updates api client with latest changes (#30638)

ui/api-client/.openapi-generator/FILES

@@ -169,7 +169,6 @@ src/models/HaStatusResponse.ts
 src/models/InitializeRequest.ts
 src/models/InternalClientActivityConfigureRequest.ts
 src/models/InternalCountEntitiesResponse.ts
-src/models/InternalCountTokensResponse.ts
 src/models/InternalGenerateOpenApiDocumentWithParametersRequest.ts
 src/models/InternalUiListEnabledFeatureFlagsResponse.ts
 src/models/InternalUiListEnabledVisibleMountsResponse.ts
@@ -764,6 +763,8 @@ src/models/UiConfigUpdateCustomMessageResponse.ts
 src/models/UiHeadersConfigureRequest.ts
 src/models/UiHeadersListResponse.ts
 src/models/UiHeadersReadConfigurationResponse.ts
+src/models/UiLoginDefaultAuthConfigureRequest.ts
+src/models/UiLoginDefaultAuthListResponse.ts
 src/models/UnsealRequest.ts
 src/models/UnsealResponse.ts
 src/models/UnwrapRequest.ts

ui/api-client/dist/apis/SystemApi.js

@@ -22,7 +22,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WellKnownListLabelsListEnum = exports.VersionHistoryListEnum = exports.UiHeadersListListEnum = exports.UiConfigListCustomMessagesListEnum = exports.SystemListSyncGithubAppsListEnum = exports.SystemListSyncDestinationsTypeListEnum = exports.SystemListSyncDestinationsListEnum = exports.SystemListSyncAssociationsListEnum = exports.SystemListStorageRaftSnapshotAutoConfigListEnum = exports.SystemListQuotasLeaseCountListEnum = exports.SystemListPoliciesRgpListEnum = exports.SystemListPoliciesEgpListEnum = exports.SystemListNamespacesListEnum = exports.SystemListMfaMethodListEnum = exports.SystemListManagedKeysTypeListEnum = exports.SubscriptionsListEventsSubscriptionsListEnum = exports.RawListListEnum = exports.RateLimitQuotasListListEnum = exports.PoliciesListPasswordPoliciesListEnum = exports.PoliciesListAclPolicies3ListEnum = exports.PoliciesListAclPoliciesListEnum = exports.PluginsRuntimesCatalogListPluginsRuntimes0ListEnum = exports.PluginsCatalogListPluginsWithTypeListEnum = exports.LeasesLookUpListEnum = exports.SystemApi = void 0;
+exports.WellKnownListLabelsListEnum = exports.VersionHistoryListEnum = exports.UiLoginDefaultAuthListListEnum = exports.UiHeadersListListEnum = exports.UiConfigListCustomMessagesListEnum = exports.SystemListSyncGithubAppsListEnum = exports.SystemListSyncDestinationsTypeListEnum = exports.SystemListSyncDestinationsListEnum = exports.SystemListSyncAssociationsListEnum = exports.SystemListStorageRaftSnapshotAutoConfigListEnum = exports.SystemListQuotasLeaseCountListEnum = exports.SystemListPoliciesRgpListEnum = exports.SystemListPoliciesEgpListEnum = exports.SystemListNamespacesListEnum = exports.SystemListMfaMethodListEnum = exports.SystemListManagedKeysTypeListEnum = exports.SubscriptionsListEventsSubscriptionsListEnum = exports.RawListListEnum = exports.RateLimitQuotasListListEnum = exports.PoliciesListPasswordPoliciesListEnum = exports.PoliciesListAclPolicies3ListEnum = exports.PoliciesListAclPoliciesListEnum = exports.PluginsRuntimesCatalogListPluginsRuntimes0ListEnum = exports.PluginsCatalogListPluginsWithTypeListEnum = exports.LeasesLookUpListEnum = exports.SystemApi = void 0;
 const runtime = require("../runtime");
 const index_1 = require("../models/index");
 /**
@@ -1252,31 +1252,6 @@ class SystemApi extends runtime.BaseAPI {
             return yield response.value();
         });
     }
-    /**
-     * Backwards compatibility is not guaranteed for this API
-     */
-    internalCountTokensRaw(initOverrides) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const queryParameters = {};
-            const headerParameters = {};
-            const response = yield this.request({
-                path: `/sys/internal/counters/tokens`,
-                method: 'GET',
-                headers: headerParameters,
-                query: queryParameters,
-            }, initOverrides);
-            return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.InternalCountTokensResponseFromJSON)(jsonValue));
-        });
-    }
-    /**
-     * Backwards compatibility is not guaranteed for this API
-     */
-    internalCountTokens(initOverrides) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const response = yield this.internalCountTokensRaw(initOverrides);
-            return yield response.value();
-        });
-    }
     /**
      */
     internalGenerateOpenApiDocumentRaw(requestParameters, initOverrides) {
@@ -9631,6 +9606,126 @@ class SystemApi extends runtime.BaseAPI {
             return yield response.value();
         });
     }
+    /**
+     * Configure Default Auth method for UI Login.
+     */
+    uiLoginDefaultAuthConfigureRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['name'] == null) {
+                throw new runtime.RequiredError('name', 'Required parameter "name" was null or undefined when calling uiLoginDefaultAuthConfigure().');
+            }
+            if (requestParameters['uiLoginDefaultAuthConfigureRequest'] == null) {
+                throw new runtime.RequiredError('uiLoginDefaultAuthConfigureRequest', 'Required parameter "uiLoginDefaultAuthConfigureRequest" was null or undefined when calling uiLoginDefaultAuthConfigure().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            headerParameters['Content-Type'] = 'application/json';
+            const response = yield this.request({
+                path: `/sys/config/ui/login/default-auth/{name}`.replace(`{${"name"}}`, encodeURIComponent(String(requestParameters['name']))),
+                method: 'POST',
+                headers: headerParameters,
+                query: queryParameters,
+                body: (0, index_1.UiLoginDefaultAuthConfigureRequestToJSON)(requestParameters['uiLoginDefaultAuthConfigureRequest']),
+            }, initOverrides);
+            return new runtime.VoidApiResponse(response);
+        });
+    }
+    /**
+     * Configure Default Auth method for UI Login.
+     */
+    uiLoginDefaultAuthConfigure(name, uiLoginDefaultAuthConfigureRequest, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.uiLoginDefaultAuthConfigureRaw({ name: name, uiLoginDefaultAuthConfigureRequest: uiLoginDefaultAuthConfigureRequest }, initOverrides);
+            return yield response.value();
+        });
+    }
+    /**
+     * Remove Default Auth config for UI Login.
+     */
+    uiLoginDefaultAuthDeleteConfigurationRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['name'] == null) {
+                throw new runtime.RequiredError('name', 'Required parameter "name" was null or undefined when calling uiLoginDefaultAuthDeleteConfiguration().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            const response = yield this.request({
+                path: `/sys/config/ui/login/default-auth/{name}`.replace(`{${"name"}}`, encodeURIComponent(String(requestParameters['name']))),
+                method: 'DELETE',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.VoidApiResponse(response);
+        });
+    }
+    /**
+     * Remove Default Auth config for UI Login.
+     */
+    uiLoginDefaultAuthDeleteConfiguration(name, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.uiLoginDefaultAuthDeleteConfigurationRaw({ name: name }, initOverrides);
+            return yield response.value();
+        });
+    }
+    /**
+     * Return a list of configured default auth methods for the UI.
+     */
+    uiLoginDefaultAuthListRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['list'] == null) {
+                throw new runtime.RequiredError('list', 'Required parameter "list" was null or undefined when calling uiLoginDefaultAuthList().');
+            }
+            const queryParameters = {};
+            if (requestParameters['list'] != null) {
+                queryParameters['list'] = requestParameters['list'];
+            }
+            const headerParameters = {};
+            const response = yield this.request({
+                path: `/sys/config/ui/login/default-auth/`,
+                method: 'GET',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.UiLoginDefaultAuthListResponseFromJSON)(jsonValue));
+        });
+    }
+    /**
+     * Return a list of configured default auth methods for the UI.
+     */
+    uiLoginDefaultAuthList(list, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.uiLoginDefaultAuthListRaw({ list: list }, initOverrides);
+            return yield response.value();
+        });
+    }
+    /**
+     * Return the given Default Auth configuration
+     */
+    uiLoginDefaultAuthReadConfigurationRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['name'] == null) {
+                throw new runtime.RequiredError('name', 'Required parameter "name" was null or undefined when calling uiLoginDefaultAuthReadConfiguration().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            const response = yield this.request({
+                path: `/sys/config/ui/login/default-auth/{name}`.replace(`{${"name"}}`, encodeURIComponent(String(requestParameters['name']))),
+                method: 'GET',
+                headers: headerParameters,
+                query: queryParameters,
+            }, initOverrides);
+            return new runtime.VoidApiResponse(response);
+        });
+    }
+    /**
+     * Return the given Default Auth configuration
+     */
+    uiLoginDefaultAuthReadConfiguration(name, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.uiLoginDefaultAuthReadConfigurationRaw({ name: name }, initOverrides);
+            return yield response.value();
+        });
+    }
     /**
      * Unseal the Vault.
      */
@@ -10006,6 +10101,14 @@ var UiHeadersListListEnum;
 (function (UiHeadersListListEnum) {
     UiHeadersListListEnum["TRUE"] = "true";
 })(UiHeadersListListEnum || (exports.UiHeadersListListEnum = UiHeadersListListEnum = {}));
+/**
+  * @export
+  * @enum {string}
+  */
+var UiLoginDefaultAuthListListEnum;
+(function (UiLoginDefaultAuthListListEnum) {
+    UiLoginDefaultAuthListListEnum["TRUE"] = "true";
+})(UiLoginDefaultAuthListListEnum || (exports.UiLoginDefaultAuthListListEnum = UiLoginDefaultAuthListListEnum = {}));
 /**
   * @export
   * @enum {string}

ui/api-client/dist/esm/models/JwtLoginRequest.d.ts

@@ -15,6 +15,12 @@
  * @interface JwtLoginRequest
  */
 export interface JwtLoginRequest {
+    /**
+     * An optional token used to fetch group memberships specified by the distributed claim source in the jwt. This is supported only on Azure/Entra ID
+     * @type {string}
+     * @memberof JwtLoginRequest
+     */
+    distributedClaimAccessToken?: string;
     /**
      * The signed JWT to validate.
      * @type {string}

ui/api-client/dist/esm/models/JwtLoginRequest.js

@@ -25,6 +25,7 @@ export function JwtLoginRequestFromJSONTyped(json, ignoreDiscriminator) {
         return json;
     }
     return {
+        'distributedClaimAccessToken': json['distributed_claim_access_token'] == null ? undefined : json['distributed_claim_access_token'],
         'jwt': json['jwt'] == null ? undefined : json['jwt'],
         'role': json['role'] == null ? undefined : json['role'],
     };
@@ -37,6 +38,7 @@ export function JwtLoginRequestToJSONTyped(value, ignoreDiscriminator = false) {
         return value;
     }
     return {
+        'distributed_claim_access_token': value['distributedClaimAccessToken'],
         'jwt': value['jwt'],
         'role': value['role'],
     };

ui/api-client/dist/esm/models/RateLimitQuotasReadResponse.d.ts

@@ -21,6 +21,12 @@ export interface RateLimitQuotasReadResponse {
      * @memberof RateLimitQuotasReadResponse
      */
     blockInterval?: number;
+    /**
+     *
+     * @type {string}
+     * @memberof RateLimitQuotasReadResponse
+     */
+    groupBy?: string;
     /**
      *
      * @type {boolean}
@@ -57,6 +63,12 @@ export interface RateLimitQuotasReadResponse {
      * @memberof RateLimitQuotasReadResponse
      */
     role?: string;
+    /**
+     *
+     * @type {number}
+     * @memberof RateLimitQuotasReadResponse
+     */
+    secondaryRate?: number;
     /**
      *
      * @type {string}

ui/api-client/dist/esm/models/RateLimitQuotasReadResponse.js

@@ -26,12 +26,14 @@ export function RateLimitQuotasReadResponseFromJSONTyped(json, ignoreDiscriminat
     }
     return {
         'blockInterval': json['block_interval'] == null ? undefined : json['block_interval'],
+        'groupBy': json['group_by'] == null ? undefined : json['group_by'],
         'inheritable': json['inheritable'] == null ? undefined : json['inheritable'],
         'interval': json['interval'] == null ? undefined : json['interval'],
         'name': json['name'] == null ? undefined : json['name'],
         'path': json['path'] == null ? undefined : json['path'],
         'rate': json['rate'] == null ? undefined : json['rate'],
         'role': json['role'] == null ? undefined : json['role'],
+        'secondaryRate': json['secondary_rate'] == null ? undefined : json['secondary_rate'],
         'type': json['type'] == null ? undefined : json['type'],
     };
 }
@@ -44,12 +46,14 @@ export function RateLimitQuotasReadResponseToJSONTyped(value, ignoreDiscriminato
     }
     return {
         'block_interval': value['blockInterval'],
+        'group_by': value['groupBy'],
         'inheritable': value['inheritable'],
         'interval': value['interval'],
         'name': value['name'],
         'path': value['path'],
         'rate': value['rate'],
         'role': value['role'],
+        'secondary_rate': value['secondaryRate'],
         'type': value['type'],
     };
 }

ui/api-client/dist/esm/models/RateLimitQuotasWriteRequest.d.ts

@@ -21,6 +21,12 @@ export interface RateLimitQuotasWriteRequest {
      * @memberof RateLimitQuotasWriteRequest
      */
     blockInterval?: string;
+    /**
+     * Attribute by which to group requests by. Valid group_by modes are: 1) "ip" that groups requests by their source IP address (group_by defaults to ip if unset); 2) "none" that groups all requests that match the rate limit quota rule together; 3) "entity_then_ip" that groups requests by their entity ID for authenticated requests that carry one, or by their IP for unauthenticated requests (or requests whose authentication is not connected to an entity); and 4) "entity_then_none" which also groups requests by their entity ID when available, but the rest is all grouped together (i.e. unauthenticated or with authentication not connected to an entity).
+     * @type {string}
+     * @memberof RateLimitQuotasWriteRequest
+     */
+    groupBy?: string;
     /**
      * Whether all child namespaces can inherit this namespace quota.
      * @type {boolean}
@@ -51,6 +57,12 @@ export interface RateLimitQuotasWriteRequest {
      * @memberof RateLimitQuotasWriteRequest
      */
     role?: string;
+    /**
+     * Only available when using the "entity_then_ip" or "entity_then_none" group_by modes. This is the rate limit applied to the requests that fall under the "ip" or "none" groupings, while the authenticated requests that contain an entity ID are subject to the "rate" field instead. Defaults to the same value as "rate".
+     * @type {number}
+     * @memberof RateLimitQuotasWriteRequest
+     */
+    secondaryRate?: number;
     /**
      * Type of the quota rule.
      * @type {string}

ui/api-client/dist/esm/models/RateLimitQuotasWriteRequest.js

@@ -26,11 +26,13 @@ export function RateLimitQuotasWriteRequestFromJSONTyped(json, ignoreDiscriminat
     }
     return {
         'blockInterval': json['block_interval'] == null ? undefined : json['block_interval'],
+        'groupBy': json['group_by'] == null ? undefined : json['group_by'],
         'inheritable': json['inheritable'] == null ? undefined : json['inheritable'],
         'interval': json['interval'] == null ? undefined : json['interval'],
         'path': json['path'] == null ? undefined : json['path'],
         'rate': json['rate'] == null ? undefined : json['rate'],
         'role': json['role'] == null ? undefined : json['role'],
+        'secondaryRate': json['secondary_rate'] == null ? undefined : json['secondary_rate'],
         'type': json['type'] == null ? undefined : json['type'],
     };
 }
@@ -43,11 +45,13 @@ export function RateLimitQuotasWriteRequestToJSONTyped(value, ignoreDiscriminato
     }
     return {
         'block_interval': value['blockInterval'],
+        'group_by': value['groupBy'],
         'inheritable': value['inheritable'],
         'interval': value['interval'],
         'path': value['path'],
         'rate': value['rate'],
         'role': value['role'],
+        'secondary_rate': value['secondaryRate'],
         'type': value['type'],
     };
 }

ui/api-client/dist/esm/models/UiLoginDefaultAuthConfigureRequest.d.ts

@@ -0,0 +1,50 @@
+/**
+ * HashiCorp Vault API
+ * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`.
+ *
+ * The version of the OpenAPI document: 1.20.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface UiLoginDefaultAuthConfigureRequest
+ */
+export interface UiLoginDefaultAuthConfigureRequest {
+    /**
+     * List of backup Auth method types to be shown in "Other Methods".
+     * @type {Array<string>}
+     * @memberof UiLoginDefaultAuthConfigureRequest
+     */
+    backupAuthTypes?: Array<string>;
+    /**
+     * Preferred Auth method type for UI Login form.
+     * @type {string}
+     * @memberof UiLoginDefaultAuthConfigureRequest
+     */
+    defaultAuthType: string;
+    /**
+     * Disable child namespaces from inheriting default auth type.
+     * @type {boolean}
+     * @memberof UiLoginDefaultAuthConfigureRequest
+     */
+    disableInheritance?: boolean;
+    /**
+     * Namespace to apply default Auth method to.
+     * @type {string}
+     * @memberof UiLoginDefaultAuthConfigureRequest
+     */
+    namespace: string;
+}
+/**
+ * Check if a given object implements the UiLoginDefaultAuthConfigureRequest interface.
+ */
+export declare function instanceOfUiLoginDefaultAuthConfigureRequest(value: object): value is UiLoginDefaultAuthConfigureRequest;
+export declare function UiLoginDefaultAuthConfigureRequestFromJSON(json: any): UiLoginDefaultAuthConfigureRequest;
+export declare function UiLoginDefaultAuthConfigureRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): UiLoginDefaultAuthConfigureRequest;
+export declare function UiLoginDefaultAuthConfigureRequestToJSON(json: any): UiLoginDefaultAuthConfigureRequest;
+export declare function UiLoginDefaultAuthConfigureRequestToJSONTyped(value?: UiLoginDefaultAuthConfigureRequest | null, ignoreDiscriminator?: boolean): any;

ui/api-client/dist/esm/models/UiLoginDefaultAuthConfigureRequest.js

@@ -0,0 +1,51 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * HashiCorp Vault API
+ * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`.
+ *
+ * The version of the OpenAPI document: 1.20.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * Check if a given object implements the UiLoginDefaultAuthConfigureRequest interface.
+ */
+export function instanceOfUiLoginDefaultAuthConfigureRequest(value) {
+    if (!('defaultAuthType' in value) || value['defaultAuthType'] === undefined)
+        return false;
+    if (!('namespace' in value) || value['namespace'] === undefined)
+        return false;
+    return true;
+}
+export function UiLoginDefaultAuthConfigureRequestFromJSON(json) {
+    return UiLoginDefaultAuthConfigureRequestFromJSONTyped(json, false);
+}
+export function UiLoginDefaultAuthConfigureRequestFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'backupAuthTypes': json['backup_auth_types'] == null ? undefined : json['backup_auth_types'],
+        'defaultAuthType': json['default_auth_type'],
+        'disableInheritance': json['disable_inheritance'] == null ? undefined : json['disable_inheritance'],
+        'namespace': json['namespace'],
+    };
+}
+export function UiLoginDefaultAuthConfigureRequestToJSON(json) {
+    return UiLoginDefaultAuthConfigureRequestToJSONTyped(json, false);
+}
+export function UiLoginDefaultAuthConfigureRequestToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'backup_auth_types': value['backupAuthTypes'],
+        'default_auth_type': value['defaultAuthType'],
+        'disable_inheritance': value['disableInheritance'],
+        'namespace': value['namespace'],
+    };
+}

ui/api-client/dist/esm/models/UiLoginDefaultAuthListResponse.d.ts

@@ -0,0 +1,38 @@
+/**
+ * HashiCorp Vault API
+ * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`.
+ *
+ * The version of the OpenAPI document: 1.20.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface UiLoginDefaultAuthListResponse
+ */
+export interface UiLoginDefaultAuthListResponse {
+    /**
+     *
+     * @type {object}
+     * @memberof UiLoginDefaultAuthListResponse
+     */
+    keyInfo?: object;
+    /**
+     *
+     * @type {Array<string>}
+     * @memberof UiLoginDefaultAuthListResponse
+     */
+    keys?: Array<string>;
+}
+/**
+ * Check if a given object implements the UiLoginDefaultAuthListResponse interface.
+ */
+export declare function instanceOfUiLoginDefaultAuthListResponse(value: object): value is UiLoginDefaultAuthListResponse;
+export declare function UiLoginDefaultAuthListResponseFromJSON(json: any): UiLoginDefaultAuthListResponse;
+export declare function UiLoginDefaultAuthListResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): UiLoginDefaultAuthListResponse;
+export declare function UiLoginDefaultAuthListResponseToJSON(json: any): UiLoginDefaultAuthListResponse;
+export declare function UiLoginDefaultAuthListResponseToJSONTyped(value?: UiLoginDefaultAuthListResponse | null, ignoreDiscriminator?: boolean): any;

ui/api-client/dist/esm/models/UiLoginDefaultAuthListResponse.js

@@ -0,0 +1,43 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * HashiCorp Vault API
+ * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`.
+ *
+ * The version of the OpenAPI document: 1.20.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * Check if a given object implements the UiLoginDefaultAuthListResponse interface.
+ */
+export function instanceOfUiLoginDefaultAuthListResponse(value) {
+    return true;
+}
+export function UiLoginDefaultAuthListResponseFromJSON(json) {
+    return UiLoginDefaultAuthListResponseFromJSONTyped(json, false);
+}
+export function UiLoginDefaultAuthListResponseFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'keyInfo': json['key_info'] == null ? undefined : json['key_info'],
+        'keys': json['keys'] == null ? undefined : json['keys'],
+    };
+}
+export function UiLoginDefaultAuthListResponseToJSON(json) {
+    return UiLoginDefaultAuthListResponseToJSONTyped(json, false);
+}
+export function UiLoginDefaultAuthListResponseToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'key_info': value['keyInfo'],
+        'keys': value['keys'],
+    };
+}

ui/api-client/dist/esm/models/index.d.ts

@@ -160,7 +160,6 @@ export * from './HaStatusResponse';
 export * from './InitializeRequest';
 export * from './InternalClientActivityConfigureRequest';
 export * from './InternalCountEntitiesResponse';
-export * from './InternalCountTokensResponse';
 export * from './InternalGenerateOpenApiDocumentWithParametersRequest';
 export * from './InternalUiListEnabledFeatureFlagsResponse';
 export * from './InternalUiListEnabledVisibleMountsResponse';
@@ -755,6 +754,8 @@ export * from './UiConfigUpdateCustomMessageResponse';
 export * from './UiHeadersConfigureRequest';
 export * from './UiHeadersListResponse';
 export * from './UiHeadersReadConfigurationResponse';
+export * from './UiLoginDefaultAuthConfigureRequest';
+export * from './UiLoginDefaultAuthListResponse';
 export * from './UnsealRequest';
 export * from './UnsealResponse';
 export * from './UnwrapRequest';

ui/api-client/dist/esm/models/index.js

@@ -162,7 +162,6 @@ export * from './HaStatusResponse';
 export * from './InitializeRequest';
 export * from './InternalClientActivityConfigureRequest';
 export * from './InternalCountEntitiesResponse';
-export * from './InternalCountTokensResponse';
 export * from './InternalGenerateOpenApiDocumentWithParametersRequest';
 export * from './InternalUiListEnabledFeatureFlagsResponse';
 export * from './InternalUiListEnabledVisibleMountsResponse';
@@ -757,6 +756,8 @@ export * from './UiConfigUpdateCustomMessageResponse';
 export * from './UiHeadersConfigureRequest';
 export * from './UiHeadersListResponse';
 export * from './UiHeadersReadConfigurationResponse';
+export * from './UiLoginDefaultAuthConfigureRequest';
+export * from './UiLoginDefaultAuthListResponse';
 export * from './UnsealRequest';
 export * from './UnsealResponse';
 export * from './UnwrapRequest';

ui/api-client/dist/models/JwtLoginRequest.d.ts

@@ -15,6 +15,12 @@
  * @interface JwtLoginRequest
  */
 export interface JwtLoginRequest {
+    /**
+     * An optional token used to fetch group memberships specified by the distributed claim source in the jwt. This is supported only on Azure/Entra ID
+     * @type {string}
+     * @memberof JwtLoginRequest
+     */
+    distributedClaimAccessToken?: string;
     /**
      * The signed JWT to validate.
      * @type {string}

ui/api-client/dist/models/JwtLoginRequest.js

@@ -32,6 +32,7 @@ function JwtLoginRequestFromJSONTyped(json, ignoreDiscriminator) {
         return json;
     }
     return {
+        'distributedClaimAccessToken': json['distributed_claim_access_token'] == null ? undefined : json['distributed_claim_access_token'],
         'jwt': json['jwt'] == null ? undefined : json['jwt'],
         'role': json['role'] == null ? undefined : json['role'],
     };
@@ -44,6 +45,7 @@ function JwtLoginRequestToJSONTyped(value, ignoreDiscriminator = false) {
         return value;
     }
     return {
+        'distributed_claim_access_token': value['distributedClaimAccessToken'],
         'jwt': value['jwt'],
         'role': value['role'],
     };

ui/api-client/dist/models/RateLimitQuotasReadResponse.d.ts

@@ -21,6 +21,12 @@ export interface RateLimitQuotasReadResponse {
      * @memberof RateLimitQuotasReadResponse
      */
     blockInterval?: number;
+    /**
+     *
+     * @type {string}
+     * @memberof RateLimitQuotasReadResponse
+     */
+    groupBy?: string;
     /**
      *
      * @type {boolean}
@@ -57,6 +63,12 @@ export interface RateLimitQuotasReadResponse {
      * @memberof RateLimitQuotasReadResponse
      */
     role?: string;
+    /**
+     *
+     * @type {number}
+     * @memberof RateLimitQuotasReadResponse
+     */
+    secondaryRate?: number;
     /**
      *
      * @type {string}

ui/api-client/dist/models/RateLimitQuotasReadResponse.js

@@ -33,12 +33,14 @@ function RateLimitQuotasReadResponseFromJSONTyped(json, ignoreDiscriminator) {
     }
     return {
         'blockInterval': json['block_interval'] == null ? undefined : json['block_interval'],
+        'groupBy': json['group_by'] == null ? undefined : json['group_by'],
         'inheritable': json['inheritable'] == null ? undefined : json['inheritable'],
         'interval': json['interval'] == null ? undefined : json['interval'],
         'name': json['name'] == null ? undefined : json['name'],
         'path': json['path'] == null ? undefined : json['path'],
         'rate': json['rate'] == null ? undefined : json['rate'],
         'role': json['role'] == null ? undefined : json['role'],
+        'secondaryRate': json['secondary_rate'] == null ? undefined : json['secondary_rate'],
         'type': json['type'] == null ? undefined : json['type'],
     };
 }
@@ -51,12 +53,14 @@ function RateLimitQuotasReadResponseToJSONTyped(value, ignoreDiscriminator = fal
     }
     return {
         'block_interval': value['blockInterval'],
+        'group_by': value['groupBy'],
         'inheritable': value['inheritable'],
         'interval': value['interval'],
         'name': value['name'],
         'path': value['path'],
         'rate': value['rate'],
         'role': value['role'],
+        'secondary_rate': value['secondaryRate'],
         'type': value['type'],
     };
 }

ui/api-client/dist/models/RateLimitQuotasWriteRequest.d.ts

@@ -21,6 +21,12 @@ export interface RateLimitQuotasWriteRequest {
      * @memberof RateLimitQuotasWriteRequest
      */
     blockInterval?: string;
+    /**
+     * Attribute by which to group requests by. Valid group_by modes are: 1) "ip" that groups requests by their source IP address (group_by defaults to ip if unset); 2) "none" that groups all requests that match the rate limit quota rule together; 3) "entity_then_ip" that groups requests by their entity ID for authenticated requests that carry one, or by their IP for unauthenticated requests (or requests whose authentication is not connected to an entity); and 4) "entity_then_none" which also groups requests by their entity ID when available, but the rest is all grouped together (i.e. unauthenticated or with authentication not connected to an entity).
+     * @type {string}
+     * @memberof RateLimitQuotasWriteRequest
+     */
+    groupBy?: string;
     /**
      * Whether all child namespaces can inherit this namespace quota.
      * @type {boolean}
@@ -51,6 +57,12 @@ export interface RateLimitQuotasWriteRequest {
      * @memberof RateLimitQuotasWriteRequest
      */
     role?: string;
+    /**
+     * Only available when using the "entity_then_ip" or "entity_then_none" group_by modes. This is the rate limit applied to the requests that fall under the "ip" or "none" groupings, while the authenticated requests that contain an entity ID are subject to the "rate" field instead. Defaults to the same value as "rate".
+     * @type {number}
+     * @memberof RateLimitQuotasWriteRequest
+     */
+    secondaryRate?: number;
     /**
      * Type of the quota rule.
      * @type {string}

ui/api-client/dist/models/RateLimitQuotasWriteRequest.js

@@ -33,11 +33,13 @@ function RateLimitQuotasWriteRequestFromJSONTyped(json, ignoreDiscriminator) {
     }
     return {
         'blockInterval': json['block_interval'] == null ? undefined : json['block_interval'],
+        'groupBy': json['group_by'] == null ? undefined : json['group_by'],
         'inheritable': json['inheritable'] == null ? undefined : json['inheritable'],
         'interval': json['interval'] == null ? undefined : json['interval'],
         'path': json['path'] == null ? undefined : json['path'],
         'rate': json['rate'] == null ? undefined : json['rate'],
         'role': json['role'] == null ? undefined : json['role'],
+        'secondaryRate': json['secondary_rate'] == null ? undefined : json['secondary_rate'],
         'type': json['type'] == null ? undefined : json['type'],
     };
 }
@@ -50,11 +52,13 @@ function RateLimitQuotasWriteRequestToJSONTyped(value, ignoreDiscriminator = fal
     }
     return {
         'block_interval': value['blockInterval'],
+        'group_by': value['groupBy'],
         'inheritable': value['inheritable'],
         'interval': value['interval'],
         'path': value['path'],
         'rate': value['rate'],
         'role': value['role'],
+        'secondary_rate': value['secondaryRate'],
         'type': value['type'],
     };
 }

ui/api-client/dist/models/UiLoginDefaultAuthConfigureRequest.d.ts

@@ -0,0 +1,50 @@
+/**
+ * HashiCorp Vault API
+ * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`.
+ *
+ * The version of the OpenAPI document: 1.20.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface UiLoginDefaultAuthConfigureRequest
+ */
+export interface UiLoginDefaultAuthConfigureRequest {
+    /**
+     * List of backup Auth method types to be shown in "Other Methods".
+     * @type {Array<string>}
+     * @memberof UiLoginDefaultAuthConfigureRequest
+     */
+    backupAuthTypes?: Array<string>;
+    /**
+     * Preferred Auth method type for UI Login form.
+     * @type {string}
+     * @memberof UiLoginDefaultAuthConfigureRequest
+     */
+    defaultAuthType: string;
+    /**
+     * Disable child namespaces from inheriting default auth type.
+     * @type {boolean}
+     * @memberof UiLoginDefaultAuthConfigureRequest
+     */
+    disableInheritance?: boolean;
+    /**
+     * Namespace to apply default Auth method to.
+     * @type {string}
+     * @memberof UiLoginDefaultAuthConfigureRequest
+     */
+    namespace: string;
+}
+/**
+ * Check if a given object implements the UiLoginDefaultAuthConfigureRequest interface.
+ */
+export declare function instanceOfUiLoginDefaultAuthConfigureRequest(value: object): value is UiLoginDefaultAuthConfigureRequest;
+export declare function UiLoginDefaultAuthConfigureRequestFromJSON(json: any): UiLoginDefaultAuthConfigureRequest;
+export declare function UiLoginDefaultAuthConfigureRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): UiLoginDefaultAuthConfigureRequest;
+export declare function UiLoginDefaultAuthConfigureRequestToJSON(json: any): UiLoginDefaultAuthConfigureRequest;
+export declare function UiLoginDefaultAuthConfigureRequestToJSONTyped(value?: UiLoginDefaultAuthConfigureRequest | null, ignoreDiscriminator?: boolean): any;

ui/api-client/dist/models/UiLoginDefaultAuthConfigureRequest.js

@@ -0,0 +1,58 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * HashiCorp Vault API
+ * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`.
+ *
+ * The version of the OpenAPI document: 1.20.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.instanceOfUiLoginDefaultAuthConfigureRequest = instanceOfUiLoginDefaultAuthConfigureRequest;
+exports.UiLoginDefaultAuthConfigureRequestFromJSON = UiLoginDefaultAuthConfigureRequestFromJSON;
+exports.UiLoginDefaultAuthConfigureRequestFromJSONTyped = UiLoginDefaultAuthConfigureRequestFromJSONTyped;
+exports.UiLoginDefaultAuthConfigureRequestToJSON = UiLoginDefaultAuthConfigureRequestToJSON;
+exports.UiLoginDefaultAuthConfigureRequestToJSONTyped = UiLoginDefaultAuthConfigureRequestToJSONTyped;
+/**
+ * Check if a given object implements the UiLoginDefaultAuthConfigureRequest interface.
+ */
+function instanceOfUiLoginDefaultAuthConfigureRequest(value) {
+    if (!('defaultAuthType' in value) || value['defaultAuthType'] === undefined)
+        return false;
+    if (!('namespace' in value) || value['namespace'] === undefined)
+        return false;
+    return true;
+}
+function UiLoginDefaultAuthConfigureRequestFromJSON(json) {
+    return UiLoginDefaultAuthConfigureRequestFromJSONTyped(json, false);
+}
+function UiLoginDefaultAuthConfigureRequestFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'backupAuthTypes': json['backup_auth_types'] == null ? undefined : json['backup_auth_types'],
+        'defaultAuthType': json['default_auth_type'],
+        'disableInheritance': json['disable_inheritance'] == null ? undefined : json['disable_inheritance'],
+        'namespace': json['namespace'],
+    };
+}
+function UiLoginDefaultAuthConfigureRequestToJSON(json) {
+    return UiLoginDefaultAuthConfigureRequestToJSONTyped(json, false);
+}
+function UiLoginDefaultAuthConfigureRequestToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'backup_auth_types': value['backupAuthTypes'],
+        'default_auth_type': value['defaultAuthType'],
+        'disable_inheritance': value['disableInheritance'],
+        'namespace': value['namespace'],
+    };
+}

ui/api-client/dist/models/UiLoginDefaultAuthListResponse.d.ts

@@ -0,0 +1,38 @@
+/**
+ * HashiCorp Vault API
+ * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`.
+ *
+ * The version of the OpenAPI document: 1.20.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface UiLoginDefaultAuthListResponse
+ */
+export interface UiLoginDefaultAuthListResponse {
+    /**
+     *
+     * @type {object}
+     * @memberof UiLoginDefaultAuthListResponse
+     */
+    keyInfo?: object;
+    /**
+     *
+     * @type {Array<string>}
+     * @memberof UiLoginDefaultAuthListResponse
+     */
+    keys?: Array<string>;
+}
+/**
+ * Check if a given object implements the UiLoginDefaultAuthListResponse interface.
+ */
+export declare function instanceOfUiLoginDefaultAuthListResponse(value: object): value is UiLoginDefaultAuthListResponse;
+export declare function UiLoginDefaultAuthListResponseFromJSON(json: any): UiLoginDefaultAuthListResponse;
+export declare function UiLoginDefaultAuthListResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): UiLoginDefaultAuthListResponse;
+export declare function UiLoginDefaultAuthListResponseToJSON(json: any): UiLoginDefaultAuthListResponse;
+export declare function UiLoginDefaultAuthListResponseToJSONTyped(value?: UiLoginDefaultAuthListResponse | null, ignoreDiscriminator?: boolean): any;

ui/api-client/dist/models/UiLoginDefaultAuthListResponse.js

@@ -0,0 +1,50 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * HashiCorp Vault API
+ * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`.
+ *
+ * The version of the OpenAPI document: 1.20.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.instanceOfUiLoginDefaultAuthListResponse = instanceOfUiLoginDefaultAuthListResponse;
+exports.UiLoginDefaultAuthListResponseFromJSON = UiLoginDefaultAuthListResponseFromJSON;
+exports.UiLoginDefaultAuthListResponseFromJSONTyped = UiLoginDefaultAuthListResponseFromJSONTyped;
+exports.UiLoginDefaultAuthListResponseToJSON = UiLoginDefaultAuthListResponseToJSON;
+exports.UiLoginDefaultAuthListResponseToJSONTyped = UiLoginDefaultAuthListResponseToJSONTyped;
+/**
+ * Check if a given object implements the UiLoginDefaultAuthListResponse interface.
+ */
+function instanceOfUiLoginDefaultAuthListResponse(value) {
+    return true;
+}
+function UiLoginDefaultAuthListResponseFromJSON(json) {
+    return UiLoginDefaultAuthListResponseFromJSONTyped(json, false);
+}
+function UiLoginDefaultAuthListResponseFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'keyInfo': json['key_info'] == null ? undefined : json['key_info'],
+        'keys': json['keys'] == null ? undefined : json['keys'],
+    };
+}
+function UiLoginDefaultAuthListResponseToJSON(json) {
+    return UiLoginDefaultAuthListResponseToJSONTyped(json, false);
+}
+function UiLoginDefaultAuthListResponseToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'key_info': value['keyInfo'],
+        'keys': value['keys'],
+    };
+}

ui/api-client/dist/models/index.d.ts

@@ -160,7 +160,6 @@ export * from './HaStatusResponse';
 export * from './InitializeRequest';
 export * from './InternalClientActivityConfigureRequest';
 export * from './InternalCountEntitiesResponse';
-export * from './InternalCountTokensResponse';
 export * from './InternalGenerateOpenApiDocumentWithParametersRequest';
 export * from './InternalUiListEnabledFeatureFlagsResponse';
 export * from './InternalUiListEnabledVisibleMountsResponse';
@@ -755,6 +754,8 @@ export * from './UiConfigUpdateCustomMessageResponse';
 export * from './UiHeadersConfigureRequest';
 export * from './UiHeadersListResponse';
 export * from './UiHeadersReadConfigurationResponse';
+export * from './UiLoginDefaultAuthConfigureRequest';
+export * from './UiLoginDefaultAuthListResponse';
 export * from './UnsealRequest';
 export * from './UnsealResponse';
 export * from './UnwrapRequest';

ui/api-client/dist/models/index.js

@@ -178,7 +178,6 @@ __exportStar(require("./HaStatusResponse"), exports);
 __exportStar(require("./InitializeRequest"), exports);
 __exportStar(require("./InternalClientActivityConfigureRequest"), exports);
 __exportStar(require("./InternalCountEntitiesResponse"), exports);
-__exportStar(require("./InternalCountTokensResponse"), exports);
 __exportStar(require("./InternalGenerateOpenApiDocumentWithParametersRequest"), exports);
 __exportStar(require("./InternalUiListEnabledFeatureFlagsResponse"), exports);
 __exportStar(require("./InternalUiListEnabledVisibleMountsResponse"), exports);
@@ -773,6 +772,8 @@ __exportStar(require("./UiConfigUpdateCustomMessageResponse"), exports);
 __exportStar(require("./UiHeadersConfigureRequest"), exports);
 __exportStar(require("./UiHeadersListResponse"), exports);
 __exportStar(require("./UiHeadersReadConfigurationResponse"), exports);
+__exportStar(require("./UiLoginDefaultAuthConfigureRequest"), exports);
+__exportStar(require("./UiLoginDefaultAuthListResponse"), exports);
 __exportStar(require("./UnsealRequest"), exports);
 __exportStar(require("./UnsealResponse"), exports);
 __exportStar(require("./UnwrapRequest"), exports);

ui/api-client/src/apis/SystemApi.ts

@@ -48,7 +48,6 @@ import type {
   InitializeRequest,
   InternalClientActivityConfigureRequest,
   InternalCountEntitiesResponse,
-  InternalCountTokensResponse,
   InternalGenerateOpenApiDocumentWithParametersRequest,
   InternalUiListEnabledFeatureFlagsResponse,
   InternalUiListEnabledVisibleMountsResponse,
@@ -254,6 +253,8 @@ import type {
   UiHeadersConfigureRequest,
   UiHeadersListResponse,
   UiHeadersReadConfigurationResponse,
+  UiLoginDefaultAuthConfigureRequest,
+  UiLoginDefaultAuthListResponse,
   UnsealRequest,
   UnsealResponse,
   UnwrapRequest,
@@ -329,8 +330,6 @@ import {
     InternalClientActivityConfigureRequestToJSON,
     InternalCountEntitiesResponseFromJSON,
     InternalCountEntitiesResponseToJSON,
-    InternalCountTokensResponseFromJSON,
-    InternalCountTokensResponseToJSON,
     InternalGenerateOpenApiDocumentWithParametersRequestFromJSON,
     InternalGenerateOpenApiDocumentWithParametersRequestToJSON,
     InternalUiListEnabledFeatureFlagsResponseFromJSON,
@@ -741,6 +740,10 @@ import {
     UiHeadersListResponseToJSON,
     UiHeadersReadConfigurationResponseFromJSON,
     UiHeadersReadConfigurationResponseToJSON,
+    UiLoginDefaultAuthConfigureRequestFromJSON,
+    UiLoginDefaultAuthConfigureRequestToJSON,
+    UiLoginDefaultAuthListResponseFromJSON,
+    UiLoginDefaultAuthListResponseToJSON,
     UnsealRequestFromJSON,
     UnsealRequestToJSON,
     UnsealResponseFromJSON,
@@ -1802,6 +1805,23 @@ export interface SystemApiUiHeadersReadConfigurationRequest {
     header: string;
 }
 
+export interface SystemApiUiLoginDefaultAuthConfigureOperationRequest {
+    name: string;
+    uiLoginDefaultAuthConfigureRequest: UiLoginDefaultAuthConfigureRequest;
+}
+
+export interface SystemApiUiLoginDefaultAuthDeleteConfigurationRequest {
+    name: string;
+}
+
+export interface SystemApiUiLoginDefaultAuthListRequest {
+    list: UiLoginDefaultAuthListListEnum;
+}
+
+export interface SystemApiUiLoginDefaultAuthReadConfigurationRequest {
+    name: string;
+}
+
 export interface SystemApiUnsealOperationRequest {
     unsealRequest: UnsealRequest;
 }
@@ -3247,32 +3267,6 @@ export class SystemApi extends runtime.BaseAPI {
         return await response.value();
     }
 
-    /**
-     * Backwards compatibility is not guaranteed for this API
-     */
-    async internalCountTokensRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<InternalCountTokensResponse>> {
-        const queryParameters: any = {};
-
-        const headerParameters: runtime.HTTPHeaders = {};
-
-        const response = await this.request({
-            path: `/sys/internal/counters/tokens`,
-            method: 'GET',
-            headers: headerParameters,
-            query: queryParameters,
-        }, initOverrides);
-
-        return new runtime.JSONApiResponse(response, (jsonValue) => InternalCountTokensResponseFromJSON(jsonValue));
-    }
-
-    /**
-     * Backwards compatibility is not guaranteed for this API
-     */
-    async internalCountTokens(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<InternalCountTokensResponse> {
-        const response = await this.internalCountTokensRaw(initOverrides);
-        return await response.value();
-    }
-
     /**
      */
     async internalGenerateOpenApiDocumentRaw(requestParameters: SystemApiInternalGenerateOpenApiDocumentRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<runtime.VoidResponse>> {
@@ -13217,6 +13211,152 @@ export class SystemApi extends runtime.BaseAPI {
         return await response.value();
     }
 
+    /**
+     * Configure Default Auth method for UI Login.
+     */
+    async uiLoginDefaultAuthConfigureRaw(requestParameters: SystemApiUiLoginDefaultAuthConfigureOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<runtime.VoidResponse>> {
+        if (requestParameters['name'] == null) {
+            throw new runtime.RequiredError(
+                'name',
+                'Required parameter "name" was null or undefined when calling uiLoginDefaultAuthConfigure().'
+            );
+        }
+
+        if (requestParameters['uiLoginDefaultAuthConfigureRequest'] == null) {
+            throw new runtime.RequiredError(
+                'uiLoginDefaultAuthConfigureRequest',
+                'Required parameter "uiLoginDefaultAuthConfigureRequest" was null or undefined when calling uiLoginDefaultAuthConfigure().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        const response = await this.request({
+            path: `/sys/config/ui/login/default-auth/{name}`.replace(`{${"name"}}`, encodeURIComponent(String(requestParameters['name']))),
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: UiLoginDefaultAuthConfigureRequestToJSON(requestParameters['uiLoginDefaultAuthConfigureRequest']),
+        }, initOverrides);
+
+        return new runtime.VoidApiResponse(response);
+    }
+
+    /**
+     * Configure Default Auth method for UI Login.
+     */
+    async uiLoginDefaultAuthConfigure(name: string, uiLoginDefaultAuthConfigureRequest: UiLoginDefaultAuthConfigureRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.VoidResponse> {
+        const response = await this.uiLoginDefaultAuthConfigureRaw({ name: name, uiLoginDefaultAuthConfigureRequest: uiLoginDefaultAuthConfigureRequest }, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Remove Default Auth config for UI Login.
+     */
+    async uiLoginDefaultAuthDeleteConfigurationRaw(requestParameters: SystemApiUiLoginDefaultAuthDeleteConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<runtime.VoidResponse>> {
+        if (requestParameters['name'] == null) {
+            throw new runtime.RequiredError(
+                'name',
+                'Required parameter "name" was null or undefined when calling uiLoginDefaultAuthDeleteConfiguration().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        const response = await this.request({
+            path: `/sys/config/ui/login/default-auth/{name}`.replace(`{${"name"}}`, encodeURIComponent(String(requestParameters['name']))),
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+
+        return new runtime.VoidApiResponse(response);
+    }
+
+    /**
+     * Remove Default Auth config for UI Login.
+     */
+    async uiLoginDefaultAuthDeleteConfiguration(name: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.VoidResponse> {
+        const response = await this.uiLoginDefaultAuthDeleteConfigurationRaw({ name: name }, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Return a list of configured default auth methods for the UI.
+     */
+    async uiLoginDefaultAuthListRaw(requestParameters: SystemApiUiLoginDefaultAuthListRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<UiLoginDefaultAuthListResponse>> {
+        if (requestParameters['list'] == null) {
+            throw new runtime.RequiredError(
+                'list',
+                'Required parameter "list" was null or undefined when calling uiLoginDefaultAuthList().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        if (requestParameters['list'] != null) {
+            queryParameters['list'] = requestParameters['list'];
+        }
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        const response = await this.request({
+            path: `/sys/config/ui/login/default-auth/`,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => UiLoginDefaultAuthListResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Return a list of configured default auth methods for the UI.
+     */
+    async uiLoginDefaultAuthList(list: UiLoginDefaultAuthListListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<UiLoginDefaultAuthListResponse> {
+        const response = await this.uiLoginDefaultAuthListRaw({ list: list }, initOverrides);
+        return await response.value();
+    }
+
+    /**
+     * Return the given Default Auth configuration
+     */
+    async uiLoginDefaultAuthReadConfigurationRaw(requestParameters: SystemApiUiLoginDefaultAuthReadConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<runtime.VoidResponse>> {
+        if (requestParameters['name'] == null) {
+            throw new runtime.RequiredError(
+                'name',
+                'Required parameter "name" was null or undefined when calling uiLoginDefaultAuthReadConfiguration().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        const response = await this.request({
+            path: `/sys/config/ui/login/default-auth/{name}`.replace(`{${"name"}}`, encodeURIComponent(String(requestParameters['name']))),
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+
+        return new runtime.VoidApiResponse(response);
+    }
+
+    /**
+     * Return the given Default Auth configuration
+     */
+    async uiLoginDefaultAuthReadConfiguration(name: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.VoidResponse> {
+        const response = await this.uiLoginDefaultAuthReadConfigurationRaw({ name: name }, initOverrides);
+        return await response.value();
+    }
+
     /**
      * Unseal the Vault.
      */
@@ -13606,6 +13746,13 @@ export enum UiConfigListCustomMessagesListEnum {
 export enum UiHeadersListListEnum {
     TRUE = 'true'
 }
+/**
+  * @export
+  * @enum {string}
+  */
+export enum UiLoginDefaultAuthListListEnum {
+    TRUE = 'true'
+}
 /**
   * @export
   * @enum {string}

ui/api-client/src/models/JwtLoginRequest.ts

@@ -19,6 +19,12 @@ import { mapValues } from '../runtime';
  * @interface JwtLoginRequest
  */
 export interface JwtLoginRequest {
+    /**
+     * An optional token used to fetch group memberships specified by the distributed claim source in the jwt. This is supported only on Azure/Entra ID
+     * @type {string}
+     * @memberof JwtLoginRequest
+     */
+    distributedClaimAccessToken?: string;
     /**
      * The signed JWT to validate.
      * @type {string}
@@ -50,6 +56,7 @@ export function JwtLoginRequestFromJSONTyped(json: any, ignoreDiscriminator: boo
     }
     return {
         
+        'distributedClaimAccessToken': json['distributed_claim_access_token'] == null ? undefined : json['distributed_claim_access_token'],
         'jwt': json['jwt'] == null ? undefined : json['jwt'],
         'role': json['role'] == null ? undefined : json['role'],
     };
@@ -66,6 +73,7 @@ export function JwtLoginRequestToJSONTyped(value?: JwtLoginRequest | null, ignor
 
     return {
         
+        'distributed_claim_access_token': value['distributedClaimAccessToken'],
         'jwt': value['jwt'],
         'role': value['role'],
     };

ui/api-client/src/models/RateLimitQuotasReadResponse.ts

@@ -25,6 +25,12 @@ export interface RateLimitQuotasReadResponse {
      * @memberof RateLimitQuotasReadResponse
      */
     blockInterval?: number;
+    /**
+     * 
+     * @type {string}
+     * @memberof RateLimitQuotasReadResponse
+     */
+    groupBy?: string;
     /**
      * 
      * @type {boolean}
@@ -61,6 +67,12 @@ export interface RateLimitQuotasReadResponse {
      * @memberof RateLimitQuotasReadResponse
      */
     role?: string;
+    /**
+     * 
+     * @type {number}
+     * @memberof RateLimitQuotasReadResponse
+     */
+    secondaryRate?: number;
     /**
      * 
      * @type {string}
@@ -87,12 +99,14 @@ export function RateLimitQuotasReadResponseFromJSONTyped(json: any, ignoreDiscri
     return {
         
         'blockInterval': json['block_interval'] == null ? undefined : json['block_interval'],
+        'groupBy': json['group_by'] == null ? undefined : json['group_by'],
         'inheritable': json['inheritable'] == null ? undefined : json['inheritable'],
         'interval': json['interval'] == null ? undefined : json['interval'],
         'name': json['name'] == null ? undefined : json['name'],
         'path': json['path'] == null ? undefined : json['path'],
         'rate': json['rate'] == null ? undefined : json['rate'],
         'role': json['role'] == null ? undefined : json['role'],
+        'secondaryRate': json['secondary_rate'] == null ? undefined : json['secondary_rate'],
         'type': json['type'] == null ? undefined : json['type'],
     };
 }
@@ -109,12 +123,14 @@ export function RateLimitQuotasReadResponseToJSONTyped(value?: RateLimitQuotasRe
     return {
         
         'block_interval': value['blockInterval'],
+        'group_by': value['groupBy'],
         'inheritable': value['inheritable'],
         'interval': value['interval'],
         'name': value['name'],
         'path': value['path'],
         'rate': value['rate'],
         'role': value['role'],
+        'secondary_rate': value['secondaryRate'],
         'type': value['type'],
     };
 }

ui/api-client/src/models/RateLimitQuotasWriteRequest.ts

@@ -25,6 +25,12 @@ export interface RateLimitQuotasWriteRequest {
      * @memberof RateLimitQuotasWriteRequest
      */
     blockInterval?: string;
+    /**
+     * Attribute by which to group requests by. Valid group_by modes are: 1) "ip" that groups requests by their source IP address (group_by defaults to ip if unset); 2) "none" that groups all requests that match the rate limit quota rule together; 3) "entity_then_ip" that groups requests by their entity ID for authenticated requests that carry one, or by their IP for unauthenticated requests (or requests whose authentication is not connected to an entity); and 4) "entity_then_none" which also groups requests by their entity ID when available, but the rest is all grouped together (i.e. unauthenticated or with authentication not connected to an entity).
+     * @type {string}
+     * @memberof RateLimitQuotasWriteRequest
+     */
+    groupBy?: string;
     /**
      * Whether all child namespaces can inherit this namespace quota.
      * @type {boolean}
@@ -55,6 +61,12 @@ export interface RateLimitQuotasWriteRequest {
      * @memberof RateLimitQuotasWriteRequest
      */
     role?: string;
+    /**
+     * Only available when using the "entity_then_ip" or "entity_then_none" group_by modes. This is the rate limit applied to the requests that fall under the "ip" or "none" groupings, while the authenticated requests that contain an entity ID are subject to the "rate" field instead. Defaults to the same value as "rate".
+     * @type {number}
+     * @memberof RateLimitQuotasWriteRequest
+     */
+    secondaryRate?: number;
     /**
      * Type of the quota rule.
      * @type {string}
@@ -81,11 +93,13 @@ export function RateLimitQuotasWriteRequestFromJSONTyped(json: any, ignoreDiscri
     return {
         
         'blockInterval': json['block_interval'] == null ? undefined : json['block_interval'],
+        'groupBy': json['group_by'] == null ? undefined : json['group_by'],
         'inheritable': json['inheritable'] == null ? undefined : json['inheritable'],
         'interval': json['interval'] == null ? undefined : json['interval'],
         'path': json['path'] == null ? undefined : json['path'],
         'rate': json['rate'] == null ? undefined : json['rate'],
         'role': json['role'] == null ? undefined : json['role'],
+        'secondaryRate': json['secondary_rate'] == null ? undefined : json['secondary_rate'],
         'type': json['type'] == null ? undefined : json['type'],
     };
 }
@@ -102,11 +116,13 @@ export function RateLimitQuotasWriteRequestToJSONTyped(value?: RateLimitQuotasWr
     return {
         
         'block_interval': value['blockInterval'],
+        'group_by': value['groupBy'],
         'inheritable': value['inheritable'],
         'interval': value['interval'],
         'path': value['path'],
         'rate': value['rate'],
         'role': value['role'],
+        'secondary_rate': value['secondaryRate'],
         'type': value['type'],
     };
 }

ui/api-client/src/models/UiLoginDefaultAuthConfigureRequest.ts

@@ -0,0 +1,91 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * HashiCorp Vault API
+ * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`.
+ *
+ * The version of the OpenAPI document: 1.20.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+/**
+ * 
+ * @export
+ * @interface UiLoginDefaultAuthConfigureRequest
+ */
+export interface UiLoginDefaultAuthConfigureRequest {
+    /**
+     * List of backup Auth method types to be shown in "Other Methods".
+     * @type {Array<string>}
+     * @memberof UiLoginDefaultAuthConfigureRequest
+     */
+    backupAuthTypes?: Array<string>;
+    /**
+     * Preferred Auth method type for UI Login form.
+     * @type {string}
+     * @memberof UiLoginDefaultAuthConfigureRequest
+     */
+    defaultAuthType: string;
+    /**
+     * Disable child namespaces from inheriting default auth type.
+     * @type {boolean}
+     * @memberof UiLoginDefaultAuthConfigureRequest
+     */
+    disableInheritance?: boolean;
+    /**
+     * Namespace to apply default Auth method to.
+     * @type {string}
+     * @memberof UiLoginDefaultAuthConfigureRequest
+     */
+    namespace: string;
+}
+
+/**
+ * Check if a given object implements the UiLoginDefaultAuthConfigureRequest interface.
+ */
+export function instanceOfUiLoginDefaultAuthConfigureRequest(value: object): value is UiLoginDefaultAuthConfigureRequest {
+    if (!('defaultAuthType' in value) || value['defaultAuthType'] === undefined) return false;
+    if (!('namespace' in value) || value['namespace'] === undefined) return false;
+    return true;
+}
+
+export function UiLoginDefaultAuthConfigureRequestFromJSON(json: any): UiLoginDefaultAuthConfigureRequest {
+    return UiLoginDefaultAuthConfigureRequestFromJSONTyped(json, false);
+}
+
+export function UiLoginDefaultAuthConfigureRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): UiLoginDefaultAuthConfigureRequest {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'backupAuthTypes': json['backup_auth_types'] == null ? undefined : json['backup_auth_types'],
+        'defaultAuthType': json['default_auth_type'],
+        'disableInheritance': json['disable_inheritance'] == null ? undefined : json['disable_inheritance'],
+        'namespace': json['namespace'],
+    };
+}
+
+export function UiLoginDefaultAuthConfigureRequestToJSON(json: any): UiLoginDefaultAuthConfigureRequest {
+    return UiLoginDefaultAuthConfigureRequestToJSONTyped(json, false);
+}
+
+export function UiLoginDefaultAuthConfigureRequestToJSONTyped(value?: UiLoginDefaultAuthConfigureRequest | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'backup_auth_types': value['backupAuthTypes'],
+        'default_auth_type': value['defaultAuthType'],
+        'disable_inheritance': value['disableInheritance'],
+        'namespace': value['namespace'],
+    };
+}
+

ui/api-client/src/models/UiLoginDefaultAuthListResponse.ts

@@ -0,0 +1,73 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * HashiCorp Vault API
+ * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`.
+ *
+ * The version of the OpenAPI document: 1.20.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+/**
+ * 
+ * @export
+ * @interface UiLoginDefaultAuthListResponse
+ */
+export interface UiLoginDefaultAuthListResponse {
+    /**
+     * 
+     * @type {object}
+     * @memberof UiLoginDefaultAuthListResponse
+     */
+    keyInfo?: object;
+    /**
+     * 
+     * @type {Array<string>}
+     * @memberof UiLoginDefaultAuthListResponse
+     */
+    keys?: Array<string>;
+}
+
+/**
+ * Check if a given object implements the UiLoginDefaultAuthListResponse interface.
+ */
+export function instanceOfUiLoginDefaultAuthListResponse(value: object): value is UiLoginDefaultAuthListResponse {
+    return true;
+}
+
+export function UiLoginDefaultAuthListResponseFromJSON(json: any): UiLoginDefaultAuthListResponse {
+    return UiLoginDefaultAuthListResponseFromJSONTyped(json, false);
+}
+
+export function UiLoginDefaultAuthListResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): UiLoginDefaultAuthListResponse {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'keyInfo': json['key_info'] == null ? undefined : json['key_info'],
+        'keys': json['keys'] == null ? undefined : json['keys'],
+    };
+}
+
+export function UiLoginDefaultAuthListResponseToJSON(json: any): UiLoginDefaultAuthListResponse {
+    return UiLoginDefaultAuthListResponseToJSONTyped(json, false);
+}
+
+export function UiLoginDefaultAuthListResponseToJSONTyped(value?: UiLoginDefaultAuthListResponse | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'key_info': value['keyInfo'],
+        'keys': value['keys'],
+    };
+}
+

ui/api-client/src/models/index.ts

@@ -162,7 +162,6 @@ export * from './HaStatusResponse';
 export * from './InitializeRequest';
 export * from './InternalClientActivityConfigureRequest';
 export * from './InternalCountEntitiesResponse';
-export * from './InternalCountTokensResponse';
 export * from './InternalGenerateOpenApiDocumentWithParametersRequest';
 export * from './InternalUiListEnabledFeatureFlagsResponse';
 export * from './InternalUiListEnabledVisibleMountsResponse';
@@ -757,6 +756,8 @@ export * from './UiConfigUpdateCustomMessageResponse';
 export * from './UiHeadersConfigureRequest';
 export * from './UiHeadersListResponse';
 export * from './UiHeadersReadConfigurationResponse';
+export * from './UiLoginDefaultAuthConfigureRequest';
+export * from './UiLoginDefaultAuthListResponse';
 export * from './UnsealRequest';
 export * from './UnsealResponse';
 export * from './UnwrapRequest';