OryKratos.API

Client and Server

Documentation

data Config

Server or client configuration, specifying the host and port to query or serve on.

Constructors

Config

Fields

• configUrl :: String

  scheme:/hostname:portpath, e.g. "http://localhost:8080/"

Instances

Eq Config

Defined in OryKratos.API

Methods

(==) :: Config -> Config -> Bool

(/=) :: Config -> Config -> Bool

Ord Config

Defined in OryKratos.API

Methods

compare :: Config -> Config -> Ordering

(<) :: Config -> Config -> Bool

(<=) :: Config -> Config -> Bool

(>) :: Config -> Config -> Bool

(>=) :: Config -> Config -> Bool

max :: Config -> Config -> Config

min :: Config -> Config -> Config

Read Config

Defined in OryKratos.API

Methods

readsPrec :: Int -> ReadS Config

readList :: ReadS [Config]

readPrec :: ReadPrec Config

readListPrec :: ReadPrec [Config]

Show Config

Defined in OryKratos.API

Methods

showsPrec :: Int -> Config -> ShowS

show :: Config -> String

showList :: [Config] -> ShowS

data OryKratosBackend m

Configuration, specifying the full url of the service.

Backend for OryKratos. The backend can be used both for the client and the server. The client generated from the OryKratos OpenAPI spec is a backend that executes actions by sending HTTP requests (see createOryKratosClient). Alternatively, provided a backend, the API can be served using runOryKratosMiddlewareServer.

Constructors

OryKratosBackend

Fields

• createIdentity :: CreateIdentity -> m Identity

  This endpoint creates an identity. It is NOT possible to set an identity's credentials (password, ...) using this method! A way to achieve that will be introduced in the future. Learn how identities work in Ory Kratos' User And Identity Model Documentation.

• createRecoveryLink :: CreateRecoveryLink -> m RecoveryLink

  This endpoint creates a recovery link which should be given to the user in order for them to recover (or activate) their account.

• deleteIdentity :: Text -> m NoContent

  Calling this endpoint irrecoverably and permanently deletes the identity given its ID. This action can not be undone. This endpoint returns 204 when the identity was deleted or when the identity was not found, in which case it is assumed that is has been deleted already. Learn how identities work in Ory Kratos' User And Identity Model Documentation.

• getIdentity :: Text -> m Identity

  Learn how identities work in Ory Kratos' User And Identity Model Documentation.

• getSchema :: Text -> m Value

  Get a Traits Schema Definition

• getSelfServiceError :: Maybe Text -> m SelfServiceErrorContainer

  This endpoint returns the error associated with a user-facing self service errors. This endpoint supports stub values to help you implement the error UI: `?error=stub:500` - returns a stub 500 (Internal Server Error) error. More information can be found at Ory Kratos User User Facing Error Documentation.

• getSelfServiceLoginFlow :: Maybe Text -> m LoginFlow

  This endpoint returns a login flow's context with, for example, error details and other information. More information can be found at Ory Kratos User Login and User Registration Documentation.

• getSelfServiceRecoveryFlow :: Maybe Text -> m RecoveryFlow

  This endpoint returns a recovery flow's context with, for example, error details and other information. More information can be found at Ory Kratos Account Recovery Documentation.

• getSelfServiceRegistrationFlow :: Maybe Text -> m RegistrationFlow

  This endpoint returns a registration flow's context with, for example, error details and other information. More information can be found at Ory Kratos User Login and User Registration Documentation.

• getSelfServiceSettingsFlow :: Maybe Text -> Maybe Text -> m SettingsFlow

  When accessing this endpoint through Ory Kratos' Public API you must ensure that either the Ory Kratos Session Cookie or the Ory Kratos Session Token are set. The public endpoint does not return 404 status codes but instead 403 or 500 to improve data privacy. You can access this endpoint without credentials when using Ory Kratos' Admin API. More information can be found at Ory Kratos User Settings & Profile Management Documentation.

• getSelfServiceVerificationFlow :: Maybe Text -> m VerificationFlow

  This endpoint returns a verification flow's context with, for example, error details and other information. More information can be found at Ory Kratos Email and Phone Verification Documentation.

• listIdentities :: Maybe Integer -> Maybe Integer -> m [Identity]

  Lists all identities. Does not support search at the moment. Learn how identities work in Ory Kratos' User And Identity Model Documentation.

• prometheus :: m NoContent

  ``` metadata: annotations: prometheus.ioport: "4434" prometheus.iopath: "metricsprometheus" ```

• updateIdentity :: Text -> UpdateIdentity -> m Identity

  This endpoint updates an identity. It is NOT possible to set an identity's credentials (password, ...) using this method! A way to achieve that will be introduced in the future. The full identity payload (except credentials) is expected. This endpoint does not support patching. Learn how identities work in Ory Kratos' User And Identity Model Documentation.

• isInstanceAlive :: m HealthStatus

  This endpoint returns a 200 status code when the HTTP server is up running. This status does currently not include checks whether the database connection is working. If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set. Be aware that if you are running multiple nodes of this service, the health status will never refer to the cluster state, only to a single instance.

• isInstanceReady :: m HealthStatus

  This endpoint returns a 200 status code when the HTTP server is up running and the environment dependencies (e.g. the database) are responsive as well. If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set. Be aware that if you are running multiple nodes of this service, the health status will never refer to the cluster state, only to a single instance.

• initializeSelfServiceBrowserLogoutFlow :: m NoContent

  This endpoint initializes a logout flow. > This endpoint is NOT INTENDED for API clients and only works with browsers (Chrome, Firefox, ...). On successful logout, the browser will be redirected (HTTP 302 Found) to the return_to parameter of the initial request or fall back to `urls.default_return_to`. More information can be found at Ory Kratos User Logout Documentation.

• initializeSelfServiceLoginForBrowsers :: Maybe Bool -> m NoContent

  This endpoint initializes a browser-based user login flow. Once initialized, the browser will be redirected to `selfservice.flows.login.ui_url` with the flow ID set as the query parameter `?flow=`. If a valid user session exists already, the browser will be redirected to `urls.default_redirect_url` unless the query parameter `?refresh=true` was set. This endpoint is NOT INTENDED for API clients and only works with browsers (Chrome, Firefox, ...). More information can be found at Ory Kratos User Login and User Registration Documentation.

• initializeSelfServiceLoginForNativeApps :: Maybe Bool -> m LoginFlow

  This endpoint initiates a login flow for API clients such as mobile devices, smart TVs, and so on. If a valid provided session cookie or session token is provided, a 400 Bad Request error will be returned unless the URL query parameter `?refresh=true` is set. To fetch an existing login flow call `self-serviceloginflows?flow=flow_id`. :::warning You MUST NOT use this endpoint in client-side (Single Page Apps, ReactJS, AngularJS) nor server-side (Java Server Pages, NodeJS, PHP, Golang, ...) browser applications. Using this endpoint in these applications will make you vulnerable to a variety of CSRF attacks, including CSRF login attacks. This endpoint MUST ONLY be used in scenarios such as native mobile apps (React Native, Objective C, Swift, Java, ...). ::: More information can be found at [Ory Kratos User Login and User Registration Documentation](https:www.ory.shdocsnextkratosself-serviceflows/user-login-user-registration).

• initializeSelfServiceRecoveryForBrowsers :: m NoContent

  This endpoint initializes a browser-based account recovery flow. Once initialized, the browser will be redirected to `selfservice.flows.recovery.ui_url` with the flow ID set as the query parameter `?flow=`. If a valid user session exists, the browser is returned to the configured return URL. This endpoint is NOT INTENDED for API clients and only works with browsers (Chrome, Firefox, ...). More information can be found at Ory Kratos Account Recovery Documentation.

• initializeSelfServiceRecoveryForNativeApps :: m RecoveryFlow

  This endpoint initiates a recovery flow for API clients such as mobile devices, smart TVs, and so on. If a valid provided session cookie or session token is provided, a 400 Bad Request error. To fetch an existing recovery flow call `self-servicerecoveryflows?flow=flow_id`. :::warning You MUST NOT use this endpoint in client-side (Single Page Apps, ReactJS, AngularJS) nor server-side (Java Server Pages, NodeJS, PHP, Golang, ...) browser applications. Using this endpoint in these applications will make you vulnerable to a variety of CSRF attacks. This endpoint MUST ONLY be used in scenarios such as native mobile apps (React Native, Objective C, Swift, Java, ...). ::: More information can be found at [Ory Kratos Account Recovery Documentation](..self-serviceflowsaccount-recovery.mdx).

• initializeSelfServiceRegistrationForBrowsers :: m NoContent

  This endpoint initializes a browser-based user registration flow. Once initialized, the browser will be redirected to `selfservice.flows.registration.ui_url` with the flow ID set as the query parameter `?flow=`. If a valid user session exists already, the browser will be redirected to `urls.default_redirect_url` unless the query parameter `?refresh=true` was set. :::note This endpoint is NOT INTENDED for API clients and only works with browsers (Chrome, Firefox, ...). ::: More information can be found at Ory Kratos User Login and User Registration Documentation.

• initializeSelfServiceRegistrationForNativeApps :: m RegistrationFlow

  This endpoint initiates a registration flow for API clients such as mobile devices, smart TVs, and so on. If a valid provided session cookie or session token is provided, a 400 Bad Request error will be returned unless the URL query parameter `?refresh=true` is set. To fetch an existing registration flow call `self-serviceregistrationflows?flow=flow_id`. :::warning You MUST NOT use this endpoint in client-side (Single Page Apps, ReactJS, AngularJS) nor server-side (Java Server Pages, NodeJS, PHP, Golang, ...) browser applications. Using this endpoint in these applications will make you vulnerable to a variety of CSRF attacks. This endpoint MUST ONLY be used in scenarios such as native mobile apps (React Native, Objective C, Swift, Java, ...). ::: More information can be found at [Ory Kratos User Login and User Registration Documentation](https:www.ory.shdocsnextkratosself-serviceflows/user-login-user-registration).

• initializeSelfServiceSettingsForBrowsers :: m NoContent

  This endpoint initializes a browser-based user settings flow. Once initialized, the browser will be redirected to `selfservice.flows.settings.ui_url` with the flow ID set as the query parameter `?flow=`. If no valid Ory Kratos Session Cookie is included in the request, a login flow will be initialized. :::note This endpoint is NOT INTENDED for API clients and only works with browsers (Chrome, Firefox, ...). ::: More information can be found at Ory Kratos User Settings & Profile Management Documentation.

• initializeSelfServiceSettingsForNativeApps :: Maybe Text -> m SettingsFlow

  This endpoint initiates a settings flow for API clients such as mobile devices, smart TVs, and so on. You must provide a valid Ory Kratos Session Token for this endpoint to respond with HTTP 200 OK. To fetch an existing settings flow call `self-servicesettingsflows?flow=flow_id`. :::warning You MUST NOT use this endpoint in client-side (Single Page Apps, ReactJS, AngularJS) nor server-side (Java Server Pages, NodeJS, PHP, Golang, ...) browser applications. Using this endpoint in these applications will make you vulnerable to a variety of CSRF attacks. This endpoint MUST ONLY be used in scenarios such as native mobile apps (React Native, Objective C, Swift, Java, ...). ::: More information can be found at [Ory Kratos User Settings & Profile Management Documentation](..self-serviceflowsuser-settings).

• initializeSelfServiceVerificationForBrowsers :: m NoContent

  This endpoint initializes a browser-based account verification flow. Once initialized, the browser will be redirected to `selfservice.flows.verification.ui_url` with the flow ID set as the query parameter `?flow=`. This endpoint is NOT INTENDED for API clients and only works with browsers (Chrome, Firefox, ...). More information can be found at Ory Kratos Email and Phone Verification Documentation.

• initializeSelfServiceVerificationForNativeApps :: m VerificationFlow

  This endpoint initiates a verification flow for API clients such as mobile devices, smart TVs, and so on. To fetch an existing verification flow call `self-serviceverificationflows?flow=flow_id`. :::warning You MUST NOT use this endpoint in client-side (Single Page Apps, ReactJS, AngularJS) nor server-side (Java Server Pages, NodeJS, PHP, Golang, ...) browser applications. Using this endpoint in these applications will make you vulnerable to a variety of CSRF attacks. This endpoint MUST ONLY be used in scenarios such as native mobile apps (React Native, Objective C, Swift, Java, ...). ::: More information can be found at [Ory Kratos Email and Phone Verification Documentation](https:www.ory.shdocskratosselfserviceflowsverify-email-account-activation).

• revokeSession :: RevokeSession -> m NoContent

  Use this endpoint to revoke a session using its token. This endpoint is particularly useful for API clients such as mobile apps to log the user out of the system and invalidate the session. This endpoint does not remove any HTTP Cookies - use the Browser-Based Self-Service Logout Flow instead.

• submitSelfServiceLoginFlow :: Maybe Text -> Value -> m LoginViaApiResponse

  Use this endpoint to complete a login flow. This endpoint behaves differently for API and browser flows. API flows expect `applicationjson` to be sent in the body and responds with HTTP 200 and a applicationjson body with the session token on success; HTTP 302 redirect to a fresh login flow if the original flow expired with the appropriate error messages set; HTTP 400 on form validation errors. Browser flows expect `applicationx-www-form-urlencoded` to be sent in the body and responds with a HTTP 302 redirect to the postafter login URL or the return_to value if it was set and if the login succeeded; a HTTP 302 redirect to the login UI URL with the flow ID containing the validation errors otherwise. More information can be found at Ory Kratos User Login and User Registration Documentation.

• submitSelfServiceRecoveryFlow :: Maybe Text -> Value -> m NoContent

  Use this endpoint to complete a recovery flow. This endpoint behaves differently for API and browser flows and has several states: choose_method expects $sel:flow:SettingsViaApiResponse (in the URL query) and $sel:email:SubmitSelfServiceRecoveryFlowWithLinkMethod (in the body) to be sent and works with API- and Browser-initiated flows. For API clients it either returns a HTTP 200 OK when the form is valid and HTTP 400 OK when the form is invalid and a HTTP 302 Found redirect with a fresh recovery flow if the flow was otherwise invalid (e.g. expired). For Browser clients it returns a HTTP 302 Found redirect to the Recovery UI URL with the Recovery Flow ID appended. sent_email is the success state after choose_method for the $sel:link:SubmitSelfServiceBrowserSettingsOIDCFlowPayload method and allows the user to request another recovery email. It works for both API and Browser-initiated flows and returns the same responses as the flow in choose_method state. passed_challenge expects a token to be sent in the URL query and given the nature of the flow ("sending a recovery link") does not have any API capabilities. The server responds with a HTTP 302 Found redirect either to the Settings UI URL (if the link was valid) and instructs the user to update their password, or a redirect to the Recover UI URL with a new Recovery Flow ID which contains an error message that the recovery link was invalid. More information can be found at Ory Kratos Account Recovery Documentation.

• submitSelfServiceRecoveryFlowWithLinkMethod :: Maybe Text -> Maybe Text -> SubmitSelfServiceRecoveryFlowWithLinkMethod -> m NoContent

  Use this endpoint to complete a recovery flow using the link method. This endpoint behaves differently for API and browser flows and has several states: choose_method expects $sel:flow:SettingsViaApiResponse (in the URL query) and $sel:email:SubmitSelfServiceRecoveryFlowWithLinkMethod (in the body) to be sent and works with API- and Browser-initiated flows. For API clients it either returns a HTTP 200 OK when the form is valid and HTTP 400 OK when the form is invalid and a HTTP 302 Found redirect with a fresh recovery flow if the flow was otherwise invalid (e.g. expired). For Browser clients it returns a HTTP 302 Found redirect to the Recovery UI URL with the Recovery Flow ID appended. sent_email is the success state after choose_method and allows the user to request another recovery email. It works for both API and Browser-initiated flows and returns the same responses as the flow in choose_method state. passed_challenge expects a token to be sent in the URL query and given the nature of the flow ("sending a recovery link") does not have any API capabilities. The server responds with a HTTP 302 Found redirect either to the Settings UI URL (if the link was valid) and instructs the user to update their password, or a redirect to the Recover UI URL with a new Recovery Flow ID which contains an error message that the recovery link was invalid. More information can be found at Ory Kratos Account Recovery Documentation.

• submitSelfServiceRegistrationFlow :: Maybe Text -> Value -> m RegistrationViaApiResponse

  Use this endpoint to complete a registration flow by sending an identity's traits and password. This endpoint behaves differently for API and browser flows. API flows expect `applicationjson` to be sent in the body and respond with HTTP 200 and a applicationjson body with the created identity success - if the session hook is configured the $sel:session:LoginViaApiResponse and $sel:session_token:LoginViaApiResponse will also be included; HTTP 302 redirect to a fresh registration flow if the original flow expired with the appropriate error messages set; HTTP 400 on form validation errors. Browser flows expect `applicationx-www-form-urlencoded` to be sent in the body and responds with a HTTP 302 redirect to the postafter registration URL or the return_to value if it was set and if the registration succeeded; a HTTP 302 redirect to the registration UI URL with the flow ID containing the validation errors otherwise. More information can be found at Ory Kratos User Login and User Registration Documentation.

• submitSelfServiceSettingsFlow :: Maybe Text -> Value -> Maybe Text -> m SettingsViaApiResponse

  Use this endpoint to complete a settings flow by sending an identity's updated password. This endpoint behaves differently for API and browser flows. API-initiated flows expect `applicationjson` to be sent in the body and respond with HTTP 200 and an applicationjson body with the session token on success; HTTP 302 redirect to a fresh settings flow if the original flow expired with the appropriate error messages set; HTTP 400 on form validation errors. HTTP 401 when the endpoint is called without a valid session token. HTTP 403 when `selfservice.flows.settings.privileged_session_max_age` was reached. Implies that the user needs to re-authenticate. Browser flows expect `applicationx-www-form-urlencoded` to be sent in the body and responds with a HTTP 302 redirect to the postafter settings URL or the return_to value if it was set and if the flow succeeded; a HTTP 302 redirect to the Settings UI URL with the flow ID containing the validation errors otherwise. a HTTP 302 redirect to the login endpoint when `selfservice.flows.settings.privileged_session_max_age` was reached. More information can be found at Ory Kratos User Settings & Profile Management Documentation.

• submitSelfServiceVerificationFlow :: Maybe Text -> Value -> m NoContent

  Use this endpoint to complete a verification flow. This endpoint behaves differently for API and browser flows and has several states: choose_method expects $sel:flow:SettingsViaApiResponse (in the URL query) and $sel:email:SubmitSelfServiceRecoveryFlowWithLinkMethod (in the body) to be sent and works with API- and Browser-initiated flows. For API clients it either returns a HTTP 200 OK when the form is valid and HTTP 400 OK when the form is invalid and a HTTP 302 Found redirect with a fresh verification flow if the flow was otherwise invalid (e.g. expired). For Browser clients it returns a HTTP 302 Found redirect to the Verification UI URL with the Verification Flow ID appended. sent_email is the success state after choose_method when using the $sel:link:SubmitSelfServiceBrowserSettingsOIDCFlowPayload method and allows the user to request another verification email. It works for both API and Browser-initiated flows and returns the same responses as the flow in choose_method state. passed_challenge expects a token to be sent in the URL query and given the nature of the flow ("sending a verification link") does not have any API capabilities. The server responds with a HTTP 302 Found redirect either to the Settings UI URL (if the link was valid) and instructs the user to update their password, or a redirect to the Verification UI URL with a new Verification Flow ID which contains an error message that the verification link was invalid. More information can be found at Ory Kratos Email and Phone Verification Documentation.

• toSession :: Maybe Text -> m Session

  Uses the HTTP Headers in the GET request to determine (e.g. by using checking the cookies) who is authenticated. Returns a session object in the body or 401 if the credentials are invalid or no credentials were sent. Additionally when the request it successful it adds the user ID to the 'X-Kratos-Authenticated-Identity-Id' header in the response. This endpoint is useful for: AJAX calls. Remember to send credentials and set up CORS correctly! Reverse proxies and API Gateways Server-side calls - use the `X-Session-Token` header!

• getVersion :: m Version

  This endpoint returns the service version typically notated using semantic versioning. If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set. Be aware that if you are running multiple nodes of this service, the health status will never refer to the cluster state, only to a single instance.

createOryKratosClient :: OryKratosBackend OryKratosClient

runOryKratosServer :: (MonadIO m, MonadThrow m) => Config -> OryKratosBackend (ExceptT ServerError IO) -> m ()

Run the OryKratos server at the provided host and port.

runOryKratosMiddlewareServer :: (MonadIO m, MonadThrow m) => Config -> Middleware -> OryKratosBackend (ExceptT ServerError IO) -> m ()

Run the OryKratos server at the provided host and port.

runOryKratosClient :: Config -> OryKratosClient a -> ExceptT ClientError IO a

Run requests in the OryKratosClient monad.

runOryKratosClientWithManager :: Manager -> Config -> OryKratosClient a -> ExceptT ClientError IO a

Run requests in the OryKratosClient monad using a custom manager.

callOryKratos :: (MonadIO m, MonadThrow m) => ClientEnv -> OryKratosClient a -> m a

Like runClient, but returns the response or throws a OryKratosClientError

data OryKratosClient a

Instances

Monad OryKratosClient

Defined in OryKratos.API

Methods

(>>=) :: OryKratosClient a -> (a -> OryKratosClient b) -> OryKratosClient b

(>>) :: OryKratosClient a -> OryKratosClient b -> OryKratosClient b

return :: a -> OryKratosClient a

Functor OryKratosClient

Defined in OryKratos.API

Methods

fmap :: (a -> b) -> OryKratosClient a -> OryKratosClient b

(<$) :: a -> OryKratosClient b -> OryKratosClient a

Applicative OryKratosClient

Defined in OryKratos.API

Methods

pure :: a -> OryKratosClient a

(<*>) :: OryKratosClient (a -> b) -> OryKratosClient a -> OryKratosClient b

liftA2 :: (a -> b -> c) -> OryKratosClient a -> OryKratosClient b -> OryKratosClient c

(*>) :: OryKratosClient a -> OryKratosClient b -> OryKratosClient b

(<*) :: OryKratosClient a -> OryKratosClient b -> OryKratosClient a

MonadIO OryKratosClient

Defined in OryKratos.API

Methods

liftIO :: IO a -> OryKratosClient a

newtype OryKratosClientError

Custom exception type for our errors.

Constructors

OryKratosClientError ClientError

Instances

Show OryKratosClientError

Defined in OryKratos.API

Methods

showsPrec :: Int -> OryKratosClientError -> ShowS

show :: OryKratosClientError -> String

showList :: [OryKratosClientError] -> ShowS

Exception OryKratosClientError

Defined in OryKratos.API

Methods

toException :: OryKratosClientError -> SomeException

fromException :: SomeException -> Maybe OryKratosClientError

displayException :: OryKratosClientError -> String

Servant

type OryKratosAPI = ("identities" :> (ReqBody '[JSON] CreateIdentity :> Verb 'POST 200 '[JSON] Identity)) :<|> (("recovery" :> ("link" :> (ReqBody '[JSON] CreateRecoveryLink :> Verb 'POST 200 '[JSON] RecoveryLink))) :<|> (("identities" :> (Capture "id" Text :> Verb 'DELETE 200 '[JSON] NoContent)) :<|> (("identities" :> (Capture "id" Text :> Verb 'GET 200 '[JSON] Identity)) :<|> (("identities" :> (QueryParam "per_page" Integer :> (QueryParam "page" Integer :> Verb 'GET 200 '[JSON] [Identity]))) :<|> (("metrics" :> ("prometheus" :> Verb 'GET 200 '[JSON] NoContent)) :<|> (("identities" :> (Capture "id" Text :> (ReqBody '[JSON] UpdateIdentity :> Verb 'PUT 200 '[JSON] Identity))) :<|> (("health" :> ("alive" :> Verb 'GET 200 '[JSON] HealthStatus)) :<|> (("health" :> ("ready" :> Verb 'GET 200 '[JSON] HealthStatus)) :<|> (("schemas" :> (Capture "id" Text :> Verb 'GET 200 '[JSON] Value)) :<|> (("self-service" :> ("errors" :> (QueryParam "error" Text :> Verb 'GET 200 '[JSON] SelfServiceErrorContainer))) :<|> (("self-service" :> ("login" :> ("flows" :> (QueryParam "id" Text :> Verb 'GET 200 '[JSON] LoginFlow)))) :<|> (("self-service" :> ("recovery" :> ("flows" :> (QueryParam "id" Text :> Verb 'GET 200 '[JSON] RecoveryFlow)))) :<|> (("self-service" :> ("registration" :> ("flows" :> (QueryParam "id" Text :> Verb 'GET 200 '[JSON] RegistrationFlow)))) :<|> (("self-service" :> ("settings" :> ("flows" :> (QueryParam "id" Text :> (Header "X-Session-Token" Text :> Verb 'GET 200 '[JSON] SettingsFlow))))) :<|> (("self-service" :> ("verification" :> ("flows" :> (QueryParam "id" Text :> Verb 'GET 200 '[JSON] VerificationFlow)))) :<|> (("self-service" :> ("browser" :> ("flows" :> ("logout" :> Verb 'GET 200 '[JSON] NoContent)))) :<|> (("self-service" :> ("login" :> ("browser" :> (QueryParam "refresh" Bool :> Verb 'GET 200 '[JSON] NoContent)))) :<|> (("self-service" :> ("login" :> ("api" :> (QueryParam "refresh" Bool :> Verb 'GET 200 '[JSON] LoginFlow)))) :<|> (("self-service" :> ("recovery" :> ("browser" :> Verb 'GET 200 '[JSON] NoContent))) :<|> (("self-service" :> ("recovery" :> ("api" :> Verb 'GET 200 '[JSON] RecoveryFlow))) :<|> (("self-service" :> ("registration" :> ("browser" :> Verb 'GET 200 '[JSON] NoContent))) :<|> (("self-service" :> ("registration" :> ("api" :> Verb 'GET 200 '[JSON] RegistrationFlow))) :<|> (("self-service" :> ("settings" :> ("browser" :> Verb 'GET 200 '[JSON] NoContent))) :<|> (("self-service" :> ("settings" :> ("api" :> (Header "X-Session-Token" Text :> Verb 'GET 200 '[JSON] SettingsFlow)))) :<|> (("self-service" :> ("verification" :> ("browser" :> Verb 'GET 200 '[JSON] NoContent))) :<|> (("self-service" :> ("verification" :> ("api" :> Verb 'GET 200 '[JSON] VerificationFlow))) :<|> (("sessions" :> (ReqBody '[JSON] RevokeSession :> Verb 'DELETE 200 '[JSON] NoContent)) :<|> (("self-service" :> ("login" :> (QueryParam "flow" Text :> (ReqBody '[JSON] Value :> Verb 'POST 200 '[JSON] LoginViaApiResponse)))) :<|> (("self-service" :> ("recovery" :> (QueryParam "flow" Text :> (ReqBody '[JSON] Value :> Verb 'POST 200 '[JSON] NoContent)))) :<|> (("self-service" :> ("recovery" :> ("methods" :> ("link" :> (QueryParam "token" Text :> (QueryParam "flow" Text :> (ReqBody '[JSON] SubmitSelfServiceRecoveryFlowWithLinkMethod :> Verb 'POST 200 '[JSON] NoContent))))))) :<|> (("self-service" :> ("registration" :> (QueryParam "flow" Text :> (ReqBody '[JSON] Value :> Verb 'POST 200 '[JSON] RegistrationViaApiResponse)))) :<|> (("self-service" :> ("settings" :> (QueryParam "flow" Text :> (ReqBody '[JSON] Value :> (Header "X-Session-Token" Text :> Verb 'POST 200 '[JSON] SettingsViaApiResponse))))) :<|> (("self-service" :> ("verification" :> ("methods" :> ("link" :> (QueryParam "flow" Text :> (ReqBody '[JSON] Value :> Verb 'POST 200 '[JSON] NoContent)))))) :<|> (("sessions" :> ("whoami" :> (Header "X-Session-Token" Text :> Verb 'GET 200 '[JSON] Session))) :<|> (("version" :> Verb 'GET 200 '[JSON] Version) :<|> Raw)))))))))))))))))))))))))))))))))))

Servant type-level API, generated from the OpenAPI spec for OryKratos.