/*
 * Ory APIs
 *
 * # Introduction Documentation for all public and administrative Ory APIs. Administrative APIs can only be accessed with a valid Personal Access Token. Public APIs are mostly used in browsers.  ## SDKs This document describes the APIs available in the Ory Network. The APIs are available as SDKs for the following languages:  | Language       | Download SDK                                                     | Documentation                                                                        | | -------------- | ---------------------------------------------------------------- | ------------------------------------------------------------------------------------ | | Dart           | [pub.dev](https://pub.dev/packages/ory_client)                   | [README](https://github.com/ory/sdk/blob/master/clients/client/dart/README.md)       | | .NET           | [nuget.org](https://www.nuget.org/packages/Ory.Client/)          | [README](https://github.com/ory/sdk/blob/master/clients/client/dotnet/README.md)     | | Elixir         | [hex.pm](https://hex.pm/packages/ory_client)                     | [README](https://github.com/ory/sdk/blob/master/clients/client/elixir/README.md)     | | Go             | [github.com](https://github.com/ory/client-go)                   | [README](https://github.com/ory/sdk/blob/master/clients/client/go/README.md)         | | Java           | [maven.org](https://search.maven.org/artifact/sh.ory/ory-client) | [README](https://github.com/ory/sdk/blob/master/clients/client/java/README.md)       | | JavaScript     | [npmjs.com](https://www.npmjs.com/package/@ory/client)           | [README](https://github.com/ory/sdk/blob/master/clients/client/typescript/README.md) | | JavaScript (With fetch) | [npmjs.com](https://www.npmjs.com/package/@ory/client-fetch)           | [README](https://github.com/ory/sdk/blob/master/clients/client/typescript-fetch/README.md) |  | PHP            | [packagist.org](https://packagist.org/packages/ory/client)       | [README](https://github.com/ory/sdk/blob/master/clients/client/php/README.md)        | | Python         | [pypi.org](https://pypi.org/project/ory-client/)                 | [README](https://github.com/ory/sdk/blob/master/clients/client/python/README.md)     | | Ruby           | [rubygems.org](https://rubygems.org/gems/ory-client)             | [README](https://github.com/ory/sdk/blob/master/clients/client/ruby/README.md)       | | Rust           | [crates.io](https://crates.io/crates/ory-client)                 | [README](https://github.com/ory/sdk/blob/master/clients/client/rust/README.md)       | 
 *
 * The version of the OpenAPI document: v1.22.56
 * Contact: support@ory.sh
 * Generated by: https://openapi-generator.tech
 */

use crate::models;
use serde::{Deserialize, Serialize};

#[derive(Clone, Default, Debug, PartialEq, Serialize, Deserialize)]
pub struct NormalizedProjectRevision {
    /// The Account Experience's Custom Translations  Contains all Custom Translations for this project.
    #[serde(rename = "account_experience_custom_translations", skip_serializing_if = "Option::is_none")]
    pub account_experience_custom_translations: Option<Vec<models::RevisionAccountExperienceCustomTranslation>>,
    /// Holds the default locale for the account experience. This governs the \"default_locale\" setting.
    #[serde(rename = "account_experience_default_locale", skip_serializing_if = "Option::is_none")]
    pub account_experience_default_locale: Option<String>,
    /// The Account Experience's Enabled Locales  This governs the locales that are available in the account experience. This governs the \"enabled_locales\" setting.
    #[serde(rename = "account_experience_enabled_locales", skip_serializing_if = "Option::is_none")]
    pub account_experience_enabled_locales: Option<Vec<String>>,
    /// Holds the URL to the account experience's dark theme favicon (currently unused). This governs the \"favicon_dark\" setting.
    #[serde(rename = "account_experience_favicon_dark", skip_serializing_if = "Option::is_none")]
    pub account_experience_favicon_dark: Option<String>,
    /// Holds the URL to the account experience's favicon. This governs the \"favicon_light\" setting.
    #[serde(rename = "account_experience_favicon_light", skip_serializing_if = "Option::is_none")]
    pub account_experience_favicon_light: Option<String>,
    /// Whether to hide the Ory branding badge on the account experience. This governs the \"hide_ory_branding\" setting.
    #[serde(rename = "account_experience_hide_ory_branding", skip_serializing_if = "Option::is_none")]
    pub account_experience_hide_ory_branding: Option<bool>,
    /// Whether to hide the registration link on the account experience login card. This governs the \"hide_registration_link\" setting.
    #[serde(rename = "account_experience_hide_registration_link", skip_serializing_if = "Option::is_none")]
    pub account_experience_hide_registration_link: Option<bool>,
    /// Holds the URL to the account experience's language behavior.  Can be one of: `respect_accept_language`: Respect the `Accept-Language` header. `force_default`: Force the default language. This governs the \"locale_behavior\" setting.
    #[serde(rename = "account_experience_locale_behavior", skip_serializing_if = "Option::is_none")]
    pub account_experience_locale_behavior: Option<String>,
    /// Holds the URL to the account experience's dark theme logo (currently unused). This governs the \"logo_dark\" setting.
    #[serde(rename = "account_experience_logo_dark", skip_serializing_if = "Option::is_none")]
    pub account_experience_logo_dark: Option<String>,
    /// Holds the URL to the account experience's logo. This governs the \"logo_light\" setting.
    #[serde(rename = "account_experience_logo_light", skip_serializing_if = "Option::is_none")]
    pub account_experience_logo_light: Option<String>,
    /// Holds the URL to the account experience's dark theme variables. This governs the \"theme_variables_dark\" setting.
    #[serde(rename = "account_experience_theme_variables_dark", skip_serializing_if = "Option::is_none")]
    pub account_experience_theme_variables_dark: Option<String>,
    /// Holds the URL to the account experience's light theme variables. This governs the \"theme_variables_light\" setting.
    #[serde(rename = "account_experience_theme_variables_light", skip_serializing_if = "Option::is_none")]
    pub account_experience_theme_variables_light: Option<String>,
    /// The Project's Revision Creation Date
    #[serde(rename = "created_at", skip_serializing_if = "Option::is_none")]
    pub created_at: Option<String>,
    /// Whether to disable the account experience welcome screen, which is hosted under `/ui/welcome`. This governs the \"disable_welcome_screen\" setting.
    #[serde(rename = "disable_account_experience_welcome_screen", skip_serializing_if = "Option::is_none")]
    pub disable_account_experience_welcome_screen: Option<bool>,
    /// Whether the new account experience is enabled and reachable. This governs the \"enable_ax_v2\" setting.
    #[serde(rename = "enable_ax_v2", skip_serializing_if = "Option::is_none")]
    pub enable_ax_v2: Option<bool>,
    /// A list of custom claims which are allowed to be added top level to the Access Token. They cannot override reserved claims.  This governs the \"oauth2.allowed_top_level_claims\" setting.
    #[serde(rename = "hydra_oauth2_allowed_top_level_claims", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_allowed_top_level_claims: Option<Vec<String>>,
    /// Automatically grant authorized OAuth2 Scope in OAuth2 Client Credentials Flow.  Each OAuth2 Client is allowed to request a predefined OAuth2 Scope (for example `read write`). If this option is enabled, the full scope is automatically granted when performing the OAuth2 Client Credentials flow.  If disabled, the OAuth2 Client has to request the scope in the OAuth2 request by providing the `scope` query parameter.  Setting this option to true is common if you need compatibility with MITREid.  This governs the \"oauth2.client_credentials.default_grant_allowed_scope\" setting.
    #[serde(rename = "hydra_oauth2_client_credentials_default_grant_allowed_scope", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_client_credentials_default_grant_allowed_scope: Option<bool>,
    /// Set to true if you want to omit the `nbf` (not valid before) claim in the access token.  This governs the \"oauth2.exclude_not_before_claim\" setting.
    #[serde(rename = "hydra_oauth2_exclude_not_before_claim", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_exclude_not_before_claim: Option<bool>,
    /// Configures if the issued at (`iat`) claim is required in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523).  If set to `false`, the `iat` claim is required. Set this value to `true` only after careful consideration.  This governs the \"oauth2.grant.jwt.iat_optional\" setting.
    #[serde(rename = "hydra_oauth2_grant_jwt_iat_optional", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_grant_jwt_iat_optional: Option<bool>,
    /// Configures if the JSON Web Token ID (`jti`) claim is required in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523).  If set to `false`, the `jti` claim is required. Set this value to `true` only after careful consideration.  This governs the \"oauth2.grant.jwt.jti_optional\" setting.
    #[serde(rename = "hydra_oauth2_grant_jwt_jti_optional", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_grant_jwt_jti_optional: Option<bool>,
    /// Configures what the maximum age of a JWT assertion used in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523) can be.  This feature uses the `exp` claim and `iat` claim to calculate assertion age. Assertions exceeding the max age will be denied.  Useful as a safety measure and recommended to keep below 720h.  This governs the \"oauth2.grant.jwt.max_ttl\" setting.
    #[serde(rename = "hydra_oauth2_grant_jwt_max_ttl", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_grant_jwt_max_ttl: Option<String>,
    /// Configures the OAuth2 Grant Refresh Token Rotation Grace Period  If set to `null` or `\"0s\"`, the graceful refresh token rotation is disabled.  This governs the \"oauth2.grant.refresh_token.rotation_grace_period\" setting.
    #[serde(rename = "hydra_oauth2_grant_refresh_token_rotation_grace_period", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_grant_refresh_token_rotation_grace_period: Option<String>,
    /// Configures the OAuth2 Grant Refresh Token Rotation Grace Reuse Count.  The maximum number of times a refresh token can be reused within the grace period. If set to `null` or `0`, the limit is disabled.  This governs the \"oauth2.grant.refresh_token.rotation_grace_reuse_count\" setting.
    #[serde(rename = "hydra_oauth2_grant_refresh_token_rotation_grace_reuse_count", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_grant_refresh_token_rotation_grace_reuse_count: Option<i64>,
    /// Set to false if you don't want to mirror custom claims under 'ext'.  This governs the \"oauth2.mirror_top_level_claims\" setting.
    #[serde(rename = "hydra_oauth2_mirror_top_level_claims", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_mirror_top_level_claims: Option<bool>,
    /// Configures whether PKCE should be enforced for all OAuth2 Clients.  This governs the \"oauth2.pkce.enforced\" setting.
    #[serde(rename = "hydra_oauth2_pkce_enforced", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_pkce_enforced: Option<bool>,
    /// Configures whether PKCE should be enforced for OAuth2 Clients without a client secret (public clients).  This governs the \"oauth2.pkce.enforced_for_public_clients\" setting.
    #[serde(rename = "hydra_oauth2_pkce_enforced_for_public_clients", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_pkce_enforced_for_public_clients: Option<bool>,
    /// Set to true to keep custom claims that are not promoted to the top level in the 'ext' claim. Only applies when mirror_top_level_claims is false.  This governs the \"oauth2.preserve_ext_claims\" setting.
    #[serde(rename = "hydra_oauth2_preserve_ext_claims", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_preserve_ext_claims: Option<bool>,
    /// Sets the Refresh Token Hook Endpoint. If set this endpoint will be called during the OAuth2 Token Refresh grant update the OAuth2 Access Token claims.  This governs the \"oauth2.refresh_token_hook\" setting.
    #[serde(rename = "hydra_oauth2_refresh_token_hook", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_refresh_token_hook: Option<String>,
    /// Sets the token hook endpoint for all grant types. If set it will be called while providing token to customize claims.  This governs the \"oauth2.token_hook.url\" setting.
    #[serde(rename = "hydra_oauth2_token_hook", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_token_hook: Option<String>,
    /// Sets a per-project Access Token, Refresh Token, and Authorization Code prefix. The literal \"%s\" is replaced at issuance time with the token kind: \"at\" (access token), \"rt\" (refresh token), or \"ac\" (authorization code). For example, \"acme_%s_\" yields \"acme_at_…\", \"acme_rt_…\", and \"acme_ac_…\".  Must be a fmt.Sprintf template with exactly one \"%s\" substitution. The rendered prefix may contain only ASCII letters, digits, and underscores — no other \"%\" directives (\"%d\", \"%%\", positional or width-flagged verbs), no hyphens, dots, slashes, whitespace, quotes, or non-ASCII characters. Leave empty to keep the default \"ory_%s_\" prefix.  This is an Enterprise feature.  This governs the \"oauth2.token_prefix\" setting.
    #[serde(rename = "hydra_oauth2_token_prefix", skip_serializing_if = "Option::is_none")]
    pub hydra_oauth2_token_prefix: Option<String>,
    /// The OpenID Connect Dynamic Client Registration specification has no concept of whitelisting OAuth 2.0 Scope. If you want to expose Dynamic Client Registration, you should set the default scope enabled for newly registered clients. Keep in mind that users can overwrite this default by setting the \"scope\" key in the registration payload, effectively disabling the concept of whitelisted scopes.  This governs the \"oidc.dynamic_client_registration.default_scope\" setting.
    #[serde(rename = "hydra_oidc_dynamic_client_registration_default_scope", skip_serializing_if = "Option::is_none")]
    pub hydra_oidc_dynamic_client_registration_default_scope: Option<Vec<String>>,
    /// Configures OpenID Connect Dynamic Client Registration.  This governs the \"oidc.dynamic_client_registration.enabled\" setting.
    #[serde(rename = "hydra_oidc_dynamic_client_registration_enabled", skip_serializing_if = "Option::is_none")]
    pub hydra_oidc_dynamic_client_registration_enabled: Option<bool>,
    /// Configures OpenID Connect Discovery and overwrites the pairwise algorithm  This governs the \"oidc.subject_identifiers.pairwise_salt\" setting.
    #[serde(rename = "hydra_oidc_subject_identifiers_pairwise_salt", skip_serializing_if = "Option::is_none")]
    pub hydra_oidc_subject_identifiers_pairwise_salt: Option<String>,
    /// Configures OpenID Connect Discovery and overwrites the list of Subject Identifier Algorithms to enable.  This governs the \"oidc.subject_identifiers.supported_types\" setting.
    #[serde(rename = "hydra_oidc_subject_identifiers_supported_types", skip_serializing_if = "Option::is_none")]
    pub hydra_oidc_subject_identifiers_supported_types: Option<Vec<String>>,
    /// Configures the Ory Hydra Cookie Secret  This governs the \"secrets.cookie\" setting.
    #[serde(rename = "hydra_secrets_cookie", skip_serializing_if = "Option::is_none")]
    pub hydra_secrets_cookie: Option<Vec<String>>,
    /// Configures the Ory Hydra Pagination Secret  This governs the \"secrets.pagination\" setting.
    #[serde(rename = "hydra_secrets_pagination", skip_serializing_if = "Option::is_none")]
    pub hydra_secrets_pagination: Option<Vec<String>>,
    /// Configures the Ory Hydra System Secret  This governs the \"secrets.system\" setting.
    #[serde(rename = "hydra_secrets_system", skip_serializing_if = "Option::is_none")]
    pub hydra_secrets_system: Option<Vec<String>>,
    /// Configures the Ory Hydra Cookie Same Site Legacy Workaround  This governs the \"serve.cookies.same_site_legacy_workaround\" setting.
    #[serde(rename = "hydra_serve_cookies_same_site_legacy_workaround", skip_serializing_if = "Option::is_none")]
    pub hydra_serve_cookies_same_site_legacy_workaround: Option<bool>,
    /// Configures the Ory Hydra Cookie Same Site Mode  This governs the \"serve.cookies.same_site_mode\" setting.
    #[serde(rename = "hydra_serve_cookies_same_site_mode", skip_serializing_if = "Option::is_none")]
    pub hydra_serve_cookies_same_site_mode: Option<String>,
    /// Defines access token type  This governs the \"strategies.access_token\" setting. opaque Oauth2AccessTokenStrategyOpaque jwt Oauth2AccessTokenStrategyJwt
    #[serde(rename = "hydra_strategies_access_token", skip_serializing_if = "Option::is_none")]
    pub hydra_strategies_access_token: Option<HydraStrategiesAccessTokenEnum>,
    /// Define the claim to use as the scope in the access token.  This governs the \"strategies.jwt.scope_claim\" setting.  list: The scope claim is an array of strings named `scope`: `{ \"scope\": [\"read\", \"write\"] }` string: The scope claim is a space delimited list of strings named `scp`: `{ \"scp\": \"read write\" }` both: The scope claim is both a space delimited list and an array of strings named `scope` and `scp`: `{ \"scope\": [\"read\", \"write\"], \"scp\": \"read write\" }` list OAuth2JWTScopeClaimList string OAuth2JWTScopeClaimString both OAuth2JWTScopeClaimBoth
    #[serde(rename = "hydra_strategies_jwt_scope_claim", skip_serializing_if = "Option::is_none")]
    pub hydra_strategies_jwt_scope_claim: Option<HydraStrategiesJwtScopeClaimEnum>,
    /// Defines how scopes are matched. For more details have a look at https://github.com/ory/fosite#scopes  This governs the \"strategies.scope\" setting. exact Oauth2ScopeStrategyExact wildcard Oauth2ScopeStrategyWildcard
    #[serde(rename = "hydra_strategies_scope", skip_serializing_if = "Option::is_none")]
    pub hydra_strategies_scope: Option<HydraStrategiesScopeEnum>,
    /// This governs the \"ttl.access_token\" setting.
    #[serde(rename = "hydra_ttl_access_token", skip_serializing_if = "Option::is_none")]
    pub hydra_ttl_access_token: Option<String>,
    /// Configures how long refresh tokens are valid.  Set to -1 for refresh tokens to never expire. This is not recommended!  This governs the \"ttl.auth_code\" setting.
    #[serde(rename = "hydra_ttl_auth_code", skip_serializing_if = "Option::is_none")]
    pub hydra_ttl_auth_code: Option<String>,
    /// This governs the \"ttl.id_token\" setting.
    #[serde(rename = "hydra_ttl_id_token", skip_serializing_if = "Option::is_none")]
    pub hydra_ttl_id_token: Option<String>,
    /// Configures how long a user login and consent flow may take.  This governs the \"ttl.login_consent_request\" setting.
    #[serde(rename = "hydra_ttl_login_consent_request", skip_serializing_if = "Option::is_none")]
    pub hydra_ttl_login_consent_request: Option<String>,
    /// Configures how long refresh tokens are valid.  Set to -1 for refresh tokens to never expire. This is not recommended!  This governs the \"ttl.refresh_token\" setting.
    #[serde(rename = "hydra_ttl_refresh_token", skip_serializing_if = "Option::is_none")]
    pub hydra_ttl_refresh_token: Option<String>,
    /// Sets the OAuth2 Consent Endpoint URL of the OAuth2 User Login & Consent flow.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.consent\" setting.
    #[serde(rename = "hydra_urls_consent", skip_serializing_if = "Option::is_none")]
    pub hydra_urls_consent: Option<String>,
    /// Sets the OAuth2 Error URL of the OAuth2 User Login & Consent flow.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.error\" setting.
    #[serde(rename = "hydra_urls_error", skip_serializing_if = "Option::is_none")]
    pub hydra_urls_error: Option<String>,
    /// Sets the OAuth2 Login Endpoint URL of the OAuth2 User Login & Consent flow.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.login\" setting.
    #[serde(rename = "hydra_urls_login", skip_serializing_if = "Option::is_none")]
    pub hydra_urls_login: Option<String>,
    /// Sets the logout endpoint.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.logout\" setting.
    #[serde(rename = "hydra_urls_logout", skip_serializing_if = "Option::is_none")]
    pub hydra_urls_logout: Option<String>,
    /// When an OAuth2-related user agent requests to log out, they will be redirected to this url afterwards per default.  Defaults to the Ory Account Experience in development and your application in production mode when a custom domain is connected.  This governs the \"urls.post_logout_redirect\" setting.
    #[serde(rename = "hydra_urls_post_logout_redirect", skip_serializing_if = "Option::is_none")]
    pub hydra_urls_post_logout_redirect: Option<String>,
    /// Sets the OAuth2 Registration Endpoint URL of the OAuth2 User Login & Consent flow.  Defaults to the Ory Account Experience if left empty.  This governs the \"urls.registration\" setting.
    #[serde(rename = "hydra_urls_registration", skip_serializing_if = "Option::is_none")]
    pub hydra_urls_registration: Option<String>,
    /// This value will be used as the issuer in access and ID tokens. It must be specified and using HTTPS protocol, unless the development mode is enabled.  On the Ory Network it will be very rare that you want to modify this value. If left empty, it will default to the correct value for the Ory Network.  This governs the \"urls.self.issuer\" setting.
    #[serde(rename = "hydra_urls_self_issuer", skip_serializing_if = "Option::is_none")]
    pub hydra_urls_self_issuer: Option<String>,
    /// A list of JSON Web Keys that should be exposed at that endpoint. This is usually the public key for verifying OpenID Connect ID Tokens. However, you might want to add additional keys here as well.  This governs the \"webfinger.jwks.broadcast_keys\" setting.
    #[serde(rename = "hydra_webfinger_jwks_broadcast_keys", skip_serializing_if = "Option::is_none")]
    pub hydra_webfinger_jwks_broadcast_keys: Option<Vec<String>>,
    /// Configures OpenID Connect Discovery and overwrites the OAuth2 Authorization URL.  This governs the \"webfinger.oidc_discovery.auth_url\" setting.
    #[serde(rename = "hydra_webfinger_oidc_discovery_auth_url", skip_serializing_if = "Option::is_none")]
    pub hydra_webfinger_oidc_discovery_auth_url: Option<String>,
    /// Configures OpenID Connect Discovery and overwrites the OpenID Connect Dynamic Client Registration Endpoint.  This governs the \"webfinger.oidc_discovery.client_registration_url\" setting.
    #[serde(rename = "hydra_webfinger_oidc_discovery_client_registration_url", skip_serializing_if = "Option::is_none")]
    pub hydra_webfinger_oidc_discovery_client_registration_url: Option<String>,
    /// Configures OpenID Connect Discovery and overwrites the JWKS URL.  This governs the \"webfinger.oidc_discovery.jwks_url\" setting.
    #[serde(rename = "hydra_webfinger_oidc_discovery_jwks_url", skip_serializing_if = "Option::is_none")]
    pub hydra_webfinger_oidc_discovery_jwks_url: Option<String>,
    /// Configures OpenID Connect Discovery and overwrites a list of supported claims to be broadcasted. Claim \"sub\" is always included.  This governs the \"webfinger.oidc_discovery.supported_claims\" setting.
    #[serde(rename = "hydra_webfinger_oidc_discovery_supported_claims", skip_serializing_if = "Option::is_none")]
    pub hydra_webfinger_oidc_discovery_supported_claims: Option<Vec<String>>,
    /// Configures OpenID Connect Discovery and overwrites the scope OAuth 2.0 Clients may request. Scope `offline`, `offline_access`, and `openid` are always included.  This governs the \"webfinger.oidc_discovery.supported_scope\" setting.
    #[serde(rename = "hydra_webfinger_oidc_discovery_supported_scope", skip_serializing_if = "Option::is_none")]
    pub hydra_webfinger_oidc_discovery_supported_scope: Option<Vec<String>>,
    /// Configures OpenID Connect Discovery and overwrites the OAuth2 Token URL.  This governs the \"webfinger.oidc_discovery.token_url\" setting.
    #[serde(rename = "hydra_webfinger_oidc_discovery_token_url", skip_serializing_if = "Option::is_none")]
    pub hydra_webfinger_oidc_discovery_token_url: Option<String>,
    /// Configures OpenID Connect Discovery and overwrites userinfo endpoint to be advertised at the OpenID Connect Discovery endpoint /.well-known/openid-configuration. Defaults to Ory Hydra's userinfo endpoint at /userinfo. Set this value if you want to handle this endpoint yourself.  This governs the \"webfinger.oidc_discovery.userinfo_url\" setting.
    #[serde(rename = "hydra_webfinger_oidc_discovery_userinfo_url", skip_serializing_if = "Option::is_none")]
    pub hydra_webfinger_oidc_discovery_userinfo_url: Option<String>,
    /// The revision ID.
    #[serde(rename = "id", skip_serializing_if = "Option::is_none")]
    pub id: Option<String>,
    /// The Revisions' Keto Namespace Configuration  The string is a URL pointing to an OPL file with the configuration.  This governs the \"namespaces.location\" setting.
    #[serde(rename = "keto_namespace_configuration", skip_serializing_if = "Option::is_none")]
    pub keto_namespace_configuration: Option<String>,
    #[serde(rename = "keto_namespaces", skip_serializing_if = "Option::is_none")]
    pub keto_namespaces: Option<Vec<models::KetoNamespace>>,
    /// Configures Keto's pagination secrets.  This governs the \"secrets.pagination\" setting.
    #[serde(rename = "keto_secrets_pagination", skip_serializing_if = "Option::is_none")]
    pub keto_secrets_pagination: Option<Vec<String>>,
    /// Configures the Ory Kratos Cookie SameSite Attribute  This governs the \"cookies.same_site\" setting.
    #[serde(rename = "kratos_cookies_same_site", skip_serializing_if = "Option::is_none")]
    pub kratos_cookies_same_site: Option<String>,
    #[serde(rename = "kratos_courier_channels", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_channels: Option<Vec<models::NormalizedProjectRevisionCourierChannel>>,
    /// The delivery strategy to use when sending emails  This governs the \"courier.delivery_strategy\" setting.  `smtp`: Use SMTP server `http`: Use the built in HTTP client to send the email to some remote service
    #[serde(rename = "kratos_courier_delivery_strategy", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_delivery_strategy: Option<String>,
    /// The location of the API key to use in the HTTP email sending service's authentication  `header`: Send the key value pair as a header `cookie`: Send the key value pair as a cookie This governs the \"courier.http.request_config.auth.config.in\" setting.
    #[serde(rename = "kratos_courier_http_request_config_auth_api_key_in", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_http_request_config_auth_api_key_in: Option<String>,
    /// The name of the API key to use in the HTTP email sending service's authentication  This governs the \"courier.http.request_config.auth.config.name\" setting.
    #[serde(rename = "kratos_courier_http_request_config_auth_api_key_name", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_http_request_config_auth_api_key_name: Option<String>,
    /// The value of the API key to use in the HTTP email sending service's authentication  This governs the \"courier.http.request_config.auth.config.value\" setting.
    #[serde(rename = "kratos_courier_http_request_config_auth_api_key_value", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_http_request_config_auth_api_key_value: Option<String>,
    /// The password to use for basic auth in the HTTP email sending service's authentication  This governs the \"courier.http.request_config.auth.config.password\" setting.
    #[serde(rename = "kratos_courier_http_request_config_auth_basic_auth_password", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_http_request_config_auth_basic_auth_password: Option<String>,
    /// The user to use for basic auth in the HTTP email sending service's authentication  This governs the \"courier.http.request_config.auth.config.user\" setting.
    #[serde(rename = "kratos_courier_http_request_config_auth_basic_auth_user", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_http_request_config_auth_basic_auth_user: Option<String>,
    /// The authentication type to use while contacting the remote HTTP email sending service  This governs the \"courier.http.request_config.auth.type\" setting.  `basic_auth`: Use Basic Authentication `api_key`: Use API Key Authentication in a header or cookie
    #[serde(rename = "kratos_courier_http_request_config_auth_type", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_http_request_config_auth_type: Option<String>,
    /// The Jsonnet template to generate the body to send to the remote HTTP email sending service  Should be valid Jsonnet and base64 encoded  This governs the \"courier.http.request_config.body\" setting.
    #[serde(rename = "kratos_courier_http_request_config_body", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_http_request_config_body: Option<String>,
    /// Any additional headers to send to the remote HTTP email sending service  This governs the \"courier.http.request_config.headers\" setting.
    #[serde(rename = "kratos_courier_http_request_config_headers", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_http_request_config_headers: Option<serde_json::Value>,
    /// The http METHOD to use when calling the remote HTTP email sending service  This governs the \"courier.http.request_config.method\" setting.
    #[serde(rename = "kratos_courier_http_request_config_method", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_http_request_config_method: Option<String>,
    /// The URL of the remote HTTP email sending service  This governs the \"courier.http.request_config.url\" setting.
    #[serde(rename = "kratos_courier_http_request_config_url", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_http_request_config_url: Option<String>,
    /// Configures the Ory Kratos SMTP Connection URI  This governs the \"courier.smtp.connection_uri\" setting.
    #[serde(rename = "kratos_courier_smtp_connection_uri", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_smtp_connection_uri: Option<String>,
    /// Configures the Ory Kratos SMTP From Address  This governs the \"courier.smtp.from_address\" setting.
    #[serde(rename = "kratos_courier_smtp_from_address", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_smtp_from_address: Option<String>,
    /// Configures the Ory Kratos SMTP From Name  This governs the \"courier.smtp.from_name\" setting.
    #[serde(rename = "kratos_courier_smtp_from_name", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_smtp_from_name: Option<String>,
    /// Configures the Ory Kratos SMTP Connection Headers  This governs the \"courier.smtp.headers\" setting.
    #[serde(rename = "kratos_courier_smtp_headers", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_smtp_headers: Option<serde_json::Value>,
    /// Configures the local_name to use in SMTP connections  This governs the \"courier.smtp.local_name\" setting.
    #[serde(rename = "kratos_courier_smtp_local_name", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_smtp_local_name: Option<String>,
    /// Configures the Ory Kratos Valid Login via Code Email Body HTML Template  This governs the \"courier.templates.login_code.valid.email.body.html\" setting.
    #[serde(rename = "kratos_courier_templates_login_code_valid_email_body_html", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_login_code_valid_email_body_html: Option<String>,
    /// Configures the Ory Kratos Valid Login via Code Email Body Plaintext Template  This governs the \"courier.templates.login_code.valid.email.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_login_code_valid_email_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_login_code_valid_email_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Valid Login via Code Email Subject Template  This governs the \"courier.templates.login_code.valid.email.subject\" setting.
    #[serde(rename = "kratos_courier_templates_login_code_valid_email_subject", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_login_code_valid_email_subject: Option<String>,
    /// Configures the Ory Kratos Valid Login via Code SMS plain text body  This governs the \"courier.templates.login_code.valid.sms.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_login_code_valid_sms_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_login_code_valid_sms_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Invalid Recovery via Code Email Body HTML Template  This governs the \"courier.templates.recovery_code.invalid.email.body.html\" setting.
    #[serde(rename = "kratos_courier_templates_recovery_code_invalid_email_body_html", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_recovery_code_invalid_email_body_html: Option<String>,
    /// Configures the Ory Kratos Invalid Recovery via Code Email Body Plaintext Template  This governs the \"courier.templates.recovery_code.invalid.email.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_recovery_code_invalid_email_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_recovery_code_invalid_email_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Invalid Recovery via Code Email Subject Template  This governs the \"courier.templates.recovery_code.invalid.email.subject\" setting.
    #[serde(rename = "kratos_courier_templates_recovery_code_invalid_email_subject", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_recovery_code_invalid_email_subject: Option<String>,
    /// Configures the Ory Kratos Valid Recovery via Code Email Body HTML Template  This governs the \"courier.templates.recovery_code.valid.email.body.html\" setting.
    #[serde(rename = "kratos_courier_templates_recovery_code_valid_email_body_html", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_recovery_code_valid_email_body_html: Option<String>,
    /// Configures the Ory Kratos Valid Recovery via Code Email Body Plaintext Template  This governs the \"courier.templates.recovery_code.valid.email.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_recovery_code_valid_email_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_recovery_code_valid_email_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Valid Recovery via Code Email Subject Template  This governs the \"courier.templates.recovery_code.valid.email.subject\" setting.
    #[serde(rename = "kratos_courier_templates_recovery_code_valid_email_subject", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_recovery_code_valid_email_subject: Option<String>,
    /// Configures the Ory Kratos Invalid Recovery Email Body HTML Template  This governs the \"courier.templates.recovery.invalid.email.body.html\" setting.
    #[serde(rename = "kratos_courier_templates_recovery_invalid_email_body_html", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_recovery_invalid_email_body_html: Option<String>,
    /// Configures the Ory Kratos Invalid Recovery Email Body Plaintext Template  This governs the \"courier.templates.recovery.invalid.email.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_recovery_invalid_email_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_recovery_invalid_email_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Invalid Recovery Email Subject Template  This governs the \"courier.templates.recovery.invalid.email.subject\" setting.
    #[serde(rename = "kratos_courier_templates_recovery_invalid_email_subject", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_recovery_invalid_email_subject: Option<String>,
    /// Configures the Ory Kratos Valid Recovery Email Body HTML Template  This governs the \"courier.templates.recovery.valid.email.body.html\" setting.
    #[serde(rename = "kratos_courier_templates_recovery_valid_email_body_html", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_recovery_valid_email_body_html: Option<String>,
    /// Configures the Ory Kratos Valid Recovery Email Body Plaintext Template  This governs the \"courier.templates.recovery.valid.email.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_recovery_valid_email_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_recovery_valid_email_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Valid Recovery Email Subject Template  This governs the \"courier.templates.recovery.valid.email.subject\" setting.
    #[serde(rename = "kratos_courier_templates_recovery_valid_email_subject", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_recovery_valid_email_subject: Option<String>,
    /// Configures the Ory Kratos Valid Registration via Code Email Body HTML Template  This governs the \"courier.templates.registration_code.valid.email.body.html\" setting.
    #[serde(rename = "kratos_courier_templates_registration_code_valid_email_body_html", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_registration_code_valid_email_body_html: Option<String>,
    /// Configures the Ory Kratos Valid Registration via Code Email Body Plaintext Template  This governs the \"courier.templates.registration_code.valid.email.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_registration_code_valid_email_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_registration_code_valid_email_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Valid Registration via Code Email Subject Template  This governs the \"courier.templates.registration_code.valid.email.subject\" setting.
    #[serde(rename = "kratos_courier_templates_registration_code_valid_email_subject", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_registration_code_valid_email_subject: Option<String>,
    /// Configures the Ory Kratos Valid Registration via Code SMS Body Plaintext Template  This governs the \"courier.templates.registration_code.valid.sms.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_registration_code_valid_sms_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_registration_code_valid_sms_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Verifiable Address Changed Email Body HTML Template  This governs the \"courier.templates.verifiable_address_changed.email.body.html\" setting.
    #[serde(rename = "kratos_courier_templates_verifiable_address_changed_email_body_html", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verifiable_address_changed_email_body_html: Option<String>,
    /// Configures the Ory Kratos Verifiable Address Changed Email Body Plaintext Template  This governs the \"courier.templates.verifiable_address_changed.email.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_verifiable_address_changed_email_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verifiable_address_changed_email_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Verifiable Address Changed Email Subject Template  This governs the \"courier.templates.verifiable_address_changed.email.subject\" setting.
    #[serde(rename = "kratos_courier_templates_verifiable_address_changed_email_subject", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verifiable_address_changed_email_subject: Option<String>,
    /// Configures the Ory Kratos Verifiable Address Changed SMS Body Plaintext Template  This governs the \"courier.templates.verifiable_address_changed.sms.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_verifiable_address_changed_sms_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verifiable_address_changed_sms_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Invalid Verification via Code Email Body HTML Template  This governs the \"courier.templates.verification_code.invalid.email.body.html\" setting.
    #[serde(rename = "kratos_courier_templates_verification_code_invalid_email_body_html", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verification_code_invalid_email_body_html: Option<String>,
    /// Configures the Ory Kratos Invalid Verification via Code Email Body Plaintext Template  This governs the \"courier.templates.verification_code.invalid.email.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_verification_code_invalid_email_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verification_code_invalid_email_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Invalid Verification via Code Email Subject Template  This governs the \"courier.templates.verification_code.invalid.email.subject\" setting.
    #[serde(rename = "kratos_courier_templates_verification_code_invalid_email_subject", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verification_code_invalid_email_subject: Option<String>,
    /// Configures the Ory Kratos Valid Verification via Code Email Body HTML Template  This governs the \"courier.templates.verification_code.valid.email.body.html\" setting.
    #[serde(rename = "kratos_courier_templates_verification_code_valid_email_body_html", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verification_code_valid_email_body_html: Option<String>,
    /// Configures the Ory Kratos Valid Verification via Code Email Body Plaintext Template  This governs the \"courier.templates.verification_code.valid.email.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_verification_code_valid_email_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verification_code_valid_email_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Valid Verification via Code Email Subject Template  This governs the \"courier.templates.verification_code.valid.email.subject\" setting.
    #[serde(rename = "kratos_courier_templates_verification_code_valid_email_subject", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verification_code_valid_email_subject: Option<String>,
    /// Configures the Ory Kratos Valid Verification via Code SMS Body Plaintext  This governs the \"courier.templates.verification_code.valid.sms.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_verification_code_valid_sms_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verification_code_valid_sms_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Invalid Verification Email Body HTML Template  This governs the \"courier.templates.verification.invalid.email.body.html\" setting.
    #[serde(rename = "kratos_courier_templates_verification_invalid_email_body_html", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verification_invalid_email_body_html: Option<String>,
    /// Configures the Ory Kratos Invalid Verification Email Body Plaintext Template  This governs the \"courier.templates.verification.invalid.email.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_verification_invalid_email_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verification_invalid_email_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Invalid Verification Email Subject Template  This governs the \"courier.templates.verification.invalid.email.subject\" setting.
    #[serde(rename = "kratos_courier_templates_verification_invalid_email_subject", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verification_invalid_email_subject: Option<String>,
    /// Configures the Ory Kratos Valid Verification Email Body HTML Template  This governs the \"courier.templates.verification.valid.email.body.html\" setting.
    #[serde(rename = "kratos_courier_templates_verification_valid_email_body_html", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verification_valid_email_body_html: Option<String>,
    /// Configures the Ory Kratos Valid Verification Email Body Plaintext Template  This governs the \"courier.templates.verification.valid.email.body.plaintext\" setting.
    #[serde(rename = "kratos_courier_templates_verification_valid_email_body_plaintext", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verification_valid_email_body_plaintext: Option<String>,
    /// Configures the Ory Kratos Valid Verification Email Subject Template  This governs the \"courier.templates.verification.valid.email.subject\" setting.
    #[serde(rename = "kratos_courier_templates_verification_valid_email_subject", skip_serializing_if = "Option::is_none")]
    pub kratos_courier_templates_verification_valid_email_subject: Option<String>,
    /// Configures the Ory Kratos Session caching feature flag  This governs the \"feature_flags.cacheable_sessions\" setting.
    #[serde(rename = "kratos_feature_flags_cacheable_sessions", skip_serializing_if = "Option::is_none")]
    pub kratos_feature_flags_cacheable_sessions: Option<bool>,
    /// Configures the Ory Kratos Session caching max-age feature flag  This governs the \"feature_flags.cacheable_sessions_max_age\" setting.
    #[serde(rename = "kratos_feature_flags_cacheable_sessions_max_age", skip_serializing_if = "Option::is_none")]
    pub kratos_feature_flags_cacheable_sessions_max_age: Option<String>,
    /// This governs the \"feature_flags.choose_recovery_address\" setting.
    #[serde(rename = "kratos_feature_flags_choose_recovery_address", skip_serializing_if = "Option::is_none")]
    pub kratos_feature_flags_choose_recovery_address: Option<bool>,
    /// Configures the Ory Kratos Faster Session Extend setting  If enabled allows faster session extension by skipping the session lookup and returning 201 instead of 200. Disabling this feature will be deprecated in the future.  This governs the \"feature_flags.faster_session_extend\" setting.
    #[serde(rename = "kratos_feature_flags_faster_session_extend", skip_serializing_if = "Option::is_none")]
    pub kratos_feature_flags_faster_session_extend: Option<bool>,
    /// Always include show_verification_ui in continue_with  If true, restores the legacy behavior of always including `show_verification_ui` in the registration flow's `continue_with` when verification is enabled. If set to false, `show_verification_ui` is only set in `continue_with` if the `show_verification_ui` hook is used. This flag will be removed in the future.  This governs the \"feature_flags.legacy_continue_with_verification_ui\" setting.
    #[serde(rename = "kratos_feature_flags_legacy_continue_with_verification_ui", skip_serializing_if = "Option::is_none")]
    pub kratos_feature_flags_legacy_continue_with_verification_ui: Option<bool>,
    /// Controls whether the UI nodes in an OIDC registration flow have group \"oidc\" in case required fields are not returned by the OIDC provider.  If set to true, the UI nodes will have group \"oidc\" and the flow will be considered successful if the user completes the flow. This is the legacy behavior.  This governs the \"feature_flags.legacy_oidc_registration_node_group\" setting.
    #[serde(rename = "kratos_feature_flags_legacy_oidc_registration_node_group", skip_serializing_if = "Option::is_none")]
    pub kratos_feature_flags_legacy_oidc_registration_node_group: Option<bool>,
    /// Return a form error if the login identifier is not verified  If true, the login flow will return a form error if the login identifier is not verified, which restores legacy behavior. If this value is false, the `continue_with` array will contain a `show_verification_ui` hook instead.  This flag is deprecated and will be removed in the future.  This governs the \"feature_flags.legacy_require_verified_login_error\" setting.
    #[serde(rename = "kratos_feature_flags_legacy_require_verified_login_error", skip_serializing_if = "Option::is_none")]
    pub kratos_feature_flags_legacy_require_verified_login_error: Option<bool>,
    /// Configures the group for the password method in the registration flow.  If true, it sets the password method group value to \"password\" if it is the only method available. This is the legacy behavior. If false is, it sets the password method group value to \"default\".  This governs the \"feature_flags.password_profile_registration_node_group\" setting.
    #[serde(rename = "kratos_feature_flags_password_profile_registration_node_group", skip_serializing_if = "Option::is_none")]
    pub kratos_feature_flags_password_profile_registration_node_group: Option<bool>,
    /// Configures the Ory Kratos Session use_continue_with_transitions flag  This governs the \"feature_flags.use_continue_with_transitions\" setting.
    #[serde(rename = "kratos_feature_flags_use_continue_with_transitions", skip_serializing_if = "Option::is_none")]
    pub kratos_feature_flags_use_continue_with_transitions: Option<bool>,
    #[serde(rename = "kratos_identity_schemas", skip_serializing_if = "Option::is_none")]
    pub kratos_identity_schemas: Option<Vec<models::NormalizedProjectRevisionIdentitySchema>>,
    /// Configures the OAuth2 Provider Integration HTTP Headers  This governs the \"oauth2_provider.headers\" setting.
    #[serde(rename = "kratos_oauth2_provider_headers", skip_serializing_if = "Option::is_none")]
    pub kratos_oauth2_provider_headers: Option<serde_json::Value>,
    /// Kratos OAuth2 Provider Override Return To  Enabling this allows Kratos to set the return_to parameter automatically to the OAuth2 request URL on the login flow, allowing complex flows such as recovery to continue to the initial OAuth2 flow.  This governs the \"oauth2_provider.override_return_to\" setting.
    #[serde(rename = "kratos_oauth2_provider_override_return_to", skip_serializing_if = "Option::is_none")]
    pub kratos_oauth2_provider_override_return_to: Option<bool>,
    /// The Revisions' OAuth2 Provider Integration URL  This governs the \"oauth2_provider.url\" setting.
    #[serde(rename = "kratos_oauth2_provider_url", skip_serializing_if = "Option::is_none")]
    pub kratos_oauth2_provider_url: Option<String>,
    /// Configures the default read consistency level for identity APIs  The read consistency level determines the consistency guarantee for reads:  strong (slow): The read is guaranteed to return the most recent data committed at the start of the read. eventual (very fast): The result will return data that is about 4.8 seconds old.  Setting the default consistency level to `eventual` may cause regressions in the future as we add consistency controls to more APIs. Currently, the following APIs will be affected by this setting:  `GET /admin/identities`  Defaults to \"strong\" for new and existing projects. This feature is in preview. Use with caution. This governs the \"preview.default_read_consistency_level\" setting.
    #[serde(rename = "kratos_preview_default_read_consistency_level", skip_serializing_if = "Option::is_none")]
    pub kratos_preview_default_read_consistency_level: Option<String>,
    /// Configures the Ory Kratos Cipher Secret  This governs the \"secrets.cipher\" setting.
    #[serde(rename = "kratos_secrets_cipher", skip_serializing_if = "Option::is_none")]
    pub kratos_secrets_cipher: Option<Vec<String>>,
    /// Configures the Ory Kratos Cookie Secret  This governs the \"secrets.cookie\" setting.
    #[serde(rename = "kratos_secrets_cookie", skip_serializing_if = "Option::is_none")]
    pub kratos_secrets_cookie: Option<Vec<String>>,
    /// Configures the Ory Kratos Default Secret  This governs the \"secrets.default\" setting.
    #[serde(rename = "kratos_secrets_default", skip_serializing_if = "Option::is_none")]
    pub kratos_secrets_default: Option<Vec<String>>,
    /// Configures the Ory Kratos Pagination Secret  This governs the \"secrets.pagination\" setting.
    #[serde(rename = "kratos_secrets_pagination", skip_serializing_if = "Option::is_none")]
    pub kratos_secrets_pagination: Option<Vec<String>>,
    /// Configures if account enumeration should be mitigated when using identifier first login.  This governs the \"security.account_enumeration.mitigate\" setting.
    #[serde(rename = "kratos_security_account_enumeration_mitigate", skip_serializing_if = "Option::is_none")]
    pub kratos_security_account_enumeration_mitigate: Option<bool>,
    /// Configures the Ory Kratos Allowed Return URLs  This governs the \"selfservice.allowed_return_urls\" setting.
    #[serde(rename = "kratos_selfservice_allowed_return_urls", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_allowed_return_urls: Option<Vec<String>>,
    /// Configures the Ory Kratos Default Return URL  This governs the \"selfservice.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Error UI URL  This governs the \"selfservice.flows.error.ui_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_error_ui_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_error_ui_url: Option<String>,
    /// Configures the Ory Kratos Login After Code Default Return URL  This governs the \"selfservice.flows.login.after.code.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_login_after_code_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_login_after_code_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Login Default Return URL  This governs the \"selfservice.flows.login.after.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_login_after_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_login_after_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Login After Lookup Secret Default Return URL  This governs the \"selfservice.flows.login.after.lookup_secret.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_login_after_lookup_secret_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_login_after_lookup_secret_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Login After OIDC Default Return URL  This governs the \"selfservice.flows.login.after.oidc.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_login_after_oidc_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_login_after_oidc_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Login After Passkey Default Return URL  This governs the \"selfservice.flows.login.after.passkey.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_login_after_passkey_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_login_after_passkey_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Login After Password Default Return URL  This governs the \"selfservice.flows.login.after.password.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_login_after_password_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_login_after_password_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Login After TOTP Default Return URL  This governs the \"selfservice.flows.login.after.totp.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_login_after_totp_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_login_after_totp_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Login After WebAuthn Default Return URL  This governs the \"selfservice.flows.login.after.webauthn.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_login_after_webauthn_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_login_after_webauthn_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Login Lifespan  This governs the \"selfservice.flows.login.lifespan\" setting.
    #[serde(rename = "kratos_selfservice_flows_login_lifespan", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_login_lifespan: Option<String>,
    /// Configures the Ory Kratos Login Flow Style  This governs the \"selfservice.flows.login.style\" setting. Possible values are \"unified\" and \"identifier_first\".
    #[serde(rename = "kratos_selfservice_flows_login_style", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_login_style: Option<String>,
    /// Configures the Ory Kratos Login UI URL  This governs the \"selfservice.flows.login.ui_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_login_ui_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_login_ui_url: Option<String>,
    /// Configures the Ory Kratos Logout Default Return URL  This governs the \"selfservice.flows.logout.after.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_logout_after_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_logout_after_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Recovery Default Return URL  This governs the \"selfservice.flows.recovery.after.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_recovery_after_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_recovery_after_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Recovery Enabled Setting  This governs the \"selfservice.flows.recovery.enabled\" setting.
    #[serde(rename = "kratos_selfservice_flows_recovery_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_recovery_enabled: Option<bool>,
    /// Configures the Ory Kratos Recovery Lifespan  This governs the \"selfservice.flows.recovery.lifespan\" setting.
    #[serde(rename = "kratos_selfservice_flows_recovery_lifespan", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_recovery_lifespan: Option<String>,
    /// Configures whether to notify unknown recipients of a Ory Kratos recovery flow  This governs the \"selfservice.flows.recovery.notify_unknown_recipients\" setting.
    #[serde(rename = "kratos_selfservice_flows_recovery_notify_unknown_recipients", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_recovery_notify_unknown_recipients: Option<bool>,
    /// Configures the Ory Kratos Recovery UI URL  This governs the \"selfservice.flows.recovery.ui_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_recovery_ui_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_recovery_ui_url: Option<String>,
    /// Configures the Ory Kratos Recovery strategy to use (\"link\" or \"code\")  This governs the \"selfservice.flows.recovery.use\" setting. link SelfServiceMessageVerificationStrategyLink code SelfServiceMessageVerificationStrategyCode
    #[serde(rename = "kratos_selfservice_flows_recovery_use", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_recovery_use: Option<KratosSelfserviceFlowsRecoveryUseEnum>,
    /// Configures the Ory Kratos Registration After Code Default Return URL  This governs the \"selfservice.flows.registration.after.code.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_registration_after_code_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_registration_after_code_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Registration Default Return URL  This governs the \"selfservice.flows.registration.after.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_registration_after_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_registration_after_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Registration After OIDC Default Return URL  This governs the \"selfservice.flows.registration.after.oidc.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_registration_after_oidc_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_registration_after_oidc_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Registration After Passkey Default Return URL  This governs the \"selfservice.flows.registration.after.passkey.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_registration_after_passkey_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_registration_after_passkey_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Registration After Password Default Return URL  This governs the \"selfservice.flows.registration.after.password.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_registration_after_password_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_registration_after_password_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Registration After Webauthn Default Return URL  This governs the \"selfservice.flows.registration.after.webauthn.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_registration_after_webauthn_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_registration_after_webauthn_default_browser_return_url: Option<String>,
    /// Disable two-step registration  Two-step registration is a significantly improved sign up flow and recommended when using more than one sign up methods. To revert to one-step registration, set this to `true`.  This governs the \"selfservice.flows.registration.enable_legacy_one_step\" setting.
    #[serde(rename = "kratos_selfservice_flows_registration_enable_legacy_one_step", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_registration_enable_legacy_one_step: Option<bool>,
    /// Configures the Whether Ory Kratos Registration is Enabled  This governs the \"selfservice.flows.registration.enabled\" setting.0
    #[serde(rename = "kratos_selfservice_flows_registration_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_registration_enabled: Option<bool>,
    /// Configures the Ory Kratos Registration Lifespan  This governs the \"selfservice.flows.registration.lifespan\" setting.
    #[serde(rename = "kratos_selfservice_flows_registration_lifespan", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_registration_lifespan: Option<String>,
    /// Configures the Ory Kratos Registration Login Hints  Shows helpful information when a user tries to sign up with a duplicate account.  This governs the \"selfservice.flows.registration.login_hints\" setting.
    #[serde(rename = "kratos_selfservice_flows_registration_login_hints", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_registration_login_hints: Option<bool>,
    /// Configures the Ory Kratos Registration UI URL  This governs the \"selfservice.flows.registration.ui_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_registration_ui_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_registration_ui_url: Option<String>,
    /// Configures the Ory Kratos Settings Default Return URL  This governs the \"selfservice.flows.settings.after.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_settings_after_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_settings_after_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Settings Default Return URL After Updating Lookup Secrets  This governs the \"selfservice.flows.settings.after.lookup_secret.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_settings_after_lookup_secret_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_settings_after_lookup_secret_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Settings Default Return URL After Updating Social Sign In  This governs the \"selfservice.flows.settings.after.oidc.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_settings_after_oidc_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_settings_after_oidc_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Settings Default Return URL After Updating Passkey  This governs the \"selfservice.flows.settings.after.passkey.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_settings_after_passkey_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_settings_after_passkey_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Settings Default Return URL After Updating Passwords  This governs the \"selfservice.flows.settings.after.password.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_settings_after_password_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_settings_after_password_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Settings Default Return URL After Updating Profiles  This governs the \"selfservice.flows.settings.after.profile.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_settings_after_profile_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_settings_after_profile_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Settings Default Return URL After Updating TOTP  This governs the \"selfservice.flows.settings.after.totp.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_settings_after_totp_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_settings_after_totp_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Settings Default Return URL After Updating WebAuthn  This governs the \"selfservice.flows.settings.after.webauthn.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_settings_after_webauthn_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_settings_after_webauthn_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Settings Lifespan  This governs the \"selfservice.flows.settings.lifespan\" setting.
    #[serde(rename = "kratos_selfservice_flows_settings_lifespan", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_settings_lifespan: Option<String>,
    /// Configures the Ory Kratos Settings Privileged Session Max Age  This governs the \"selfservice.flows.settings.privileged_session_max_age\" setting.
    #[serde(rename = "kratos_selfservice_flows_settings_privileged_session_max_age", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_settings_privileged_session_max_age: Option<String>,
    /// Configures the Ory Kratos Settings Required AAL  This governs the \"selfservice.flows.settings.required_aal\" setting.
    #[serde(rename = "kratos_selfservice_flows_settings_required_aal", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_settings_required_aal: Option<String>,
    /// Configures the Ory Kratos Settings UI URL  This governs the \"selfservice.flows.settings.ui_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_settings_ui_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_settings_ui_url: Option<String>,
    /// Configures the Ory Kratos Verification Default Return URL  This governs the \"selfservice.flows.verification.after.default_browser_return_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_verification_after_default_browser_return_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_verification_after_default_browser_return_url: Option<String>,
    /// Configures the Ory Kratos Verification Enabled Setting  This governs the \"selfservice.flows.verification.enabled\" setting.
    #[serde(rename = "kratos_selfservice_flows_verification_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_verification_enabled: Option<bool>,
    /// Configures the Ory Kratos Verification Lifespan  This governs the \"selfservice.flows.verification.lifespan\" setting.
    #[serde(rename = "kratos_selfservice_flows_verification_lifespan", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_verification_lifespan: Option<String>,
    /// Configures whether to notify unknown recipients of a Ory Kratos verification flow  This governs the \"selfservice.flows.verification.notify_unknown_recipients\" setting.
    #[serde(rename = "kratos_selfservice_flows_verification_notify_unknown_recipients", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_verification_notify_unknown_recipients: Option<bool>,
    /// Configures the Ory Kratos Verification UI URL  This governs the \"selfservice.flows.verification.ui_url\" setting.
    #[serde(rename = "kratos_selfservice_flows_verification_ui_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_verification_ui_url: Option<String>,
    /// Configures the Ory Kratos Strategy to use for Verification  This governs the \"selfservice.flows.verification.use\" setting. link SelfServiceMessageVerificationStrategyLink code SelfServiceMessageVerificationStrategyCode
    #[serde(rename = "kratos_selfservice_flows_verification_use", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_flows_verification_use: Option<KratosSelfserviceFlowsVerificationUseEnum>,
    /// Configures the CAPTCHA allowed domains list  This governs the \"selfservice.methods.captcha.config.allowed_domains\" setting.
    #[serde(rename = "kratos_selfservice_methods_captcha_config_allowed_domains", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_captcha_config_allowed_domains: Option<Vec<String>>,
    /// Configures whether to use BYO or managed widget  Reach out to your account manager to enable this feature.  This governs the \"selfservice.methods.captcha.config.byo\" setting.
    #[serde(rename = "kratos_selfservice_methods_captcha_config_byo", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_captcha_config_byo: Option<bool>,
    /// Configures the Cloudflare Turnstile site secret for Ory BYO CAPTCHA protection  The site secret is private and will be never be shared with the client. This key is write only and the value will not be returned in response to a read request.  Reach out to your account manager to enable this feature.  This governs the \"selfservice.methods.captcha.config.cf_turnstile.secret\" setting.
    #[serde(rename = "kratos_selfservice_methods_captcha_config_cf_turnstile_byo_secret", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_captcha_config_cf_turnstile_byo_secret: Option<String>,
    /// Configures the Cloudflare Turnstile site key for Ory BYO CAPTCHA protection  The site key is public and will be shared with the client.  Reach out to your account manager to enable this feature.  This governs the \"selfservice.methods.captcha.config.cf_turnstile.sitekey\" setting.
    #[serde(rename = "kratos_selfservice_methods_captcha_config_cf_turnstile_byo_sitekey", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_captcha_config_cf_turnstile_byo_sitekey: Option<String>,
    /// Configures the Cloudflare Turnstile site secret for managed CAPTCHA protection  The site secret is private and will be never be shared with the client. This key is write only and the value will not be returned in response to a read request.  Reach out to your account manager to enable this feature.  This governs the \"selfservice.methods.captcha.config.cf_turnstile.secret\" setting.
    #[serde(rename = "kratos_selfservice_methods_captcha_config_cf_turnstile_secret", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_captcha_config_cf_turnstile_secret: Option<String>,
    /// Configures the Cloudflare Turnstile site key for managed CAPTCHA protection  The site key is public and will be shared with the client.  Reach out to your account manager to enable this feature.  This governs the \"selfservice.methods.captcha.config.cf_turnstile.sitekey\" setting.
    #[serde(rename = "kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey: Option<String>,
    /// Configures legacy CAPTCHA node injection behavior  Reach out to your account manager to enable this feature.  This governs the \"selfservice.methods.captcha.config.legacy_inject_node\" setting.
    #[serde(rename = "kratos_selfservice_methods_captcha_config_legacy_inject_node", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_captcha_config_legacy_inject_node: Option<bool>,
    /// Configures the Ory Kratos Self-Service Methods' Captcha Enabled Setting  Reach out to your account manager to enable this feature.  This governs the \"selfservice.methods.captcha.enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_captcha_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_captcha_enabled: Option<bool>,
    /// Configures the Ory Kratos Code Method's lifespan  This governs the \"selfservice.methods.code.config.lifespan\" setting.
    #[serde(rename = "kratos_selfservice_methods_code_config_lifespan", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_code_config_lifespan: Option<String>,
    /// Configures the maximum number of attempts to submit a one-time code in kratos.  This governs the \"selfservice.methods.code.max_submissions\" setting.
    #[serde(rename = "kratos_selfservice_methods_code_config_max_submissions", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_code_config_max_submissions: Option<i64>,
    /// Enables a fallback method required in certain legacy use cases.  This governs the \"selfservice.methods.code.config.missing_credential_fallback_enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_code_config_missing_credential_fallback_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_code_config_missing_credential_fallback_enabled: Option<bool>,
    /// Configures whether Ory Kratos Code Method is enabled  This governs the \"selfservice.methods.code.enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_code_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_code_enabled: Option<bool>,
    /// Configures whether the code method can be used to fulfil MFA flows  This governs the \"selfservice.methods.code.mfa_enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_code_mfa_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_code_mfa_enabled: Option<bool>,
    /// Configures whether Ory Kratos Passwordless should use the Code Method  This governs the \"selfservice.methods.code.passwordless_enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_code_passwordless_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_code_passwordless_enabled: Option<bool>,
    /// This setting allows the code method to always login a user with code if they have registered with another authentication method such as password or social sign in.  This governs the \"selfservice.methods.code.passwordless_login_fallback_enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_code_passwordless_login_fallback_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_code_passwordless_login_fallback_enabled: Option<bool>,
    /// Configures whether Ory Kratos Device authentication accepts relaxed attestations for testing  Only allowed on development projects and forced off otherwise. Keys enrolled under relaxation are short-lived and refused once this is turned off.  This governs the \"selfservice.methods.deviceauthn.config.insecure_allow_relaxed_attestation\" setting.
    #[serde(rename = "kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation: Option<bool>,
    /// Configures whether Ory Kratos Device authentication is enabled  This governs the \"selfservice.methods.deviceauthn.enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_deviceauthn_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_deviceauthn_enabled: Option<bool>,
    /// Configures the Base URL which Recovery, Verification, and Login Links Point to  It is recommended to leave this value empty. It will be appropriately configured to the best matching domain (e.g. when using custom domains) automatically.  This governs the \"selfservice.methods.link.config.base_url\" setting.
    #[serde(rename = "kratos_selfservice_methods_link_config_base_url", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_link_config_base_url: Option<String>,
    /// Configures the Ory Kratos Link Method's lifespan  This governs the \"selfservice.methods.link.config.lifespan\" setting.
    #[serde(rename = "kratos_selfservice_methods_link_config_lifespan", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_link_config_lifespan: Option<String>,
    /// Configures whether Ory Kratos Link Method is enabled  This governs the \"selfservice.methods.link.enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_link_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_link_enabled: Option<bool>,
    /// Configures whether Ory Kratos TOTP Lookup Secret is enabled  This governs the \"selfservice.methods.lookup_secret.enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_lookup_secret_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_lookup_secret_enabled: Option<bool>,
    /// Configures the Ory Kratos Third Party / OpenID Connect base redirect URI  This governs the \"selfservice.methods.oidc.config.base_redirect_uri\" setting.
    #[serde(rename = "kratos_selfservice_methods_oidc_config_base_redirect_uri", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_oidc_config_base_redirect_uri: Option<String>,
    #[serde(rename = "kratos_selfservice_methods_oidc_config_providers", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_oidc_config_providers: Option<Vec<models::NormalizedProjectRevisionThirdPartyProvider>>,
    /// Configures whether Ory Kratos allows auto-linking of OIDC credentials without a subject  This governs the \"selfservice.methods.oidc.enable_auto_link_policy\" setting.
    #[serde(rename = "kratos_selfservice_methods_oidc_enable_auto_link_policy", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_oidc_enable_auto_link_policy: Option<bool>,
    /// Configures whether Ory Kratos Third Party / OpenID Connect Login is enabled  This governs the \"selfservice.methods.oidc.enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_oidc_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_oidc_enabled: Option<bool>,
    /// Configures the Ory Kratos Passkey RP Display Name  This governs the \"selfservice.methods.passkey.config.rp.display_name\" setting.
    #[serde(rename = "kratos_selfservice_methods_passkey_config_rp_display_name", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_passkey_config_rp_display_name: Option<String>,
    /// Configures the Ory Kratos Passkey RP ID  This governs the \"selfservice.methods.passkey.config.rp.id\" setting.
    #[serde(rename = "kratos_selfservice_methods_passkey_config_rp_id", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_passkey_config_rp_id: Option<String>,
    /// Configures the Ory Kratos Passkey RP Origins  This governs the \"selfservice.methods.passkey.config.rp.origins\" setting.
    #[serde(rename = "kratos_selfservice_methods_passkey_config_rp_origins", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_passkey_config_rp_origins: Option<Vec<String>>,
    /// Configures whether Ory Kratos Passkey authentication is enabled  This governs the \"selfservice.methods.passkey.enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_passkey_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_passkey_enabled: Option<bool>,
    /// Configures whether Ory Kratos Password HIBP Checks is enabled  This governs the \"selfservice.methods.password.config.haveibeenpwned_enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_password_config_haveibeenpwned_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_password_config_haveibeenpwned_enabled: Option<bool>,
    /// Configures whether Ory Kratos Password should disable the similarity policy.  This governs the \"selfservice.methods.password.config.identifier_similarity_check_enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_password_config_identifier_similarity_check_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_password_config_identifier_similarity_check_enabled: Option<bool>,
    /// Configures whether Ory Kratos Password Should ignore HIBPWND Network Errors  This governs the \"selfservice.methods.password.config.ignore_network_errors\" setting.
    #[serde(rename = "kratos_selfservice_methods_password_config_ignore_network_errors", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_password_config_ignore_network_errors: Option<bool>,
    /// Configures Ory Kratos Password Max Breaches Detection  This governs the \"selfservice.methods.password.config.max_breaches\" setting.
    #[serde(rename = "kratos_selfservice_methods_password_config_max_breaches", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_password_config_max_breaches: Option<i64>,
    /// Configures the minimum length of passwords.  This governs the \"selfservice.methods.password.config.min_password_length\" setting.
    #[serde(rename = "kratos_selfservice_methods_password_config_min_password_length", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_password_config_min_password_length: Option<i64>,
    /// Configures whether Ory Kratos Password Method is enabled  This governs the \"selfservice.methods.password.enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_password_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_password_enabled: Option<bool>,
    /// Configures whether Ory Kratos Profile Method is enabled  This governs the \"selfservice.methods.profile.enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_profile_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_profile_enabled: Option<bool>,
    #[serde(rename = "kratos_selfservice_methods_saml_config_providers", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_saml_config_providers: Option<Vec<models::NormalizedProjectRevisionSamlProvider>>,
    /// Configures whether Ory Kratos SAML Login is enabled  This governs the \"selfservice.methods.saml.enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_saml_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_saml_enabled: Option<bool>,
    /// Configures Ory Kratos TOTP Issuer  This governs the \"selfservice.methods.totp.config.issuer\" setting.
    #[serde(rename = "kratos_selfservice_methods_totp_config_issuer", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_totp_config_issuer: Option<String>,
    /// Configures whether Ory Kratos TOTP Method is enabled  This governs the \"selfservice.methods.totp.enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_totp_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_totp_enabled: Option<bool>,
    /// Configures whether Ory Kratos Webauthn is used for passwordless flows  This governs the \"selfservice.methods.webauthn.config.passwordless\" setting.
    #[serde(rename = "kratos_selfservice_methods_webauthn_config_passwordless", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_webauthn_config_passwordless: Option<bool>,
    /// Configures the Ory Kratos Webauthn RP Display Name  This governs the \"selfservice.methods.webauthn.config.rp.display_name\" setting.
    #[serde(rename = "kratos_selfservice_methods_webauthn_config_rp_display_name", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_webauthn_config_rp_display_name: Option<String>,
    /// Configures the Ory Kratos Webauthn RP Icon  This governs the \"selfservice.methods.webauthn.config.rp.icon\" setting. Deprecated: This value will be ignored due to security considerations.
    #[serde(rename = "kratos_selfservice_methods_webauthn_config_rp_icon", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_webauthn_config_rp_icon: Option<String>,
    /// Configures the Ory Kratos Webauthn RP ID  This governs the \"selfservice.methods.webauthn.config.rp.id\" setting.
    #[serde(rename = "kratos_selfservice_methods_webauthn_config_rp_id", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_webauthn_config_rp_id: Option<String>,
    /// Configures the Ory Kratos Webauthn RP Origins  This governs the \"selfservice.methods.webauthn.config.rp.origins\" setting.
    #[serde(rename = "kratos_selfservice_methods_webauthn_config_rp_origins", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_webauthn_config_rp_origins: Option<Vec<String>>,
    /// Configures whether Ory Kratos Webauthn is enabled  This governs the \"selfservice.methods.webauthn.enabled\" setting.
    #[serde(rename = "kratos_selfservice_methods_webauthn_enabled", skip_serializing_if = "Option::is_none")]
    pub kratos_selfservice_methods_webauthn_enabled: Option<bool>,
    /// Configures the Ory Kratos Session Cookie Persistent Attribute  This governs the \"session.cookie.persistent\" setting.
    #[serde(rename = "kratos_session_cookie_persistent", skip_serializing_if = "Option::is_none")]
    pub kratos_session_cookie_persistent: Option<bool>,
    /// Configures the Ory Kratos Session Cookie SameSite Attribute  This governs the \"session.cookie.same_site\" setting.
    #[serde(rename = "kratos_session_cookie_same_site", skip_serializing_if = "Option::is_none")]
    pub kratos_session_cookie_same_site: Option<String>,
    /// Configures the Ory Kratos Session Lifespan  This governs the \"session.lifespan\" setting.
    #[serde(rename = "kratos_session_lifespan", skip_serializing_if = "Option::is_none")]
    pub kratos_session_lifespan: Option<String>,
    /// Configures the Ory Kratos Session Whoami AAL requirement  This governs the \"session.whoami.required_aal\" setting.
    #[serde(rename = "kratos_session_whoami_required_aal", skip_serializing_if = "Option::is_none")]
    pub kratos_session_whoami_required_aal: Option<String>,
    #[serde(rename = "kratos_session_whoami_tokenizer_templates", skip_serializing_if = "Option::is_none")]
    pub kratos_session_whoami_tokenizer_templates: Option<Vec<models::NormalizedProjectRevisionTokenizerTemplate>>,
    /// The project's name.
    #[serde(rename = "name")]
    pub name: String,
    #[serde(rename = "organizations", skip_serializing_if = "Option::is_none")]
    pub organizations: Option<Vec<models::Organization>>,
    /// The Revision's Project ID
    #[serde(rename = "project_id", skip_serializing_if = "Option::is_none")]
    pub project_id: Option<String>,
    #[serde(rename = "project_revision_hooks", skip_serializing_if = "Option::is_none")]
    pub project_revision_hooks: Option<Vec<models::NormalizedProjectRevisionHook>>,
    #[serde(rename = "scim_clients", skip_serializing_if = "Option::is_none")]
    pub scim_clients: Option<Vec<models::NormalizedProjectRevisionScimClient>>,
    /// Configures the CORS Allowed Origins on admin APIs  This governs the \"serve.admin.cors.allowed_origins\" setting.
    #[serde(rename = "serve_admin_cors_allowed_origins", skip_serializing_if = "Option::is_none")]
    pub serve_admin_cors_allowed_origins: Option<Vec<String>>,
    /// Enable CORS headers on all admin APIs  This governs the \"serve.admin.cors.enabled\" setting.
    #[serde(rename = "serve_admin_cors_enabled", skip_serializing_if = "Option::is_none")]
    pub serve_admin_cors_enabled: Option<bool>,
    /// Configures the CORS Allowed Origins on public APIs  This governs the \"serve.public.cors.allowed_origins\" setting.
    #[serde(rename = "serve_public_cors_allowed_origins", skip_serializing_if = "Option::is_none")]
    pub serve_public_cors_allowed_origins: Option<Vec<String>>,
    /// Enable CORS headers on all public APIs  This governs the \"serve.public.cors.enabled\" setting.
    #[serde(rename = "serve_public_cors_enabled", skip_serializing_if = "Option::is_none")]
    pub serve_public_cors_enabled: Option<bool>,
    /// Whether the project should employ strict security measures. Setting this to true is recommended for going into production.
    #[serde(rename = "strict_security", skip_serializing_if = "Option::is_none")]
    pub strict_security: Option<bool>,
    /// Talos cache enabled.  When true, API key verification results are cached. Revoked keys may be accepted until the cached entry expires. When false, every verification reads the database and revocations take effect immediately.
    #[serde(rename = "talos_cache_enabled", skip_serializing_if = "Option::is_none")]
    pub talos_cache_enabled: Option<bool>,
    /// Talos cache TTL controls how long API key verification results are cached.
    #[serde(rename = "talos_cache_ttl", skip_serializing_if = "Option::is_none")]
    pub talos_cache_ttl: Option<String>,
    /// Talos API keys default TTL.
    #[serde(rename = "talos_credentials_api_keys_default_ttl", skip_serializing_if = "Option::is_none")]
    pub talos_credentials_api_keys_default_ttl: Option<String>,
    /// Talos API keys max TTL.
    #[serde(rename = "talos_credentials_api_keys_max_ttl", skip_serializing_if = "Option::is_none")]
    pub talos_credentials_api_keys_max_ttl: Option<String>,
    /// Talos API keys prefix (current).
    #[serde(rename = "talos_credentials_api_keys_prefix_current", skip_serializing_if = "Option::is_none")]
    pub talos_credentials_api_keys_prefix_current: Option<String>,
    /// Talos API keys public prefix (current).
    #[serde(rename = "talos_credentials_api_keys_prefix_public_current", skip_serializing_if = "Option::is_none")]
    pub talos_credentials_api_keys_prefix_public_current: Option<String>,
    /// Talos API keys public prefix (retired).  Previously active public API key prefixes kept for verification of outstanding tokens. The first element of this list was the most recently retired active prefix.
    #[serde(rename = "talos_credentials_api_keys_prefix_public_retired", skip_serializing_if = "Option::is_none")]
    pub talos_credentials_api_keys_prefix_public_retired: Option<Vec<String>>,
    /// Talos API keys prefix (retired).  Previously active API key prefixes kept for verification of outstanding tokens. The first element of this list was the most recently retired active prefix.
    #[serde(rename = "talos_credentials_api_keys_prefix_retired", skip_serializing_if = "Option::is_none")]
    pub talos_credentials_api_keys_prefix_retired: Option<Vec<String>>,
    /// Talos derived tokens default TTL (applies to both JWT and macaroon tokens).
    #[serde(rename = "talos_credentials_derived_tokens_default_ttl", skip_serializing_if = "Option::is_none")]
    pub talos_credentials_derived_tokens_default_ttl: Option<String>,
    /// Talos derived tokens JWT signing key ID (kid).
    #[serde(rename = "talos_credentials_derived_tokens_jwt_signing_key_id", skip_serializing_if = "Option::is_none")]
    pub talos_credentials_derived_tokens_jwt_signing_key_id: Option<String>,
    /// Talos derived tokens JWT signing key URLs.
    #[serde(rename = "talos_credentials_derived_tokens_jwt_signing_keys_urls", skip_serializing_if = "Option::is_none")]
    pub talos_credentials_derived_tokens_jwt_signing_keys_urls: Option<Vec<String>>,
    /// Talos derived tokens macaroon prefix (current).
    #[serde(rename = "talos_credentials_derived_tokens_macaroon_prefix_current", skip_serializing_if = "Option::is_none")]
    pub talos_credentials_derived_tokens_macaroon_prefix_current: Option<String>,
    /// Talos derived tokens macaroon prefix (retired).  Previously active macaroon prefixes kept for verification of outstanding tokens. The first element of this list was the most recently retired active prefix.
    #[serde(rename = "talos_credentials_derived_tokens_macaroon_prefix_retired", skip_serializing_if = "Option::is_none")]
    pub talos_credentials_derived_tokens_macaroon_prefix_retired: Option<Vec<String>>,
    /// Talos credentials issuer URL.
    #[serde(rename = "talos_credentials_issuer", skip_serializing_if = "Option::is_none")]
    pub talos_credentials_issuer: Option<String>,
    /// Talos credentials retired issuer URLs.  Previously active issuer URLs kept for verification of outstanding tokens. Tokens signed with these issuers remain valid; new tokens use the current issuer.
    #[serde(rename = "talos_credentials_issuer_retired", skip_serializing_if = "Option::is_none")]
    pub talos_credentials_issuer_retired: Option<Vec<String>>,
    /// Talos rate limit enabled.  When true, server-side rate limiting is enforced for API key verifications.
    #[serde(rename = "talos_rate_limit_enabled", skip_serializing_if = "Option::is_none")]
    pub talos_rate_limit_enabled: Option<bool>,
    /// TalosSecretsHMACCurrent stores the current HMAC symmetric key as a plain secret string. Application-layer encryption is handled upstream; SanitizeModel (MarshalJSON) redacts this field from API responses.
    #[serde(rename = "talos_secrets_hmac_current", skip_serializing_if = "Option::is_none")]
    pub talos_secrets_hmac_current: Option<String>,
    /// TalosSecretsHMACRetired stores previously active HMAC symmetric keys as a JSON array of plain secret strings. Application-layer encryption is handled upstream; SanitizeModel (MarshalJSON) redacts this field from API responses. The verifier tries all retired secrets when the current key does not produce a matching HMAC.
    #[serde(rename = "talos_secrets_hmac_retired", skip_serializing_if = "Option::is_none")]
    pub talos_secrets_hmac_retired: Option<Vec<String>>,
    /// Last Time Project's Revision was Updated
    #[serde(rename = "updated_at", skip_serializing_if = "Option::is_none")]
    pub updated_at: Option<String>,
}

impl NormalizedProjectRevision {
    pub fn new(name: String) -> NormalizedProjectRevision {
        NormalizedProjectRevision {
            account_experience_custom_translations: None,
            account_experience_default_locale: None,
            account_experience_enabled_locales: None,
            account_experience_favicon_dark: None,
            account_experience_favicon_light: None,
            account_experience_hide_ory_branding: None,
            account_experience_hide_registration_link: None,
            account_experience_locale_behavior: None,
            account_experience_logo_dark: None,
            account_experience_logo_light: None,
            account_experience_theme_variables_dark: None,
            account_experience_theme_variables_light: None,
            created_at: None,
            disable_account_experience_welcome_screen: None,
            enable_ax_v2: None,
            hydra_oauth2_allowed_top_level_claims: None,
            hydra_oauth2_client_credentials_default_grant_allowed_scope: None,
            hydra_oauth2_exclude_not_before_claim: None,
            hydra_oauth2_grant_jwt_iat_optional: None,
            hydra_oauth2_grant_jwt_jti_optional: None,
            hydra_oauth2_grant_jwt_max_ttl: None,
            hydra_oauth2_grant_refresh_token_rotation_grace_period: None,
            hydra_oauth2_grant_refresh_token_rotation_grace_reuse_count: None,
            hydra_oauth2_mirror_top_level_claims: None,
            hydra_oauth2_pkce_enforced: None,
            hydra_oauth2_pkce_enforced_for_public_clients: None,
            hydra_oauth2_preserve_ext_claims: None,
            hydra_oauth2_refresh_token_hook: None,
            hydra_oauth2_token_hook: None,
            hydra_oauth2_token_prefix: None,
            hydra_oidc_dynamic_client_registration_default_scope: None,
            hydra_oidc_dynamic_client_registration_enabled: None,
            hydra_oidc_subject_identifiers_pairwise_salt: None,
            hydra_oidc_subject_identifiers_supported_types: None,
            hydra_secrets_cookie: None,
            hydra_secrets_pagination: None,
            hydra_secrets_system: None,
            hydra_serve_cookies_same_site_legacy_workaround: None,
            hydra_serve_cookies_same_site_mode: None,
            hydra_strategies_access_token: None,
            hydra_strategies_jwt_scope_claim: None,
            hydra_strategies_scope: None,
            hydra_ttl_access_token: None,
            hydra_ttl_auth_code: None,
            hydra_ttl_id_token: None,
            hydra_ttl_login_consent_request: None,
            hydra_ttl_refresh_token: None,
            hydra_urls_consent: None,
            hydra_urls_error: None,
            hydra_urls_login: None,
            hydra_urls_logout: None,
            hydra_urls_post_logout_redirect: None,
            hydra_urls_registration: None,
            hydra_urls_self_issuer: None,
            hydra_webfinger_jwks_broadcast_keys: None,
            hydra_webfinger_oidc_discovery_auth_url: None,
            hydra_webfinger_oidc_discovery_client_registration_url: None,
            hydra_webfinger_oidc_discovery_jwks_url: None,
            hydra_webfinger_oidc_discovery_supported_claims: None,
            hydra_webfinger_oidc_discovery_supported_scope: None,
            hydra_webfinger_oidc_discovery_token_url: None,
            hydra_webfinger_oidc_discovery_userinfo_url: None,
            id: None,
            keto_namespace_configuration: None,
            keto_namespaces: None,
            keto_secrets_pagination: None,
            kratos_cookies_same_site: None,
            kratos_courier_channels: None,
            kratos_courier_delivery_strategy: None,
            kratos_courier_http_request_config_auth_api_key_in: None,
            kratos_courier_http_request_config_auth_api_key_name: None,
            kratos_courier_http_request_config_auth_api_key_value: None,
            kratos_courier_http_request_config_auth_basic_auth_password: None,
            kratos_courier_http_request_config_auth_basic_auth_user: None,
            kratos_courier_http_request_config_auth_type: None,
            kratos_courier_http_request_config_body: None,
            kratos_courier_http_request_config_headers: None,
            kratos_courier_http_request_config_method: None,
            kratos_courier_http_request_config_url: None,
            kratos_courier_smtp_connection_uri: None,
            kratos_courier_smtp_from_address: None,
            kratos_courier_smtp_from_name: None,
            kratos_courier_smtp_headers: None,
            kratos_courier_smtp_local_name: None,
            kratos_courier_templates_login_code_valid_email_body_html: None,
            kratos_courier_templates_login_code_valid_email_body_plaintext: None,
            kratos_courier_templates_login_code_valid_email_subject: None,
            kratos_courier_templates_login_code_valid_sms_body_plaintext: None,
            kratos_courier_templates_recovery_code_invalid_email_body_html: None,
            kratos_courier_templates_recovery_code_invalid_email_body_plaintext: None,
            kratos_courier_templates_recovery_code_invalid_email_subject: None,
            kratos_courier_templates_recovery_code_valid_email_body_html: None,
            kratos_courier_templates_recovery_code_valid_email_body_plaintext: None,
            kratos_courier_templates_recovery_code_valid_email_subject: None,
            kratos_courier_templates_recovery_invalid_email_body_html: None,
            kratos_courier_templates_recovery_invalid_email_body_plaintext: None,
            kratos_courier_templates_recovery_invalid_email_subject: None,
            kratos_courier_templates_recovery_valid_email_body_html: None,
            kratos_courier_templates_recovery_valid_email_body_plaintext: None,
            kratos_courier_templates_recovery_valid_email_subject: None,
            kratos_courier_templates_registration_code_valid_email_body_html: None,
            kratos_courier_templates_registration_code_valid_email_body_plaintext: None,
            kratos_courier_templates_registration_code_valid_email_subject: None,
            kratos_courier_templates_registration_code_valid_sms_body_plaintext: None,
            kratos_courier_templates_verifiable_address_changed_email_body_html: None,
            kratos_courier_templates_verifiable_address_changed_email_body_plaintext: None,
            kratos_courier_templates_verifiable_address_changed_email_subject: None,
            kratos_courier_templates_verifiable_address_changed_sms_body_plaintext: None,
            kratos_courier_templates_verification_code_invalid_email_body_html: None,
            kratos_courier_templates_verification_code_invalid_email_body_plaintext: None,
            kratos_courier_templates_verification_code_invalid_email_subject: None,
            kratos_courier_templates_verification_code_valid_email_body_html: None,
            kratos_courier_templates_verification_code_valid_email_body_plaintext: None,
            kratos_courier_templates_verification_code_valid_email_subject: None,
            kratos_courier_templates_verification_code_valid_sms_body_plaintext: None,
            kratos_courier_templates_verification_invalid_email_body_html: None,
            kratos_courier_templates_verification_invalid_email_body_plaintext: None,
            kratos_courier_templates_verification_invalid_email_subject: None,
            kratos_courier_templates_verification_valid_email_body_html: None,
            kratos_courier_templates_verification_valid_email_body_plaintext: None,
            kratos_courier_templates_verification_valid_email_subject: None,
            kratos_feature_flags_cacheable_sessions: None,
            kratos_feature_flags_cacheable_sessions_max_age: None,
            kratos_feature_flags_choose_recovery_address: None,
            kratos_feature_flags_faster_session_extend: None,
            kratos_feature_flags_legacy_continue_with_verification_ui: None,
            kratos_feature_flags_legacy_oidc_registration_node_group: None,
            kratos_feature_flags_legacy_require_verified_login_error: None,
            kratos_feature_flags_password_profile_registration_node_group: None,
            kratos_feature_flags_use_continue_with_transitions: None,
            kratos_identity_schemas: None,
            kratos_oauth2_provider_headers: None,
            kratos_oauth2_provider_override_return_to: None,
            kratos_oauth2_provider_url: None,
            kratos_preview_default_read_consistency_level: None,
            kratos_secrets_cipher: None,
            kratos_secrets_cookie: None,
            kratos_secrets_default: None,
            kratos_secrets_pagination: None,
            kratos_security_account_enumeration_mitigate: None,
            kratos_selfservice_allowed_return_urls: None,
            kratos_selfservice_default_browser_return_url: None,
            kratos_selfservice_flows_error_ui_url: None,
            kratos_selfservice_flows_login_after_code_default_browser_return_url: None,
            kratos_selfservice_flows_login_after_default_browser_return_url: None,
            kratos_selfservice_flows_login_after_lookup_secret_default_browser_return_url: None,
            kratos_selfservice_flows_login_after_oidc_default_browser_return_url: None,
            kratos_selfservice_flows_login_after_passkey_default_browser_return_url: None,
            kratos_selfservice_flows_login_after_password_default_browser_return_url: None,
            kratos_selfservice_flows_login_after_totp_default_browser_return_url: None,
            kratos_selfservice_flows_login_after_webauthn_default_browser_return_url: None,
            kratos_selfservice_flows_login_lifespan: None,
            kratos_selfservice_flows_login_style: None,
            kratos_selfservice_flows_login_ui_url: None,
            kratos_selfservice_flows_logout_after_default_browser_return_url: None,
            kratos_selfservice_flows_recovery_after_default_browser_return_url: None,
            kratos_selfservice_flows_recovery_enabled: None,
            kratos_selfservice_flows_recovery_lifespan: None,
            kratos_selfservice_flows_recovery_notify_unknown_recipients: None,
            kratos_selfservice_flows_recovery_ui_url: None,
            kratos_selfservice_flows_recovery_use: None,
            kratos_selfservice_flows_registration_after_code_default_browser_return_url: None,
            kratos_selfservice_flows_registration_after_default_browser_return_url: None,
            kratos_selfservice_flows_registration_after_oidc_default_browser_return_url: None,
            kratos_selfservice_flows_registration_after_passkey_default_browser_return_url: None,
            kratos_selfservice_flows_registration_after_password_default_browser_return_url: None,
            kratos_selfservice_flows_registration_after_webauthn_default_browser_return_url: None,
            kratos_selfservice_flows_registration_enable_legacy_one_step: None,
            kratos_selfservice_flows_registration_enabled: None,
            kratos_selfservice_flows_registration_lifespan: None,
            kratos_selfservice_flows_registration_login_hints: None,
            kratos_selfservice_flows_registration_ui_url: None,
            kratos_selfservice_flows_settings_after_default_browser_return_url: None,
            kratos_selfservice_flows_settings_after_lookup_secret_default_browser_return_url: None,
            kratos_selfservice_flows_settings_after_oidc_default_browser_return_url: None,
            kratos_selfservice_flows_settings_after_passkey_default_browser_return_url: None,
            kratos_selfservice_flows_settings_after_password_default_browser_return_url: None,
            kratos_selfservice_flows_settings_after_profile_default_browser_return_url: None,
            kratos_selfservice_flows_settings_after_totp_default_browser_return_url: None,
            kratos_selfservice_flows_settings_after_webauthn_default_browser_return_url: None,
            kratos_selfservice_flows_settings_lifespan: None,
            kratos_selfservice_flows_settings_privileged_session_max_age: None,
            kratos_selfservice_flows_settings_required_aal: None,
            kratos_selfservice_flows_settings_ui_url: None,
            kratos_selfservice_flows_verification_after_default_browser_return_url: None,
            kratos_selfservice_flows_verification_enabled: None,
            kratos_selfservice_flows_verification_lifespan: None,
            kratos_selfservice_flows_verification_notify_unknown_recipients: None,
            kratos_selfservice_flows_verification_ui_url: None,
            kratos_selfservice_flows_verification_use: None,
            kratos_selfservice_methods_captcha_config_allowed_domains: None,
            kratos_selfservice_methods_captcha_config_byo: None,
            kratos_selfservice_methods_captcha_config_cf_turnstile_byo_secret: None,
            kratos_selfservice_methods_captcha_config_cf_turnstile_byo_sitekey: None,
            kratos_selfservice_methods_captcha_config_cf_turnstile_secret: None,
            kratos_selfservice_methods_captcha_config_cf_turnstile_sitekey: None,
            kratos_selfservice_methods_captcha_config_legacy_inject_node: None,
            kratos_selfservice_methods_captcha_enabled: None,
            kratos_selfservice_methods_code_config_lifespan: None,
            kratos_selfservice_methods_code_config_max_submissions: None,
            kratos_selfservice_methods_code_config_missing_credential_fallback_enabled: None,
            kratos_selfservice_methods_code_enabled: None,
            kratos_selfservice_methods_code_mfa_enabled: None,
            kratos_selfservice_methods_code_passwordless_enabled: None,
            kratos_selfservice_methods_code_passwordless_login_fallback_enabled: None,
            kratos_selfservice_methods_deviceauthn_config_insecure_allow_relaxed_attestation: None,
            kratos_selfservice_methods_deviceauthn_enabled: None,
            kratos_selfservice_methods_link_config_base_url: None,
            kratos_selfservice_methods_link_config_lifespan: None,
            kratos_selfservice_methods_link_enabled: None,
            kratos_selfservice_methods_lookup_secret_enabled: None,
            kratos_selfservice_methods_oidc_config_base_redirect_uri: None,
            kratos_selfservice_methods_oidc_config_providers: None,
            kratos_selfservice_methods_oidc_enable_auto_link_policy: None,
            kratos_selfservice_methods_oidc_enabled: None,
            kratos_selfservice_methods_passkey_config_rp_display_name: None,
            kratos_selfservice_methods_passkey_config_rp_id: None,
            kratos_selfservice_methods_passkey_config_rp_origins: None,
            kratos_selfservice_methods_passkey_enabled: None,
            kratos_selfservice_methods_password_config_haveibeenpwned_enabled: None,
            kratos_selfservice_methods_password_config_identifier_similarity_check_enabled: None,
            kratos_selfservice_methods_password_config_ignore_network_errors: None,
            kratos_selfservice_methods_password_config_max_breaches: None,
            kratos_selfservice_methods_password_config_min_password_length: None,
            kratos_selfservice_methods_password_enabled: None,
            kratos_selfservice_methods_profile_enabled: None,
            kratos_selfservice_methods_saml_config_providers: None,
            kratos_selfservice_methods_saml_enabled: None,
            kratos_selfservice_methods_totp_config_issuer: None,
            kratos_selfservice_methods_totp_enabled: None,
            kratos_selfservice_methods_webauthn_config_passwordless: None,
            kratos_selfservice_methods_webauthn_config_rp_display_name: None,
            kratos_selfservice_methods_webauthn_config_rp_icon: None,
            kratos_selfservice_methods_webauthn_config_rp_id: None,
            kratos_selfservice_methods_webauthn_config_rp_origins: None,
            kratos_selfservice_methods_webauthn_enabled: None,
            kratos_session_cookie_persistent: None,
            kratos_session_cookie_same_site: None,
            kratos_session_lifespan: None,
            kratos_session_whoami_required_aal: None,
            kratos_session_whoami_tokenizer_templates: None,
            name,
            organizations: None,
            project_id: None,
            project_revision_hooks: None,
            scim_clients: None,
            serve_admin_cors_allowed_origins: None,
            serve_admin_cors_enabled: None,
            serve_public_cors_allowed_origins: None,
            serve_public_cors_enabled: None,
            strict_security: None,
            talos_cache_enabled: None,
            talos_cache_ttl: None,
            talos_credentials_api_keys_default_ttl: None,
            talos_credentials_api_keys_max_ttl: None,
            talos_credentials_api_keys_prefix_current: None,
            talos_credentials_api_keys_prefix_public_current: None,
            talos_credentials_api_keys_prefix_public_retired: None,
            talos_credentials_api_keys_prefix_retired: None,
            talos_credentials_derived_tokens_default_ttl: None,
            talos_credentials_derived_tokens_jwt_signing_key_id: None,
            talos_credentials_derived_tokens_jwt_signing_keys_urls: None,
            talos_credentials_derived_tokens_macaroon_prefix_current: None,
            talos_credentials_derived_tokens_macaroon_prefix_retired: None,
            talos_credentials_issuer: None,
            talos_credentials_issuer_retired: None,
            talos_rate_limit_enabled: None,
            talos_secrets_hmac_current: None,
            talos_secrets_hmac_retired: None,
            updated_at: None,
        }
    }
}
/// Defines access token type  This governs the \"strategies.access_token\" setting. opaque Oauth2AccessTokenStrategyOpaque jwt Oauth2AccessTokenStrategyJwt
#[derive(Clone, Copy, Debug, Eq, PartialEq, Ord, PartialOrd, Hash, Serialize, Deserialize)]
pub enum HydraStrategiesAccessTokenEnum {
    #[serde(rename = "opaque")]
    Opaque,
    #[serde(rename = "jwt")]
    Jwt,
}

impl Default for HydraStrategiesAccessTokenEnum {
    fn default() -> HydraStrategiesAccessTokenEnum {
        Self::Opaque
    }
}
/// Define the claim to use as the scope in the access token.  This governs the \"strategies.jwt.scope_claim\" setting.  list: The scope claim is an array of strings named `scope`: `{ \"scope\": [\"read\", \"write\"] }` string: The scope claim is a space delimited list of strings named `scp`: `{ \"scp\": \"read write\" }` both: The scope claim is both a space delimited list and an array of strings named `scope` and `scp`: `{ \"scope\": [\"read\", \"write\"], \"scp\": \"read write\" }` list OAuth2JWTScopeClaimList string OAuth2JWTScopeClaimString both OAuth2JWTScopeClaimBoth
#[derive(Clone, Copy, Debug, Eq, PartialEq, Ord, PartialOrd, Hash, Serialize, Deserialize)]
pub enum HydraStrategiesJwtScopeClaimEnum {
    #[serde(rename = "list")]
    List,
    #[serde(rename = "string")]
    String,
    #[serde(rename = "both")]
    Both,
}

impl Default for HydraStrategiesJwtScopeClaimEnum {
    fn default() -> HydraStrategiesJwtScopeClaimEnum {
        Self::List
    }
}
/// Defines how scopes are matched. For more details have a look at https://github.com/ory/fosite#scopes  This governs the \"strategies.scope\" setting. exact Oauth2ScopeStrategyExact wildcard Oauth2ScopeStrategyWildcard
#[derive(Clone, Copy, Debug, Eq, PartialEq, Ord, PartialOrd, Hash, Serialize, Deserialize)]
pub enum HydraStrategiesScopeEnum {
    #[serde(rename = "exact")]
    Exact,
    #[serde(rename = "wildcard")]
    Wildcard,
}

impl Default for HydraStrategiesScopeEnum {
    fn default() -> HydraStrategiesScopeEnum {
        Self::Exact
    }
}
/// Configures the Ory Kratos Recovery strategy to use (\"link\" or \"code\")  This governs the \"selfservice.flows.recovery.use\" setting. link SelfServiceMessageVerificationStrategyLink code SelfServiceMessageVerificationStrategyCode
#[derive(Clone, Copy, Debug, Eq, PartialEq, Ord, PartialOrd, Hash, Serialize, Deserialize)]
pub enum KratosSelfserviceFlowsRecoveryUseEnum {
    #[serde(rename = "link")]
    Link,
    #[serde(rename = "code")]
    Code,
}

impl Default for KratosSelfserviceFlowsRecoveryUseEnum {
    fn default() -> KratosSelfserviceFlowsRecoveryUseEnum {
        Self::Link
    }
}
/// Configures the Ory Kratos Strategy to use for Verification  This governs the \"selfservice.flows.verification.use\" setting. link SelfServiceMessageVerificationStrategyLink code SelfServiceMessageVerificationStrategyCode
#[derive(Clone, Copy, Debug, Eq, PartialEq, Ord, PartialOrd, Hash, Serialize, Deserialize)]
pub enum KratosSelfserviceFlowsVerificationUseEnum {
    #[serde(rename = "link")]
    Link,
    #[serde(rename = "code")]
    Code,
}

impl Default for KratosSelfserviceFlowsVerificationUseEnum {
    fn default() -> KratosSelfserviceFlowsVerificationUseEnum {
        Self::Link
    }
}

