ory_client::models::normalized_project_revision

Struct NormalizedProjectRevision

pub struct NormalizedProjectRevision {Show 235 fields
    pub account_experience_default_locale: Option<String>,
    pub account_experience_favicon_dark: Option<String>,
    pub account_experience_favicon_light: Option<String>,
    pub account_experience_locale_behavior: Option<String>,
    pub account_experience_logo_dark: Option<String>,
    pub account_experience_logo_light: Option<String>,
    pub account_experience_theme_variables_dark: Option<String>,
    pub account_experience_theme_variables_light: Option<String>,
    pub created_at: Option<String>,
    pub disable_account_experience_welcome_screen: Option<bool>,
    pub enable_ax_v2: Option<bool>,
    pub hydra_oauth2_allowed_top_level_claims: Option<Vec<String>>,
    pub hydra_oauth2_client_credentials_default_grant_allowed_scope: Option<bool>,
    pub hydra_oauth2_exclude_not_before_claim: Option<bool>,
    pub hydra_oauth2_grant_jwt_iat_optional: Option<bool>,
    pub hydra_oauth2_grant_jwt_jti_optional: Option<bool>,
    pub hydra_oauth2_grant_jwt_max_ttl: Option<String>,
    pub hydra_oauth2_grant_refresh_token_rotation_grace_period: Option<String>,
    pub hydra_oauth2_mirror_top_level_claims: Option<bool>,
    pub hydra_oauth2_pkce_enforced: Option<bool>,
    pub hydra_oauth2_pkce_enforced_for_public_clients: Option<bool>,
    pub hydra_oauth2_refresh_token_hook: Option<String>,
    pub hydra_oauth2_token_hook: Option<String>,
    pub hydra_oidc_dynamic_client_registration_default_scope: Option<Vec<String>>,
    pub hydra_oidc_dynamic_client_registration_enabled: Option<bool>,
    pub hydra_oidc_subject_identifiers_pairwise_salt: Option<String>,
    pub hydra_oidc_subject_identifiers_supported_types: Option<Vec<String>>,
    pub hydra_secrets_cookie: Option<Vec<String>>,
    pub hydra_secrets_pagination: Option<Vec<String>>,
    pub hydra_secrets_system: Option<Vec<String>>,
    pub hydra_serve_cookies_same_site_legacy_workaround: Option<bool>,
    pub hydra_serve_cookies_same_site_mode: Option<String>,
    pub hydra_strategies_access_token: Option<HydraStrategiesAccessTokenEnum>,
    pub hydra_strategies_jwt_scope_claim: Option<HydraStrategiesJwtScopeClaimEnum>,
    pub hydra_strategies_scope: Option<HydraStrategiesScopeEnum>,
    pub hydra_ttl_access_token: Option<String>,
    pub hydra_ttl_auth_code: Option<String>,
    pub hydra_ttl_id_token: Option<String>,
    pub hydra_ttl_login_consent_request: Option<String>,
    pub hydra_ttl_refresh_token: Option<String>,
    pub hydra_urls_consent: Option<String>,
    pub hydra_urls_error: Option<String>,
    pub hydra_urls_login: Option<String>,
    pub hydra_urls_logout: Option<String>,
    pub hydra_urls_post_logout_redirect: Option<String>,
    pub hydra_urls_registration: Option<String>,
    pub hydra_urls_self_issuer: Option<String>,
    pub hydra_webfinger_jwks_broadcast_keys: Option<Vec<String>>,
    pub hydra_webfinger_oidc_discovery_auth_url: Option<String>,
    pub hydra_webfinger_oidc_discovery_client_registration_url: Option<String>,
    pub hydra_webfinger_oidc_discovery_jwks_url: Option<String>,
    pub hydra_webfinger_oidc_discovery_supported_claims: Option<Vec<String>>,
    pub hydra_webfinger_oidc_discovery_supported_scope: Option<Vec<String>>,
    pub hydra_webfinger_oidc_discovery_token_url: Option<String>,
    pub hydra_webfinger_oidc_discovery_userinfo_url: Option<String>,
    pub id: Option<String>,
    pub keto_namespace_configuration: Option<String>,
    pub keto_namespaces: Option<Vec<KetoNamespace>>,
    pub keto_secrets_pagination: Option<Vec<String>>,
    pub kratos_cookies_same_site: Option<String>,
    pub kratos_courier_channels: Option<Vec<NormalizedProjectRevisionCourierChannel>>,
    pub kratos_courier_delivery_strategy: Option<String>,
    pub kratos_courier_http_request_config_auth_api_key_in: Option<String>,
    pub kratos_courier_http_request_config_auth_api_key_name: Option<String>,
    pub kratos_courier_http_request_config_auth_api_key_value: Option<String>,
    pub kratos_courier_http_request_config_auth_basic_auth_password: Option<String>,
    pub kratos_courier_http_request_config_auth_basic_auth_user: Option<String>,
    pub kratos_courier_http_request_config_auth_type: Option<String>,
    pub kratos_courier_http_request_config_body: Option<String>,
    pub kratos_courier_http_request_config_headers: Option<Option<Value>>,
    pub kratos_courier_http_request_config_method: Option<String>,
    pub kratos_courier_http_request_config_url: Option<String>,
    pub kratos_courier_smtp_connection_uri: Option<String>,
    pub kratos_courier_smtp_from_address: Option<String>,
    pub kratos_courier_smtp_from_name: Option<String>,
    pub kratos_courier_smtp_headers: Option<Option<Value>>,
    pub kratos_courier_smtp_local_name: Option<String>,
    pub kratos_courier_templates_login_code_valid_email_body_html: Option<String>,
    pub kratos_courier_templates_login_code_valid_email_body_plaintext: Option<String>,
    pub kratos_courier_templates_login_code_valid_email_subject: Option<String>,
    pub kratos_courier_templates_login_code_valid_sms_body_plaintext: Option<String>,
    pub kratos_courier_templates_recovery_code_invalid_email_body_html: Option<String>,
    pub kratos_courier_templates_recovery_code_invalid_email_body_plaintext: Option<String>,
    pub kratos_courier_templates_recovery_code_invalid_email_subject: Option<String>,
    pub kratos_courier_templates_recovery_code_valid_email_body_html: Option<String>,
    pub kratos_courier_templates_recovery_code_valid_email_body_plaintext: Option<String>,
    pub kratos_courier_templates_recovery_code_valid_email_subject: Option<String>,
    pub kratos_courier_templates_recovery_invalid_email_body_html: Option<String>,
    pub kratos_courier_templates_recovery_invalid_email_body_plaintext: Option<String>,
    pub kratos_courier_templates_recovery_invalid_email_subject: Option<String>,
    pub kratos_courier_templates_recovery_valid_email_body_html: Option<String>,
    pub kratos_courier_templates_recovery_valid_email_body_plaintext: Option<String>,
    pub kratos_courier_templates_recovery_valid_email_subject: Option<String>,
    pub kratos_courier_templates_registration_code_valid_email_body_html: Option<String>,
    pub kratos_courier_templates_registration_code_valid_email_body_plaintext: Option<String>,
    pub kratos_courier_templates_registration_code_valid_email_subject: Option<String>,
    pub kratos_courier_templates_registration_code_valid_sms_body_plaintext: Option<String>,
    pub kratos_courier_templates_verification_code_invalid_email_body_html: Option<String>,
    pub kratos_courier_templates_verification_code_invalid_email_body_plaintext: Option<String>,
    pub kratos_courier_templates_verification_code_invalid_email_subject: Option<String>,
    pub kratos_courier_templates_verification_code_valid_email_body_html: Option<String>,
    pub kratos_courier_templates_verification_code_valid_email_body_plaintext: Option<String>,
    pub kratos_courier_templates_verification_code_valid_email_subject: Option<String>,
    pub kratos_courier_templates_verification_code_valid_sms_body_plaintext: Option<String>,
    pub kratos_courier_templates_verification_invalid_email_body_html: Option<String>,
    pub kratos_courier_templates_verification_invalid_email_body_plaintext: Option<String>,
    pub kratos_courier_templates_verification_invalid_email_subject: Option<String>,
    pub kratos_courier_templates_verification_valid_email_body_html: Option<String>,
    pub kratos_courier_templates_verification_valid_email_body_plaintext: Option<String>,
    pub kratos_courier_templates_verification_valid_email_subject: Option<String>,
    pub kratos_feature_flags_cacheable_sessions: Option<bool>,
    pub kratos_feature_flags_cacheable_sessions_max_age: Option<String>,
    pub kratos_feature_flags_choose_recovery_address: Option<bool>,
    pub kratos_feature_flags_faster_session_extend: Option<bool>,
    pub kratos_feature_flags_legacy_continue_with_verification_ui: Option<bool>,
    pub kratos_feature_flags_legacy_oidc_registration_node_group: Option<bool>,
    pub kratos_feature_flags_legacy_require_verified_login_error: Option<bool>,
    pub kratos_feature_flags_password_profile_registration_node_group: Option<bool>,
    pub kratos_feature_flags_use_continue_with_transitions: Option<bool>,
    pub kratos_identity_schemas: Option<Vec<NormalizedProjectRevisionIdentitySchema>>,
    pub kratos_oauth2_provider_headers: Option<Option<Value>>,
    pub kratos_oauth2_provider_override_return_to: Option<bool>,
    pub kratos_oauth2_provider_url: Option<String>,
    pub kratos_preview_default_read_consistency_level: Option<String>,
    pub kratos_secrets_cipher: Option<Vec<String>>,
    pub kratos_secrets_cookie: Option<Vec<String>>,
    pub kratos_secrets_default: Option<Vec<String>>,
    pub kratos_secrets_pagination: Option<Vec<String>>,
    pub kratos_security_account_enumeration_mitigate: Option<bool>,
    pub kratos_selfservice_allowed_return_urls: Option<Vec<String>>,
    pub kratos_selfservice_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_error_ui_url: Option<String>,
    pub kratos_selfservice_flows_login_after_code_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_login_after_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_login_after_lookup_secret_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_login_after_oidc_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_login_after_passkey_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_login_after_password_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_login_after_totp_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_login_after_webauthn_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_login_lifespan: Option<String>,
    pub kratos_selfservice_flows_login_ui_url: Option<String>,
    pub kratos_selfservice_flows_logout_after_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_recovery_after_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_recovery_enabled: Option<bool>,
    pub kratos_selfservice_flows_recovery_lifespan: Option<String>,
    pub kratos_selfservice_flows_recovery_notify_unknown_recipients: Option<bool>,
    pub kratos_selfservice_flows_recovery_ui_url: Option<String>,
    pub kratos_selfservice_flows_recovery_use: Option<KratosSelfserviceFlowsRecoveryUseEnum>,
    pub kratos_selfservice_flows_registration_after_code_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_registration_after_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_registration_after_oidc_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_registration_after_passkey_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_registration_after_password_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_registration_after_webauthn_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_registration_enable_legacy_one_step: Option<bool>,
    pub kratos_selfservice_flows_registration_enabled: Option<bool>,
    pub kratos_selfservice_flows_registration_lifespan: Option<String>,
    pub kratos_selfservice_flows_registration_login_hints: Option<bool>,
    pub kratos_selfservice_flows_registration_ui_url: Option<String>,
    pub kratos_selfservice_flows_settings_after_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_settings_after_lookup_secret_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_settings_after_oidc_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_settings_after_passkey_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_settings_after_password_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_settings_after_profile_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_settings_after_totp_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_settings_after_webauthn_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_settings_lifespan: Option<String>,
    pub kratos_selfservice_flows_settings_privileged_session_max_age: Option<String>,
    pub kratos_selfservice_flows_settings_required_aal: Option<String>,
    pub kratos_selfservice_flows_settings_ui_url: Option<String>,
    pub kratos_selfservice_flows_verification_after_default_browser_return_url: Option<String>,
    pub kratos_selfservice_flows_verification_enabled: Option<bool>,
    pub kratos_selfservice_flows_verification_lifespan: Option<String>,
    pub kratos_selfservice_flows_verification_notify_unknown_recipients: Option<bool>,
    pub kratos_selfservice_flows_verification_ui_url: Option<String>,
    pub kratos_selfservice_flows_verification_use: Option<KratosSelfserviceFlowsVerificationUseEnum>,
    pub kratos_selfservice_methods_captcha_config_allowed_domains: Option<Vec<String>>,
    pub kratos_selfservice_methods_captcha_config_cf_turnstile_secret: Option<String>,
    pub kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey: Option<String>,
    pub kratos_selfservice_methods_captcha_config_legacy_inject_node: Option<bool>,
    pub kratos_selfservice_methods_captcha_enabled: Option<bool>,
    pub kratos_selfservice_methods_code_config_lifespan: Option<String>,
    pub kratos_selfservice_methods_code_config_max_submissions: Option<Option<i32>>,
    pub kratos_selfservice_methods_code_config_missing_credential_fallback_enabled: Option<bool>,
    pub kratos_selfservice_methods_code_enabled: Option<bool>,
    pub kratos_selfservice_methods_code_mfa_enabled: Option<bool>,
    pub kratos_selfservice_methods_code_passwordless_enabled: Option<bool>,
    pub kratos_selfservice_methods_code_passwordless_login_fallback_enabled: Option<bool>,
    pub kratos_selfservice_methods_link_config_base_url: Option<String>,
    pub kratos_selfservice_methods_link_config_lifespan: Option<String>,
    pub kratos_selfservice_methods_link_enabled: Option<bool>,
    pub kratos_selfservice_methods_lookup_secret_enabled: Option<bool>,
    pub kratos_selfservice_methods_oidc_config_base_redirect_uri: Option<String>,
    pub kratos_selfservice_methods_oidc_config_providers: Option<Vec<NormalizedProjectRevisionThirdPartyProvider>>,
    pub kratos_selfservice_methods_oidc_enable_auto_link_policy: Option<bool>,
    pub kratos_selfservice_methods_oidc_enabled: Option<bool>,
    pub kratos_selfservice_methods_passkey_config_rp_display_name: Option<String>,
    pub kratos_selfservice_methods_passkey_config_rp_id: Option<String>,
    pub kratos_selfservice_methods_passkey_config_rp_origins: Option<Vec<String>>,
    pub kratos_selfservice_methods_passkey_enabled: Option<bool>,
    pub kratos_selfservice_methods_password_config_haveibeenpwned_enabled: Option<bool>,
    pub kratos_selfservice_methods_password_config_identifier_similarity_check_enabled: Option<bool>,
    pub kratos_selfservice_methods_password_config_ignore_network_errors: Option<bool>,
    pub kratos_selfservice_methods_password_config_max_breaches: Option<i64>,
    pub kratos_selfservice_methods_password_config_min_password_length: Option<i64>,
    pub kratos_selfservice_methods_password_enabled: Option<bool>,
    pub kratos_selfservice_methods_profile_enabled: Option<bool>,
    pub kratos_selfservice_methods_saml_config_providers: Option<Vec<NormalizedProjectRevisionSamlProvider>>,
    pub kratos_selfservice_methods_saml_enabled: Option<bool>,
    pub kratos_selfservice_methods_totp_config_issuer: Option<String>,
    pub kratos_selfservice_methods_totp_enabled: Option<bool>,
    pub kratos_selfservice_methods_webauthn_config_passwordless: Option<bool>,
    pub kratos_selfservice_methods_webauthn_config_rp_display_name: Option<String>,
    pub kratos_selfservice_methods_webauthn_config_rp_icon: Option<String>,
    pub kratos_selfservice_methods_webauthn_config_rp_id: Option<String>,
    pub kratos_selfservice_methods_webauthn_config_rp_origins: Option<Vec<String>>,
    pub kratos_selfservice_methods_webauthn_enabled: Option<bool>,
    pub kratos_session_cookie_persistent: Option<bool>,
    pub kratos_session_cookie_same_site: Option<String>,
    pub kratos_session_lifespan: Option<String>,
    pub kratos_session_whoami_required_aal: Option<String>,
    pub kratos_session_whoami_tokenizer_templates: Option<Vec<NormalizedProjectRevisionTokenizerTemplate>>,
    pub name: String,
    pub organizations: Option<Vec<Organization>>,
    pub project_id: Option<String>,
    pub project_revision_hooks: Option<Vec<NormalizedProjectRevisionHook>>,
    pub scim_clients: Option<Vec<NormalizedProjectRevisionScimClient>>,
    pub serve_admin_cors_allowed_origins: Option<Vec<String>>,
    pub serve_admin_cors_enabled: Option<bool>,
    pub serve_public_cors_allowed_origins: Option<Vec<String>>,
    pub serve_public_cors_enabled: Option<bool>,
    pub strict_security: Option<bool>,
    pub updated_at: Option<String>,
}

Fields§

§account_experience_default_locale: Option<String>

Holds the default locale for the account experience.

§account_experience_favicon_dark: Option<String>

Holds the URL to the account experience’s dark theme favicon (currently unused).

§account_experience_favicon_light: Option<String>

Holds the URL to the account experience’s favicon.

§account_experience_locale_behavior: Option<String>

Holds the URL to the account experience’s language behavior. Can be one of: respect_accept_language: Respect the Accept-Language header. force_default: Force the default language.

§account_experience_logo_dark: Option<String>

Holds the URL to the account experience’s dark theme logo (currently unused).

§account_experience_logo_light: Option<String>

Holds the URL to the account experience’s logo.

§account_experience_theme_variables_dark: Option<String>

Holds the URL to the account experience’s dark theme variables.

§account_experience_theme_variables_light: Option<String>

Holds the URL to the account experience’s light theme variables.

§created_at: Option<String>

The Project’s Revision Creation Date

§disable_account_experience_welcome_screen: Option<bool>

Whether to disable the account experience welcome screen, which is hosted under /ui/welcome.

§enable_ax_v2: Option<bool>

Whether the new account experience is enabled and reachable.

§hydra_oauth2_allowed_top_level_claims: Option<Vec<String>>§hydra_oauth2_client_credentials_default_grant_allowed_scope: Option<bool>

Automatically grant authorized OAuth2 Scope in OAuth2 Client Credentials Flow. Each OAuth2 Client is allowed to request a predefined OAuth2 Scope (for example read write). If this option is enabled, the full scope is automatically granted when performing the OAuth2 Client Credentials flow. If disabled, the OAuth2 Client has to request the scope in the OAuth2 request by providing the scope query parameter. Setting this option to true is common if you need compatibility with MITREid. This governs the "oauth2.client_credentials.default_grant_allowed_scope" setting.

§hydra_oauth2_exclude_not_before_claim: Option<bool>

Set to true if you want to exclude claim nbf (not before) part of access token. This governs the "oauth2.exclude_not_before_claim" setting.

§hydra_oauth2_grant_jwt_iat_optional: Option<bool>

Configures if the issued at (iat) claim is required in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523). If set to false, the iat claim is required. Set this value to true only after careful consideration. This governs the "oauth2.grant.jwt.iat_optional" setting.

§hydra_oauth2_grant_jwt_jti_optional: Option<bool>

Configures if the JSON Web Token ID (jti) claim is required in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523). If set to false, the jti claim is required. Set this value to true only after careful consideration. This governs the "oauth2.grant.jwt.jti_optional" setting.

§hydra_oauth2_grant_jwt_max_ttl: Option<String>

Configures what the maximum age of a JWT assertion used in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523) can be. This feature uses the exp claim and iat claim to calculate assertion age. Assertions exceeding the max age will be denied. Useful as a safety measure and recommended to keep below 720h. This governs the "oauth2.grant.jwt.max_ttl" setting.

§hydra_oauth2_grant_refresh_token_rotation_grace_period: Option<String>

Configures the OAuth2 Grant Refresh Token Rotation Grace Period If set to null or \"0s\", the graceful refresh token rotation is disabled. This governs the "oauth2.grant.refresh_token_rotation_grace_period" setting.

§hydra_oauth2_mirror_top_level_claims: Option<bool>

Set to false if you don’t want to mirror custom claims under ‘ext’. This governs the "oauth2.mirror_top_level_claims" setting.

§hydra_oauth2_pkce_enforced: Option<bool>

Configures whether PKCE should be enforced for all OAuth2 Clients. This governs the "oauth2.pkce.enforced" setting.

§hydra_oauth2_pkce_enforced_for_public_clients: Option<bool>

Configures whether PKCE should be enforced for OAuth2 Clients without a client secret (public clients). This governs the "oauth2.pkce.enforced_for_public_clients" setting.

§hydra_oauth2_refresh_token_hook: Option<String>

Sets the Refresh Token Hook Endpoint. If set this endpoint will be called during the OAuth2 Token Refresh grant update the OAuth2 Access Token claims. This governs the "oauth2.refresh_token_hook" setting.

§hydra_oauth2_token_hook: Option<String>

Sets the token hook endpoint for all grant types. If set it will be called while providing token to customize claims. This governs the "oauth2.token_hook.url" setting.

§hydra_oidc_dynamic_client_registration_default_scope: Option<Vec<String>>§hydra_oidc_dynamic_client_registration_enabled: Option<bool>

Configures OpenID Connect Dynamic Client Registration. This governs the "oidc.dynamic_client_registration.enabled" setting.

§hydra_oidc_subject_identifiers_pairwise_salt: Option<String>

Configures OpenID Connect Discovery and overwrites the pairwise algorithm This governs the "oidc.subject_identifiers.pairwise_salt" setting.

§hydra_oidc_subject_identifiers_supported_types: Option<Vec<String>>§hydra_secrets_cookie: Option<Vec<String>>§hydra_secrets_pagination: Option<Vec<String>>§hydra_secrets_system: Option<Vec<String>>§hydra_serve_cookies_same_site_legacy_workaround: Option<bool>

Configures the Ory Hydra Cookie Same Site Legacy Workaround This governs the "serve.cookies.same_site_legacy_workaround" setting.

§hydra_serve_cookies_same_site_mode: Option<String>

Configures the Ory Hydra Cookie Same Site Mode This governs the "serve.cookies.same_site_mode" setting.

§hydra_strategies_access_token: Option<HydraStrategiesAccessTokenEnum>

Defines access token type This governs the "strategies.access_token" setting. opaque Oauth2AccessTokenStrategyOpaque jwt Oauth2AccessTokenStrategyJwt

§hydra_strategies_jwt_scope_claim: Option<HydraStrategiesJwtScopeClaimEnum>

Define the claim to use as the scope in the access token. This governs the "strategies.jwt.scope_claim" setting: list: The scope claim is an array of strings named scope: { \"scope\": [\"read\", \"write\"] } string: The scope claim is a space delimited list of strings named scp: { \"scp\": \"read write\" } both: The scope claim is both a space delimited list and an array of strings named scope and scp: { \"scope\": [\"read\", \"write\"], \"scp\": \"read write\" } list OAuth2JWTScopeClaimList string OAuth2JWTScopeClaimString both OAuth2JWTScopeClaimBoth

§hydra_strategies_scope: Option<HydraStrategiesScopeEnum>

Defines how scopes are matched. For more details have a look at https://github.com/ory/fosite#scopes This governs the "strategies.scope" setting. exact Oauth2ScopeStrategyExact wildcard Oauth2ScopeStrategyWildcard

§hydra_ttl_access_token: Option<String>

This governs the "ttl.access_token" setting.

§hydra_ttl_auth_code: Option<String>

Configures how long refresh tokens are valid. Set to -1 for refresh tokens to never expire. This is not recommended! This governs the "ttl.auth_code" setting.

§hydra_ttl_id_token: Option<String>

This governs the "ttl.id_token" setting.

§hydra_ttl_login_consent_request: Option<String>

Configures how long a user login and consent flow may take. This governs the "ttl.login_consent_request" setting.

§hydra_ttl_refresh_token: Option<String>

Configures how long refresh tokens are valid. Set to -1 for refresh tokens to never expire. This is not recommended! This governs the "ttl.refresh_token" setting.

§hydra_urls_consent: Option<String>

Sets the OAuth2 Consent Endpoint URL of the OAuth2 User Login & Consent flow. Defaults to the Ory Account Experience if left empty. This governs the "urls.consent" setting.

§hydra_urls_error: Option<String>

Sets the OAuth2 Error URL of the OAuth2 User Login & Consent flow. Defaults to the Ory Account Experience if left empty. This governs the "urls.error" setting.

§hydra_urls_login: Option<String>

Sets the OAuth2 Login Endpoint URL of the OAuth2 User Login & Consent flow. Defaults to the Ory Account Experience if left empty. This governs the "urls.login" setting.

§hydra_urls_logout: Option<String>

Sets the logout endpoint. Defaults to the Ory Account Experience if left empty. This governs the "urls.logout" setting.

§hydra_urls_post_logout_redirect: Option<String>

When an OAuth2-related user agent requests to log out, they will be redirected to this url afterwards per default. Defaults to the Ory Account Experience in development and your application in production mode when a custom domain is connected. This governs the "urls.post_logout_redirect" setting.

§hydra_urls_registration: Option<String>

Sets the OAuth2 Registration Endpoint URL of the OAuth2 User Login & Consent flow. Defaults to the Ory Account Experience if left empty. This governs the "urls.registration" setting.

§hydra_urls_self_issuer: Option<String>

This value will be used as the issuer in access and ID tokens. It must be specified and using HTTPS protocol, unless the development mode is enabled. On the Ory Network it will be very rare that you want to modify this value. If left empty, it will default to the correct value for the Ory Network. This governs the "urls.self.issuer" setting.

§hydra_webfinger_jwks_broadcast_keys: Option<Vec<String>>§hydra_webfinger_oidc_discovery_auth_url: Option<String>

Configures OpenID Connect Discovery and overwrites the OAuth2 Authorization URL. This governs the "webfinger.oidc.discovery.auth_url" setting.

§hydra_webfinger_oidc_discovery_client_registration_url: Option<String>

Configures OpenID Connect Discovery and overwrites the OpenID Connect Dynamic Client Registration Endpoint. This governs the "webfinger.oidc.discovery.client_registration_url" setting.

§hydra_webfinger_oidc_discovery_jwks_url: Option<String>

Configures OpenID Connect Discovery and overwrites the JWKS URL. This governs the "webfinger.oidc.discovery.jwks_url" setting.

§hydra_webfinger_oidc_discovery_supported_claims: Option<Vec<String>>§hydra_webfinger_oidc_discovery_supported_scope: Option<Vec<String>>§hydra_webfinger_oidc_discovery_token_url: Option<String>

Configures OpenID Connect Discovery and overwrites the OAuth2 Token URL. This governs the "webfinger.oidc.discovery.token_url" setting.

§hydra_webfinger_oidc_discovery_userinfo_url: Option<String>

Configures OpenID Connect Discovery and overwrites userinfo endpoint to be advertised at the OpenID Connect Discovery endpoint /.well-known/openid-configuration. Defaults to Ory Hydra’s userinfo endpoint at /userinfo. Set this value if you want to handle this endpoint yourself. This governs the "webfinger.oidc.discovery.userinfo_url" setting.

§id: Option<String>

The revision ID.

§keto_namespace_configuration: Option<String>

The Revisions’ Keto Namespace Configuration The string is a URL pointing to an OPL file with the configuration.

§keto_namespaces: Option<Vec<KetoNamespace>>§keto_secrets_pagination: Option<Vec<String>>§kratos_cookies_same_site: Option<String>

Configures the Ory Kratos Cookie SameSite Attribute This governs the "cookies.same_site" setting.

§kratos_courier_channels: Option<Vec<NormalizedProjectRevisionCourierChannel>>§kratos_courier_delivery_strategy: Option<String>

The delivery strategy to use when sending emails smtp: Use SMTP server http: Use the built in HTTP client to send the email to some remote service

§kratos_courier_http_request_config_auth_api_key_in: Option<String>

The location of the API key to use in the HTTP email sending service’s authentication header: Send the key value pair as a header cookie: Send the key value pair as a cookie This governs the "courier.http.auth.config.in" setting

§kratos_courier_http_request_config_auth_api_key_name: Option<String>

The name of the API key to use in the HTTP email sending service’s authentication This governs the "courier.http.auth.config.name" setting

§kratos_courier_http_request_config_auth_api_key_value: Option<String>

The value of the API key to use in the HTTP email sending service’s authentication This governs the "courier.http.auth.config.value" setting

§kratos_courier_http_request_config_auth_basic_auth_password: Option<String>

The password to use for basic auth in the HTTP email sending service’s authentication This governs the "courier.http.auth.config.password" setting

§kratos_courier_http_request_config_auth_basic_auth_user: Option<String>

The user to use for basic auth in the HTTP email sending service’s authentication This governs the "courier.http.auth.config.user" setting

§kratos_courier_http_request_config_auth_type: Option<String>

The authentication type to use while contacting the remote HTTP email sending service basic_auth: Use Basic Authentication api_key: Use API Key Authentication in a header or cookie

§kratos_courier_http_request_config_body: Option<String>

The Jsonnet template to generate the body to send to the remote HTTP email sending service Should be valid Jsonnet and base64 encoded This governs the "courier.http.body" setting

§kratos_courier_http_request_config_headers: Option<Option<Value>>

NullJSONRawMessage represents a json.RawMessage that works well with JSON, SQL, and Swagger and is NULLable-

§kratos_courier_http_request_config_method: Option<String>

The http METHOD to use when calling the remote HTTP email sending service

§kratos_courier_http_request_config_url: Option<String>

The URL of the remote HTTP email sending service This governs the "courier.http.url" setting

§kratos_courier_smtp_connection_uri: Option<String>

Configures the Ory Kratos SMTP Connection URI This governs the "courier.smtp.connection_uri" setting.

§kratos_courier_smtp_from_address: Option<String>

Configures the Ory Kratos SMTP From Address This governs the "courier.smtp.from_address" setting.

§kratos_courier_smtp_from_name: Option<String>

Configures the Ory Kratos SMTP From Name This governs the "courier.smtp.from_name" setting.

§kratos_courier_smtp_headers: Option<Option<Value>>

NullJSONRawMessage represents a json.RawMessage that works well with JSON, SQL, and Swagger and is NULLable-

§kratos_courier_smtp_local_name: Option<String>

Configures the local_name to use in SMTP connections This governs the "courier.smtp.local_name" setting.

§kratos_courier_templates_login_code_valid_email_body_html: Option<String>

Configures the Ory Kratos Valid Login via Code Email Body HTML Template This governs the "courier.smtp.templates.login_code.valid.email.body.html" setting.

§kratos_courier_templates_login_code_valid_email_body_plaintext: Option<String>

Configures the Ory Kratos Valid Login via Code Email Body Plaintext Template This governs the "courier.smtp.templates.login_code.valid.email.body.plaintext" setting.

§kratos_courier_templates_login_code_valid_email_subject: Option<String>

Configures the Ory Kratos Valid Login via Code Email Subject Template This governs the "courier.smtp.templates.login_code.valid.email.subject" setting.

§kratos_courier_templates_login_code_valid_sms_body_plaintext: Option<String>

Configures the Ory Kratos Valid Login via Code SMS plain text body This governs the "courier.smtp.templates.login_code.valid.sms.plaintext" setting.

§kratos_courier_templates_recovery_code_invalid_email_body_html: Option<String>

Configures the Ory Kratos Invalid Recovery via Code Email Body HTML Template This governs the "courier.smtp.templates.recovery_code.invalid.email.body.html" setting.

§kratos_courier_templates_recovery_code_invalid_email_body_plaintext: Option<String>

Configures the Ory Kratos Invalid Recovery via Code Email Body Plaintext Template This governs the "courier.smtp.templates.recovery_code.invalid.email.body.plaintext" setting.

§kratos_courier_templates_recovery_code_invalid_email_subject: Option<String>

Configures the Ory Kratos Invalid Recovery via Code Email Subject Template This governs the "courier.smtp.templates.recovery_code.invalid.email.body.html" setting.

§kratos_courier_templates_recovery_code_valid_email_body_html: Option<String>

Configures the Ory Kratos Valid Recovery via Code Email Body HTML Template This governs the "courier.smtp.templates.recovery_code.valid.email.body.html" setting.

§kratos_courier_templates_recovery_code_valid_email_body_plaintext: Option<String>

Configures the Ory Kratos Valid Recovery via Code Email Body Plaintext Template This governs the "courier.smtp.templates.recovery_code.valid.email.body.plaintext" setting.

§kratos_courier_templates_recovery_code_valid_email_subject: Option<String>

Configures the Ory Kratos Valid Recovery via Code Email Subject Template This governs the "courier.smtp.templates.recovery_code.valid.email.subject" setting.

§kratos_courier_templates_recovery_invalid_email_body_html: Option<String>

Configures the Ory Kratos Invalid Recovery Email Body HTML Template This governs the "courier.smtp.templates.recovery.invalid.email.body.html" setting.

§kratos_courier_templates_recovery_invalid_email_body_plaintext: Option<String>

Configures the Ory Kratos Invalid Recovery Email Body Plaintext Template This governs the "courier.smtp.templates.recovery.invalid.email.body.plaintext" setting.

§kratos_courier_templates_recovery_invalid_email_subject: Option<String>

Configures the Ory Kratos Invalid Recovery Email Subject Template This governs the "courier.smtp.templates.recovery.invalid.email.body.html" setting.

§kratos_courier_templates_recovery_valid_email_body_html: Option<String>

Configures the Ory Kratos Valid Recovery Email Body HTML Template This governs the "courier.smtp.templates.recovery.valid.email.body.html" setting.

§kratos_courier_templates_recovery_valid_email_body_plaintext: Option<String>

Configures the Ory Kratos Valid Recovery Email Body Plaintext Template This governs the "courier.smtp.templates.recovery.valid.email.body.plaintext" setting.

§kratos_courier_templates_recovery_valid_email_subject: Option<String>

Configures the Ory Kratos Valid Recovery Email Subject Template This governs the "courier.smtp.templates.recovery.valid.email.subject" setting.

§kratos_courier_templates_registration_code_valid_email_body_html: Option<String>

Configures the Ory Kratos Valid Registration via Code Email Body HTML Template This governs the "courier.smtp.templates.registration_code.valid.email.body.html" setting.

§kratos_courier_templates_registration_code_valid_email_body_plaintext: Option<String>

Configures the Ory Kratos Valid Registration via Code Email Body Plaintext Template This governs the "courier.smtp.templates.registration_code.valid.email.body.plaintext" setting.

§kratos_courier_templates_registration_code_valid_email_subject: Option<String>

Configures the Ory Kratos Valid Registration via Code Email Subject Template This governs the "courier.smtp.templates.registration_code.valid.email.subject" setting.

§kratos_courier_templates_registration_code_valid_sms_body_plaintext: Option<String>

Configures the Ory Kratos Valid Registration via Code Email Subject Template This governs the "courier.smtp.templates.registration_code.valid.sms.body.plaintext" setting.

§kratos_courier_templates_verification_code_invalid_email_body_html: Option<String>

Configures the Ory Kratos Invalid Verification via Code Email Body HTML Template This governs the "courier.smtp.templates.verification_code.invalid.email.body.html" setting.

§kratos_courier_templates_verification_code_invalid_email_body_plaintext: Option<String>

Configures the Ory Kratos Invalid Verification via Code Email Body Plaintext Template This governs the "courier.smtp.templates.verification_code.invalid.email.body.plaintext" setting.

§kratos_courier_templates_verification_code_invalid_email_subject: Option<String>

Configures the Ory Kratos Invalid Verification via Code Email Subject Template This governs the "courier.smtp.templates.verification_code.invalid.email.subject" setting.

§kratos_courier_templates_verification_code_valid_email_body_html: Option<String>

Configures the Ory Kratos Valid Verification via Code Email Body HTML Template This governs the "courier.smtp.templates.verification_code.valid.email.body.html" setting.

§kratos_courier_templates_verification_code_valid_email_body_plaintext: Option<String>

Configures the Ory Kratos Valid Verification via Code Email Body Plaintext Template This governs the "courier.smtp.templates.verification_code.valid.email.body.plaintext" setting.

§kratos_courier_templates_verification_code_valid_email_subject: Option<String>

Configures the Ory Kratos Valid Verification via Code Email Subject Template This governs the "courier.smtp.templates.verification_code.valid.email.subject" setting.

§kratos_courier_templates_verification_code_valid_sms_body_plaintext: Option<String>

Configures the Ory Kratos Valid Verification via Code SMS Body Plaintext This governs the "courier.smtp.templates.verification_code.valid.sms.body.plaintext" setting.

§kratos_courier_templates_verification_invalid_email_body_html: Option<String>

Configures the Ory Kratos Invalid Verification Email Body HTML Template This governs the "courier.smtp.templates.verification.invalid.email.body.html" setting.

§kratos_courier_templates_verification_invalid_email_body_plaintext: Option<String>

Configures the Ory Kratos Invalid Verification Email Body Plaintext Template This governs the "courier.smtp.templates.verification.invalid.email.body.plaintext" setting.

§kratos_courier_templates_verification_invalid_email_subject: Option<String>

Configures the Ory Kratos Invalid Verification Email Subject Template This governs the "courier.smtp.templates.verification.invalid.email.subject" setting.

§kratos_courier_templates_verification_valid_email_body_html: Option<String>

Configures the Ory Kratos Valid Verification Email Body HTML Template This governs the "courier.smtp.templates.verification.valid.email.body.html" setting.

§kratos_courier_templates_verification_valid_email_body_plaintext: Option<String>

Configures the Ory Kratos Valid Verification Email Body Plaintext Template This governs the "courier.smtp.templates.verification.valid.email.body.plaintext" setting.

§kratos_courier_templates_verification_valid_email_subject: Option<String>

Configures the Ory Kratos Valid Verification Email Subject Template This governs the "courier.smtp.templates.verification.valid.email.subject" setting.

§kratos_feature_flags_cacheable_sessions: Option<bool>

Configures the Ory Kratos Session caching feature flag This governs the "feature_flags.cacheable_sessions" setting.

§kratos_feature_flags_cacheable_sessions_max_age: Option<String>

Configures the Ory Kratos Session caching max-age feature flag This governs the "feature_flags.cacheable_sessions_max_age" setting.

§kratos_feature_flags_choose_recovery_address: Option<bool>

This governs the "feature_flags.choose_recovery_address" setting.

§kratos_feature_flags_faster_session_extend: Option<bool>

Configures the Ory Kratos Faster Session Extend setting If enabled allows faster session extension by skipping the session lookup and returning 201 instead of 200. Disabling this feature will be deprecated in the future. This governs the "feature_flags.faster_session_extend" setting.

§kratos_feature_flags_legacy_continue_with_verification_ui: Option<bool>

Always include show_verification_ui in continue_with If true, restores the legacy behavior of always including show_verification_ui in the registration flow’s continue_with when verification is enabled. If set to false, show_verification_ui is only set in continue_with if the show_verification_ui hook is used. This flag will be removed in the future. This governs the "feature_flags.legacy_continue_with_verification_ui" setting.

§kratos_feature_flags_legacy_oidc_registration_node_group: Option<bool>

Controls whether the UI nodes in an OIDC registration flow have group "oidc" in case required fields are not returned by the OIDC provider. If set to true, the UI nodes will have group "oidc" and the flow will be considered successful if the user completes the flow. This is the legacy behavior. This governs the "feature_flags.legacy_oidc_registration_node_group" setting.

§kratos_feature_flags_legacy_require_verified_login_error: Option<bool>

Return a form error if the login identifier is not verified If true, the login flow will return a form error if the login identifier is not verified, which restores legacy behavior. If this value is false, the continue_with array will contain a show_verification_ui hook instead. This flag is deprecated and will be removed in the future. This governs the "feature_flags.legacy_require_verified_login_error" setting.

§kratos_feature_flags_password_profile_registration_node_group: Option<bool>

Configures the group for the password method in the registration flow. If true, it sets the password method group value to "password" if it is the only method available. This is the legacy behavior. If false is, it sets the password method group value to "default".

§kratos_feature_flags_use_continue_with_transitions: Option<bool>

Configures the Ory Kratos Session use_continue_with_transitions flag This governs the "feature_flags.use_continue_with_transitions" setting.

§kratos_identity_schemas: Option<Vec<NormalizedProjectRevisionIdentitySchema>>§kratos_oauth2_provider_headers: Option<Option<Value>>

NullJSONRawMessage represents a json.RawMessage that works well with JSON, SQL, and Swagger and is NULLable-

§kratos_oauth2_provider_override_return_to: Option<bool>

Kratos OAuth2 Provider Override Return To Enabling this allows Kratos to set the return_to parameter automatically to the OAuth2 request URL on the login flow, allowing complex flows such as recovery to continue to the initial OAuth2 flow.

§kratos_oauth2_provider_url: Option<String>

The Revisions’ OAuth2 Provider Integration URL This governs the "oauth2_provider.url" setting.

§kratos_preview_default_read_consistency_level: Option<String>

Configures the default read consistency level for identity APIs This governs the preview.default_read_consistency_level setting. The read consistency level determines the consistency guarantee for reads: strong (slow): The read is guaranteed to return the most recent data committed at the start of the read. eventual (very fast): The result will return data that is about 4.8 seconds old. Setting the default consistency level to eventual may cause regressions in the future as we add consistency controls to more APIs. Currently, the following APIs will be affected by this setting: GET /admin/identities Defaults to "strong" for new and existing projects. This feature is in preview. Use with caution.

§kratos_secrets_cipher: Option<Vec<String>>§kratos_secrets_cookie: Option<Vec<String>>§kratos_secrets_default: Option<Vec<String>>§kratos_secrets_pagination: Option<Vec<String>>§kratos_security_account_enumeration_mitigate: Option<bool>

Configures if account enumeration should be mitigated when using identifier first login.

§kratos_selfservice_allowed_return_urls: Option<Vec<String>>§kratos_selfservice_default_browser_return_url: Option<String>

Configures the Ory Kratos Default Return URL This governs the "selfservice.allowed_return_urls" setting.

§kratos_selfservice_flows_error_ui_url: Option<String>

Configures the Ory Kratos Error UI URL This governs the "selfservice.flows.error.ui_url" setting.

§kratos_selfservice_flows_login_after_code_default_browser_return_url: Option<String>

Configures the Ory Kratos Login After Password Default Return URL This governs the "selfservice.flows.code.after.password.default_browser_return_url" setting.

§kratos_selfservice_flows_login_after_default_browser_return_url: Option<String>

Configures the Ory Kratos Login Default Return URL This governs the "selfservice.flows.login.after.default_browser_return_url" setting.

§kratos_selfservice_flows_login_after_lookup_secret_default_browser_return_url: Option<String>

Configures the Ory Kratos Login After Password Default Return URL This governs the "selfservice.flows.lookup_secret.after.password.default_browser_return_url" setting.

§kratos_selfservice_flows_login_after_oidc_default_browser_return_url: Option<String>

Configures the Ory Kratos Login After OIDC Default Return URL This governs the "selfservice.flows.login.after.oidc.default_browser_return_url" setting.

§kratos_selfservice_flows_login_after_passkey_default_browser_return_url: Option<String>

Configures the Ory Kratos Login After Passkey Default Return URL This governs the "selfservice.flows.login.after.passkey.default_browser_return_url" setting.

§kratos_selfservice_flows_login_after_password_default_browser_return_url: Option<String>

Configures the Ory Kratos Login After Password Default Return URL This governs the "selfservice.flows.login.after.password.default_browser_return_url" setting.

§kratos_selfservice_flows_login_after_totp_default_browser_return_url: Option<String>

Configures the Ory Kratos Login After Password Default Return URL This governs the "selfservice.flows.totp.after.password.default_browser_return_url" setting.

§kratos_selfservice_flows_login_after_webauthn_default_browser_return_url: Option<String>

Configures the Ory Kratos Login After WebAuthn Default Return URL This governs the "selfservice.flows.login.after.webauthn.default_browser_return_url" setting.

§kratos_selfservice_flows_login_lifespan: Option<String>

Configures the Ory Kratos Login Lifespan This governs the "selfservice.flows.login.lifespan" setting.

§kratos_selfservice_flows_login_ui_url: Option<String>

Configures the Ory Kratos Login UI URL This governs the "selfservice.flows.login.ui_url" setting.

§kratos_selfservice_flows_logout_after_default_browser_return_url: Option<String>

Configures the Ory Kratos Logout Default Return URL This governs the "selfservice.flows.logout.after.default_browser_return_url" setting.

§kratos_selfservice_flows_recovery_after_default_browser_return_url: Option<String>

Configures the Ory Kratos Recovery Default Return URL This governs the "selfservice.flows.recovery.after.default_browser_return_url" setting.

§kratos_selfservice_flows_recovery_enabled: Option<bool>

Configures the Ory Kratos Recovery Enabled Setting This governs the "selfservice.flows.recovery.enabled" setting.

§kratos_selfservice_flows_recovery_lifespan: Option<String>

Configures the Ory Kratos Recovery Lifespan This governs the "selfservice.flows.recovery.lifespan" setting.

§kratos_selfservice_flows_recovery_notify_unknown_recipients: Option<bool>

Configures whether to notify unknown recipients of a Ory Kratos recovery flow This governs the "selfservice.flows.recovery.notify_unknown_recipients" setting.

§kratos_selfservice_flows_recovery_ui_url: Option<String>

Configures the Ory Kratos Recovery UI URL This governs the "selfservice.flows.recovery.ui_url" setting.

§kratos_selfservice_flows_recovery_use: Option<KratosSelfserviceFlowsRecoveryUseEnum>

Configures the Ory Kratos Recovery strategy to use ("link" or "code") This governs the "selfservice.flows.recovery.use" setting. link SelfServiceMessageVerificationStrategyLink code SelfServiceMessageVerificationStrategyCode

§kratos_selfservice_flows_registration_after_code_default_browser_return_url: Option<String>

Configures the Ory Kratos Registration After Code Default Return URL This governs the "selfservice.flows.registration.after.code.default_browser_return_url" setting.

§kratos_selfservice_flows_registration_after_default_browser_return_url: Option<String>

Configures the Ory Kratos Registration Default Return URL This governs the "selfservice.flows.registration.after.default_browser_return_url" setting.

§kratos_selfservice_flows_registration_after_oidc_default_browser_return_url: Option<String>

Configures the Ory Kratos Registration After OIDC Default Return URL This governs the "selfservice.flows.registration.after.oidc.default_browser_return_url" setting.

§kratos_selfservice_flows_registration_after_passkey_default_browser_return_url: Option<String>

Configures the Ory Kratos Registration After Passkey Default Return URL This governs the "selfservice.flows.registration.after.password.default_browser_return_url" setting.

§kratos_selfservice_flows_registration_after_password_default_browser_return_url: Option<String>

Configures the Ory Kratos Registration After Password Default Return URL This governs the "selfservice.flows.registration.after.password.default_browser_return_url" setting.

§kratos_selfservice_flows_registration_after_webauthn_default_browser_return_url: Option<String>

Configures the Ory Kratos Registration After Webauthn Default Return URL This governs the "selfservice.flows.registration.after.webauthn.default_browser_return_url" setting.

§kratos_selfservice_flows_registration_enable_legacy_one_step: Option<bool>

Disable two-step registration Two-step registration is a significantly improved sign up flow and recommended when using more than one sign up methods. To revert to one-step registration, set this to true. This governs the "selfservice.flows.registration.enable_legacy_one_step" setting.

§kratos_selfservice_flows_registration_enabled: Option<bool>

Configures the Whether Ory Kratos Registration is Enabled This governs the "selfservice.flows.registration.enabled" setting.0

§kratos_selfservice_flows_registration_lifespan: Option<String>

Configures the Ory Kratos Registration Lifespan This governs the "selfservice.flows.registration.lifespan" setting.

§kratos_selfservice_flows_registration_login_hints: Option<bool>

Configures the Ory Kratos Registration Login Hints Shows helpful information when a user tries to sign up with a duplicate account. This governs the "selfservice.flows.registration.login_hints" setting.

§kratos_selfservice_flows_registration_ui_url: Option<String>

Configures the Ory Kratos Registration UI URL This governs the "selfservice.flows.registration.ui_url" setting.

§kratos_selfservice_flows_settings_after_default_browser_return_url: Option<String>

Configures the Ory Kratos Settings Default Return URL This governs the "selfservice.flows.settings.after.default_browser_return_url" setting.

§kratos_selfservice_flows_settings_after_lookup_secret_default_browser_return_url: Option<String>

Configures the Ory Kratos Settings Default Return URL After Updating Lookup Secrets This governs the "selfservice.flows.settings.after.lookup_secret.default_browser_return_url" setting.

§kratos_selfservice_flows_settings_after_oidc_default_browser_return_url: Option<String>

Configures the Ory Kratos Settings Default Return URL After Updating Social Sign In This governs the "selfservice.flows.settings.after.oidc.default_browser_return_url" setting.

§kratos_selfservice_flows_settings_after_passkey_default_browser_return_url: Option<String>

Configures the Ory Kratos Settings Default Return URL After Updating Passkey This governs the "selfservice.flows.settings.after.passkey.default_browser_return_url" setting.

§kratos_selfservice_flows_settings_after_password_default_browser_return_url: Option<String>

Configures the Ory Kratos Settings Default Return URL After Updating Passwords This governs the "selfservice.flows.settings.after.password.default_browser_return_url" setting.

§kratos_selfservice_flows_settings_after_profile_default_browser_return_url: Option<String>

Configures the Ory Kratos Settings Default Return URL After Updating Profiles This governs the "selfservice.flows.settings.after.profile.default_browser_return_url" setting.

§kratos_selfservice_flows_settings_after_totp_default_browser_return_url: Option<String>

Configures the Ory Kratos Settings Default Return URL After Updating TOTP This governs the "selfservice.flows.settings.after.totp.default_browser_return_url" setting.

§kratos_selfservice_flows_settings_after_webauthn_default_browser_return_url: Option<String>

Configures the Ory Kratos Settings Default Return URL After Updating WebAuthn This governs the "selfservice.flows.settings.after.webauthn.default_browser_return_url" setting.

§kratos_selfservice_flows_settings_lifespan: Option<String>

Configures the Ory Kratos Settings Lifespan This governs the "selfservice.flows.settings.lifespan" setting.

§kratos_selfservice_flows_settings_privileged_session_max_age: Option<String>

Configures the Ory Kratos Settings Privileged Session Max Age This governs the "selfservice.flows.settings.privileged_session_max_age" setting.

§kratos_selfservice_flows_settings_required_aal: Option<String>

Configures the Ory Kratos Settings Required AAL This governs the "selfservice.flows.settings.required_aal" setting.

§kratos_selfservice_flows_settings_ui_url: Option<String>

Configures the Ory Kratos Settings UI URL This governs the "selfservice.flows.settings.ui_url" setting.

§kratos_selfservice_flows_verification_after_default_browser_return_url: Option<String>

Configures the Ory Kratos Verification Default Return URL This governs the "selfservice.flows.verification.after.default_browser_return_url" setting.

§kratos_selfservice_flows_verification_enabled: Option<bool>

Configures the Ory Kratos Verification Enabled Setting This governs the "selfservice.flows.verification.enabled" setting.

§kratos_selfservice_flows_verification_lifespan: Option<String>

Configures the Ory Kratos Verification Lifespan This governs the "selfservice.flows.verification.lifespan" setting.

§kratos_selfservice_flows_verification_notify_unknown_recipients: Option<bool>

Configures whether to notify unknown recipients of a Ory Kratos verification flow This governs the "selfservice.flows.verification.notify_unknown_recipients" setting.

§kratos_selfservice_flows_verification_ui_url: Option<String>

Configures the Ory Kratos Verification UI URL This governs the "selfservice.flows.verification.ui_url" setting.

§kratos_selfservice_flows_verification_use: Option<KratosSelfserviceFlowsVerificationUseEnum>

Configures the Ory Kratos Strategy to use for Verification This governs the "selfservice.flows.verification.use" setting. link SelfServiceMessageVerificationStrategyLink code SelfServiceMessageVerificationStrategyCode

§kratos_selfservice_methods_captcha_config_allowed_domains: Option<Vec<String>>§kratos_selfservice_methods_captcha_config_cf_turnstile_secret: Option<String>

Configures the Cloudflare Turnstile site secret for CAPTCHA protection The site secret is private and will be never be shared with the client. This key is write only and the value will not be returned in response to a read request. Reach out to your account manager to enable this feature.

§kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey: Option<String>

Configures the Cloudflare Turnstile site key for CAPTCHA protection The site key is public and will be shared with the client. Reach out to your account manager to enable this feature.

§kratos_selfservice_methods_captcha_config_legacy_inject_node: Option<bool>

Configures the Ory Kratos Self-Service Methods’ Captcha Enabled Setting Reach out to your account manager to enable this feature.

§kratos_selfservice_methods_captcha_enabled: Option<bool>

Configures the Ory Kratos Self-Service Methods’ Captcha Enabled Setting Reach out to your account manager to enable this feature.

§kratos_selfservice_methods_code_config_lifespan: Option<String>

Configures the Ory Kratos Code Method’s lifespan This governs the "selfservice.methods.code.config.lifespan" setting.

§kratos_selfservice_methods_code_config_max_submissions: Option<Option<i32>>§kratos_selfservice_methods_code_config_missing_credential_fallback_enabled: Option<bool>

Enables a fallback method required in certain legacy use cases. This governs the "selfservice.methods.code.config.missing_credential_fallback_enabled" setting.

§kratos_selfservice_methods_code_enabled: Option<bool>

Configures whether Ory Kratos Code Method is enabled This governs the "selfservice.methods.code.enabled" setting.

§kratos_selfservice_methods_code_mfa_enabled: Option<bool>

Configures whether the code method can be used to fulfil MFA flows This governs the "selfservice.methods.code.mfa_enabled" setting.

§kratos_selfservice_methods_code_passwordless_enabled: Option<bool>

Configures whether Ory Kratos Passwordless should use the Code Method This governs the "selfservice.methods.code.passwordless_enabled" setting.

§kratos_selfservice_methods_code_passwordless_login_fallback_enabled: Option<bool>

This setting allows the code method to always login a user with code if they have registered with another authentication method such as password or social sign in. This governs the "selfservice.methods.code.passwordless_login_fallback_enabled" setting.

§kratos_selfservice_methods_link_config_base_url: Option<String>

Configures the Base URL which Recovery, Verification, and Login Links Point to It is recommended to leave this value empty. It will be appropriately configured to the best matching domain (e.g. when using custom domains) automatically. This governs the "selfservice.methods.link.config.base_url" setting.

§kratos_selfservice_methods_link_config_lifespan: Option<String>

Configures the Ory Kratos Link Method’s lifespan This governs the "selfservice.methods.link.config.lifespan" setting.

§kratos_selfservice_methods_link_enabled: Option<bool>

Configures whether Ory Kratos Link Method is enabled This governs the "selfservice.methods.link.enabled" setting.

§kratos_selfservice_methods_lookup_secret_enabled: Option<bool>

Configures whether Ory Kratos TOTP Lookup Secret is enabled This governs the "selfservice.methods.lookup_secret.enabled" setting.

§kratos_selfservice_methods_oidc_config_base_redirect_uri: Option<String>

Configures the Ory Kratos Third Party / OpenID Connect base redirect URI This governs the "selfservice.methods.oidc.config.base_redirect_uri" setting.

§kratos_selfservice_methods_oidc_config_providers: Option<Vec<NormalizedProjectRevisionThirdPartyProvider>>§kratos_selfservice_methods_oidc_enable_auto_link_policy: Option<bool>

Configures whether Ory Kratos allows auto-linking of OIDC credentials without a subject This governs the "selfservice.methods.oidc.enable_auto_link_policy" setting.

§kratos_selfservice_methods_oidc_enabled: Option<bool>

Configures whether Ory Kratos Third Party / OpenID Connect Login is enabled This governs the "selfservice.methods.oidc.enabled" setting.

§kratos_selfservice_methods_passkey_config_rp_display_name: Option<String>

Configures the Ory Kratos Passkey RP Display Name This governs the "selfservice.methods.passkey.config.rp.display_name" setting.

§kratos_selfservice_methods_passkey_config_rp_id: Option<String>

Configures the Ory Kratos Passkey RP ID This governs the "selfservice.methods.passkey.config.rp.id" setting.

§kratos_selfservice_methods_passkey_config_rp_origins: Option<Vec<String>>§kratos_selfservice_methods_passkey_enabled: Option<bool>

Configures whether Ory Kratos Passkey authentication is enabled This governs the "selfservice.methods.passkey.enabled" setting.

§kratos_selfservice_methods_password_config_haveibeenpwned_enabled: Option<bool>

Configures whether Ory Kratos Password HIBP Checks is enabled This governs the "selfservice.methods.password.config.haveibeenpwned_enabled" setting.

§kratos_selfservice_methods_password_config_identifier_similarity_check_enabled: Option<bool>

Configures whether Ory Kratos Password should disable the similarity policy. This governs the "selfservice.methods.password.config.identifier_similarity_check_enabled" setting.

§kratos_selfservice_methods_password_config_ignore_network_errors: Option<bool>

Configures whether Ory Kratos Password Should ignore HIBPWND Network Errors This governs the "selfservice.methods.password.config.ignore_network_errors" setting.

§kratos_selfservice_methods_password_config_max_breaches: Option<i64>

Configures Ory Kratos Password Max Breaches Detection This governs the "selfservice.methods.password.config.max_breaches" setting.

§kratos_selfservice_methods_password_config_min_password_length: Option<i64>

Configures the minimum length of passwords. This governs the "selfservice.methods.password.config.min_password_length" setting.

§kratos_selfservice_methods_password_enabled: Option<bool>

Configures whether Ory Kratos Password Method is enabled This governs the "selfservice.methods.password.enabled" setting.

§kratos_selfservice_methods_profile_enabled: Option<bool>

Configures whether Ory Kratos Profile Method is enabled This governs the "selfservice.methods.profile.enabled" setting.

§kratos_selfservice_methods_saml_config_providers: Option<Vec<NormalizedProjectRevisionSamlProvider>>§kratos_selfservice_methods_saml_enabled: Option<bool>

Configures whether Ory Kratos SAML Login is enabled This governs the "selfservice.methods.saml.enabled" setting.

§kratos_selfservice_methods_totp_config_issuer: Option<String>

Configures Ory Kratos TOTP Issuer This governs the "selfservice.methods.totp.config.issuer" setting.

§kratos_selfservice_methods_totp_enabled: Option<bool>

Configures whether Ory Kratos TOTP Method is enabled This governs the "selfservice.methods.totp.enabled" setting.

§kratos_selfservice_methods_webauthn_config_passwordless: Option<bool>

Configures whether Ory Kratos Webauthn is used for passwordless flows This governs the "selfservice.methods.webauthn.config.passwordless" setting.

§kratos_selfservice_methods_webauthn_config_rp_display_name: Option<String>

Configures the Ory Kratos Webauthn RP Display Name This governs the "selfservice.methods.webauthn.config.rp.display_name" setting.

§kratos_selfservice_methods_webauthn_config_rp_icon: Option<String>

Configures the Ory Kratos Webauthn RP Icon This governs the "selfservice.methods.webauthn.config.rp.icon" setting. Deprecated: This value will be ignored due to security considerations.

§kratos_selfservice_methods_webauthn_config_rp_id: Option<String>

Configures the Ory Kratos Webauthn RP ID This governs the "selfservice.methods.webauthn.config.rp.id" setting.

§kratos_selfservice_methods_webauthn_config_rp_origins: Option<Vec<String>>§kratos_selfservice_methods_webauthn_enabled: Option<bool>

Configures whether Ory Kratos Webauthn is enabled This governs the "selfservice.methods.webauthn.enabled" setting.

§kratos_session_cookie_persistent: Option<bool>

Configures the Ory Kratos Session Cookie Persistent Attribute This governs the "session.cookie.persistent" setting.

§kratos_session_cookie_same_site: Option<String>

Configures the Ory Kratos Session Cookie SameSite Attribute This governs the "session.cookie.same_site" setting.

§kratos_session_lifespan: Option<String>

Configures the Ory Kratos Session Lifespan This governs the "session.lifespan" setting.

§kratos_session_whoami_required_aal: Option<String>

Configures the Ory Kratos Session Whoami AAL requirement This governs the "session.whoami.required_aal" setting.

§kratos_session_whoami_tokenizer_templates: Option<Vec<NormalizedProjectRevisionTokenizerTemplate>>§name: String

The project’s name.

§organizations: Option<Vec<Organization>>§project_id: Option<String>

The Revision’s Project ID

§project_revision_hooks: Option<Vec<NormalizedProjectRevisionHook>>§scim_clients: Option<Vec<NormalizedProjectRevisionScimClient>>§serve_admin_cors_allowed_origins: Option<Vec<String>>§serve_admin_cors_enabled: Option<bool>

Enable CORS headers on all admin APIs This governs the "serve.admin.cors.enabled" setting.

§serve_public_cors_allowed_origins: Option<Vec<String>>§serve_public_cors_enabled: Option<bool>

Enable CORS headers on all public APIs This governs the "serve.public.cors.enabled" setting.

§strict_security: Option<bool>

Whether the project should employ strict security measures. Setting this to true is recommended for going into production.

§updated_at: Option<String>

Last Time Project’s Revision was Updated