diff --git a/build.savant b/build.savant
index 68992a0..5ecb81c 100644
--- a/build.savant
+++ b/build.savant
@@ -14,7 +14,7 @@
  * language governing permissions and limitations under the License.
  */
 
-project(group: "io.fusionauth", name: "fusionauth-typescript-client", version: "1.53.3", licenses: ["ApacheV2_0"]) {
+project(group: "io.fusionauth", name: "fusionauth-typescript-client", version: "1.54.0", licenses: ["ApacheV2_0"]) {
   workflow {
     fetch {
       cache()
diff --git a/package-lock.json b/package-lock.json
index eb6e5e3..3e79744 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "@fusionauth/typescript-client",
-  "version": "1.53.3",
+  "version": "1.54.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
diff --git a/package.json b/package.json
index 0eb7d47..2384d9b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@fusionauth/typescript-client",
-  "version": "1.53.3",
+  "version": "1.54.0",
   "description": "A typescript implementation of the FusionAuth client.",
   "main": "build/index.js",
   "types": "build/index.d.ts",
diff --git a/src/FusionAuthClient.ts b/src/FusionAuthClient.ts
index ae8610e..f943881 100644
--- a/src/FusionAuthClient.ts
+++ b/src/FusionAuthClient.ts
@@ -5489,887 +5489,829 @@ export type UUID = string;
 
 
 /**
- * Authorization Grant types as defined by the <a href="https://tools.ietf.org/html/rfc6749">The OAuth 2.0 Authorization
- * Framework - RFC 6749</a>.
- * <p>
- * Specific names as defined by <a href="https://tools.ietf.org/html/rfc7591#section-4.1">
- * OAuth 2.0 Dynamic Client Registration Protocol - RFC 7591 Section 4.1</a>
+ * Webhook attempt log response.
  *
- * @author Daniel DeGroff
+ * @author Spencer Witt
  */
-export enum GrantType {
-  authorization_code = "authorization_code",
-  implicit = "implicit",
-  password = "password",
-  client_credentials = "client_credentials",
-  refresh_token = "refresh_token",
-  unknown = "unknown",
-  device_code = "urn:ietf:params:oauth:grant-type:device_code"
+export interface WebhookAttemptLogResponse {
+  webhookAttemptLog?: WebhookAttemptLog;
 }
 
 /**
- * Used to indicate what type of attestation was included in the authenticator response for a given WebAuthn credential at the time it was created
- *
- * @author Spencer Witt
+ * @author Rob Davis
  */
-export enum AttestationType {
-  basic = "basic",
-  self = "self",
-  attestationCa = "attestationCa",
-  anonymizationCa = "anonymizationCa",
-  none = "none"
+export interface TenantLambdaConfiguration {
+  loginValidationId?: UUID;
+  scimEnterpriseUserRequestConverterId?: UUID;
+  scimEnterpriseUserResponseConverterId?: UUID;
+  scimGroupRequestConverterId?: UUID;
+  scimGroupResponseConverterId?: UUID;
+  scimUserRequestConverterId?: UUID;
+  scimUserResponseConverterId?: UUID;
+}
+
+export interface SAMLv2AssertionEncryptionConfiguration extends Enableable {
+  digestAlgorithm?: string;
+  encryptionAlgorithm?: string;
+  keyLocation?: string;
+  keyTransportAlgorithm?: string;
+  keyTransportEncryptionKeyId?: UUID;
+  maskGenerationFunction?: string;
 }
 
 /**
- * Identity Provider response.
+ * Models action reasons.
  *
- * @author Spencer Witt
+ * @author Brian Pontarelli
  */
-export interface IdentityProviderSearchResponse {
-  identityProviders?: Array<BaseIdentityProvider<any>>;
-  total?: number;
+export interface UserActionReason {
+  code?: string;
+  id?: UUID;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  localizedTexts?: LocalizedStrings;
+  text?: string;
 }
 
-/**
- * @author Daniel DeGroff
- */
-export interface BaseExportRequest {
-  dateTimeSecondsFormat?: string;
-  zoneId?: string;
+export interface AuthenticationTokenConfiguration extends Enableable {
 }
 
 /**
- * Models the User Created Registration Event.
- * <p>
- * This is different than the user.registration.create event in that it will be sent after the user has been created. This event cannot be made
- * transactional.
+ * Event to indicate an audit log was created.
  *
  * @author Daniel DeGroff
  */
-export interface UserRegistrationCreateCompleteEvent extends BaseUserEvent {
-  applicationId?: UUID;
-  registration?: UserRegistration;
+export interface AuditLogCreateEvent extends BaseEvent {
+  auditLog?: AuditLog;
 }
 
 /**
- * The user action response object.
+ * Models the FusionAuth connector.
  *
- * @author Brian Pontarelli
- */
-export interface ActionResponse {
-  action?: UserActionLog;
-  actions?: Array<UserActionLog>;
-}
-
-/**
- * @author Michael Sleevi
+ * @author Trevor Smith
  */
-export interface SMSMessage {
-  phoneNumber?: string;
-  textMessage?: string;
+export interface FusionAuthConnectorConfiguration extends BaseConnectorConfiguration {
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface MessengerTransport {
+export interface AuditLogRequest extends BaseEventRequest {
+  auditLog?: AuditLog;
 }
 
 /**
- * User registration information for a single application.
- *
- * @author Brian Pontarelli
+ * @author Brett Guy
  */
-export interface UserRegistration {
-  applicationId?: UUID;
-  authenticationToken?: string;
-  cleanSpeakId?: UUID;
+export interface IPAccessControlList {
   data?: Record<string, any>;
+  entries?: Array<IPAccessControlEntry>;
   id?: UUID;
   insertInstant?: number;
-  lastLoginInstant?: number;
   lastUpdateInstant?: number;
-  preferredLanguages?: Array<string>;
-  roles?: Array<string>;
-  timezone?: string;
-  tokens?: Record<string, string>;
-  username?: string;
-  usernameStatus?: ContentStatus;
-  verified?: boolean;
-  verifiedInstant?: number;
+  name?: string;
 }
 
 /**
- * Base class for requests that can contain event information. This event information is used when sending Webhooks or emails
- * during the transaction. The caller is responsible for ensuring that the event information is correct.
- *
- * @author Brian Pontarelli
+ * @author Lyle Schemmerling
  */
-export interface BaseEventRequest {
-  eventInfo?: EventInfo;
+export interface SAMLv2DestinationAssertionConfiguration {
+  alternates?: Array<string>;
+  policy?: SAMLv2DestinationAssertionPolicy;
 }
 
 /**
- * A webhook call attempt log.
+ * Form response.
  *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export interface WebhookAttemptLog {
-  attemptResult?: WebhookAttemptResult;
-  data?: Record<string, any>;
-  endInstant?: number;
-  id?: UUID;
-  startInstant?: number;
-  webhookCallResponse?: WebhookCallResponse;
-  webhookEventLogId?: UUID;
-  webhookId?: UUID;
+export interface FormRequest {
+  form?: Form;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Seth Musselman
  */
-export interface JWTVendRequest {
-  claims?: Record<string, any>;
-  keyId?: UUID;
-  timeToLiveInSeconds?: number;
+export interface UserCommentRequest {
+  userComment?: UserComment;
 }
 
 /**
- * Event log used internally by FusionAuth to help developers debug hooks, Webhooks, email templates, etc.
+ * IdP Initiated login configuration
  *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface EventLog {
-  id?: number;
-  insertInstant?: number;
-  message?: string;
-  type?: EventLogType;
+export interface SAMLv2IdPInitiatedLoginConfiguration extends Enableable {
+  nameIdFormat?: string;
+}
+
+export interface DeleteConfiguration extends Enableable {
+  numberOfDaysToRetain?: number;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface LookupResponse {
-  identityProvider?: IdentityProviderDetails;
+export enum FormDataType {
+  bool = "bool",
+  consent = "consent",
+  date = "date",
+  email = "email",
+  number = "number",
+  string = "string"
 }
 
-export interface IdentityProviderDetails {
-  applicationIds?: Array<UUID>;
-  id?: UUID;
-  idpEndpoint?: string;
-  name?: string;
-  oauth2?: IdentityProviderOauth2Configuration;
-  type?: IdentityProviderType;
+/**
+ * Key search response
+ *
+ * @author Spencer Witt
+ */
+export interface KeySearchResponse {
+  keys?: Array<Key>;
+  total?: number;
 }
 
 /**
- * @author Daniel DeGroff
+ * A Application-level policy for deleting Users.
+ *
+ * @author Trevor Smith
  */
-export interface IntrospectResponse extends Record<string, any> {
+export interface ApplicationRegistrationDeletePolicy {
+  unverified?: TimeBasedDeletePolicy;
 }
 
 /**
- * Models the Group Member Update Event.
+ * Models the User Delete Registration Event.
  *
  * @author Daniel DeGroff
  */
-export interface GroupMemberUpdateEvent extends BaseGroupEvent {
-  members?: Array<GroupMember>;
+export interface UserRegistrationDeleteEvent extends BaseUserEvent {
+  applicationId?: UUID;
+  registration?: UserRegistration;
 }
 
 /**
- * Search request for webhooks
- *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export interface WebhookSearchRequest {
-  search?: WebhookSearchCriteria;
+export interface AccessToken {
+  access_token?: string;
+  expires_in?: number;
+  id_token?: string;
+  refresh_token?: string;
+  refresh_token_id?: UUID;
+  scope?: string;
+  token_type?: TokenType;
+  userId?: UUID;
 }
 
 /**
- * Change password response object.
+ * Search request for Group Members.
  *
  * @author Daniel DeGroff
  */
-export interface ChangePasswordResponse {
-  oneTimePassword?: string;
-  state?: Record<string, any>;
+export interface GroupMemberSearchRequest {
+  search?: GroupMemberSearchCriteria;
+}
+
+export interface MultiFactorSMSTemplate {
+  templateId?: UUID;
 }
 
 /**
- * A server where events are sent. This includes user action events and any other events sent by FusionAuth.
+ * A log for an event that happened to a User.
  *
  * @author Brian Pontarelli
  */
-export interface Webhook {
-  connectTimeout?: number;
-  data?: Record<string, any>;
-  description?: string;
-  eventsEnabled?: Record<EventType, boolean>;
-  global?: boolean;
-  headers?: HTTPHeaders;
-  httpAuthenticationPassword?: string;
-  httpAuthenticationUsername?: string;
+export interface UserComment {
+  comment?: string;
+  commenterId?: UUID;
   id?: UUID;
   insertInstant?: number;
-  lastUpdateInstant?: number;
-  readTimeout?: number;
-  signatureConfiguration?: WebhookSignatureConfiguration;
-  sslCertificate?: string;
-  sslCertificateKeyId?: UUID;
-  tenantIds?: Array<UUID>;
-  url?: string;
+  userId?: UUID;
 }
 
 /**
- * Available Integrations
+ * Models the Group Create Complete Event.
  *
  * @author Daniel DeGroff
  */
-export interface Integrations {
-  cleanspeak?: CleanSpeakConfiguration;
-  kafka?: KafkaConfiguration;
+export interface GroupDeleteCompleteEvent extends BaseGroupEvent {
 }
 
 /**
- * Search criteria for the event log.
+ * Email template search response
  *
- * @author Brian Pontarelli
+ * @author Mark Manes
  */
-export interface EventLogSearchCriteria extends BaseSearchCriteria {
-  end?: number;
-  message?: string;
-  start?: number;
-  type?: EventLogType;
+export interface EmailTemplateSearchResponse {
+  emailTemplates?: Array<EmailTemplate>;
+  total?: number;
 }
 
 /**
- * @author Brian Pontarelli
+ * A marker interface indicating this event is not scoped to a tenant and will be sent to all webhooks.
+ *
+ * @author Daniel DeGroff
  */
-export interface EmailConfiguration {
-  additionalHeaders?: Array<EmailHeader>;
-  debug?: boolean;
-  defaultFromEmail?: string;
-  defaultFromName?: string;
-  emailUpdateEmailTemplateId?: UUID;
-  emailVerifiedEmailTemplateId?: UUID;
-  forgotPasswordEmailTemplateId?: UUID;
-  host?: string;
-  implicitEmailVerificationAllowed?: boolean;
-  loginIdInUseOnCreateEmailTemplateId?: UUID;
-  loginIdInUseOnUpdateEmailTemplateId?: UUID;
-  loginNewDeviceEmailTemplateId?: UUID;
-  loginSuspiciousEmailTemplateId?: UUID;
-  password?: string;
-  passwordlessEmailTemplateId?: UUID;
-  passwordResetSuccessEmailTemplateId?: UUID;
-  passwordUpdateEmailTemplateId?: UUID;
-  port?: number;
-  properties?: string;
-  security?: EmailSecurityType;
-  setPasswordEmailTemplateId?: UUID;
-  twoFactorMethodAddEmailTemplateId?: UUID;
-  twoFactorMethodRemoveEmailTemplateId?: UUID;
-  unverified?: EmailUnverifiedOptions;
-  username?: string;
-  verificationEmailTemplateId?: UUID;
-  verificationStrategy?: VerificationStrategy;
-  verifyEmail?: boolean;
-  verifyEmailWhenChanged?: boolean;
-}
-
-export enum EmailSecurityType {
-  NONE = "NONE",
-  SSL = "SSL",
-  TLS = "TLS"
+export interface InstanceEvent extends NonTransactionalEvent {
 }
 
 /**
- * @author Brett Pontarelli
+ * Models the user action Event.
+ *
+ * @author Brian Pontarelli
  */
-export interface TwitchApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
-  buttonText?: string;
-  client_id?: string;
-  client_secret?: string;
-  scope?: string;
+export interface UserActionEvent extends BaseEvent {
+  action?: string;
+  actioneeUserId?: UUID;
+  actionerUserId?: UUID;
+  actionId?: UUID;
+  applicationIds?: Array<UUID>;
+  comment?: string;
+  email?: Email;
+  emailedUser?: boolean;
+  expiry?: number;
+  localizedAction?: string;
+  localizedDuration?: string;
+  localizedOption?: string;
+  localizedReason?: string;
+  notifyUser?: boolean;
+  option?: string;
+  phase?: UserActionPhase;
+  reason?: string;
+  reasonCode?: string;
 }
 
 /**
- * @author Brett Pontarelli
+ * @author Daniel DeGroff
  */
-export interface XboxApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
-  buttonText?: string;
-  client_id?: string;
-  client_secret?: string;
-  scope?: string;
+export enum BreachedPasswordStatus {
+  None = "None",
+  ExactMatch = "ExactMatch",
+  SubAddressMatch = "SubAddressMatch",
+  PasswordOnly = "PasswordOnly",
+  CommonPassword = "CommonPassword"
 }
 
 /**
- * Models a generic connector.
- *
- * @author Trevor Smith
+ * @author Michael Sleevi
  */
-export interface GenericConnectorConfiguration extends BaseConnectorConfiguration {
-  authenticationURL?: string;
-  connectTimeout?: number;
-  headers?: HTTPHeaders;
-  httpAuthenticationPassword?: string;
-  httpAuthenticationUsername?: string;
-  readTimeout?: number;
-  sslCertificateKeyId?: UUID;
+export interface SMSMessage {
+  phoneNumber?: string;
+  textMessage?: string;
 }
 
 /**
- * An Event "event" to indicate an event log was created.
- *
  * @author Daniel DeGroff
  */
-export interface EventLogCreateEvent extends BaseEvent {
-  eventLog?: EventLog;
+export interface TwitterApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+  buttonText?: string;
+  consumerKey?: string;
+  consumerSecret?: string;
 }
 
 /**
- * @author Brian Pontarelli
+ * A User's WebAuthnCredential. Contains all data required to complete WebAuthn authentication ceremonies.
+ *
+ * @author Spencer Witt
  */
-export interface SystemConfiguration {
-  auditLogConfiguration?: AuditLogConfiguration;
-  corsConfiguration?: CORSConfiguration;
+export interface WebAuthnCredential {
+  algorithm?: CoseAlgorithmIdentifier;
+  attestationType?: AttestationType;
+  authenticatorSupportsUserVerification?: boolean;
+  credentialId?: string;
   data?: Record<string, any>;
-  eventLogConfiguration?: EventLogConfiguration;
+  discoverable?: boolean;
+  displayName?: string;
+  id?: UUID;
   insertInstant?: number;
-  lastUpdateInstant?: number;
-  loginRecordConfiguration?: LoginRecordConfiguration;
-  reportTimezone?: string;
-  trustedProxyConfiguration?: SystemTrustedProxyConfiguration;
-  uiConfiguration?: UIConfiguration;
-  webhookEventLogConfiguration?: WebhookEventLogConfiguration;
-}
-
-export interface AuditLogConfiguration {
-  delete?: DeleteConfiguration;
-}
-
-export interface DeleteConfiguration extends Enableable {
-  numberOfDaysToRetain?: number;
-}
-
-export interface EventLogConfiguration {
-  numberToRetain?: number;
-}
-
-export interface LoginRecordConfiguration {
-  delete?: DeleteConfiguration;
+  lastUseInstant?: number;
+  name?: string;
+  publicKey?: string;
+  relyingPartyId?: string;
+  signCount?: number;
+  tenantId?: UUID;
+  transports?: Array<string>;
+  userAgent?: string;
+  userId?: UUID;
 }
 
-export interface UIConfiguration {
-  headerColor?: string;
-  logoURL?: string;
-  menuFontColor?: string;
+export interface LambdaConfiguration {
+  accessTokenPopulateId?: UUID;
+  idTokenPopulateId?: UUID;
+  samlv2PopulateId?: UUID;
+  selfServiceRegistrationValidationId?: UUID;
+  userinfoPopulateId?: UUID;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface TenantUsernameConfiguration {
-  unique?: UniqueUsernameConfiguration;
-}
-
-export enum UniqueUsernameStrategy {
-  Always = "Always",
-  OnCollision = "OnCollision"
+export interface RegistrationUnverifiedOptions {
+  behavior?: UnverifiedBehavior;
 }
 
-export interface UniqueUsernameConfiguration extends Enableable {
-  numberOfDigits?: number;
-  separator?: string;
-  strategy?: UniqueUsernameStrategy;
+/**
+ * Models a consent.
+ *
+ * @author Daniel DeGroff
+ */
+export enum ConsentStatus {
+  Active = "Active",
+  Revoked = "Revoked"
 }
 
 /**
- * Consent search response
+ * Contains the output for the {@code credProps} extension
  *
  * @author Spencer Witt
  */
-export interface ConsentSearchResponse {
-  consents?: Array<Consent>;
-  total?: number;
+export interface CredentialPropertiesOutput {
+  rk?: boolean;
 }
 
 /**
- * <ul>
- * <li>Bearer Token type as defined by <a href="https://tools.ietf.org/html/rfc6750">RFC 6750</a>.</li>
- * <li>MAC Token type as referenced by <a href="https://tools.ietf.org/html/rfc6749">RFC 6749</a> and
- * <a href="https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-05">
- * Draft RFC on OAuth 2.0 Message Authentication Code (MAC) Tokens</a>
- * </li>
- * </ul>
- *
  * @author Daniel DeGroff
  */
-export enum TokenType {
-  Bearer = "Bearer",
-  MAC = "MAC"
+export interface VerifyRegistrationRequest extends BaseEventRequest {
+  oneTimeCode?: string;
+  verificationId?: string;
 }
 
 /**
- * A grant for an entity to a user or another entity.
+ * @author Daniel DeGroff
+ */
+export interface UserinfoResponse extends Record<string, any> {
+}
+
+/**
+ * Stores an email template used to send emails to users.
  *
  * @author Brian Pontarelli
  */
-export interface EntityGrant {
-  data?: Record<string, any>;
-  entity?: Entity;
+export interface EmailTemplate {
+  defaultFromName?: string;
+  defaultHtmlTemplate?: string;
+  defaultSubject?: string;
+  defaultTextTemplate?: string;
+  fromEmail?: string;
   id?: UUID;
   insertInstant?: number;
   lastUpdateInstant?: number;
-  permissions?: Array<string>;
-  recipientEntityId?: UUID;
-  userId?: UUID;
+  localizedFromNames?: LocalizedStrings;
+  localizedHtmlTemplates?: LocalizedStrings;
+  localizedSubjects?: LocalizedStrings;
+  localizedTextTemplates?: LocalizedStrings;
+  name?: string;
 }
 
 /**
- * Search criteria for user comments.
+ * Models the User Email Verify Event.
  *
- * @author Spencer Witt
+ * @author Trevor Smith
  */
-export interface UserCommentSearchCriteria extends BaseSearchCriteria {
-  comment?: string;
-  commenterId?: UUID;
-  tenantId?: UUID;
-  userId?: UUID;
+export interface UserEmailVerifiedEvent extends BaseUserEvent {
 }
 
 /**
- * @author Derek Klatt
+ * @author Daniel DeGroff
  */
-export interface PasswordValidationRules {
-  breachDetection?: PasswordBreachDetection;
-  maxLength?: number;
-  minLength?: number;
-  rememberPreviousPasswords?: RememberPreviousPasswords;
-  requireMixedCase?: boolean;
-  requireNonAlpha?: boolean;
-  requireNumber?: boolean;
-  validateOnLogin?: boolean;
+export interface ApplicationAccessControlConfiguration {
+  uiIPAccessControlListId?: UUID;
 }
 
 /**
- * Models the User Email Verify Event.
+ * Form response.
  *
- * @author Trevor Smith
+ * @author Daniel DeGroff
  */
-export interface UserEmailVerifiedEvent extends BaseUserEvent {
+export interface FormResponse {
+  form?: Form;
+  forms?: Array<Form>;
 }
 
 /**
- * API response for User consent.
- *
  * @author Daniel DeGroff
  */
-export interface UserConsentResponse {
-  userConsent?: UserConsent;
-  userConsents?: Array<UserConsent>;
+export enum ApplicationMultiFactorTrustPolicy {
+  Any = "Any",
+  This = "This",
+  None = "None"
 }
 
 /**
- * @author Brian Pontarelli
+ * A JSON Web Key as defined by <a href="https://tools.ietf.org/html/rfc7517#section-4">RFC 7517 JSON Web Key (JWK)
+ * Section 4</a> and <a href="https://tools.ietf.org/html/rfc7518">RFC 7518 JSON Web Algorithms (JWA)</a>.
+ *
+ * @author Daniel DeGroff
  */
-export interface PreviewRequest {
-  emailTemplate?: EmailTemplate;
-  locale?: string;
+export interface JSONWebKey {
+  alg?: Algorithm;
+  crv?: string;
+  d?: string;
+  dp?: string;
+  dq?: string;
+  e?: string;
+  kid?: string;
+  kty?: KeyType;
+  n?: string;
+  [other: string]: any; // Any other fields
+  p?: string;
+  q?: string;
+  qi?: string;
+  use?: string;
+  x?: string;
+  x5c?: Array<string>;
+  x5t?: string;
+  x5t_S256?: string;
+  y?: string;
 }
 
 /**
- * @author Mikey Sleevi
+ * Search request for Consents
+ *
+ * @author Spencer Witt
  */
-export interface TenantMultiFactorConfiguration {
-  authenticator?: MultiFactorAuthenticatorMethod;
-  email?: MultiFactorEmailMethod;
-  loginPolicy?: MultiFactorLoginPolicy;
-  sms?: MultiFactorSMSMethod;
-}
-
-export interface MultiFactorAuthenticatorMethod extends Enableable {
-  algorithm?: TOTPAlgorithm;
-  codeLength?: number;
-  timeStep?: number;
-}
-
-export interface MultiFactorEmailMethod extends Enableable {
-  templateId?: UUID;
-}
-
-export interface MultiFactorSMSMethod extends Enableable {
-  messengerId?: UUID;
-  templateId?: UUID;
+export interface ConsentSearchRequest {
+  search?: ConsentSearchCriteria;
 }
 
 /**
- * Entity grant API response object.
+ * Models the User Reactivate Event.
  *
  * @author Brian Pontarelli
  */
-export interface EntityGrantResponse {
-  grant?: EntityGrant;
-  grants?: Array<EntityGrant>;
+export interface UserReactivateEvent extends BaseUserEvent {
 }
 
 /**
- * API request to start a WebAuthn authentication ceremony
+ * OpenID Connect Configuration as described by the <a href="https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata">OpenID
+ * Provider Metadata</a>.
  *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export interface WebAuthnStartRequest {
-  applicationId?: UUID;
-  credentialId?: UUID;
-  loginId?: string;
-  state?: Record<string, any>;
-  userId?: UUID;
-  workflow?: WebAuthnWorkflow;
+export interface OpenIdConfiguration {
+  authorization_endpoint?: string;
+  backchannel_logout_supported?: boolean;
+  claims_supported?: Array<string>;
+  device_authorization_endpoint?: string;
+  end_session_endpoint?: string;
+  frontchannel_logout_supported?: boolean;
+  grant_types_supported?: Array<string>;
+  id_token_signing_alg_values_supported?: Array<string>;
+  issuer?: string;
+  jwks_uri?: string;
+  response_modes_supported?: Array<string>;
+  response_types_supported?: Array<string>;
+  scopes_supported?: Array<string>;
+  subject_types_supported?: Array<string>;
+  token_endpoint?: string;
+  token_endpoint_auth_methods_supported?: Array<string>;
+  userinfo_endpoint?: string;
+  userinfo_signing_alg_values_supported?: Array<string>;
 }
 
 /**
- * API response for consent.
+ * This class is the user query. It provides a build pattern as well as public fields for use on forms and in actions.
  *
+ * @author Brian Pontarelli
+ */
+export interface UserSearchCriteria extends BaseElasticSearchCriteria {
+}
+
+/**
  * @author Daniel DeGroff
  */
-export interface ConsentResponse {
-  consent?: Consent;
-  consents?: Array<Consent>;
+export enum UserState {
+  Authenticated = "Authenticated",
+  AuthenticatedNotRegistered = "AuthenticatedNotRegistered",
+  AuthenticatedNotVerified = "AuthenticatedNotVerified",
+  AuthenticatedRegistrationNotVerified = "AuthenticatedRegistrationNotVerified"
 }
 
 /**
- * A User's membership into a Group
+ * Models a JWT Refresh Token.
  *
  * @author Daniel DeGroff
  */
-export interface GroupMember {
+export interface RefreshToken {
+  applicationId?: UUID;
   data?: Record<string, any>;
-  groupId?: UUID;
   id?: UUID;
   insertInstant?: number;
-  user?: User;
+  metaData?: MetaData;
+  startInstant?: number;
+  tenantId?: UUID;
+  token?: string;
   userId?: UUID;
 }
 
 /**
- * Models an entity that a user can be granted permissions to. Or an entity that can be granted permissions to another entity.
+ * Search criteria for entity grants.
  *
  * @author Brian Pontarelli
  */
-export interface Entity {
-  clientId?: string;
-  clientSecret?: string;
-  data?: Record<string, any>;
-  id?: UUID;
-  insertInstant?: number;
-  lastUpdateInstant?: number;
+export interface EntityGrantSearchCriteria extends BaseSearchCriteria {
+  entityId?: UUID;
   name?: string;
-  parentId?: UUID;
-  tenantId?: UUID;
-  type?: EntityType;
+  userId?: UUID;
 }
 
 /**
- * @author Daniel DeGroff
+ * This class is an abstraction of a simple email message.
+ *
+ * @author Brian Pontarelli
  */
-export interface ReactorResponse {
-  status?: ReactorStatus;
+export interface Email {
+  attachments?: Array<Attachment>;
+  bcc?: Array<EmailAddress>;
+  cc?: Array<EmailAddress>;
+  from?: EmailAddress;
+  html?: string;
+  replyTo?: EmailAddress;
+  subject?: string;
+  text?: string;
+  to?: Array<EmailAddress>;
 }
 
 /**
- * Login API request object.
+ * An audit log.
  *
- * @author Seth Musselman
+ * @author Brian Pontarelli
  */
-export interface LoginRequest extends BaseLoginRequest {
-  loginId?: string;
-  oneTimePassword?: string;
-  password?: string;
-  twoFactorTrustId?: string;
+export interface AuditLog {
+  data?: Record<string, any>;
+  id?: number;
+  insertInstant?: number;
+  insertUser?: string;
+  message?: string;
+  newValue?: any;
+  oldValue?: any;
+  reason?: string;
 }
 
 /**
- * Models the User Identity Provider Unlink Event.
+ * Models the User Identity Provider Link Event.
  *
  * @author Rob Davis
  */
-export interface UserIdentityProviderUnlinkEvent extends BaseUserEvent {
+export interface UserIdentityProviderLinkEvent extends BaseUserEvent {
   identityProviderLink?: IdentityProviderLink;
 }
 
 /**
- * WebAuthn Credential API response
+ * Application search response
  *
  * @author Spencer Witt
  */
-export interface WebAuthnCredentialResponse {
-  credential?: WebAuthnCredential;
-  credentials?: Array<WebAuthnCredential>;
+export interface ApplicationSearchResponse extends ExpandableResponse {
+  applications?: Array<Application>;
+  total?: number;
 }
 
 /**
- * Contains the output for the {@code credProps} extension
- *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export interface CredentialPropertiesOutput {
-  rk?: boolean;
+export interface OAuthConfigurationResponse {
+  httpSessionMaxInactiveInterval?: number;
+  logoutURL?: string;
+  oauthConfiguration?: OAuth2Configuration;
 }
 
 /**
- * IdP Initiated login configuration
+ * Contains attributes for the Relying Party to refer to an existing public key credential as an input parameter.
  *
- * @author Daniel DeGroff
+ * @author Spencer Witt
  */
-export interface SAMLv2IdPInitiatedLoginConfiguration extends Enableable {
-  nameIdFormat?: string;
+export interface PublicKeyCredentialDescriptor {
+  id?: string;
+  transports?: Array<string>;
+  type?: PublicKeyCredentialType;
 }
 
 /**
- * Entity Type API response object.
- *
  * @author Brian Pontarelli
  */
-export interface EntityTypeResponse {
-  entityType?: EntityType;
-  entityTypes?: Array<EntityType>;
-  permission?: EntityTypePermission;
+export interface PendingResponse {
+  users?: Array<User>;
 }
 
 /**
- * User API response object.
+ * Steam gaming login provider.
  *
- * @author Brian Pontarelli
+ * @author Brett Pontarelli
  */
-export interface UserResponse {
-  emailVerificationId?: string;
-  emailVerificationOneTimeCode?: string;
-  registrationVerificationIds?: Record<UUID, string>;
-  registrationVerificationOneTimeCodes?: Record<UUID, string>;
-  token?: string;
-  tokenExpirationInstant?: number;
-  user?: User;
+export interface SteamIdentityProvider extends BaseIdentityProvider<SteamApplicationConfiguration> {
+  apiMode?: SteamAPIMode;
+  buttonText?: string;
+  client_id?: string;
+  scope?: string;
+  webAPIKey?: string;
 }
 
 /**
- * Status for content like usernames, profile attributes, etc.
+ * Allows the Relying Party to specify desired attributes of a new credential.
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export enum ContentStatus {
-  ACTIVE = "ACTIVE",
-  PENDING = "PENDING",
-  REJECTED = "REJECTED"
-}
-
-/**
- * Search request for Keys
- *
- * @author Spencer Witt
- */
-export interface KeySearchRequest {
-  search?: KeySearchCriteria;
-}
-
-/**
- * @author Matthew Altman
- */
-export enum LogoutBehavior {
-  RedirectOnly = "RedirectOnly",
-  AllApplications = "AllApplications"
-}
-
-/**
- * @author Brian Pontarelli
- */
-export interface Tenantable {
+export interface PublicKeyCredentialCreationOptions {
+  attestation?: AttestationConveyancePreference;
+  authenticatorSelection?: AuthenticatorSelectionCriteria;
+  challenge?: string;
+  excludeCredentials?: Array<PublicKeyCredentialDescriptor>;
+  extensions?: WebAuthnRegistrationExtensionOptions;
+  pubKeyCredParams?: Array<PublicKeyCredentialParameters>;
+  rp?: PublicKeyCredentialRelyingPartyEntity;
+  timeout?: number;
+  user?: PublicKeyCredentialUserEntity;
 }
 
 /**
- * Models the User Bulk Create Event.
+ * Authorization Grant types as defined by the <a href="https://tools.ietf.org/html/rfc6749">The OAuth 2.0 Authorization
+ * Framework - RFC 6749</a>.
+ * <p>
+ * Specific names as defined by <a href="https://tools.ietf.org/html/rfc7591#section-4.1">
+ * OAuth 2.0 Dynamic Client Registration Protocol - RFC 7591 Section 4.1</a>
  *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface UserBulkCreateEvent extends BaseEvent {
-  users?: Array<User>;
+export enum GrantType {
+  authorization_code = "authorization_code",
+  implicit = "implicit",
+  password = "password",
+  client_credentials = "client_credentials",
+  refresh_token = "refresh_token",
+  unknown = "unknown",
+  device_code = "urn:ietf:params:oauth:grant-type:device_code"
 }
 
 /**
- * Models a single family member.
+ * A User's membership into a Group
  *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface FamilyMember {
+export interface GroupMember {
   data?: Record<string, any>;
+  groupId?: UUID;
+  id?: UUID;
   insertInstant?: number;
-  lastUpdateInstant?: number;
-  owner?: boolean;
-  role?: FamilyRole;
+  user?: User;
   userId?: UUID;
 }
 
-export enum FamilyRole {
-  Child = "Child",
-  Teen = "Teen",
-  Adult = "Adult"
-}
-
 /**
- * An email address.
+ * Models the User Update Event.
  *
  * @author Brian Pontarelli
  */
-export interface EmailAddress {
-  address?: string;
-  display?: string;
-}
-
-/**
- * @author Daniel DeGroff
- */
-export interface ExternalJWTApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+export interface UserUpdateEvent extends BaseUserEvent {
+  original?: User;
 }
 
 /**
- * Search request for Tenants
+ * The application's relationship to the authorization server. First-party applications will be granted implicit permission for requested scopes.
+ * Third-party applications will use the {@link OAuthScopeConsentMode} policy.
  *
- * @author Mark Manes
- */
-export interface TenantSearchRequest {
-  search?: TenantSearchCriteria;
-}
-
-/**
- * @author Daniel DeGroff
+ * @author Spencer Witt
  */
-export interface FacebookApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
-  appId?: string;
-  buttonText?: string;
-  client_secret?: string;
-  fields?: string;
-  loginMethod?: IdentityProviderLoginMethod;
-  permissions?: string;
+export enum OAuthApplicationRelationship {
+  FirstParty = "FirstParty",
+  ThirdParty = "ThirdParty"
 }
 
 /**
- * Models the user action Event.
+ * The summary of the action that is preventing login to be returned on the login response.
  *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface UserActionEvent extends BaseEvent {
-  action?: string;
-  actioneeUserId?: UUID;
+export interface LoginPreventedResponse {
   actionerUserId?: UUID;
   actionId?: UUID;
-  applicationIds?: Array<UUID>;
-  comment?: string;
-  email?: Email;
-  emailedUser?: boolean;
   expiry?: number;
-  localizedAction?: string;
-  localizedDuration?: string;
+  localizedName?: string;
   localizedOption?: string;
   localizedReason?: string;
-  notifyUser?: boolean;
+  name?: string;
   option?: string;
-  phase?: UserActionPhase;
   reason?: string;
   reasonCode?: string;
 }
 
 /**
- * Models the User Create Registration Event.
+ * This class is the entity query. It provides a build pattern as well as public fields for use on forms and in actions.
  *
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface UserRegistrationCreateEvent extends BaseUserEvent {
-  applicationId?: UUID;
-  registration?: UserRegistration;
+export interface EntitySearchCriteria extends BaseElasticSearchCriteria {
 }
 
 /**
- * A displayable raw login that includes application name and user loginId.
+ * Theme API request object.
  *
- * @author Brian Pontarelli
+ * @author Trevor Smith
  */
-export interface DisplayableRawLogin extends RawLogin {
-  applicationName?: string;
-  location?: Location;
-  loginId?: string;
+export interface ThemeRequest {
+  sourceThemeId?: UUID;
+  theme?: Theme;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface UserinfoResponse extends Record<string, any> {
+export interface PasswordlessSendRequest {
+  applicationId?: UUID;
+  code?: string;
+  loginId?: string;
+  state?: Record<string, any>;
 }
 
 /**
- * A number identifying a cryptographic algorithm. Values should be registered with the <a
- * href="https://www.iana.org/assignments/cose/cose.xhtml#algorithms">IANA COSE Algorithms registry</a>
+ * Models the User Login event for a new device (un-recognized)
  *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export enum CoseAlgorithmIdentifier {
-  ES256 = "SHA256withECDSA",
-  ES384 = "SHA384withECDSA",
-  ES512 = "SHA512withECDSA",
-  RS256 = "SHA256withRSA",
-  RS384 = "SHA384withRSA",
-  RS512 = "SHA512withRSA",
-  PS256 = "SHA-256",
-  PS384 = "SHA-384",
-  PS512 = "SHA-512"
+export interface UserLoginNewDeviceEvent extends UserLoginSuccessEvent {
 }
 
 /**
- * @author Brett Pontarelli
+ * Key API response object.
+ *
+ * @author Daniel DeGroff
  */
-export interface SteamApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
-  apiMode?: SteamAPIMode;
-  buttonText?: string;
-  client_id?: string;
-  scope?: string;
-  webAPIKey?: string;
+export interface KeyResponse {
+  key?: Key;
+  keys?: Array<Key>;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Brett Guy
  */
-export interface TwoFactorSendRequest {
+export interface TwoFactorStartRequest {
   applicationId?: UUID;
-  email?: string;
-  method?: string;
-  methodId?: string;
-  mobilePhone?: string;
+  code?: string;
+  loginId?: string;
+  state?: Record<string, any>;
+  trustChallenge?: string;
   userId?: UUID;
 }
 
 /**
- * Search criteria for Email templates
+ * Models the Group Create Event.
  *
- * @author Mark Manes
+ * @author Daniel DeGroff
  */
-export interface EmailTemplateSearchCriteria extends BaseSearchCriteria {
+export interface GroupCreateEvent extends BaseGroupEvent {
+}
+
+/**
+ * @author Trevor Smith
+ */
+export interface ConnectorPolicy {
+  connectorId?: UUID;
+  data?: Record<string, any>;
+  domains?: Array<string>;
+  migrate?: boolean;
+}
+
+/**
+ * @author Daniel DeGroff
+ */
+export interface FormField {
+  confirm?: boolean;
+  consentId?: UUID;
+  control?: FormControl;
+  data?: Record<string, any>;
+  description?: string;
+  id?: UUID;
+  insertInstant?: number;
+  key?: string;
+  lastUpdateInstant?: number;
   name?: string;
+  options?: Array<string>;
+  required?: boolean;
+  type?: FormDataType;
+  validator?: FormFieldValidator;
 }
 
 /**
  * @author Brian Pontarelli
  */
-export enum ReactorFeatureStatus {
-  ACTIVE = "ACTIVE",
-  DISCONNECTED = "DISCONNECTED",
-  PENDING = "PENDING",
-  DISABLED = "DISABLED",
-  UNKNOWN = "UNKNOWN"
+export interface FamilyConfiguration extends Enableable {
+  allowChildRegistrations?: boolean;
+  confirmChildEmailTemplateId?: UUID;
+  deleteOrphanedAccounts?: boolean;
+  deleteOrphanedAccountsDays?: number;
+  familyRequestEmailTemplateId?: UUID;
+  maximumChildAge?: number;
+  minimumOwnerAge?: number;
+  parentEmailRequired?: boolean;
+  parentRegistrationEmailTemplateId?: UUID;
 }
 
 /**
  * @author Brett Pontarelli
  */
-export interface SonyPSNApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+export interface TwitchApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
   buttonText?: string;
   client_id?: string;
   client_secret?: string;
@@ -6377,2289 +6319,2419 @@ export interface SonyPSNApplicationConfiguration extends BaseIdentityProviderApp
 }
 
 /**
- * An audit log.
+ * A displayable raw login that includes application name and user loginId.
  *
  * @author Brian Pontarelli
  */
-export interface AuditLog {
-  data?: Record<string, any>;
-  id?: number;
-  insertInstant?: number;
-  insertUser?: string;
-  message?: string;
-  newValue?: any;
-  oldValue?: any;
-  reason?: string;
-}
-
-/**
- * A webhook call response.
- *
- * @author Spencer Witt
- */
-export interface WebhookCallResponse {
-  exception?: string;
-  statusCode?: number;
-  url?: string;
+export interface DisplayableRawLogin extends RawLogin {
+  applicationName?: string;
+  location?: Location;
+  loginId?: string;
 }
 
-/**
- * Provides the <i>authenticator</i> with the data it needs to generate an assertion.
- *
- * @author Spencer Witt
- */
-export interface PublicKeyCredentialRequestOptions {
-  allowCredentials?: Array<PublicKeyCredentialDescriptor>;
-  challenge?: string;
-  rpId?: string;
-  timeout?: number;
-  userVerification?: UserVerificationRequirement;
+export interface SAMLv2SingleLogout extends Enableable {
+  keyId?: UUID;
+  url?: string;
+  xmlSignatureC14nMethod?: CanonicalizationMethod;
 }
 
 /**
- * Search request for user comments
- *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export interface UserCommentSearchRequest {
-  search?: UserCommentSearchCriteria;
+export interface OpenIdConnectApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+  buttonImageURL?: string;
+  buttonText?: string;
+  oauth2?: IdentityProviderOauth2Configuration;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export enum UnverifiedBehavior {
-  Allow = "Allow",
-  Gated = "Gated"
+export interface ApplicationFormConfiguration {
+  adminRegistrationFormId?: UUID;
+  selfServiceFormConfiguration?: SelfServiceFormConfiguration;
+  selfServiceFormId?: UUID;
 }
 
 /**
- * Models the Group Member Remove Event.
+ * A policy for deleting Users based upon some external criteria.
  *
- * @author Daniel DeGroff
+ * @author Trevor Smith
  */
-export interface GroupMemberRemoveEvent extends BaseGroupEvent {
-  members?: Array<GroupMember>;
+export interface TimeBasedDeletePolicy extends Enableable {
+  enabledInstant?: number;
+  numberOfDaysToRetain?: number;
 }
 
 /**
- * @author Brett Guy
+ * Search criteria for Keys
+ *
+ * @author Spencer Witt
  */
-export enum MessengerType {
-  Generic = "Generic",
-  Kafka = "Kafka",
-  Twilio = "Twilio"
+export interface KeySearchCriteria extends BaseSearchCriteria {
+  algorithm?: KeyAlgorithm;
+  name?: string;
+  type?: KeyType;
 }
 
 /**
  * @author Brian Pontarelli
  */
-export interface EventLogSearchRequest {
-  search?: EventLogSearchCriteria;
+export enum ReactorFeatureStatus {
+  ACTIVE = "ACTIVE",
+  DISCONNECTED = "DISCONNECTED",
+  PENDING = "PENDING",
+  DISABLED = "DISABLED",
+  UNKNOWN = "UNKNOWN"
 }
 
 /**
- * Event log response.
- *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface EventLogSearchResponse {
-  eventLogs?: Array<EventLog>;
-  total?: number;
+export interface RefreshRequest extends BaseEventRequest {
+  refreshToken?: string;
+  token?: string;
 }
 
 /**
- * Webhook event log response.
+ * Models an event where a user is being created with an "in-use" login Id (email or username).
  *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export interface WebhookEventLogResponse {
-  webhookEventLog?: WebhookEventLog;
+export interface UserLoginIdDuplicateOnCreateEvent extends BaseUserEvent {
+  duplicateEmail?: string;
+  duplicateUsername?: string;
+  existing?: User;
 }
 
-/**
- * @author Daniel DeGroff
- */
-export interface TwoFactorRecoveryCodeResponse {
-  recoveryCodes?: Array<string>;
+export enum ThemeType {
+  advanced = "advanced",
+  simple = "simple"
 }
 
 /**
- * An expandable API response.
+ * Login API request object.
  *
- * @author Daniel DeGroff
+ * @author Seth Musselman
  */
-export interface ExpandableResponse {
-  expandable?: Array<string>;
+export interface LoginRequest extends BaseLoginRequest {
+  loginId?: string;
+  oneTimePassword?: string;
+  password?: string;
+  twoFactorTrustId?: string;
 }
 
 /**
- * Model a user event when a two-factor method has been added.
+ * The reason for the login failure.
  *
  * @author Daniel DeGroff
  */
-export interface UserTwoFactorMethodRemoveEvent extends BaseUserEvent {
-  method?: TwoFactorMethod;
+export interface UserLoginFailedReason {
+  code?: string;
+  lambdaId?: UUID;
+  lambdaResult?: Errors;
 }
 
 /**
- * The response from the total report. This report stores the total numbers for each application.
+ * Response for the user login report.
  *
- * @author Brian Pontarelli
- */
-export interface TotalsReportResponse {
-  applicationTotals?: Record<UUID, Totals>;
-  globalRegistrations?: number;
-  totalGlobalRegistrations?: number;
-}
-
-export interface Totals {
-  logins?: number;
-  registrations?: number;
-  totalRegistrations?: number;
-}
-
-/**
- * @author Brett Guy
+ * @author Seth Musselman
  */
-export interface IPAccessControlListResponse {
-  ipAccessControlList?: IPAccessControlList;
-  ipAccessControlLists?: Array<IPAccessControlList>;
+export interface RecentLoginResponse {
+  logins?: Array<DisplayableRawLogin>;
 }
 
 /**
- * API request to start a WebAuthn registration ceremony
+ * Theme object for values used in the css variables for simple themes.
  *
- * @author Spencer Witt
+ * @author Lyle Schemmerling
  */
-export interface WebAuthnRegisterStartRequest {
-  displayName?: string;
-  name?: string;
-  userAgent?: string;
-  userId?: UUID;
-  workflow?: WebAuthnWorkflow;
+export interface SimpleThemeVariables {
+  alertBackgroundColor?: string;
+  alertFontColor?: string;
+  backgroundImageURL?: string;
+  backgroundSize?: string;
+  borderRadius?: string;
+  deleteButtonColor?: string;
+  deleteButtonFocusColor?: string;
+  deleteButtonTextColor?: string;
+  deleteButtonTextFocusColor?: string;
+  errorFontColor?: string;
+  errorIconColor?: string;
+  fontColor?: string;
+  fontFamily?: string;
+  footerDisplay?: boolean;
+  iconBackgroundColor?: string;
+  iconColor?: string;
+  infoIconColor?: string;
+  inputBackgroundColor?: string;
+  inputIconColor?: string;
+  inputTextColor?: string;
+  linkTextColor?: string;
+  linkTextFocusColor?: string;
+  logoImageSize?: string;
+  logoImageURL?: string;
+  monoFontColor?: string;
+  monoFontFamily?: string;
+  pageBackgroundColor?: string;
+  panelBackgroundColor?: string;
+  primaryButtonColor?: string;
+  primaryButtonFocusColor?: string;
+  primaryButtonTextColor?: string;
+  primaryButtonTextFocusColor?: string;
 }
 
 /**
- * Models the User Login event that is suspicious.
+ * API response for User consent.
  *
  * @author Daniel DeGroff
  */
-export interface UserLoginSuspiciousEvent extends UserLoginSuccessEvent {
-  threatsDetected?: Array<AuthenticationThreats>;
+export interface UserConsentRequest {
+  userConsent?: UserConsent;
 }
 
 /**
- * User API delete request object for a single user.
+ * API request for sending out family requests to parent's.
  *
  * @author Brian Pontarelli
  */
-export interface UserDeleteSingleRequest extends BaseEventRequest {
-  hardDelete?: boolean;
+export interface FamilyEmailRequest {
+  parentEmail?: string;
 }
 
 /**
- * API response for refreshing a JWT with a Refresh Token.
- * <p>
- * Using a different response object from RefreshTokenResponse because the retrieve response will return an object for refreshToken, and this is a
- * string.
+ * Search request for entities
  *
- * @author Daniel DeGroff
+ * @author Brett Guy
  */
-export interface JWTRefreshResponse {
-  refreshToken?: string;
-  refreshTokenId?: UUID;
-  token?: string;
+export interface EntitySearchRequest {
+  search?: EntitySearchCriteria;
 }
 
 /**
- * @author Brian Pontarelli
+ * Interface describing the need for CORS configuration.
+ *
+ * @author Daniel DeGroff
  */
-export interface AuditLogSearchRequest {
-  search?: AuditLogSearchCriteria;
+export interface RequiresCORSConfiguration {
 }
 
 /**
- * @author Brett Guy
+ * Audit log response.
+ *
+ * @author Brian Pontarelli
  */
-export interface IPAccessControlListSearchResponse {
-  ipAccessControlLists?: Array<IPAccessControlList>;
-  total?: number;
+export interface AuditLogResponse {
+  auditLog?: AuditLog;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Brett Pontarelli
  */
-export interface VersionResponse {
-  version?: string;
+export interface SteamApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+  apiMode?: SteamAPIMode;
+  buttonText?: string;
+  client_id?: string;
+  scope?: string;
+  webAPIKey?: string;
 }
 
 /**
- * @author Brian Pontarelli
+ * @author Mikey Sleevi
  */
-export interface TwoFactorDisableRequest extends BaseEventRequest {
-  applicationId?: UUID;
-  code?: string;
-  methodId?: string;
+export interface TenantMultiFactorConfiguration {
+  authenticator?: MultiFactorAuthenticatorMethod;
+  email?: MultiFactorEmailMethod;
+  loginPolicy?: MultiFactorLoginPolicy;
+  sms?: MultiFactorSMSMethod;
 }
 
 /**
+ * Xbox gaming login provider.
+ *
  * @author Brett Pontarelli
  */
-export interface NintendoApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+export interface XboxIdentityProvider extends BaseIdentityProvider<XboxApplicationConfiguration> {
   buttonText?: string;
   client_id?: string;
   client_secret?: string;
-  emailClaim?: string;
   scope?: string;
-  uniqueIdClaim?: string;
-  usernameClaim?: string;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Brett Guy
  */
-export interface PasswordBreachDetection extends Enableable {
-  matchMode?: BreachMatchMode;
-  notifyUserEmailTemplateId?: UUID;
-  onLogin?: BreachAction;
-}
-
-export enum BreachAction {
-  Off = "Off",
-  RecordOnly = "RecordOnly",
-  NotifyUser = "NotifyUser",
-  RequireChange = "RequireChange"
+export enum ProofKeyForCodeExchangePolicy {
+  Required = "Required",
+  NotRequired = "NotRequired",
+  NotRequiredWhenUsingClientAuthentication = "NotRequiredWhenUsingClientAuthentication"
 }
 
-export enum BreachMatchMode {
-  Low = "Low",
-  Medium = "Medium",
-  High = "High"
+/**
+ * Audit log response.
+ *
+ * @author Brian Pontarelli
+ */
+export interface AuditLogSearchResponse {
+  auditLogs?: Array<AuditLog>;
+  total?: number;
 }
 
 /**
+ * <ul>
+ * <li>Bearer Token type as defined by <a href="https://tools.ietf.org/html/rfc6750">RFC 6750</a>.</li>
+ * <li>MAC Token type as referenced by <a href="https://tools.ietf.org/html/rfc6749">RFC 6749</a> and
+ * <a href="https://tools.ietf.org/html/draft-ietf-oauth-v2-http-mac-05">
+ * Draft RFC on OAuth 2.0 Message Authentication Code (MAC) Tokens</a>
+ * </li>
+ * </ul>
+ *
  * @author Daniel DeGroff
  */
-export enum FormFieldAdminPolicy {
-  Edit = "Edit",
-  View = "View"
+export enum TokenType {
+  Bearer = "Bearer",
+  MAC = "MAC"
 }
 
 /**
- * Used to communicate whether and how authenticator attestation should be delivered to the Relying Party
+ * Search response for Groups
  *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export enum AttestationConveyancePreference {
-  none = "none",
-  indirect = "indirect",
-  direct = "direct",
-  enterprise = "enterprise"
+export interface GroupSearchResponse {
+  groups?: Array<Group>;
+  total?: number;
 }
 
 /**
- * A policy to configure if and when the user-action is canceled prior to the expiration of the action.
+ * Configuration for signing webhooks.
  *
- * @author Daniel DeGroff
+ * @author Brent Halsey
  */
-export interface FailedAuthenticationActionCancelPolicy {
-  onPasswordReset?: boolean;
+export interface WebhookSignatureConfiguration extends Enableable {
+  signingKeyId?: UUID;
+}
+
+export enum XMLSignatureLocation {
+  Assertion = "Assertion",
+  Response = "Response"
 }
 
 /**
- * The possible result states of a webhook event. This tracks the success of the overall webhook transaction according to the {@link TransactionType}
- * and configured webhooks.
+ * Search criteria for user comments.
  *
  * @author Spencer Witt
  */
-export enum WebhookEventResult {
-  Failed = "Failed",
-  Running = "Running",
-  Succeeded = "Succeeded"
+export interface UserCommentSearchCriteria extends BaseSearchCriteria {
+  comment?: string;
+  commenterId?: UUID;
+  tenantId?: UUID;
+  userId?: UUID;
 }
 
 /**
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface BaseSearchCriteria {
-  numberOfResults?: number;
-  orderBy?: string;
-  startRow?: number;
+export interface LinkedInIdentityProvider extends BaseIdentityProvider<LinkedInApplicationConfiguration> {
+  buttonText?: string;
+  client_id?: string;
+  client_secret?: string;
+  scope?: string;
 }
 
 /**
- * Forgot password request object.
+ * A server where events are sent. This includes user action events and any other events sent by FusionAuth.
  *
  * @author Brian Pontarelli
  */
-export interface ForgotPasswordRequest extends BaseEventRequest {
-  applicationId?: UUID;
-  changePasswordId?: string;
-  email?: string;
-  loginId?: string;
-  sendForgotPasswordEmail?: boolean;
-  state?: Record<string, any>;
-  username?: string;
+export interface Webhook {
+  connectTimeout?: number;
+  data?: Record<string, any>;
+  description?: string;
+  eventsEnabled?: Record<EventType, boolean>;
+  global?: boolean;
+  headers?: HTTPHeaders;
+  httpAuthenticationPassword?: string;
+  httpAuthenticationUsername?: string;
+  id?: UUID;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  readTimeout?: number;
+  signatureConfiguration?: WebhookSignatureConfiguration;
+  sslCertificate?: string;
+  sslCertificateKeyId?: UUID;
+  tenantIds?: Array<UUID>;
+  url?: string;
 }
 
 /**
- * The FormField API request object.
+ * @author Daniel DeGroff
+ */
+export interface TwoFactorLoginRequest extends BaseLoginRequest {
+  code?: string;
+  trustComputer?: boolean;
+  twoFactorId?: string;
+  userId?: UUID;
+}
+
+/**
+ * Entity grant API request object.
  *
- * @author Brett Guy
+ * @author Brian Pontarelli
  */
-export interface FormFieldRequest {
-  field?: FormField;
-  fields?: Array<FormField>;
+export interface EntityGrantRequest {
+  grant?: EntityGrant;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface SendRequest {
-  applicationId?: UUID;
-  bccAddresses?: Array<string>;
-  ccAddresses?: Array<string>;
-  preferredLanguages?: Array<string>;
-  requestData?: Record<string, any>;
-  toAddresses?: Array<EmailAddress>;
-  userIds?: Array<UUID>;
+export interface IdentityProviderLinkResponse {
+  identityProviderLink?: IdentityProviderLink;
+  identityProviderLinks?: Array<IdentityProviderLink>;
 }
 
 /**
- * Identifies the WebAuthn workflow. This will affect the parameters used for credential creation
- * and request based on the Tenant configuration.
+ * The handling policy for scopes provided by FusionAuth
  *
  * @author Spencer Witt
  */
-export enum WebAuthnWorkflow {
-  bootstrap = "bootstrap",
-  general = "general",
-  reauthentication = "reauthentication"
+export interface ProvidedScopePolicy {
+  address?: Requirable;
+  email?: Requirable;
+  phone?: Requirable;
+  profile?: Requirable;
+}
+
+export interface HistoryItem {
+  actionerUserId?: UUID;
+  comment?: string;
+  createInstant?: number;
+  expiry?: number;
 }
 
 /**
- * @author Michael Sleevi
+ * @author Daniel DeGroff
  */
-export interface MessageTemplateResponse {
-  messageTemplate?: MessageTemplate;
-  messageTemplates?: Array<MessageTemplate>;
+export interface BaseExportRequest {
+  dateTimeSecondsFormat?: string;
+  zoneId?: string;
 }
 
 /**
- * Models a consent.
+ * Google social login provider parameters.
  *
  * @author Daniel DeGroff
  */
-export enum ConsentStatus {
-  Active = "Active",
-  Revoked = "Revoked"
+export interface GoogleIdentityProviderProperties {
+  api?: string;
+  button?: string;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export enum HTTPMethod {
-  GET = "GET",
-  POST = "POST",
-  PUT = "PUT",
-  DELETE = "DELETE",
-  HEAD = "HEAD",
-  OPTIONS = "OPTIONS",
-  PATCH = "PATCH"
+export interface OAuthError {
+  change_password_id?: string;
+  error?: OAuthErrorType;
+  error_description?: string;
+  error_reason?: OAuthErrorReason;
+  error_uri?: string;
+  two_factor_id?: string;
+  two_factor_methods?: Array<TwoFactorMethod>;
 }
 
 /**
- * Models the User Deleted Registration Event.
- * <p>
- * This is different than user.registration.delete in that it is sent after the TX has been committed. This event cannot be transactional.
- *
  * @author Daniel DeGroff
  */
-export interface UserRegistrationDeleteCompleteEvent extends BaseUserEvent {
-  applicationId?: UUID;
-  registration?: UserRegistration;
+export interface TwoFactorRecoveryCodeResponse {
+  recoveryCodes?: Array<string>;
 }
 
 /**
- * Steam gaming login provider.
+ * Describes the authenticator attachment modality preference for a WebAuthn workflow. See {@link AuthenticatorAttachment}
  *
- * @author Brett Pontarelli
+ * @author Spencer Witt
  */
-export interface SteamIdentityProvider extends BaseIdentityProvider<SteamApplicationConfiguration> {
-  apiMode?: SteamAPIMode;
-  buttonText?: string;
-  client_id?: string;
-  scope?: string;
-  webAPIKey?: string;
+export enum AuthenticatorAttachmentPreference {
+  any = "any",
+  platform = "platform",
+  crossPlatform = "crossPlatform"
 }
 
 /**
- * Nintendo gaming login provider.
+ * Models the Group Update Complete Event.
  *
- * @author Brett Pontarelli
+ * @author Daniel DeGroff
  */
-export interface NintendoIdentityProvider extends BaseIdentityProvider<NintendoApplicationConfiguration> {
-  buttonText?: string;
-  client_id?: string;
-  client_secret?: string;
-  emailClaim?: string;
-  scope?: string;
-  uniqueIdClaim?: string;
-  usernameClaim?: string;
+export interface GroupUpdateCompleteEvent extends BaseGroupEvent {
+  original?: Group;
 }
 
-/**
- * @author Daniel DeGroff
- */
-export interface TwoFactorLoginRequest extends BaseLoginRequest {
-  code?: string;
-  trustComputer?: boolean;
-  twoFactorId?: string;
-  userId?: UUID;
+export interface LambdaConfiguration {
+  reconcileId?: UUID;
 }
 
 /**
- * Search API request.
+ * Search criteria for Lambdas
  *
- * @author Brian Pontarelli
+ * @author Mark Manes
  */
-export interface SearchRequest extends ExpandableRequest {
-  search?: UserSearchCriteria;
-}
+export interface LambdaSearchCriteria extends BaseSearchCriteria {
+  body?: string;
+  name?: string;
+  type?: LambdaType;
+}
 
 /**
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface BaseIdentityProviderApplicationConfiguration extends Enableable {
-  createRegistration?: boolean;
+export interface SystemConfiguration {
+  auditLogConfiguration?: AuditLogConfiguration;
+  corsConfiguration?: CORSConfiguration;
   data?: Record<string, any>;
+  eventLogConfiguration?: EventLogConfiguration;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  loginRecordConfiguration?: LoginRecordConfiguration;
+  reportTimezone?: string;
+  trustedProxyConfiguration?: SystemTrustedProxyConfiguration;
+  uiConfiguration?: UIConfiguration;
+  webhookEventLogConfiguration?: WebhookEventLogConfiguration;
 }
 
 /**
- * This class is an abstraction of a simple email message.
- *
- * @author Brian Pontarelli
+ * @author Brett Guy
  */
-export interface Email {
-  attachments?: Array<Attachment>;
-  bcc?: Array<EmailAddress>;
-  cc?: Array<EmailAddress>;
-  from?: EmailAddress;
-  html?: string;
-  replyTo?: EmailAddress;
-  subject?: string;
-  text?: string;
-  to?: Array<EmailAddress>;
+export enum IPAccessControlEntryAction {
+  Allow = "Allow",
+  Block = "Block"
 }
 
 /**
- * Search request for Lambdas
+ * Webhook API request object.
  *
- * @author Mark Manes
+ * @author Brian Pontarelli
  */
-export interface LambdaSearchRequest {
-  search?: LambdaSearchCriteria;
+export interface WebhookRequest {
+  webhook?: Webhook;
 }
 
 /**
- * User login failed reason codes.
+ * Form field response.
+ *
+ * @author Brett Guy
  */
-export interface UserLoginFailedReasonCode {
+export interface FormFieldResponse {
+  field?: FormField;
+  fields?: Array<FormField>;
 }
 
 /**
- * @author Brian Pontarelli
+ * @author Mikey Sleevi
  */
-export interface BaseElasticSearchCriteria extends BaseSearchCriteria {
-  accurateTotal?: boolean;
-  ids?: Array<UUID>;
-  nextResults?: string;
-  query?: string;
-  queryString?: string;
-  sortFields?: Array<SortField>;
+export enum MessageType {
+  SMS = "SMS"
 }
 
-/**
- * Application search response
- *
- * @author Spencer Witt
- */
-export interface ApplicationSearchResponse extends ExpandableResponse {
-  applications?: Array<Application>;
-  total?: number;
+// Do not require a setter for 'type', it is defined by the concrete class and is not mutable
+export interface BaseConnectorConfiguration {
+  data?: Record<string, any>;
+  debug?: boolean;
+  id?: UUID;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  name?: string;
+  type?: ConnectorType;
 }
 
 /**
- * Lambda search response
+ * Configuration for the behavior of failed login attempts. This helps us protect against brute force password attacks.
  *
- * @author Mark Manes
+ * @author Daniel DeGroff
  */
-export interface LambdaSearchResponse {
-  lambdas?: Array<Lambda>;
-  total?: number;
+export interface FailedAuthenticationConfiguration {
+  actionCancelPolicy?: FailedAuthenticationActionCancelPolicy;
+  actionDuration?: number;
+  actionDurationUnit?: ExpiryUnit;
+  emailUser?: boolean;
+  resetCountInSeconds?: number;
+  tooManyAttempts?: number;
+  userActionId?: UUID;
 }
 
 /**
- * Webhook attempt log response.
+ * Search criteria for Tenants
  *
- * @author Spencer Witt
+ * @author Mark Manes
  */
-export interface WebhookAttemptLogResponse {
-  webhookAttemptLog?: WebhookAttemptLog;
+export interface TenantSearchCriteria extends BaseSearchCriteria {
+  name?: string;
 }
 
 /**
- * Password Encryption Scheme Configuration
- *
- * @author Daniel DeGroff
+ * @author Rob Davis
  */
-export interface PasswordEncryptionConfiguration {
-  encryptionScheme?: string;
-  encryptionSchemeFactor?: number;
-  modifyEncryptionSchemeOnLogin?: boolean;
+export interface TenantSCIMServerConfiguration extends Enableable {
+  clientEntityTypeId?: UUID;
+  schemas?: Record<string, any>;
+  serverEntityTypeId?: UUID;
 }
 
 /**
- * The Application API response.
+ * An email address.
  *
  * @author Brian Pontarelli
  */
-export interface ApplicationResponse {
-  application?: Application;
-  applications?: Array<Application>;
-  role?: ApplicationRole;
+export interface EmailAddress {
+  address?: string;
+  display?: string;
 }
 
 /**
- * Response for the daily active user report.
+ * Status for content like usernames, profile attributes, etc.
  *
  * @author Brian Pontarelli
  */
-export interface MonthlyActiveUserReportResponse {
-  monthlyActiveUsers?: Array<Count>;
-  total?: number;
-}
-
-/**
- * @author Tyler Scott
- */
-export interface Group {
-  data?: Record<string, any>;
-  id?: UUID;
-  insertInstant?: number;
-  lastUpdateInstant?: number;
-  name?: string;
-  roles?: Record<UUID, Array<ApplicationRole>>;
-  tenantId?: UUID;
+export enum ContentStatus {
+  ACTIVE = "ACTIVE",
+  PENDING = "PENDING",
+  REJECTED = "REJECTED"
 }
 
 /**
- * Base class for all {@link User}-related events.
- *
- * @author Spencer Witt
+ * @author Brett Guy
  */
-export interface BaseUserEvent extends BaseEvent {
-  user?: User;
+export interface GenericMessengerConfiguration extends BaseMessengerConfiguration {
+  connectTimeout?: number;
+  headers?: HTTPHeaders;
+  httpAuthenticationPassword?: string;
+  httpAuthenticationUsername?: string;
+  readTimeout?: number;
+  sslCertificate?: string;
+  url?: string;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface Form {
-  data?: Record<string, any>;
-  id?: UUID;
-  insertInstant?: number;
-  lastUpdateInstant?: number;
-  name?: string;
-  steps?: Array<FormStep>;
-  type?: FormType;
+export enum FormControl {
+  checkbox = "checkbox",
+  number = "number",
+  password = "password",
+  radio = "radio",
+  select = "select",
+  textarea = "textarea",
+  text = "text"
 }
 
-/**
- * @author Daniel DeGroff
- */
-export enum UserState {
-  Authenticated = "Authenticated",
-  AuthenticatedNotRegistered = "AuthenticatedNotRegistered",
-  AuthenticatedNotVerified = "AuthenticatedNotVerified",
-  AuthenticatedRegistrationNotVerified = "AuthenticatedRegistrationNotVerified"
+export enum BreachMatchMode {
+  Low = "Low",
+  Medium = "Medium",
+  High = "High"
 }
 
 /**
- * The system configuration for Webhook Event Log data.
+ * Search criteria for Group Members
  *
- * @author Spencer Witt
- */
-export interface WebhookEventLogConfiguration {
-  delete?: DeleteConfiguration;
-}
-
-/**
  * @author Daniel DeGroff
  */
-export interface LinkedInApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
-  buttonText?: string;
-  client_id?: string;
-  client_secret?: string;
-  scope?: string;
+export interface GroupMemberSearchCriteria extends BaseSearchCriteria {
+  groupId?: UUID;
+  tenantId?: UUID;
+  userId?: UUID;
 }
 
 /**
- * Model a user event when a two-factor method has been removed.
+ * COSE key type
  *
- * @author Daniel DeGroff
+ * @author Spencer Witt
  */
-export interface UserTwoFactorMethodAddEvent extends BaseUserEvent {
-  method?: TwoFactorMethod;
+export enum CoseKeyType {
+  Reserved = "0",
+  OKP = "1",
+  EC2 = "2",
+  RSA = "3",
+  Symmetric = "4"
 }
 
 /**
- * @author Lyle Schemmerling
+ * User API request object.
+ *
+ * @author Brian Pontarelli
  */
-export interface SAMLv2AssertionConfiguration {
-  destination?: SAMLv2DestinationAssertionConfiguration;
+export interface UserRequest extends BaseEventRequest {
+  applicationId?: UUID;
+  currentPassword?: string;
+  disableDomainBlock?: boolean;
+  sendSetPasswordEmail?: boolean;
+  skipVerification?: boolean;
+  user?: User;
 }
 
 /**
- * Theme API response object.
+ * User API bulk response object.
  *
  * @author Trevor Smith
  */
-export interface ThemeResponse {
-  theme?: Theme;
-  themes?: Array<Theme>;
+export interface UserDeleteResponse {
+  dryRun?: boolean;
+  hardDelete?: boolean;
+  total?: number;
+  userIds?: Array<UUID>;
 }
 
 /**
- * The <i>authenticator's</i> response for the authentication ceremony in its encoded format
+ * Change password request object.
  *
- * @author Spencer Witt
- */
-export interface WebAuthnAuthenticatorAuthenticationResponse {
-  authenticatorData?: string;
-  clientDataJSON?: string;
-  signature?: string;
-  userHandle?: string;
-}
-
-/**
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface SecureGeneratorConfiguration {
-  length?: number;
-  type?: SecureGeneratorType;
+export interface ChangePasswordRequest extends BaseEventRequest {
+  applicationId?: UUID;
+  changePasswordId?: string;
+  currentPassword?: string;
+  loginId?: string;
+  password?: string;
+  refreshToken?: string;
+  trustChallenge?: string;
+  trustToken?: string;
+}
+
+export interface SAMLv2Configuration extends Enableable {
+  assertionEncryptionConfiguration?: SAMLv2AssertionEncryptionConfiguration;
+  audience?: string;
+  authorizedRedirectURLs?: Array<string>;
+  callbackURL?: string;
+  debug?: boolean;
+  defaultVerificationKeyId?: UUID;
+  initiatedLogin?: SAMLv2IdPInitiatedLoginConfiguration;
+  issuer?: string;
+  keyId?: UUID;
+  loginHintConfiguration?: LoginHintConfiguration;
+  logout?: SAMLv2Logout;
+  logoutURL?: string;
+  requireSignedRequests?: boolean;
+  xmlSignatureC14nMethod?: CanonicalizationMethod;
+  xmlSignatureLocation?: XMLSignatureLocation;
 }
 
 /**
- * Webhook API request object.
+ * CleanSpeak configuration at the system and application level.
  *
  * @author Brian Pontarelli
  */
-export interface WebhookRequest {
-  webhook?: Webhook;
+export interface CleanSpeakConfiguration extends Enableable {
+  apiKey?: string;
+  applicationIds?: Array<UUID>;
+  url?: string;
+  usernameModeration?: UsernameModeration;
 }
 
 /**
- * The Application Scope API request object.
+ * User Action API response object.
  *
- * @author Spencer Witt
+ * @author Brian Pontarelli
  */
-export interface ApplicationOAuthScopeRequest {
-  scope?: ApplicationOAuthScope;
+export interface UserActionResponse {
+  userAction?: UserAction;
+  userActions?: Array<UserAction>;
 }
 
 /**
- * Models the User Created Event.
- * <p>
- * This is different than the user.create event in that it will be sent after the user has been created. This event cannot be made transactional.
- *
- * @author Daniel DeGroff
+ * @author Lyle Schemmerling
  */
-export interface UserCreateCompleteEvent extends BaseUserEvent {
+export enum SAMLv2DestinationAssertionPolicy {
+  Enabled = "Enabled",
+  Disabled = "Disabled",
+  AllowAlternates = "AllowAlternates"
 }
 
 /**
- * Models the User Password Reset Start Event.
+ * API response for starting a WebAuthn authentication ceremony
  *
- * @author Daniel DeGroff
+ * @author Spencer Witt
  */
-export interface UserPasswordResetStartEvent extends BaseUserEvent {
+export interface WebAuthnStartResponse {
+  options?: PublicKeyCredentialRequestOptions;
 }
 
 /**
- * Webhook event log search response.
+ * Theme API response object.
  *
- * @author Spencer Witt
+ * @author Trevor Smith
  */
-export interface WebhookEventLogSearchResponse {
-  total?: number;
-  webhookEventLogs?: Array<WebhookEventLog>;
+export interface ThemeResponse {
+  theme?: Theme;
+  themes?: Array<Theme>;
 }
 
 /**
- * A JavaScript lambda function that is executed during certain events inside FusionAuth.
+ * Defines valid credential types. This is an extension point in the WebAuthn spec. The only defined value at this time is "public-key"
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export interface Lambda {
-  body?: string;
-  debug?: boolean;
-  engineType?: LambdaEngineType;
-  id?: UUID;
-  insertInstant?: number;
-  lastUpdateInstant?: number;
-  name?: string;
-  type?: LambdaType;
+export enum PublicKeyCredentialType {
+  publicKey = "public-key"
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface HYPRApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
-  relyingPartyApplicationId?: string;
-  relyingPartyURL?: string;
+export interface OAuthResponse {
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface FormFieldValidator extends Enableable {
-  expression?: string;
+export enum FormFieldAdminPolicy {
+  Edit = "Edit",
+  View = "View"
 }
 
-/**
- * @author Daniel DeGroff
- */
-export interface PasswordValidationRulesResponse {
-  passwordValidationRules?: PasswordValidationRules;
+export interface EmailPlus extends Enableable {
+  emailTemplateId?: UUID;
+  maximumTimeToSendEmailInHours?: number;
+  minimumTimeToSendEmailInHours?: number;
 }
 
 /**
+ * API response for managing families and members.
+ *
  * @author Brian Pontarelli
  */
-export interface EventConfiguration {
-  events?: Record<EventType, EventConfigurationData>;
-}
-
-export interface EventConfigurationData extends Enableable {
-  transactionType?: TransactionType;
+export interface FamilyResponse {
+  families?: Array<Family>;
+  family?: Family;
 }
 
 /**
- * Models the User Deactivate Event.
+ * Models a specific entity type permission. This permission can be granted to users or other entities.
  *
  * @author Brian Pontarelli
  */
-export interface UserDeactivateEvent extends BaseUserEvent {
+export interface EntityTypePermission {
+  data?: Record<string, any>;
+  description?: string;
+  id?: UUID;
+  insertInstant?: number;
+  isDefault?: boolean;
+  lastUpdateInstant?: number;
+  name?: string;
 }
 
 /**
- * Models the User Update Registration Event.
- *
  * @author Daniel DeGroff
  */
-export interface UserRegistrationUpdateEvent extends BaseUserEvent {
-  applicationId?: UUID;
-  original?: UserRegistration;
-  registration?: UserRegistration;
+export interface RateLimitedRequestConfiguration extends Enableable {
+  limit?: number;
+  timePeriodInSeconds?: number;
 }
 
 /**
- * Search request for entities
- *
- * @author Brett Guy
+ * @author Daniel DeGroff
  */
-export interface EntitySearchRequest {
-  search?: EntitySearchCriteria;
+export interface ReactorStatus {
+  advancedIdentityProviders?: ReactorFeatureStatus;
+  advancedLambdas?: ReactorFeatureStatus;
+  advancedMultiFactorAuthentication?: ReactorFeatureStatus;
+  advancedOAuthScopes?: ReactorFeatureStatus;
+  advancedOAuthScopesCustomScopes?: ReactorFeatureStatus;
+  advancedOAuthScopesThirdPartyApplications?: ReactorFeatureStatus;
+  advancedRegistration?: ReactorFeatureStatus;
+  applicationMultiFactorAuthentication?: ReactorFeatureStatus;
+  applicationThemes?: ReactorFeatureStatus;
+  breachedPasswordDetection?: ReactorFeatureStatus;
+  connectors?: ReactorFeatureStatus;
+  entityManagement?: ReactorFeatureStatus;
+  expiration?: string;
+  licenseAttributes?: Record<string, string>;
+  licensed?: boolean;
+  scimServer?: ReactorFeatureStatus;
+  threatDetection?: ReactorFeatureStatus;
+  webAuthn?: ReactorFeatureStatus;
+  webAuthnPlatformAuthenticators?: ReactorFeatureStatus;
+  webAuthnRoamingAuthenticators?: ReactorFeatureStatus;
 }
 
 /**
- * The user action request object.
+ * Models a single family member.
  *
  * @author Brian Pontarelli
  */
-export interface ActionRequest extends BaseEventRequest {
-  action?: ActionData;
-  broadcast?: boolean;
+export interface FamilyMember {
+  data?: Record<string, any>;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  owner?: boolean;
+  role?: FamilyRole;
+  userId?: UUID;
 }
 
-export interface ActionData {
-  actioneeUserId?: UUID;
-  actionerUserId?: UUID;
-  applicationIds?: Array<UUID>;
-  comment?: string;
-  emailUser?: boolean;
-  expiry?: number;
-  notifyUser?: boolean;
-  option?: string;
-  reasonId?: UUID;
-  userActionId?: UUID;
+export interface CertificateInformation {
+  issuer?: string;
+  md5Fingerprint?: string;
+  serialNumber?: string;
+  sha1Fingerprint?: string;
+  sha1Thumbprint?: string;
+  sha256Fingerprint?: string;
+  sha256Thumbprint?: string;
+  subject?: string;
+  validFrom?: number;
+  validTo?: number;
 }
 
 /**
- * The Integration Response
- *
  * @author Daniel DeGroff
  */
-export interface IntegrationResponse {
-  integrations?: Integrations;
+export interface PasswordlessStartResponse {
+  code?: string;
 }
 
 /**
- * Models the User Password Update Event.
+ * Response for the daily active user report.
  *
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface UserPasswordUpdateEvent extends BaseUserEvent {
+export interface DailyActiveUserReportResponse {
+  dailyActiveUsers?: Array<Count>;
+  total?: number;
 }
 
 /**
- * Models the Group Create Event.
- *
  * @author Daniel DeGroff
  */
-export interface GroupCreateEvent extends BaseGroupEvent {
+export interface VersionResponse {
+  version?: string;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Michael Sleevi
  */
-export interface IdentityProviderResponse {
-  identityProvider?: BaseIdentityProvider<any>;
-  identityProviders?: Array<BaseIdentityProvider<any>>;
+export interface PreviewMessageTemplateRequest {
+  locale?: string;
+  messageTemplate?: MessageTemplate;
 }
 
 /**
- * Something that can be enabled and thus also disabled.
- *
  * @author Daniel DeGroff
  */
-export interface Enableable {
-  enabled?: boolean;
+export interface IssueResponse {
+  refreshToken?: string;
+  token?: string;
 }
 
 /**
- * Models the Group Member Add Event.
+ * Response for the login report.
  *
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface GroupMemberAddEvent extends BaseGroupEvent {
-  members?: Array<GroupMember>;
+export interface LoginReportResponse {
+  hourlyCounts?: Array<Count>;
+  total?: number;
 }
 
 /**
- * The public Status API response
- *
  * @author Daniel DeGroff
  */
-export interface StatusResponse extends Record<string, any> {
+export enum HTTPMethod {
+  GET = "GET",
+  POST = "POST",
+  PUT = "PUT",
+  DELETE = "DELETE",
+  HEAD = "HEAD",
+  OPTIONS = "OPTIONS",
+  PATCH = "PATCH"
 }
 
 /**
- * Models the User Password Reset Success Event.
- *
- * @author Daniel DeGroff
+ * @author Mikey Sleevi
  */
-export interface UserPasswordResetSuccessEvent extends BaseUserEvent {
+export interface Message {
+}
+
+// Do not require a setter for 'type', it is defined by the concrete class and is not mutable
+export interface BaseIdentityProvider<D extends BaseIdentityProviderApplicationConfiguration> extends Enableable {
+  applicationConfiguration?: Record<UUID, D>;
+  data?: Record<string, any>;
+  debug?: boolean;
+  id?: UUID;
+  insertInstant?: number;
+  lambdaConfiguration?: LambdaConfiguration;
+  lastUpdateInstant?: number;
+  linkingStrategy?: IdentityProviderLinkingStrategy;
+  name?: string;
+  tenantConfiguration?: Record<UUID, IdentityProviderTenantConfiguration>;
+  type?: IdentityProviderType;
+}
+
+export interface MultiFactorEmailMethod extends Enableable {
+  templateId?: UUID;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Trevor Smith
  */
-export enum RefreshTokenExpirationPolicy {
-  Fixed = "Fixed",
-  SlidingWindow = "SlidingWindow",
-  SlidingWindowWithMaximumLifetime = "SlidingWindowWithMaximumLifetime"
+export interface ConnectorRequest {
+  connector?: BaseConnectorConfiguration;
 }
 
 /**
- * @author Brett Guy
+ * Models the User Created Event.
+ * <p>
+ * This is different than the user.create event in that it will be sent after the user has been created. This event cannot be made transactional.
+ *
+ * @author Daniel DeGroff
  */
-export interface KafkaMessengerConfiguration extends BaseMessengerConfiguration {
-  defaultTopic?: string;
-  producer?: Record<string, string>;
+export interface UserCreateCompleteEvent extends BaseUserEvent {
 }
 
 /**
- * Models the User Password Breach Event.
+ * A number identifying a cryptographic algorithm. Values should be registered with the <a
+ * href="https://www.iana.org/assignments/cose/cose.xhtml#algorithms">IANA COSE Algorithms registry</a>
  *
- * @author Matthew Altman
+ * @author Spencer Witt
  */
-export interface UserPasswordBreachEvent extends BaseUserEvent {
+export enum CoseAlgorithmIdentifier {
+  ES256 = "SHA256withECDSA",
+  ES384 = "SHA384withECDSA",
+  ES512 = "SHA512withECDSA",
+  RS256 = "SHA256withRSA",
+  RS384 = "SHA384withRSA",
+  RS512 = "SHA512withRSA",
+  PS256 = "SHA-256",
+  PS384 = "SHA-384",
+  PS512 = "SHA-512"
 }
 
 /**
- * The use type of a key.
- *
- * @author Daniel DeGroff
+ * @author andrewpai
  */
-export enum KeyUse {
-  SignOnly = "SignOnly",
-  SignAndVerify = "SignAndVerify",
-  VerifyOnly = "VerifyOnly"
+export interface SelfServiceFormConfiguration {
+  requireCurrentPasswordOnPasswordChange?: boolean;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface ApplicationWebAuthnWorkflowConfiguration extends Enableable {
+export interface RememberPreviousPasswords extends Enableable {
+  count?: number;
 }
 
 /**
- * Models an entity type that has a specific set of permissions. These are global objects and can be used across tenants.
- *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface EntityType {
-  data?: Record<string, any>;
-  id?: UUID;
-  insertInstant?: number;
-  jwtConfiguration?: EntityJWTConfiguration;
-  lastUpdateInstant?: number;
-  name?: string;
-  permissions?: Array<EntityTypePermission>;
+export interface HYPRApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+  relyingPartyApplicationId?: string;
+  relyingPartyURL?: string;
 }
 
 /**
- * JWT Configuration for entities.
+ * @author Brett Guy
  */
-export interface EntityJWTConfiguration extends Enableable {
-  accessTokenKeyId?: UUID;
-  timeToLiveInSeconds?: number;
+export interface KafkaMessengerConfiguration extends BaseMessengerConfiguration {
+  defaultTopic?: string;
+  producer?: Record<string, string>;
 }
 
 /**
- * Models the Group Member Update Complete Event.
+ * Models the User Created Registration Event.
+ * <p>
+ * This is different than the user.registration.create event in that it will be sent after the user has been created. This event cannot be made
+ * transactional.
  *
  * @author Daniel DeGroff
  */
-export interface GroupMemberUpdateCompleteEvent extends BaseGroupEvent {
-  members?: Array<GroupMember>;
+export interface UserRegistrationCreateCompleteEvent extends BaseUserEvent {
+  applicationId?: UUID;
+  registration?: UserRegistration;
 }
 
 /**
- * Search criteria for Consents
- *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export interface ConsentSearchCriteria extends BaseSearchCriteria {
-  name?: string;
+export interface LoginRecordSearchRequest {
+  retrieveTotal?: boolean;
+  search?: LoginRecordSearchCriteria;
 }
 
 /**
- * A policy for deleting Users based upon some external criteria.
+ * @author Daniel DeGroff
+ */
+export interface KafkaConfiguration extends Enableable {
+  defaultTopic?: string;
+  producer?: Record<string, string>;
+}
+
+/**
+ * This class contains the managed fields that are also put into the database during FusionAuth setup.
+ * <p>
+ * Internal Note: These fields are also declared in SQL in order to bootstrap the system. These need to stay in sync.
+ * Any changes to these fields needs to also be reflected in mysql.sql and postgresql.sql
  *
- * @author Trevor Smith
+ * @author Brian Pontarelli
  */
-export interface TimeBasedDeletePolicy extends Enableable {
-  enabledInstant?: number;
-  numberOfDaysToRetain?: number;
+export interface ManagedFields {
 }
 
 /**
- * Raw login information for each time a user logs into an application.
+ * Response for the daily active user report.
  *
  * @author Brian Pontarelli
  */
-export interface RawLogin {
-  applicationId?: UUID;
-  instant?: number;
-  ipAddress?: string;
-  userId?: UUID;
+export interface MonthlyActiveUserReportResponse {
+  monthlyActiveUsers?: Array<Count>;
+  total?: number;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export enum BreachedPasswordStatus {
-  None = "None",
-  ExactMatch = "ExactMatch",
-  SubAddressMatch = "SubAddressMatch",
-  PasswordOnly = "PasswordOnly",
-  CommonPassword = "CommonPassword"
+export interface IdentityProviderLinkRequest extends BaseEventRequest {
+  identityProviderLink?: IdentityProviderLink;
+  pendingIdPLinkId?: string;
 }
 
 /**
- * Base class for all FusionAuth events.
+ * The types of lambdas that indicate how they are invoked by FusionAuth.
  *
  * @author Brian Pontarelli
  */
-export interface BaseEvent {
-  createInstant?: number;
-  id?: UUID;
-  info?: EventInfo;
-  tenantId?: UUID;
-  type?: EventType;
+export enum LambdaType {
+  JWTPopulate = "JWTPopulate",
+  OpenIDReconcile = "OpenIDReconcile",
+  SAMLv2Reconcile = "SAMLv2Reconcile",
+  SAMLv2Populate = "SAMLv2Populate",
+  AppleReconcile = "AppleReconcile",
+  ExternalJWTReconcile = "ExternalJWTReconcile",
+  FacebookReconcile = "FacebookReconcile",
+  GoogleReconcile = "GoogleReconcile",
+  HYPRReconcile = "HYPRReconcile",
+  TwitterReconcile = "TwitterReconcile",
+  LDAPConnectorReconcile = "LDAPConnectorReconcile",
+  LinkedInReconcile = "LinkedInReconcile",
+  EpicGamesReconcile = "EpicGamesReconcile",
+  NintendoReconcile = "NintendoReconcile",
+  SonyPSNReconcile = "SonyPSNReconcile",
+  SteamReconcile = "SteamReconcile",
+  TwitchReconcile = "TwitchReconcile",
+  XboxReconcile = "XboxReconcile",
+  ClientCredentialsJWTPopulate = "ClientCredentialsJWTPopulate",
+  SCIMServerGroupRequestConverter = "SCIMServerGroupRequestConverter",
+  SCIMServerGroupResponseConverter = "SCIMServerGroupResponseConverter",
+  SCIMServerUserRequestConverter = "SCIMServerUserRequestConverter",
+  SCIMServerUserResponseConverter = "SCIMServerUserResponseConverter",
+  SelfServiceRegistrationValidation = "SelfServiceRegistrationValidation",
+  UserInfoPopulate = "UserInfoPopulate",
+  LoginValidation = "LoginValidation"
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface SystemTrustedProxyConfiguration {
-  trusted?: Array<string>;
-  trustPolicy?: SystemTrustedProxyConfigurationPolicy;
+export interface SecureGeneratorConfiguration {
+  length?: number;
+  type?: SecureGeneratorType;
 }
 
 /**
- * Authentication key response object.
+ * Models an LDAP connector.
  *
- * @author Sanjay
+ * @author Trevor Smith
  */
-export interface APIKeyResponse {
-  apiKey?: APIKey;
+export interface LDAPConnectorConfiguration extends BaseConnectorConfiguration {
+  authenticationURL?: string;
+  baseStructure?: string;
+  connectTimeout?: number;
+  identifyingAttribute?: string;
+  lambdaConfiguration?: LambdaConfiguration;
+  loginIdAttribute?: string;
+  readTimeout?: number;
+  requestedAttributes?: Array<string>;
+  securityMethod?: LDAPSecurityMethod;
+  systemAccountDN?: string;
+  systemAccountPassword?: string;
 }
 
 /**
- * @author Daniel DeGroff
+ * External JWT-only identity provider.
+ *
+ * @author Daniel DeGroff and Brian Pontarelli
  */
-export interface LoginRecordExportRequest extends BaseExportRequest {
-  criteria?: LoginRecordSearchCriteria;
+export interface ExternalJWTIdentityProvider extends BaseIdentityProvider<ExternalJWTApplicationConfiguration> {
+  claimMap?: Record<string, string>;
+  defaultKeyId?: UUID;
+  domains?: Array<string>;
+  headerKeyParameter?: string;
+  oauth2?: IdentityProviderOauth2Configuration;
+  uniqueIdentityClaim?: string;
 }
 
 /**
- * Search criteria for the webhook event log.
+ * Lambda API request object.
  *
- * @author Spencer Witt
+ * @author Brian Pontarelli
  */
-export interface WebhookEventLogSearchCriteria extends BaseSearchCriteria {
-  end?: number;
-  event?: string;
-  eventResult?: WebhookEventResult;
-  eventType?: EventType;
-  start?: number;
+export interface LambdaRequest {
+  lambda?: Lambda;
 }
 
 /**
- * Application-level configuration for WebAuthn
+ * Models an event where a user's email is updated outside of a forgot / change password workflow.
  *
  * @author Daniel DeGroff
  */
-export interface ApplicationWebAuthnConfiguration extends Enableable {
-  bootstrapWorkflow?: ApplicationWebAuthnWorkflowConfiguration;
-  reauthenticationWorkflow?: ApplicationWebAuthnWorkflowConfiguration;
+export interface UserEmailUpdateEvent extends BaseUserEvent {
+  previousEmail?: string;
 }
 
 /**
- * @author Daniel DeGroff
+ * Raw login information for each time a user logs into an application.
+ *
+ * @author Brian Pontarelli
  */
-export interface VerifyEmailRequest extends BaseEventRequest {
-  oneTimeCode?: string;
+export interface RawLogin {
+  applicationId?: UUID;
+  instant?: number;
+  ipAddress?: string;
   userId?: UUID;
-  verificationId?: string;
 }
 
 /**
+ * Search response for Group Members
+ *
  * @author Daniel DeGroff
  */
-export interface SecureIdentity {
-  breachedPasswordLastCheckedInstant?: number;
-  breachedPasswordStatus?: BreachedPasswordStatus;
-  connectorId?: UUID;
-  encryptionScheme?: string;
-  factor?: number;
-  id?: UUID;
-  lastLoginInstant?: number;
-  password?: string;
-  passwordChangeReason?: ChangePasswordReason;
-  passwordChangeRequired?: boolean;
-  passwordLastUpdateInstant?: number;
-  salt?: string;
-  uniqueUsername?: string;
-  username?: string;
-  usernameStatus?: ContentStatus;
-  verified?: boolean;
-  verifiedInstant?: number;
+export interface GroupMemberSearchResponse {
+  members?: Array<GroupMember>;
+  total?: number;
 }
 
 /**
+ * API response for retrieving Refresh Tokens
+ *
  * @author Daniel DeGroff
  */
-export enum FormControl {
-  checkbox = "checkbox",
-  number = "number",
-  password = "password",
-  radio = "radio",
-  select = "select",
-  textarea = "textarea",
-  text = "text"
+export interface RefreshTokenResponse {
+  refreshToken?: RefreshToken;
+  refreshTokens?: Array<RefreshToken>;
 }
 
 /**
- * A raw login record response
- *
  * @author Daniel DeGroff
  */
-export interface LoginRecordSearchResponse {
-  logins?: Array<DisplayableRawLogin>;
-  total?: number;
+export interface DeviceApprovalResponse {
+  deviceGrantStatus?: string;
+  deviceInfo?: DeviceInfo;
+  identityProviderLink?: IdentityProviderLink;
+  tenantId?: UUID;
+  userId?: UUID;
 }
 
 /**
- * Response for the registration report.
+ * JSON Web Token (JWT) as defined by RFC 7519.
+ * <pre>
+ * From RFC 7519 Section 1. Introduction:
+ *    The suggested pronunciation of JWT is the same as the English word "jot".
+ * </pre>
+ * The JWT is not Thread-Safe and should not be re-used.
  *
+ * @author Daniel DeGroff
+ */
+export interface JWT {
+  aud?: any;
+  exp?: number;
+  iat?: number;
+  iss?: string;
+  jti?: string;
+  nbf?: number;
+  [otherClaims: string]: any; // Any other fields
+  sub?: string;
+}
+
+/**
  * @author Brian Pontarelli
  */
-export interface RegistrationReportResponse {
-  hourlyCounts?: Array<Count>;
-  total?: number;
+export interface Tenantable {
 }
 
 /**
- * Forgot password response object.
+ * Used by the Relying Party to specify their requirements for authenticator attributes. Fields use the deprecated "resident key" terminology to refer
+ * to client-side discoverable credentials to maintain backwards compatibility with WebAuthn Level 1.
  *
+ * @author Spencer Witt
+ */
+export interface AuthenticatorSelectionCriteria {
+  authenticatorAttachment?: AuthenticatorAttachment;
+  requireResidentKey?: boolean;
+  residentKey?: ResidentKeyRequirement;
+  userVerification?: UserVerificationRequirement;
+}
+
+/**
  * @author Daniel DeGroff
  */
-export interface ForgotPasswordResponse {
-  changePasswordId?: string;
+export interface ApplicationWebAuthnWorkflowConfiguration extends Enableable {
 }
 
 /**
- * Models a User consent.
+ * Used to communicate whether and how authenticator attestation should be delivered to the Relying Party
  *
- * @author Daniel DeGroff
+ * @author Spencer Witt
  */
-export interface UserConsent {
-  consent?: Consent;
-  consentId?: UUID;
-  data?: Record<string, any>;
-  giverUserId?: UUID;
-  id?: UUID;
-  insertInstant?: number;
-  lastUpdateInstant?: number;
-  status?: ConsentStatus;
-  userId?: UUID;
-  values?: Array<string>;
+export enum AttestationConveyancePreference {
+  none = "none",
+  indirect = "indirect",
+  direct = "direct",
+  enterprise = "enterprise"
 }
 
 /**
- * Twitch gaming login provider.
+ * SAML v2 identity provider configuration.
  *
- * @author Brett Pontarelli
+ * @author Brian Pontarelli
  */
-export interface TwitchIdentityProvider extends BaseIdentityProvider<TwitchApplicationConfiguration> {
+export interface SAMLv2IdentityProvider extends BaseSAMLv2IdentityProvider<SAMLv2ApplicationConfiguration> {
+  assertionConfiguration?: SAMLv2AssertionConfiguration;
+  buttonImageURL?: string;
   buttonText?: string;
-  client_id?: string;
-  client_secret?: string;
-  scope?: string;
+  domains?: Array<string>;
+  idpEndpoint?: string;
+  idpInitiatedConfiguration?: SAMLv2IdpInitiatedConfiguration;
+  issuer?: string;
+  loginHintConfiguration?: LoginHintConfiguration;
+  nameIdFormat?: string;
+  postRequest?: boolean;
+  requestSigningKeyId?: UUID;
+  signRequest?: boolean;
+  xmlSignatureC14nMethod?: CanonicalizationMethod;
 }
 
 /**
- * @author Daniel DeGroff
+ * Facebook social login provider.
+ *
+ * @author Brian Pontarelli
  */
-export interface IdentityProviderStartLoginResponse {
-  code?: string;
+export interface FacebookIdentityProvider extends BaseIdentityProvider<FacebookApplicationConfiguration> {
+  appId?: string;
+  buttonText?: string;
+  client_secret?: string;
+  fields?: string;
+  loginMethod?: IdentityProviderLoginMethod;
+  permissions?: string;
 }
 
 /**
- * Form response.
+ * An expandable API request.
  *
  * @author Daniel DeGroff
  */
-export interface FormRequest {
-  form?: Form;
+export interface ExpandableRequest {
+  expand?: Array<string>;
 }
 
 /**
- * Tenant search response
+ * Models a set of localized Integers that can be stored as JSON.
  *
- * @author Mark Manes
+ * @author Daniel DeGroff
  */
-export interface TenantSearchResponse {
-  tenants?: Array<Tenant>;
-  total?: number;
+export interface LocalizedIntegers extends Record<string, number> {
 }
 
 /**
- * Key API request object.
- *
- * @author Daniel DeGroff
+ * Interface for all identity providers that can be domain based.
  */
-export interface KeyRequest {
-  key?: Key;
+export interface DomainBasedIdentityProvider {
 }
 
 /**
- * Models an event where a user is being updated and tries to use an "in-use" login Id (email or username).
- *
  * @author Daniel DeGroff
  */
-export interface UserLoginIdDuplicateOnUpdateEvent extends UserLoginIdDuplicateOnCreateEvent {
+export enum ObjectState {
+  Active = "Active",
+  Inactive = "Inactive",
+  PendingDelete = "PendingDelete"
 }
 
 /**
- * Location information. Useful for IP addresses and other displayable data objects.
+ * Email template request.
  *
  * @author Brian Pontarelli
  */
-export interface Location {
-  city?: string;
-  country?: string;
-  displayString?: string;
-  latitude?: number;
-  longitude?: number;
-  region?: string;
-  zipcode?: string;
+export interface EmailTemplateRequest {
+  emailTemplate?: EmailTemplate;
 }
 
 /**
- * @author Brett Guy
+ * API response for completing WebAuthn credential registration or assertion
+ *
+ * @author Spencer Witt
  */
-export interface IPAccessControlListRequest {
-  ipAccessControlList?: IPAccessControlList;
+export interface WebAuthnRegisterCompleteResponse {
+  credential?: WebAuthnCredential;
+}
+
+export interface IdentityProviderDetails {
+  applicationIds?: Array<UUID>;
+  id?: UUID;
+  idpEndpoint?: string;
+  name?: string;
+  oauth2?: IdentityProviderOauth2Configuration;
+  type?: IdentityProviderType;
 }
 
 /**
- * Controls the policy for whether OAuth workflows will more strictly adhere to the OAuth and OIDC specification
- * or run in backwards compatibility mode.
+ * Events that are bound to applications.
  *
- * @author David Charles
+ * @author Brian Pontarelli
  */
-export enum OAuthScopeHandlingPolicy {
-  Compatibility = "Compatibility",
-  Strict = "Strict"
+export interface ApplicationEvent {
 }
 
 /**
- * Import request.
- *
- * @author Brian Pontarelli
+ * @author Brett Pontarelli
  */
-export interface ImportRequest extends BaseEventRequest {
-  encryptionScheme?: string;
-  factor?: number;
-  users?: Array<User>;
-  validateDbConstraints?: boolean;
+export enum AuthenticationThreats {
+  ImpossibleTravel = "ImpossibleTravel"
 }
 
 /**
- * Models an event where a user's email is updated outside of a forgot / change password workflow.
- *
  * @author Daniel DeGroff
  */
-export interface UserEmailUpdateEvent extends BaseUserEvent {
-  previousEmail?: string;
+export interface TenantRequest extends BaseEventRequest {
+  sourceTenantId?: UUID;
+  tenant?: Tenant;
+  webhookIds?: Array<UUID>;
 }
 
 /**
- * @author Lyle Schemmerling
+ * @author Brett Guy
  */
-export interface SAMLv2DestinationAssertionConfiguration {
-  alternates?: Array<string>;
-  policy?: SAMLv2DestinationAssertionPolicy;
+export interface IPAccessControlListSearchCriteria extends BaseSearchCriteria {
+  name?: string;
+}
+
+/**
+ * @author Daniel DeGroff
+ */
+export interface AppleApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+  bundleId?: string;
+  buttonText?: string;
+  keyId?: UUID;
+  scope?: string;
+  servicesId?: string;
+  teamId?: string;
 }
 
 /**
- * The possible states of an individual webhook attempt to a single endpoint.
- *
  * @author Spencer Witt
  */
-export enum WebhookAttemptResult {
-  Success = "Success",
-  Failure = "Failure",
-  Unknown = "Unknown"
+export interface TenantWebAuthnWorkflowConfiguration extends Enableable {
+  authenticatorAttachmentPreference?: AuthenticatorAttachmentPreference;
+  userVerificationRequirement?: UserVerificationRequirement;
 }
 
 /**
- * Models the User Login Success Event.
+ * Model a user event when a two-factor method has been added.
  *
  * @author Daniel DeGroff
  */
-export interface UserLoginSuccessEvent extends BaseUserEvent {
-  applicationId?: UUID;
-  authenticationType?: string;
-  connectorId?: UUID;
-  identityProviderId?: UUID;
-  identityProviderName?: string;
-  ipAddress?: string;
+export interface UserTwoFactorMethodRemoveEvent extends BaseUserEvent {
+  method?: TwoFactorMethod;
 }
 
-/**
- * Models the User Update Registration Event.
- * <p>
- * This is different than user.registration.update in that it is sent after this event completes, this cannot be transactional.
- *
- * @author Daniel DeGroff
- */
-export interface UserRegistrationUpdateCompleteEvent extends BaseUserEvent {
+export interface UsernameModeration extends Enableable {
   applicationId?: UUID;
-  original?: UserRegistration;
-  registration?: UserRegistration;
 }
 
 /**
- * Group API response object.
+ * Authentication key request object.
  *
- * @author Daniel DeGroff
+ * @author Sanjay
  */
-export interface GroupResponse {
-  group?: Group;
-  groups?: Array<Group>;
+export interface APIKeyRequest {
+  apiKey?: APIKey;
+  sourceKeyId?: UUID;
+}
+
+export interface EventConfigurationData extends Enableable {
+  transactionType?: TransactionType;
 }
 
 /**
- * @author Daniel DeGroff
+ * The <i>authenticator's</i> response for the registration ceremony in its encoded format
+ *
+ * @author Spencer Witt
  */
-export interface GoogleApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
-  buttonText?: string;
-  client_id?: string;
-  client_secret?: string;
-  loginMethod?: IdentityProviderLoginMethod;
-  properties?: GoogleIdentityProviderProperties;
-  scope?: string;
+export interface WebAuthnAuthenticatorRegistrationResponse {
+  attestationObject?: string;
+  clientDataJSON?: string;
 }
 
 /**
- * Event Log Type
- *
  * @author Daniel DeGroff
  */
-export enum EventLogType {
-  Information = "Information",
-  Debug = "Debug",
-  Error = "Error"
+export interface PasswordlessLoginRequest extends BaseLoginRequest {
+  code?: string;
+  twoFactorTrustId?: string;
 }
 
 /**
- * The transaction types for Webhooks and other event systems within FusionAuth.
+ * Search criteria for Consents
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export enum TransactionType {
-  None = "None",
-  Any = "Any",
-  SimpleMajority = "SimpleMajority",
-  SuperMajority = "SuperMajority",
-  AbsoluteMajority = "AbsoluteMajority"
+export interface ConsentSearchCriteria extends BaseSearchCriteria {
+  name?: string;
 }
 
 /**
+ * JWT Configuration. A JWT Configuration for an Application may not be active if it is using the global configuration, the configuration
+ * may be <code>enabled = false</code>.
+ *
  * @author Daniel DeGroff
  */
-export interface TenantFormConfiguration {
-  adminUserFormId?: UUID;
+export interface JWTConfiguration extends Enableable {
+  accessTokenKeyId?: UUID;
+  idTokenKeyId?: UUID;
+  refreshTokenExpirationPolicy?: RefreshTokenExpirationPolicy;
+  refreshTokenRevocationPolicy?: RefreshTokenRevocationPolicy;
+  refreshTokenSlidingWindowConfiguration?: RefreshTokenSlidingWindowConfiguration;
+  refreshTokenTimeToLiveInMinutes?: number;
+  refreshTokenUsagePolicy?: RefreshTokenUsagePolicy;
+  timeToLiveInSeconds?: number;
 }
 
-/**
- * Facebook social login provider.
- *
- * @author Brian Pontarelli
- */
-export interface FacebookIdentityProvider extends BaseIdentityProvider<FacebookApplicationConfiguration> {
-  appId?: string;
-  buttonText?: string;
-  client_secret?: string;
-  fields?: string;
-  loginMethod?: IdentityProviderLoginMethod;
-  permissions?: string;
+export interface EmailTemplateErrors {
+  parseErrors?: Record<string, string>;
+  renderErrors?: Record<string, string>;
 }
 
 /**
- * Request for the system configuration API.
+ * Models the User Login event that is suspicious.
  *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface SystemConfigurationRequest {
-  systemConfiguration?: SystemConfiguration;
+export interface UserLoginSuspiciousEvent extends UserLoginSuccessEvent {
+  threatsDetected?: Array<AuthenticationThreats>;
 }
 
 /**
- * Email template search response
+ * Describes the Relying Party's requirements for <a href="https://www.w3.org/TR/webauthn-2/#client-side-discoverable-credential">client-side
+ * discoverable credentials</a> (formerly known as "resident keys")
  *
- * @author Mark Manes
+ * @author Spencer Witt
  */
-export interface EmailTemplateSearchResponse {
-  emailTemplates?: Array<EmailTemplate>;
-  total?: number;
+export enum ResidentKeyRequirement {
+  discouraged = "discouraged",
+  preferred = "preferred",
+  required = "required"
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface EmailUnverifiedOptions {
-  allowEmailChangeWhenGated?: boolean;
-  behavior?: UnverifiedBehavior;
+export interface TestEvent extends BaseEvent {
+  message?: string;
 }
 
 /**
- * COSE key type
+ * Webhook API response object.
  *
- * @author Spencer Witt
+ * @author Brian Pontarelli
  */
-export enum CoseKeyType {
-  Reserved = "0",
-  OKP = "1",
-  EC2 = "2",
-  RSA = "3",
-  Symmetric = "4"
+export interface WebhookResponse {
+  webhook?: Webhook;
+  webhooks?: Array<Webhook>;
 }
 
 /**
+ * Information about a user event (login, register, etc) that helps identify the source of the event (location, device type, OS, etc).
+ *
  * @author Brian Pontarelli
  */
-export interface FamilyConfiguration extends Enableable {
-  allowChildRegistrations?: boolean;
-  confirmChildEmailTemplateId?: UUID;
-  deleteOrphanedAccounts?: boolean;
-  deleteOrphanedAccountsDays?: number;
-  familyRequestEmailTemplateId?: UUID;
-  maximumChildAge?: number;
-  minimumOwnerAge?: number;
-  parentEmailRequired?: boolean;
-  parentRegistrationEmailTemplateId?: UUID;
+export interface EventInfo {
+  data?: Record<string, any>;
+  deviceDescription?: string;
+  deviceName?: string;
+  deviceType?: string;
+  ipAddress?: string;
+  location?: Location;
+  os?: string;
+  userAgent?: string;
 }
 
 /**
- * API response for completing WebAuthn credential registration or assertion
+ * Lambda API response object.
  *
- * @author Spencer Witt
+ * @author Brian Pontarelli
  */
-export interface WebAuthnRegisterCompleteResponse {
-  credential?: WebAuthnCredential;
+export interface LambdaResponse {
+  lambda?: Lambda;
+  lambdas?: Array<Lambda>;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Brett Guy
  */
-export interface TwoFactorStatusResponse {
-  trusts?: Array<TwoFactorTrust>;
-  twoFactorTrustId?: string;
-}
-
-export interface TwoFactorTrust {
-  applicationId?: UUID;
-  expiration?: number;
-  startInstant?: number;
+export enum ClientAuthenticationPolicy {
+  Required = "Required",
+  NotRequired = "NotRequired",
+  NotRequiredWhenUsingPKCE = "NotRequiredWhenUsingPKCE"
 }
 
 /**
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface PendingResponse {
-  users?: Array<User>;
+export enum RefreshTokenUsagePolicy {
+  Reusable = "Reusable",
+  OneTimeUse = "OneTimeUse"
 }
 
 /**
- * Search criteria for Groups
+ * Container for the event information. This is the JSON that is sent from FusionAuth to webhooks.
  *
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface GroupSearchCriteria extends BaseSearchCriteria {
-  name?: string;
-  tenantId?: UUID;
+export interface EventRequest {
+  event?: BaseEvent;
 }
 
 /**
- * Models the User Event (and can be converted to JSON) that is used for all user modifications (create, update,
- * delete).
- * <p>
- * This is different than user.delete because it is sent after the tx is committed, this cannot be transactional.
+ * Available Integrations
  *
  * @author Daniel DeGroff
  */
-export interface UserDeleteCompleteEvent extends BaseUserEvent {
+export interface Integrations {
+  cleanspeak?: CleanSpeakConfiguration;
+  kafka?: KafkaConfiguration;
 }
 
 /**
+ * Models the User Password Update Event.
+ *
  * @author Daniel DeGroff
  */
-export interface SortField {
-  missing?: string;
-  name?: string;
-  order?: Sort;
+export interface UserPasswordUpdateEvent extends BaseUserEvent {
 }
 
 /**
- * Request to complete the WebAuthn registration ceremony for a new credential,.
+ * Standard error domain object that can also be used as the response from an API call.
  *
- * @author Spencer Witt
+ * @author Brian Pontarelli
  */
-export interface WebAuthnRegisterCompleteRequest {
-  credential?: WebAuthnPublicKeyRegistrationRequest;
-  origin?: string;
-  rpId?: string;
-  userId?: UUID;
+export interface Errors {
+  fieldErrors?: Record<string, Array<Error>>;
+  generalErrors?: Array<Error>;
 }
 
 /**
- * Search criteria for Lambdas
- *
- * @author Mark Manes
+ * @author Michael Sleevi
  */
-export interface LambdaSearchCriteria extends BaseSearchCriteria {
-  body?: string;
-  name?: string;
-  type?: LambdaType;
+export interface PreviewMessageTemplateResponse {
+  errors?: Errors;
+  message?: SMSMessage;
 }
 
 /**
- * User API request object.
+ * The possible states of an individual webhook attempt to a single endpoint.
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export interface UserRequest extends BaseEventRequest {
-  applicationId?: UUID;
-  currentPassword?: string;
-  disableDomainBlock?: boolean;
-  sendSetPasswordEmail?: boolean;
-  skipVerification?: boolean;
-  user?: User;
+export enum WebhookAttemptResult {
+  Success = "Success",
+  Failure = "Failure",
+  Unknown = "Unknown"
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface TenantLoginConfiguration {
-  requireAuthentication?: boolean;
+export interface TenantFormConfiguration {
+  adminUserFormId?: UUID;
 }
 
-/**
- * @author Trevor Smith
- */
-export interface DeviceResponse {
-  device_code?: string;
-  expires_in?: number;
-  interval?: number;
-  user_code?: string;
-  verification_uri?: string;
-  verification_uri_complete?: string;
+export enum DeviceType {
+  BROWSER = "BROWSER",
+  DESKTOP = "DESKTOP",
+  LAPTOP = "LAPTOP",
+  MOBILE = "MOBILE",
+  OTHER = "OTHER",
+  SERVER = "SERVER",
+  TABLET = "TABLET",
+  TV = "TV",
+  UNKNOWN = "UNKNOWN"
 }
 
 /**
- * Request for the Logout API that can be used as an alternative to URL parameters.
+ * Event log used internally by FusionAuth to help developers debug hooks, Webhooks, email templates, etc.
  *
  * @author Brian Pontarelli
  */
-export interface LogoutRequest extends BaseEventRequest {
-  global?: boolean;
-  refreshToken?: string;
+export interface EventLog {
+  id?: number;
+  insertInstant?: number;
+  message?: string;
+  type?: EventLogType;
 }
 
 /**
- * @author Daniel DeGroff
+ * This class is a simple attachment with a byte array, name and MIME type.
+ *
+ * @author Brian Pontarelli
  */
-export interface VerifyRegistrationRequest extends BaseEventRequest {
-  oneTimeCode?: string;
-  verificationId?: string;
+export interface Attachment {
+  attachment?: Array<number>;
+  mime?: string;
+  name?: string;
 }
 
-export enum ThemeType {
-  advanced = "advanced",
-  simple = "simple"
+/**
+ * A grant for an entity to a user or another entity.
+ *
+ * @author Brian Pontarelli
+ */
+export interface EntityGrant {
+  data?: Record<string, any>;
+  entity?: Entity;
+  id?: UUID;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  permissions?: Array<string>;
+  recipientEntityId?: UUID;
+  userId?: UUID;
 }
 
 /**
- * @author Daniel DeGroff
+ * User comment search response
+ *
+ * @author Spencer Witt
  */
-export interface TenantRateLimitConfiguration {
-  failedLogin?: RateLimitedRequestConfiguration;
-  forgotPassword?: RateLimitedRequestConfiguration;
-  sendEmailVerification?: RateLimitedRequestConfiguration;
-  sendPasswordless?: RateLimitedRequestConfiguration;
-  sendRegistrationVerification?: RateLimitedRequestConfiguration;
-  sendTwoFactor?: RateLimitedRequestConfiguration;
+export interface UserCommentSearchResponse {
+  total?: number;
+  userComments?: Array<UserComment>;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Brett Pontarelli
  */
-export interface Tenant {
-  accessControlConfiguration?: TenantAccessControlConfiguration;
-  captchaConfiguration?: TenantCaptchaConfiguration;
-  configured?: boolean;
-  connectorPolicies?: Array<ConnectorPolicy>;
+export enum CaptchaMethod {
+  GoogleRecaptchaV2 = "GoogleRecaptchaV2",
+  GoogleRecaptchaV3 = "GoogleRecaptchaV3",
+  HCaptcha = "HCaptcha",
+  HCaptchaEnterprise = "HCaptchaEnterprise"
+}
+
+/**
+ * @author Seth Musselman
+ */
+export interface Application {
+  accessControlConfiguration?: ApplicationAccessControlConfiguration;
+  active?: boolean;
+  authenticationTokenConfiguration?: AuthenticationTokenConfiguration;
+  cleanSpeakConfiguration?: CleanSpeakConfiguration;
   data?: Record<string, any>;
-  emailConfiguration?: EmailConfiguration;
-  eventConfiguration?: EventConfiguration;
-  externalIdentifierConfiguration?: ExternalIdentifierConfiguration;
-  failedAuthenticationConfiguration?: FailedAuthenticationConfiguration;
-  familyConfiguration?: FamilyConfiguration;
-  formConfiguration?: TenantFormConfiguration;
-  httpSessionMaxInactiveInterval?: number;
+  emailConfiguration?: ApplicationEmailConfiguration;
+  externalIdentifierConfiguration?: ApplicationExternalIdentifierConfiguration;
+  formConfiguration?: ApplicationFormConfiguration;
   id?: UUID;
   insertInstant?: number;
-  issuer?: string;
   jwtConfiguration?: JWTConfiguration;
-  lambdaConfiguration?: TenantLambdaConfiguration;
+  lambdaConfiguration?: LambdaConfiguration;
   lastUpdateInstant?: number;
-  loginConfiguration?: TenantLoginConfiguration;
-  logoutURL?: string;
-  maximumPasswordAge?: MaximumPasswordAge;
-  minimumPasswordAge?: MinimumPasswordAge;
-  multiFactorConfiguration?: TenantMultiFactorConfiguration;
+  loginConfiguration?: LoginConfiguration;
+  multiFactorConfiguration?: ApplicationMultiFactorConfiguration;
   name?: string;
-  oauthConfiguration?: TenantOAuth2Configuration;
-  passwordEncryptionConfiguration?: PasswordEncryptionConfiguration;
-  passwordValidationRules?: PasswordValidationRules;
-  rateLimitConfiguration?: TenantRateLimitConfiguration;
-  registrationConfiguration?: TenantRegistrationConfiguration;
-  scimServerConfiguration?: TenantSCIMServerConfiguration;
-  ssoConfiguration?: TenantSSOConfiguration;
+  oauthConfiguration?: OAuth2Configuration;
+  passwordlessConfiguration?: PasswordlessConfiguration;
+  registrationConfiguration?: RegistrationConfiguration;
+  registrationDeletePolicy?: ApplicationRegistrationDeletePolicy;
+  roles?: Array<ApplicationRole>;
+  samlv2Configuration?: SAMLv2Configuration;
+  scopes?: Array<ApplicationOAuthScope>;
   state?: ObjectState;
+  tenantId?: UUID;
   themeId?: UUID;
-  userDeletePolicy?: TenantUserDeletePolicy;
-  usernameConfiguration?: TenantUsernameConfiguration;
-  webAuthnConfiguration?: TenantWebAuthnConfiguration;
+  unverified?: RegistrationUnverifiedOptions;
+  verificationEmailTemplateId?: UUID;
+  verificationStrategy?: VerificationStrategy;
+  verifyRegistration?: boolean;
+  webAuthnConfiguration?: ApplicationWebAuthnConfiguration;
 }
 
-export interface TenantOAuth2Configuration {
-  clientCredentialsAccessTokenPopulateLambdaId?: UUID;
+/**
+ * @author Daniel DeGroff
+ */
+export interface SortField {
+  missing?: string;
+  name?: string;
+  order?: Sort;
 }
 
 /**
- * Models the Group Member Add Complete Event.
+ * SAML v2 IdP Initiated identity provider configuration.
  *
  * @author Daniel DeGroff
  */
-export interface GroupMemberAddCompleteEvent extends BaseGroupEvent {
-  members?: Array<GroupMember>;
+export interface SAMLv2IdPInitiatedIdentityProvider extends BaseSAMLv2IdentityProvider<SAMLv2IdPInitiatedApplicationConfiguration> {
+  issuer?: string;
 }
 
 /**
- * Request for the Tenant API to delete a tenant rather than using the URL parameters.
+ * Search criteria for the event log.
  *
  * @author Brian Pontarelli
  */
-export interface TenantDeleteRequest extends BaseEventRequest {
-  async?: boolean;
+export interface EventLogSearchCriteria extends BaseSearchCriteria {
+  end?: number;
+  message?: string;
+  start?: number;
+  type?: EventLogType;
+}
+
+export enum KeyAlgorithm {
+  ES256 = "ES256",
+  ES384 = "ES384",
+  ES512 = "ES512",
+  HS256 = "HS256",
+  HS384 = "HS384",
+  HS512 = "HS512",
+  RS256 = "RS256",
+  RS384 = "RS384",
+  RS512 = "RS512"
 }
 
 /**
- * The types of connectors. This enum is stored as an ordinal on the <code>identities</code> table, order must be maintained.
- *
- * @author Trevor Smith
+ * @author Daniel DeGroff
  */
-export enum ConnectorType {
-  FusionAuth = "FusionAuth",
-  Generic = "Generic",
-  LDAP = "LDAP"
+export interface JWTVendResponse {
+  token?: string;
 }
 
 /**
- * Models the User Login event for a new device (un-recognized)
+ * Reindex API request
  *
  * @author Daniel DeGroff
  */
-export interface UserLoginNewDeviceEvent extends UserLoginSuccessEvent {
+export interface ReindexRequest {
+  index?: string;
 }
 
 /**
- * @author Spencer Witt
+ * Entity grant API response object.
+ *
+ * @author Brian Pontarelli
  */
-export interface TenantWebAuthnWorkflowConfiguration extends Enableable {
-  authenticatorAttachmentPreference?: AuthenticatorAttachmentPreference;
-  userVerificationRequirement?: UserVerificationRequirement;
+export interface EntityGrantResponse {
+  grant?: EntityGrant;
+  grants?: Array<EntityGrant>;
+}
+
+export interface RegistrationConfiguration extends Enableable {
+  birthDate?: Requirable;
+  confirmPassword?: boolean;
+  firstName?: Requirable;
+  formId?: UUID;
+  fullName?: Requirable;
+  lastName?: Requirable;
+  loginIdType?: LoginIdType;
+  middleName?: Requirable;
+  mobilePhone?: Requirable;
+  preferredLanguages?: Requirable;
+  type?: RegistrationType;
 }
 
 /**
- * Xbox gaming login provider.
+ * Helper interface that indicates an identity provider can be federated to using the HTTP POST method.
  *
- * @author Brett Pontarelli
+ * @author Brian Pontarelli
  */
-export interface XboxIdentityProvider extends BaseIdentityProvider<XboxApplicationConfiguration> {
-  buttonText?: string;
-  client_id?: string;
-  client_secret?: string;
-  scope?: string;
+export interface SupportsPostBindings {
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface TwitterApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
-  buttonText?: string;
-  consumerKey?: string;
-  consumerSecret?: string;
+export interface OAuth2Configuration {
+  authorizedOriginURLs?: Array<string>;
+  authorizedRedirectURLs?: Array<string>;
+  authorizedURLValidationPolicy?: Oauth2AuthorizedURLValidationPolicy;
+  clientAuthenticationPolicy?: ClientAuthenticationPolicy;
+  clientId?: string;
+  clientSecret?: string;
+  consentMode?: OAuthScopeConsentMode;
+  debug?: boolean;
+  deviceVerificationURL?: string;
+  enabledGrants?: Array<GrantType>;
+  generateRefreshTokens?: boolean;
+  logoutBehavior?: LogoutBehavior;
+  logoutURL?: string;
+  proofKeyForCodeExchangePolicy?: ProofKeyForCodeExchangePolicy;
+  providedScopePolicy?: ProvidedScopePolicy;
+  relationship?: OAuthApplicationRelationship;
+  requireClientAuthentication?: boolean;
+  requireRegistration?: boolean;
+  scopeHandlingPolicy?: OAuthScopeHandlingPolicy;
+  unknownScopePolicy?: UnknownScopePolicy;
 }
 
 /**
- * @author Trevor Smith
+ * @author Daniel DeGroff
  */
-export interface ConnectorRequest {
-  connector?: BaseConnectorConfiguration;
+export interface TwoFactorSendRequest {
+  applicationId?: UUID;
+  email?: string;
+  method?: string;
+  methodId?: string;
+  mobilePhone?: string;
+  userId?: UUID;
 }
 
 /**
- * External JWT-only identity provider.
- *
- * @author Daniel DeGroff and Brian Pontarelli
- */
-export interface ExternalJWTIdentityProvider extends BaseIdentityProvider<ExternalJWTApplicationConfiguration> {
-  claimMap?: Record<string, string>;
-  defaultKeyId?: UUID;
-  domains?: Array<string>;
-  headerKeyParameter?: string;
-  oauth2?: IdentityProviderOauth2Configuration;
-  uniqueIdentityClaim?: string;
-}
-
-/**
- * Request to register a new public key with WebAuthn
+ * Search criteria for Applications
  *
  * @author Spencer Witt
  */
-export interface WebAuthnPublicKeyRegistrationRequest {
-  clientExtensionResults?: WebAuthnExtensionsClientOutputs;
-  id?: string;
-  response?: WebAuthnAuthenticatorRegistrationResponse;
-  rpId?: string;
-  transports?: Array<string>;
-  type?: string;
+export interface ApplicationSearchCriteria extends BaseSearchCriteria {
+  name?: string;
+  state?: ObjectState;
+  tenantId?: UUID;
 }
 
 /**
- * Webhook search response
+ * Models the User Registration Verified Event.
  *
- * @author Spencer Witt
+ * @author Trevor Smith
  */
-export interface WebhookSearchResponse {
-  total?: number;
-  webhooks?: Array<Webhook>;
+export interface UserRegistrationVerifiedEvent extends BaseUserEvent {
+  applicationId?: UUID;
+  registration?: UserRegistration;
 }
 
 /**
- * @author Daniel DeGroff
+ * A Message Template Request to the API
+ *
+ * @author Michael Sleevi
  */
-export interface RefreshResponse {
+export interface MessageTemplateRequest {
+  messageTemplate?: MessageTemplate;
 }
 
 /**
- * Response for the login report.
+ * Entity Type API request object.
  *
  * @author Brian Pontarelli
  */
-export interface LoginReportResponse {
-  hourlyCounts?: Array<Count>;
-  total?: number;
+export interface EntityTypeRequest {
+  entityType?: EntityType;
+  permission?: EntityTypePermission;
 }
 
 /**
- * Group Member Delete Request
+ * A marker interface indicating this event cannot be made transactional.
  *
  * @author Daniel DeGroff
  */
-export interface MemberDeleteRequest {
-  memberIds?: Array<UUID>;
-  members?: Record<UUID, Array<UUID>>;
+export interface NonTransactionalEvent {
 }
 
 /**
- * A historical state of a user log event. Since events can be modified, this stores the historical state.
+ * Models the User Create Event.
  *
  * @author Brian Pontarelli
  */
-export interface LogHistory {
-  historyItems?: Array<HistoryItem>;
-}
-
-export interface HistoryItem {
-  actionerUserId?: UUID;
-  comment?: string;
-  createInstant?: number;
-  expiry?: number;
-}
-
-/**
- * @author Brian Pontarelli
- */
-export interface AuditLogRequest extends BaseEventRequest {
-  auditLog?: AuditLog;
+export interface UserCreateEvent extends BaseUserEvent {
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface RateLimitedRequestConfiguration extends Enableable {
-  limit?: number;
-  timePeriodInSeconds?: number;
+export interface ApplicationMultiFactorConfiguration {
+  email?: MultiFactorEmailTemplate;
+  loginPolicy?: MultiFactorLoginPolicy;
+  sms?: MultiFactorSMSTemplate;
+  trustPolicy?: ApplicationMultiFactorTrustPolicy;
 }
 
 /**
- * A marker interface indicating this event cannot be made transactional.
- *
  * @author Daniel DeGroff
  */
-export interface NonTransactionalEvent {
+export enum FormType {
+  registration = "registration",
+  adminRegistration = "adminRegistration",
+  adminUser = "adminUser",
+  selfServiceUser = "selfServiceUser"
 }
 
 /**
- * @author Brett Guy
+ * @author Brian Pontarelli
  */
-export enum ProofKeyForCodeExchangePolicy {
-  Required = "Required",
-  NotRequired = "NotRequired",
-  NotRequiredWhenUsingClientAuthentication = "NotRequiredWhenUsingClientAuthentication"
+export interface TwoFactorRequest extends BaseEventRequest {
+  applicationId?: UUID;
+  authenticatorId?: string;
+  code?: string;
+  email?: string;
+  method?: string;
+  mobilePhone?: string;
+  secret?: string;
+  secretBase32Encoded?: string;
+  twoFactorId?: string;
 }
 
 /**
- * @author Daniel DeGroff
+ * User Action Reason API request object.
+ *
+ * @author Brian Pontarelli
  */
-export interface TwoFactorResponse {
-  code?: string;
-  recoveryCodes?: Array<string>;
+export interface UserActionReasonRequest {
+  userActionReason?: UserActionReason;
 }
 
 /**
- * Epic gaming login provider.
+ * Domain for a public key, key pair or an HMAC secret. This is used by KeyMaster to manage keys for JWTs, SAML, etc.
  *
- * @author Brett Pontarelli
+ * @author Brian Pontarelli
  */
-export interface EpicGamesIdentityProvider extends BaseIdentityProvider<EpicGamesApplicationConfiguration> {
-  buttonText?: string;
-  client_id?: string;
-  client_secret?: string;
-  scope?: string;
-}
-
-// Do not require a setter for 'type', it is defined by the concrete class and is not mutable
-export interface BaseMessengerConfiguration {
-  data?: Record<string, any>;
-  debug?: boolean;
+export interface Key {
+  algorithm?: KeyAlgorithm;
+  certificate?: string;
+  certificateInformation?: CertificateInformation;
+  expirationInstant?: number;
+  hasPrivateKey?: boolean;
   id?: UUID;
   insertInstant?: number;
+  issuer?: string;
+  kid?: string;
   lastUpdateInstant?: number;
+  length?: number;
   name?: string;
-  transport?: string;
-  type?: MessengerType;
+  privateKey?: string;
+  publicKey?: string;
+  secret?: string;
+  type?: KeyType;
 }
 
 /**
- * @author Daniel DeGroff
+ * Models the User Bulk Create Event.
+ *
+ * @author Brian Pontarelli
  */
-export interface SecretResponse {
-  secret?: string;
-  secretBase32Encoded?: string;
+export interface UserBulkCreateEvent extends BaseEvent {
+  users?: Array<User>;
 }
 
 /**
- * Search request for entities
- *
- * @author Brett Guy
+ * @author Daniel DeGroff
  */
-export interface EntitySearchResponse {
-  entities?: Array<Entity>;
-  nextResults?: string;
-  total?: number;
+export interface IdentityProviderOauth2Configuration {
+  authorization_endpoint?: string;
+  client_id?: string;
+  client_secret?: string;
+  clientAuthenticationMethod?: ClientAuthenticationMethod;
+  emailClaim?: string;
+  emailVerifiedClaim?: string;
+  issuer?: string;
+  scope?: string;
+  token_endpoint?: string;
+  uniqueIdClaim?: string;
+  userinfo_endpoint?: string;
+  usernameClaim?: string;
 }
 
 /**
- * @author Rob Davis
+ * @author Daniel DeGroff
  */
-export interface TenantLambdaConfiguration {
-  loginValidationId?: UUID;
-  scimEnterpriseUserRequestConverterId?: UUID;
-  scimEnterpriseUserResponseConverterId?: UUID;
-  scimGroupRequestConverterId?: UUID;
-  scimGroupResponseConverterId?: UUID;
-  scimUserRequestConverterId?: UUID;
-  scimUserResponseConverterId?: UUID;
+export interface IntrospectResponse extends Record<string, any> {
 }
 
 /**
- * @author Mikey Sleevi
+ * @author Daniel DeGroff
  */
-export enum MessageType {
-  SMS = "SMS"
+export interface RefreshTokenRevocationPolicy {
+  onLoginPrevented?: boolean;
+  onMultiFactorEnable?: boolean;
+  onPasswordChanged?: boolean;
 }
 
 /**
- * Describes the Relying Party's requirements for <a href="https://www.w3.org/TR/webauthn-2/#client-side-discoverable-credential">client-side
- * discoverable credentials</a> (formerly known as "resident keys")
+ * Base class for all {@link User}-related events.
  *
  * @author Spencer Witt
  */
-export enum ResidentKeyRequirement {
-  discouraged = "discouraged",
-  preferred = "preferred",
-  required = "required"
+export interface BaseUserEvent extends BaseEvent {
+  user?: User;
 }
 
 /**
- * @author Trevor Smith
+ * @author Daniel DeGroff
  */
-export enum ChangePasswordReason {
-  Administrative = "Administrative",
-  Breached = "Breached",
-  Expired = "Expired",
-  Validation = "Validation"
+export interface MinimumPasswordAge extends Enableable {
+  seconds?: number;
 }
 
 /**
- * @author Brett Guy
+ * Authentication key response object.
+ *
+ * @author Sanjay
  */
-export interface GenericMessengerConfiguration extends BaseMessengerConfiguration {
-  connectTimeout?: number;
-  headers?: HTTPHeaders;
-  httpAuthenticationPassword?: string;
-  httpAuthenticationUsername?: string;
-  readTimeout?: number;
-  sslCertificate?: string;
-  url?: string;
+export interface APIKeyResponse {
+  apiKey?: APIKey;
 }
 
 /**
- * SonyPSN gaming login provider.
+ * Used to indicate what type of attestation was included in the authenticator response for a given WebAuthn credential at the time it was created
  *
- * @author Brett Pontarelli
+ * @author Spencer Witt
  */
-export interface SonyPSNIdentityProvider extends BaseIdentityProvider<SonyPSNApplicationConfiguration> {
-  buttonText?: string;
-  client_id?: string;
-  client_secret?: string;
-  scope?: string;
+export enum AttestationType {
+  basic = "basic",
+  self = "self",
+  attestationCa = "attestationCa",
+  anonymizationCa = "anonymizationCa",
+  none = "none"
 }
 
 /**
- * @author Brett Guy
+ * Models the Group Update Event.
+ *
+ * @author Daniel DeGroff
  */
-export interface IPAccessControlEntry {
-  action?: IPAccessControlEntryAction;
-  endIPAddress?: string;
-  startIPAddress?: string;
+export interface GroupUpdateEvent extends BaseGroupEvent {
+  original?: Group;
 }
 
 /**
+ * Models an entity that a user can be granted permissions to. Or an entity that can be granted permissions to another entity.
+ *
  * @author Brian Pontarelli
  */
-export interface Count {
-  count?: number;
-  interval?: number;
-}
-
-/**
- * Models an LDAP connector.
- *
- * @author Trevor Smith
- */
-export interface LDAPConnectorConfiguration extends BaseConnectorConfiguration {
-  authenticationURL?: string;
-  baseStructure?: string;
-  connectTimeout?: number;
-  identifyingAttribute?: string;
-  lambdaConfiguration?: LambdaConfiguration;
-  loginIdAttribute?: string;
-  readTimeout?: number;
-  requestedAttributes?: Array<string>;
-  securityMethod?: LDAPSecurityMethod;
-  systemAccountDN?: string;
-  systemAccountPassword?: string;
-}
-
-export enum LDAPSecurityMethod {
-  None = "None",
-  LDAPS = "LDAPS",
-  StartTLS = "StartTLS"
+export interface Entity {
+  clientId?: string;
+  clientSecret?: string;
+  data?: Record<string, any>;
+  id?: UUID;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  name?: string;
+  parentId?: UUID;
+  tenantId?: UUID;
+  type?: EntityType;
 }
 
-export interface LambdaConfiguration {
-  reconcileId?: UUID;
+export enum KeyType {
+  EC = "EC",
+  RSA = "RSA",
+  HMAC = "HMAC"
 }
 
 /**
- * @author Johnathon Wood
+ * @author Brian Pontarelli
  */
-export enum Oauth2AuthorizedURLValidationPolicy {
-  AllowWildcards = "AllowWildcards",
-  ExactMatch = "ExactMatch"
+export interface EventLogSearchRequest {
+  search?: EventLogSearchCriteria;
 }
 
 /**
+ * The types of connectors. This enum is stored as an ordinal on the <code>identities</code> table, order must be maintained.
+ *
  * @author Trevor Smith
  */
-export interface CORSConfiguration extends Enableable {
-  allowCredentials?: boolean;
-  allowedHeaders?: Array<string>;
-  allowedMethods?: Array<HTTPMethod>;
-  allowedOrigins?: Array<string>;
-  debug?: boolean;
-  exposedHeaders?: Array<string>;
-  preflightMaxAgeInSeconds?: number;
+export enum ConnectorType {
+  FusionAuth = "FusionAuth",
+  Generic = "Generic",
+  LDAP = "LDAP"
 }
 
 /**
- * Describes the <a href="https://www.w3.org/TR/webauthn-2/#authenticator-attachment-modality">authenticator attachment modality</a>.
+ * Import request.
  *
- * @author Spencer Witt
+ * @author Brian Pontarelli
  */
-export enum AuthenticatorAttachment {
-  platform = "platform",
-  crossPlatform = "crossPlatform"
+export interface ImportRequest extends BaseEventRequest {
+  encryptionScheme?: string;
+  factor?: number;
+  users?: Array<User>;
+  validateDbConstraints?: boolean;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface AuditLogExportRequest extends BaseExportRequest {
-  criteria?: AuditLogSearchCriteria;
+export interface FormFieldValidator extends Enableable {
+  expression?: string;
 }
 
 /**
- * Supply additional information about the user account when creating a new credential
+ * Search request for entity grants.
+ *
+ * @author Brian Pontarelli
+ */
+export interface EntityGrantSearchRequest {
+  search?: EntityGrantSearchCriteria;
+}
+
+/**
+ * Webhook search response
  *
  * @author Spencer Witt
  */
-export interface PublicKeyCredentialUserEntity extends PublicKeyCredentialEntity {
-  displayName?: string;
-  id?: string;
+export interface WebhookSearchResponse {
+  total?: number;
+  webhooks?: Array<Webhook>;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface FormStep {
-  fields?: Array<UUID>;
+export interface AppleIdentityProvider extends BaseIdentityProvider<AppleApplicationConfiguration> {
+  bundleId?: string;
+  buttonText?: string;
+  keyId?: UUID;
+  scope?: string;
+  servicesId?: string;
+  teamId?: string;
 }
 
 /**
- * Search criteria for entity types.
+ * User registration information for a single application.
  *
  * @author Brian Pontarelli
  */
-export interface EntityTypeSearchCriteria extends BaseSearchCriteria {
-  name?: string;
+export interface UserRegistration {
+  applicationId?: UUID;
+  authenticationToken?: string;
+  cleanSpeakId?: UUID;
+  data?: Record<string, any>;
+  id?: UUID;
+  insertInstant?: number;
+  lastLoginInstant?: number;
+  lastUpdateInstant?: number;
+  preferredLanguages?: Array<string>;
+  roles?: Array<string>;
+  timezone?: string;
+  tokens?: Record<string, string>;
+  username?: string;
+  usernameStatus?: ContentStatus;
+  verified?: boolean;
+  verifiedInstant?: number;
 }
 
 /**
- * Search criteria for Group Members
- *
  * @author Daniel DeGroff
  */
-export interface GroupMemberSearchCriteria extends BaseSearchCriteria {
-  groupId?: UUID;
-  tenantId?: UUID;
-  userId?: UUID;
+export interface SecureIdentity {
+  breachedPasswordLastCheckedInstant?: number;
+  breachedPasswordStatus?: BreachedPasswordStatus;
+  connectorId?: UUID;
+  encryptionScheme?: string;
+  factor?: number;
+  id?: UUID;
+  lastLoginInstant?: number;
+  password?: string;
+  passwordChangeReason?: ChangePasswordReason;
+  passwordChangeRequired?: boolean;
+  passwordLastUpdateInstant?: number;
+  salt?: string;
+  uniqueUsername?: string;
+  username?: string;
+  usernameStatus?: ContentStatus;
+  verified?: boolean;
+  verifiedInstant?: number;
 }
 
 /**
- * @author Brett Pontarelli
+ * @author Daniel DeGroff
  */
-export enum IdentityProviderLoginMethod {
-  UsePopup = "UsePopup",
-  UseRedirect = "UseRedirect",
-  UseVendorJavaScript = "UseVendorJavaScript"
+export interface ApplicationExternalIdentifierConfiguration {
+  twoFactorTrustIdTimeToLiveInSeconds?: number;
 }
 
 /**
- * Search criteria for themes
+ * Entity Type API response object.
  *
- * @author Mark Manes
+ * @author Brian Pontarelli
  */
-export interface ThemeSearchCriteria extends BaseSearchCriteria {
-  name?: string;
-  type?: ThemeType;
+export interface EntityTypeResponse {
+  entityType?: EntityType;
+  entityTypes?: Array<EntityType>;
+  permission?: EntityTypePermission;
 }
 
-/**
- * @author Daniel DeGroff
- */
-export interface MinimumPasswordAge extends Enableable {
-  seconds?: number;
+export interface LoginRecordConfiguration {
+  delete?: DeleteConfiguration;
 }
 
 /**
- * Login Ping API request object.
- *
  * @author Daniel DeGroff
  */
-export interface LoginPingRequest extends BaseLoginRequest {
-  userId?: UUID;
+export interface VerifyEmailResponse {
+  oneTimeCode?: string;
+  verificationId?: string;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface OpenIdConnectApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
-  buttonImageURL?: string;
-  buttonText?: string;
-  oauth2?: IdentityProviderOauth2Configuration;
+export interface EventConfiguration {
+  events?: Record<EventType, EventConfigurationData>;
 }
 
 /**
+ * Models an event where a user is being updated and tries to use an "in-use" login Id (email or username).
+ *
  * @author Daniel DeGroff
  */
-export interface IdentityProviderTenantConfiguration {
-  data?: Record<string, any>;
-  limitUserLinkCount?: IdentityProviderLimitUserLinkingPolicy;
+export interface UserLoginIdDuplicateOnUpdateEvent extends UserLoginIdDuplicateOnCreateEvent {
 }
 
 /**
- * API request for User consent types.
+ * Models the Group Member Remove Complete Event.
  *
  * @author Daniel DeGroff
  */
-export interface ConsentRequest {
-  consent?: Consent;
+export interface GroupMemberRemoveCompleteEvent extends BaseGroupEvent {
+  members?: Array<GroupMember>;
+}
+
+export interface EventLogConfiguration {
+  numberToRetain?: number;
 }
 
 /**
- * Supply information on credential type and algorithm to the <i>authenticator</i>.
- *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export interface PublicKeyCredentialParameters {
-  alg?: CoseAlgorithmIdentifier;
-  type?: PublicKeyCredentialType;
+export interface IdentityProviderResponse {
+  identityProvider?: BaseIdentityProvider<any>;
+  identityProviders?: Array<BaseIdentityProvider<any>>;
 }
 
 /**
- * Models a set of localized Strings that can be stored as JSON.
+ * Search request for webhooks
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export interface LocalizedStrings extends Record<string, string> {
+export interface WebhookSearchRequest {
+  search?: WebhookSearchCriteria;
 }
 
 /**
+ * Models the Group Member Add Complete Event.
+ *
  * @author Daniel DeGroff
  */
-export enum RefreshTokenUsagePolicy {
-  Reusable = "Reusable",
-  OneTimeUse = "OneTimeUse"
+export interface GroupMemberAddCompleteEvent extends BaseGroupEvent {
+  members?: Array<GroupMember>;
 }
 
 /**
- * @author Lyle Schemmerling
+ * @author Daniel DeGroff
  */
-export enum SAMLv2DestinationAssertionPolicy {
-  Enabled = "Enabled",
+export enum MultiFactorLoginPolicy {
   Disabled = "Disabled",
-  AllowAlternates = "AllowAlternates"
+  Enabled = "Enabled",
+  Required = "Required"
 }
 
 /**
- * Interface describing the need for CORS configuration.
- *
  * @author Daniel DeGroff
  */
-export interface RequiresCORSConfiguration {
+export interface PasswordlessStartRequest {
+  applicationId?: UUID;
+  loginId?: string;
+  state?: Record<string, any>;
 }
 
 /**
- * Change password request object.
- *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface ChangePasswordRequest extends BaseEventRequest {
-  applicationId?: UUID;
-  changePasswordId?: string;
-  currentPassword?: string;
-  loginId?: string;
-  password?: string;
-  refreshToken?: string;
-  trustChallenge?: string;
-  trustToken?: string;
+export interface ExternalIdentifierConfiguration {
+  authorizationGrantIdTimeToLiveInSeconds?: number;
+  changePasswordIdGenerator?: SecureGeneratorConfiguration;
+  changePasswordIdTimeToLiveInSeconds?: number;
+  deviceCodeTimeToLiveInSeconds?: number;
+  deviceUserCodeIdGenerator?: SecureGeneratorConfiguration;
+  emailVerificationIdGenerator?: SecureGeneratorConfiguration;
+  emailVerificationIdTimeToLiveInSeconds?: number;
+  emailVerificationOneTimeCodeGenerator?: SecureGeneratorConfiguration;
+  externalAuthenticationIdTimeToLiveInSeconds?: number;
+  loginIntentTimeToLiveInSeconds?: number;
+  oneTimePasswordTimeToLiveInSeconds?: number;
+  passwordlessLoginGenerator?: SecureGeneratorConfiguration;
+  passwordlessLoginTimeToLiveInSeconds?: number;
+  pendingAccountLinkTimeToLiveInSeconds?: number;
+  registrationVerificationIdGenerator?: SecureGeneratorConfiguration;
+  registrationVerificationIdTimeToLiveInSeconds?: number;
+  registrationVerificationOneTimeCodeGenerator?: SecureGeneratorConfiguration;
+  rememberOAuthScopeConsentChoiceTimeToLiveInSeconds?: number;
+  samlv2AuthNRequestIdTimeToLiveInSeconds?: number;
+  setupPasswordIdGenerator?: SecureGeneratorConfiguration;
+  setupPasswordIdTimeToLiveInSeconds?: number;
+  trustTokenTimeToLiveInSeconds?: number;
+  twoFactorIdTimeToLiveInSeconds?: number;
+  twoFactorOneTimeCodeIdGenerator?: SecureGeneratorConfiguration;
+  twoFactorOneTimeCodeIdTimeToLiveInSeconds?: number;
+  twoFactorTrustIdTimeToLiveInSeconds?: number;
+  webAuthnAuthenticationChallengeTimeToLiveInSeconds?: number;
+  webAuthnRegistrationChallengeTimeToLiveInSeconds?: number;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface IdentityProviderStartLoginRequest extends BaseLoginRequest {
-  data?: Record<string, string>;
-  identityProviderId?: UUID;
-  loginId?: string;
-  state?: Record<string, any>;
+export interface LoginRecordExportRequest extends BaseExportRequest {
+  criteria?: LoginRecordSearchCriteria;
 }
 
 /**
- * @author Daniel DeGroff
+ * Describes the <a href="https://www.w3.org/TR/webauthn-2/#authenticator-attachment-modality">authenticator attachment modality</a>.
+ *
+ * @author Spencer Witt
  */
-export interface OAuthError {
-  change_password_id?: string;
-  error?: OAuthErrorType;
-  error_description?: string;
-  error_reason?: OAuthErrorReason;
-  error_uri?: string;
-  two_factor_id?: string;
-  two_factor_methods?: Array<TwoFactorMethod>;
+export enum AuthenticatorAttachment {
+  platform = "platform",
+  crossPlatform = "crossPlatform"
 }
 
-export enum OAuthErrorReason {
-  auth_code_not_found = "auth_code_not_found",
-  access_token_malformed = "access_token_malformed",
-  access_token_expired = "access_token_expired",
-  access_token_unavailable_for_processing = "access_token_unavailable_for_processing",
-  access_token_failed_processing = "access_token_failed_processing",
-  access_token_invalid = "access_token_invalid",
-  access_token_required = "access_token_required",
-  refresh_token_not_found = "refresh_token_not_found",
-  refresh_token_type_not_supported = "refresh_token_type_not_supported",
-  invalid_client_id = "invalid_client_id",
-  invalid_user_credentials = "invalid_user_credentials",
-  invalid_grant_type = "invalid_grant_type",
-  invalid_origin = "invalid_origin",
-  invalid_origin_opaque = "invalid_origin_opaque",
-  invalid_pkce_code_verifier = "invalid_pkce_code_verifier",
-  invalid_pkce_code_challenge = "invalid_pkce_code_challenge",
-  invalid_pkce_code_challenge_method = "invalid_pkce_code_challenge_method",
-  invalid_redirect_uri = "invalid_redirect_uri",
-  invalid_response_mode = "invalid_response_mode",
-  invalid_response_type = "invalid_response_type",
-  invalid_id_token_hint = "invalid_id_token_hint",
-  invalid_post_logout_redirect_uri = "invalid_post_logout_redirect_uri",
-  invalid_device_code = "invalid_device_code",
-  invalid_user_code = "invalid_user_code",
-  invalid_additional_client_id = "invalid_additional_client_id",
-  invalid_target_entity_scope = "invalid_target_entity_scope",
-  invalid_entity_permission_scope = "invalid_entity_permission_scope",
-  invalid_user_id = "invalid_user_id",
-  grant_type_disabled = "grant_type_disabled",
-  missing_client_id = "missing_client_id",
-  missing_client_secret = "missing_client_secret",
-  missing_code = "missing_code",
-  missing_code_challenge = "missing_code_challenge",
-  missing_code_verifier = "missing_code_verifier",
-  missing_device_code = "missing_device_code",
-  missing_grant_type = "missing_grant_type",
-  missing_redirect_uri = "missing_redirect_uri",
-  missing_refresh_token = "missing_refresh_token",
-  missing_response_type = "missing_response_type",
-  missing_token = "missing_token",
-  missing_user_code = "missing_user_code",
-  missing_user_id = "missing_user_id",
-  missing_verification_uri = "missing_verification_uri",
-  login_prevented = "login_prevented",
-  not_licensed = "not_licensed",
-  user_code_expired = "user_code_expired",
-  user_expired = "user_expired",
-  user_locked = "user_locked",
-  user_not_found = "user_not_found",
-  client_authentication_missing = "client_authentication_missing",
-  invalid_client_authentication_scheme = "invalid_client_authentication_scheme",
-  invalid_client_authentication = "invalid_client_authentication",
-  client_id_mismatch = "client_id_mismatch",
-  change_password_administrative = "change_password_administrative",
-  change_password_breached = "change_password_breached",
-  change_password_expired = "change_password_expired",
-  change_password_validation = "change_password_validation",
-  unknown = "unknown",
-  missing_required_scope = "missing_required_scope",
-  unknown_scope = "unknown_scope",
-  consent_canceled = "consent_canceled"
+/**
+ * Email template response.
+ *
+ * @author Brian Pontarelli
+ */
+export interface EmailTemplateResponse {
+  emailTemplate?: EmailTemplate;
+  emailTemplates?: Array<EmailTemplate>;
 }
 
-export enum OAuthErrorType {
-  invalid_request = "invalid_request",
-  invalid_client = "invalid_client",
-  invalid_grant = "invalid_grant",
-  invalid_token = "invalid_token",
-  unauthorized_client = "unauthorized_client",
-  invalid_scope = "invalid_scope",
-  server_error = "server_error",
-  unsupported_grant_type = "unsupported_grant_type",
-  unsupported_response_type = "unsupported_response_type",
-  access_denied = "access_denied",
-  change_password_required = "change_password_required",
-  not_licensed = "not_licensed",
-  two_factor_required = "two_factor_required",
-  authorization_pending = "authorization_pending",
-  expired_token = "expired_token",
-  unsupported_token_type = "unsupported_token_type"
+export interface TenantOAuth2Configuration {
+  clientCredentialsAccessTokenPopulateLambdaId?: UUID;
 }
 
 /**
- * Interface for all identity providers that can be domain based.
+ * Request to register a new public key with WebAuthn
+ *
+ * @author Spencer Witt
  */
-export interface DomainBasedIdentityProvider {
+export interface WebAuthnPublicKeyRegistrationRequest {
+  clientExtensionResults?: WebAuthnExtensionsClientOutputs;
+  id?: string;
+  response?: WebAuthnAuthenticatorRegistrationResponse;
+  rpId?: string;
+  transports?: Array<string>;
+  type?: string;
+}
+
+/**
+ * User API response object.
+ *
+ * @author Brian Pontarelli
+ */
+export interface UserResponse {
+  emailVerificationId?: string;
+  emailVerificationOneTimeCode?: string;
+  registrationVerificationIds?: Record<UUID, string>;
+  registrationVerificationOneTimeCodes?: Record<UUID, string>;
+  token?: string;
+  tokenExpirationInstant?: number;
+  user?: User;
 }
 
 /**
@@ -8673,351 +8745,374 @@ export interface DeviceInfo {
   type?: string;
 }
 
-export enum DeviceType {
-  BROWSER = "BROWSER",
-  DESKTOP = "DESKTOP",
-  LAPTOP = "LAPTOP",
-  MOBILE = "MOBILE",
-  OTHER = "OTHER",
-  SERVER = "SERVER",
-  TABLET = "TABLET",
-  TV = "TV",
-  UNKNOWN = "UNKNOWN"
+/**
+ * @author Michael Sleevi
+ */
+export interface SMSMessageTemplate extends MessageTemplate {
+  defaultTemplate?: string;
+  localizedTemplates?: LocalizedStrings;
 }
 
 /**
- * Response for the system configuration API.
+ * User Action Reason API response object.
  *
  * @author Brian Pontarelli
  */
-export interface SystemConfigurationResponse {
-  systemConfiguration?: SystemConfiguration;
+export interface UserActionReasonResponse {
+  userActionReason?: UserActionReason;
+  userActionReasons?: Array<UserActionReason>;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface ReactorStatus {
-  advancedIdentityProviders?: ReactorFeatureStatus;
-  advancedLambdas?: ReactorFeatureStatus;
-  advancedMultiFactorAuthentication?: ReactorFeatureStatus;
-  advancedOAuthScopes?: ReactorFeatureStatus;
-  advancedOAuthScopesCustomScopes?: ReactorFeatureStatus;
-  advancedOAuthScopesThirdPartyApplications?: ReactorFeatureStatus;
-  advancedRegistration?: ReactorFeatureStatus;
-  applicationMultiFactorAuthentication?: ReactorFeatureStatus;
-  applicationThemes?: ReactorFeatureStatus;
-  breachedPasswordDetection?: ReactorFeatureStatus;
-  connectors?: ReactorFeatureStatus;
-  entityManagement?: ReactorFeatureStatus;
-  expiration?: string;
-  licenseAttributes?: Record<string, string>;
-  licensed?: boolean;
-  scimServer?: ReactorFeatureStatus;
-  threatDetection?: ReactorFeatureStatus;
-  webAuthn?: ReactorFeatureStatus;
-  webAuthnPlatformAuthenticators?: ReactorFeatureStatus;
-  webAuthnRoamingAuthenticators?: ReactorFeatureStatus;
+export interface UserTwoFactorConfiguration {
+  methods?: Array<TwoFactorMethod>;
+  recoveryCodes?: Array<string>;
 }
 
 /**
- * API response for completing WebAuthn assertion
- *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export interface WebAuthnAssertResponse {
-  credential?: WebAuthnCredential;
+export interface PendingIdPLink {
+  displayName?: string;
+  email?: string;
+  identityProviderId?: UUID;
+  identityProviderLinks?: Array<IdentityProviderLink>;
+  identityProviderName?: string;
+  identityProviderTenantConfiguration?: IdentityProviderTenantConfiguration;
+  identityProviderType?: IdentityProviderType;
+  identityProviderUserId?: string;
+  user?: User;
+  username?: string;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export enum ApplicationMultiFactorTrustPolicy {
-  Any = "Any",
-  This = "This",
-  None = "None"
+export interface JWKSResponse {
+  keys?: Array<JSONWebKey>;
 }
 
 /**
+ * The Integration Response
+ *
  * @author Daniel DeGroff
  */
-export interface MaximumPasswordAge extends Enableable {
-  days?: number;
+export interface IntegrationResponse {
+  integrations?: Integrations;
 }
 
 /**
- * Information about a user event (login, register, etc) that helps identify the source of the event (location, device type, OS, etc).
+ * API response for starting a WebAuthn registration ceremony
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export interface EventInfo {
-  data?: Record<string, any>;
-  deviceDescription?: string;
-  deviceName?: string;
-  deviceType?: string;
-  ipAddress?: string;
-  location?: Location;
-  os?: string;
-  userAgent?: string;
+export interface WebAuthnRegisterStartResponse {
+  options?: PublicKeyCredentialCreationOptions;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Brett Pontarelli
  */
-export enum RateLimitedRequestType {
-  FailedLogin = "FailedLogin",
-  ForgotPassword = "ForgotPassword",
-  SendEmailVerification = "SendEmailVerification",
-  SendPasswordless = "SendPasswordless",
-  SendRegistrationVerification = "SendRegistrationVerification",
-  SendTwoFactor = "SendTwoFactor"
+export interface TenantCaptchaConfiguration extends Enableable {
+  captchaMethod?: CaptchaMethod;
+  secretKey?: string;
+  siteKey?: string;
+  threshold?: number;
 }
 
 /**
- * Audit log response.
+ * The Application API response.
  *
  * @author Brian Pontarelli
  */
-export interface AuditLogSearchResponse {
-  auditLogs?: Array<AuditLog>;
-  total?: number;
+export interface ApplicationResponse {
+  application?: Application;
+  applications?: Array<Application>;
+  role?: ApplicationRole;
 }
 
 /**
- * @author Daniel DeGroff
+ * COSE Elliptic Curve identifier to determine which elliptic curve to use with a given key
+ *
+ * @author Spencer Witt
  */
-export enum LambdaEngineType {
-  GraalJS = "GraalJS",
-  Nashorn = "Nashorn"
+export enum CoseEllipticCurve {
+  Reserved = "Reserved",
+  P256 = "P256",
+  P384 = "P384",
+  P521 = "P521",
+  X25519 = "X25519",
+  X448 = "X448",
+  Ed25519 = "Ed25519",
+  Ed448 = "Ed448",
+  Secp256k1 = "Secp256k1"
+}
+
+export enum LoginIdType {
+  email = "email",
+  username = "username"
 }
 
 /**
- * SAML v2 identity provider configuration.
- *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface SAMLv2IdentityProvider extends BaseSAMLv2IdentityProvider<SAMLv2ApplicationConfiguration> {
-  assertionConfiguration?: SAMLv2AssertionConfiguration;
+export interface OpenIdConnectIdentityProvider extends BaseIdentityProvider<OpenIdConnectApplicationConfiguration> {
   buttonImageURL?: string;
   buttonText?: string;
   domains?: Array<string>;
-  idpEndpoint?: string;
-  idpInitiatedConfiguration?: SAMLv2IdpInitiatedConfiguration;
-  issuer?: string;
-  loginHintConfiguration?: LoginHintConfiguration;
-  nameIdFormat?: string;
+  oauth2?: IdentityProviderOauth2Configuration;
   postRequest?: boolean;
-  requestSigningKeyId?: UUID;
-  signRequest?: boolean;
-  xmlSignatureC14nMethod?: CanonicalizationMethod;
 }
 
-/**
- * API response for starting a WebAuthn authentication ceremony
- *
- * @author Spencer Witt
- */
-export interface WebAuthnStartResponse {
-  options?: PublicKeyCredentialRequestOptions;
+export interface UIConfiguration {
+  headerColor?: string;
+  logoURL?: string;
+  menuFontColor?: string;
 }
 
 /**
- * Search request for entity types.
+ * Webhook event log response.
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export interface EntityTypeSearchRequest {
-  search?: EntityTypeSearchCriteria;
-}
-
-// Do not require a setter for 'type', it is defined by the concrete class and is not mutable
-export interface BaseConnectorConfiguration {
-  data?: Record<string, any>;
-  debug?: boolean;
-  id?: UUID;
-  insertInstant?: number;
-  lastUpdateInstant?: number;
-  name?: string;
-  type?: ConnectorType;
+export interface WebhookEventLogResponse {
+  webhookEventLog?: WebhookEventLog;
 }
 
 /**
- * API request for managing families and members.
+ * The public Status API response
  *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface FamilyRequest {
-  familyMember?: FamilyMember;
+export interface StatusResponse extends Record<string, any> {
 }
 
-/**
- * @author Daniel DeGroff
- */
-export interface ReloadRequest {
-  names?: Array<string>;
+export enum RegistrationType {
+  basic = "basic",
+  advanced = "advanced"
 }
 
 /**
- * @author Brett Guy
+ * @author Brett Pontarelli
  */
-export interface TwoFactorStartRequest {
-  applicationId?: UUID;
-  code?: string;
-  loginId?: string;
-  state?: Record<string, any>;
-  trustChallenge?: string;
-  userId?: UUID;
+export interface XboxApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+  buttonText?: string;
+  client_id?: string;
+  client_secret?: string;
+  scope?: string;
 }
 
 /**
+ * Search criteria for Groups
+ *
  * @author Daniel DeGroff
  */
-export interface ApplicationMultiFactorConfiguration {
-  email?: MultiFactorEmailTemplate;
-  loginPolicy?: MultiFactorLoginPolicy;
-  sms?: MultiFactorSMSTemplate;
-  trustPolicy?: ApplicationMultiFactorTrustPolicy;
+export interface GroupSearchCriteria extends BaseSearchCriteria {
+  name?: string;
+  tenantId?: UUID;
 }
 
-export interface MultiFactorEmailTemplate {
+export interface MultiFactorSMSMethod extends Enableable {
+  messengerId?: UUID;
   templateId?: UUID;
 }
 
-export interface MultiFactorSMSTemplate {
-  templateId?: UUID;
+/**
+ * @author Brett Guy
+ */
+export interface MessengerResponse {
+  messenger?: BaseMessengerConfiguration;
+  messengers?: Array<BaseMessengerConfiguration>;
 }
 
 /**
+ * Models the User Login Failed Event.
+ *
  * @author Daniel DeGroff
  */
-export interface IssueResponse {
-  refreshToken?: string;
-  token?: string;
+export interface UserLoginFailedEvent extends BaseUserEvent {
+  applicationId?: UUID;
+  authenticationType?: string;
+  ipAddress?: string;
+  reason?: UserLoginFailedReason;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface IdentityProviderLinkResponse {
-  identityProviderLink?: IdentityProviderLink;
-  identityProviderLinks?: Array<IdentityProviderLink>;
+export interface Tenant {
+  accessControlConfiguration?: TenantAccessControlConfiguration;
+  captchaConfiguration?: TenantCaptchaConfiguration;
+  configured?: boolean;
+  connectorPolicies?: Array<ConnectorPolicy>;
+  data?: Record<string, any>;
+  emailConfiguration?: EmailConfiguration;
+  eventConfiguration?: EventConfiguration;
+  externalIdentifierConfiguration?: ExternalIdentifierConfiguration;
+  failedAuthenticationConfiguration?: FailedAuthenticationConfiguration;
+  familyConfiguration?: FamilyConfiguration;
+  formConfiguration?: TenantFormConfiguration;
+  httpSessionMaxInactiveInterval?: number;
+  id?: UUID;
+  insertInstant?: number;
+  issuer?: string;
+  jwtConfiguration?: JWTConfiguration;
+  lambdaConfiguration?: TenantLambdaConfiguration;
+  lastUpdateInstant?: number;
+  loginConfiguration?: TenantLoginConfiguration;
+  logoutURL?: string;
+  maximumPasswordAge?: MaximumPasswordAge;
+  minimumPasswordAge?: MinimumPasswordAge;
+  multiFactorConfiguration?: TenantMultiFactorConfiguration;
+  name?: string;
+  oauthConfiguration?: TenantOAuth2Configuration;
+  passwordEncryptionConfiguration?: PasswordEncryptionConfiguration;
+  passwordValidationRules?: PasswordValidationRules;
+  rateLimitConfiguration?: TenantRateLimitConfiguration;
+  registrationConfiguration?: TenantRegistrationConfiguration;
+  scimServerConfiguration?: TenantSCIMServerConfiguration;
+  ssoConfiguration?: TenantSSOConfiguration;
+  state?: ObjectState;
+  themeId?: UUID;
+  userDeletePolicy?: TenantUserDeletePolicy;
+  usernameConfiguration?: TenantUsernameConfiguration;
+  webAuthnConfiguration?: TenantWebAuthnConfiguration;
 }
 
 /**
- * Request to authenticate with WebAuthn
+ * Models the Group Member Update Complete Event.
  *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export interface WebAuthnPublicKeyAuthenticationRequest {
-  clientExtensionResults?: WebAuthnExtensionsClientOutputs;
-  id?: string;
-  response?: WebAuthnAuthenticatorAuthenticationResponse;
-  rpId?: string;
-  type?: string;
+export interface GroupMemberUpdateCompleteEvent extends BaseGroupEvent {
+  members?: Array<GroupMember>;
 }
 
-/**
- * Entity API request object.
- *
- * @author Brian Pontarelli
- */
-export interface EntityRequest {
-  entity?: Entity;
+// Do not require a setter for 'type', it is defined by the concrete class and is not mutable
+export interface BaseMessengerConfiguration {
+  data?: Record<string, any>;
+  debug?: boolean;
+  id?: UUID;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  name?: string;
+  transport?: string;
+  type?: MessengerType;
 }
 
 /**
- * Models the Group Update Event.
- *
  * @author Daniel DeGroff
  */
-export interface GroupUpdateEvent extends BaseGroupEvent {
-  original?: Group;
+export interface TwoFactorStartResponse {
+  code?: string;
+  methods?: Array<TwoFactorMethod>;
+  twoFactorId?: string;
+}
+
+export interface PasswordlessConfiguration extends Enableable {
 }
 
 /**
- * CleanSpeak configuration at the system and application level.
+ * Search request for entity grants.
  *
  * @author Brian Pontarelli
  */
-export interface CleanSpeakConfiguration extends Enableable {
-  apiKey?: string;
-  applicationIds?: Array<UUID>;
-  url?: string;
-  usernameModeration?: UsernameModeration;
-}
-
-export interface UsernameModeration extends Enableable {
-  applicationId?: UUID;
+export interface EntityGrantSearchResponse {
+  grants?: Array<EntityGrant>;
+  total?: number;
 }
 
 /**
- * Stores an email template used to send emails to users.
- *
- * @author Brian Pontarelli
+ * @author Trevor Smith
  */
-export interface EmailTemplate {
-  defaultFromName?: string;
-  defaultHtmlTemplate?: string;
-  defaultSubject?: string;
-  defaultTextTemplate?: string;
-  fromEmail?: string;
+export interface Theme {
+  data?: Record<string, any>;
+  defaultMessages?: string;
   id?: UUID;
   insertInstant?: number;
   lastUpdateInstant?: number;
-  localizedFromNames?: LocalizedStrings;
-  localizedHtmlTemplates?: LocalizedStrings;
-  localizedSubjects?: LocalizedStrings;
-  localizedTextTemplates?: LocalizedStrings;
+  localizedMessages?: LocalizedStrings;
   name?: string;
+  stylesheet?: string;
+  templates?: Templates;
+  type?: ThemeType;
+  variables?: SimpleThemeVariables;
 }
 
 /**
- * API response for managing families and members.
+ * @author Daniel DeGroff
+ */
+export enum RefreshTokenExpirationPolicy {
+  Fixed = "Fixed",
+  SlidingWindow = "SlidingWindow",
+  SlidingWindowWithMaximumLifetime = "SlidingWindowWithMaximumLifetime"
+}
+
+/**
+ * Login API request object used for login to third-party systems (i.e. Login with Facebook).
  *
  * @author Brian Pontarelli
  */
-export interface FamilyResponse {
-  families?: Array<Family>;
-  family?: Family;
+export interface IdentityProviderLoginRequest extends BaseLoginRequest {
+  data?: Record<string, string>;
+  encodedJWT?: string;
+  identityProviderId?: UUID;
+  noLink?: boolean;
 }
 
 /**
- * Search response for Group Members
+ * Group API response object.
  *
  * @author Daniel DeGroff
  */
-export interface GroupMemberSearchResponse {
-  members?: Array<GroupMember>;
-  total?: number;
+export interface GroupResponse {
+  group?: Group;
+  groups?: Array<Group>;
 }
 
 /**
+ * A policy to configure if and when the user-action is canceled prior to the expiration of the action.
+ *
  * @author Daniel DeGroff
  */
-export interface BreachedPasswordTenantMetric {
-  actionRequired?: number;
-  matchedCommonPasswordCount?: number;
-  matchedExactCount?: number;
-  matchedPasswordCount?: number;
-  matchedSubAddressCount?: number;
-  passwordsCheckedCount?: number;
+export interface FailedAuthenticationActionCancelPolicy {
+  onPasswordReset?: boolean;
 }
 
 /**
- * JWT Configuration. A JWT Configuration for an Application may not be active if it is using the global configuration, the configuration
- * may be <code>enabled = false</code>.
+ * @author Daniel DeGroff
+ */
+export enum UnverifiedBehavior {
+  Allow = "Allow",
+  Gated = "Gated"
+}
+
+/**
+ * Models a consent.
  *
  * @author Daniel DeGroff
  */
-export interface JWTConfiguration extends Enableable {
-  accessTokenKeyId?: UUID;
-  idTokenKeyId?: UUID;
-  refreshTokenExpirationPolicy?: RefreshTokenExpirationPolicy;
-  refreshTokenRevocationPolicy?: RefreshTokenRevocationPolicy;
-  refreshTokenSlidingWindowConfiguration?: RefreshTokenSlidingWindowConfiguration;
-  refreshTokenTimeToLiveInMinutes?: number;
-  refreshTokenUsagePolicy?: RefreshTokenUsagePolicy;
-  timeToLiveInSeconds?: number;
+export interface Consent {
+  consentEmailTemplateId?: UUID;
+  countryMinimumAgeForSelfConsent?: LocalizedIntegers;
+  data?: Record<string, any>;
+  defaultMinimumAgeForSelfConsent?: number;
+  emailPlus?: EmailPlus;
+  id?: UUID;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  multipleValuesAllowed?: boolean;
+  name?: string;
+  values?: Array<string>;
+}
+
+/**
+ * @author Brett Guy
+ */
+export interface IPAccessControlListRequest {
+  ipAccessControlList?: IPAccessControlList;
 }
 
 /**
@@ -9029,3221 +9124,3126 @@ export interface SAMLv2ApplicationConfiguration extends BaseIdentityProviderAppl
 }
 
 /**
- * @author Brett Guy
+ * @author Brian Pontarelli
  */
-export interface MessengerRequest {
-  messenger?: BaseMessengerConfiguration;
+export interface AuditLogSearchRequest {
+  search?: AuditLogSearchCriteria;
 }
 
 /**
- * A log for an action that was taken on a User.
+ * Models the User Password Breach Event.
  *
- * @author Brian Pontarelli
+ * @author Matthew Altman
  */
-export interface UserActionLog {
-  actioneeUserId?: UUID;
-  actionerUserId?: UUID;
-  applicationIds?: Array<UUID>;
-  comment?: string;
-  emailUserOnEnd?: boolean;
-  endEventSent?: boolean;
-  expiry?: number;
-  history?: LogHistory;
-  id?: UUID;
-  insertInstant?: number;
-  localizedName?: string;
-  localizedOption?: string;
-  localizedReason?: string;
-  name?: string;
-  notifyUserOnEnd?: boolean;
-  option?: string;
-  reason?: string;
-  reasonCode?: string;
-  userActionId?: UUID;
+export interface UserPasswordBreachEvent extends BaseUserEvent {
 }
 
 /**
- * Contains extension output for requested extensions during a WebAuthn ceremony
- *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export interface WebAuthnExtensionsClientOutputs {
-  credProps?: CredentialPropertiesOutput;
+export interface ReactorMetrics {
+  breachedPasswordMetrics?: Record<UUID, BreachedPasswordTenantMetric>;
 }
 
 /**
- * Describes a user account or WebAuthn Relying Party associated with a public key credential
+ * @author Daniel DeGroff
  */
-export interface PublicKeyCredentialEntity {
-  name?: string;
+export interface SendRequest {
+  applicationId?: UUID;
+  bccAddresses?: Array<string>;
+  ccAddresses?: Array<string>;
+  preferredLanguages?: Array<string>;
+  requestData?: Record<string, any>;
+  toAddresses?: Array<EmailAddress>;
+  userIds?: Array<UUID>;
+}
+
+export interface AuditLogConfiguration {
+  delete?: DeleteConfiguration;
 }
 
 /**
- * Registration delete API request object.
+ * User login failed reason codes.
+ */
+export interface UserLoginFailedReasonCode {
+}
+
+/**
+ * Models the User Event (and can be converted to JSON) that is used for all user modifications (create, update,
+ * delete).
  *
  * @author Brian Pontarelli
  */
-export interface RegistrationDeleteRequest extends BaseEventRequest {
+export interface UserDeleteEvent extends BaseUserEvent {
 }
 
 /**
- * Used to express whether the Relying Party requires <a href="https://www.w3.org/TR/webauthn-2/#user-verification">user verification</a> for the
- * current operation.
+ * A custom OAuth scope for a specific application.
  *
  * @author Spencer Witt
  */
-export enum UserVerificationRequirement {
-  required = "required",
-  preferred = "preferred",
-  discouraged = "discouraged"
+export interface ApplicationOAuthScope {
+  applicationId?: UUID;
+  data?: Record<string, any>;
+  defaultConsentDetail?: string;
+  defaultConsentMessage?: string;
+  description?: string;
+  id?: UUID;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  name?: string;
+  required?: boolean;
 }
 
 /**
- * Helper interface that indicates an identity provider can be federated to using the HTTP POST method.
+ * Registration delete API request object.
  *
  * @author Brian Pontarelli
  */
-export interface SupportsPostBindings {
+export interface RegistrationDeleteRequest extends BaseEventRequest {
 }
 
 /**
+ * The phases of a time-based user action.
+ *
  * @author Brian Pontarelli
  */
-export enum ExpiryUnit {
-  MINUTES = "MINUTES",
-  HOURS = "HOURS",
-  DAYS = "DAYS",
-  WEEKS = "WEEKS",
-  MONTHS = "MONTHS",
-  YEARS = "YEARS"
+export enum UserActionPhase {
+  start = "start",
+  modify = "modify",
+  cancel = "cancel",
+  end = "end"
 }
 
 /**
- * Search response for Themes
- *
- * @author Mark Manes
+ * @author Daniel DeGroff
  */
-export interface ThemeSearchResponse {
-  themes?: Array<Theme>;
-  total?: number;
+export interface VerifyEmailRequest extends BaseEventRequest {
+  oneTimeCode?: string;
+  userId?: UUID;
+  verificationId?: string;
 }
 
 /**
  * @author Brian Pontarelli
  */
-export interface AuditLogSearchCriteria extends BaseSearchCriteria {
-  end?: number;
-  message?: string;
-  newValue?: string;
-  oldValue?: string;
-  reason?: string;
-  start?: number;
-  user?: string;
+export interface TwoFactorDisableRequest extends BaseEventRequest {
+  applicationId?: UUID;
+  code?: string;
+  methodId?: string;
 }
 
 /**
+ * Google social login provider.
+ *
  * @author Daniel DeGroff
  */
-export interface HYPRIdentityProvider extends BaseIdentityProvider<HYPRApplicationConfiguration> {
-  relyingPartyApplicationId?: string;
-  relyingPartyURL?: string;
-}
-
-/**
- * @author Brett Guy
- */
-export enum ClientAuthenticationPolicy {
-  Required = "Required",
-  NotRequired = "NotRequired",
-  NotRequiredWhenUsingPKCE = "NotRequiredWhenUsingPKCE"
+export interface GoogleIdentityProvider extends BaseIdentityProvider<GoogleApplicationConfiguration> {
+  buttonText?: string;
+  client_id?: string;
+  client_secret?: string;
+  loginMethod?: IdentityProviderLoginMethod;
+  properties?: GoogleIdentityProviderProperties;
+  scope?: string;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface PendingIdPLink {
-  displayName?: string;
-  email?: string;
-  identityProviderId?: UUID;
-  identityProviderLinks?: Array<IdentityProviderLink>;
-  identityProviderName?: string;
-  identityProviderTenantConfiguration?: IdentityProviderTenantConfiguration;
-  identityProviderType?: IdentityProviderType;
-  identityProviderUserId?: string;
-  user?: User;
-  username?: string;
+export interface FormStep {
+  fields?: Array<UUID>;
 }
 
 /**
- * API response for starting a WebAuthn registration ceremony
+ * A Tenant-level policy for deleting Users.
  *
- * @author Spencer Witt
+ * @author Trevor Smith
  */
-export interface WebAuthnRegisterStartResponse {
-  options?: PublicKeyCredentialCreationOptions;
+export interface TenantUserDeletePolicy {
+  unverified?: TimeBasedDeletePolicy;
 }
 
 /**
- * A Application-level policy for deleting Users.
+ * @author Brett Pontarelli
+ */
+export interface SonyPSNApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+  buttonText?: string;
+  client_id?: string;
+  client_secret?: string;
+  scope?: string;
+}
+
+/**
+ * Search request for Keys
  *
- * @author Trevor Smith
+ * @author Spencer Witt
  */
-export interface ApplicationRegistrationDeletePolicy {
-  unverified?: TimeBasedDeletePolicy;
+export interface KeySearchRequest {
+  search?: KeySearchCriteria;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface IdentityProviderLimitUserLinkingPolicy extends Enableable {
-  maximumLinks?: number;
+export enum LambdaEngineType {
+  GraalJS = "GraalJS",
+  Nashorn = "Nashorn"
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface ReactorMetricsResponse {
-  metrics?: ReactorMetrics;
+export interface SystemTrustedProxyConfiguration {
+  trusted?: Array<string>;
+  trustPolicy?: SystemTrustedProxyConfigurationPolicy;
 }
 
 /**
- * Search request for IP ACLs .
+ * A log for an action that was taken on a User.
  *
- * @author Brett Guy
+ * @author Brian Pontarelli
  */
-export interface IPAccessControlListSearchRequest {
-  search?: IPAccessControlListSearchCriteria;
+export interface UserActionLog {
+  actioneeUserId?: UUID;
+  actionerUserId?: UUID;
+  applicationIds?: Array<UUID>;
+  comment?: string;
+  emailUserOnEnd?: boolean;
+  endEventSent?: boolean;
+  expiry?: number;
+  history?: LogHistory;
+  id?: UUID;
+  insertInstant?: number;
+  localizedName?: string;
+  localizedOption?: string;
+  localizedReason?: string;
+  name?: string;
+  notifyUserOnEnd?: boolean;
+  option?: string;
+  reason?: string;
+  reasonCode?: string;
+  userActionId?: UUID;
 }
 
 /**
+ * Login Ping API request object.
+ *
  * @author Daniel DeGroff
  */
-export enum FormType {
-  registration = "registration",
-  adminRegistration = "adminRegistration",
-  adminUser = "adminUser",
-  selfServiceUser = "selfServiceUser"
+export interface LoginPingRequest extends BaseLoginRequest {
+  userId?: UUID;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface TenantRequest extends BaseEventRequest {
-  sourceTenantId?: UUID;
-  tenant?: Tenant;
-  webhookIds?: Array<UUID>;
+export interface IdentityProviderLimitUserLinkingPolicy extends Enableable {
+  maximumLinks?: number;
 }
 
 /**
- * User Comment Response
- *
- * @author Seth Musselman
+ * @author Daniel DeGroff
  */
-export interface UserCommentResponse {
-  userComment?: UserComment;
-  userComments?: Array<UserComment>;
+export interface EmailUnverifiedOptions {
+  allowEmailChangeWhenGated?: boolean;
+  behavior?: UnverifiedBehavior;
 }
 
 /**
- * The reason for the login failure.
+ * Base class for requests that can contain event information. This event information is used when sending Webhooks or emails
+ * during the transaction. The caller is responsible for ensuring that the event information is correct.
  *
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface UserLoginFailedReason {
-  code?: string;
-  lambdaId?: UUID;
-  lambdaResult?: Errors;
+export interface BaseEventRequest {
+  eventInfo?: EventInfo;
 }
 
-/**
- * Config for regular SAML IDP configurations that support IdP initiated requests
- *
- * @author Lyle Schemmerling
- */
-export interface SAMLv2IdpInitiatedConfiguration extends Enableable {
-  issuer?: string;
+export enum OAuthErrorType {
+  invalid_request = "invalid_request",
+  invalid_client = "invalid_client",
+  invalid_grant = "invalid_grant",
+  invalid_token = "invalid_token",
+  unauthorized_client = "unauthorized_client",
+  invalid_scope = "invalid_scope",
+  server_error = "server_error",
+  unsupported_grant_type = "unsupported_grant_type",
+  unsupported_response_type = "unsupported_response_type",
+  access_denied = "access_denied",
+  change_password_required = "change_password_required",
+  not_licensed = "not_licensed",
+  two_factor_required = "two_factor_required",
+  authorization_pending = "authorization_pending",
+  expired_token = "expired_token",
+  unsupported_token_type = "unsupported_token_type"
 }
 
 /**
- * A Tenant-level policy for deleting Users.
+ * Search request for Tenants
  *
- * @author Trevor Smith
+ * @author Mark Manes
  */
-export interface TenantUserDeletePolicy {
-  unverified?: TimeBasedDeletePolicy;
+export interface TenantSearchRequest {
+  search?: TenantSearchCriteria;
 }
 
 /**
- * Search request for Group Members.
+ * JWT Public Key Response Object
  *
  * @author Daniel DeGroff
  */
-export interface GroupMemberSearchRequest {
-  search?: GroupMemberSearchCriteria;
+export interface PublicKeyResponse {
+  publicKey?: string;
+  publicKeys?: Record<string, string>;
 }
 
 /**
- * Group Member Response
- *
  * @author Daniel DeGroff
  */
-export interface MemberResponse {
-  members?: Record<UUID, Array<GroupMember>>;
+export enum Sort {
+  asc = "asc",
+  desc = "desc"
 }
 
 /**
- * User Action API request object.
+ * Forgot password request object.
  *
  * @author Brian Pontarelli
  */
-export interface UserActionRequest {
-  userAction?: UserAction;
+export interface ForgotPasswordRequest extends BaseEventRequest {
+  applicationId?: UUID;
+  changePasswordId?: string;
+  email?: string;
+  loginId?: string;
+  sendForgotPasswordEmail?: boolean;
+  state?: Record<string, any>;
+  username?: string;
 }
 
 /**
- * Configuration for the behavior of failed login attempts. This helps us protect against brute force password attacks.
+ * Identity Provider response.
  *
- * @author Daniel DeGroff
+ * @author Spencer Witt
  */
-export interface FailedAuthenticationConfiguration {
-  actionCancelPolicy?: FailedAuthenticationActionCancelPolicy;
-  actionDuration?: number;
-  actionDurationUnit?: ExpiryUnit;
-  emailUser?: boolean;
-  resetCountInSeconds?: number;
-  tooManyAttempts?: number;
-  userActionId?: UUID;
+export interface IdentityProviderSearchResponse {
+  identityProviders?: Array<BaseIdentityProvider<any>>;
+  total?: number;
 }
 
-/**
- * @author Daniel DeGroff
- */
-export interface ApplicationAccessControlConfiguration {
-  uiIPAccessControlListId?: UUID;
+export interface MetaData {
+  data?: Record<string, any>;
+  device?: DeviceInfo;
+  scopes?: Array<string>;
+}
+
+export interface WebhookEventLog {
+  attempts?: Array<WebhookAttemptLog>;
+  data?: Record<string, any>;
+  event?: EventRequest;
+  eventResult?: WebhookEventResult;
+  eventType?: EventType;
+  failedAttempts?: number;
+  id?: UUID;
+  insertInstant?: number;
+  lastAttemptInstant?: number;
+  lastUpdateInstant?: number;
+  linkedObjectId?: UUID;
+  sequence?: number;
+  successfulAttempts?: number;
+}
+
+export enum SAMLLogoutBehavior {
+  AllParticipants = "AllParticipants",
+  OnlyOriginator = "OnlyOriginator"
 }
 
 /**
- * XML canonicalization method enumeration. This is used for the IdP and SP side of FusionAuth SAML.
- *
  * @author Brian Pontarelli
  */
-export enum CanonicalizationMethod {
-  exclusive = "exclusive",
-  exclusive_with_comments = "exclusive_with_comments",
-  inclusive = "inclusive",
-  inclusive_with_comments = "inclusive_with_comments"
+export interface EmailConfiguration {
+  additionalHeaders?: Array<EmailHeader>;
+  debug?: boolean;
+  defaultFromEmail?: string;
+  defaultFromName?: string;
+  emailUpdateEmailTemplateId?: UUID;
+  emailVerifiedEmailTemplateId?: UUID;
+  forgotPasswordEmailTemplateId?: UUID;
+  host?: string;
+  implicitEmailVerificationAllowed?: boolean;
+  loginIdInUseOnCreateEmailTemplateId?: UUID;
+  loginIdInUseOnUpdateEmailTemplateId?: UUID;
+  loginNewDeviceEmailTemplateId?: UUID;
+  loginSuspiciousEmailTemplateId?: UUID;
+  password?: string;
+  passwordlessEmailTemplateId?: UUID;
+  passwordResetSuccessEmailTemplateId?: UUID;
+  passwordUpdateEmailTemplateId?: UUID;
+  port?: number;
+  properties?: string;
+  security?: EmailSecurityType;
+  setPasswordEmailTemplateId?: UUID;
+  twoFactorMethodAddEmailTemplateId?: UUID;
+  twoFactorMethodRemoveEmailTemplateId?: UUID;
+  unverified?: EmailUnverifiedOptions;
+  username?: string;
+  verificationEmailTemplateId?: UUID;
+  verificationStrategy?: VerificationStrategy;
+  verifyEmail?: boolean;
+  verifyEmailWhenChanged?: boolean;
 }
 
 /**
- * Request to complete the WebAuthn registration ceremony
- *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export interface WebAuthnLoginRequest extends BaseLoginRequest {
-  credential?: WebAuthnPublicKeyAuthenticationRequest;
-  origin?: string;
-  rpId?: string;
-  twoFactorTrustId?: string;
+export interface TenantLoginConfiguration {
+  requireAuthentication?: boolean;
 }
 
 /**
- * The Application API request object.
+ * The user action request object.
  *
  * @author Brian Pontarelli
  */
-export interface ApplicationRequest extends BaseEventRequest {
-  application?: Application;
-  role?: ApplicationRole;
-  sourceApplicationId?: UUID;
+export interface ActionRequest extends BaseEventRequest {
+  action?: ActionData;
+  broadcast?: boolean;
 }
 
 /**
- * Webhook API response object.
+ * The IdP behavior when no user link has been made yet.
  *
- * @author Brian Pontarelli
- */
-export interface WebhookResponse {
-  webhook?: Webhook;
-  webhooks?: Array<Webhook>;
-}
-
-/**
- * @author Seth Musselman
+ * @author Daniel DeGroff
  */
-export interface UserCommentRequest {
-  userComment?: UserComment;
+export enum IdentityProviderLinkingStrategy {
+  CreatePendingLink = "CreatePendingLink",
+  Disabled = "Disabled",
+  LinkAnonymously = "LinkAnonymously",
+  LinkByEmail = "LinkByEmail",
+  LinkByEmailForExistingUser = "LinkByEmailForExistingUser",
+  LinkByUsername = "LinkByUsername",
+  LinkByUsernameForExistingUser = "LinkByUsernameForExistingUser",
+  Unsupported = "Unsupported"
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface SystemLogsExportRequest extends BaseExportRequest {
-  includeArchived?: boolean;
-  lastNBytes?: number;
+export interface IdentityProviderRequest {
+  identityProvider?: BaseIdentityProvider<any>;
 }
 
 /**
- * @author Brett Guy
+ * @author Tyler Scott
  */
-export interface MessengerResponse {
-  messenger?: BaseMessengerConfiguration;
-  messengers?: Array<BaseMessengerConfiguration>;
+export interface Group {
+  data?: Record<string, any>;
+  id?: UUID;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  name?: string;
+  roles?: Record<UUID, Array<ApplicationRole>>;
+  tenantId?: UUID;
 }
 
 /**
- * @author Michael Sleevi
+ * @author Lyle Schemmerling
  */
-export interface PreviewMessageTemplateResponse {
-  errors?: Errors;
-  message?: SMSMessage;
+export interface SAMLv2AssertionConfiguration {
+  destination?: SAMLv2DestinationAssertionConfiguration;
 }
 
 /**
- * Search criteria for Applications
+ * Request to complete the WebAuthn registration ceremony for a new credential,.
  *
  * @author Spencer Witt
  */
-export interface ApplicationSearchCriteria extends BaseSearchCriteria {
-  name?: string;
-  state?: ObjectState;
-  tenantId?: UUID;
+export interface WebAuthnRegisterCompleteRequest {
+  credential?: WebAuthnPublicKeyRegistrationRequest;
+  origin?: string;
+  rpId?: string;
+  userId?: UUID;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface OpenIdConnectIdentityProvider extends BaseIdentityProvider<OpenIdConnectApplicationConfiguration> {
-  buttonImageURL?: string;
-  buttonText?: string;
-  domains?: Array<string>;
-  oauth2?: IdentityProviderOauth2Configuration;
-  postRequest?: boolean;
+export interface ReactorResponse {
+  status?: ReactorStatus;
 }
 
 /**
- * Models the User Registration Verified Event.
+ * A role given to a user for a specific application.
  *
- * @author Trevor Smith
+ * @author Seth Musselman
  */
-export interface UserRegistrationVerifiedEvent extends BaseUserEvent {
-  applicationId?: UUID;
-  registration?: UserRegistration;
+export interface ApplicationRole {
+  description?: string;
+  id?: UUID;
+  insertInstant?: number;
+  isDefault?: boolean;
+  isSuperRole?: boolean;
+  lastUpdateInstant?: number;
+  name?: string;
 }
 
 /**
- * A Message Template Request to the API
- *
- * @author Michael Sleevi
+ * @author Daniel DeGroff
  */
-export interface MessageTemplateRequest {
-  messageTemplate?: MessageTemplate;
+export interface VerifyRegistrationResponse {
+  oneTimeCode?: string;
+  verificationId?: string;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Trevor Smith
  */
-export interface DeviceUserCodeResponse {
-  client_id?: string;
-  deviceInfo?: DeviceInfo;
-  expires_in?: number;
-  pendingIdPLink?: PendingIdPLink;
-  scope?: string;
-  tenantId?: UUID;
-  user_code?: string;
+export interface CORSConfiguration extends Enableable {
+  allowCredentials?: boolean;
+  allowedHeaders?: Array<string>;
+  allowedMethods?: Array<HTTPMethod>;
+  allowedOrigins?: Array<string>;
+  debug?: boolean;
+  exposedHeaders?: Array<string>;
+  preflightMaxAgeInSeconds?: number;
 }
 
 /**
+ * Group Member Request
+ *
  * @author Daniel DeGroff
  */
-export interface AppleIdentityProvider extends BaseIdentityProvider<AppleApplicationConfiguration> {
-  bundleId?: string;
-  buttonText?: string;
-  keyId?: UUID;
-  scope?: string;
-  servicesId?: string;
-  teamId?: string;
+export interface MemberRequest {
+  members?: Record<UUID, Array<GroupMember>>;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface EmailHeader {
-  name?: string;
-  value?: string;
+export interface BaseSearchCriteria {
+  numberOfResults?: number;
+  orderBy?: string;
+  startRow?: number;
 }
 
 /**
- * Models the Group Member Remove Complete Event.
- *
- * @author Daniel DeGroff
+ * Interface for any object that can provide JSON Web key Information.
  */
-export interface GroupMemberRemoveCompleteEvent extends BaseGroupEvent {
-  members?: Array<GroupMember>;
+export interface JSONWebKeyInfoProvider {
 }
 
-export interface WebhookEventLog {
-  attempts?: Array<WebhookAttemptLog>;
-  data?: Record<string, any>;
-  event?: EventRequest;
-  eventResult?: WebhookEventResult;
-  eventType?: EventType;
-  failedAttempts?: number;
-  id?: UUID;
-  insertInstant?: number;
-  lastAttemptInstant?: number;
-  lastUpdateInstant?: number;
-  linkedObjectId?: UUID;
-  sequence?: number;
-  successfulAttempts?: number;
+export enum BreachAction {
+  Off = "Off",
+  RecordOnly = "RecordOnly",
+  NotifyUser = "NotifyUser",
+  RequireChange = "RequireChange"
 }
 
 /**
- * Group API request object.
+ * Event Log Type
  *
  * @author Daniel DeGroff
  */
-export interface GroupRequest {
-  group?: Group;
-  roleIds?: Array<UUID>;
-}
-
-/**
- * Search request for entity grants.
- *
- * @author Brian Pontarelli
- */
-export interface EntityGrantSearchRequest {
-  search?: EntityGrantSearchCriteria;
+export enum EventLogType {
+  Information = "Information",
+  Debug = "Debug",
+  Error = "Error"
 }
 
 /**
- * Models the User Delete Registration Event.
+ * Models the User Update Registration Event.
  *
  * @author Daniel DeGroff
  */
-export interface UserRegistrationDeleteEvent extends BaseUserEvent {
+export interface UserRegistrationUpdateEvent extends BaseUserEvent {
   applicationId?: UUID;
+  original?: UserRegistration;
   registration?: UserRegistration;
 }
 
 /**
- * Contains attributes for the Relying Party to refer to an existing public key credential as an input parameter.
+ * Entity API response object.
  *
- * @author Spencer Witt
+ * @author Brian Pontarelli
  */
-export interface PublicKeyCredentialDescriptor {
-  id?: string;
-  transports?: Array<string>;
-  type?: PublicKeyCredentialType;
+export interface EntityResponse {
+  entity?: Entity;
 }
 
 /**
- * @author Brett Guy
+ * Describes a user account or WebAuthn Relying Party associated with a public key credential
  */
-export interface TwilioMessengerConfiguration extends BaseMessengerConfiguration {
-  accountSID?: string;
-  authToken?: string;
-  fromPhoneNumber?: string;
-  messagingServiceSid?: string;
-  url?: string;
+export interface PublicKeyCredentialEntity {
+  name?: string;
 }
 
-/**
- * @author Daniel DeGroff
- */
-export interface ReactorMetrics {
-  breachedPasswordMetrics?: Record<UUID, BreachedPasswordTenantMetric>;
+export interface ApplicationEmailConfiguration {
+  emailUpdateEmailTemplateId?: UUID;
+  emailVerificationEmailTemplateId?: UUID;
+  emailVerifiedEmailTemplateId?: UUID;
+  forgotPasswordEmailTemplateId?: UUID;
+  loginIdInUseOnCreateEmailTemplateId?: UUID;
+  loginIdInUseOnUpdateEmailTemplateId?: UUID;
+  loginNewDeviceEmailTemplateId?: UUID;
+  loginSuspiciousEmailTemplateId?: UUID;
+  passwordlessEmailTemplateId?: UUID;
+  passwordResetSuccessEmailTemplateId?: UUID;
+  passwordUpdateEmailTemplateId?: UUID;
+  setPasswordEmailTemplateId?: UUID;
+  twoFactorMethodAddEmailTemplateId?: UUID;
+  twoFactorMethodRemoveEmailTemplateId?: UUID;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface ApplicationFormConfiguration {
-  adminRegistrationFormId?: UUID;
-  selfServiceFormConfiguration?: SelfServiceFormConfiguration;
-  selfServiceFormId?: UUID;
+export interface IdentityProviderStartLoginResponse {
+  code?: string;
 }
 
 /**
- * @author Brett Guy
+ * @author Brett Pontarelli
  */
-export interface IPAccessControlListSearchCriteria extends BaseSearchCriteria {
-  name?: string;
+export interface EpicGamesApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+  buttonText?: string;
+  client_id?: string;
+  client_secret?: string;
+  scope?: string;
 }
 
 /**
+ * Models the User Deleted Registration Event.
+ * <p>
+ * This is different than user.registration.delete in that it is sent after the TX has been committed. This event cannot be transactional.
+ *
  * @author Daniel DeGroff
  */
-export interface RegistrationUnverifiedOptions {
-  behavior?: UnverifiedBehavior;
+export interface UserRegistrationDeleteCompleteEvent extends BaseUserEvent {
+  applicationId?: UUID;
+  registration?: UserRegistration;
 }
 
 /**
+ * Group API request object.
+ *
  * @author Daniel DeGroff
  */
-export interface TenantResponse {
-  tenant?: Tenant;
-  tenants?: Array<Tenant>;
+export interface GroupRequest {
+  group?: Group;
+  roleIds?: Array<UUID>;
 }
 
 /**
- * Request for the Refresh Token API to revoke a refresh token rather than using the URL parameters.
+ * User Comment Response
  *
- * @author Brian Pontarelli
+ * @author Seth Musselman
  */
-export interface RefreshTokenRevokeRequest extends BaseEventRequest {
-  applicationId?: UUID;
-  token?: string;
-  userId?: UUID;
+export interface UserCommentResponse {
+  userComment?: UserComment;
+  userComments?: Array<UserComment>;
 }
 
 /**
- * Models a JWT Refresh Token.
- *
  * @author Daniel DeGroff
  */
-export interface RefreshToken {
-  applicationId?: UUID;
-  data?: Record<string, any>;
-  id?: UUID;
-  insertInstant?: number;
-  metaData?: MetaData;
-  startInstant?: number;
-  tenantId?: UUID;
-  token?: string;
-  userId?: UUID;
+export interface ValidateResponse {
+  jwt?: JWT;
 }
 
-export interface MetaData {
-  data?: Record<string, any>;
-  device?: DeviceInfo;
-  scopes?: Array<string>;
+/**
+ * @author Daniel DeGroff
+ */
+export interface GoogleApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+  buttonText?: string;
+  client_id?: string;
+  client_secret?: string;
+  loginMethod?: IdentityProviderLoginMethod;
+  properties?: GoogleIdentityProviderProperties;
+  scope?: string;
 }
 
 /**
- * A marker interface indicating this event is an event that can supply a linked object Id.
+ * Models the User Event (and can be converted to JSON) that is used for all user modifications (create, update,
+ * delete).
+ * <p>
+ * This is different than user.delete because it is sent after the tx is committed, this cannot be transactional.
+ *
+ * @author Daniel DeGroff
+ */
+export interface UserDeleteCompleteEvent extends BaseUserEvent {
+}
+
+/**
+ * Supply additional information about the user account when creating a new credential
  *
  * @author Spencer Witt
  */
-export interface ObjectIdentifiable {
+export interface PublicKeyCredentialUserEntity extends PublicKeyCredentialEntity {
+  displayName?: string;
+  id?: string;
 }
 
 /**
- * Form field response.
+ * A JavaScript lambda function that is executed during certain events inside FusionAuth.
  *
- * @author Brett Guy
+ * @author Brian Pontarelli
  */
-export interface FormFieldResponse {
-  field?: FormField;
-  fields?: Array<FormField>;
+export interface Lambda {
+  body?: string;
+  debug?: boolean;
+  engineType?: LambdaEngineType;
+  id?: UUID;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  name?: string;
+  type?: LambdaType;
 }
 
 /**
- * JWT Public Key Response Object
+ * SonyPSN gaming login provider.
  *
+ * @author Brett Pontarelli
+ */
+export interface SonyPSNIdentityProvider extends BaseIdentityProvider<SonyPSNApplicationConfiguration> {
+  buttonText?: string;
+  client_id?: string;
+  client_secret?: string;
+  scope?: string;
+}
+
+/**
  * @author Daniel DeGroff
  */
-export interface PublicKeyResponse {
-  publicKey?: string;
-  publicKeys?: Record<string, string>;
+export interface BreachedPasswordTenantMetric {
+  actionRequired?: number;
+  matchedCommonPasswordCount?: number;
+  matchedExactCount?: number;
+  matchedPasswordCount?: number;
+  matchedSubAddressCount?: number;
+  passwordsCheckedCount?: number;
 }
 
 /**
- * Response for the user login report.
- *
- * @author Seth Musselman
+ * @author Brett Pontarelli
  */
-export interface RecentLoginResponse {
-  logins?: Array<DisplayableRawLogin>;
+export interface NintendoApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+  buttonText?: string;
+  client_id?: string;
+  client_secret?: string;
+  emailClaim?: string;
+  scope?: string;
+  uniqueIdClaim?: string;
+  usernameClaim?: string;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface TwoFactorEnableDisableSendRequest {
-  email?: string;
-  method?: string;
-  methodId?: string;
-  mobilePhone?: string;
+export interface TenantUnverifiedConfiguration {
+  email?: UnverifiedBehavior;
+  whenGated?: RegistrationUnverifiedOptions;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export enum SecureGeneratorType {
-  randomDigits = "randomDigits",
-  randomBytes = "randomBytes",
-  randomAlpha = "randomAlpha",
-  randomAlphaNumeric = "randomAlphaNumeric"
+export interface LoginRecordSearchCriteria extends BaseSearchCriteria {
+  applicationId?: UUID;
+  end?: number;
+  start?: number;
+  userId?: UUID;
 }
 
 /**
- * Entity grant API request object.
+ * Search request for entity types.
  *
  * @author Brian Pontarelli
  */
-export interface EntityGrantRequest {
-  grant?: EntityGrant;
+export interface EntityTypeSearchRequest {
+  search?: EntityTypeSearchCriteria;
 }
 
 /**
- * Something that can be required and thus also optional. This currently extends Enableable because anything that is
- * required/optional is almost always enableable as well.
+ * Models the Refresh Token Revoke Event. This event might be for a single token, a user
+ * or an entire application.
  *
  * @author Brian Pontarelli
  */
-export interface Requirable extends Enableable {
-  required?: boolean;
+export interface JWTRefreshTokenRevokeEvent extends BaseEvent {
+  applicationId?: UUID;
+  applicationTimeToLiveInSeconds?: Record<UUID, number>;
+  refreshToken?: RefreshToken;
+  user?: User;
+  userId?: UUID;
 }
 
 /**
- * Models the User Login Failed Event.
- *
  * @author Daniel DeGroff
  */
-export interface UserLoginFailedEvent extends BaseUserEvent {
-  applicationId?: UUID;
-  authenticationType?: string;
-  ipAddress?: string;
-  reason?: UserLoginFailedReason;
+export interface IdentityProviderLink {
+  data?: Record<string, any>;
+  displayName?: string;
+  identityProviderId?: UUID;
+  identityProviderName?: string;
+  identityProviderType?: IdentityProviderType;
+  identityProviderUserId?: string;
+  insertInstant?: number;
+  lastLoginInstant?: number;
+  tenantId?: UUID;
+  token?: string;
+  userId?: UUID;
 }
 
 /**
- * Search response for Groups
+ * Twitch gaming login provider.
  *
- * @author Daniel DeGroff
+ * @author Brett Pontarelli
  */
-export interface GroupSearchResponse {
-  groups?: Array<Group>;
-  total?: number;
+export interface TwitchIdentityProvider extends BaseIdentityProvider<TwitchApplicationConfiguration> {
+  buttonText?: string;
+  client_id?: string;
+  client_secret?: string;
+  scope?: string;
 }
 
 /**
- * Entity Type API request object.
+ * The global view of a User. This object contains all global information about the user including birthdate, registration information
+ * preferred languages, global attributes, etc.
  *
- * @author Brian Pontarelli
+ * @author Seth Musselman
  */
-export interface EntityTypeRequest {
-  entityType?: EntityType;
-  permission?: EntityTypePermission;
+export interface User extends SecureIdentity {
+  active?: boolean;
+  birthDate?: string;
+  cleanSpeakId?: UUID;
+  data?: Record<string, any>;
+  email?: string;
+  expiry?: number;
+  firstName?: string;
+  fullName?: string;
+  imageUrl?: string;
+  insertInstant?: number;
+  lastName?: string;
+  lastUpdateInstant?: number;
+  memberships?: Array<GroupMember>;
+  middleName?: string;
+  mobilePhone?: string;
+  parentEmail?: string;
+  preferredLanguages?: Array<string>;
+  registrations?: Array<UserRegistration>;
+  tenantId?: UUID;
+  timezone?: string;
+  twoFactor?: UserTwoFactorConfiguration;
 }
 
 /**
- * Key search response
+ * A webhook call attempt log.
  *
  * @author Spencer Witt
  */
-export interface KeySearchResponse {
-  keys?: Array<Key>;
-  total?: number;
+export interface WebhookAttemptLog {
+  attemptResult?: WebhookAttemptResult;
+  data?: Record<string, any>;
+  endInstant?: number;
+  id?: UUID;
+  startInstant?: number;
+  webhookCallResponse?: WebhookCallResponse;
+  webhookEventLogId?: UUID;
+  webhookId?: UUID;
 }
 
 /**
- * The handling policy for scopes provided by FusionAuth
+ * Search criteria for entity types.
  *
- * @author Spencer Witt
+ * @author Brian Pontarelli
  */
-export interface ProvidedScopePolicy {
-  address?: Requirable;
-  email?: Requirable;
-  phone?: Requirable;
-  profile?: Requirable;
+export interface EntityTypeSearchCriteria extends BaseSearchCriteria {
+  name?: string;
 }
 
 /**
- * Models the Group Delete Event.
+ * Models the User Identity Provider Unlink Event.
  *
- * @author Daniel DeGroff
+ * @author Rob Davis
  */
-export interface GroupDeleteEvent extends BaseGroupEvent {
+export interface UserIdentityProviderUnlinkEvent extends BaseUserEvent {
+  identityProviderLink?: IdentityProviderLink;
 }
 
 /**
- * Supply additional information about the Relying Party when creating a new credential
+ * Contains extension output for requested extensions during a WebAuthn ceremony
  *
  * @author Spencer Witt
  */
-export interface PublicKeyCredentialRelyingPartyEntity extends PublicKeyCredentialEntity {
-  id?: string;
+export interface WebAuthnExtensionsClientOutputs {
+  credProps?: CredentialPropertiesOutput;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface LoginHintConfiguration extends Enableable {
-  parameterName?: string;
+export interface AuthenticatorConfiguration {
+  algorithm?: TOTPAlgorithm;
+  codeLength?: number;
+  timeStep?: number;
 }
 
 /**
- * Search response for entity types.
- *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface EntityTypeSearchResponse {
-  entityTypes?: Array<EntityType>;
-  total?: number;
+export interface TwoFactorEnableDisableSendRequest {
+  email?: string;
+  method?: string;
+  methodId?: string;
+  mobilePhone?: string;
 }
 
 /**
- * Container for the event information. This is the JSON that is sent from FusionAuth to webhooks.
+ * Tenant-level configuration for WebAuthn
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export interface EventRequest {
-  event?: BaseEvent;
+export interface TenantWebAuthnConfiguration extends Enableable {
+  bootstrapWorkflow?: TenantWebAuthnWorkflowConfiguration;
+  debug?: boolean;
+  reauthenticationWorkflow?: TenantWebAuthnWorkflowConfiguration;
+  relyingPartyId?: string;
+  relyingPartyName?: string;
 }
 
 /**
- * Search criteria for webhooks.
+ * Models the Group Created Event.
  *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export interface WebhookSearchCriteria extends BaseSearchCriteria {
-  description?: string;
-  tenantId?: UUID;
-  url?: string;
+export interface GroupCreateCompleteEvent extends BaseGroupEvent {
 }
 
 /**
- * Models a set of localized Integers that can be stored as JSON.
+ * Options to request extensions during credential registration
  *
- * @author Daniel DeGroff
+ * @author Spencer Witt
  */
-export interface LocalizedIntegers extends Record<string, number> {
+export interface WebAuthnRegistrationExtensionOptions {
+  credProps?: boolean;
 }
 
 /**
- * @author Daniel DeGroff
+ * The system configuration for Webhook Event Log data.
+ *
+ * @author Spencer Witt
  */
-export interface TenantUnverifiedConfiguration {
-  email?: UnverifiedBehavior;
-  whenGated?: RegistrationUnverifiedOptions;
+export interface WebhookEventLogConfiguration {
+  delete?: DeleteConfiguration;
 }
 
 /**
- * Search request for entity grants.
+ * Password Encryption Scheme Configuration
  *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface EntityGrantSearchResponse {
-  grants?: Array<EntityGrant>;
-  total?: number;
+export interface PasswordEncryptionConfiguration {
+  encryptionScheme?: string;
+  encryptionSchemeFactor?: number;
+  modifyEncryptionSchemeOnLogin?: boolean;
 }
 
 /**
- * @author Daniel DeGroff
+ * Registration API request object.
+ *
+ * @author Brian Pontarelli
  */
-export enum FormDataType {
-  bool = "bool",
-  consent = "consent",
-  date = "date",
-  email = "email",
-  number = "number",
-  string = "string"
+export interface RegistrationRequest extends BaseEventRequest {
+  disableDomainBlock?: boolean;
+  generateAuthenticationToken?: boolean;
+  registration?: UserRegistration;
+  sendSetPasswordEmail?: boolean;
+  skipRegistrationVerification?: boolean;
+  skipVerification?: boolean;
+  user?: User;
 }
 
 /**
- * User Action API response object.
+ * The Application API request object.
  *
  * @author Brian Pontarelli
  */
-export interface UserActionResponse {
-  userAction?: UserAction;
-  userActions?: Array<UserAction>;
+export interface ApplicationRequest extends BaseEventRequest {
+  application?: Application;
+  role?: ApplicationRole;
+  sourceApplicationId?: UUID;
 }
 
 /**
- * Search request for Groups.
- *
  * @author Daniel DeGroff
  */
-export interface GroupSearchRequest {
-  search?: GroupSearchCriteria;
+export interface TwoFactorResponse {
+  code?: string;
+  recoveryCodes?: Array<string>;
+}
+
+export interface MultiFactorAuthenticatorMethod extends Enableable {
+  algorithm?: TOTPAlgorithm;
+  codeLength?: number;
+  timeStep?: number;
+}
+
+export interface SAMLv2Logout {
+  behavior?: SAMLLogoutBehavior;
+  defaultVerificationKeyId?: UUID;
+  keyId?: UUID;
+  requireSignedRequests?: boolean;
+  singleLogout?: SAMLv2SingleLogout;
+  xmlSignatureC14nMethod?: CanonicalizationMethod;
 }
 
 /**
- * Authentication key request object.
- *
- * @author Sanjay
+ * @author Daniel DeGroff
  */
-export interface APIKeyRequest {
-  apiKey?: APIKey;
-  sourceKeyId?: UUID;
+export interface RefreshTokenSlidingWindowConfiguration {
+  maximumTimeToLiveInMinutes?: number;
 }
 
 /**
- * Twitter social login provider.
+ * Search criteria for Identity Providers.
  *
- * @author Daniel DeGroff
+ * @author Spencer Witt
  */
-export interface TwitterIdentityProvider extends BaseIdentityProvider<TwitterApplicationConfiguration> {
-  buttonText?: string;
-  consumerKey?: string;
-  consumerSecret?: string;
+export interface IdentityProviderSearchCriteria extends BaseSearchCriteria {
+  applicationId?: UUID;
+  name?: string;
+  type?: IdentityProviderType;
 }
 
 /**
- * @author Michael Sleevi
+ * @author Daniel DeGroff
  */
-export interface SMSMessageTemplate extends MessageTemplate {
-  defaultTemplate?: string;
-  localizedTemplates?: LocalizedStrings;
+export interface JWTVendRequest {
+  claims?: Record<string, any>;
+  keyId?: UUID;
+  timeToLiveInSeconds?: number;
 }
 
 /**
- * Lambda API request object.
+ * User API delete request object for a single user.
  *
  * @author Brian Pontarelli
  */
-export interface LambdaRequest {
-  lambda?: Lambda;
+export interface UserDeleteSingleRequest extends BaseEventRequest {
+  hardDelete?: boolean;
 }
 
 /**
- * Models an event where a user is being created with an "in-use" login Id (email or username).
+ * Search request for Groups.
  *
  * @author Daniel DeGroff
  */
-export interface UserLoginIdDuplicateOnCreateEvent extends BaseUserEvent {
-  duplicateEmail?: string;
-  duplicateUsername?: string;
-  existing?: User;
+export interface GroupSearchRequest {
+  search?: GroupSearchCriteria;
 }
 
 /**
- * @author Mikey Sleevi
+ * The <i>authenticator's</i> response for the authentication ceremony in its encoded format
+ *
+ * @author Spencer Witt
  */
-export interface Message {
+export interface WebAuthnAuthenticatorAuthenticationResponse {
+  authenticatorData?: string;
+  clientDataJSON?: string;
+  signature?: string;
+  userHandle?: string;
 }
 
 /**
- * @author Daniel DeGroff
+ * Type for webhook headers.
+ *
+ * @author Brian Pontarelli
  */
-export interface RefreshRequest extends BaseEventRequest {
-  refreshToken?: string;
-  token?: string;
+export interface HTTPHeaders extends Record<string, string> {
 }
 
 /**
- * @author Brian Pontarelli
+ * Epic gaming login provider.
+ *
+ * @author Brett Pontarelli
  */
-export interface TwoFactorRequest extends BaseEventRequest {
-  applicationId?: UUID;
-  authenticatorId?: string;
-  code?: string;
-  email?: string;
-  method?: string;
-  mobilePhone?: string;
-  secret?: string;
-  secretBase32Encoded?: string;
-  twoFactorId?: string;
+export interface EpicGamesIdentityProvider extends BaseIdentityProvider<EpicGamesApplicationConfiguration> {
+  buttonText?: string;
+  client_id?: string;
+  client_secret?: string;
+  scope?: string;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface VerifyEmailResponse {
-  oneTimeCode?: string;
-  verificationId?: string;
+export interface Form {
+  data?: Record<string, any>;
+  id?: UUID;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  name?: string;
+  steps?: Array<FormStep>;
+  type?: FormType;
 }
 
 /**
- * The global view of a User. This object contains all global information about the user including birthdate, registration information
- * preferred languages, global attributes, etc.
+ * Request to authenticate with WebAuthn
  *
- * @author Seth Musselman
+ * @author Spencer Witt
  */
-export interface User extends SecureIdentity {
-  active?: boolean;
-  birthDate?: string;
-  cleanSpeakId?: UUID;
-  data?: Record<string, any>;
-  email?: string;
-  expiry?: number;
-  firstName?: string;
-  fullName?: string;
-  imageUrl?: string;
-  insertInstant?: number;
-  lastName?: string;
-  lastUpdateInstant?: number;
-  memberships?: Array<GroupMember>;
-  middleName?: string;
-  mobilePhone?: string;
-  parentEmail?: string;
-  preferredLanguages?: Array<string>;
-  registrations?: Array<UserRegistration>;
-  tenantId?: UUID;
-  timezone?: string;
-  twoFactor?: UserTwoFactorConfiguration;
+export interface WebAuthnPublicKeyAuthenticationRequest {
+  clientExtensionResults?: WebAuthnExtensionsClientOutputs;
+  id?: string;
+  response?: WebAuthnAuthenticatorAuthenticationResponse;
+  rpId?: string;
+  type?: string;
 }
 
 /**
+ * Available JSON Web Algorithms (JWA) as described in RFC 7518 available for this JWT implementation.
+ *
  * @author Daniel DeGroff
  */
-export interface BaseLoginRequest extends BaseEventRequest {
-  applicationId?: UUID;
-  ipAddress?: string;
-  metaData?: MetaData;
-  newDevice?: boolean;
-  noJWT?: boolean;
+export enum Algorithm {
+  ES256 = "ES256",
+  ES384 = "ES384",
+  ES512 = "ES512",
+  HS256 = "HS256",
+  HS384 = "HS384",
+  HS512 = "HS512",
+  PS256 = "PS256",
+  PS384 = "PS384",
+  PS512 = "PS512",
+  RS256 = "RS256",
+  RS384 = "RS384",
+  RS512 = "RS512",
+  none = "none"
 }
 
 /**
- * @author Daniel DeGroff
+ * Search request for Identity Providers
+ *
+ * @author Spencer Witt
  */
-export interface KafkaConfiguration extends Enableable {
-  defaultTopic?: string;
-  producer?: Record<string, string>;
+export interface IdentityProviderSearchRequest {
+  search?: IdentityProviderSearchCriteria;
 }
 
 /**
+ * The use type of a key.
+ *
  * @author Daniel DeGroff
  */
-export interface PasswordlessLoginRequest extends BaseLoginRequest {
-  code?: string;
-  twoFactorTrustId?: string;
+export enum KeyUse {
+  SignOnly = "SignOnly",
+  SignAndVerify = "SignAndVerify",
+  VerifyOnly = "VerifyOnly"
 }
 
-/**
- * Models the User Update Event once it is completed. This cannot be transactional.
- *
- * @author Daniel DeGroff
- */
-export interface UserUpdateCompleteEvent extends BaseUserEvent {
-  original?: User;
+export enum FamilyRole {
+  Child = "Child",
+  Teen = "Teen",
+  Adult = "Adult"
 }
 
 /**
- * Models the User Update Event.
+ * Entity API request object.
  *
  * @author Brian Pontarelli
  */
-export interface UserUpdateEvent extends BaseUserEvent {
-  original?: User;
+export interface EntityRequest {
+  entity?: Entity;
 }
 
 /**
- * Entity API response object.
+ * Response for the system configuration API.
  *
  * @author Brian Pontarelli
  */
-export interface EntityResponse {
-  entity?: Entity;
+export interface SystemConfigurationResponse {
+  systemConfiguration?: SystemConfiguration;
 }
 
-/**
- * Used by the Relying Party to specify their requirements for authenticator attributes. Fields use the deprecated "resident key" terminology to refer
- * to client-side discoverable credentials to maintain backwards compatibility with WebAuthn Level 1.
- *
- * @author Spencer Witt
- */
-export interface AuthenticatorSelectionCriteria {
-  authenticatorAttachment?: AuthenticatorAttachment;
-  requireResidentKey?: boolean;
-  residentKey?: ResidentKeyRequirement;
-  userVerification?: UserVerificationRequirement;
+export interface ActionData {
+  actioneeUserId?: UUID;
+  actionerUserId?: UUID;
+  applicationIds?: Array<UUID>;
+  comment?: string;
+  emailUser?: boolean;
+  expiry?: number;
+  notifyUser?: boolean;
+  option?: string;
+  reasonId?: UUID;
+  userActionId?: UUID;
+}
+
+export interface APIKeyMetaData {
+  attributes?: Record<string, string>;
 }
 
 /**
- * Events that are bound to applications.
- *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface ApplicationEvent {
+export interface TenantRateLimitConfiguration {
+  failedLogin?: RateLimitedRequestConfiguration;
+  forgotPassword?: RateLimitedRequestConfiguration;
+  sendEmailVerification?: RateLimitedRequestConfiguration;
+  sendPasswordless?: RateLimitedRequestConfiguration;
+  sendRegistrationVerification?: RateLimitedRequestConfiguration;
+  sendTwoFactor?: RateLimitedRequestConfiguration;
 }
 
 /**
- * API request for sending out family requests to parent's.
- *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface FamilyEmailRequest {
-  parentEmail?: string;
+export interface BaseLoginRequest extends BaseEventRequest {
+  applicationId?: UUID;
+  ipAddress?: string;
+  metaData?: MetaData;
+  newDevice?: boolean;
+  noJWT?: boolean;
 }
 
 /**
- * Refresh Token Import request.
+ * Nintendo gaming login provider.
  *
- * @author Brett Guy
+ * @author Brett Pontarelli
  */
-export interface RefreshTokenImportRequest {
-  refreshTokens?: Array<RefreshToken>;
-  validateDbConstraints?: boolean;
+export interface NintendoIdentityProvider extends BaseIdentityProvider<NintendoApplicationConfiguration> {
+  buttonText?: string;
+  client_id?: string;
+  client_secret?: string;
+  emailClaim?: string;
+  scope?: string;
+  uniqueIdClaim?: string;
+  usernameClaim?: string;
 }
 
 /**
- * The IdP behavior when no user link has been made yet.
+ * Models the User Update Event once it is completed. This cannot be transactional.
  *
  * @author Daniel DeGroff
  */
-export enum IdentityProviderLinkingStrategy {
-  CreatePendingLink = "CreatePendingLink",
-  Disabled = "Disabled",
-  LinkAnonymously = "LinkAnonymously",
-  LinkByEmail = "LinkByEmail",
-  LinkByEmailForExistingUser = "LinkByEmailForExistingUser",
-  LinkByUsername = "LinkByUsername",
-  LinkByUsernameForExistingUser = "LinkByUsernameForExistingUser",
-  Unsupported = "Unsupported"
+export interface UserUpdateCompleteEvent extends BaseUserEvent {
+  original?: User;
 }
 
 /**
- * @author Daniel DeGroff
+ * A marker interface indicating this event is an event that can supply a linked object Id.
+ *
+ * @author Spencer Witt
  */
-export enum MultiFactorLoginPolicy {
-  Disabled = "Disabled",
-  Enabled = "Enabled",
-  Required = "Required"
+export interface ObjectIdentifiable {
 }
 
 /**
- * @author Daniel DeGroff
+ * The transaction types for Webhooks and other event systems within FusionAuth.
+ *
+ * @author Brian Pontarelli
  */
-export interface IdentityProviderLinkRequest extends BaseEventRequest {
-  identityProviderLink?: IdentityProviderLink;
-  pendingIdPLinkId?: string;
+export enum TransactionType {
+  None = "None",
+  Any = "Any",
+  SimpleMajority = "SimpleMajority",
+  SuperMajority = "SuperMajority",
+  AbsoluteMajority = "AbsoluteMajority"
 }
 
 /**
- * Google social login provider.
+ * Models the User Login Success Event.
  *
  * @author Daniel DeGroff
  */
-export interface GoogleIdentityProvider extends BaseIdentityProvider<GoogleApplicationConfiguration> {
-  buttonText?: string;
-  client_id?: string;
-  client_secret?: string;
-  loginMethod?: IdentityProviderLoginMethod;
-  properties?: GoogleIdentityProviderProperties;
-  scope?: string;
+export interface UserLoginSuccessEvent extends BaseUserEvent {
+  applicationId?: UUID;
+  authenticationType?: string;
+  connectorId?: UUID;
+  identityProviderId?: UUID;
+  identityProviderName?: string;
+  ipAddress?: string;
 }
 
 /**
- * Group Member Request
+ * Group Member Delete Request
  *
  * @author Daniel DeGroff
  */
-export interface MemberRequest {
-  members?: Record<UUID, Array<GroupMember>>;
+export interface MemberDeleteRequest {
+  memberIds?: Array<UUID>;
+  members?: Record<UUID, Array<UUID>>;
 }
 
 /**
- * Email template response.
+ * Registration API request object.
  *
  * @author Brian Pontarelli
  */
-export interface EmailTemplateResponse {
-  emailTemplate?: EmailTemplate;
-  emailTemplates?: Array<EmailTemplate>;
+export interface RegistrationResponse {
+  refreshToken?: string;
+  registration?: UserRegistration;
+  registrationVerificationId?: string;
+  registrationVerificationOneTimeCode?: string;
+  token?: string;
+  tokenExpirationInstant?: number;
+  user?: User;
 }
 
 /**
- * @author Brett Guy
+ * Models the User Update Registration Event.
+ * <p>
+ * This is different than user.registration.update in that it is sent after this event completes, this cannot be transactional.
+ *
+ * @author Daniel DeGroff
  */
-export enum IPAccessControlEntryAction {
-  Allow = "Allow",
-  Block = "Block"
+export interface UserRegistrationUpdateCompleteEvent extends BaseUserEvent {
+  applicationId?: UUID;
+  original?: UserRegistration;
+  registration?: UserRegistration;
 }
 
 /**
- * Key API response object.
+ * Search response for Themes
  *
- * @author Daniel DeGroff
+ * @author Mark Manes
  */
-export interface KeyResponse {
-  key?: Key;
-  keys?: Array<Key>;
+export interface ThemeSearchResponse {
+  themes?: Array<Theme>;
+  total?: number;
 }
 
 /**
- * Search criteria for Keys
+ * Used to express whether the Relying Party requires <a href="https://www.w3.org/TR/webauthn-2/#user-verification">user verification</a> for the
+ * current operation.
  *
  * @author Spencer Witt
  */
-export interface KeySearchCriteria extends BaseSearchCriteria {
-  algorithm?: KeyAlgorithm;
-  name?: string;
-  type?: KeyType;
+export enum UserVerificationRequirement {
+  required = "required",
+  preferred = "preferred",
+  discouraged = "discouraged"
 }
 
 /**
- * Stores an message template used to distribute messages;
- *
- * @author Michael Sleevi
+ * @author Trevor Smith
  */
-export interface MessageTemplate {
-  data?: Record<string, any>;
-  id?: UUID;
-  insertInstant?: number;
-  lastUpdateInstant?: number;
-  name?: string;
-  type?: MessageType;
+export interface DeviceResponse {
+  device_code?: string;
+  expires_in?: number;
+  interval?: number;
+  user_code?: string;
+  verification_uri?: string;
+  verification_uri_complete?: string;
 }
 
 /**
- * Models the User Reactivate Event.
+ * Search criteria for Email templates
  *
- * @author Brian Pontarelli
+ * @author Mark Manes
  */
-export interface UserReactivateEvent extends BaseUserEvent {
+export interface EmailTemplateSearchCriteria extends BaseSearchCriteria {
+  name?: string;
+}
+
+export interface APIKeyPermissions {
+  endpoints?: Record<string, Array<string>>;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface FormField {
-  confirm?: boolean;
-  consentId?: UUID;
-  control?: FormControl;
-  data?: Record<string, any>;
-  description?: string;
-  id?: UUID;
-  insertInstant?: number;
-  key?: string;
-  lastUpdateInstant?: number;
-  name?: string;
-  options?: Array<string>;
-  required?: boolean;
-  type?: FormDataType;
-  validator?: FormFieldValidator;
+export interface BaseElasticSearchCriteria extends BaseSearchCriteria {
+  accurateTotal?: boolean;
+  ids?: Array<UUID>;
+  nextResults?: string;
+  query?: string;
+  queryString?: string;
+  sortFields?: Array<SortField>;
 }
 
 /**
- * Search request for Applications
+ * Search request for IP ACLs .
  *
- * @author Spencer Witt
+ * @author Brett Guy
  */
-export interface ApplicationSearchRequest extends ExpandableRequest {
-  search?: ApplicationSearchCriteria;
+export interface IPAccessControlListSearchRequest {
+  search?: IPAccessControlListSearchCriteria;
 }
 
 /**
- * Type for webhook headers.
+ * The Application Scope API request object.
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export interface HTTPHeaders extends Record<string, string> {
+export interface ApplicationOAuthScopeRequest {
+  scope?: ApplicationOAuthScope;
 }
 
-/**
- * A custom OAuth scope for a specific application.
- *
- * @author Spencer Witt
- */
-export interface ApplicationOAuthScope {
-  applicationId?: UUID;
-  data?: Record<string, any>;
-  defaultConsentDetail?: string;
-  defaultConsentMessage?: string;
-  description?: string;
-  id?: UUID;
-  insertInstant?: number;
-  lastUpdateInstant?: number;
-  name?: string;
-  required?: boolean;
+export interface LoginConfiguration {
+  allowTokenRefresh?: boolean;
+  generateRefreshTokens?: boolean;
+  requireAuthentication?: boolean;
 }
 
 /**
- * Models the Group Create Complete Event.
+ * Models the Group Member Add Event.
  *
  * @author Daniel DeGroff
  */
-export interface GroupDeleteCompleteEvent extends BaseGroupEvent {
+export interface GroupMemberAddEvent extends BaseGroupEvent {
+  members?: Array<GroupMember>;
 }
 
 /**
- * Models the JWT Refresh Event. This event will be fired when a JWT is "refreshed" (generated) using a Refresh Token.
+ * Key API request object.
  *
  * @author Daniel DeGroff
  */
-export interface JWTRefreshEvent extends BaseEvent {
-  applicationId?: UUID;
-  original?: string;
-  refreshToken?: string;
-  token?: string;
-  userId?: UUID;
+export interface KeyRequest {
+  key?: Key;
 }
 
 /**
- * @author Brett Pontarelli
+ * Event log response.
+ *
+ * @author Brian Pontarelli
  */
-export interface TenantCaptchaConfiguration extends Enableable {
-  captchaMethod?: CaptchaMethod;
-  secretKey?: string;
-  siteKey?: string;
-  threshold?: number;
+export interface EventLogSearchResponse {
+  eventLogs?: Array<EventLog>;
+  total?: number;
 }
 
-/**
- * @author Daniel DeGroff
- */
-export interface LoginRecordSearchRequest {
-  retrieveTotal?: boolean;
-  search?: LoginRecordSearchCriteria;
+export interface TwoFactorTrust {
+  applicationId?: UUID;
+  expiration?: number;
+  startInstant?: number;
 }
 
 /**
- * Models the User Create Event.
+ * Application-level configuration for WebAuthn
  *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface UserCreateEvent extends BaseUserEvent {
+export interface ApplicationWebAuthnConfiguration extends Enableable {
+  bootstrapWorkflow?: ApplicationWebAuthnWorkflowConfiguration;
+  reauthenticationWorkflow?: ApplicationWebAuthnWorkflowConfiguration;
 }
 
 /**
- * @author Lyle Schemmerling
+ * Models a generic connector.
+ *
+ * @author Trevor Smith
  */
-export interface BaseSAMLv2IdentityProvider<D extends BaseIdentityProviderApplicationConfiguration> extends BaseIdentityProvider<D> {
-  emailClaim?: string;
-  keyId?: UUID;
-  uniqueIdClaim?: string;
-  useNameIdForEmail?: boolean;
-  usernameClaim?: string;
+export interface GenericConnectorConfiguration extends BaseConnectorConfiguration {
+  authenticationURL?: string;
+  connectTimeout?: number;
+  headers?: HTTPHeaders;
+  httpAuthenticationPassword?: string;
+  httpAuthenticationUsername?: string;
+  readTimeout?: number;
+  sslCertificateKeyId?: UUID;
 }
 
 /**
- * Options to request extensions during credential registration
+ * Base class for all {@link Group} and {@link GroupMember} events.
  *
  * @author Spencer Witt
  */
-export interface WebAuthnRegistrationExtensionOptions {
-  credProps?: boolean;
+export interface BaseGroupEvent extends BaseEvent {
+  group?: Group;
 }
 
 /**
- * User Action Reason API request object.
- *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface UserActionReasonRequest {
-  userActionReason?: UserActionReason;
+export interface MessengerTransport {
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface AccessToken {
-  access_token?: string;
-  expires_in?: number;
-  id_token?: string;
-  refresh_token?: string;
-  refresh_token_id?: UUID;
-  scope?: string;
-  token_type?: TokenType;
-  userId?: UUID;
+export interface IdentityProviderTenantConfiguration {
+  data?: Record<string, any>;
+  limitUserLinkCount?: IdentityProviderLimitUserLinkingPolicy;
 }
 
 /**
- * Search API response.
- *
  * @author Brian Pontarelli
  */
-export interface SearchResponse extends ExpandableResponse {
-  nextResults?: string;
-  total?: number;
-  users?: Array<User>;
-}
-
-/**
- * @author Daniel DeGroff
- */
-export interface SendResponse {
-  anonymousResults?: Record<string, EmailTemplateErrors>;
-  results?: Record<UUID, EmailTemplateErrors>;
-}
-
-export interface EmailTemplateErrors {
-  parseErrors?: Record<string, string>;
-  renderErrors?: Record<string, string>;
+export interface AuditLogSearchCriteria extends BaseSearchCriteria {
+  end?: number;
+  message?: string;
+  newValue?: string;
+  oldValue?: string;
+  reason?: string;
+  start?: number;
+  user?: string;
 }
 
 /**
- * The phases of a time-based user action.
+ * Refresh Token Import request.
  *
- * @author Brian Pontarelli
+ * @author Brett Guy
  */
-export enum UserActionPhase {
-  start = "start",
-  modify = "modify",
-  cancel = "cancel",
-  end = "end"
+export interface RefreshTokenImportRequest {
+  refreshTokens?: Array<RefreshToken>;
+  validateDbConstraints?: boolean;
 }
 
 /**
- * @author Daniel DeGroff
+ * WebAuthn Credential API response
+ *
+ * @author Spencer Witt
  */
-export interface RememberPreviousPasswords extends Enableable {
-  count?: number;
+export interface WebAuthnCredentialResponse {
+  credential?: WebAuthnCredential;
+  credentials?: Array<WebAuthnCredential>;
 }
 
 /**
- * The types of lambdas that indicate how they are invoked by FusionAuth.
+ * Webhook event log search response.
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export enum LambdaType {
-  JWTPopulate = "JWTPopulate",
-  OpenIDReconcile = "OpenIDReconcile",
-  SAMLv2Reconcile = "SAMLv2Reconcile",
-  SAMLv2Populate = "SAMLv2Populate",
-  AppleReconcile = "AppleReconcile",
-  ExternalJWTReconcile = "ExternalJWTReconcile",
-  FacebookReconcile = "FacebookReconcile",
-  GoogleReconcile = "GoogleReconcile",
-  HYPRReconcile = "HYPRReconcile",
-  TwitterReconcile = "TwitterReconcile",
-  LDAPConnectorReconcile = "LDAPConnectorReconcile",
-  LinkedInReconcile = "LinkedInReconcile",
-  EpicGamesReconcile = "EpicGamesReconcile",
-  NintendoReconcile = "NintendoReconcile",
-  SonyPSNReconcile = "SonyPSNReconcile",
-  SteamReconcile = "SteamReconcile",
-  TwitchReconcile = "TwitchReconcile",
-  XboxReconcile = "XboxReconcile",
-  ClientCredentialsJWTPopulate = "ClientCredentialsJWTPopulate",
-  SCIMServerGroupRequestConverter = "SCIMServerGroupRequestConverter",
-  SCIMServerGroupResponseConverter = "SCIMServerGroupResponseConverter",
-  SCIMServerUserRequestConverter = "SCIMServerUserRequestConverter",
-  SCIMServerUserResponseConverter = "SCIMServerUserResponseConverter",
-  SelfServiceRegistrationValidation = "SelfServiceRegistrationValidation",
-  UserInfoPopulate = "UserInfoPopulate",
-  LoginValidation = "LoginValidation"
+export interface WebhookEventLogSearchResponse {
+  total?: number;
+  webhookEventLogs?: Array<WebhookEventLog>;
 }
 
 /**
- * The <i>authenticator's</i> response for the registration ceremony in its encoded format
- *
- * @author Spencer Witt
+ * @author Trevor Smith
  */
-export interface WebAuthnAuthenticatorRegistrationResponse {
-  attestationObject?: string;
-  clientDataJSON?: string;
+export interface ConnectorResponse {
+  connector?: BaseConnectorConfiguration;
+  connectors?: Array<BaseConnectorConfiguration>;
 }
 
 /**
- * A marker interface indicating this event is not scoped to a tenant and will be sent to all webhooks.
+ * Models a User consent.
  *
  * @author Daniel DeGroff
  */
-export interface InstanceEvent extends NonTransactionalEvent {
+export interface UserConsent {
+  consent?: Consent;
+  consentId?: UUID;
+  data?: Record<string, any>;
+  giverUserId?: UUID;
+  id?: UUID;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  status?: ConsentStatus;
+  userId?: UUID;
+  values?: Array<string>;
 }
 
 /**
- * API request to import an existing WebAuthn credential(s)
+ * Steam API modes.
  *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export interface WebAuthnCredentialImportRequest {
-  credentials?: Array<WebAuthnCredential>;
-  validateDbConstraints?: boolean;
+export enum SteamAPIMode {
+  Public = "Public",
+  Partner = "Partner"
 }
 
 /**
- * Configuration for signing webhooks.
+ * Request for the Logout API that can be used as an alternative to URL parameters.
  *
- * @author Brent Halsey
+ * @author Brian Pontarelli
  */
-export interface WebhookSignatureConfiguration extends Enableable {
-  signingKeyId?: UUID;
+export interface LogoutRequest extends BaseEventRequest {
+  global?: boolean;
+  refreshToken?: string;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface PasswordlessStartRequest {
-  applicationId?: UUID;
-  loginId?: string;
-  state?: Record<string, any>;
+export interface LookupResponse {
+  identityProvider?: IdentityProviderDetails;
 }
 
 /**
- * API response for retrieving Refresh Tokens
+ * Models a family grouping of users.
  *
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface RefreshTokenResponse {
-  refreshToken?: RefreshToken;
-  refreshTokens?: Array<RefreshToken>;
+export interface Family {
+  id?: UUID;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  members?: Array<FamilyMember>;
+}
+
+export interface LambdaConfiguration {
+  reconcileId?: UUID;
 }
 
 /**
- * Registration API request object.
+ * Search response for entity types.
  *
  * @author Brian Pontarelli
  */
-export interface RegistrationRequest extends BaseEventRequest {
-  disableDomainBlock?: boolean;
-  generateAuthenticationToken?: boolean;
-  registration?: UserRegistration;
-  sendSetPasswordEmail?: boolean;
-  skipRegistrationVerification?: boolean;
-  skipVerification?: boolean;
-  user?: User;
+export interface EntityTypeSearchResponse {
+  entityTypes?: Array<EntityType>;
+  total?: number;
+}
+
+/**
+ * @author Lyle Schemmerling
+ */
+export interface BaseSAMLv2IdentityProvider<D extends BaseIdentityProviderApplicationConfiguration> extends BaseIdentityProvider<D> {
+  emailClaim?: string;
+  keyId?: UUID;
+  uniqueIdClaim?: string;
+  useNameIdForEmail?: boolean;
+  usernameClaim?: string;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export enum SystemTrustedProxyConfigurationPolicy {
-  All = "All",
-  OnlyConfigured = "OnlyConfigured"
+export interface LinkedInApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+  buttonText?: string;
+  client_id?: string;
+  client_secret?: string;
+  scope?: string;
 }
 
 /**
- * Request for managing FusionAuth Reactor and licenses.
- *
  * @author Brian Pontarelli
  */
-export interface ReactorRequest {
-  license?: string;
-  licenseId?: string;
+export interface PreviewRequest {
+  emailTemplate?: EmailTemplate;
+  locale?: string;
 }
 
 /**
- * Search results.
+ * Request for the Refresh Token API to revoke a refresh token rather than using the URL parameters.
  *
  * @author Brian Pontarelli
  */
-export interface SearchResults<T> {
-  nextResults?: string;
-  results?: Array<T>;
-  total?: number;
-  totalEqualToActual?: boolean;
+export interface RefreshTokenRevokeRequest extends BaseEventRequest {
+  applicationId?: UUID;
+  token?: string;
+  userId?: UUID;
 }
 
 /**
- * Response for the daily active user report.
- *
- * @author Brian Pontarelli
+ * @author Trevor Smith
  */
-export interface DailyActiveUserReportResponse {
-  dailyActiveUsers?: Array<Count>;
-  total?: number;
+export enum ChangePasswordReason {
+  Administrative = "Administrative",
+  Breached = "Breached",
+  Expired = "Expired",
+  Validation = "Validation"
 }
 
 /**
- * SAML v2 IdP Initiated identity provider configuration.
+ * Something that can be enabled and thus also disabled.
  *
  * @author Daniel DeGroff
  */
-export interface SAMLv2IdPInitiatedIdentityProvider extends BaseSAMLv2IdentityProvider<SAMLv2IdPInitiatedApplicationConfiguration> {
-  issuer?: string;
+export interface Enableable {
+  enabled?: boolean;
+}
+
+/**
+ * Search request for email templates
+ *
+ * @author Mark Manes
+ */
+export interface EmailTemplateSearchRequest {
+  search?: EmailTemplateSearchCriteria;
+}
+
+export enum EmailSecurityType {
+  NONE = "NONE",
+  SSL = "SSL",
+  TLS = "TLS"
+}
+
+/**
+ * Provides the <i>authenticator</i> with the data it needs to generate an assertion.
+ *
+ * @author Spencer Witt
+ */
+export interface PublicKeyCredentialRequestOptions {
+  allowCredentials?: Array<PublicKeyCredentialDescriptor>;
+  challenge?: string;
+  rpId?: string;
+  timeout?: number;
+  userVerification?: UserVerificationRequirement;
+}
+
+/**
+ * Supply additional information about the Relying Party when creating a new credential
+ *
+ * @author Spencer Witt
+ */
+export interface PublicKeyCredentialRelyingPartyEntity extends PublicKeyCredentialEntity {
+  id?: string;
 }
 
 /**
+ * API response for User consent.
+ *
  * @author Daniel DeGroff
  */
-export interface DeviceApprovalResponse {
-  deviceGrantStatus?: string;
-  deviceInfo?: DeviceInfo;
-  identityProviderLink?: IdentityProviderLink;
-  tenantId?: UUID;
-  userId?: UUID;
+export interface UserConsentResponse {
+  userConsent?: UserConsent;
+  userConsents?: Array<UserConsent>;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface UserTwoFactorConfiguration {
-  methods?: Array<TwoFactorMethod>;
-  recoveryCodes?: Array<string>;
+export interface BaseIdentityProviderApplicationConfiguration extends Enableable {
+  createRegistration?: boolean;
+  data?: Record<string, any>;
 }
 
 /**
- * Search request for email templates
+ * API response for refreshing a JWT with a Refresh Token.
+ * <p>
+ * Using a different response object from RefreshTokenResponse because the retrieve response will return an object for refreshToken, and this is a
+ * string.
  *
- * @author Mark Manes
+ * @author Daniel DeGroff
  */
-export interface EmailTemplateSearchRequest {
-  search?: EmailTemplateSearchCriteria;
+export interface JWTRefreshResponse {
+  refreshToken?: string;
+  refreshTokenId?: UUID;
+  token?: string;
+}
+
+/**
+ * @author Brian Pontarelli
+ */
+export interface Count {
+  count?: number;
+  interval?: number;
 }
 
 /**
- * The summary of the action that is preventing login to be returned on the login response.
- *
  * @author Daniel DeGroff
  */
-export interface LoginPreventedResponse {
-  actionerUserId?: UUID;
-  actionId?: UUID;
-  expiry?: number;
-  localizedName?: string;
-  localizedOption?: string;
-  localizedReason?: string;
-  name?: string;
-  option?: string;
-  reason?: string;
-  reasonCode?: string;
+export interface AuditLogExportRequest extends BaseExportRequest {
+  criteria?: AuditLogSearchCriteria;
 }
 
 /**
- * Models content user action options.
+ * Defines an error.
  *
  * @author Brian Pontarelli
  */
-export interface UserActionOption {
-  localizedNames?: LocalizedStrings;
-  name?: string;
+export interface Error {
+  code?: string;
+  data?: Record<string, any>;
+  message?: string;
 }
 
 /**
- * Event log response.
+ * API request to import an existing WebAuthn credential(s)
  *
- * @author Daniel DeGroff
+ * @author Spencer Witt
  */
-export interface EventLogResponse {
-  eventLog?: EventLog;
+export interface WebAuthnCredentialImportRequest {
+  credentials?: Array<WebAuthnCredential>;
+  validateDbConstraints?: boolean;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface SAMLv2IdPInitiatedApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+export enum ExpiryUnit {
+  MINUTES = "MINUTES",
+  HOURS = "HOURS",
+  DAYS = "DAYS",
+  WEEKS = "WEEKS",
+  MONTHS = "MONTHS",
+  YEARS = "YEARS"
 }
 
 /**
- * @author andrewpai
+ * @author Brett Guy
  */
-export interface SelfServiceFormConfiguration {
-  requireCurrentPasswordOnPasswordChange?: boolean;
+export enum MessengerType {
+  Generic = "Generic",
+  Kafka = "Kafka",
+  Twilio = "Twilio"
 }
 
 /**
- * Models the Group Update Complete Event.
+ * An expandable API response.
  *
  * @author Daniel DeGroff
  */
-export interface GroupUpdateCompleteEvent extends BaseGroupEvent {
-  original?: Group;
+export interface ExpandableResponse {
+  expandable?: Array<string>;
 }
 
 /**
- * Reindex API request
+ * Search request for Themes.
  *
+ * @author Mark Manes
+ */
+export interface ThemeSearchRequest {
+  search?: ThemeSearchCriteria;
+}
+
+/**
  * @author Daniel DeGroff
  */
-export interface ReindexRequest {
-  index?: string;
+export interface PasswordValidationRulesResponse {
+  passwordValidationRules?: PasswordValidationRules;
 }
 
 /**
+ * API request to start a WebAuthn authentication ceremony
+ *
+ * @author Spencer Witt
+ */
+export interface WebAuthnStartRequest {
+  applicationId?: UUID;
+  credentialId?: UUID;
+  loginId?: string;
+  state?: Record<string, any>;
+  userId?: UUID;
+  workflow?: WebAuthnWorkflow;
+}
+
+/**
+ * A raw login record response
+ *
  * @author Daniel DeGroff
  */
-export interface ApplicationExternalIdentifierConfiguration {
-  twoFactorTrustIdTimeToLiveInSeconds?: number;
+export interface LoginRecordSearchResponse {
+  logins?: Array<DisplayableRawLogin>;
+  total?: number;
 }
 
 /**
- * @author Seth Musselman
+ * Response for the registration report.
+ *
+ * @author Brian Pontarelli
  */
-export interface Application {
-  accessControlConfiguration?: ApplicationAccessControlConfiguration;
-  active?: boolean;
-  authenticationTokenConfiguration?: AuthenticationTokenConfiguration;
-  cleanSpeakConfiguration?: CleanSpeakConfiguration;
-  data?: Record<string, any>;
-  emailConfiguration?: ApplicationEmailConfiguration;
-  externalIdentifierConfiguration?: ApplicationExternalIdentifierConfiguration;
-  formConfiguration?: ApplicationFormConfiguration;
-  id?: UUID;
-  insertInstant?: number;
-  jwtConfiguration?: JWTConfiguration;
-  lambdaConfiguration?: LambdaConfiguration;
-  lastUpdateInstant?: number;
-  loginConfiguration?: LoginConfiguration;
-  multiFactorConfiguration?: ApplicationMultiFactorConfiguration;
-  name?: string;
-  oauthConfiguration?: OAuth2Configuration;
-  passwordlessConfiguration?: PasswordlessConfiguration;
-  registrationConfiguration?: RegistrationConfiguration;
-  registrationDeletePolicy?: ApplicationRegistrationDeletePolicy;
-  roles?: Array<ApplicationRole>;
-  samlv2Configuration?: SAMLv2Configuration;
-  scopes?: Array<ApplicationOAuthScope>;
-  state?: ObjectState;
-  tenantId?: UUID;
-  themeId?: UUID;
-  unverified?: RegistrationUnverifiedOptions;
-  verificationEmailTemplateId?: UUID;
-  verificationStrategy?: VerificationStrategy;
-  verifyRegistration?: boolean;
-  webAuthnConfiguration?: ApplicationWebAuthnConfiguration;
-}
-
-export interface ApplicationEmailConfiguration {
-  emailUpdateEmailTemplateId?: UUID;
-  emailVerificationEmailTemplateId?: UUID;
-  emailVerifiedEmailTemplateId?: UUID;
-  forgotPasswordEmailTemplateId?: UUID;
-  loginIdInUseOnCreateEmailTemplateId?: UUID;
-  loginIdInUseOnUpdateEmailTemplateId?: UUID;
-  loginNewDeviceEmailTemplateId?: UUID;
-  loginSuspiciousEmailTemplateId?: UUID;
-  passwordlessEmailTemplateId?: UUID;
-  passwordResetSuccessEmailTemplateId?: UUID;
-  passwordUpdateEmailTemplateId?: UUID;
-  setPasswordEmailTemplateId?: UUID;
-  twoFactorMethodAddEmailTemplateId?: UUID;
-  twoFactorMethodRemoveEmailTemplateId?: UUID;
-}
-
-export interface AuthenticationTokenConfiguration extends Enableable {
-}
-
-export interface LambdaConfiguration {
-  accessTokenPopulateId?: UUID;
-  idTokenPopulateId?: UUID;
-  samlv2PopulateId?: UUID;
-  selfServiceRegistrationValidationId?: UUID;
-  userinfoPopulateId?: UUID;
-}
-
-export interface LoginConfiguration {
-  allowTokenRefresh?: boolean;
-  generateRefreshTokens?: boolean;
-  requireAuthentication?: boolean;
-}
-
-export interface PasswordlessConfiguration extends Enableable {
-}
-
-export interface RegistrationConfiguration extends Enableable {
-  birthDate?: Requirable;
-  confirmPassword?: boolean;
-  firstName?: Requirable;
-  formId?: UUID;
-  fullName?: Requirable;
-  lastName?: Requirable;
-  loginIdType?: LoginIdType;
-  middleName?: Requirable;
-  mobilePhone?: Requirable;
-  preferredLanguages?: Requirable;
-  type?: RegistrationType;
-}
-
-export enum LoginIdType {
-  email = "email",
-  username = "username"
-}
-
-export enum RegistrationType {
-  basic = "basic",
-  advanced = "advanced"
-}
-
-export interface SAMLv2Configuration extends Enableable {
-  assertionEncryptionConfiguration?: SAMLv2AssertionEncryptionConfiguration;
-  audience?: string;
-  authorizedRedirectURLs?: Array<string>;
-  callbackURL?: string;
-  debug?: boolean;
-  defaultVerificationKeyId?: UUID;
-  initiatedLogin?: SAMLv2IdPInitiatedLoginConfiguration;
-  issuer?: string;
-  keyId?: UUID;
-  loginHintConfiguration?: LoginHintConfiguration;
-  logout?: SAMLv2Logout;
-  logoutURL?: string;
-  requireSignedRequests?: boolean;
-  xmlSignatureC14nMethod?: CanonicalizationMethod;
-  xmlSignatureLocation?: XMLSignatureLocation;
-}
-
-export enum SAMLLogoutBehavior {
-  AllParticipants = "AllParticipants",
-  OnlyOriginator = "OnlyOriginator"
-}
-
-export enum XMLSignatureLocation {
-  Assertion = "Assertion",
-  Response = "Response"
-}
-
-export interface SAMLv2AssertionEncryptionConfiguration extends Enableable {
-  digestAlgorithm?: string;
-  encryptionAlgorithm?: string;
-  keyLocation?: string;
-  keyTransportAlgorithm?: string;
-  keyTransportEncryptionKeyId?: UUID;
-  maskGenerationFunction?: string;
+export interface RegistrationReportResponse {
+  hourlyCounts?: Array<Count>;
+  total?: number;
 }
 
-export interface SAMLv2Logout {
-  behavior?: SAMLLogoutBehavior;
-  defaultVerificationKeyId?: UUID;
-  keyId?: UUID;
-  requireSignedRequests?: boolean;
-  singleLogout?: SAMLv2SingleLogout;
-  xmlSignatureC14nMethod?: CanonicalizationMethod;
+/**
+ * @author Brett Guy
+ */
+export interface IPAccessControlListSearchResponse {
+  ipAccessControlLists?: Array<IPAccessControlList>;
+  total?: number;
 }
 
-export interface SAMLv2SingleLogout extends Enableable {
-  keyId?: UUID;
-  url?: string;
-  xmlSignatureC14nMethod?: CanonicalizationMethod;
+/**
+ * @author Daniel DeGroff
+ */
+export interface TwoFactorStatusResponse {
+  trusts?: Array<TwoFactorTrust>;
+  twoFactorTrustId?: string;
 }
 
 /**
- * Allows the Relying Party to specify desired attributes of a new credential.
+ * Consent search response
  *
  * @author Spencer Witt
  */
-export interface PublicKeyCredentialCreationOptions {
-  attestation?: AttestationConveyancePreference;
-  authenticatorSelection?: AuthenticatorSelectionCriteria;
-  challenge?: string;
-  excludeCredentials?: Array<PublicKeyCredentialDescriptor>;
-  extensions?: WebAuthnRegistrationExtensionOptions;
-  pubKeyCredParams?: Array<PublicKeyCredentialParameters>;
-  rp?: PublicKeyCredentialRelyingPartyEntity;
-  timeout?: number;
-  user?: PublicKeyCredentialUserEntity;
+export interface ConsentSearchResponse {
+  consents?: Array<Consent>;
+  total?: number;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface JWTVendResponse {
-  token?: string;
+export interface RefreshResponse {
 }
 
 /**
- * Theme object for values used in the css variables for simple themes.
+ * Stores an message template used to distribute messages;
  *
- * @author Lyle Schemmerling
+ * @author Michael Sleevi
  */
-export interface SimpleThemeVariables {
-  alertBackgroundColor?: string;
-  alertFontColor?: string;
-  backgroundImageURL?: string;
-  backgroundSize?: string;
-  borderRadius?: string;
-  deleteButtonColor?: string;
-  deleteButtonFocusColor?: string;
-  deleteButtonTextColor?: string;
-  deleteButtonTextFocusColor?: string;
-  errorFontColor?: string;
-  errorIconColor?: string;
-  fontColor?: string;
-  fontFamily?: string;
-  footerDisplay?: boolean;
-  iconBackgroundColor?: string;
-  iconColor?: string;
-  infoIconColor?: string;
-  inputBackgroundColor?: string;
-  inputIconColor?: string;
-  inputTextColor?: string;
-  linkTextColor?: string;
-  linkTextFocusColor?: string;
-  logoImageSize?: string;
-  logoImageURL?: string;
-  monoFontColor?: string;
-  monoFontFamily?: string;
-  pageBackgroundColor?: string;
-  panelBackgroundColor?: string;
-  primaryButtonColor?: string;
-  primaryButtonFocusColor?: string;
-  primaryButtonTextColor?: string;
-  primaryButtonTextFocusColor?: string;
+export interface MessageTemplate {
+  data?: Record<string, any>;
+  id?: UUID;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  name?: string;
+  type?: MessageType;
+}
+
+/**
+ * Models the JWT public key Refresh Token Revoke Event. This event might be for a single
+ * token, a user or an entire application.
+ *
+ * @author Brian Pontarelli
+ */
+export interface JWTPublicKeyUpdateEvent extends BaseEvent {
+  applicationIds?: Array<UUID>;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export enum Sort {
-  asc = "asc",
-  desc = "desc"
+export interface DeviceUserCodeResponse {
+  client_id?: string;
+  deviceInfo?: DeviceInfo;
+  expires_in?: number;
+  pendingIdPLink?: PendingIdPLink;
+  scope?: string;
+  tenantId?: UUID;
+  user_code?: string;
 }
 
 /**
- * Event to indicate an audit log was created.
+ * Models an entity type that has a specific set of permissions. These are global objects and can be used across tenants.
  *
+ * @author Brian Pontarelli
+ */
+export interface EntityType {
+  data?: Record<string, any>;
+  id?: UUID;
+  insertInstant?: number;
+  jwtConfiguration?: EntityJWTConfiguration;
+  lastUpdateInstant?: number;
+  name?: string;
+  permissions?: Array<EntityTypePermission>;
+}
+
+/**
  * @author Daniel DeGroff
  */
-export interface AuditLogCreateEvent extends BaseEvent {
-  auditLog?: AuditLog;
+export enum IdentityProviderType {
+  Apple = "Apple",
+  EpicGames = "EpicGames",
+  ExternalJWT = "ExternalJWT",
+  Facebook = "Facebook",
+  Google = "Google",
+  HYPR = "HYPR",
+  LinkedIn = "LinkedIn",
+  Nintendo = "Nintendo",
+  OpenIDConnect = "OpenIDConnect",
+  SAMLv2 = "SAMLv2",
+  SAMLv2IdPInitiated = "SAMLv2IdPInitiated",
+  SonyPSN = "SonyPSN",
+  Steam = "Steam",
+  Twitch = "Twitch",
+  Twitter = "Twitter",
+  Xbox = "Xbox"
 }
 
 /**
- * Describes the authenticator attachment modality preference for a WebAuthn workflow. See {@link AuthenticatorAttachment}
- *
- * @author Spencer Witt
+ * @author Seth Musselman
  */
-export enum AuthenticatorAttachmentPreference {
-  any = "any",
-  platform = "platform",
-  crossPlatform = "crossPlatform"
+export interface PreviewResponse {
+  email?: Email;
+  errors?: Errors;
 }
 
 /**
- * User API bulk response object.
+ * Event to indicate kickstart has been successfully completed.
  *
- * @author Trevor Smith
+ * @author Daniel DeGroff
  */
-export interface UserDeleteResponse {
-  dryRun?: boolean;
-  hardDelete?: boolean;
-  total?: number;
-  userIds?: Array<UUID>;
+export interface KickstartSuccessEvent extends BaseEvent {
+  instanceId?: UUID;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface TwoFactorStartResponse {
-  code?: string;
-  methods?: Array<TwoFactorMethod>;
-  twoFactorId?: string;
+export enum SystemTrustedProxyConfigurationPolicy {
+  All = "All",
+  OnlyConfigured = "OnlyConfigured"
 }
 
 /**
- * User Action Reason API response object.
- *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface UserActionReasonResponse {
-  userActionReason?: UserActionReason;
-  userActionReasons?: Array<UserActionReason>;
+export interface TenantUsernameConfiguration {
+  unique?: UniqueUsernameConfiguration;
 }
 
 /**
- * Models the User Event (and can be converted to JSON) that is used for all user modifications (create, update,
- * delete).
- *
- * @author Brian Pontarelli
+ * Interface for all identity providers that are passwordless and do not accept a password.
  */
-export interface UserDeleteEvent extends BaseUserEvent {
+export interface PasswordlessIdentityProvider {
 }
 
 /**
- * An expandable API request.
- *
  * @author Daniel DeGroff
  */
-export interface ExpandableRequest {
-  expand?: Array<string>;
+export interface PasswordBreachDetection extends Enableable {
+  matchMode?: BreachMatchMode;
+  notifyUserEmailTemplateId?: UUID;
+  onLogin?: BreachAction;
 }
 
 /**
- * API response for User consent.
+ * Base class for all FusionAuth events.
  *
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface UserConsentRequest {
-  userConsent?: UserConsent;
+export interface BaseEvent {
+  createInstant?: number;
+  id?: UUID;
+  info?: EventInfo;
+  tenantId?: UUID;
+  type?: EventType;
 }
 
 /**
- * @author Rob Davis
+ * @author Daniel DeGroff
  */
-export interface TenantSCIMServerConfiguration extends Enableable {
-  clientEntityTypeId?: UUID;
-  schemas?: Record<string, any>;
-  serverEntityTypeId?: UUID;
+export interface EmailHeader {
+  name?: string;
+  value?: string;
 }
 
 /**
- * Theme API request object.
+ * The FormField API request object.
  *
- * @author Trevor Smith
+ * @author Brett Guy
  */
-export interface ThemeRequest {
-  sourceThemeId?: UUID;
-  theme?: Theme;
+export interface FormFieldRequest {
+  field?: FormField;
+  fields?: Array<FormField>;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface OAuthConfigurationResponse {
-  httpSessionMaxInactiveInterval?: number;
-  logoutURL?: string;
-  oauthConfiguration?: OAuth2Configuration;
+export interface TwoFactorMethod {
+  authenticator?: AuthenticatorConfiguration;
+  email?: string;
+  id?: string;
+  lastUsed?: boolean;
+  method?: string;
+  mobilePhone?: string;
+  secret?: string;
 }
 
 /**
- * @author Daniel DeGroff
+ * Models the event types that FusionAuth produces.
+ *
+ * @author Brian Pontarelli
  */
-export interface ExternalIdentifierConfiguration {
-  authorizationGrantIdTimeToLiveInSeconds?: number;
-  changePasswordIdGenerator?: SecureGeneratorConfiguration;
-  changePasswordIdTimeToLiveInSeconds?: number;
-  deviceCodeTimeToLiveInSeconds?: number;
-  deviceUserCodeIdGenerator?: SecureGeneratorConfiguration;
-  emailVerificationIdGenerator?: SecureGeneratorConfiguration;
-  emailVerificationIdTimeToLiveInSeconds?: number;
-  emailVerificationOneTimeCodeGenerator?: SecureGeneratorConfiguration;
-  externalAuthenticationIdTimeToLiveInSeconds?: number;
-  loginIntentTimeToLiveInSeconds?: number;
-  oneTimePasswordTimeToLiveInSeconds?: number;
-  passwordlessLoginGenerator?: SecureGeneratorConfiguration;
-  passwordlessLoginTimeToLiveInSeconds?: number;
-  pendingAccountLinkTimeToLiveInSeconds?: number;
-  registrationVerificationIdGenerator?: SecureGeneratorConfiguration;
-  registrationVerificationIdTimeToLiveInSeconds?: number;
-  registrationVerificationOneTimeCodeGenerator?: SecureGeneratorConfiguration;
-  rememberOAuthScopeConsentChoiceTimeToLiveInSeconds?: number;
-  samlv2AuthNRequestIdTimeToLiveInSeconds?: number;
-  setupPasswordIdGenerator?: SecureGeneratorConfiguration;
-  setupPasswordIdTimeToLiveInSeconds?: number;
-  trustTokenTimeToLiveInSeconds?: number;
-  twoFactorIdTimeToLiveInSeconds?: number;
-  twoFactorOneTimeCodeIdGenerator?: SecureGeneratorConfiguration;
-  twoFactorOneTimeCodeIdTimeToLiveInSeconds?: number;
-  twoFactorTrustIdTimeToLiveInSeconds?: number;
-  webAuthnAuthenticationChallengeTimeToLiveInSeconds?: number;
-  webAuthnRegistrationChallengeTimeToLiveInSeconds?: number;
+export enum EventType {
+  JWTPublicKeyUpdate = "jwt.public-key.update",
+  JWTRefreshTokenRevoke = "jwt.refresh-token.revoke",
+  JWTRefresh = "jwt.refresh",
+  AuditLogCreate = "audit-log.create",
+  EventLogCreate = "event-log.create",
+  KickstartSuccess = "kickstart.success",
+  GroupCreate = "group.create",
+  GroupCreateComplete = "group.create.complete",
+  GroupDelete = "group.delete",
+  GroupDeleteComplete = "group.delete.complete",
+  GroupMemberAdd = "group.member.add",
+  GroupMemberAddComplete = "group.member.add.complete",
+  GroupMemberRemove = "group.member.remove",
+  GroupMemberRemoveComplete = "group.member.remove.complete",
+  GroupMemberUpdate = "group.member.update",
+  GroupMemberUpdateComplete = "group.member.update.complete",
+  GroupUpdate = "group.update",
+  GroupUpdateComplete = "group.update.complete",
+  UserAction = "user.action",
+  UserBulkCreate = "user.bulk.create",
+  UserCreate = "user.create",
+  UserCreateComplete = "user.create.complete",
+  UserDeactivate = "user.deactivate",
+  UserDelete = "user.delete",
+  UserDeleteComplete = "user.delete.complete",
+  UserEmailUpdate = "user.email.update",
+  UserEmailVerified = "user.email.verified",
+  UserIdentityProviderLink = "user.identity-provider.link",
+  UserIdentityProviderUnlink = "user.identity-provider.unlink",
+  UserLoginIdDuplicateOnCreate = "user.loginId.duplicate.create",
+  UserLoginIdDuplicateOnUpdate = "user.loginId.duplicate.update",
+  UserLoginFailed = "user.login.failed",
+  UserLoginNewDevice = "user.login.new-device",
+  UserLoginSuccess = "user.login.success",
+  UserLoginSuspicious = "user.login.suspicious",
+  UserPasswordBreach = "user.password.breach",
+  UserPasswordResetSend = "user.password.reset.send",
+  UserPasswordResetStart = "user.password.reset.start",
+  UserPasswordResetSuccess = "user.password.reset.success",
+  UserPasswordUpdate = "user.password.update",
+  UserReactivate = "user.reactivate",
+  UserRegistrationCreate = "user.registration.create",
+  UserRegistrationCreateComplete = "user.registration.create.complete",
+  UserRegistrationDelete = "user.registration.delete",
+  UserRegistrationDeleteComplete = "user.registration.delete.complete",
+  UserRegistrationUpdate = "user.registration.update",
+  UserRegistrationUpdateComplete = "user.registration.update.complete",
+  UserRegistrationVerified = "user.registration.verified",
+  UserTwoFactorMethodAdd = "user.two-factor.method.add",
+  UserTwoFactorMethodRemove = "user.two-factor.method.remove",
+  UserUpdate = "user.update",
+  UserUpdateComplete = "user.update.complete",
+  Test = "test"
 }
 
 /**
- * Defines valid credential types. This is an extension point in the WebAuthn spec. The only defined value at this time is "public-key"
+ * Tenant search response
  *
- * @author Spencer Witt
+ * @author Mark Manes
  */
-export enum PublicKeyCredentialType {
-  publicKey = "public-key"
+export interface TenantSearchResponse {
+  tenants?: Array<Tenant>;
+  total?: number;
 }
 
 /**
- * This class is the entity query. It provides a build pattern as well as public fields for use on forms and in actions.
+ * Search API request.
  *
  * @author Brian Pontarelli
  */
-export interface EntitySearchCriteria extends BaseElasticSearchCriteria {
+export interface SearchRequest extends ExpandableRequest {
+  search?: UserSearchCriteria;
 }
 
 /**
- * @author Seth Musselman
+ * Lambda search response
+ *
+ * @author Mark Manes
  */
-export interface PreviewResponse {
-  email?: Email;
-  errors?: Errors;
+export interface LambdaSearchResponse {
+  lambdas?: Array<Lambda>;
+  total?: number;
 }
 
-/**
- * @author Brett Pontarelli
- */
-export interface EpicGamesApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
-  buttonText?: string;
-  client_id?: string;
-  client_secret?: string;
-  scope?: string;
+export interface Templates {
+  accountEdit?: string;
+  accountIndex?: string;
+  accountTwoFactorDisable?: string;
+  accountTwoFactorEnable?: string;
+  accountTwoFactorIndex?: string;
+  accountWebAuthnAdd?: string;
+  accountWebAuthnDelete?: string;
+  accountWebAuthnIndex?: string;
+  confirmationRequired?: string;
+  emailComplete?: string;
+  emailSend?: string;
+  emailSent?: string;
+  emailVerificationRequired?: string;
+  emailVerify?: string;
+  helpers?: string;
+  index?: string;
+  oauth2Authorize?: string;
+  oauth2AuthorizedNotRegistered?: string;
+  oauth2ChildRegistrationNotAllowed?: string;
+  oauth2ChildRegistrationNotAllowedComplete?: string;
+  oauth2CompleteRegistration?: string;
+  oauth2Consent?: string;
+  oauth2Device?: string;
+  oauth2DeviceComplete?: string;
+  oauth2Error?: string;
+  oauth2Logout?: string;
+  oauth2Passwordless?: string;
+  oauth2Register?: string;
+  oauth2StartIdPLink?: string;
+  oauth2TwoFactor?: string;
+  oauth2TwoFactorEnable?: string;
+  oauth2TwoFactorEnableComplete?: string;
+  oauth2TwoFactorMethods?: string;
+  oauth2Wait?: string;
+  oauth2WebAuthn?: string;
+  oauth2WebAuthnReauth?: string;
+  oauth2WebAuthnReauthEnable?: string;
+  passwordChange?: string;
+  passwordComplete?: string;
+  passwordForgot?: string;
+  passwordSent?: string;
+  registrationComplete?: string;
+  registrationSend?: string;
+  registrationSent?: string;
+  registrationVerificationRequired?: string;
+  registrationVerify?: string;
+  samlv2Logout?: string;
+  unauthorized?: string;
 }
 
 /**
- * OpenID Connect Configuration as described by the <a href="https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata">OpenID
- * Provider Metadata</a>.
+ * Search request for Lambdas
  *
- * @author Daniel DeGroff
+ * @author Mark Manes
  */
-export interface OpenIdConfiguration {
-  authorization_endpoint?: string;
-  backchannel_logout_supported?: boolean;
-  claims_supported?: Array<string>;
-  device_authorization_endpoint?: string;
-  end_session_endpoint?: string;
-  frontchannel_logout_supported?: boolean;
-  grant_types_supported?: Array<string>;
-  id_token_signing_alg_values_supported?: Array<string>;
-  issuer?: string;
-  jwks_uri?: string;
-  response_modes_supported?: Array<string>;
-  response_types_supported?: Array<string>;
-  scopes_supported?: Array<string>;
-  subject_types_supported?: Array<string>;
-  token_endpoint?: string;
-  token_endpoint_auth_methods_supported?: Array<string>;
-  userinfo_endpoint?: string;
-  userinfo_signing_alg_values_supported?: Array<string>;
+export interface LambdaSearchRequest {
+  search?: LambdaSearchCriteria;
 }
 
 /**
- * COSE Elliptic Curve identifier to determine which elliptic curve to use with a given key
+ * Models the User Password Reset Send Event.
  *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export enum CoseEllipticCurve {
-  Reserved = "Reserved",
-  P256 = "P256",
-  P384 = "P384",
-  P521 = "P521",
-  X25519 = "X25519",
-  X448 = "X448",
-  Ed25519 = "Ed25519",
-  Ed448 = "Ed448",
-  Secp256k1 = "Secp256k1"
+export interface UserPasswordResetSendEvent extends BaseUserEvent {
 }
 
 /**
- * Form response.
+ * The Integration Request
  *
  * @author Daniel DeGroff
  */
-export interface FormResponse {
-  form?: Form;
-  forms?: Array<Form>;
+export interface IntegrationRequest {
+  integrations?: Integrations;
 }
 
-// Do not require a setter for 'type', it is defined by the concrete class and is not mutable
-export interface BaseIdentityProvider<D extends BaseIdentityProviderApplicationConfiguration> extends Enableable {
-  applicationConfiguration?: Record<UUID, D>;
-  data?: Record<string, any>;
-  debug?: boolean;
-  id?: UUID;
-  insertInstant?: number;
-  lambdaConfiguration?: LambdaConfiguration;
-  lastUpdateInstant?: number;
-  linkingStrategy?: IdentityProviderLinkingStrategy;
-  name?: string;
-  tenantConfiguration?: Record<UUID, IdentityProviderTenantConfiguration>;
-  type?: IdentityProviderType;
+export enum TOTPAlgorithm {
+  HmacSHA1 = "HmacSHA1",
+  HmacSHA256 = "HmacSHA256",
+  HmacSHA512 = "HmacSHA512"
 }
 
-export interface LambdaConfiguration {
-  reconcileId?: UUID;
+export enum LDAPSecurityMethod {
+  None = "None",
+  LDAPS = "LDAPS",
+  StartTLS = "StartTLS"
 }
 
 /**
+ * User API delete request object.
+ *
  * @author Daniel DeGroff
  */
-export interface ValidateResponse {
-  jwt?: JWT;
+export interface UserDeleteRequest extends BaseEventRequest {
+  dryRun?: boolean;
+  hardDelete?: boolean;
+  limit?: number;
+  query?: string;
+  queryString?: string;
+  userIds?: Array<UUID>;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface VerifyRegistrationResponse {
-  oneTimeCode?: string;
-  verificationId?: string;
+export interface IdentityProviderStartLoginRequest extends BaseLoginRequest {
+  data?: Record<string, string>;
+  identityProviderId?: UUID;
+  loginId?: string;
+  state?: Record<string, any>;
 }
 
-/**
- * @author Daniel DeGroff
- */
-export interface LoginRecordSearchCriteria extends BaseSearchCriteria {
-  applicationId?: UUID;
-  end?: number;
-  start?: number;
-  userId?: UUID;
+export enum UniqueUsernameStrategy {
+  Always = "Always",
+  OnCollision = "OnCollision"
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface OAuthResponse {
+export interface ExternalJWTApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
 }
 
 /**
- * Domain for a public key, key pair or an HMAC secret. This is used by KeyMaster to manage keys for JWTs, SAML, etc.
- *
  * @author Brian Pontarelli
  */
-export interface Key {
-  algorithm?: KeyAlgorithm;
-  certificate?: string;
-  certificateInformation?: CertificateInformation;
-  expirationInstant?: number;
-  hasPrivateKey?: boolean;
-  id?: UUID;
-  insertInstant?: number;
-  issuer?: string;
-  kid?: string;
-  lastUpdateInstant?: number;
-  length?: number;
-  name?: string;
-  privateKey?: string;
-  publicKey?: string;
-  secret?: string;
-  type?: KeyType;
-}
-
-export enum KeyAlgorithm {
-  ES256 = "ES256",
-  ES384 = "ES384",
-  ES512 = "ES512",
-  HS256 = "HS256",
-  HS384 = "HS384",
-  HS512 = "HS512",
-  RS256 = "RS256",
-  RS384 = "RS384",
-  RS512 = "RS512"
-}
-
-export enum KeyType {
-  EC = "EC",
-  RSA = "RSA",
-  HMAC = "HMAC"
-}
-
-export interface CertificateInformation {
-  issuer?: string;
-  md5Fingerprint?: string;
-  serialNumber?: string;
-  sha1Fingerprint?: string;
-  sha1Thumbprint?: string;
-  sha256Fingerprint?: string;
-  sha256Thumbprint?: string;
-  subject?: string;
-  validFrom?: number;
-  validTo?: number;
+export interface LoginResponse {
+  actions?: Array<LoginPreventedResponse>;
+  changePasswordId?: string;
+  changePasswordReason?: ChangePasswordReason;
+  configurableMethods?: Array<string>;
+  emailVerificationId?: string;
+  methods?: Array<TwoFactorMethod>;
+  pendingIdPLinkId?: string;
+  refreshToken?: string;
+  refreshTokenId?: UUID;
+  registrationVerificationId?: string;
+  state?: Record<string, any>;
+  threatsDetected?: Array<AuthenticationThreats>;
+  token?: string;
+  tokenExpirationInstant?: number;
+  trustToken?: string;
+  twoFactorId?: string;
+  twoFactorTrustId?: string;
+  user?: User;
 }
 
 /**
- * Search criteria for entity grants.
+ * The Application Scope API response.
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export interface EntityGrantSearchCriteria extends BaseSearchCriteria {
-  entityId?: UUID;
-  name?: string;
-  userId?: UUID;
+export interface ApplicationOAuthScopeResponse {
+  scope?: ApplicationOAuthScope;
 }
 
 /**
- * Controls the policy for requesting user permission to grant access to requested scopes during an OAuth workflow
- * for a third-party application.
+ * Search API response.
  *
- * @author Spencer Witt
+ * @author Brian Pontarelli
  */
-export enum OAuthScopeConsentMode {
-  AlwaysPrompt = "AlwaysPrompt",
-  RememberDecision = "RememberDecision",
-  NeverPrompt = "NeverPrompt"
+export interface SearchResponse extends ExpandableResponse {
+  nextResults?: string;
+  total?: number;
+  users?: Array<User>;
 }
 
 /**
- * @author Trevor Smith
+ * @author Daniel DeGroff
  */
-export interface ConnectorResponse {
-  connector?: BaseConnectorConfiguration;
-  connectors?: Array<BaseConnectorConfiguration>;
+export interface SendResponse {
+  anonymousResults?: Record<string, EmailTemplateErrors>;
+  results?: Record<UUID, EmailTemplateErrors>;
 }
 
 /**
- * Models the FusionAuth connector.
- *
- * @author Trevor Smith
+ * @author Daniel DeGroff
  */
-export interface FusionAuthConnectorConfiguration extends BaseConnectorConfiguration {
+export interface SystemLogsExportRequest extends BaseExportRequest {
+  includeArchived?: boolean;
+  lastNBytes?: number;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface RefreshTokenSlidingWindowConfiguration {
-  maximumTimeToLiveInMinutes?: number;
+export interface ReactorMetricsResponse {
+  metrics?: ReactorMetrics;
 }
 
 /**
- * Search request for Themes.
+ * Location information. Useful for IP addresses and other displayable data objects.
  *
- * @author Mark Manes
+ * @author Brian Pontarelli
  */
-export interface ThemeSearchRequest {
-  search?: ThemeSearchCriteria;
+export interface Location {
+  city?: string;
+  country?: string;
+  displayString?: string;
+  latitude?: number;
+  longitude?: number;
+  region?: string;
+  zipcode?: string;
 }
 
 /**
- * Search request for Consents
- *
- * @author Spencer Witt
+ * @author Brett Guy
  */
-export interface ConsentSearchRequest {
-  search?: ConsentSearchCriteria;
+export interface TenantAccessControlConfiguration {
+  uiIPAccessControlListId?: UUID;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export enum ObjectState {
-  Active = "Active",
-  Inactive = "Inactive",
-  PendingDelete = "PendingDelete"
+export interface TenantResponse {
+  tenant?: Tenant;
+  tenants?: Array<Tenant>;
 }
 
 /**
- * Search request for Identity Providers
- *
- * @author Spencer Witt
+ * @author Brett Guy
  */
-export interface IdentityProviderSearchRequest {
-  search?: IdentityProviderSearchCriteria;
+export interface TwilioMessengerConfiguration extends BaseMessengerConfiguration {
+  accountSID?: string;
+  authToken?: string;
+  fromPhoneNumber?: string;
+  messagingServiceSid?: string;
+  url?: string;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface RefreshTokenRevocationPolicy {
-  onLoginPrevented?: boolean;
-  onMultiFactorEnable?: boolean;
-  onPasswordChanged?: boolean;
+export enum VerificationStrategy {
+  ClickableLink = "ClickableLink",
+  FormField = "FormField"
 }
 
 /**
- * Models a family grouping of users.
+ * Model a user event when a two-factor method has been removed.
  *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface Family {
-  id?: UUID;
-  insertInstant?: number;
-  lastUpdateInstant?: number;
-  members?: Array<FamilyMember>;
+export interface UserTwoFactorMethodAddEvent extends BaseUserEvent {
+  method?: TwoFactorMethod;
 }
 
 /**
- * The Application Scope API response.
+ * API request to start a WebAuthn registration ceremony
  *
  * @author Spencer Witt
  */
-export interface ApplicationOAuthScopeResponse {
-  scope?: ApplicationOAuthScope;
+export interface WebAuthnRegisterStartRequest {
+  displayName?: string;
+  name?: string;
+  userAgent?: string;
+  userId?: UUID;
+  workflow?: WebAuthnWorkflow;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface OAuth2Configuration {
-  authorizedOriginURLs?: Array<string>;
-  authorizedRedirectURLs?: Array<string>;
-  authorizedURLValidationPolicy?: Oauth2AuthorizedURLValidationPolicy;
-  clientAuthenticationPolicy?: ClientAuthenticationPolicy;
-  clientId?: string;
-  clientSecret?: string;
-  consentMode?: OAuthScopeConsentMode;
-  debug?: boolean;
-  deviceVerificationURL?: string;
-  enabledGrants?: Array<GrantType>;
-  generateRefreshTokens?: boolean;
-  logoutBehavior?: LogoutBehavior;
-  logoutURL?: string;
-  proofKeyForCodeExchangePolicy?: ProofKeyForCodeExchangePolicy;
-  providedScopePolicy?: ProvidedScopePolicy;
-  relationship?: OAuthApplicationRelationship;
-  requireClientAuthentication?: boolean;
-  requireRegistration?: boolean;
-  scopeHandlingPolicy?: OAuthScopeHandlingPolicy;
-  unknownScopePolicy?: UnknownScopePolicy;
-}
-
-/**
- * Interface for all identity providers that are passwordless and do not accept a password.
- */
-export interface PasswordlessIdentityProvider {
+export interface MaximumPasswordAge extends Enableable {
+  days?: number;
 }
 
 /**
- * A log for an event that happened to a User.
- *
- * @author Brian Pontarelli
+ * @author Brett Guy
  */
-export interface UserComment {
-  comment?: string;
-  commenterId?: UUID;
-  id?: UUID;
-  insertInstant?: number;
-  userId?: UUID;
+export interface IPAccessControlEntry {
+  action?: IPAccessControlEntryAction;
+  endIPAddress?: string;
+  startIPAddress?: string;
 }
 
 /**
- * Models the Group Created Event.
+ * Models the Group Member Update Event.
  *
  * @author Daniel DeGroff
  */
-export interface GroupCreateCompleteEvent extends BaseGroupEvent {
+export interface GroupMemberUpdateEvent extends BaseGroupEvent {
+  members?: Array<GroupMember>;
 }
 
 /**
- * @author Brett Pontarelli
+ * Models the User Deactivate Event.
+ *
+ * @author Brian Pontarelli
  */
-export interface TenantSSOConfiguration {
-  deviceTrustTimeToLiveInSeconds?: number;
+export interface UserDeactivateEvent extends BaseUserEvent {
 }
 
 /**
- * @author Daniel DeGroff
+ * Search criteria for the webhook event log.
+ *
+ * @author Spencer Witt
  */
-export interface TwoFactorMethod {
-  authenticator?: AuthenticatorConfiguration;
-  email?: string;
-  id?: string;
-  lastUsed?: boolean;
-  method?: string;
-  mobilePhone?: string;
-  secret?: string;
+export interface WebhookEventLogSearchCriteria extends BaseSearchCriteria {
+  end?: number;
+  event?: string;
+  eventResult?: WebhookEventResult;
+  eventType?: EventType;
+  start?: number;
 }
 
 /**
- * Search criteria for Tenants
+ * Group Member Response
  *
- * @author Mark Manes
+ * @author Daniel DeGroff
  */
-export interface TenantSearchCriteria extends BaseSearchCriteria {
-  name?: string;
+export interface MemberResponse {
+  members?: Record<UUID, Array<GroupMember>>;
 }
 
 /**
- * Models the User Identity Provider Link Event.
+ * Webhook event log search request.
  *
- * @author Rob Davis
+ * @author Spencer Witt
  */
-export interface UserIdentityProviderLinkEvent extends BaseUserEvent {
-  identityProviderLink?: IdentityProviderLink;
+export interface WebhookEventLogSearchRequest {
+  search?: WebhookEventLogSearchCriteria;
 }
 
 /**
- * @author Michael Sleevi
+ * API response for completing WebAuthn assertion
+ *
+ * @author Spencer Witt
  */
-export interface PreviewMessageTemplateRequest {
-  locale?: string;
-  messageTemplate?: MessageTemplate;
+export interface WebAuthnAssertResponse {
+  credential?: WebAuthnCredential;
 }
 
 /**
- * Login API request object used for login to third-party systems (i.e. Login with Facebook).
- *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface IdentityProviderLoginRequest extends BaseLoginRequest {
-  data?: Record<string, string>;
-  encodedJWT?: string;
-  identityProviderId?: UUID;
-  noLink?: boolean;
+export enum SecureGeneratorType {
+  randomDigits = "randomDigits",
+  randomBytes = "randomBytes",
+  randomAlpha = "randomAlpha",
+  randomAlphaNumeric = "randomAlphaNumeric"
 }
 
 /**
- * An action that can be executed on a user (discipline or reward potentially).
+ * XML canonicalization method enumeration. This is used for the IdP and SP side of FusionAuth SAML.
  *
  * @author Brian Pontarelli
  */
-export interface UserAction {
-  active?: boolean;
-  cancelEmailTemplateId?: UUID;
-  endEmailTemplateId?: UUID;
-  id?: UUID;
-  includeEmailInEventJSON?: boolean;
-  insertInstant?: number;
-  lastUpdateInstant?: number;
-  localizedNames?: LocalizedStrings;
-  modifyEmailTemplateId?: UUID;
-  name?: string;
-  options?: Array<UserActionOption>;
-  preventLogin?: boolean;
-  sendEndEvent?: boolean;
-  startEmailTemplateId?: UUID;
-  temporal?: boolean;
-  transactionType?: TransactionType;
-  userEmailingEnabled?: boolean;
-  userNotificationsEnabled?: boolean;
+export enum CanonicalizationMethod {
+  exclusive = "exclusive",
+  exclusive_with_comments = "exclusive_with_comments",
+  inclusive = "inclusive",
+  inclusive_with_comments = "inclusive_with_comments"
 }
 
 /**
- * @author Trevor Smith
+ * Search criteria for themes
+ *
+ * @author Mark Manes
  */
-export interface Theme {
-  data?: Record<string, any>;
-  defaultMessages?: string;
-  id?: UUID;
-  insertInstant?: number;
-  lastUpdateInstant?: number;
-  localizedMessages?: LocalizedStrings;
+export interface ThemeSearchCriteria extends BaseSearchCriteria {
   name?: string;
-  stylesheet?: string;
-  templates?: Templates;
   type?: ThemeType;
-  variables?: SimpleThemeVariables;
 }
 
-export interface Templates {
-  accountEdit?: string;
-  accountIndex?: string;
-  accountTwoFactorDisable?: string;
-  accountTwoFactorEnable?: string;
-  accountTwoFactorIndex?: string;
-  accountWebAuthnAdd?: string;
-  accountWebAuthnDelete?: string;
-  accountWebAuthnIndex?: string;
-  confirmationRequired?: string;
-  emailComplete?: string;
-  emailSend?: string;
-  emailSent?: string;
-  emailVerificationRequired?: string;
-  emailVerify?: string;
-  helpers?: string;
-  index?: string;
-  oauth2Authorize?: string;
-  oauth2AuthorizedNotRegistered?: string;
-  oauth2ChildRegistrationNotAllowed?: string;
-  oauth2ChildRegistrationNotAllowedComplete?: string;
-  oauth2CompleteRegistration?: string;
-  oauth2Consent?: string;
-  oauth2Device?: string;
-  oauth2DeviceComplete?: string;
-  oauth2Error?: string;
-  oauth2Logout?: string;
-  oauth2Passwordless?: string;
-  oauth2Register?: string;
-  oauth2StartIdPLink?: string;
-  oauth2TwoFactor?: string;
-  oauth2TwoFactorEnable?: string;
-  oauth2TwoFactorEnableComplete?: string;
-  oauth2TwoFactorMethods?: string;
-  oauth2Wait?: string;
-  oauth2WebAuthn?: string;
-  oauth2WebAuthnReauth?: string;
-  oauth2WebAuthnReauthEnable?: string;
-  passwordChange?: string;
-  passwordComplete?: string;
-  passwordForgot?: string;
-  passwordSent?: string;
-  registrationComplete?: string;
-  registrationSend?: string;
-  registrationSent?: string;
-  registrationVerificationRequired?: string;
-  registrationVerify?: string;
-  samlv2Logout?: string;
-  unauthorized?: string;
+/**
+ * @author Daniel DeGroff
+ */
+export enum RateLimitedRequestType {
+  FailedLogin = "FailedLogin",
+  ForgotPassword = "ForgotPassword",
+  SendEmailVerification = "SendEmailVerification",
+  SendPasswordless = "SendPasswordless",
+  SendRegistrationVerification = "SendRegistrationVerification",
+  SendTwoFactor = "SendTwoFactor"
 }
 
 /**
  * @author Daniel DeGroff
  */
-export enum IdentityProviderType {
-  Apple = "Apple",
-  EpicGames = "EpicGames",
-  ExternalJWT = "ExternalJWT",
-  Facebook = "Facebook",
-  Google = "Google",
-  HYPR = "HYPR",
-  LinkedIn = "LinkedIn",
-  Nintendo = "Nintendo",
-  OpenIDConnect = "OpenIDConnect",
-  SAMLv2 = "SAMLv2",
-  SAMLv2IdPInitiated = "SAMLv2IdPInitiated",
-  SonyPSN = "SonyPSN",
-  Steam = "Steam",
-  Twitch = "Twitch",
-  Twitter = "Twitter",
-  Xbox = "Xbox"
+export interface LoginHintConfiguration extends Enableable {
+  parameterName?: string;
 }
 
 /**
- * @author Brett Guy
+ * Controls the policy for whether OAuth workflows will more strictly adhere to the OAuth and OIDC specification
+ * or run in backwards compatibility mode.
+ *
+ * @author David Charles
  */
-export interface IPAccessControlList {
-  data?: Record<string, any>;
-  entries?: Array<IPAccessControlEntry>;
-  id?: UUID;
-  insertInstant?: number;
-  lastUpdateInstant?: number;
-  name?: string;
+export enum OAuthScopeHandlingPolicy {
+  Compatibility = "Compatibility",
+  Strict = "Strict"
 }
 
 /**
- * @author Daniel DeGroff
+ * API request for managing families and members.
+ *
+ * @author Brian Pontarelli
  */
-export enum VerificationStrategy {
-  ClickableLink = "ClickableLink",
-  FormField = "FormField"
+export interface FamilyRequest {
+  familyMember?: FamilyMember;
 }
 
 /**
- * This class contains the managed fields that are also put into the database during FusionAuth setup.
- * <p>
- * Internal Note: These fields are also declared in SQL in order to bootstrap the system. These need to stay in sync.
- * Any changes to these fields needs to also be reflected in mysql.sql and postgresql.sql
+ * @author Matthew Altman
+ */
+export enum LogoutBehavior {
+  RedirectOnly = "RedirectOnly",
+  AllApplications = "AllApplications"
+}
+
+/**
+ * The response from the total report. This report stores the total numbers for each application.
  *
  * @author Brian Pontarelli
  */
-export interface ManagedFields {
+export interface TotalsReportResponse {
+  applicationTotals?: Record<UUID, Totals>;
+  globalRegistrations?: number;
+  totalGlobalRegistrations?: number;
 }
 
 /**
- * Webhook event log search request.
+ * A historical state of a user log event. Since events can be modified, this stores the historical state.
  *
- * @author Spencer Witt
+ * @author Brian Pontarelli
  */
-export interface WebhookEventLogSearchRequest {
-  search?: WebhookEventLogSearchCriteria;
+export interface LogHistory {
+  historyItems?: Array<HistoryItem>;
 }
 
 /**
+ * Models the User Create Registration Event.
+ *
  * @author Daniel DeGroff
  */
-export interface AuthenticatorConfiguration {
-  algorithm?: TOTPAlgorithm;
-  codeLength?: number;
-  timeStep?: number;
-}
-
-export enum TOTPAlgorithm {
-  HmacSHA1 = "HmacSHA1",
-  HmacSHA256 = "HmacSHA256",
-  HmacSHA512 = "HmacSHA512"
+export interface UserRegistrationCreateEvent extends BaseUserEvent {
+  applicationId?: UUID;
+  registration?: UserRegistration;
 }
 
 /**
- * Models action reasons.
+ * Search request for Applications
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export interface UserActionReason {
-  code?: string;
-  id?: UUID;
-  insertInstant?: number;
-  lastUpdateInstant?: number;
-  localizedTexts?: LocalizedStrings;
-  text?: string;
+export interface ApplicationSearchRequest extends ExpandableRequest {
+  search?: ApplicationSearchCriteria;
 }
 
 /**
- * A User's WebAuthnCredential. Contains all data required to complete WebAuthn authentication ceremonies.
+ * A webhook call response.
  *
  * @author Spencer Witt
  */
-export interface WebAuthnCredential {
-  algorithm?: CoseAlgorithmIdentifier;
-  attestationType?: AttestationType;
-  authenticatorSupportsUserVerification?: boolean;
-  credentialId?: string;
-  data?: Record<string, any>;
-  discoverable?: boolean;
-  displayName?: string;
-  id?: UUID;
-  insertInstant?: number;
-  lastUseInstant?: number;
-  name?: string;
-  publicKey?: string;
-  relyingPartyId?: string;
-  signCount?: number;
-  tenantId?: UUID;
-  transports?: Array<string>;
-  userAgent?: string;
-  userId?: UUID;
+export interface WebhookCallResponse {
+  exception?: string;
+  statusCode?: number;
+  url?: string;
 }
 
 /**
+ * API request for User consent types.
+ *
  * @author Daniel DeGroff
  */
-export interface TestEvent extends BaseEvent {
-  message?: string;
+export interface ConsentRequest {
+  consent?: Consent;
 }
 
 /**
- * Models the Refresh Token Revoke Event. This event might be for a single token, a user
- * or an entire application.
- *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface JWTRefreshTokenRevokeEvent extends BaseEvent {
-  applicationId?: UUID;
-  applicationTimeToLiveInSeconds?: Record<UUID, number>;
-  refreshToken?: RefreshToken;
-  user?: User;
-  userId?: UUID;
+export interface FacebookApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
+  appId?: string;
+  buttonText?: string;
+  client_secret?: string;
+  fields?: string;
+  loginMethod?: IdentityProviderLoginMethod;
+  permissions?: string;
 }
 
 /**
- * @author Trevor Smith
+ * @author Johnathon Wood
  */
-export interface ConnectorPolicy {
-  connectorId?: UUID;
-  data?: Record<string, any>;
-  domains?: Array<string>;
-  migrate?: boolean;
+export enum Oauth2AuthorizedURLValidationPolicy {
+  AllowWildcards = "AllowWildcards",
+  ExactMatch = "ExactMatch"
 }
 
 /**
- * @author Brett Pontarelli
+ * Models content user action options.
+ *
+ * @author Brian Pontarelli
  */
-export enum AuthenticationThreats {
-  ImpossibleTravel = "ImpossibleTravel"
+export interface UserActionOption {
+  localizedNames?: LocalizedStrings;
+  name?: string;
 }
 
 /**
- * Models the User Password Reset Send Event.
+ * Identifies the WebAuthn workflow. This will affect the parameters used for credential creation
+ * and request based on the Tenant configuration.
  *
- * @author Daniel DeGroff
+ * @author Spencer Witt
  */
-export interface UserPasswordResetSendEvent extends BaseUserEvent {
+export enum WebAuthnWorkflow {
+  bootstrap = "bootstrap",
+  general = "general",
+  reauthentication = "reauthentication"
 }
 
 /**
- * Event to indicate kickstart has been successfully completed.
+ * An action that can be executed on a user (discipline or reward potentially).
  *
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface KickstartSuccessEvent extends BaseEvent {
-  instanceId?: UUID;
+export interface UserAction {
+  active?: boolean;
+  cancelEmailTemplateId?: UUID;
+  endEmailTemplateId?: UUID;
+  id?: UUID;
+  includeEmailInEventJSON?: boolean;
+  insertInstant?: number;
+  lastUpdateInstant?: number;
+  localizedNames?: LocalizedStrings;
+  modifyEmailTemplateId?: UUID;
+  name?: string;
+  options?: Array<UserActionOption>;
+  preventLogin?: boolean;
+  sendEndEvent?: boolean;
+  startEmailTemplateId?: UUID;
+  temporal?: boolean;
+  transactionType?: TransactionType;
+  userEmailingEnabled?: boolean;
+  userNotificationsEnabled?: boolean;
 }
 
 /**
- * User API delete request object.
+ * Forgot password response object.
  *
  * @author Daniel DeGroff
  */
-export interface UserDeleteRequest extends BaseEventRequest {
-  dryRun?: boolean;
-  hardDelete?: boolean;
-  limit?: number;
-  query?: string;
-  queryString?: string;
-  userIds?: Array<UUID>;
+export interface ForgotPasswordResponse {
+  changePasswordId?: string;
 }
 
 /**
- * @author Brett Guy
+ * Models the JWT Refresh Event. This event will be fired when a JWT is "refreshed" (generated) using a Refresh Token.
+ *
+ * @author Daniel DeGroff
  */
-export interface TenantAccessControlConfiguration {
-  uiIPAccessControlListId?: UUID;
+export interface JWTRefreshEvent extends BaseEvent {
+  applicationId?: UUID;
+  original?: string;
+  refreshToken?: string;
+  token?: string;
+  userId?: UUID;
 }
 
 /**
- * This class is a simple attachment with a byte array, name and MIME type.
+ * Search results.
  *
  * @author Brian Pontarelli
  */
-export interface Attachment {
-  attachment?: Array<number>;
-  mime?: string;
-  name?: string;
+export interface SearchResults<T> {
+  nextResults?: string;
+  results?: Array<T>;
+  total?: number;
+  totalEqualToActual?: boolean;
 }
 
 /**
- * Interface for any object that can provide JSON Web key Information.
+ * Models a set of localized Strings that can be stored as JSON.
+ *
+ * @author Brian Pontarelli
  */
-export interface JSONWebKeyInfoProvider {
+export interface LocalizedStrings extends Record<string, string> {
 }
 
 /**
- * Tenant-level configuration for WebAuthn
+ * Search request for entities
  *
- * @author Spencer Witt
+ * @author Brett Guy
  */
-export interface TenantWebAuthnConfiguration extends Enableable {
-  bootstrapWorkflow?: TenantWebAuthnWorkflowConfiguration;
-  debug?: boolean;
-  reauthenticationWorkflow?: TenantWebAuthnWorkflowConfiguration;
-  relyingPartyId?: string;
-  relyingPartyName?: string;
+export interface EntitySearchResponse {
+  entities?: Array<Entity>;
+  nextResults?: string;
+  total?: number;
 }
 
 /**
- * Email template request.
- *
- * @author Brian Pontarelli
+ * @author Derek Klatt
  */
-export interface EmailTemplateRequest {
-  emailTemplate?: EmailTemplate;
+export interface PasswordValidationRules {
+  breachDetection?: PasswordBreachDetection;
+  maxLength?: number;
+  minLength?: number;
+  rememberPreviousPasswords?: RememberPreviousPasswords;
+  requireMixedCase?: boolean;
+  requireNonAlpha?: boolean;
+  requireNumber?: boolean;
+  validateOnLogin?: boolean;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface IdentityProviderPendingLinkResponse {
-  identityProviderTenantConfiguration?: IdentityProviderTenantConfiguration;
-  linkCount?: number;
-  pendingIdPLink?: PendingIdPLink;
+export interface SecretResponse {
+  secret?: string;
+  secretBase32Encoded?: string;
 }
 
 /**
+ * Twitter social login provider.
+ *
  * @author Daniel DeGroff
  */
-export interface PasswordlessSendRequest {
-  applicationId?: UUID;
-  code?: string;
-  loginId?: string;
-  state?: Record<string, any>;
+export interface TwitterIdentityProvider extends BaseIdentityProvider<TwitterApplicationConfiguration> {
+  buttonText?: string;
+  consumerKey?: string;
+  consumerSecret?: string;
 }
 
 /**
  * @author Daniel DeGroff
  */
-export interface TenantRegistrationConfiguration {
-  blockedDomains?: Array<string>;
+export interface HYPRIdentityProvider extends BaseIdentityProvider<HYPRApplicationConfiguration> {
+  relyingPartyApplicationId?: string;
+  relyingPartyURL?: string;
 }
 
 /**
+ * Models the User Password Reset Success Event.
+ *
  * @author Daniel DeGroff
  */
-export interface IdentityProviderLink {
-  data?: Record<string, any>;
-  displayName?: string;
-  identityProviderId?: UUID;
-  identityProviderName?: string;
-  identityProviderType?: IdentityProviderType;
-  identityProviderUserId?: string;
-  insertInstant?: number;
-  lastLoginInstant?: number;
-  tenantId?: UUID;
-  token?: string;
-  userId?: UUID;
+export interface UserPasswordResetSuccessEvent extends BaseUserEvent {
 }
 
 /**
- * Registration API request object.
+ * Something that can be required and thus also optional. This currently extends Enableable because anything that is
+ * required/optional is almost always enableable as well.
  *
  * @author Brian Pontarelli
  */
-export interface RegistrationResponse {
-  refreshToken?: string;
-  registration?: UserRegistration;
-  registrationVerificationId?: string;
-  registrationVerificationOneTimeCode?: string;
-  token?: string;
-  tokenExpirationInstant?: number;
-  user?: User;
+export interface Requirable extends Enableable {
+  required?: boolean;
 }
 
 /**
- * A role given to a user for a specific application.
- *
- * @author Seth Musselman
+ * JWT Configuration for entities.
  */
-export interface ApplicationRole {
-  description?: string;
-  id?: UUID;
-  insertInstant?: number;
-  isDefault?: boolean;
-  isSuperRole?: boolean;
-  lastUpdateInstant?: number;
-  name?: string;
+export interface EntityJWTConfiguration extends Enableable {
+  accessTokenKeyId?: UUID;
+  timeToLiveInSeconds?: number;
+}
+
+/**
+ * @author Daniel DeGroff
+ */
+export interface ReloadRequest {
+  names?: Array<string>;
 }
 
 /**
- * Google social login provider parameters.
+ * Search request for user comments
  *
- * @author Daniel DeGroff
+ * @author Spencer Witt
  */
-export interface GoogleIdentityProviderProperties {
-  api?: string;
-  button?: string;
+export interface UserCommentSearchRequest {
+  search?: UserCommentSearchCriteria;
 }
 
 /**
- * @author Daniel DeGroff
+ * Request to complete the WebAuthn registration ceremony
+ *
+ * @author Spencer Witt
  */
-export interface JWKSResponse {
-  keys?: Array<JSONWebKey>;
+export interface WebAuthnLoginRequest extends BaseLoginRequest {
+  credential?: WebAuthnPublicKeyAuthenticationRequest;
+  origin?: string;
+  rpId?: string;
+  twoFactorTrustId?: string;
 }
 
 /**
- * Steam API modes.
+ * domain POJO to represent AuthenticationKey
  *
- * @author Daniel DeGroff
+ * @author sanjay
  */
-export enum SteamAPIMode {
-  Public = "Public",
-  Partner = "Partner"
+export interface APIKey {
+  id?: UUID;
+  insertInstant?: number;
+  ipAccessControlListId?: UUID;
+  key?: string;
+  keyManager?: boolean;
+  lastUpdateInstant?: number;
+  metaData?: APIKeyMetaData;
+  permissions?: APIKeyPermissions;
+  tenantId?: UUID;
 }
 
 /**
- * Lambda API response object.
+ * Search criteria for webhooks.
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export interface LambdaResponse {
-  lambda?: Lambda;
-  lambdas?: Array<Lambda>;
+export interface WebhookSearchCriteria extends BaseSearchCriteria {
+  description?: string;
+  tenantId?: UUID;
+  url?: string;
 }
 
 /**
- * Models the JWT public key Refresh Token Revoke Event. This event might be for a single
- * token, a user or an entire application.
+ * Policy for handling unknown OAuth scopes in the request
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export interface JWTPublicKeyUpdateEvent extends BaseEvent {
-  applicationIds?: Array<UUID>;
+export enum UnknownScopePolicy {
+  Allow = "Allow",
+  Remove = "Remove",
+  Reject = "Reject"
 }
 
 /**
- * The Integration Request
+ * Models the User Password Reset Start Event.
  *
  * @author Daniel DeGroff
  */
-export interface IntegrationRequest {
-  integrations?: Integrations;
+export interface UserPasswordResetStartEvent extends BaseUserEvent {
 }
 
 /**
- * @author Brett Pontarelli
+ * Models the Group Delete Event.
+ *
+ * @author Daniel DeGroff
  */
-export enum CaptchaMethod {
-  GoogleRecaptchaV2 = "GoogleRecaptchaV2",
-  GoogleRecaptchaV3 = "GoogleRecaptchaV3",
-  HCaptcha = "HCaptcha",
-  HCaptchaEnterprise = "HCaptchaEnterprise"
+export interface GroupDeleteEvent extends BaseGroupEvent {
 }
 
-/**
- * Models the event types that FusionAuth produces.
- *
- * @author Brian Pontarelli
- */
-export enum EventType {
-  JWTPublicKeyUpdate = "jwt.public-key.update",
-  JWTRefreshTokenRevoke = "jwt.refresh-token.revoke",
-  JWTRefresh = "jwt.refresh",
-  AuditLogCreate = "audit-log.create",
-  EventLogCreate = "event-log.create",
-  KickstartSuccess = "kickstart.success",
-  GroupCreate = "group.create",
-  GroupCreateComplete = "group.create.complete",
-  GroupDelete = "group.delete",
-  GroupDeleteComplete = "group.delete.complete",
-  GroupMemberAdd = "group.member.add",
-  GroupMemberAddComplete = "group.member.add.complete",
-  GroupMemberRemove = "group.member.remove",
-  GroupMemberRemoveComplete = "group.member.remove.complete",
-  GroupMemberUpdate = "group.member.update",
-  GroupMemberUpdateComplete = "group.member.update.complete",
-  GroupUpdate = "group.update",
-  GroupUpdateComplete = "group.update.complete",
-  UserAction = "user.action",
-  UserBulkCreate = "user.bulk.create",
-  UserCreate = "user.create",
-  UserCreateComplete = "user.create.complete",
-  UserDeactivate = "user.deactivate",
-  UserDelete = "user.delete",
-  UserDeleteComplete = "user.delete.complete",
-  UserEmailUpdate = "user.email.update",
-  UserEmailVerified = "user.email.verified",
-  UserIdentityProviderLink = "user.identity-provider.link",
-  UserIdentityProviderUnlink = "user.identity-provider.unlink",
-  UserLoginIdDuplicateOnCreate = "user.loginId.duplicate.create",
-  UserLoginIdDuplicateOnUpdate = "user.loginId.duplicate.update",
-  UserLoginFailed = "user.login.failed",
-  UserLoginNewDevice = "user.login.new-device",
-  UserLoginSuccess = "user.login.success",
-  UserLoginSuspicious = "user.login.suspicious",
-  UserPasswordBreach = "user.password.breach",
-  UserPasswordResetSend = "user.password.reset.send",
-  UserPasswordResetStart = "user.password.reset.start",
-  UserPasswordResetSuccess = "user.password.reset.success",
-  UserPasswordUpdate = "user.password.update",
-  UserReactivate = "user.reactivate",
-  UserRegistrationCreate = "user.registration.create",
-  UserRegistrationCreateComplete = "user.registration.create.complete",
-  UserRegistrationDelete = "user.registration.delete",
-  UserRegistrationDeleteComplete = "user.registration.delete.complete",
-  UserRegistrationUpdate = "user.registration.update",
-  UserRegistrationUpdateComplete = "user.registration.update.complete",
-  UserRegistrationVerified = "user.registration.verified",
-  UserTwoFactorMethodAdd = "user.two-factor.method.add",
-  UserTwoFactorMethodRemove = "user.two-factor.method.remove",
-  UserUpdate = "user.update",
-  UserUpdateComplete = "user.update.complete",
-  Test = "test"
+export interface MultiFactorEmailTemplate {
+  templateId?: UUID;
+}
+
+export enum OAuthErrorReason {
+  auth_code_not_found = "auth_code_not_found",
+  access_token_malformed = "access_token_malformed",
+  access_token_expired = "access_token_expired",
+  access_token_unavailable_for_processing = "access_token_unavailable_for_processing",
+  access_token_failed_processing = "access_token_failed_processing",
+  access_token_invalid = "access_token_invalid",
+  access_token_required = "access_token_required",
+  refresh_token_not_found = "refresh_token_not_found",
+  refresh_token_type_not_supported = "refresh_token_type_not_supported",
+  invalid_client_id = "invalid_client_id",
+  invalid_user_credentials = "invalid_user_credentials",
+  invalid_grant_type = "invalid_grant_type",
+  invalid_origin = "invalid_origin",
+  invalid_origin_opaque = "invalid_origin_opaque",
+  invalid_pkce_code_verifier = "invalid_pkce_code_verifier",
+  invalid_pkce_code_challenge = "invalid_pkce_code_challenge",
+  invalid_pkce_code_challenge_method = "invalid_pkce_code_challenge_method",
+  invalid_redirect_uri = "invalid_redirect_uri",
+  invalid_response_mode = "invalid_response_mode",
+  invalid_response_type = "invalid_response_type",
+  invalid_id_token_hint = "invalid_id_token_hint",
+  invalid_post_logout_redirect_uri = "invalid_post_logout_redirect_uri",
+  invalid_device_code = "invalid_device_code",
+  invalid_user_code = "invalid_user_code",
+  invalid_additional_client_id = "invalid_additional_client_id",
+  invalid_target_entity_scope = "invalid_target_entity_scope",
+  invalid_entity_permission_scope = "invalid_entity_permission_scope",
+  invalid_user_id = "invalid_user_id",
+  grant_type_disabled = "grant_type_disabled",
+  missing_client_id = "missing_client_id",
+  missing_client_secret = "missing_client_secret",
+  missing_code = "missing_code",
+  missing_code_challenge = "missing_code_challenge",
+  missing_code_verifier = "missing_code_verifier",
+  missing_device_code = "missing_device_code",
+  missing_grant_type = "missing_grant_type",
+  missing_redirect_uri = "missing_redirect_uri",
+  missing_refresh_token = "missing_refresh_token",
+  missing_response_type = "missing_response_type",
+  missing_token = "missing_token",
+  missing_user_code = "missing_user_code",
+  missing_user_id = "missing_user_id",
+  missing_verification_uri = "missing_verification_uri",
+  login_prevented = "login_prevented",
+  not_licensed = "not_licensed",
+  user_code_expired = "user_code_expired",
+  user_expired = "user_expired",
+  user_locked = "user_locked",
+  user_not_found = "user_not_found",
+  client_authentication_missing = "client_authentication_missing",
+  invalid_client_authentication_scheme = "invalid_client_authentication_scheme",
+  invalid_client_authentication = "invalid_client_authentication",
+  client_id_mismatch = "client_id_mismatch",
+  change_password_administrative = "change_password_administrative",
+  change_password_breached = "change_password_breached",
+  change_password_expired = "change_password_expired",
+  change_password_validation = "change_password_validation",
+  unknown = "unknown",
+  missing_required_scope = "missing_required_scope",
+  unknown_scope = "unknown_scope",
+  consent_canceled = "consent_canceled"
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Brett Pontarelli
  */
-export interface PasswordlessStartResponse {
-  code?: string;
+export interface TenantSSOConfiguration {
+  deviceTrustTimeToLiveInSeconds?: number;
 }
 
 /**
- * Policy for handling unknown OAuth scopes in the request
+ * Supply information on credential type and algorithm to the <i>authenticator</i>.
  *
  * @author Spencer Witt
  */
-export enum UnknownScopePolicy {
-  Allow = "Allow",
-  Remove = "Remove",
-  Reject = "Reject"
+export interface PublicKeyCredentialParameters {
+  alg?: CoseAlgorithmIdentifier;
+  type?: PublicKeyCredentialType;
 }
 
 /**
+ * API response for consent.
+ *
  * @author Daniel DeGroff
  */
-export interface AppleApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
-  bundleId?: string;
-  buttonText?: string;
-  keyId?: UUID;
-  scope?: string;
-  servicesId?: string;
-  teamId?: string;
+export interface ConsentResponse {
+  consent?: Consent;
+  consents?: Array<Consent>;
 }
 
 /**
- * Audit log response.
+ * Models the Group Member Remove Event.
  *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface AuditLogResponse {
-  auditLog?: AuditLog;
+export interface GroupMemberRemoveEvent extends BaseGroupEvent {
+  members?: Array<GroupMember>;
 }
 
 /**
- * domain POJO to represent AuthenticationKey
- *
- * @author sanjay
+ * @author Daniel DeGroff
  */
-export interface APIKey {
-  id?: UUID;
-  insertInstant?: number;
-  ipAccessControlListId?: UUID;
-  key?: string;
-  keyManager?: boolean;
-  lastUpdateInstant?: number;
-  metaData?: APIKeyMetaData;
-  permissions?: APIKeyPermissions;
-  tenantId?: UUID;
-}
-
-export interface APIKeyMetaData {
-  attributes?: Record<string, string>;
-}
-
-export interface APIKeyPermissions {
-  endpoints?: Record<string, Array<string>>;
+export interface IdentityProviderPendingLinkResponse {
+  identityProviderTenantConfiguration?: IdentityProviderTenantConfiguration;
+  linkCount?: number;
+  pendingIdPLink?: PendingIdPLink;
 }
 
 /**
- * The application's relationship to the authorization server. First-party applications will be granted implicit permission for requested scopes.
- * Third-party applications will use the {@link OAuthScopeConsentMode} policy.
+ * Change password response object.
  *
- * @author Spencer Witt
+ * @author Daniel DeGroff
  */
-export enum OAuthApplicationRelationship {
-  FirstParty = "FirstParty",
-  ThirdParty = "ThirdParty"
+export interface ChangePasswordResponse {
+  oneTimePassword?: string;
+  state?: Record<string, any>;
 }
 
 /**
- * @author Daniel DeGroff
+ * The user action response object.
+ *
+ * @author Brian Pontarelli
  */
-export interface IdentityProviderOauth2Configuration {
-  authorization_endpoint?: string;
-  client_id?: string;
-  client_secret?: string;
-  clientAuthenticationMethod?: ClientAuthenticationMethod;
-  emailClaim?: string;
-  emailVerifiedClaim?: string;
-  issuer?: string;
-  scope?: string;
-  token_endpoint?: string;
-  uniqueIdClaim?: string;
-  userinfo_endpoint?: string;
-  usernameClaim?: string;
+export interface ActionResponse {
+  action?: UserActionLog;
+  actions?: Array<UserActionLog>;
 }
 
-export enum ClientAuthenticationMethod {
-  none = "none",
-  client_secret_basic = "client_secret_basic",
-  client_secret_post = "client_secret_post"
+export interface Totals {
+  logins?: number;
+  registrations?: number;
+  totalRegistrations?: number;
 }
 
 /**
- * @author Daniel DeGroff
+ * Config for regular SAML IDP configurations that support IdP initiated requests
+ *
+ * @author Lyle Schemmerling
  */
-export interface LinkedInIdentityProvider extends BaseIdentityProvider<LinkedInApplicationConfiguration> {
-  buttonText?: string;
-  client_id?: string;
-  client_secret?: string;
-  scope?: string;
+export interface SAMLv2IdpInitiatedConfiguration extends Enableable {
+  issuer?: string;
 }
 
 /**
+ * Request for the system configuration API.
+ *
  * @author Brian Pontarelli
  */
-export interface LoginResponse {
-  actions?: Array<LoginPreventedResponse>;
-  changePasswordId?: string;
-  changePasswordReason?: ChangePasswordReason;
-  configurableMethods?: Array<string>;
-  emailVerificationId?: string;
-  methods?: Array<TwoFactorMethod>;
-  pendingIdPLinkId?: string;
-  refreshToken?: string;
-  refreshTokenId?: UUID;
-  registrationVerificationId?: string;
-  state?: Record<string, any>;
-  threatsDetected?: Array<AuthenticationThreats>;
-  token?: string;
-  tokenExpirationInstant?: number;
-  trustToken?: string;
-  twoFactorId?: string;
-  twoFactorTrustId?: string;
-  user?: User;
+export interface SystemConfigurationRequest {
+  systemConfiguration?: SystemConfiguration;
 }
 
 /**
- * Models a consent.
+ * User Action API request object.
  *
- * @author Daniel DeGroff
+ * @author Brian Pontarelli
  */
-export interface Consent {
-  consentEmailTemplateId?: UUID;
-  countryMinimumAgeForSelfConsent?: LocalizedIntegers;
-  data?: Record<string, any>;
-  defaultMinimumAgeForSelfConsent?: number;
-  emailPlus?: EmailPlus;
-  id?: UUID;
-  insertInstant?: number;
-  lastUpdateInstant?: number;
-  multipleValuesAllowed?: boolean;
-  name?: string;
-  values?: Array<string>;
+export interface UserActionRequest {
+  userAction?: UserAction;
 }
 
-export interface EmailPlus extends Enableable {
-  emailTemplateId?: UUID;
-  maximumTimeToSendEmailInHours?: number;
-  minimumTimeToSendEmailInHours?: number;
+export enum ClientAuthenticationMethod {
+  none = "none",
+  client_secret_basic = "client_secret_basic",
+  client_secret_post = "client_secret_post"
 }
 
 /**
- * Base class for all {@link Group} and {@link GroupMember} events.
- *
- * @author Spencer Witt
+ * @author Brett Guy
  */
-export interface BaseGroupEvent extends BaseEvent {
-  group?: Group;
+export interface IPAccessControlListResponse {
+  ipAccessControlList?: IPAccessControlList;
+  ipAccessControlLists?: Array<IPAccessControlList>;
 }
 
 /**
- * Models a specific entity type permission. This permission can be granted to users or other entities.
+ * Request for managing FusionAuth Reactor and licenses.
  *
  * @author Brian Pontarelli
  */
-export interface EntityTypePermission {
-  data?: Record<string, any>;
-  description?: string;
-  id?: UUID;
-  insertInstant?: number;
-  isDefault?: boolean;
-  lastUpdateInstant?: number;
-  name?: string;
+export interface ReactorRequest {
+  license?: string;
+  licenseId?: string;
 }
 
 /**
- * This class is the user query. It provides a build pattern as well as public fields for use on forms and in actions.
+ * Controls the policy for requesting user permission to grant access to requested scopes during an OAuth workflow
+ * for a third-party application.
  *
- * @author Brian Pontarelli
+ * @author Spencer Witt
  */
-export interface UserSearchCriteria extends BaseElasticSearchCriteria {
+export enum OAuthScopeConsentMode {
+  AlwaysPrompt = "AlwaysPrompt",
+  RememberDecision = "RememberDecision",
+  NeverPrompt = "NeverPrompt"
 }
 
 /**
- * User comment search response
- *
- * @author Spencer Witt
+ * @author Michael Sleevi
  */
-export interface UserCommentSearchResponse {
-  total?: number;
-  userComments?: Array<UserComment>;
+export interface MessageTemplateResponse {
+  messageTemplate?: MessageTemplate;
+  messageTemplates?: Array<MessageTemplate>;
 }
 
 /**
- * @author Daniel DeGroff
+ * @author Brett Pontarelli
  */
-export interface IdentityProviderRequest {
-  identityProvider?: BaseIdentityProvider<any>;
+export enum IdentityProviderLoginMethod {
+  UsePopup = "UsePopup",
+  UseRedirect = "UseRedirect",
+  UseVendorJavaScript = "UseVendorJavaScript"
 }
 
 /**
- * Search criteria for Identity Providers.
- *
- * @author Spencer Witt
+ * @author Brett Guy
  */
-export interface IdentityProviderSearchCriteria extends BaseSearchCriteria {
-  applicationId?: UUID;
-  name?: string;
-  type?: IdentityProviderType;
+export interface MessengerRequest {
+  messenger?: BaseMessengerConfiguration;
 }
 
 /**
- * Standard error domain object that can also be used as the response from an API call.
+ * Request for the Tenant API to delete a tenant rather than using the URL parameters.
  *
  * @author Brian Pontarelli
  */
-export interface Errors {
-  fieldErrors?: Record<string, Array<Error>>;
-  generalErrors?: Array<Error>;
+export interface TenantDeleteRequest extends BaseEventRequest {
+  async?: boolean;
 }
 
 /**
- * Defines an error.
+ * An Event "event" to indicate an event log was created.
  *
- * @author Brian Pontarelli
+ * @author Daniel DeGroff
  */
-export interface Error {
-  code?: string;
-  data?: Record<string, any>;
-  message?: string;
+export interface EventLogCreateEvent extends BaseEvent {
+  eventLog?: EventLog;
 }
 
 /**
- * Available JSON Web Algorithms (JWA) as described in RFC 7518 available for this JWT implementation.
+ * The possible result states of a webhook event. This tracks the success of the overall webhook transaction according to the {@link TransactionType}
+ * and configured webhooks.
  *
+ * @author Spencer Witt
+ */
+export enum WebhookEventResult {
+  Failed = "Failed",
+  Running = "Running",
+  Succeeded = "Succeeded"
+}
+
+export interface UniqueUsernameConfiguration extends Enableable {
+  numberOfDigits?: number;
+  separator?: string;
+  strategy?: UniqueUsernameStrategy;
+}
+
+/**
  * @author Daniel DeGroff
  */
-export enum Algorithm {
-  ES256 = "ES256",
-  ES384 = "ES384",
-  ES512 = "ES512",
-  HS256 = "HS256",
-  HS384 = "HS384",
-  HS512 = "HS512",
-  PS256 = "PS256",
-  PS384 = "PS384",
-  PS512 = "PS512",
-  RS256 = "RS256",
-  RS384 = "RS384",
-  RS512 = "RS512",
-  none = "none"
+export interface SAMLv2IdPInitiatedApplicationConfiguration extends BaseIdentityProviderApplicationConfiguration {
 }
 
 /**
- * JSON Web Token (JWT) as defined by RFC 7519.
- * <pre>
- * From RFC 7519 Section 1. Introduction:
- *    The suggested pronunciation of JWT is the same as the English word "jot".
- * </pre>
- * The JWT is not Thread-Safe and should not be re-used.
+ * Event log response.
  *
  * @author Daniel DeGroff
  */
-export interface JWT {
-  aud?: any;
-  exp?: number;
-  iat?: number;
-  iss?: string;
-  jti?: string;
-  nbf?: number;
-  [otherClaims: string]: any; // Any other fields
-  sub?: string;
+export interface EventLogResponse {
+  eventLog?: EventLog;
 }
 
 /**
- * A JSON Web Key as defined by <a href="https://tools.ietf.org/html/rfc7517#section-4">RFC 7517 JSON Web Key (JWK)
- * Section 4</a> and <a href="https://tools.ietf.org/html/rfc7518">RFC 7518 JSON Web Algorithms (JWA)</a>.
- *
  * @author Daniel DeGroff
  */
-export interface JSONWebKey {
-  alg?: Algorithm;
-  crv?: string;
-  d?: string;
-  dp?: string;
-  dq?: string;
-  e?: string;
-  kid?: string;
-  kty?: KeyType;
-  n?: string;
-  [other: string]: any; // Any other fields
-  p?: string;
-  q?: string;
-  qi?: string;
-  use?: string;
-  x?: string;
-  x5c?: Array<string>;
-  x5t?: string;
-  x5t_S256?: string;
-  y?: string;
+export interface TenantRegistrationConfiguration {
+  blockedDomains?: Array<string>;
 }