You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
**ory_session_token** | **str** | Token is the token of the session |
11
11
**redirect_browser_to** | **str** | The URL to redirect the browser to |
12
+
**data** | [**ContinueWithDeviceAuthnPinEntryUiData**](ContinueWithDeviceAuthnPinEntryUiData.md) | The one-time HPKE-sealed pin_secret material the device opens to bind the user's PIN after a PIN-protected DeviceAuthn enrollment or secret rotation. |
The enrolled key's client_key_id is not included: it is the SHA-256 fingerprint of the device's own public key, which the device derives locally. Non-PIN keys need no client action at all and therefore produce no continue_with.
**action** | **str** | Action will always be `show_pin_entry_ui` show_pin_entry_ui ContinueWithActionShowPINEntryUIString |
10
+
**data** | [**ContinueWithDeviceAuthnPinEntryUiData**](ContinueWithDeviceAuthnPinEntryUiData.md) | The one-time HPKE-sealed pin_secret material the device opens to bind the user's PIN after a PIN-protected DeviceAuthn enrollment or secret rotation. |
11
+
12
+
## Example
13
+
14
+
```python
15
+
from ory_client.models.continue_with_device_authn_pin_entry_ui import ContinueWithDeviceAuthnPinEntryUi
16
+
17
+
#TODO update the JSON string below
18
+
json ="{}"
19
+
# create an instance of ContinueWithDeviceAuthnPinEntryUi from a JSON string
[[Back to Model list]](../README.md#documentation-for-models)[[Back to API list]](../README.md#documentation-for-api-endpoints)[[Back to README]](../README.md)
Carries the one-time HPKE-sealed pin_secret material — the encapsulated key and the sealed ciphertext — that the device opens with the transport private key it generated for this enrollment.
[[Back to Model list]](../README.md#documentation-for-models)[[Back to API list]](../README.md#documentation-for-api-endpoints)[[Back to README]](../README.md)
[[Back to Model list]](../README.md#documentation-for-models)[[Back to API list]](../README.md#documentation-for-api-endpoints)[[Back to README]](../README.md)
Copy file name to clipboardExpand all lines: docs/CreateProjectNormalizedPayload.md
+3Lines changed: 3 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -216,8 +216,11 @@ Name | Type | Description | Notes
216
216
**kratos_selfservice_methods_code_passwordless_enabled** | **bool** | Configures whether Ory Kratos Passwordless should use the Code Method This governs the \"selfservice.methods.code.passwordless_enabled\" setting. | [optional]
217
217
**kratos_selfservice_methods_code_passwordless_login_fallback_enabled** | **bool** | This setting allows the code method to always login a user with code if they have registered with another authentication method such as password or social sign in. This governs the \"selfservice.methods.code.passwordless_login_fallback_enabled\" setting. | [optional]
218
218
**kratos_selfservice_methods_deviceauthn_config_android_app_ids** | **List[str]** | Configures the allow-list of Android app signing-certificate digests that a device key may be bound to. This governs the \"selfservice.methods.deviceauthn.config.android_app_ids\" setting. | [optional]
219
+
**kratos_selfservice_methods_deviceauthn_config_first_factor** | **bool** | Configures whether device authentication may be used as the sole first factor. This governs the \"selfservice.methods.deviceauthn.config.first_factor\" setting. | [optional]
219
220
**kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation** | **bool** | Configures whether Ory Kratos Device authentication accepts relaxed attestations for testing Only allowed on development projects and forced off otherwise. Keys enrolled under relaxation are short-lived and refused once this is turned off. This governs the \"selfservice.methods.deviceauthn.config.insecure_allow_relaxed_attestation\" setting. | [optional]
220
221
**kratos_selfservice_methods_deviceauthn_config_ios_app_ids** | **List[str]** | Configures the allow-list of Apple App IDs that a device key may be bound to. This governs the \"selfservice.methods.deviceauthn.config.ios_app_ids\" setting. | [optional]
222
+
**kratos_selfservice_methods_deviceauthn_config_ios_biometric_first_factor** | **bool** | Configures whether an iOS biometric device key may be used as the sole first factor. This governs the \"selfservice.methods.deviceauthn.config.ios_biometric_first_factor\" setting. | [optional]
223
+
**kratos_selfservice_methods_deviceauthn_config_pin_max_attempts** | **int** | Configures the consecutive wrong-PIN limit before a device key is locked. This governs the \"selfservice.methods.deviceauthn.config.pin_max_attempts\" setting. | [optional]
221
224
**kratos_selfservice_methods_deviceauthn_enabled** | **bool** | Configures whether Ory Kratos Device authentication is enabled This governs the \"selfservice.methods.deviceauthn.enabled\" setting. | [optional]
222
225
**kratos_selfservice_methods_link_config_base_url** | **str** | Configures the Base URL which Recovery, Verification, and Login Links Point to It is recommended to leave this value empty. It will be appropriately configured to the best matching domain (e.g. when using custom domains) automatically. This governs the \"selfservice.methods.link.config.base_url\" setting. | [optional]
223
226
**kratos_selfservice_methods_link_config_lifespan** | **str** | Configures the Ory Kratos Link Method's lifespan This governs the \"selfservice.methods.link.config.lifespan\" setting. | [optional]
**public_key** | **List[int]** | PublicKey is the device's public key (EC P-256 in v1), used to verify signatures. It is stored in PKIX, ASN.1 DER form (the SubjectPublicKeyInfo encoding produced by x509.MarshalPKIXPublicKey). The private key resides inside the device and does not exist on the server. | [optional]
14
15
**relaxed_attestation_expires_at** | **datetime** | RelaxedAttestationExpiresAt is set only when the key's attestation chain validated because relaxed attestation was allowed (software roots, expired certs, software security level) rather than under strict rules. Such keys are second-class: they are refused at login after this time, or immediately if relaxed attestation is turned off. It is nil for hardware-attested keys that pass strict validation. | [optional]
**version** | **int** | v1 uses SHA256 + EC256. v2 (in the future) may use ML-DSA which is post-quantum resistant. This requires Android/iOS support so we have to wait. We intentionally avoid storing the cryptographic algorithm here a la JWT/TLS to avoid security issues and algorithm negotiation. | [optional]
0 commit comments