RECAPTCHA_ENTERPRISE"
+],
+"enumDescriptions": [
+"The reCAPTCHA version is not specified.",
+"The reCAPTCHA enterprise."
+],
+"type": "string"
+},
 "safetyNetToken": {
 "description": "Android only. Used to assert application identity in place of a recaptcha token. A SafetyNet Token can be generated via the [SafetyNet Android Attestation API](https://developer.android.com/training/safetynet/attestation.html), with the Base64 encoding of the `phone_number` field as the nonce.",
 "type": "string"