diff --git a/default.nix b/default.nix
index 3f49833..eb251ff 100644
--- a/default.nix
+++ b/default.nix
@@ -3,6 +3,9 @@
   python ? pkgs.python39,
   ...}:
 let 
+
+  nixpkgs_unstable = import <nixpkgs_unstable> {};
+
   urlobject = with python.pkgs; buildPythonPackage rec {
     pname = "URLObject";
     version = "2.4.3";
@@ -65,7 +68,7 @@ let
 
   };
   u2flib-server = {};
-  ory-hydra-client = with python.pkgs; buildPythonPackage rec {
+  ory-hydra-client-old = with python.pkgs; buildPythonPackage rec {
     pname = "ory-hydra-client";
     version = "1.10.6";
     src = fetchPypi {
@@ -77,7 +80,18 @@ let
       urllib3
       python-dateutil
     ];
-
+  };
+  ory-hydra-client = with python.pkgs; buildPythonPackage rec {
+    pname = "ory-hydra-client";
+    version = "1.9.2";
+    src = ./libs/ory-hydra-client; 
+#    doCheck = false;
+    propagatedBuildInputs = [
+      urllib3
+      python-dateutil
+      nixpkgs_unstable.python39Packages.attrs
+      httpx
+    ];
   };
 in
 {
diff --git a/lenticular_cloud/template/base.html.j2 b/lenticular_cloud/template/base.html.j2
index f148a16..82be352 100644
--- a/lenticular_cloud/template/base.html.j2
+++ b/lenticular_cloud/template/base.html.j2
@@ -63,6 +63,54 @@
     {% endfor %}
 {%- endmacro %}
 
+{# Renders range field
+    Params:
+        field - WTForm field (there are no check, but you should put here only BooleanField.
+        kwargs - pass any arguments you want in order to put them into the html attributes.
+        There are few exceptions: for - for_, class - class_, class__ - class_
+
+    Example usage:
+        {{ macros.render_range_field(form.answere) }}
+ #}
+{% macro render_range_field(field) -%}
+    <div class="form-group {% if field.errors %}has-error{% endif %} {{ 'row' if horizontal }} {{ kwargs.pop('class_', '') }}">
+	<label for="{{ field.id }}" class="control-label {{ 'col-sm-2 col-form-label' if horizontal }}">{{ field.label.text }}</label>
+	<div class="{{ 'col-sm-10' if horizontal }}">
+		<div class="row">
+		<div class="col-10">
+			{{ field(class_='form-control', oninput='this.parentElement.nextElementSibling.children[0].value = this.value', **kwargs) }}
+		</div>
+		<div class="col-2">
+			<input onchange="this.parentElement.previousElementSibling.children[0].value = this.value" type="number" class="form-control" max="{{ field.widget.max }}" min="{{ field.widget.min }}" step="{{field.widget.step}}" value="{{ field.data }}" />
+		</div>
+		</div>
+	</div>
+        {% if field.errors %}
+            {% for e in field.errors %}
+                <p class="alert alert-danger">{{ e }}</p>
+            {% endfor %}
+        {% endif %}
+    </div>
+{%- endmacro %}
+
+
+{% macro render_password_field(field, label_visible=true, horizontal=false) -%}
+
+    <div class="form-group {% if field.errors %}has-error{% endif %} {{ 'row' if horizontal }} {{ kwargs.pop('class_', '') }}">
+	<label for="{{ field.id }}" class="control-label {{ 'col-sm-2 col-form-label' if horizontal }}">{{ field.label.text }}</label>
+	<div class="{{ 'col-sm-10' if horizontal }}">
+        	{{ field(class_='form-control', **kwargs) }}
+		<i onclick="togglePasswordVisibility(this)" class="far fa-eye toggle-password"></i>
+	</div>
+        {% if field.errors %}
+            {% for e in field.errors %}
+                <p class="alert alert-danger">{{ e }}</p>
+            {% endfor %}
+        {% endif %}
+    </div>
+{%- endmacro %}
+
+
 {# Renders submit field
     Params:
         field - WTForm field (there are no check, but you should put here only BooleanField.
@@ -91,24 +139,30 @@
 </fieldset>
 {%- endmacro %}
 
-{% macro render_list_field(field) -%}
+{% macro render_list_field(field, horizontal) -%}
 <fieldset>
 	<legend>{{ field.label.text }}</legend>
-	<template id='{{field.name}}-template'>
+	{% if field.modify %}
+		<template id='{{field.name}}-template' data-fieldlist-name="{{ field.name }}" data-fieldlist-next-id="{{ field | length }}">
 		<li class="list-group-item">
 			{{ _render_form(field.get_template(), horizontal=true) }}
-			<a class="btn btn-danger" onclick="fieldlist.remove(this)">Remove</a>
+			<a class="btn btn-danger" onclick="fieldlist.remove(this)">{{ ('Remove') }}</a>
 		</li>
 	</template>
+	{% endif %}
 	<ul class="list-group">
 	{% for _field in field %}
 		<li class="list-group-item">
 		{{ _render_field(_field) }}
-		<a class="btn btn-danger" onclick="fieldlist.remove(this)">Remove</a>
+		{% if field.modify %}
+		<a class="btn btn-danger" onclick="fieldlist.remove(this)">{{ ('Remove') }}</a>
+		{% endif %}
 		</li>
 	{% endfor %}
 	</ul>
-	<a class="btn btn-success" onclick="fieldlist.add('{{ field.name }}')">Add</a>
+	{% if field.modify %}
+	<a class="btn btn-success" onclick="fieldlist.add(this)">{{ ('Add') }}</a>
+	{% endif %}
 </fieldset>
 {%- endmacro %}
 {% macro _render_field(f) %}
@@ -116,6 +170,10 @@
         {{ render_checkbox_field(f, **kwargs) }}
     {% elif f.type == 'RadioField' %}
         {{ render_radio_field(f, **kwargs) }}
+    {% elif f.type == 'PasswordField' %}
+        {{ render_password_field(f, **kwargs) }}
+    {% elif f.type == 'DecimalRangeField' %}
+        {{ render_range_field(f, **kwargs) }}
     {% elif f.type == 'SubmitField' %}
         {{ render_submit_field(f, **kwargs) }}
     {% elif f.type == 'FormField' %}
@@ -153,11 +211,14 @@
         action_text - text of submit button
         class_ - sets a class for form
     #}
-{% macro render_form(form, action_url='', class_='', method='post', onsubmit='') -%}
+{% macro render_form(form, action_url='', action_text='Submit', class_='', btn_class='btn btn-primary', method='post') -%}
 
-<form method="{{ method }}" {% if action_url %}action="{{ action_url }}" {% endif %}role="form" class="{{ class_ }}" {% if onsubmit %}onsubmit="{{ onsubmit }}"{% endif %}>
+	<form method="{{ method }}" {% if action_url %}action="{{ action_url }}" {% endif %}role="form" class="{{ class_ }}">
         <input name="form" type="hidden" value="{{ form.__class__.__name__ }}">
         {{ _render_form(form) }}
+        {% if not form.submit %}
+        <button type="submit" class="{{ btn_class }}">{{ action_text }} </button>
+        {% endif %}
     </form>
 {%- endmacro %}
 
diff --git a/lenticular_cloud/views/auth.py b/lenticular_cloud/views/auth.py
index 88225cb..c35725d 100644
--- a/lenticular_cloud/views/auth.py
+++ b/lenticular_cloud/views/auth.py
@@ -47,8 +47,8 @@ def consent():
         logger.exception('ory exception - could not fetch user data')
         return redirect(url_for('frontend.index'))
 
-    requested_scope = json.loads(consent_request.requested_scope.to_str().replace("'", '"'))
-    requested_audiences = json.loads(consent_request.requested_access_token_audience.to_str().replace("'", '"'))
+    requested_scope = consent_request.requested_scope["value"]
+    requested_audiences = consent_request.requested_access_token_audience["value"]
 
     if form.validate_on_submit() or consent_request.skip:
         user = User.query.get(consent_request.subject)
diff --git a/libs/README.md b/libs/README.md
new file mode 100644
index 0000000..87a4705
--- /dev/null
+++ b/libs/README.md
@@ -0,0 +1,4 @@
+
+## regenerate lib
+openapi-python-client generate --path ../specs/hydra.yaml --meta setup --custom-template-path ../specs/api-template
+
diff --git a/libs/ory-hydra-client/.gitignore b/libs/ory-hydra-client/.gitignore
new file mode 100644
index 0000000..ed29cb9
--- /dev/null
+++ b/libs/ory-hydra-client/.gitignore
@@ -0,0 +1,23 @@
+__pycache__/
+build/
+dist/
+*.egg-info/
+.pytest_cache/
+
+# pyenv
+.python-version
+
+# Environments
+.env
+.venv
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# JetBrains
+.idea/
+
+/coverage.xml
+/.coverage
\ No newline at end of file
diff --git a/libs/ory-hydra-client/README.md b/libs/ory-hydra-client/README.md
new file mode 100644
index 0000000..ec78ad0
--- /dev/null
+++ b/libs/ory-hydra-client/README.md
@@ -0,0 +1,87 @@
+# ory-hydra-client
+A client library for accessing ORY Hydra
+
+## Usage
+First, create a client:
+
+```python
+from ory_hydra_client import Client
+
+client = Client(base_url="https://api.example.com")
+```
+
+If the endpoints you're going to hit require authentication, use `AuthenticatedClient` instead:
+
+```python
+from ory_hydra_client import AuthenticatedClient
+
+client = AuthenticatedClient(base_url="https://api.example.com", token="SuperSecretToken")
+```
+
+Now call your endpoint and use your models:
+
+```python
+from ory_hydra_client.models import MyDataModel
+from ory_hydra_client.api.my_tag import get_my_data_model
+from ory_hydra_client.types import Response
+
+my_data: MyDataModel = get_my_data_model.sync(client=client)
+# or if you need more info (e.g. status_code)
+response: Response[MyDataModel] = get_my_data_model.sync_detailed(client=client)
+```
+
+Or do the same thing with an async version:
+
+```python
+from ory_hydra_client.models import MyDataModel
+from ory_hydra_client.api.my_tag import get_my_data_model
+from ory_hydra_client.types import Response
+
+my_data: MyDataModel = await get_my_data_model.asyncio(client=client)
+response: Response[MyDataModel] = await get_my_data_model.asyncio_detailed(client=client)
+```
+
+By default, when you're calling an HTTPS API it will attempt to verify that SSL is working correctly. Using certificate verification is highly recommended most of the time, but sometimes you may need to authenticate to a server (especially an internal server) using a custom certificate bundle.
+
+```python
+client = AuthenticatedClient(
+    base_url="https://internal_api.example.com", 
+    token="SuperSecretToken",
+    verify_ssl="/path/to/certificate_bundle.pem",
+)
+```
+
+You can also disable certificate validation altogether, but beware that **this is a security risk**.
+
+```python
+client = AuthenticatedClient(
+    base_url="https://internal_api.example.com", 
+    token="SuperSecretToken", 
+    verify_ssl=False
+)
+```
+
+Things to know:
+1. Every path/method combo becomes a Python module with four functions:
+    1. `sync`: Blocking request that returns parsed data (if successful) or `None`
+    1. `sync_detailed`: Blocking request that always returns a `Request`, optionally with `parsed` set if the request was successful.
+    1. `asyncio`: Like `sync` but the async instead of blocking
+    1. `asyncio_detailed`: Like `sync_detailed` by async instead of blocking
+
+1. All path/query params, and bodies become method arguments.
+1. If your endpoint had any tags on it, the first tag will be used as a module name for the function (my_tag above)
+1. Any endpoint which did not have a tag will be in `ory_hydra_client.api.default`
+
+## Building / publishing this Client
+This project uses [Poetry](https://python-poetry.org/) to manage dependencies  and packaging.  Here are the basics:
+1. Update the metadata in pyproject.toml (e.g. authors, version)
+1. If you're using a private repository, configure it with Poetry
+    1. `poetry config repositories.<your-repository-name> <url-to-your-repository>`
+    1. `poetry config http-basic.<your-repository-name> <username> <password>`
+1. Publish the client with `poetry publish --build -r <your-repository-name>` or, if for public PyPI, just `poetry publish --build`
+
+If you want to install this client into another project without publishing it (e.g. for development) then:
+1. If that project **is using Poetry**, you can simply do `poetry add <path-to-this-client>` from that project
+1. If that project is not using Poetry:
+    1. Build a wheel with `poetry build -f wheel`
+    1. Install that wheel from the other project `pip install <path-to-wheel>`
\ No newline at end of file
diff --git a/libs/ory-hydra-client/ory_hydra_client/__init__.py b/libs/ory-hydra-client/ory_hydra_client/__init__.py
new file mode 100644
index 0000000..0260c3f
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/__init__.py
@@ -0,0 +1,2 @@
+""" A client library for accessing ORY Hydra """
+from .client import AuthenticatedClient, Client
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/__init__.py b/libs/ory-hydra-client/ory_hydra_client/api/__init__.py
new file mode 100644
index 0000000..dc035f4
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/__init__.py
@@ -0,0 +1 @@
+""" Contains methods for accessing the API """
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/__init__.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/accept_consent_request.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/accept_consent_request.py
new file mode 100644
index 0000000..06377c3
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/accept_consent_request.py
@@ -0,0 +1,273 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.accept_consent_request import AcceptConsentRequest
+from ...models.completed_request import CompletedRequest
+from ...models.generic_error import GenericError
+from ...types import UNSET, Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    json_body: AcceptConsentRequest,
+    consent_challenge: str,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/auth/requests/consent/accept".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    params: Dict[str, Any] = {}
+    params["consent_challenge"] = consent_challenge
+
+    params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+
+    json_json_body = json_body.to_dict()
+
+    return {
+        "method": "put",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "json": json_json_body,
+        "params": params,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[CompletedRequest, GenericError]]:
+    if response.status_code == 200:
+        response_200 = CompletedRequest.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 404:
+        response_404 = GenericError.from_dict(response.json())
+
+        return response_404
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[CompletedRequest, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    json_body: AcceptConsentRequest,
+    consent_challenge: str,
+) -> Response[Union[CompletedRequest, GenericError]]:
+    """Accept a Consent Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated,
+    he/she must now be asked if
+    the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the
+    subject's behalf.
+
+    The consent provider which handles this request and is a web app implemented and hosted by you. It
+    shows a subject interface which asks the subject to
+    grant or deny the client access to the requested scope (\"Application my-dropbox-app wants write
+    access to all your private files\").
+
+    The consent challenge is appended to the consent provider's URL to which the subject's user-agent
+    (browser) is redirected to. The consent
+    provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if
+    the subject accepted
+    or rejected the request.
+
+    This endpoint tells ORY Hydra that the subject has authorized the OAuth 2.0 client to access
+    resources on his/her behalf.
+    The consent provider includes additional information, such as session data for access and ID tokens,
+    and if the
+    consent request should be used as basis for future requests.
+
+    The response contains a redirect URL which the consent provider should redirect the user-agent to.
+
+    Args:
+        consent_challenge (str):
+        json_body (AcceptConsentRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        json_body=json_body,
+        consent_challenge=consent_challenge,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    json_body: AcceptConsentRequest,
+    consent_challenge: str,
+) -> Optional[Union[CompletedRequest, GenericError]]:
+    """Accept a Consent Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated,
+    he/she must now be asked if
+    the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the
+    subject's behalf.
+
+    The consent provider which handles this request and is a web app implemented and hosted by you. It
+    shows a subject interface which asks the subject to
+    grant or deny the client access to the requested scope (\"Application my-dropbox-app wants write
+    access to all your private files\").
+
+    The consent challenge is appended to the consent provider's URL to which the subject's user-agent
+    (browser) is redirected to. The consent
+    provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if
+    the subject accepted
+    or rejected the request.
+
+    This endpoint tells ORY Hydra that the subject has authorized the OAuth 2.0 client to access
+    resources on his/her behalf.
+    The consent provider includes additional information, such as session data for access and ID tokens,
+    and if the
+    consent request should be used as basis for future requests.
+
+    The response contains a redirect URL which the consent provider should redirect the user-agent to.
+
+    Args:
+        consent_challenge (str):
+        json_body (AcceptConsentRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        json_body=json_body,
+        consent_challenge=consent_challenge,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    json_body: AcceptConsentRequest,
+    consent_challenge: str,
+) -> Response[Union[CompletedRequest, GenericError]]:
+    """Accept a Consent Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated,
+    he/she must now be asked if
+    the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the
+    subject's behalf.
+
+    The consent provider which handles this request and is a web app implemented and hosted by you. It
+    shows a subject interface which asks the subject to
+    grant or deny the client access to the requested scope (\"Application my-dropbox-app wants write
+    access to all your private files\").
+
+    The consent challenge is appended to the consent provider's URL to which the subject's user-agent
+    (browser) is redirected to. The consent
+    provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if
+    the subject accepted
+    or rejected the request.
+
+    This endpoint tells ORY Hydra that the subject has authorized the OAuth 2.0 client to access
+    resources on his/her behalf.
+    The consent provider includes additional information, such as session data for access and ID tokens,
+    and if the
+    consent request should be used as basis for future requests.
+
+    The response contains a redirect URL which the consent provider should redirect the user-agent to.
+
+    Args:
+        consent_challenge (str):
+        json_body (AcceptConsentRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        json_body=json_body,
+        consent_challenge=consent_challenge,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    json_body: AcceptConsentRequest,
+    consent_challenge: str,
+) -> Optional[Union[CompletedRequest, GenericError]]:
+    """Accept a Consent Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated,
+    he/she must now be asked if
+    the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the
+    subject's behalf.
+
+    The consent provider which handles this request and is a web app implemented and hosted by you. It
+    shows a subject interface which asks the subject to
+    grant or deny the client access to the requested scope (\"Application my-dropbox-app wants write
+    access to all your private files\").
+
+    The consent challenge is appended to the consent provider's URL to which the subject's user-agent
+    (browser) is redirected to. The consent
+    provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if
+    the subject accepted
+    or rejected the request.
+
+    This endpoint tells ORY Hydra that the subject has authorized the OAuth 2.0 client to access
+    resources on his/her behalf.
+    The consent provider includes additional information, such as session data for access and ID tokens,
+    and if the
+    consent request should be used as basis for future requests.
+
+    The response contains a redirect URL which the consent provider should redirect the user-agent to.
+
+    Args:
+        consent_challenge (str):
+        json_body (AcceptConsentRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            json_body=json_body,
+            consent_challenge=consent_challenge,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/accept_login_request.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/accept_login_request.py
new file mode 100644
index 0000000..a7eca49
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/accept_login_request.py
@@ -0,0 +1,261 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.accept_login_request import AcceptLoginRequest
+from ...models.completed_request import CompletedRequest
+from ...models.generic_error import GenericError
+from ...types import UNSET, Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    json_body: AcceptLoginRequest,
+    login_challenge: str,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/auth/requests/login/accept".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    params: Dict[str, Any] = {}
+    params["login_challenge"] = login_challenge
+
+    params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+
+    json_json_body = json_body.to_dict()
+
+    return {
+        "method": "put",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "json": json_json_body,
+        "params": params,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[CompletedRequest, GenericError]]:
+    if response.status_code == 200:
+        response_200 = CompletedRequest.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 400:
+        response_400 = GenericError.from_dict(response.json())
+
+        return response_400
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 404:
+        response_404 = GenericError.from_dict(response.json())
+
+        return response_404
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[CompletedRequest, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    json_body: AcceptLoginRequest,
+    login_challenge: str,
+) -> Response[Union[CompletedRequest, GenericError]]:
+    """Accept a Login Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    (sometimes called \"identity provider\") to authenticate the subject and then tell ORY Hydra now
+    about it. The login
+    provider is an web-app you write and host, and it must be able to authenticate (\"show the subject a
+    login screen\")
+    a subject (in OAuth2 the proper name for subject is \"resource owner\").
+
+    The authentication challenge is appended to the login provider URL to which the subject's user-agent
+    (browser) is redirected to. The login
+    provider uses that challenge to fetch information on the OAuth2 request and then accept or reject
+    the requested authentication process.
+
+    This endpoint tells ORY Hydra that the subject has successfully authenticated and includes
+    additional information such as
+    the subject's ID and if ORY Hydra should remember the subject's subject agent for future
+    authentication attempts by setting
+    a cookie.
+
+    The response contains a redirect URL which the login provider should redirect the user-agent to.
+
+    Args:
+        login_challenge (str):
+        json_body (AcceptLoginRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        json_body=json_body,
+        login_challenge=login_challenge,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    json_body: AcceptLoginRequest,
+    login_challenge: str,
+) -> Optional[Union[CompletedRequest, GenericError]]:
+    """Accept a Login Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    (sometimes called \"identity provider\") to authenticate the subject and then tell ORY Hydra now
+    about it. The login
+    provider is an web-app you write and host, and it must be able to authenticate (\"show the subject a
+    login screen\")
+    a subject (in OAuth2 the proper name for subject is \"resource owner\").
+
+    The authentication challenge is appended to the login provider URL to which the subject's user-agent
+    (browser) is redirected to. The login
+    provider uses that challenge to fetch information on the OAuth2 request and then accept or reject
+    the requested authentication process.
+
+    This endpoint tells ORY Hydra that the subject has successfully authenticated and includes
+    additional information such as
+    the subject's ID and if ORY Hydra should remember the subject's subject agent for future
+    authentication attempts by setting
+    a cookie.
+
+    The response contains a redirect URL which the login provider should redirect the user-agent to.
+
+    Args:
+        login_challenge (str):
+        json_body (AcceptLoginRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        json_body=json_body,
+        login_challenge=login_challenge,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    json_body: AcceptLoginRequest,
+    login_challenge: str,
+) -> Response[Union[CompletedRequest, GenericError]]:
+    """Accept a Login Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    (sometimes called \"identity provider\") to authenticate the subject and then tell ORY Hydra now
+    about it. The login
+    provider is an web-app you write and host, and it must be able to authenticate (\"show the subject a
+    login screen\")
+    a subject (in OAuth2 the proper name for subject is \"resource owner\").
+
+    The authentication challenge is appended to the login provider URL to which the subject's user-agent
+    (browser) is redirected to. The login
+    provider uses that challenge to fetch information on the OAuth2 request and then accept or reject
+    the requested authentication process.
+
+    This endpoint tells ORY Hydra that the subject has successfully authenticated and includes
+    additional information such as
+    the subject's ID and if ORY Hydra should remember the subject's subject agent for future
+    authentication attempts by setting
+    a cookie.
+
+    The response contains a redirect URL which the login provider should redirect the user-agent to.
+
+    Args:
+        login_challenge (str):
+        json_body (AcceptLoginRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        json_body=json_body,
+        login_challenge=login_challenge,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    json_body: AcceptLoginRequest,
+    login_challenge: str,
+) -> Optional[Union[CompletedRequest, GenericError]]:
+    """Accept a Login Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    (sometimes called \"identity provider\") to authenticate the subject and then tell ORY Hydra now
+    about it. The login
+    provider is an web-app you write and host, and it must be able to authenticate (\"show the subject a
+    login screen\")
+    a subject (in OAuth2 the proper name for subject is \"resource owner\").
+
+    The authentication challenge is appended to the login provider URL to which the subject's user-agent
+    (browser) is redirected to. The login
+    provider uses that challenge to fetch information on the OAuth2 request and then accept or reject
+    the requested authentication process.
+
+    This endpoint tells ORY Hydra that the subject has successfully authenticated and includes
+    additional information such as
+    the subject's ID and if ORY Hydra should remember the subject's subject agent for future
+    authentication attempts by setting
+    a cookie.
+
+    The response contains a redirect URL which the login provider should redirect the user-agent to.
+
+    Args:
+        login_challenge (str):
+        json_body (AcceptLoginRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            json_body=json_body,
+            login_challenge=login_challenge,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/accept_logout_request.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/accept_logout_request.py
new file mode 100644
index 0000000..e8f151c
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/accept_logout_request.py
@@ -0,0 +1,176 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.completed_request import CompletedRequest
+from ...models.generic_error import GenericError
+from ...types import UNSET, Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    logout_challenge: str,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/auth/requests/logout/accept".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    params: Dict[str, Any] = {}
+    params["logout_challenge"] = logout_challenge
+
+    params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+
+    return {
+        "method": "put",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "params": params,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[CompletedRequest, GenericError]]:
+    if response.status_code == 200:
+        response_200 = CompletedRequest.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 404:
+        response_404 = GenericError.from_dict(response.json())
+
+        return response_404
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[CompletedRequest, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    logout_challenge: str,
+) -> Response[Union[CompletedRequest, GenericError]]:
+    """Accept a Logout Request
+
+     When a user or an application requests ORY Hydra to log out a user, this endpoint is used to confirm
+    that logout request.
+    No body is required.
+
+    The response contains a redirect URL which the consent provider should redirect the user-agent to.
+
+    Args:
+        logout_challenge (str):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        logout_challenge=logout_challenge,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    logout_challenge: str,
+) -> Optional[Union[CompletedRequest, GenericError]]:
+    """Accept a Logout Request
+
+     When a user or an application requests ORY Hydra to log out a user, this endpoint is used to confirm
+    that logout request.
+    No body is required.
+
+    The response contains a redirect URL which the consent provider should redirect the user-agent to.
+
+    Args:
+        logout_challenge (str):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        logout_challenge=logout_challenge,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    logout_challenge: str,
+) -> Response[Union[CompletedRequest, GenericError]]:
+    """Accept a Logout Request
+
+     When a user or an application requests ORY Hydra to log out a user, this endpoint is used to confirm
+    that logout request.
+    No body is required.
+
+    The response contains a redirect URL which the consent provider should redirect the user-agent to.
+
+    Args:
+        logout_challenge (str):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        logout_challenge=logout_challenge,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    logout_challenge: str,
+) -> Optional[Union[CompletedRequest, GenericError]]:
+    """Accept a Logout Request
+
+     When a user or an application requests ORY Hydra to log out a user, this endpoint is used to confirm
+    that logout request.
+    No body is required.
+
+    The response contains a redirect URL which the consent provider should redirect the user-agent to.
+
+    Args:
+        logout_challenge (str):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            logout_challenge=logout_challenge,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/create_json_web_key_set.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/create_json_web_key_set.py
new file mode 100644
index 0000000..68c1d5e
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/create_json_web_key_set.py
@@ -0,0 +1,207 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.json_web_key_set import JSONWebKeySet
+from ...models.json_web_key_set_generator_request import JsonWebKeySetGeneratorRequest
+from ...types import Response
+
+
+def _get_kwargs(
+    set_: str,
+    *,
+    _client: Client,
+    json_body: JsonWebKeySetGeneratorRequest,
+) -> Dict[str, Any]:
+    url = "{}/keys/{set}".format(_client.base_url, set=set_)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    json_json_body = json_body.to_dict()
+
+    return {
+        "method": "post",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "json": json_json_body,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    if response.status_code == 201:
+        response_201 = JSONWebKeySet.from_dict(response.json())
+
+        return response_201
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 403:
+        response_403 = GenericError.from_dict(response.json())
+
+        return response_403
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, JSONWebKeySet]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    set_: str,
+    *,
+    _client: Client,
+    json_body: JsonWebKeySetGeneratorRequest,
+) -> Response[Union[GenericError, JSONWebKeySet]]:
+    """Generate a New JSON Web Key
+
+     This endpoint is capable of generating JSON Web Key Sets for you. There a different strategies
+    available, such as symmetric cryptographic keys (HS256, HS512) and asymetric cryptographic keys
+    (RS256, ECDSA). If the specified JSON Web Key Set does not exist, it will be created.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        json_body (JsonWebKeySetGeneratorRequest):
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    kwargs = _get_kwargs(
+        set_=set_,
+        _client=_client,
+        json_body=json_body,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    set_: str,
+    *,
+    _client: Client,
+    json_body: JsonWebKeySetGeneratorRequest,
+) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    """Generate a New JSON Web Key
+
+     This endpoint is capable of generating JSON Web Key Sets for you. There a different strategies
+    available, such as symmetric cryptographic keys (HS256, HS512) and asymetric cryptographic keys
+    (RS256, ECDSA). If the specified JSON Web Key Set does not exist, it will be created.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        json_body (JsonWebKeySetGeneratorRequest):
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    return sync_detailed(
+        set_=set_,
+        _client=_client,
+        json_body=json_body,
+    ).parsed
+
+
+async def asyncio_detailed(
+    set_: str,
+    *,
+    _client: Client,
+    json_body: JsonWebKeySetGeneratorRequest,
+) -> Response[Union[GenericError, JSONWebKeySet]]:
+    """Generate a New JSON Web Key
+
+     This endpoint is capable of generating JSON Web Key Sets for you. There a different strategies
+    available, such as symmetric cryptographic keys (HS256, HS512) and asymetric cryptographic keys
+    (RS256, ECDSA). If the specified JSON Web Key Set does not exist, it will be created.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        json_body (JsonWebKeySetGeneratorRequest):
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    kwargs = _get_kwargs(
+        set_=set_,
+        _client=_client,
+        json_body=json_body,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    set_: str,
+    *,
+    _client: Client,
+    json_body: JsonWebKeySetGeneratorRequest,
+) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    """Generate a New JSON Web Key
+
+     This endpoint is capable of generating JSON Web Key Sets for you. There a different strategies
+    available, such as symmetric cryptographic keys (HS256, HS512) and asymetric cryptographic keys
+    (RS256, ECDSA). If the specified JSON Web Key Set does not exist, it will be created.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        json_body (JsonWebKeySetGeneratorRequest):
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    return (
+        await asyncio_detailed(
+            set_=set_,
+            _client=_client,
+            json_body=json_body,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/create_o_auth_2_client.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/create_o_auth_2_client.py
new file mode 100644
index 0000000..3b38a6e
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/create_o_auth_2_client.py
@@ -0,0 +1,189 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.o_auth_2_client import OAuth2Client
+from ...types import Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    json_body: OAuth2Client,
+) -> Dict[str, Any]:
+    url = "{}/clients".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    json_json_body = json_body.to_dict()
+
+    return {
+        "method": "post",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "json": json_json_body,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, OAuth2Client]]:
+    if response.status_code == 201:
+        response_201 = OAuth2Client.from_dict(response.json())
+
+        return response_201
+    if response.status_code == 400:
+        response_400 = GenericError.from_dict(response.json())
+
+        return response_400
+    if response.status_code == 409:
+        response_409 = GenericError.from_dict(response.json())
+
+        return response_409
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, OAuth2Client]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    json_body: OAuth2Client,
+) -> Response[Union[GenericError, OAuth2Client]]:
+    """Create an OAuth 2.0 Client
+
+     Create a new OAuth 2.0 client If you pass `client_secret` the secret will be used, otherwise a
+    random secret will be generated. The secret will be returned in the response and you will not be
+    able to retrieve it later on. Write the secret down and keep it somwhere safe.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        json_body (OAuth2Client):
+
+    Returns:
+        Response[Union[GenericError, OAuth2Client]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        json_body=json_body,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    json_body: OAuth2Client,
+) -> Optional[Union[GenericError, OAuth2Client]]:
+    """Create an OAuth 2.0 Client
+
+     Create a new OAuth 2.0 client If you pass `client_secret` the secret will be used, otherwise a
+    random secret will be generated. The secret will be returned in the response and you will not be
+    able to retrieve it later on. Write the secret down and keep it somwhere safe.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        json_body (OAuth2Client):
+
+    Returns:
+        Response[Union[GenericError, OAuth2Client]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        json_body=json_body,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    json_body: OAuth2Client,
+) -> Response[Union[GenericError, OAuth2Client]]:
+    """Create an OAuth 2.0 Client
+
+     Create a new OAuth 2.0 client If you pass `client_secret` the secret will be used, otherwise a
+    random secret will be generated. The secret will be returned in the response and you will not be
+    able to retrieve it later on. Write the secret down and keep it somwhere safe.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        json_body (OAuth2Client):
+
+    Returns:
+        Response[Union[GenericError, OAuth2Client]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        json_body=json_body,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    json_body: OAuth2Client,
+) -> Optional[Union[GenericError, OAuth2Client]]:
+    """Create an OAuth 2.0 Client
+
+     Create a new OAuth 2.0 client If you pass `client_secret` the secret will be used, otherwise a
+    random secret will be generated. The secret will be returned in the response and you will not be
+    able to retrieve it later on. Write the secret down and keep it somwhere safe.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        json_body (OAuth2Client):
+
+    Returns:
+        Response[Union[GenericError, OAuth2Client]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            json_body=json_body,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/delete_json_web_key.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/delete_json_web_key.py
new file mode 100644
index 0000000..1b8ebe4
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/delete_json_web_key.py
@@ -0,0 +1,193 @@
+from typing import Any, Dict, Optional, Union, cast
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...types import Response
+
+
+def _get_kwargs(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/keys/{set}/{kid}".format(_client.base_url, set=set_, kid=kid)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "delete",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[Any, GenericError]]:
+    if response.status_code == 204:
+        response_204 = cast(Any, None)
+        return response_204
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 403:
+        response_403 = GenericError.from_dict(response.json())
+
+        return response_403
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[Any, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+) -> Response[Union[Any, GenericError]]:
+    """Delete a JSON Web Key
+
+     Use this endpoint to delete a single JSON Web Key.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        kid (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        set_=set_,
+        kid=kid,
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+) -> Optional[Union[Any, GenericError]]:
+    """Delete a JSON Web Key
+
+     Use this endpoint to delete a single JSON Web Key.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        kid (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return sync_detailed(
+        set_=set_,
+        kid=kid,
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+) -> Response[Union[Any, GenericError]]:
+    """Delete a JSON Web Key
+
+     Use this endpoint to delete a single JSON Web Key.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        kid (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        set_=set_,
+        kid=kid,
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+) -> Optional[Union[Any, GenericError]]:
+    """Delete a JSON Web Key
+
+     Use this endpoint to delete a single JSON Web Key.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        kid (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            set_=set_,
+            kid=kid,
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/delete_json_web_key_set.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/delete_json_web_key_set.py
new file mode 100644
index 0000000..775de56
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/delete_json_web_key_set.py
@@ -0,0 +1,180 @@
+from typing import Any, Dict, Optional, Union, cast
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...types import Response
+
+
+def _get_kwargs(
+    set_: str,
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/keys/{set}".format(_client.base_url, set=set_)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "delete",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[Any, GenericError]]:
+    if response.status_code == 204:
+        response_204 = cast(Any, None)
+        return response_204
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 403:
+        response_403 = GenericError.from_dict(response.json())
+
+        return response_403
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[Any, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    set_: str,
+    *,
+    _client: Client,
+) -> Response[Union[Any, GenericError]]:
+    """Delete a JSON Web Key Set
+
+     Use this endpoint to delete a complete JSON Web Key Set and all the keys in that set.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        set_=set_,
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    set_: str,
+    *,
+    _client: Client,
+) -> Optional[Union[Any, GenericError]]:
+    """Delete a JSON Web Key Set
+
+     Use this endpoint to delete a complete JSON Web Key Set and all the keys in that set.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return sync_detailed(
+        set_=set_,
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    set_: str,
+    *,
+    _client: Client,
+) -> Response[Union[Any, GenericError]]:
+    """Delete a JSON Web Key Set
+
+     Use this endpoint to delete a complete JSON Web Key Set and all the keys in that set.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        set_=set_,
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    set_: str,
+    *,
+    _client: Client,
+) -> Optional[Union[Any, GenericError]]:
+    """Delete a JSON Web Key Set
+
+     Use this endpoint to delete a complete JSON Web Key Set and all the keys in that set.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            set_=set_,
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/delete_o_auth_2_client.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/delete_o_auth_2_client.py
new file mode 100644
index 0000000..2a676be
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/delete_o_auth_2_client.py
@@ -0,0 +1,172 @@
+from typing import Any, Dict, Optional, Union, cast
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...types import Response
+
+
+def _get_kwargs(
+    id: str,
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/clients/{id}".format(_client.base_url, id=id)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "delete",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[Any, GenericError]]:
+    if response.status_code == 204:
+        response_204 = cast(Any, None)
+        return response_204
+    if response.status_code == 404:
+        response_404 = GenericError.from_dict(response.json())
+
+        return response_404
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[Any, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    id: str,
+    *,
+    _client: Client,
+) -> Response[Union[Any, GenericError]]:
+    """Deletes an OAuth 2.0 Client
+
+     Delete an existing OAuth 2.0 Client by its ID.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        id (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        id=id,
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    id: str,
+    *,
+    _client: Client,
+) -> Optional[Union[Any, GenericError]]:
+    """Deletes an OAuth 2.0 Client
+
+     Delete an existing OAuth 2.0 Client by its ID.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        id (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return sync_detailed(
+        id=id,
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    id: str,
+    *,
+    _client: Client,
+) -> Response[Union[Any, GenericError]]:
+    """Deletes an OAuth 2.0 Client
+
+     Delete an existing OAuth 2.0 Client by its ID.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        id (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        id=id,
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    id: str,
+    *,
+    _client: Client,
+) -> Optional[Union[Any, GenericError]]:
+    """Deletes an OAuth 2.0 Client
+
+     Delete an existing OAuth 2.0 Client by its ID.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        id (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            id=id,
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/delete_o_auth_2_token.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/delete_o_auth_2_token.py
new file mode 100644
index 0000000..482520b
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/delete_o_auth_2_token.py
@@ -0,0 +1,158 @@
+from typing import Any, Dict, Optional, Union, cast
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...types import UNSET, Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    client_id: str,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/tokens".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    params: Dict[str, Any] = {}
+    params["client_id"] = client_id
+
+    params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+
+    return {
+        "method": "delete",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "params": params,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[Any, GenericError]]:
+    if response.status_code == 204:
+        response_204 = cast(Any, None)
+        return response_204
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[Any, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    client_id: str,
+) -> Response[Union[Any, GenericError]]:
+    """Delete OAuth2 Access Tokens from a Client
+
+     This endpoint deletes OAuth2 access tokens issued for a client from the database
+
+    Args:
+        client_id (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        client_id=client_id,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    client_id: str,
+) -> Optional[Union[Any, GenericError]]:
+    """Delete OAuth2 Access Tokens from a Client
+
+     This endpoint deletes OAuth2 access tokens issued for a client from the database
+
+    Args:
+        client_id (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        client_id=client_id,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    client_id: str,
+) -> Response[Union[Any, GenericError]]:
+    """Delete OAuth2 Access Tokens from a Client
+
+     This endpoint deletes OAuth2 access tokens issued for a client from the database
+
+    Args:
+        client_id (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        client_id=client_id,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    client_id: str,
+) -> Optional[Union[Any, GenericError]]:
+    """Delete OAuth2 Access Tokens from a Client
+
+     This endpoint deletes OAuth2 access tokens issued for a client from the database
+
+    Args:
+        client_id (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            client_id=client_id,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/flush_inactive_o_auth_2_tokens.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/flush_inactive_o_auth_2_tokens.py
new file mode 100644
index 0000000..78d5233
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/flush_inactive_o_auth_2_tokens.py
@@ -0,0 +1,172 @@
+from typing import Any, Dict, Optional, Union, cast
+
+import httpx
+
+from ...client import Client
+from ...models.flush_inactive_o_auth_2_tokens_request import FlushInactiveOAuth2TokensRequest
+from ...models.generic_error import GenericError
+from ...types import Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    json_body: FlushInactiveOAuth2TokensRequest,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/flush".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    json_json_body = json_body.to_dict()
+
+    return {
+        "method": "post",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "json": json_json_body,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[Any, GenericError]]:
+    if response.status_code == 204:
+        response_204 = cast(Any, None)
+        return response_204
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[Any, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    json_body: FlushInactiveOAuth2TokensRequest,
+) -> Response[Union[Any, GenericError]]:
+    """Flush Expired OAuth2 Access Tokens
+
+     This endpoint flushes expired OAuth2 access tokens from the database. You can set a time after which
+    no tokens will be
+    not be touched, in case you want to keep recent tokens for auditing. Refresh tokens can not be
+    flushed as they are deleted
+    automatically when performing the refresh flow.
+
+    Args:
+        json_body (FlushInactiveOAuth2TokensRequest):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        json_body=json_body,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    json_body: FlushInactiveOAuth2TokensRequest,
+) -> Optional[Union[Any, GenericError]]:
+    """Flush Expired OAuth2 Access Tokens
+
+     This endpoint flushes expired OAuth2 access tokens from the database. You can set a time after which
+    no tokens will be
+    not be touched, in case you want to keep recent tokens for auditing. Refresh tokens can not be
+    flushed as they are deleted
+    automatically when performing the refresh flow.
+
+    Args:
+        json_body (FlushInactiveOAuth2TokensRequest):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        json_body=json_body,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    json_body: FlushInactiveOAuth2TokensRequest,
+) -> Response[Union[Any, GenericError]]:
+    """Flush Expired OAuth2 Access Tokens
+
+     This endpoint flushes expired OAuth2 access tokens from the database. You can set a time after which
+    no tokens will be
+    not be touched, in case you want to keep recent tokens for auditing. Refresh tokens can not be
+    flushed as they are deleted
+    automatically when performing the refresh flow.
+
+    Args:
+        json_body (FlushInactiveOAuth2TokensRequest):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        json_body=json_body,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    json_body: FlushInactiveOAuth2TokensRequest,
+) -> Optional[Union[Any, GenericError]]:
+    """Flush Expired OAuth2 Access Tokens
+
+     This endpoint flushes expired OAuth2 access tokens from the database. You can set a time after which
+    no tokens will be
+    not be touched, in case you want to keep recent tokens for auditing. Refresh tokens can not be
+    flushed as they are deleted
+    automatically when performing the refresh flow.
+
+    Args:
+        json_body (FlushInactiveOAuth2TokensRequest):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            json_body=json_body,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/get_consent_request.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/get_consent_request.py
new file mode 100644
index 0000000..3c7277e
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/get_consent_request.py
@@ -0,0 +1,228 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.consent_request import ConsentRequest
+from ...models.generic_error import GenericError
+from ...types import UNSET, Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    consent_challenge: str,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/auth/requests/consent".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    params: Dict[str, Any] = {}
+    params["consent_challenge"] = consent_challenge
+
+    params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "params": params,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[ConsentRequest, GenericError]]:
+    if response.status_code == 200:
+        response_200 = ConsentRequest.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 404:
+        response_404 = GenericError.from_dict(response.json())
+
+        return response_404
+    if response.status_code == 409:
+        response_409 = GenericError.from_dict(response.json())
+
+        return response_409
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[ConsentRequest, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    consent_challenge: str,
+) -> Response[Union[ConsentRequest, GenericError]]:
+    """Get Consent Request Information
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated,
+    he/she must now be asked if
+    the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the
+    subject's behalf.
+
+    The consent provider which handles this request and is a web app implemented and hosted by you. It
+    shows a subject interface which asks the subject to
+    grant or deny the client access to the requested scope (\"Application my-dropbox-app wants write
+    access to all your private files\").
+
+    The consent challenge is appended to the consent provider's URL to which the subject's user-agent
+    (browser) is redirected to. The consent
+    provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if
+    the subject accepted
+    or rejected the request.
+
+    Args:
+        consent_challenge (str):
+
+    Returns:
+        Response[Union[ConsentRequest, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        consent_challenge=consent_challenge,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    consent_challenge: str,
+) -> Optional[Union[ConsentRequest, GenericError]]:
+    """Get Consent Request Information
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated,
+    he/she must now be asked if
+    the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the
+    subject's behalf.
+
+    The consent provider which handles this request and is a web app implemented and hosted by you. It
+    shows a subject interface which asks the subject to
+    grant or deny the client access to the requested scope (\"Application my-dropbox-app wants write
+    access to all your private files\").
+
+    The consent challenge is appended to the consent provider's URL to which the subject's user-agent
+    (browser) is redirected to. The consent
+    provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if
+    the subject accepted
+    or rejected the request.
+
+    Args:
+        consent_challenge (str):
+
+    Returns:
+        Response[Union[ConsentRequest, GenericError]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        consent_challenge=consent_challenge,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    consent_challenge: str,
+) -> Response[Union[ConsentRequest, GenericError]]:
+    """Get Consent Request Information
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated,
+    he/she must now be asked if
+    the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the
+    subject's behalf.
+
+    The consent provider which handles this request and is a web app implemented and hosted by you. It
+    shows a subject interface which asks the subject to
+    grant or deny the client access to the requested scope (\"Application my-dropbox-app wants write
+    access to all your private files\").
+
+    The consent challenge is appended to the consent provider's URL to which the subject's user-agent
+    (browser) is redirected to. The consent
+    provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if
+    the subject accepted
+    or rejected the request.
+
+    Args:
+        consent_challenge (str):
+
+    Returns:
+        Response[Union[ConsentRequest, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        consent_challenge=consent_challenge,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    consent_challenge: str,
+) -> Optional[Union[ConsentRequest, GenericError]]:
+    """Get Consent Request Information
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated,
+    he/she must now be asked if
+    the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the
+    subject's behalf.
+
+    The consent provider which handles this request and is a web app implemented and hosted by you. It
+    shows a subject interface which asks the subject to
+    grant or deny the client access to the requested scope (\"Application my-dropbox-app wants write
+    access to all your private files\").
+
+    The consent challenge is appended to the consent provider's URL to which the subject's user-agent
+    (browser) is redirected to. The consent
+    provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if
+    the subject accepted
+    or rejected the request.
+
+    Args:
+        consent_challenge (str):
+
+    Returns:
+        Response[Union[ConsentRequest, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            consent_challenge=consent_challenge,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/get_json_web_key.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/get_json_web_key.py
new file mode 100644
index 0000000..3ebeaee
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/get_json_web_key.py
@@ -0,0 +1,167 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.json_web_key_set import JSONWebKeySet
+from ...types import Response
+
+
+def _get_kwargs(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/keys/{set}/{kid}".format(_client.base_url, set=set_, kid=kid)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    if response.status_code == 200:
+        response_200 = JSONWebKeySet.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 404:
+        response_404 = GenericError.from_dict(response.json())
+
+        return response_404
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, JSONWebKeySet]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+) -> Response[Union[GenericError, JSONWebKeySet]]:
+    """Fetch a JSON Web Key
+
+     This endpoint returns a singular JSON Web Key, identified by the set and the specific key ID (kid).
+
+    Args:
+        set_ (str):
+        kid (str):
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    kwargs = _get_kwargs(
+        set_=set_,
+        kid=kid,
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    """Fetch a JSON Web Key
+
+     This endpoint returns a singular JSON Web Key, identified by the set and the specific key ID (kid).
+
+    Args:
+        set_ (str):
+        kid (str):
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    return sync_detailed(
+        set_=set_,
+        kid=kid,
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+) -> Response[Union[GenericError, JSONWebKeySet]]:
+    """Fetch a JSON Web Key
+
+     This endpoint returns a singular JSON Web Key, identified by the set and the specific key ID (kid).
+
+    Args:
+        set_ (str):
+        kid (str):
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    kwargs = _get_kwargs(
+        set_=set_,
+        kid=kid,
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    """Fetch a JSON Web Key
+
+     This endpoint returns a singular JSON Web Key, identified by the set and the specific key ID (kid).
+
+    Args:
+        set_ (str):
+        kid (str):
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    return (
+        await asyncio_detailed(
+            set_=set_,
+            kid=kid,
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/get_json_web_key_set.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/get_json_web_key_set.py
new file mode 100644
index 0000000..c9dfb0f
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/get_json_web_key_set.py
@@ -0,0 +1,182 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.json_web_key_set import JSONWebKeySet
+from ...types import Response
+
+
+def _get_kwargs(
+    set_: str,
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/keys/{set}".format(_client.base_url, set=set_)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    if response.status_code == 200:
+        response_200 = JSONWebKeySet.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 403:
+        response_403 = GenericError.from_dict(response.json())
+
+        return response_403
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, JSONWebKeySet]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    set_: str,
+    *,
+    _client: Client,
+) -> Response[Union[GenericError, JSONWebKeySet]]:
+    """Retrieve a JSON Web Key Set
+
+     This endpoint can be used to retrieve JWK Sets stored in ORY Hydra.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    kwargs = _get_kwargs(
+        set_=set_,
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    set_: str,
+    *,
+    _client: Client,
+) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    """Retrieve a JSON Web Key Set
+
+     This endpoint can be used to retrieve JWK Sets stored in ORY Hydra.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    return sync_detailed(
+        set_=set_,
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    set_: str,
+    *,
+    _client: Client,
+) -> Response[Union[GenericError, JSONWebKeySet]]:
+    """Retrieve a JSON Web Key Set
+
+     This endpoint can be used to retrieve JWK Sets stored in ORY Hydra.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    kwargs = _get_kwargs(
+        set_=set_,
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    set_: str,
+    *,
+    _client: Client,
+) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    """Retrieve a JSON Web Key Set
+
+     This endpoint can be used to retrieve JWK Sets stored in ORY Hydra.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    return (
+        await asyncio_detailed(
+            set_=set_,
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/get_login_request.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/get_login_request.py
new file mode 100644
index 0000000..fe314e5
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/get_login_request.py
@@ -0,0 +1,212 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.login_request import LoginRequest
+from ...types import UNSET, Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    login_challenge: str,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/auth/requests/login".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    params: Dict[str, Any] = {}
+    params["login_challenge"] = login_challenge
+
+    params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "params": params,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, LoginRequest]]:
+    if response.status_code == 200:
+        response_200 = LoginRequest.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 400:
+        response_400 = GenericError.from_dict(response.json())
+
+        return response_400
+    if response.status_code == 404:
+        response_404 = GenericError.from_dict(response.json())
+
+        return response_404
+    if response.status_code == 409:
+        response_409 = GenericError.from_dict(response.json())
+
+        return response_409
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, LoginRequest]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    login_challenge: str,
+) -> Response[Union[GenericError, LoginRequest]]:
+    """Get a Login Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    (sometimes called \"identity provider\") to authenticate the subject and then tell ORY Hydra now
+    about it. The login
+    provider is an web-app you write and host, and it must be able to authenticate (\"show the subject a
+    login screen\")
+    a subject (in OAuth2 the proper name for subject is \"resource owner\").
+
+    The authentication challenge is appended to the login provider URL to which the subject's user-agent
+    (browser) is redirected to. The login
+    provider uses that challenge to fetch information on the OAuth2 request and then accept or reject
+    the requested authentication process.
+
+    Args:
+        login_challenge (str):
+
+    Returns:
+        Response[Union[GenericError, LoginRequest]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        login_challenge=login_challenge,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    login_challenge: str,
+) -> Optional[Union[GenericError, LoginRequest]]:
+    """Get a Login Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    (sometimes called \"identity provider\") to authenticate the subject and then tell ORY Hydra now
+    about it. The login
+    provider is an web-app you write and host, and it must be able to authenticate (\"show the subject a
+    login screen\")
+    a subject (in OAuth2 the proper name for subject is \"resource owner\").
+
+    The authentication challenge is appended to the login provider URL to which the subject's user-agent
+    (browser) is redirected to. The login
+    provider uses that challenge to fetch information on the OAuth2 request and then accept or reject
+    the requested authentication process.
+
+    Args:
+        login_challenge (str):
+
+    Returns:
+        Response[Union[GenericError, LoginRequest]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        login_challenge=login_challenge,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    login_challenge: str,
+) -> Response[Union[GenericError, LoginRequest]]:
+    """Get a Login Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    (sometimes called \"identity provider\") to authenticate the subject and then tell ORY Hydra now
+    about it. The login
+    provider is an web-app you write and host, and it must be able to authenticate (\"show the subject a
+    login screen\")
+    a subject (in OAuth2 the proper name for subject is \"resource owner\").
+
+    The authentication challenge is appended to the login provider URL to which the subject's user-agent
+    (browser) is redirected to. The login
+    provider uses that challenge to fetch information on the OAuth2 request and then accept or reject
+    the requested authentication process.
+
+    Args:
+        login_challenge (str):
+
+    Returns:
+        Response[Union[GenericError, LoginRequest]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        login_challenge=login_challenge,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    login_challenge: str,
+) -> Optional[Union[GenericError, LoginRequest]]:
+    """Get a Login Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    (sometimes called \"identity provider\") to authenticate the subject and then tell ORY Hydra now
+    about it. The login
+    provider is an web-app you write and host, and it must be able to authenticate (\"show the subject a
+    login screen\")
+    a subject (in OAuth2 the proper name for subject is \"resource owner\").
+
+    The authentication challenge is appended to the login provider URL to which the subject's user-agent
+    (browser) is redirected to. The login
+    provider uses that challenge to fetch information on the OAuth2 request and then accept or reject
+    the requested authentication process.
+
+    Args:
+        login_challenge (str):
+
+    Returns:
+        Response[Union[GenericError, LoginRequest]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            login_challenge=login_challenge,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/get_logout_request.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/get_logout_request.py
new file mode 100644
index 0000000..2908010
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/get_logout_request.py
@@ -0,0 +1,160 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.logout_request import LogoutRequest
+from ...types import UNSET, Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    logout_challenge: str,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/auth/requests/logout".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    params: Dict[str, Any] = {}
+    params["logout_challenge"] = logout_challenge
+
+    params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "params": params,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, LogoutRequest]]:
+    if response.status_code == 200:
+        response_200 = LogoutRequest.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 404:
+        response_404 = GenericError.from_dict(response.json())
+
+        return response_404
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, LogoutRequest]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    logout_challenge: str,
+) -> Response[Union[GenericError, LogoutRequest]]:
+    """Get a Logout Request
+
+     Use this endpoint to fetch a logout request.
+
+    Args:
+        logout_challenge (str):
+
+    Returns:
+        Response[Union[GenericError, LogoutRequest]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        logout_challenge=logout_challenge,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    logout_challenge: str,
+) -> Optional[Union[GenericError, LogoutRequest]]:
+    """Get a Logout Request
+
+     Use this endpoint to fetch a logout request.
+
+    Args:
+        logout_challenge (str):
+
+    Returns:
+        Response[Union[GenericError, LogoutRequest]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        logout_challenge=logout_challenge,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    logout_challenge: str,
+) -> Response[Union[GenericError, LogoutRequest]]:
+    """Get a Logout Request
+
+     Use this endpoint to fetch a logout request.
+
+    Args:
+        logout_challenge (str):
+
+    Returns:
+        Response[Union[GenericError, LogoutRequest]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        logout_challenge=logout_challenge,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    logout_challenge: str,
+) -> Optional[Union[GenericError, LogoutRequest]]:
+    """Get a Logout Request
+
+     Use this endpoint to fetch a logout request.
+
+    Args:
+        logout_challenge (str):
+
+    Returns:
+        Response[Union[GenericError, LogoutRequest]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            logout_challenge=logout_challenge,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/get_o_auth_2_client.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/get_o_auth_2_client.py
new file mode 100644
index 0000000..7a3ca90
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/get_o_auth_2_client.py
@@ -0,0 +1,174 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.o_auth_2_client import OAuth2Client
+from ...types import Response
+
+
+def _get_kwargs(
+    id: str,
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/clients/{id}".format(_client.base_url, id=id)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, OAuth2Client]]:
+    if response.status_code == 200:
+        response_200 = OAuth2Client.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, OAuth2Client]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    id: str,
+    *,
+    _client: Client,
+) -> Response[Union[GenericError, OAuth2Client]]:
+    """Get an OAuth 2.0 Client.
+
+     Get an OAUth 2.0 client by its ID. This endpoint never returns passwords.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        id (str):
+
+    Returns:
+        Response[Union[GenericError, OAuth2Client]]
+    """
+
+    kwargs = _get_kwargs(
+        id=id,
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    id: str,
+    *,
+    _client: Client,
+) -> Optional[Union[GenericError, OAuth2Client]]:
+    """Get an OAuth 2.0 Client.
+
+     Get an OAUth 2.0 client by its ID. This endpoint never returns passwords.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        id (str):
+
+    Returns:
+        Response[Union[GenericError, OAuth2Client]]
+    """
+
+    return sync_detailed(
+        id=id,
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    id: str,
+    *,
+    _client: Client,
+) -> Response[Union[GenericError, OAuth2Client]]:
+    """Get an OAuth 2.0 Client.
+
+     Get an OAUth 2.0 client by its ID. This endpoint never returns passwords.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        id (str):
+
+    Returns:
+        Response[Union[GenericError, OAuth2Client]]
+    """
+
+    kwargs = _get_kwargs(
+        id=id,
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    id: str,
+    *,
+    _client: Client,
+) -> Optional[Union[GenericError, OAuth2Client]]:
+    """Get an OAuth 2.0 Client.
+
+     Get an OAUth 2.0 client by its ID. This endpoint never returns passwords.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        id (str):
+
+    Returns:
+        Response[Union[GenericError, OAuth2Client]]
+    """
+
+    return (
+        await asyncio_detailed(
+            id=id,
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/get_version.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/get_version.py
new file mode 100644
index 0000000..0ecee48
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/get_version.py
@@ -0,0 +1,136 @@
+from typing import Any, Dict, Optional
+
+import httpx
+
+from ...client import Client
+from ...models.version import Version
+from ...types import Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/version".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Version]:
+    if response.status_code == 200:
+        response_200 = Version.from_dict(response.json())
+
+        return response_200
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Version]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+) -> Response[Version]:
+    """Get Service Version
+
+     This endpoint returns the service version typically notated using semantic versioning.
+
+    If the service supports TLS Edge Termination, this endpoint does not require the
+    `X-Forwarded-Proto` header to be set.
+
+    Returns:
+        Response[Version]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+) -> Optional[Version]:
+    """Get Service Version
+
+     This endpoint returns the service version typically notated using semantic versioning.
+
+    If the service supports TLS Edge Termination, this endpoint does not require the
+    `X-Forwarded-Proto` header to be set.
+
+    Returns:
+        Response[Version]
+    """
+
+    return sync_detailed(
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+) -> Response[Version]:
+    """Get Service Version
+
+     This endpoint returns the service version typically notated using semantic versioning.
+
+    If the service supports TLS Edge Termination, this endpoint does not require the
+    `X-Forwarded-Proto` header to be set.
+
+    Returns:
+        Response[Version]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+) -> Optional[Version]:
+    """Get Service Version
+
+     This endpoint returns the service version typically notated using semantic versioning.
+
+    If the service supports TLS Edge Termination, this endpoint does not require the
+    `X-Forwarded-Proto` header to be set.
+
+    Returns:
+        Response[Version]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/introspect_o_auth_2_token.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/introspect_o_auth_2_token.py
new file mode 100644
index 0000000..9a66560
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/introspect_o_auth_2_token.py
@@ -0,0 +1,161 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.o_auth_2_token_introspection import OAuth2TokenIntrospection
+from ...types import Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/introspect".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "post",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, OAuth2TokenIntrospection]]:
+    if response.status_code == 200:
+        response_200 = OAuth2TokenIntrospection.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, OAuth2TokenIntrospection]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+) -> Response[Union[GenericError, OAuth2TokenIntrospection]]:
+    """Introspect OAuth2 Tokens
+
+     The introspection endpoint allows to check if a token (both refresh and access) is active or not. An
+    active token
+    is neither expired nor revoked. If a token is active, additional information on the token will be
+    included. You can
+    set additional data for a token by setting `accessTokenExtra` during the consent flow.
+
+    For more information [read this blog post](https://www.oauth.com/oauth2-servers/token-introspection-
+    endpoint/).
+
+    Returns:
+        Response[Union[GenericError, OAuth2TokenIntrospection]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+) -> Optional[Union[GenericError, OAuth2TokenIntrospection]]:
+    """Introspect OAuth2 Tokens
+
+     The introspection endpoint allows to check if a token (both refresh and access) is active or not. An
+    active token
+    is neither expired nor revoked. If a token is active, additional information on the token will be
+    included. You can
+    set additional data for a token by setting `accessTokenExtra` during the consent flow.
+
+    For more information [read this blog post](https://www.oauth.com/oauth2-servers/token-introspection-
+    endpoint/).
+
+    Returns:
+        Response[Union[GenericError, OAuth2TokenIntrospection]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+) -> Response[Union[GenericError, OAuth2TokenIntrospection]]:
+    """Introspect OAuth2 Tokens
+
+     The introspection endpoint allows to check if a token (both refresh and access) is active or not. An
+    active token
+    is neither expired nor revoked. If a token is active, additional information on the token will be
+    included. You can
+    set additional data for a token by setting `accessTokenExtra` during the consent flow.
+
+    For more information [read this blog post](https://www.oauth.com/oauth2-servers/token-introspection-
+    endpoint/).
+
+    Returns:
+        Response[Union[GenericError, OAuth2TokenIntrospection]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+) -> Optional[Union[GenericError, OAuth2TokenIntrospection]]:
+    """Introspect OAuth2 Tokens
+
+     The introspection endpoint allows to check if a token (both refresh and access) is active or not. An
+    active token
+    is neither expired nor revoked. If a token is active, additional information on the token will be
+    included. You can
+    set additional data for a token by setting `accessTokenExtra` during the consent flow.
+
+    For more information [read this blog post](https://www.oauth.com/oauth2-servers/token-introspection-
+    endpoint/).
+
+    Returns:
+        Response[Union[GenericError, OAuth2TokenIntrospection]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/is_instance_alive.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/is_instance_alive.py
new file mode 100644
index 0000000..8e9f769
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/is_instance_alive.py
@@ -0,0 +1,157 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.health_status import HealthStatus
+from ...types import Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/health/alive".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, HealthStatus]]:
+    if response.status_code == 200:
+        response_200 = HealthStatus.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, HealthStatus]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+) -> Response[Union[GenericError, HealthStatus]]:
+    """Check Alive Status
+
+     This endpoint returns a 200 status code when the HTTP server is up running.
+    This status does currently not include checks whether the database connection is working.
+
+    If the service supports TLS Edge Termination, this endpoint does not require the
+    `X-Forwarded-Proto` header to be set.
+
+    Be aware that if you are running multiple nodes of this service, the health status will never
+    refer to the cluster state, only to a single instance.
+
+    Returns:
+        Response[Union[GenericError, HealthStatus]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+) -> Optional[Union[GenericError, HealthStatus]]:
+    """Check Alive Status
+
+     This endpoint returns a 200 status code when the HTTP server is up running.
+    This status does currently not include checks whether the database connection is working.
+
+    If the service supports TLS Edge Termination, this endpoint does not require the
+    `X-Forwarded-Proto` header to be set.
+
+    Be aware that if you are running multiple nodes of this service, the health status will never
+    refer to the cluster state, only to a single instance.
+
+    Returns:
+        Response[Union[GenericError, HealthStatus]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+) -> Response[Union[GenericError, HealthStatus]]:
+    """Check Alive Status
+
+     This endpoint returns a 200 status code when the HTTP server is up running.
+    This status does currently not include checks whether the database connection is working.
+
+    If the service supports TLS Edge Termination, this endpoint does not require the
+    `X-Forwarded-Proto` header to be set.
+
+    Be aware that if you are running multiple nodes of this service, the health status will never
+    refer to the cluster state, only to a single instance.
+
+    Returns:
+        Response[Union[GenericError, HealthStatus]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+) -> Optional[Union[GenericError, HealthStatus]]:
+    """Check Alive Status
+
+     This endpoint returns a 200 status code when the HTTP server is up running.
+    This status does currently not include checks whether the database connection is working.
+
+    If the service supports TLS Edge Termination, this endpoint does not require the
+    `X-Forwarded-Proto` header to be set.
+
+    Be aware that if you are running multiple nodes of this service, the health status will never
+    refer to the cluster state, only to a single instance.
+
+    Returns:
+        Response[Union[GenericError, HealthStatus]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/list_o_auth_2_clients.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/list_o_auth_2_clients.py
new file mode 100644
index 0000000..4c804b3
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/list_o_auth_2_clients.py
@@ -0,0 +1,224 @@
+from typing import Any, Dict, List, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.o_auth_2_client import OAuth2Client
+from ...types import UNSET, Response, Unset
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    limit: Union[Unset, None, int] = UNSET,
+    offset: Union[Unset, None, int] = UNSET,
+) -> Dict[str, Any]:
+    url = "{}/clients".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    params: Dict[str, Any] = {}
+    params["limit"] = limit
+
+    params["offset"] = offset
+
+    params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "params": params,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, List[OAuth2Client]]]:
+    if response.status_code == 200:
+        response_200 = []
+        _response_200 = response.json()
+        for response_200_item_data in _response_200:
+            response_200_item = OAuth2Client.from_dict(response_200_item_data)
+
+            response_200.append(response_200_item)
+
+        return response_200
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, List[OAuth2Client]]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    limit: Union[Unset, None, int] = UNSET,
+    offset: Union[Unset, None, int] = UNSET,
+) -> Response[Union[GenericError, List[OAuth2Client]]]:
+    """List OAuth 2.0 Clients
+
+     This endpoint lists all clients in the database, and never returns client secrets. As a default it
+    lists the first 100 clients. The `limit` parameter can be used to retrieve more clients, but it has
+    an upper bound at 500 objects. Pagination should be used to retrieve more than 500 objects.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+    The \"Link\" header is also included in successful responses, which contains one or more links for
+    pagination, formatted like so: '<https://hydra-url/admin/clients?limit={limit}&offset={offset}>;
+    rel=\"{page}\"', where page is one of the following applicable pages: 'first', 'next', 'last', and
+    'previous'.
+    Multiple links can be included in this header, and will be separated by a comma.
+
+    Args:
+        limit (Union[Unset, None, int]):
+        offset (Union[Unset, None, int]):
+
+    Returns:
+        Response[Union[GenericError, List[OAuth2Client]]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        limit=limit,
+        offset=offset,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    limit: Union[Unset, None, int] = UNSET,
+    offset: Union[Unset, None, int] = UNSET,
+) -> Optional[Union[GenericError, List[OAuth2Client]]]:
+    """List OAuth 2.0 Clients
+
+     This endpoint lists all clients in the database, and never returns client secrets. As a default it
+    lists the first 100 clients. The `limit` parameter can be used to retrieve more clients, but it has
+    an upper bound at 500 objects. Pagination should be used to retrieve more than 500 objects.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+    The \"Link\" header is also included in successful responses, which contains one or more links for
+    pagination, formatted like so: '<https://hydra-url/admin/clients?limit={limit}&offset={offset}>;
+    rel=\"{page}\"', where page is one of the following applicable pages: 'first', 'next', 'last', and
+    'previous'.
+    Multiple links can be included in this header, and will be separated by a comma.
+
+    Args:
+        limit (Union[Unset, None, int]):
+        offset (Union[Unset, None, int]):
+
+    Returns:
+        Response[Union[GenericError, List[OAuth2Client]]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        limit=limit,
+        offset=offset,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    limit: Union[Unset, None, int] = UNSET,
+    offset: Union[Unset, None, int] = UNSET,
+) -> Response[Union[GenericError, List[OAuth2Client]]]:
+    """List OAuth 2.0 Clients
+
+     This endpoint lists all clients in the database, and never returns client secrets. As a default it
+    lists the first 100 clients. The `limit` parameter can be used to retrieve more clients, but it has
+    an upper bound at 500 objects. Pagination should be used to retrieve more than 500 objects.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+    The \"Link\" header is also included in successful responses, which contains one or more links for
+    pagination, formatted like so: '<https://hydra-url/admin/clients?limit={limit}&offset={offset}>;
+    rel=\"{page}\"', where page is one of the following applicable pages: 'first', 'next', 'last', and
+    'previous'.
+    Multiple links can be included in this header, and will be separated by a comma.
+
+    Args:
+        limit (Union[Unset, None, int]):
+        offset (Union[Unset, None, int]):
+
+    Returns:
+        Response[Union[GenericError, List[OAuth2Client]]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        limit=limit,
+        offset=offset,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    limit: Union[Unset, None, int] = UNSET,
+    offset: Union[Unset, None, int] = UNSET,
+) -> Optional[Union[GenericError, List[OAuth2Client]]]:
+    """List OAuth 2.0 Clients
+
+     This endpoint lists all clients in the database, and never returns client secrets. As a default it
+    lists the first 100 clients. The `limit` parameter can be used to retrieve more clients, but it has
+    an upper bound at 500 objects. Pagination should be used to retrieve more than 500 objects.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+    The \"Link\" header is also included in successful responses, which contains one or more links for
+    pagination, formatted like so: '<https://hydra-url/admin/clients?limit={limit}&offset={offset}>;
+    rel=\"{page}\"', where page is one of the following applicable pages: 'first', 'next', 'last', and
+    'previous'.
+    Multiple links can be included in this header, and will be separated by a comma.
+
+    Args:
+        limit (Union[Unset, None, int]):
+        offset (Union[Unset, None, int]):
+
+    Returns:
+        Response[Union[GenericError, List[OAuth2Client]]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            limit=limit,
+            offset=offset,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/list_subject_consent_sessions.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/list_subject_consent_sessions.py
new file mode 100644
index 0000000..352a59f
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/list_subject_consent_sessions.py
@@ -0,0 +1,205 @@
+from typing import Any, Dict, List, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.previous_consent_session import PreviousConsentSession
+from ...types import UNSET, Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    subject: str,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/auth/sessions/consent".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    params: Dict[str, Any] = {}
+    params["subject"] = subject
+
+    params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "params": params,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, List[PreviousConsentSession]]]:
+    if response.status_code == 200:
+        response_200 = []
+        _response_200 = response.json()
+        for response_200_item_data in _response_200:
+            response_200_item = PreviousConsentSession.from_dict(response_200_item_data)
+
+            response_200.append(response_200_item)
+
+        return response_200
+    if response.status_code == 400:
+        response_400 = GenericError.from_dict(response.json())
+
+        return response_400
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, List[PreviousConsentSession]]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    subject: str,
+) -> Response[Union[GenericError, List[PreviousConsentSession]]]:
+    """Lists All Consent Sessions of a Subject
+
+     This endpoint lists all subject's granted consent sessions, including client and granted scope.
+    If the subject is unknown or has not granted any consent sessions yet, the endpoint returns an
+    empty JSON array with status code 200 OK.
+
+
+    The \"Link\" header is also included in successful responses, which contains one or more links for
+    pagination, formatted like so: '<https://hydra-
+    url/admin/oauth2/auth/sessions/consent?subject={user}&limit={limit}&offset={offset}>;
+    rel=\"{page}\"', where page is one of the following applicable pages: 'first', 'next', 'last', and
+    'previous'.
+    Multiple links can be included in this header, and will be separated by a comma.
+
+    Args:
+        subject (str):
+
+    Returns:
+        Response[Union[GenericError, List[PreviousConsentSession]]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        subject=subject,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    subject: str,
+) -> Optional[Union[GenericError, List[PreviousConsentSession]]]:
+    """Lists All Consent Sessions of a Subject
+
+     This endpoint lists all subject's granted consent sessions, including client and granted scope.
+    If the subject is unknown or has not granted any consent sessions yet, the endpoint returns an
+    empty JSON array with status code 200 OK.
+
+
+    The \"Link\" header is also included in successful responses, which contains one or more links for
+    pagination, formatted like so: '<https://hydra-
+    url/admin/oauth2/auth/sessions/consent?subject={user}&limit={limit}&offset={offset}>;
+    rel=\"{page}\"', where page is one of the following applicable pages: 'first', 'next', 'last', and
+    'previous'.
+    Multiple links can be included in this header, and will be separated by a comma.
+
+    Args:
+        subject (str):
+
+    Returns:
+        Response[Union[GenericError, List[PreviousConsentSession]]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        subject=subject,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    subject: str,
+) -> Response[Union[GenericError, List[PreviousConsentSession]]]:
+    """Lists All Consent Sessions of a Subject
+
+     This endpoint lists all subject's granted consent sessions, including client and granted scope.
+    If the subject is unknown or has not granted any consent sessions yet, the endpoint returns an
+    empty JSON array with status code 200 OK.
+
+
+    The \"Link\" header is also included in successful responses, which contains one or more links for
+    pagination, formatted like so: '<https://hydra-
+    url/admin/oauth2/auth/sessions/consent?subject={user}&limit={limit}&offset={offset}>;
+    rel=\"{page}\"', where page is one of the following applicable pages: 'first', 'next', 'last', and
+    'previous'.
+    Multiple links can be included in this header, and will be separated by a comma.
+
+    Args:
+        subject (str):
+
+    Returns:
+        Response[Union[GenericError, List[PreviousConsentSession]]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        subject=subject,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    subject: str,
+) -> Optional[Union[GenericError, List[PreviousConsentSession]]]:
+    """Lists All Consent Sessions of a Subject
+
+     This endpoint lists all subject's granted consent sessions, including client and granted scope.
+    If the subject is unknown or has not granted any consent sessions yet, the endpoint returns an
+    empty JSON array with status code 200 OK.
+
+
+    The \"Link\" header is also included in successful responses, which contains one or more links for
+    pagination, formatted like so: '<https://hydra-
+    url/admin/oauth2/auth/sessions/consent?subject={user}&limit={limit}&offset={offset}>;
+    rel=\"{page}\"', where page is one of the following applicable pages: 'first', 'next', 'last', and
+    'previous'.
+    Multiple links can be included in this header, and will be separated by a comma.
+
+    Args:
+        subject (str):
+
+    Returns:
+        Response[Union[GenericError, List[PreviousConsentSession]]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            subject=subject,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/prometheus.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/prometheus.py
new file mode 100644
index 0000000..4399295
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/prometheus.py
@@ -0,0 +1,99 @@
+from typing import Any, Dict
+
+import httpx
+
+from ...client import Client
+from ...types import Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/metrics/prometheus".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _build_response(*, response: httpx.Response) -> Response[Any]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=None,
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+) -> Response[Any]:
+    """Get Snapshot Metrics from the Hydra Service.
+
+     If you're using k8s, you can then add annotations to your deployment like so:
+
+    ```
+    metadata:
+    annotations:
+    prometheus.io/port: \"4445\"
+    prometheus.io/path: \"/metrics/prometheus\"
+    ```
+
+    If the service supports TLS Edge Termination, this endpoint does not require the
+    `X-Forwarded-Proto` header to be set.
+
+    Returns:
+        Response[Any]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+) -> Response[Any]:
+    """Get Snapshot Metrics from the Hydra Service.
+
+     If you're using k8s, you can then add annotations to your deployment like so:
+
+    ```
+    metadata:
+    annotations:
+    prometheus.io/port: \"4445\"
+    prometheus.io/path: \"/metrics/prometheus\"
+    ```
+
+    If the service supports TLS Edge Termination, this endpoint does not require the
+    `X-Forwarded-Proto` header to be set.
+
+    Returns:
+        Response[Any]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/reject_consent_request.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/reject_consent_request.py
new file mode 100644
index 0000000..b8b7249
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/reject_consent_request.py
@@ -0,0 +1,265 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.completed_request import CompletedRequest
+from ...models.generic_error import GenericError
+from ...models.reject_request import RejectRequest
+from ...types import UNSET, Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    json_body: RejectRequest,
+    consent_challenge: str,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/auth/requests/consent/reject".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    params: Dict[str, Any] = {}
+    params["consent_challenge"] = consent_challenge
+
+    params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+
+    json_json_body = json_body.to_dict()
+
+    return {
+        "method": "put",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "json": json_json_body,
+        "params": params,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[CompletedRequest, GenericError]]:
+    if response.status_code == 200:
+        response_200 = CompletedRequest.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 404:
+        response_404 = GenericError.from_dict(response.json())
+
+        return response_404
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[CompletedRequest, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    json_body: RejectRequest,
+    consent_challenge: str,
+) -> Response[Union[CompletedRequest, GenericError]]:
+    """Reject a Consent Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated,
+    he/she must now be asked if
+    the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the
+    subject's behalf.
+
+    The consent provider which handles this request and is a web app implemented and hosted by you. It
+    shows a subject interface which asks the subject to
+    grant or deny the client access to the requested scope (\"Application my-dropbox-app wants write
+    access to all your private files\").
+
+    The consent challenge is appended to the consent provider's URL to which the subject's user-agent
+    (browser) is redirected to. The consent
+    provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if
+    the subject accepted
+    or rejected the request.
+
+    This endpoint tells ORY Hydra that the subject has not authorized the OAuth 2.0 client to access
+    resources on his/her behalf.
+    The consent provider must include a reason why the consent was not granted.
+
+    The response contains a redirect URL which the consent provider should redirect the user-agent to.
+
+    Args:
+        consent_challenge (str):
+        json_body (RejectRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        json_body=json_body,
+        consent_challenge=consent_challenge,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    json_body: RejectRequest,
+    consent_challenge: str,
+) -> Optional[Union[CompletedRequest, GenericError]]:
+    """Reject a Consent Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated,
+    he/she must now be asked if
+    the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the
+    subject's behalf.
+
+    The consent provider which handles this request and is a web app implemented and hosted by you. It
+    shows a subject interface which asks the subject to
+    grant or deny the client access to the requested scope (\"Application my-dropbox-app wants write
+    access to all your private files\").
+
+    The consent challenge is appended to the consent provider's URL to which the subject's user-agent
+    (browser) is redirected to. The consent
+    provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if
+    the subject accepted
+    or rejected the request.
+
+    This endpoint tells ORY Hydra that the subject has not authorized the OAuth 2.0 client to access
+    resources on his/her behalf.
+    The consent provider must include a reason why the consent was not granted.
+
+    The response contains a redirect URL which the consent provider should redirect the user-agent to.
+
+    Args:
+        consent_challenge (str):
+        json_body (RejectRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        json_body=json_body,
+        consent_challenge=consent_challenge,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    json_body: RejectRequest,
+    consent_challenge: str,
+) -> Response[Union[CompletedRequest, GenericError]]:
+    """Reject a Consent Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated,
+    he/she must now be asked if
+    the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the
+    subject's behalf.
+
+    The consent provider which handles this request and is a web app implemented and hosted by you. It
+    shows a subject interface which asks the subject to
+    grant or deny the client access to the requested scope (\"Application my-dropbox-app wants write
+    access to all your private files\").
+
+    The consent challenge is appended to the consent provider's URL to which the subject's user-agent
+    (browser) is redirected to. The consent
+    provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if
+    the subject accepted
+    or rejected the request.
+
+    This endpoint tells ORY Hydra that the subject has not authorized the OAuth 2.0 client to access
+    resources on his/her behalf.
+    The consent provider must include a reason why the consent was not granted.
+
+    The response contains a redirect URL which the consent provider should redirect the user-agent to.
+
+    Args:
+        consent_challenge (str):
+        json_body (RejectRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        json_body=json_body,
+        consent_challenge=consent_challenge,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    json_body: RejectRequest,
+    consent_challenge: str,
+) -> Optional[Union[CompletedRequest, GenericError]]:
+    """Reject a Consent Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated,
+    he/she must now be asked if
+    the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the
+    subject's behalf.
+
+    The consent provider which handles this request and is a web app implemented and hosted by you. It
+    shows a subject interface which asks the subject to
+    grant or deny the client access to the requested scope (\"Application my-dropbox-app wants write
+    access to all your private files\").
+
+    The consent challenge is appended to the consent provider's URL to which the subject's user-agent
+    (browser) is redirected to. The consent
+    provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if
+    the subject accepted
+    or rejected the request.
+
+    This endpoint tells ORY Hydra that the subject has not authorized the OAuth 2.0 client to access
+    resources on his/her behalf.
+    The consent provider must include a reason why the consent was not granted.
+
+    The response contains a redirect URL which the consent provider should redirect the user-agent to.
+
+    Args:
+        consent_challenge (str):
+        json_body (RejectRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            json_body=json_body,
+            consent_challenge=consent_challenge,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/reject_login_request.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/reject_login_request.py
new file mode 100644
index 0000000..c7dbca3
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/reject_login_request.py
@@ -0,0 +1,253 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.completed_request import CompletedRequest
+from ...models.generic_error import GenericError
+from ...models.reject_request import RejectRequest
+from ...types import UNSET, Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    json_body: RejectRequest,
+    login_challenge: str,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/auth/requests/login/reject".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    params: Dict[str, Any] = {}
+    params["login_challenge"] = login_challenge
+
+    params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+
+    json_json_body = json_body.to_dict()
+
+    return {
+        "method": "put",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "json": json_json_body,
+        "params": params,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[CompletedRequest, GenericError]]:
+    if response.status_code == 200:
+        response_200 = CompletedRequest.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 400:
+        response_400 = GenericError.from_dict(response.json())
+
+        return response_400
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 404:
+        response_404 = GenericError.from_dict(response.json())
+
+        return response_404
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[CompletedRequest, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    json_body: RejectRequest,
+    login_challenge: str,
+) -> Response[Union[CompletedRequest, GenericError]]:
+    """Reject a Login Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    (sometimes called \"identity provider\") to authenticate the subject and then tell ORY Hydra now
+    about it. The login
+    provider is an web-app you write and host, and it must be able to authenticate (\"show the subject a
+    login screen\")
+    a subject (in OAuth2 the proper name for subject is \"resource owner\").
+
+    The authentication challenge is appended to the login provider URL to which the subject's user-agent
+    (browser) is redirected to. The login
+    provider uses that challenge to fetch information on the OAuth2 request and then accept or reject
+    the requested authentication process.
+
+    This endpoint tells ORY Hydra that the subject has not authenticated and includes a reason why the
+    authentication
+    was be denied.
+
+    The response contains a redirect URL which the login provider should redirect the user-agent to.
+
+    Args:
+        login_challenge (str):
+        json_body (RejectRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        json_body=json_body,
+        login_challenge=login_challenge,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    json_body: RejectRequest,
+    login_challenge: str,
+) -> Optional[Union[CompletedRequest, GenericError]]:
+    """Reject a Login Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    (sometimes called \"identity provider\") to authenticate the subject and then tell ORY Hydra now
+    about it. The login
+    provider is an web-app you write and host, and it must be able to authenticate (\"show the subject a
+    login screen\")
+    a subject (in OAuth2 the proper name for subject is \"resource owner\").
+
+    The authentication challenge is appended to the login provider URL to which the subject's user-agent
+    (browser) is redirected to. The login
+    provider uses that challenge to fetch information on the OAuth2 request and then accept or reject
+    the requested authentication process.
+
+    This endpoint tells ORY Hydra that the subject has not authenticated and includes a reason why the
+    authentication
+    was be denied.
+
+    The response contains a redirect URL which the login provider should redirect the user-agent to.
+
+    Args:
+        login_challenge (str):
+        json_body (RejectRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        json_body=json_body,
+        login_challenge=login_challenge,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    json_body: RejectRequest,
+    login_challenge: str,
+) -> Response[Union[CompletedRequest, GenericError]]:
+    """Reject a Login Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    (sometimes called \"identity provider\") to authenticate the subject and then tell ORY Hydra now
+    about it. The login
+    provider is an web-app you write and host, and it must be able to authenticate (\"show the subject a
+    login screen\")
+    a subject (in OAuth2 the proper name for subject is \"resource owner\").
+
+    The authentication challenge is appended to the login provider URL to which the subject's user-agent
+    (browser) is redirected to. The login
+    provider uses that challenge to fetch information on the OAuth2 request and then accept or reject
+    the requested authentication process.
+
+    This endpoint tells ORY Hydra that the subject has not authenticated and includes a reason why the
+    authentication
+    was be denied.
+
+    The response contains a redirect URL which the login provider should redirect the user-agent to.
+
+    Args:
+        login_challenge (str):
+        json_body (RejectRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        json_body=json_body,
+        login_challenge=login_challenge,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    json_body: RejectRequest,
+    login_challenge: str,
+) -> Optional[Union[CompletedRequest, GenericError]]:
+    """Reject a Login Request
+
+     When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the
+    login provider
+    (sometimes called \"identity provider\") to authenticate the subject and then tell ORY Hydra now
+    about it. The login
+    provider is an web-app you write and host, and it must be able to authenticate (\"show the subject a
+    login screen\")
+    a subject (in OAuth2 the proper name for subject is \"resource owner\").
+
+    The authentication challenge is appended to the login provider URL to which the subject's user-agent
+    (browser) is redirected to. The login
+    provider uses that challenge to fetch information on the OAuth2 request and then accept or reject
+    the requested authentication process.
+
+    This endpoint tells ORY Hydra that the subject has not authenticated and includes a reason why the
+    authentication
+    was be denied.
+
+    The response contains a redirect URL which the login provider should redirect the user-agent to.
+
+    Args:
+        login_challenge (str):
+        json_body (RejectRequest):
+
+    Returns:
+        Response[Union[CompletedRequest, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            json_body=json_body,
+            login_challenge=login_challenge,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/reject_logout_request.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/reject_logout_request.py
new file mode 100644
index 0000000..822af0f
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/reject_logout_request.py
@@ -0,0 +1,200 @@
+from typing import Any, Dict, Optional, Union, cast
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.reject_request import RejectRequest
+from ...types import UNSET, Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    form_data: RejectRequest,
+    json_body: RejectRequest,
+    logout_challenge: str,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/auth/requests/logout/reject".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    params: Dict[str, Any] = {}
+    params["logout_challenge"] = logout_challenge
+
+    params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+
+    json_body.to_dict()
+
+    return {
+        "method": "put",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "data": form_data.to_dict(),
+        "params": params,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[Any, GenericError]]:
+    if response.status_code == 204:
+        response_204 = cast(Any, None)
+        return response_204
+    if response.status_code == 404:
+        response_404 = GenericError.from_dict(response.json())
+
+        return response_404
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[Any, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    form_data: RejectRequest,
+    json_body: RejectRequest,
+    logout_challenge: str,
+) -> Response[Union[Any, GenericError]]:
+    """Reject a Logout Request
+
+     When a user or an application requests ORY Hydra to log out a user, this endpoint is used to deny
+    that logout request.
+    No body is required.
+
+    The response is empty as the logout provider has to chose what action to perform next.
+
+    Args:
+        logout_challenge (str):
+        json_body (RejectRequest):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        form_data=form_data,
+        json_body=json_body,
+        logout_challenge=logout_challenge,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    form_data: RejectRequest,
+    json_body: RejectRequest,
+    logout_challenge: str,
+) -> Optional[Union[Any, GenericError]]:
+    """Reject a Logout Request
+
+     When a user or an application requests ORY Hydra to log out a user, this endpoint is used to deny
+    that logout request.
+    No body is required.
+
+    The response is empty as the logout provider has to chose what action to perform next.
+
+    Args:
+        logout_challenge (str):
+        json_body (RejectRequest):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        form_data=form_data,
+        json_body=json_body,
+        logout_challenge=logout_challenge,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    form_data: RejectRequest,
+    json_body: RejectRequest,
+    logout_challenge: str,
+) -> Response[Union[Any, GenericError]]:
+    """Reject a Logout Request
+
+     When a user or an application requests ORY Hydra to log out a user, this endpoint is used to deny
+    that logout request.
+    No body is required.
+
+    The response is empty as the logout provider has to chose what action to perform next.
+
+    Args:
+        logout_challenge (str):
+        json_body (RejectRequest):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        form_data=form_data,
+        json_body=json_body,
+        logout_challenge=logout_challenge,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    form_data: RejectRequest,
+    json_body: RejectRequest,
+    logout_challenge: str,
+) -> Optional[Union[Any, GenericError]]:
+    """Reject a Logout Request
+
+     When a user or an application requests ORY Hydra to log out a user, this endpoint is used to deny
+    that logout request.
+    No body is required.
+
+    The response is empty as the logout provider has to chose what action to perform next.
+
+    Args:
+        logout_challenge (str):
+        json_body (RejectRequest):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            form_data=form_data,
+            json_body=json_body,
+            logout_challenge=logout_challenge,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/revoke_authentication_session.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/revoke_authentication_session.py
new file mode 100644
index 0000000..818e3c8
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/revoke_authentication_session.py
@@ -0,0 +1,182 @@
+from typing import Any, Dict, Optional, Union, cast
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...types import UNSET, Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    subject: str,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/auth/sessions/login".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    params: Dict[str, Any] = {}
+    params["subject"] = subject
+
+    params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+
+    return {
+        "method": "delete",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "params": params,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[Any, GenericError]]:
+    if response.status_code == 204:
+        response_204 = cast(Any, None)
+        return response_204
+    if response.status_code == 400:
+        response_400 = GenericError.from_dict(response.json())
+
+        return response_400
+    if response.status_code == 404:
+        response_404 = GenericError.from_dict(response.json())
+
+        return response_404
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[Any, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    subject: str,
+) -> Response[Union[Any, GenericError]]:
+    """Invalidates All Login Sessions of a Certain User
+    Invalidates a Subject's Authentication Session
+
+     This endpoint invalidates a subject's authentication session. After revoking the authentication
+    session, the subject
+    has to re-authenticate at ORY Hydra. This endpoint does not invalidate any tokens and does not work
+    with OpenID Connect
+    Front- or Back-channel logout.
+
+    Args:
+        subject (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        subject=subject,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    subject: str,
+) -> Optional[Union[Any, GenericError]]:
+    """Invalidates All Login Sessions of a Certain User
+    Invalidates a Subject's Authentication Session
+
+     This endpoint invalidates a subject's authentication session. After revoking the authentication
+    session, the subject
+    has to re-authenticate at ORY Hydra. This endpoint does not invalidate any tokens and does not work
+    with OpenID Connect
+    Front- or Back-channel logout.
+
+    Args:
+        subject (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        subject=subject,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    subject: str,
+) -> Response[Union[Any, GenericError]]:
+    """Invalidates All Login Sessions of a Certain User
+    Invalidates a Subject's Authentication Session
+
+     This endpoint invalidates a subject's authentication session. After revoking the authentication
+    session, the subject
+    has to re-authenticate at ORY Hydra. This endpoint does not invalidate any tokens and does not work
+    with OpenID Connect
+    Front- or Back-channel logout.
+
+    Args:
+        subject (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        subject=subject,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    subject: str,
+) -> Optional[Union[Any, GenericError]]:
+    """Invalidates All Login Sessions of a Certain User
+    Invalidates a Subject's Authentication Session
+
+     This endpoint invalidates a subject's authentication session. After revoking the authentication
+    session, the subject
+    has to re-authenticate at ORY Hydra. This endpoint does not invalidate any tokens and does not work
+    with OpenID Connect
+    Front- or Back-channel logout.
+
+    Args:
+        subject (str):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            subject=subject,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/revoke_consent_sessions.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/revoke_consent_sessions.py
new file mode 100644
index 0000000..38a6383
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/revoke_consent_sessions.py
@@ -0,0 +1,200 @@
+from typing import Any, Dict, Optional, Union, cast
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...types import UNSET, Response, Unset
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+    subject: str,
+    client: Union[Unset, None, str] = UNSET,
+    all_: Union[Unset, None, bool] = UNSET,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/auth/sessions/consent".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    params: Dict[str, Any] = {}
+    params["subject"] = subject
+
+    params["client"] = client
+
+    params["all"] = all_
+
+    params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+
+    return {
+        "method": "delete",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "params": params,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[Any, GenericError]]:
+    if response.status_code == 204:
+        response_204 = cast(Any, None)
+        return response_204
+    if response.status_code == 400:
+        response_400 = GenericError.from_dict(response.json())
+
+        return response_400
+    if response.status_code == 404:
+        response_404 = GenericError.from_dict(response.json())
+
+        return response_404
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[Any, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+    subject: str,
+    client: Union[Unset, None, str] = UNSET,
+    all_: Union[Unset, None, bool] = UNSET,
+) -> Response[Union[Any, GenericError]]:
+    """Revokes Consent Sessions of a Subject for a Specific OAuth 2.0 Client
+
+     This endpoint revokes a subject's granted consent sessions for a specific OAuth 2.0 Client and
+    invalidates all
+    associated OAuth 2.0 Access Tokens.
+
+    Args:
+        subject (str):
+        client (Union[Unset, None, str]):
+        all_ (Union[Unset, None, bool]):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        subject=subject,
+        client=client,
+        all_=all_,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+    subject: str,
+    client: Union[Unset, None, str] = UNSET,
+    all_: Union[Unset, None, bool] = UNSET,
+) -> Optional[Union[Any, GenericError]]:
+    """Revokes Consent Sessions of a Subject for a Specific OAuth 2.0 Client
+
+     This endpoint revokes a subject's granted consent sessions for a specific OAuth 2.0 Client and
+    invalidates all
+    associated OAuth 2.0 Access Tokens.
+
+    Args:
+        subject (str):
+        client (Union[Unset, None, str]):
+        all_ (Union[Unset, None, bool]):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+        subject=subject,
+        client=client,
+        all_=all_,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+    subject: str,
+    client: Union[Unset, None, str] = UNSET,
+    all_: Union[Unset, None, bool] = UNSET,
+) -> Response[Union[Any, GenericError]]:
+    """Revokes Consent Sessions of a Subject for a Specific OAuth 2.0 Client
+
+     This endpoint revokes a subject's granted consent sessions for a specific OAuth 2.0 Client and
+    invalidates all
+    associated OAuth 2.0 Access Tokens.
+
+    Args:
+        subject (str):
+        client (Union[Unset, None, str]):
+        all_ (Union[Unset, None, bool]):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+        subject=subject,
+        client=client,
+        all_=all_,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+    subject: str,
+    client: Union[Unset, None, str] = UNSET,
+    all_: Union[Unset, None, bool] = UNSET,
+) -> Optional[Union[Any, GenericError]]:
+    """Revokes Consent Sessions of a Subject for a Specific OAuth 2.0 Client
+
+     This endpoint revokes a subject's granted consent sessions for a specific OAuth 2.0 Client and
+    invalidates all
+    associated OAuth 2.0 Access Tokens.
+
+    Args:
+        subject (str):
+        client (Union[Unset, None, str]):
+        all_ (Union[Unset, None, bool]):
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+            subject=subject,
+            client=client,
+            all_=all_,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/update_json_web_key.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/update_json_web_key.py
new file mode 100644
index 0000000..3cd9b14
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/update_json_web_key.py
@@ -0,0 +1,223 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.json_web_key import JSONWebKey
+from ...types import Response
+
+
+def _get_kwargs(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+    json_body: JSONWebKey,
+) -> Dict[str, Any]:
+    url = "{}/keys/{set}/{kid}".format(_client.base_url, set=set_, kid=kid)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    json_json_body = json_body.to_dict()
+
+    return {
+        "method": "put",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "json": json_json_body,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, JSONWebKey]]:
+    if response.status_code == 200:
+        response_200 = JSONWebKey.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 403:
+        response_403 = GenericError.from_dict(response.json())
+
+        return response_403
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, JSONWebKey]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+    json_body: JSONWebKey,
+) -> Response[Union[GenericError, JSONWebKey]]:
+    """Update a JSON Web Key
+
+     Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your
+    own.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        kid (str):
+        json_body (JSONWebKey): It is important that this model object is named JSONWebKey for
+            "swagger generate spec" to generate only on definition of a
+            JSONWebKey.
+
+    Returns:
+        Response[Union[GenericError, JSONWebKey]]
+    """
+
+    kwargs = _get_kwargs(
+        set_=set_,
+        kid=kid,
+        _client=_client,
+        json_body=json_body,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+    json_body: JSONWebKey,
+) -> Optional[Union[GenericError, JSONWebKey]]:
+    """Update a JSON Web Key
+
+     Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your
+    own.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        kid (str):
+        json_body (JSONWebKey): It is important that this model object is named JSONWebKey for
+            "swagger generate spec" to generate only on definition of a
+            JSONWebKey.
+
+    Returns:
+        Response[Union[GenericError, JSONWebKey]]
+    """
+
+    return sync_detailed(
+        set_=set_,
+        kid=kid,
+        _client=_client,
+        json_body=json_body,
+    ).parsed
+
+
+async def asyncio_detailed(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+    json_body: JSONWebKey,
+) -> Response[Union[GenericError, JSONWebKey]]:
+    """Update a JSON Web Key
+
+     Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your
+    own.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        kid (str):
+        json_body (JSONWebKey): It is important that this model object is named JSONWebKey for
+            "swagger generate spec" to generate only on definition of a
+            JSONWebKey.
+
+    Returns:
+        Response[Union[GenericError, JSONWebKey]]
+    """
+
+    kwargs = _get_kwargs(
+        set_=set_,
+        kid=kid,
+        _client=_client,
+        json_body=json_body,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    set_: str,
+    kid: str,
+    *,
+    _client: Client,
+    json_body: JSONWebKey,
+) -> Optional[Union[GenericError, JSONWebKey]]:
+    """Update a JSON Web Key
+
+     Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your
+    own.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        kid (str):
+        json_body (JSONWebKey): It is important that this model object is named JSONWebKey for
+            "swagger generate spec" to generate only on definition of a
+            JSONWebKey.
+
+    Returns:
+        Response[Union[GenericError, JSONWebKey]]
+    """
+
+    return (
+        await asyncio_detailed(
+            set_=set_,
+            kid=kid,
+            _client=_client,
+            json_body=json_body,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/update_json_web_key_set.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/update_json_web_key_set.py
new file mode 100644
index 0000000..c50eb3b
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/update_json_web_key_set.py
@@ -0,0 +1,222 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.json_web_key_set import JSONWebKeySet
+from ...types import Response
+
+
+def _get_kwargs(
+    set_: str,
+    *,
+    _client: Client,
+    json_body: JSONWebKeySet,
+) -> Dict[str, Any]:
+    url = "{}/keys/{set}".format(_client.base_url, set=set_)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    json_json_body = json_body.to_dict()
+
+    return {
+        "method": "put",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "json": json_json_body,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    if response.status_code == 200:
+        response_200 = JSONWebKeySet.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 403:
+        response_403 = GenericError.from_dict(response.json())
+
+        return response_403
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, JSONWebKeySet]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    set_: str,
+    *,
+    _client: Client,
+    json_body: JSONWebKeySet,
+) -> Response[Union[GenericError, JSONWebKeySet]]:
+    """Update a JSON Web Key Set
+
+     Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your
+    own.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        json_body (JSONWebKeySet): It is important that this model object is named JSONWebKeySet
+            for
+            "swagger generate spec" to generate only on definition of a
+            JSONWebKeySet. Since one with the same name is previously defined as
+            client.Client.JSONWebKeys and this one is last, this one will be
+            effectively written in the swagger spec.
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    kwargs = _get_kwargs(
+        set_=set_,
+        _client=_client,
+        json_body=json_body,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    set_: str,
+    *,
+    _client: Client,
+    json_body: JSONWebKeySet,
+) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    """Update a JSON Web Key Set
+
+     Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your
+    own.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        json_body (JSONWebKeySet): It is important that this model object is named JSONWebKeySet
+            for
+            "swagger generate spec" to generate only on definition of a
+            JSONWebKeySet. Since one with the same name is previously defined as
+            client.Client.JSONWebKeys and this one is last, this one will be
+            effectively written in the swagger spec.
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    return sync_detailed(
+        set_=set_,
+        _client=_client,
+        json_body=json_body,
+    ).parsed
+
+
+async def asyncio_detailed(
+    set_: str,
+    *,
+    _client: Client,
+    json_body: JSONWebKeySet,
+) -> Response[Union[GenericError, JSONWebKeySet]]:
+    """Update a JSON Web Key Set
+
+     Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your
+    own.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        json_body (JSONWebKeySet): It is important that this model object is named JSONWebKeySet
+            for
+            "swagger generate spec" to generate only on definition of a
+            JSONWebKeySet. Since one with the same name is previously defined as
+            client.Client.JSONWebKeys and this one is last, this one will be
+            effectively written in the swagger spec.
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    kwargs = _get_kwargs(
+        set_=set_,
+        _client=_client,
+        json_body=json_body,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    set_: str,
+    *,
+    _client: Client,
+    json_body: JSONWebKeySet,
+) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    """Update a JSON Web Key Set
+
+     Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your
+    own.
+
+    A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a
+    cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key
+    is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys
+    used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined
+    keys as well.
+
+    Args:
+        set_ (str):
+        json_body (JSONWebKeySet): It is important that this model object is named JSONWebKeySet
+            for
+            "swagger generate spec" to generate only on definition of a
+            JSONWebKeySet. Since one with the same name is previously defined as
+            client.Client.JSONWebKeys and this one is last, this one will be
+            effectively written in the swagger spec.
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    return (
+        await asyncio_detailed(
+            set_=set_,
+            _client=_client,
+            json_body=json_body,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/admin/update_o_auth_2_client.py b/libs/ory-hydra-client/ory_hydra_client/api/admin/update_o_auth_2_client.py
new file mode 100644
index 0000000..bc72391
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/admin/update_o_auth_2_client.py
@@ -0,0 +1,194 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.o_auth_2_client import OAuth2Client
+from ...types import Response
+
+
+def _get_kwargs(
+    id: str,
+    *,
+    _client: Client,
+    json_body: OAuth2Client,
+) -> Dict[str, Any]:
+    url = "{}/clients/{id}".format(_client.base_url, id=id)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    json_json_body = json_body.to_dict()
+
+    return {
+        "method": "put",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        "json": json_json_body,
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, OAuth2Client]]:
+    if response.status_code == 200:
+        response_200 = OAuth2Client.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, OAuth2Client]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    id: str,
+    *,
+    _client: Client,
+    json_body: OAuth2Client,
+) -> Response[Union[GenericError, OAuth2Client]]:
+    """Update an OAuth 2.0 Client
+
+     Update an existing OAuth 2.0 Client. If you pass `client_secret` the secret will be updated and
+    returned via the API. This is the only time you will be able to retrieve the client secret, so write
+    it down and keep it safe.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        id (str):
+        json_body (OAuth2Client):
+
+    Returns:
+        Response[Union[GenericError, OAuth2Client]]
+    """
+
+    kwargs = _get_kwargs(
+        id=id,
+        _client=_client,
+        json_body=json_body,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    id: str,
+    *,
+    _client: Client,
+    json_body: OAuth2Client,
+) -> Optional[Union[GenericError, OAuth2Client]]:
+    """Update an OAuth 2.0 Client
+
+     Update an existing OAuth 2.0 Client. If you pass `client_secret` the secret will be updated and
+    returned via the API. This is the only time you will be able to retrieve the client secret, so write
+    it down and keep it safe.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        id (str):
+        json_body (OAuth2Client):
+
+    Returns:
+        Response[Union[GenericError, OAuth2Client]]
+    """
+
+    return sync_detailed(
+        id=id,
+        _client=_client,
+        json_body=json_body,
+    ).parsed
+
+
+async def asyncio_detailed(
+    id: str,
+    *,
+    _client: Client,
+    json_body: OAuth2Client,
+) -> Response[Union[GenericError, OAuth2Client]]:
+    """Update an OAuth 2.0 Client
+
+     Update an existing OAuth 2.0 Client. If you pass `client_secret` the secret will be updated and
+    returned via the API. This is the only time you will be able to retrieve the client secret, so write
+    it down and keep it safe.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        id (str):
+        json_body (OAuth2Client):
+
+    Returns:
+        Response[Union[GenericError, OAuth2Client]]
+    """
+
+    kwargs = _get_kwargs(
+        id=id,
+        _client=_client,
+        json_body=json_body,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    id: str,
+    *,
+    _client: Client,
+    json_body: OAuth2Client,
+) -> Optional[Union[GenericError, OAuth2Client]]:
+    """Update an OAuth 2.0 Client
+
+     Update an existing OAuth 2.0 Client. If you pass `client_secret` the secret will be updated and
+    returned via the API. This is the only time you will be able to retrieve the client secret, so write
+    it down and keep it safe.
+
+    OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients
+    are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+    To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well
+    protected and only callable by first-party components.
+
+    Args:
+        id (str):
+        json_body (OAuth2Client):
+
+    Returns:
+        Response[Union[GenericError, OAuth2Client]]
+    """
+
+    return (
+        await asyncio_detailed(
+            id=id,
+            _client=_client,
+            json_body=json_body,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/public/__init__.py b/libs/ory-hydra-client/ory_hydra_client/api/public/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/public/disconnect_user.py b/libs/ory-hydra-client/ory_hydra_client/api/public/disconnect_user.py
new file mode 100644
index 0000000..979b8bf
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/public/disconnect_user.py
@@ -0,0 +1,87 @@
+from typing import Any, Dict
+
+import httpx
+
+from ...client import Client
+from ...types import Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/sessions/logout".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _build_response(*, response: httpx.Response) -> Response[Any]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=None,
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+) -> Response[Any]:
+    """OpenID Connect Front-Backchannel Enabled Logout
+
+     This endpoint initiates and completes user logout at ORY Hydra and initiates OpenID Connect
+    Front-/Back-channel logout:
+
+    https://openid.net/specs/openid-connect-frontchannel-1_0.html
+    https://openid.net/specs/openid-connect-backchannel-1_0.html
+
+    Returns:
+        Response[Any]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+) -> Response[Any]:
+    """OpenID Connect Front-Backchannel Enabled Logout
+
+     This endpoint initiates and completes user logout at ORY Hydra and initiates OpenID Connect
+    Front-/Back-channel logout:
+
+    https://openid.net/specs/openid-connect-frontchannel-1_0.html
+    https://openid.net/specs/openid-connect-backchannel-1_0.html
+
+    Returns:
+        Response[Any]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/public/discover_open_id_configuration.py b/libs/ory-hydra-client/ory_hydra_client/api/public/discover_open_id_configuration.py
new file mode 100644
index 0000000..63f59f1
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/public/discover_open_id_configuration.py
@@ -0,0 +1,165 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.well_known import WellKnown
+from ...types import Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/.well-known/openid-configuration".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, WellKnown]]:
+    if response.status_code == 200:
+        response_200 = WellKnown.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, WellKnown]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+) -> Response[Union[GenericError, WellKnown]]:
+    """OpenID Connect Discovery
+
+     The well known endpoint an be used to retrieve information for OpenID Connect clients. We encourage
+    you to not roll
+    your own OpenID Connect client but to use an OpenID Connect client library instead. You can learn
+    more on this
+    flow at https://openid.net/specs/openid-connect-discovery-1_0.html .
+
+    Popular libraries for OpenID Connect clients include oidc-client-js (JavaScript), go-oidc (Golang),
+    and others.
+    For a full list of clients go here: https://openid.net/developers/certified/
+
+    Returns:
+        Response[Union[GenericError, WellKnown]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+) -> Optional[Union[GenericError, WellKnown]]:
+    """OpenID Connect Discovery
+
+     The well known endpoint an be used to retrieve information for OpenID Connect clients. We encourage
+    you to not roll
+    your own OpenID Connect client but to use an OpenID Connect client library instead. You can learn
+    more on this
+    flow at https://openid.net/specs/openid-connect-discovery-1_0.html .
+
+    Popular libraries for OpenID Connect clients include oidc-client-js (JavaScript), go-oidc (Golang),
+    and others.
+    For a full list of clients go here: https://openid.net/developers/certified/
+
+    Returns:
+        Response[Union[GenericError, WellKnown]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+) -> Response[Union[GenericError, WellKnown]]:
+    """OpenID Connect Discovery
+
+     The well known endpoint an be used to retrieve information for OpenID Connect clients. We encourage
+    you to not roll
+    your own OpenID Connect client but to use an OpenID Connect client library instead. You can learn
+    more on this
+    flow at https://openid.net/specs/openid-connect-discovery-1_0.html .
+
+    Popular libraries for OpenID Connect clients include oidc-client-js (JavaScript), go-oidc (Golang),
+    and others.
+    For a full list of clients go here: https://openid.net/developers/certified/
+
+    Returns:
+        Response[Union[GenericError, WellKnown]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+) -> Optional[Union[GenericError, WellKnown]]:
+    """OpenID Connect Discovery
+
+     The well known endpoint an be used to retrieve information for OpenID Connect clients. We encourage
+    you to not roll
+    your own OpenID Connect client but to use an OpenID Connect client library instead. You can learn
+    more on this
+    flow at https://openid.net/specs/openid-connect-discovery-1_0.html .
+
+    Popular libraries for OpenID Connect clients include oidc-client-js (JavaScript), go-oidc (Golang),
+    and others.
+    For a full list of clients go here: https://openid.net/developers/certified/
+
+    Returns:
+        Response[Union[GenericError, WellKnown]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/public/is_instance_ready.py b/libs/ory-hydra-client/ory_hydra_client/api/public/is_instance_ready.py
new file mode 100644
index 0000000..12f06a7
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/public/is_instance_ready.py
@@ -0,0 +1,161 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.health_not_ready_status import HealthNotReadyStatus
+from ...models.health_status import HealthStatus
+from ...types import Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/health/ready".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[HealthNotReadyStatus, HealthStatus]]:
+    if response.status_code == 200:
+        response_200 = HealthStatus.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 503:
+        response_503 = HealthNotReadyStatus.from_dict(response.json())
+
+        return response_503
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[HealthNotReadyStatus, HealthStatus]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+) -> Response[Union[HealthNotReadyStatus, HealthStatus]]:
+    """Check Readiness Status
+
+     This endpoint returns a 200 status code when the HTTP server is up running and the environment
+    dependencies (e.g.
+    the database) are responsive as well.
+
+    If the service supports TLS Edge Termination, this endpoint does not require the
+    `X-Forwarded-Proto` header to be set.
+
+    Be aware that if you are running multiple nodes of this service, the health status will never
+    refer to the cluster state, only to a single instance.
+
+    Returns:
+        Response[Union[HealthNotReadyStatus, HealthStatus]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+) -> Optional[Union[HealthNotReadyStatus, HealthStatus]]:
+    """Check Readiness Status
+
+     This endpoint returns a 200 status code when the HTTP server is up running and the environment
+    dependencies (e.g.
+    the database) are responsive as well.
+
+    If the service supports TLS Edge Termination, this endpoint does not require the
+    `X-Forwarded-Proto` header to be set.
+
+    Be aware that if you are running multiple nodes of this service, the health status will never
+    refer to the cluster state, only to a single instance.
+
+    Returns:
+        Response[Union[HealthNotReadyStatus, HealthStatus]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+) -> Response[Union[HealthNotReadyStatus, HealthStatus]]:
+    """Check Readiness Status
+
+     This endpoint returns a 200 status code when the HTTP server is up running and the environment
+    dependencies (e.g.
+    the database) are responsive as well.
+
+    If the service supports TLS Edge Termination, this endpoint does not require the
+    `X-Forwarded-Proto` header to be set.
+
+    Be aware that if you are running multiple nodes of this service, the health status will never
+    refer to the cluster state, only to a single instance.
+
+    Returns:
+        Response[Union[HealthNotReadyStatus, HealthStatus]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+) -> Optional[Union[HealthNotReadyStatus, HealthStatus]]:
+    """Check Readiness Status
+
+     This endpoint returns a 200 status code when the HTTP server is up running and the environment
+    dependencies (e.g.
+    the database) are responsive as well.
+
+    If the service supports TLS Edge Termination, this endpoint does not require the
+    `X-Forwarded-Proto` header to be set.
+
+    Be aware that if you are running multiple nodes of this service, the health status will never
+    refer to the cluster state, only to a single instance.
+
+    Returns:
+        Response[Union[HealthNotReadyStatus, HealthStatus]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/public/oauth_2_token.py b/libs/ory-hydra-client/ory_hydra_client/api/public/oauth_2_token.py
new file mode 100644
index 0000000..06a7c08
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/public/oauth_2_token.py
@@ -0,0 +1,173 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import AuthenticatedClient
+from ...models.generic_error import GenericError
+from ...models.oauth_2_token_response import Oauth2TokenResponse
+from ...types import Response
+
+
+def _get_kwargs(
+    *,
+    _client: AuthenticatedClient,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/token".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "post",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, Oauth2TokenResponse]]:
+    if response.status_code == 200:
+        response_200 = Oauth2TokenResponse.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 400:
+        response_400 = GenericError.from_dict(response.json())
+
+        return response_400
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, Oauth2TokenResponse]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: AuthenticatedClient,
+) -> Response[Union[GenericError, Oauth2TokenResponse]]:
+    """The OAuth 2.0 Token Endpoint
+
+     The client makes a request to the token endpoint by sending the
+    following parameters using the \"application/x-www-form-urlencoded\" HTTP
+    request entity-body.
+
+    > Do not implement a client for this endpoint yourself. Use a library. There are many libraries
+    > available for any programming language. You can find a list of libraries here:
+    https://oauth.net/code/
+    >
+    > Do note that Hydra SDK does not implement this endpoint properly. Use one of the libraries listed
+    above!
+
+    Returns:
+        Response[Union[GenericError, Oauth2TokenResponse]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: AuthenticatedClient,
+) -> Optional[Union[GenericError, Oauth2TokenResponse]]:
+    """The OAuth 2.0 Token Endpoint
+
+     The client makes a request to the token endpoint by sending the
+    following parameters using the \"application/x-www-form-urlencoded\" HTTP
+    request entity-body.
+
+    > Do not implement a client for this endpoint yourself. Use a library. There are many libraries
+    > available for any programming language. You can find a list of libraries here:
+    https://oauth.net/code/
+    >
+    > Do note that Hydra SDK does not implement this endpoint properly. Use one of the libraries listed
+    above!
+
+    Returns:
+        Response[Union[GenericError, Oauth2TokenResponse]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: AuthenticatedClient,
+) -> Response[Union[GenericError, Oauth2TokenResponse]]:
+    """The OAuth 2.0 Token Endpoint
+
+     The client makes a request to the token endpoint by sending the
+    following parameters using the \"application/x-www-form-urlencoded\" HTTP
+    request entity-body.
+
+    > Do not implement a client for this endpoint yourself. Use a library. There are many libraries
+    > available for any programming language. You can find a list of libraries here:
+    https://oauth.net/code/
+    >
+    > Do note that Hydra SDK does not implement this endpoint properly. Use one of the libraries listed
+    above!
+
+    Returns:
+        Response[Union[GenericError, Oauth2TokenResponse]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: AuthenticatedClient,
+) -> Optional[Union[GenericError, Oauth2TokenResponse]]:
+    """The OAuth 2.0 Token Endpoint
+
+     The client makes a request to the token endpoint by sending the
+    following parameters using the \"application/x-www-form-urlencoded\" HTTP
+    request entity-body.
+
+    > Do not implement a client for this endpoint yourself. Use a library. There are many libraries
+    > available for any programming language. You can find a list of libraries here:
+    https://oauth.net/code/
+    >
+    > Do note that Hydra SDK does not implement this endpoint properly. Use one of the libraries listed
+    above!
+
+    Returns:
+        Response[Union[GenericError, Oauth2TokenResponse]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/public/oauth_auth.py b/libs/ory-hydra-client/ory_hydra_client/api/public/oauth_auth.py
new file mode 100644
index 0000000..9dd3707
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/public/oauth_auth.py
@@ -0,0 +1,147 @@
+from typing import Any, Dict, Optional, Union, cast
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...types import Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/auth".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[Any, GenericError]]:
+    if response.status_code == 302:
+        response_302 = cast(Any, None)
+        return response_302
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[Any, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+) -> Response[Union[Any, GenericError]]:
+    """The OAuth 2.0 Authorize Endpoint
+
+     This endpoint is not documented here because you should never use your own implementation to perform
+    OAuth2 flows.
+    OAuth2 is a very popular protocol and a library for your programming language will exists.
+
+    To learn more about this flow please refer to the specification: https://tools.ietf.org/html/rfc6749
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+) -> Optional[Union[Any, GenericError]]:
+    """The OAuth 2.0 Authorize Endpoint
+
+     This endpoint is not documented here because you should never use your own implementation to perform
+    OAuth2 flows.
+    OAuth2 is a very popular protocol and a library for your programming language will exists.
+
+    To learn more about this flow please refer to the specification: https://tools.ietf.org/html/rfc6749
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+) -> Response[Union[Any, GenericError]]:
+    """The OAuth 2.0 Authorize Endpoint
+
+     This endpoint is not documented here because you should never use your own implementation to perform
+    OAuth2 flows.
+    OAuth2 is a very popular protocol and a library for your programming language will exists.
+
+    To learn more about this flow please refer to the specification: https://tools.ietf.org/html/rfc6749
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+) -> Optional[Union[Any, GenericError]]:
+    """The OAuth 2.0 Authorize Endpoint
+
+     This endpoint is not documented here because you should never use your own implementation to perform
+    OAuth2 flows.
+    OAuth2 is a very popular protocol and a library for your programming language will exists.
+
+    To learn more about this flow please refer to the specification: https://tools.ietf.org/html/rfc6749
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/public/revoke_o_auth_2_token.py b/libs/ory-hydra-client/ory_hydra_client/api/public/revoke_o_auth_2_token.py
new file mode 100644
index 0000000..0534365
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/public/revoke_o_auth_2_token.py
@@ -0,0 +1,155 @@
+from typing import Any, Dict, Optional, Union, cast
+
+import httpx
+
+from ...client import AuthenticatedClient
+from ...models.generic_error import GenericError
+from ...types import Response
+
+
+def _get_kwargs(
+    *,
+    _client: AuthenticatedClient,
+) -> Dict[str, Any]:
+    url = "{}/oauth2/revoke".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "post",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[Any, GenericError]]:
+    if response.status_code == 200:
+        response_200 = cast(Any, None)
+        return response_200
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[Any, GenericError]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: AuthenticatedClient,
+) -> Response[Union[Any, GenericError]]:
+    """Revoke OAuth2 Tokens
+
+     Revoking a token (both access and refresh) means that the tokens will be invalid. A revoked access
+    token can no
+    longer be used to make access requests, and a revoked refresh token can no longer be used to refresh
+    an access token.
+    Revoking a refresh token also invalidates the access token that was created with it. A token may
+    only be revoked by
+    the client the token was generated for.
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: AuthenticatedClient,
+) -> Optional[Union[Any, GenericError]]:
+    """Revoke OAuth2 Tokens
+
+     Revoking a token (both access and refresh) means that the tokens will be invalid. A revoked access
+    token can no
+    longer be used to make access requests, and a revoked refresh token can no longer be used to refresh
+    an access token.
+    Revoking a refresh token also invalidates the access token that was created with it. A token may
+    only be revoked by
+    the client the token was generated for.
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: AuthenticatedClient,
+) -> Response[Union[Any, GenericError]]:
+    """Revoke OAuth2 Tokens
+
+     Revoking a token (both access and refresh) means that the tokens will be invalid. A revoked access
+    token can no
+    longer be used to make access requests, and a revoked refresh token can no longer be used to refresh
+    an access token.
+    Revoking a refresh token also invalidates the access token that was created with it. A token may
+    only be revoked by
+    the client the token was generated for.
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: AuthenticatedClient,
+) -> Optional[Union[Any, GenericError]]:
+    """Revoke OAuth2 Tokens
+
+     Revoking a token (both access and refresh) means that the tokens will be invalid. A revoked access
+    token can no
+    longer be used to make access requests, and a revoked refresh token can no longer be used to refresh
+    an access token.
+    Revoking a refresh token also invalidates the access token that was created with it. A token may
+    only be revoked by
+    the client the token was generated for.
+
+    Returns:
+        Response[Union[Any, GenericError]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/public/userinfo.py b/libs/ory-hydra-client/ory_hydra_client/api/public/userinfo.py
new file mode 100644
index 0000000..1e8f177
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/public/userinfo.py
@@ -0,0 +1,149 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import AuthenticatedClient
+from ...models.generic_error import GenericError
+from ...models.userinfo_response import UserinfoResponse
+from ...types import Response
+
+
+def _get_kwargs(
+    *,
+    _client: AuthenticatedClient,
+) -> Dict[str, Any]:
+    url = "{}/userinfo".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, UserinfoResponse]]:
+    if response.status_code == 200:
+        response_200 = UserinfoResponse.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 401:
+        response_401 = GenericError.from_dict(response.json())
+
+        return response_401
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, UserinfoResponse]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: AuthenticatedClient,
+) -> Response[Union[GenericError, UserinfoResponse]]:
+    """OpenID Connect Userinfo
+
+     This endpoint returns the payload of the ID Token, including the idTokenExtra values, of
+    the provided OAuth 2.0 Access Token.
+
+    For more information please [refer to the spec](http://openid.net/specs/openid-connect-
+    core-1_0.html#UserInfo).
+
+    Returns:
+        Response[Union[GenericError, UserinfoResponse]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: AuthenticatedClient,
+) -> Optional[Union[GenericError, UserinfoResponse]]:
+    """OpenID Connect Userinfo
+
+     This endpoint returns the payload of the ID Token, including the idTokenExtra values, of
+    the provided OAuth 2.0 Access Token.
+
+    For more information please [refer to the spec](http://openid.net/specs/openid-connect-
+    core-1_0.html#UserInfo).
+
+    Returns:
+        Response[Union[GenericError, UserinfoResponse]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: AuthenticatedClient,
+) -> Response[Union[GenericError, UserinfoResponse]]:
+    """OpenID Connect Userinfo
+
+     This endpoint returns the payload of the ID Token, including the idTokenExtra values, of
+    the provided OAuth 2.0 Access Token.
+
+    For more information please [refer to the spec](http://openid.net/specs/openid-connect-
+    core-1_0.html#UserInfo).
+
+    Returns:
+        Response[Union[GenericError, UserinfoResponse]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: AuthenticatedClient,
+) -> Optional[Union[GenericError, UserinfoResponse]]:
+    """OpenID Connect Userinfo
+
+     This endpoint returns the payload of the ID Token, including the idTokenExtra values, of
+    the provided OAuth 2.0 Access Token.
+
+    For more information please [refer to the spec](http://openid.net/specs/openid-connect-
+    core-1_0.html#UserInfo).
+
+    Returns:
+        Response[Union[GenericError, UserinfoResponse]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/api/public/well_known.py b/libs/ory-hydra-client/ory_hydra_client/api/public/well_known.py
new file mode 100644
index 0000000..dca570c
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/api/public/well_known.py
@@ -0,0 +1,141 @@
+from typing import Any, Dict, Optional, Union
+
+import httpx
+
+from ...client import Client
+from ...models.generic_error import GenericError
+from ...models.json_web_key_set import JSONWebKeySet
+from ...types import Response
+
+
+def _get_kwargs(
+    *,
+    _client: Client,
+) -> Dict[str, Any]:
+    url = "{}/.well-known/jwks.json".format(_client.base_url)
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    return {
+        "method": "get",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+    }
+
+
+def _parse_response(*, response: httpx.Response) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    if response.status_code == 200:
+        response_200 = JSONWebKeySet.from_dict(response.json())
+
+        return response_200
+    if response.status_code == 500:
+        response_500 = GenericError.from_dict(response.json())
+
+        return response_500
+    return None
+
+
+def _build_response(*, response: httpx.Response) -> Response[Union[GenericError, JSONWebKeySet]]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        parsed=_parse_response(response=response),
+    )
+
+
+def sync_detailed(
+    *,
+    _client: Client,
+) -> Response[Union[GenericError, JSONWebKeySet]]:
+    """JSON Web Keys Discovery
+
+     This endpoint returns JSON Web Keys to be used as public keys for verifying OpenID Connect ID Tokens
+    and,
+    if enabled, OAuth 2.0 JWT Access Tokens. This endpoint can be used with client libraries like
+    [node-jwks-rsa](https://github.com/auth0/node-jwks-rsa) among others.
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+
+def sync(
+    *,
+    _client: Client,
+) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    """JSON Web Keys Discovery
+
+     This endpoint returns JSON Web Keys to be used as public keys for verifying OpenID Connect ID Tokens
+    and,
+    if enabled, OAuth 2.0 JWT Access Tokens. This endpoint can be used with client libraries like
+    [node-jwks-rsa](https://github.com/auth0/node-jwks-rsa) among others.
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    return sync_detailed(
+        _client=_client,
+    ).parsed
+
+
+async def asyncio_detailed(
+    *,
+    _client: Client,
+) -> Response[Union[GenericError, JSONWebKeySet]]:
+    """JSON Web Keys Discovery
+
+     This endpoint returns JSON Web Keys to be used as public keys for verifying OpenID Connect ID Tokens
+    and,
+    if enabled, OAuth 2.0 JWT Access Tokens. This endpoint can be used with client libraries like
+    [node-jwks-rsa](https://github.com/auth0/node-jwks-rsa) among others.
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    kwargs = _get_kwargs(
+        _client=_client,
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(**kwargs)
+
+    return _build_response(response=response)
+
+
+async def asyncio(
+    *,
+    _client: Client,
+) -> Optional[Union[GenericError, JSONWebKeySet]]:
+    """JSON Web Keys Discovery
+
+     This endpoint returns JSON Web Keys to be used as public keys for verifying OpenID Connect ID Tokens
+    and,
+    if enabled, OAuth 2.0 JWT Access Tokens. This endpoint can be used with client libraries like
+    [node-jwks-rsa](https://github.com/auth0/node-jwks-rsa) among others.
+
+    Returns:
+        Response[Union[GenericError, JSONWebKeySet]]
+    """
+
+    return (
+        await asyncio_detailed(
+            _client=_client,
+        )
+    ).parsed
diff --git a/libs/ory-hydra-client/ory_hydra_client/client.py b/libs/ory-hydra-client/ory_hydra_client/client.py
new file mode 100644
index 0000000..9d36709
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/client.py
@@ -0,0 +1,48 @@
+import ssl
+from typing import Dict, Union
+
+import attr
+
+
+@attr.s(auto_attribs=True)
+class Client:
+    """A class for keeping track of data related to the API"""
+
+    base_url: str
+    cookies: Dict[str, str] = attr.ib(factory=dict, kw_only=True)
+    headers: Dict[str, str] = attr.ib(factory=dict, kw_only=True)
+    timeout: float = attr.ib(5.0, kw_only=True)
+    verify_ssl: Union[str, bool, ssl.SSLContext] = attr.ib(True, kw_only=True)
+
+    def get_headers(self) -> Dict[str, str]:
+        """Get headers to be used in all endpoints"""
+        return {**self.headers}
+
+    def with_headers(self, headers: Dict[str, str]) -> "Client":
+        """Get a new client matching this one with additional headers"""
+        return attr.evolve(self, headers={**self.headers, **headers})
+
+    def get_cookies(self) -> Dict[str, str]:
+        return {**self.cookies}
+
+    def with_cookies(self, cookies: Dict[str, str]) -> "Client":
+        """Get a new client matching this one with additional cookies"""
+        return attr.evolve(self, cookies={**self.cookies, **cookies})
+
+    def get_timeout(self) -> float:
+        return self.timeout
+
+    def with_timeout(self, timeout: float) -> "Client":
+        """Get a new client matching this one with a new timeout (in seconds)"""
+        return attr.evolve(self, timeout=timeout)
+
+
+@attr.s(auto_attribs=True)
+class AuthenticatedClient(Client):
+    """A Client which has been authenticated for use on secured endpoints"""
+
+    token: str
+
+    def get_headers(self) -> Dict[str, str]:
+        """Get headers to be used in authenticated endpoints"""
+        return {"Authorization": f"Bearer {self.token}", **self.headers}
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/__init__.py b/libs/ory-hydra-client/ory_hydra_client/models/__init__.py
new file mode 100644
index 0000000..10a420f
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/__init__.py
@@ -0,0 +1,46 @@
+""" Contains all the data models used in inputs/outputs """
+
+from .accept_consent_request import AcceptConsentRequest
+from .accept_login_request import AcceptLoginRequest
+from .completed_request import CompletedRequest
+from .consent_request import ConsentRequest
+from .consent_request_session import ConsentRequestSession
+from .consent_request_session_access_token import ConsentRequestSessionAccessToken
+from .consent_request_session_id_token import ConsentRequestSessionIdToken
+from .container_wait_ok_body_error import ContainerWaitOKBodyError
+from .flush_inactive_o_auth_2_tokens_request import FlushInactiveOAuth2TokensRequest
+from .generic_error import GenericError
+from .health_not_ready_status import HealthNotReadyStatus
+from .health_not_ready_status_errors import HealthNotReadyStatusErrors
+from .health_status import HealthStatus
+from .jose_json_web_key_set import JoseJSONWebKeySet
+from .json_raw_message import JSONRawMessage
+from .json_web_key import JSONWebKey
+from .json_web_key_set import JSONWebKeySet
+from .json_web_key_set_generator_request import JsonWebKeySetGeneratorRequest
+from .login_request import LoginRequest
+from .logout_request import LogoutRequest
+from .o_auth_2_client import OAuth2Client
+from .o_auth_2_token_introspection import OAuth2TokenIntrospection
+from .o_auth_2_token_introspection_ext import OAuth2TokenIntrospectionExt
+from .oauth_2_token_response import Oauth2TokenResponse
+from .open_id_connect_context import OpenIDConnectContext
+from .open_id_connect_context_id_token_hint_claims import OpenIDConnectContextIdTokenHintClaims
+from .plugin_config import PluginConfig
+from .plugin_config_args import PluginConfigArgs
+from .plugin_config_interface import PluginConfigInterface
+from .plugin_config_linux import PluginConfigLinux
+from .plugin_config_network import PluginConfigNetwork
+from .plugin_config_rootfs import PluginConfigRootfs
+from .plugin_config_user import PluginConfigUser
+from .plugin_device import PluginDevice
+from .plugin_env import PluginEnv
+from .plugin_interface_type import PluginInterfaceType
+from .plugin_mount import PluginMount
+from .plugin_settings import PluginSettings
+from .previous_consent_session import PreviousConsentSession
+from .reject_request import RejectRequest
+from .userinfo_response import UserinfoResponse
+from .version import Version
+from .volume_usage_data import VolumeUsageData
+from .well_known import WellKnown
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/accept_consent_request.py b/libs/ory-hydra-client/ory_hydra_client/models/accept_consent_request.py
new file mode 100644
index 0000000..137e3e1
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/accept_consent_request.py
@@ -0,0 +1,125 @@
+import datetime
+from typing import Any, Dict, List, Type, TypeVar, Union, cast
+
+import attr
+from dateutil.parser import isoparse
+
+from ..models.consent_request_session import ConsentRequestSession
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="AcceptConsentRequest")
+
+
+@attr.s(auto_attribs=True)
+class AcceptConsentRequest:
+    """
+    Attributes:
+        grant_access_token_audience (Union[Unset, List[str]]):
+        grant_scope (Union[Unset, List[str]]):
+        handled_at (Union[Unset, datetime.datetime]):
+        remember (Union[Unset, bool]): Remember, if set to true, tells ORY Hydra to remember this consent authorization
+            and reuse it if the same
+            client asks the same user for the same, or a subset of, scope.
+        remember_for (Union[Unset, int]): RememberFor sets how long the consent authorization should be remembered for
+            in seconds. If set to `0`, the
+            authorization will be remembered indefinitely.
+        session (Union[Unset, ConsentRequestSession]):
+    """
+
+    grant_access_token_audience: Union[Unset, List[str]] = UNSET
+    grant_scope: Union[Unset, List[str]] = UNSET
+    handled_at: Union[Unset, datetime.datetime] = UNSET
+    remember: Union[Unset, bool] = UNSET
+    remember_for: Union[Unset, int] = UNSET
+    session: Union[Unset, ConsentRequestSession] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        grant_access_token_audience: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.grant_access_token_audience, Unset):
+            grant_access_token_audience = self.grant_access_token_audience
+
+        grant_scope: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.grant_scope, Unset):
+            grant_scope = self.grant_scope
+
+        handled_at: Union[Unset, str] = UNSET
+        if not isinstance(self.handled_at, Unset):
+            handled_at = self.handled_at.isoformat()
+
+        remember = self.remember
+        remember_for = self.remember_for
+        session: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.session, Unset):
+            session = self.session.to_dict()
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if grant_access_token_audience is not UNSET:
+            field_dict["grant_access_token_audience"] = grant_access_token_audience
+        if grant_scope is not UNSET:
+            field_dict["grant_scope"] = grant_scope
+        if handled_at is not UNSET:
+            field_dict["handled_at"] = handled_at
+        if remember is not UNSET:
+            field_dict["remember"] = remember
+        if remember_for is not UNSET:
+            field_dict["remember_for"] = remember_for
+        if session is not UNSET:
+            field_dict["session"] = session
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        grant_access_token_audience = cast(List[str], _d.pop("grant_access_token_audience", UNSET))
+
+        grant_scope = cast(List[str], _d.pop("grant_scope", UNSET))
+
+        _handled_at = _d.pop("handled_at", UNSET)
+        handled_at: Union[Unset, datetime.datetime]
+        if isinstance(_handled_at, Unset):
+            handled_at = UNSET
+        else:
+            handled_at = isoparse(_handled_at)
+
+        remember = _d.pop("remember", UNSET)
+
+        remember_for = _d.pop("remember_for", UNSET)
+
+        _session = _d.pop("session", UNSET)
+        session: Union[Unset, ConsentRequestSession]
+        if isinstance(_session, Unset):
+            session = UNSET
+        else:
+            session = ConsentRequestSession.from_dict(_session)
+
+        accept_consent_request = cls(
+            grant_access_token_audience=grant_access_token_audience,
+            grant_scope=grant_scope,
+            handled_at=handled_at,
+            remember=remember,
+            remember_for=remember_for,
+            session=session,
+        )
+
+        accept_consent_request.additional_properties = _d
+        return accept_consent_request
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/accept_login_request.py b/libs/ory-hydra-client/ory_hydra_client/models/accept_login_request.py
new file mode 100644
index 0000000..f227fb9
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/accept_login_request.py
@@ -0,0 +1,135 @@
+from typing import Any, Dict, List, Type, TypeVar, Union
+
+import attr
+
+from ..models.json_raw_message import JSONRawMessage
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="AcceptLoginRequest")
+
+
+@attr.s(auto_attribs=True)
+class AcceptLoginRequest:
+    """
+    Attributes:
+        subject (str): Subject is the user ID of the end-user that authenticated.
+        acr (Union[Unset, str]): ACR sets the Authentication AuthorizationContext Class Reference value for this
+            authentication session. You can use it
+            to express that, for example, a user authenticated using two factor authentication.
+        context (Union[Unset, JSONRawMessage]):
+        force_subject_identifier (Union[Unset, str]): ForceSubjectIdentifier forces the "pairwise" user ID of the end-
+            user that authenticated. The "pairwise" user ID refers to the
+            (Pairwise Identifier Algorithm)[http://openid.net/specs/openid-connect-core-1_0.html#PairwiseAlg] of the OpenID
+            Connect specification. It allows you to set an obfuscated subject ("user") identifier that is unique to the
+            client.
+
+            Please note that this changes the user ID on endpoint /userinfo and sub claim of the ID Token. It does not
+            change the
+            sub claim in the OAuth 2.0 Introspection.
+
+            Per default, ORY Hydra handles this value with its own algorithm. In case you want to set this yourself
+            you can use this field. Please note that setting this field has no effect if `pairwise` is not configured in
+            ORY Hydra or the OAuth 2.0 Client does not expect a pairwise identifier (set via `subject_type` key in the
+            client's
+            configuration).
+
+            Please also be aware that ORY Hydra is unable to properly compute this value during authentication. This implies
+            that you have to compute this value on every authentication process (probably depending on the client ID or some
+            other unique value).
+
+            If you fail to compute the proper value, then authentication processes which have id_token_hint set might fail.
+        remember (Union[Unset, bool]): Remember, if set to true, tells ORY Hydra to remember this user by telling the
+            user agent (browser) to store
+            a cookie with authentication data. If the same user performs another OAuth 2.0 Authorization Request, he/she
+            will not be asked to log in again.
+        remember_for (Union[Unset, int]): RememberFor sets how long the authentication should be remembered for in
+            seconds. If set to `0`, the
+            authorization will be remembered for the duration of the browser session (using a session cookie).
+    """
+
+    subject: str
+    acr: Union[Unset, str] = UNSET
+    context: Union[Unset, JSONRawMessage] = UNSET
+    force_subject_identifier: Union[Unset, str] = UNSET
+    remember: Union[Unset, bool] = UNSET
+    remember_for: Union[Unset, int] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        subject = self.subject
+        acr = self.acr
+        context: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.context, Unset):
+            context = self.context.to_dict()
+
+        force_subject_identifier = self.force_subject_identifier
+        remember = self.remember
+        remember_for = self.remember_for
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "subject": subject,
+            }
+        )
+        if acr is not UNSET:
+            field_dict["acr"] = acr
+        if context is not UNSET:
+            field_dict["context"] = context
+        if force_subject_identifier is not UNSET:
+            field_dict["force_subject_identifier"] = force_subject_identifier
+        if remember is not UNSET:
+            field_dict["remember"] = remember
+        if remember_for is not UNSET:
+            field_dict["remember_for"] = remember_for
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        subject = _d.pop("subject")
+
+        acr = _d.pop("acr", UNSET)
+
+        _context = _d.pop("context", UNSET)
+        context: Union[Unset, JSONRawMessage]
+        if isinstance(_context, Unset):
+            context = UNSET
+        else:
+            context = JSONRawMessage.from_dict(_context)
+
+        force_subject_identifier = _d.pop("force_subject_identifier", UNSET)
+
+        remember = _d.pop("remember", UNSET)
+
+        remember_for = _d.pop("remember_for", UNSET)
+
+        accept_login_request = cls(
+            subject=subject,
+            acr=acr,
+            context=context,
+            force_subject_identifier=force_subject_identifier,
+            remember=remember,
+            remember_for=remember_for,
+        )
+
+        accept_login_request.additional_properties = _d
+        return accept_login_request
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/completed_request.py b/libs/ory-hydra-client/ory_hydra_client/models/completed_request.py
new file mode 100644
index 0000000..48d92c5
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/completed_request.py
@@ -0,0 +1,58 @@
+from typing import Any, Dict, List, Type, TypeVar
+
+import attr
+
+T = TypeVar("T", bound="CompletedRequest")
+
+
+@attr.s(auto_attribs=True)
+class CompletedRequest:
+    """
+    Attributes:
+        redirect_to (str): RedirectURL is the URL which you should redirect the user to once the authentication process
+            is completed.
+    """
+
+    redirect_to: str
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        redirect_to = self.redirect_to
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "redirect_to": redirect_to,
+            }
+        )
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        redirect_to = _d.pop("redirect_to")
+
+        completed_request = cls(
+            redirect_to=redirect_to,
+        )
+
+        completed_request.additional_properties = _d
+        return completed_request
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/consent_request.py b/libs/ory-hydra-client/ory_hydra_client/models/consent_request.py
new file mode 100644
index 0000000..1b1c07b
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/consent_request.py
@@ -0,0 +1,200 @@
+from typing import Any, Dict, List, Type, TypeVar, Union, cast
+
+import attr
+
+from ..models.json_raw_message import JSONRawMessage
+from ..models.o_auth_2_client import OAuth2Client
+from ..models.open_id_connect_context import OpenIDConnectContext
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="ConsentRequest")
+
+
+@attr.s(auto_attribs=True)
+class ConsentRequest:
+    """
+    Attributes:
+        challenge (str): ID is the identifier ("authorization challenge") of the consent authorization request. It is
+            used to
+            identify the session.
+        acr (Union[Unset, str]): ACR represents the Authentication AuthorizationContext Class Reference value for this
+            authentication session. You can use it
+            to express that, for example, a user authenticated using two factor authentication.
+        client (Union[Unset, OAuth2Client]):
+        context (Union[Unset, JSONRawMessage]):
+        login_challenge (Union[Unset, str]): LoginChallenge is the login challenge this consent challenge belongs to. It
+            can be used to associate
+            a login and consent request in the login & consent app.
+        login_session_id (Union[Unset, str]): LoginSessionID is the login session ID. If the user-agent reuses a login
+            session (via cookie / remember flag)
+            this ID will remain the same. If the user-agent did not have an existing authentication session (e.g. remember
+            is false)
+            this will be a new random value. This value is used as the "sid" parameter in the ID Token and in OIDC
+            Front-/Back-
+            channel logout. It's value can generally be used to associate consecutive login requests by a certain user.
+        oidc_context (Union[Unset, OpenIDConnectContext]):
+        request_url (Union[Unset, str]): RequestURL is the original OAuth 2.0 Authorization URL requested by the OAuth
+            2.0 client. It is the URL which
+            initiates the OAuth 2.0 Authorization Code or OAuth 2.0 Implicit flow. This URL is typically not needed, but
+            might come in handy if you want to deal with additional request parameters.
+        requested_access_token_audience (Union[Unset, List[str]]):
+        requested_scope (Union[Unset, List[str]]):
+        skip (Union[Unset, bool]): Skip, if true, implies that the client has requested the same scopes from the same
+            user previously.
+            If true, you must not ask the user to grant the requested scopes. You must however either allow or deny the
+            consent request using the usual API call.
+        subject (Union[Unset, str]): Subject is the user ID of the end-user that authenticated. Now, that end user needs
+            to grant or deny the scope
+            requested by the OAuth 2.0 client.
+    """
+
+    challenge: str
+    acr: Union[Unset, str] = UNSET
+    client: Union[Unset, OAuth2Client] = UNSET
+    context: Union[Unset, JSONRawMessage] = UNSET
+    login_challenge: Union[Unset, str] = UNSET
+    login_session_id: Union[Unset, str] = UNSET
+    oidc_context: Union[Unset, OpenIDConnectContext] = UNSET
+    request_url: Union[Unset, str] = UNSET
+    requested_access_token_audience: Union[Unset, List[str]] = UNSET
+    requested_scope: Union[Unset, List[str]] = UNSET
+    skip: Union[Unset, bool] = UNSET
+    subject: Union[Unset, str] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        challenge = self.challenge
+        acr = self.acr
+        client: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.client, Unset):
+            client = self.client.to_dict()
+
+        context: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.context, Unset):
+            context = self.context.to_dict()
+
+        login_challenge = self.login_challenge
+        login_session_id = self.login_session_id
+        oidc_context: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.oidc_context, Unset):
+            oidc_context = self.oidc_context.to_dict()
+
+        request_url = self.request_url
+        requested_access_token_audience: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.requested_access_token_audience, Unset):
+            requested_access_token_audience = self.requested_access_token_audience
+
+        requested_scope: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.requested_scope, Unset):
+            requested_scope = self.requested_scope
+
+        skip = self.skip
+        subject = self.subject
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "challenge": challenge,
+            }
+        )
+        if acr is not UNSET:
+            field_dict["acr"] = acr
+        if client is not UNSET:
+            field_dict["client"] = client
+        if context is not UNSET:
+            field_dict["context"] = context
+        if login_challenge is not UNSET:
+            field_dict["login_challenge"] = login_challenge
+        if login_session_id is not UNSET:
+            field_dict["login_session_id"] = login_session_id
+        if oidc_context is not UNSET:
+            field_dict["oidc_context"] = oidc_context
+        if request_url is not UNSET:
+            field_dict["request_url"] = request_url
+        if requested_access_token_audience is not UNSET:
+            field_dict["requested_access_token_audience"] = requested_access_token_audience
+        if requested_scope is not UNSET:
+            field_dict["requested_scope"] = requested_scope
+        if skip is not UNSET:
+            field_dict["skip"] = skip
+        if subject is not UNSET:
+            field_dict["subject"] = subject
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        challenge = _d.pop("challenge")
+
+        acr = _d.pop("acr", UNSET)
+
+        _client = _d.pop("client", UNSET)
+        client: Union[Unset, OAuth2Client]
+        if isinstance(_client, Unset):
+            client = UNSET
+        else:
+            client = OAuth2Client.from_dict(_client)
+
+        _context = _d.pop("context", UNSET)
+        context: Union[Unset, JSONRawMessage]
+        if isinstance(_context, Unset):
+            context = UNSET
+        else:
+            context = JSONRawMessage.from_dict(_context)
+
+        login_challenge = _d.pop("login_challenge", UNSET)
+
+        login_session_id = _d.pop("login_session_id", UNSET)
+
+        _oidc_context = _d.pop("oidc_context", UNSET)
+        oidc_context: Union[Unset, OpenIDConnectContext]
+        if isinstance(_oidc_context, Unset):
+            oidc_context = UNSET
+        else:
+            oidc_context = OpenIDConnectContext.from_dict(_oidc_context)
+
+        request_url = _d.pop("request_url", UNSET)
+
+        requested_access_token_audience = cast(List[str], _d.pop("requested_access_token_audience", UNSET))
+
+        requested_scope = cast(List[str], _d.pop("requested_scope", UNSET))
+
+        skip = _d.pop("skip", UNSET)
+
+        subject = _d.pop("subject", UNSET)
+
+        consent_request = cls(
+            challenge=challenge,
+            acr=acr,
+            client=client,
+            context=context,
+            login_challenge=login_challenge,
+            login_session_id=login_session_id,
+            oidc_context=oidc_context,
+            request_url=request_url,
+            requested_access_token_audience=requested_access_token_audience,
+            requested_scope=requested_scope,
+            skip=skip,
+            subject=subject,
+        )
+
+        consent_request.additional_properties = _d
+        return consent_request
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/consent_request_session.py b/libs/ory-hydra-client/ory_hydra_client/models/consent_request_session.py
new file mode 100644
index 0000000..8e24ad5
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/consent_request_session.py
@@ -0,0 +1,89 @@
+from typing import Any, Dict, List, Type, TypeVar, Union
+
+import attr
+
+from ..models.consent_request_session_access_token import ConsentRequestSessionAccessToken
+from ..models.consent_request_session_id_token import ConsentRequestSessionIdToken
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="ConsentRequestSession")
+
+
+@attr.s(auto_attribs=True)
+class ConsentRequestSession:
+    """
+    Attributes:
+        access_token (Union[Unset, ConsentRequestSessionAccessToken]): AccessToken sets session data for the access and
+            refresh token, as well as any future tokens issued by the
+            refresh grant. Keep in mind that this data will be available to anyone performing OAuth 2.0 Challenge
+            Introspection.
+            If only your services can perform OAuth 2.0 Challenge Introspection, this is usually fine. But if third parties
+            can access that endpoint as well, sensitive data from the session might be exposed to them. Use with care!
+        id_token (Union[Unset, ConsentRequestSessionIdToken]): IDToken sets session data for the OpenID Connect ID
+            token. Keep in mind that the session'id payloads are readable
+            by anyone that has access to the ID Challenge. Use with care!
+    """
+
+    access_token: Union[Unset, ConsentRequestSessionAccessToken] = UNSET
+    id_token: Union[Unset, ConsentRequestSessionIdToken] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        access_token: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.access_token, Unset):
+            access_token = self.access_token.to_dict()
+
+        id_token: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.id_token, Unset):
+            id_token = self.id_token.to_dict()
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if access_token is not UNSET:
+            field_dict["access_token"] = access_token
+        if id_token is not UNSET:
+            field_dict["id_token"] = id_token
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        _access_token = _d.pop("access_token", UNSET)
+        access_token: Union[Unset, ConsentRequestSessionAccessToken]
+        if isinstance(_access_token, Unset):
+            access_token = UNSET
+        else:
+            access_token = ConsentRequestSessionAccessToken.from_dict(_access_token)
+
+        _id_token = _d.pop("id_token", UNSET)
+        id_token: Union[Unset, ConsentRequestSessionIdToken]
+        if isinstance(_id_token, Unset):
+            id_token = UNSET
+        else:
+            id_token = ConsentRequestSessionIdToken.from_dict(_id_token)
+
+        consent_request_session = cls(
+            access_token=access_token,
+            id_token=id_token,
+        )
+
+        consent_request_session.additional_properties = _d
+        return consent_request_session
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/consent_request_session_access_token.py b/libs/ory-hydra-client/ory_hydra_client/models/consent_request_session_access_token.py
new file mode 100644
index 0000000..06a0322
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/consent_request_session_access_token.py
@@ -0,0 +1,49 @@
+from typing import Any, Dict, List, Type, TypeVar
+
+import attr
+
+T = TypeVar("T", bound="ConsentRequestSessionAccessToken")
+
+
+@attr.s(auto_attribs=True)
+class ConsentRequestSessionAccessToken:
+    """AccessToken sets session data for the access and refresh token, as well as any future tokens issued by the
+    refresh grant. Keep in mind that this data will be available to anyone performing OAuth 2.0 Challenge Introspection.
+    If only your services can perform OAuth 2.0 Challenge Introspection, this is usually fine. But if third parties
+    can access that endpoint as well, sensitive data from the session might be exposed to them. Use with care!
+
+    """
+
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        consent_request_session_access_token = cls()
+
+        consent_request_session_access_token.additional_properties = _d
+        return consent_request_session_access_token
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/consent_request_session_id_token.py b/libs/ory-hydra-client/ory_hydra_client/models/consent_request_session_id_token.py
new file mode 100644
index 0000000..20b5ca2
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/consent_request_session_id_token.py
@@ -0,0 +1,47 @@
+from typing import Any, Dict, List, Type, TypeVar
+
+import attr
+
+T = TypeVar("T", bound="ConsentRequestSessionIdToken")
+
+
+@attr.s(auto_attribs=True)
+class ConsentRequestSessionIdToken:
+    """IDToken sets session data for the OpenID Connect ID token. Keep in mind that the session'id payloads are readable
+    by anyone that has access to the ID Challenge. Use with care!
+
+    """
+
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        consent_request_session_id_token = cls()
+
+        consent_request_session_id_token.additional_properties = _d
+        return consent_request_session_id_token
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/container_wait_ok_body_error.py b/libs/ory-hydra-client/ory_hydra_client/models/container_wait_ok_body_error.py
new file mode 100644
index 0000000..9a3df76
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/container_wait_ok_body_error.py
@@ -0,0 +1,58 @@
+from typing import Any, Dict, List, Type, TypeVar, Union
+
+import attr
+
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="ContainerWaitOKBodyError")
+
+
+@attr.s(auto_attribs=True)
+class ContainerWaitOKBodyError:
+    """ContainerWaitOKBodyError container waiting error, if any
+
+    Attributes:
+        message (Union[Unset, str]): Details of an error
+    """
+
+    message: Union[Unset, str] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        message = self.message
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if message is not UNSET:
+            field_dict["Message"] = message
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        message = _d.pop("Message", UNSET)
+
+        container_wait_ok_body_error = cls(
+            message=message,
+        )
+
+        container_wait_ok_body_error.additional_properties = _d
+        return container_wait_ok_body_error
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/flush_inactive_o_auth_2_tokens_request.py b/libs/ory-hydra-client/ory_hydra_client/models/flush_inactive_o_auth_2_tokens_request.py
new file mode 100644
index 0000000..8401511
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/flush_inactive_o_auth_2_tokens_request.py
@@ -0,0 +1,68 @@
+import datetime
+from typing import Any, Dict, List, Type, TypeVar, Union
+
+import attr
+from dateutil.parser import isoparse
+
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="FlushInactiveOAuth2TokensRequest")
+
+
+@attr.s(auto_attribs=True)
+class FlushInactiveOAuth2TokensRequest:
+    """
+    Attributes:
+        not_after (Union[Unset, datetime.datetime]): NotAfter sets after which point tokens should not be flushed. This
+            is useful when you want to keep a history
+            of recently issued tokens for auditing.
+    """
+
+    not_after: Union[Unset, datetime.datetime] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        not_after: Union[Unset, str] = UNSET
+        if not isinstance(self.not_after, Unset):
+            not_after = self.not_after.isoformat()
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if not_after is not UNSET:
+            field_dict["notAfter"] = not_after
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        _not_after = _d.pop("notAfter", UNSET)
+        not_after: Union[Unset, datetime.datetime]
+        if isinstance(_not_after, Unset):
+            not_after = UNSET
+        else:
+            not_after = isoparse(_not_after)
+
+        flush_inactive_o_auth_2_tokens_request = cls(
+            not_after=not_after,
+        )
+
+        flush_inactive_o_auth_2_tokens_request.additional_properties = _d
+        return flush_inactive_o_auth_2_tokens_request
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/generic_error.py b/libs/ory-hydra-client/ory_hydra_client/models/generic_error.py
new file mode 100644
index 0000000..82468c4
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/generic_error.py
@@ -0,0 +1,86 @@
+from typing import Any, Dict, List, Type, TypeVar, Union
+
+import attr
+
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="GenericError")
+
+
+@attr.s(auto_attribs=True)
+class GenericError:
+    """Error responses are sent when an error (e.g. unauthorized, bad request, ...) occurred.
+
+    Attributes:
+        error (str): Name is the error name. Example: The requested resource could not be found.
+        debug (Union[Unset, str]): Debug contains debug information. This is usually not available and has to be
+            enabled. Example: The database adapter was unable to find the element.
+        error_description (Union[Unset, str]): Description contains further information on the nature of the error.
+            Example: Object with ID 12345 does not exist.
+        status_code (Union[Unset, int]): Code represents the error status code (404, 403, 401, ...). Example: 404.
+    """
+
+    error: str
+    debug: Union[Unset, str] = UNSET
+    error_description: Union[Unset, str] = UNSET
+    status_code: Union[Unset, int] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        error = self.error
+        debug = self.debug
+        error_description = self.error_description
+        status_code = self.status_code
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "error": error,
+            }
+        )
+        if debug is not UNSET:
+            field_dict["debug"] = debug
+        if error_description is not UNSET:
+            field_dict["error_description"] = error_description
+        if status_code is not UNSET:
+            field_dict["status_code"] = status_code
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        error = _d.pop("error")
+
+        debug = _d.pop("debug", UNSET)
+
+        error_description = _d.pop("error_description", UNSET)
+
+        status_code = _d.pop("status_code", UNSET)
+
+        generic_error = cls(
+            error=error,
+            debug=debug,
+            error_description=error_description,
+            status_code=status_code,
+        )
+
+        generic_error.additional_properties = _d
+        return generic_error
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/health_not_ready_status.py b/libs/ory-hydra-client/ory_hydra_client/models/health_not_ready_status.py
new file mode 100644
index 0000000..53391ec
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/health_not_ready_status.py
@@ -0,0 +1,66 @@
+from typing import Any, Dict, List, Type, TypeVar, Union
+
+import attr
+
+from ..models.health_not_ready_status_errors import HealthNotReadyStatusErrors
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="HealthNotReadyStatus")
+
+
+@attr.s(auto_attribs=True)
+class HealthNotReadyStatus:
+    """
+    Attributes:
+        errors (Union[Unset, HealthNotReadyStatusErrors]): Errors contains a list of errors that caused the not ready
+            status.
+    """
+
+    errors: Union[Unset, HealthNotReadyStatusErrors] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        errors: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.errors, Unset):
+            errors = self.errors.to_dict()
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if errors is not UNSET:
+            field_dict["errors"] = errors
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        _errors = _d.pop("errors", UNSET)
+        errors: Union[Unset, HealthNotReadyStatusErrors]
+        if isinstance(_errors, Unset):
+            errors = UNSET
+        else:
+            errors = HealthNotReadyStatusErrors.from_dict(_errors)
+
+        health_not_ready_status = cls(
+            errors=errors,
+        )
+
+        health_not_ready_status.additional_properties = _d
+        return health_not_ready_status
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/health_not_ready_status_errors.py b/libs/ory-hydra-client/ory_hydra_client/models/health_not_ready_status_errors.py
new file mode 100644
index 0000000..590ee3a
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/health_not_ready_status_errors.py
@@ -0,0 +1,44 @@
+from typing import Any, Dict, List, Type, TypeVar
+
+import attr
+
+T = TypeVar("T", bound="HealthNotReadyStatusErrors")
+
+
+@attr.s(auto_attribs=True)
+class HealthNotReadyStatusErrors:
+    """Errors contains a list of errors that caused the not ready status."""
+
+    additional_properties: Dict[str, str] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        health_not_ready_status_errors = cls()
+
+        health_not_ready_status_errors.additional_properties = _d
+        return health_not_ready_status_errors
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> str:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: str) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/health_status.py b/libs/ory-hydra-client/ory_hydra_client/models/health_status.py
new file mode 100644
index 0000000..19aa2b4
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/health_status.py
@@ -0,0 +1,57 @@
+from typing import Any, Dict, List, Type, TypeVar, Union
+
+import attr
+
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="HealthStatus")
+
+
+@attr.s(auto_attribs=True)
+class HealthStatus:
+    """
+    Attributes:
+        status (Union[Unset, str]): Status always contains "ok".
+    """
+
+    status: Union[Unset, str] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        status = self.status
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if status is not UNSET:
+            field_dict["status"] = status
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        status = _d.pop("status", UNSET)
+
+        health_status = cls(
+            status=status,
+        )
+
+        health_status.additional_properties = _d
+        return health_status
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/jose_json_web_key_set.py b/libs/ory-hydra-client/ory_hydra_client/models/jose_json_web_key_set.py
new file mode 100644
index 0000000..e222441
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/jose_json_web_key_set.py
@@ -0,0 +1,44 @@
+from typing import Any, Dict, List, Type, TypeVar
+
+import attr
+
+T = TypeVar("T", bound="JoseJSONWebKeySet")
+
+
+@attr.s(auto_attribs=True)
+class JoseJSONWebKeySet:
+    """ """
+
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        jose_json_web_key_set = cls()
+
+        jose_json_web_key_set.additional_properties = _d
+        return jose_json_web_key_set
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/json_raw_message.py b/libs/ory-hydra-client/ory_hydra_client/models/json_raw_message.py
new file mode 100644
index 0000000..cdfef91
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/json_raw_message.py
@@ -0,0 +1,44 @@
+from typing import Any, Dict, List, Type, TypeVar
+
+import attr
+
+T = TypeVar("T", bound="JSONRawMessage")
+
+
+@attr.s(auto_attribs=True)
+class JSONRawMessage:
+    """ """
+
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        json_raw_message = cls()
+
+        json_raw_message.additional_properties = _d
+        return json_raw_message
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/json_web_key.py b/libs/ory-hydra-client/ory_hydra_client/models/json_web_key.py
new file mode 100644
index 0000000..ee1c4cc
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/json_web_key.py
@@ -0,0 +1,237 @@
+from typing import Any, Dict, List, Type, TypeVar, Union, cast
+
+import attr
+
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="JSONWebKey")
+
+
+@attr.s(auto_attribs=True)
+class JSONWebKey:
+    """It is important that this model object is named JSONWebKey for
+    "swagger generate spec" to generate only on definition of a
+    JSONWebKey.
+
+        Attributes:
+            alg (str): The "alg" (algorithm) parameter identifies the algorithm intended for
+                use with the key.  The values used should either be registered in the
+                IANA "JSON Web Signature and Encryption Algorithms" registry
+                established by [JWA] or be a value that contains a Collision-
+                Resistant Name. Example: RS256.
+            kid (str): The "kid" (key ID) parameter is used to match a specific key.  This
+                is used, for instance, to choose among a set of keys within a JWK Set
+                during key rollover.  The structure of the "kid" value is
+                unspecified.  When "kid" values are used within a JWK Set, different
+                keys within the JWK Set SHOULD use distinct "kid" values.  (One
+                example in which different keys might use the same "kid" value is if
+                they have different "kty" (key type) values but are considered to be
+                equivalent alternatives by the application using them.)  The "kid"
+                value is a case-sensitive string. Example: 1603dfe0af8f4596.
+            kty (str): The "kty" (key type) parameter identifies the cryptographic algorithm
+                family used with the key, such as "RSA" or "EC". "kty" values should
+                either be registered in the IANA "JSON Web Key Types" registry
+                established by [JWA] or be a value that contains a Collision-
+                Resistant Name.  The "kty" value is a case-sensitive string. Example: RSA.
+            use (str): Use ("public key use") identifies the intended use of
+                the public key. The "use" parameter is employed to indicate whether
+                a public key is used for encrypting data or verifying the signature
+                on data. Values are commonly "sig" (signature) or "enc" (encryption). Example: sig.
+            crv (Union[Unset, str]):  Example: P-256.
+            d (Union[Unset, str]):  Example:
+                T_N8I-6He3M8a7X1vWt6TGIx4xB_GP3Mb4SsZSA4v-orvJzzRiQhLlRR81naWYxfQAYt5isDI6_C2L9bdWo4FFPjGQFvNoRX-_sBJyBI_rl-
+                TBgsZYoUlAj3J92WmY2inbA-PwyJfsaIIDceYBC-eX-
+                xiCu6qMqkZi3MwQAFL6bMdPEM0z4JBcwFT3VdiWAIRUuACWQwrXMq672x7fMuaIaHi7XDGgt1ith23CLfaREmJku9PQcchbt_uEY-hqrFY6ntTtS
+                4paWWQj86xLL94S-Tf6v6xkL918PfLSOTq6XCzxvlFwzBJqApnAhbwqLjpPhgUG04EDRrqrSBc5Y1BLevn6Ip5h1AhessBp3wLkQgz_roeckt-
+                ybvzKTjESMuagnpqLvOT7Y9veIug2MwPJZI2VjczRc1vzMs25XrFQ8DpUy-bNdp89TmvAXwctUMiJdgHloJw23Cv03gIUAkDnsTqZmkpbIf-crpg
+                NKFmQP_EDKoe8p_PXZZgfbRri3NoEVGP7Mk6yEu8LjJhClhZaBNjuWw2-KlBfOA3g79mhfBnkInee5KO9mGR50qPk1V-MorUYNTFMZIm0kFE6eYV
+                WFBwJHLKYhHU34DoiK1VP-svZpC2uAMFNA_UJEwM9CQ2b8qe4-5e9aywMvwcuArRkAB5mBIfOaOJao3mfukKAE.
+            dp (Union[Unset, str]):  Example: G4sPXkc6Ya9y8oJW9_ILj4xuppu0lzi_H7VTkS8xj5SdX3coE0oimYwxIi2emTAue0UOa5dpgFGyBJ
+                4c8tQ2VF402XRugKDTP8akYhFo5tAA77Qe_NmtuYZc3C3m3I24G2GvR5sSDxUyAN2zq8Lfn9EUms6rY3Ob8YeiKkTiBj0.
+            dq (Union[Unset, str]):  Example: s9lAH9fggBsoFR8Oac2R_E2gw282rT2kGOAhvIllETE1efrA6huUUvMfBcMpn8lqeW6vzznYY5SSQF
+                7pMdC_agI3nG8Ibp1BUb0JUiraRNqUfLhcQb_d9GF4Dh7e74WbRsobRonujTYN1xCaP6TO61jvWrX-L18txXw494Q_cgk.
+            e (Union[Unset, str]):  Example: AQAB.
+            k (Union[Unset, str]):  Example: GawgguFyGrWKav7AX4VKUg.
+            n (Union[Unset, str]):  Example: vTqrxUyQPl_20aqf5kXHwDZrel-KovIp8s7ewJod2EXHl8tWlRB3_Rem34KwBfqlKQGp1nqah-51H4J
+                zruqe0cFP58hPEIt6WqrvnmJCXxnNuIB53iX_uUUXXHDHBeaPCSRoNJzNysjoJ30TIUsKBiirhBa7f235PXbKiHducLevV6PcKxJ5cY8zO286qJL
+                BWSPm-OIevwqsIsSIH44Qtm9sioFikhkbLwoqwWORGAY0nl6XvVOlhADdLjBSqSAeT1FPuCDCnXwzCDR8N9IFB_IjdStFkC-rVt2K5BYfPd0c3yF
+                p_vHR15eRd0zJ8XQ7woBC8Vnsac6Et1pKS59pX6256DPWu8UDdEOolKAPgcd_g2NpA76cAaF_jcT80j9KrEzw8Tv0nJBGesuCjPNjGs_KzdkWTUX
+                t23Hn9QJsdc1MZuaW0iqXBepHYfYoqNelzVte117t4BwVp0kUM6we0IqyXClaZgOI8S-WDBw2_Ovdm8e5NmhYAblEVoygcX8Y46oH6bKiaCQfKCF
+                DMcRgChme7AoE1yZZYsPbaG_3IjPrC4LBMHQw8rM9dWjJ8ImjicvZ1pAm0dx-
+                KHCP3y5PVKrxBDf1zSOsBRkOSjB8TPODnJMz6-jd5hTtZxpZPwPoIdCanTZ3ZD6uRBpTmDwtpRGm63UQs1m5FWPwb0T2IF0.
+            p (Union[Unset, str]):  Example: 6NbkXwDWUhi-eR55Cgbf27FkQDDWIamOaDr0rj1q0f1fFEz1W5A_09YvG09Fiv1AO2-D8Rl8gS1Vkz2
+                i0zCSqnyy8A025XOcRviOMK7nIxE4OH_PEsko8dtIrb3TmE2hUXvCkmzw9EsTF1LQBOGC6iusLTXepIC1x9ukCKFZQvdgtEObQ5kzd9Nhq-cdqmS
+                eMVLoxPLd1blviVT9Vm8-y12CtYpeJHOaIDtVPLlBhJiBoPKWg3vxSm4XxIliNOefqegIlsmTIa3MpS6WWlCK3yHhat0Q-rRxDxdyiVdG_wzJvp0
+                Iw_2wms7pe-PgNPYvUWH9JphWP5K38YqEBiJFXQ.
+            q (Union[Unset, str]):  Example: 0A1FmpOWR91_RAWpqreWSavNaZb9nXeKiBo0DQGBz32DbqKqQ8S4aBJmbRhJcctjCLjain-
+                ivut477tAUMmzJwVJDDq2MZFwC9Q-4VYZmFU4HJityQuSzHYe64RjN-E_NQ02TWhG3QGW6roq6c57c99rrUsETwJJiwS8M5p15Miuz53DaOjv-
+                uqqFAFfywN5WkxHbraBcjHtMiQuyQbQqkCFh-oanHkwYNeytsNhTu2mQmwR5DR2roZ2nPiFjC6nsdk-A7E3S3wMzYYFw7jvbWWoYWo9vB40_MY2Y
+                0FYQSqcDzcBIcq_0tnnasf3VW4Fdx6m80RzOb2Fsnln7vKXAQ.
+            qi (Union[Unset, str]):  Example: GyM_p6JrXySiz1toFgKbWV-JdI3jQ4ypu9rbMWx3rQJBfmt0FoYzgUIZEVFEcOqwemRN81zoDAaa-
+                Bk0KWNGDjJHZDdDmFhW3AN7lI-puxk_mHZGJ11rxyR8O55XLSe3SPmRfKwZI6yU24ZxvQKFYItdldUKGzO6Ia6zTKhAVRU.
+            x (Union[Unset, str]):  Example: f83OJ3D2xF1Bg8vub9tLe1gHMzV76e8Tus9uPHvRVEU.
+            x5c (Union[Unset, List[str]]): The "x5c" (X.509 certificate chain) parameter contains a chain of one
+                or more PKIX certificates [RFC5280].  The certificate chain is
+                represented as a JSON array of certificate value strings.  Each
+                string in the array is a base64-encoded (Section 4 of [RFC4648] --
+                not base64url-encoded) DER [ITU.X690.1994] PKIX certificate value.
+                The PKIX certificate containing the key value MUST be the first
+                certificate.
+            y (Union[Unset, str]):  Example: x_FEzRu9m36HLN_tue659LNpXW6pCyStikYjKIWI5a0.
+    """
+
+    alg: str
+    kid: str
+    kty: str
+    use: str
+    crv: Union[Unset, str] = UNSET
+    d: Union[Unset, str] = UNSET
+    dp: Union[Unset, str] = UNSET
+    dq: Union[Unset, str] = UNSET
+    e: Union[Unset, str] = UNSET
+    k: Union[Unset, str] = UNSET
+    n: Union[Unset, str] = UNSET
+    p: Union[Unset, str] = UNSET
+    q: Union[Unset, str] = UNSET
+    qi: Union[Unset, str] = UNSET
+    x: Union[Unset, str] = UNSET
+    x5c: Union[Unset, List[str]] = UNSET
+    y: Union[Unset, str] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        alg = self.alg
+        kid = self.kid
+        kty = self.kty
+        use = self.use
+        crv = self.crv
+        d = self.d
+        dp = self.dp
+        dq = self.dq
+        e = self.e
+        k = self.k
+        n = self.n
+        p = self.p
+        q = self.q
+        qi = self.qi
+        x = self.x
+        x5c: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.x5c, Unset):
+            x5c = self.x5c
+
+        y = self.y
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "alg": alg,
+                "kid": kid,
+                "kty": kty,
+                "use": use,
+            }
+        )
+        if crv is not UNSET:
+            field_dict["crv"] = crv
+        if d is not UNSET:
+            field_dict["d"] = d
+        if dp is not UNSET:
+            field_dict["dp"] = dp
+        if dq is not UNSET:
+            field_dict["dq"] = dq
+        if e is not UNSET:
+            field_dict["e"] = e
+        if k is not UNSET:
+            field_dict["k"] = k
+        if n is not UNSET:
+            field_dict["n"] = n
+        if p is not UNSET:
+            field_dict["p"] = p
+        if q is not UNSET:
+            field_dict["q"] = q
+        if qi is not UNSET:
+            field_dict["qi"] = qi
+        if x is not UNSET:
+            field_dict["x"] = x
+        if x5c is not UNSET:
+            field_dict["x5c"] = x5c
+        if y is not UNSET:
+            field_dict["y"] = y
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        alg = _d.pop("alg")
+
+        kid = _d.pop("kid")
+
+        kty = _d.pop("kty")
+
+        use = _d.pop("use")
+
+        crv = _d.pop("crv", UNSET)
+
+        d = _d.pop("d", UNSET)
+
+        dp = _d.pop("dp", UNSET)
+
+        dq = _d.pop("dq", UNSET)
+
+        e = _d.pop("e", UNSET)
+
+        k = _d.pop("k", UNSET)
+
+        n = _d.pop("n", UNSET)
+
+        p = _d.pop("p", UNSET)
+
+        q = _d.pop("q", UNSET)
+
+        qi = _d.pop("qi", UNSET)
+
+        x = _d.pop("x", UNSET)
+
+        x5c = cast(List[str], _d.pop("x5c", UNSET))
+
+        y = _d.pop("y", UNSET)
+
+        json_web_key = cls(
+            alg=alg,
+            kid=kid,
+            kty=kty,
+            use=use,
+            crv=crv,
+            d=d,
+            dp=dp,
+            dq=dq,
+            e=e,
+            k=k,
+            n=n,
+            p=p,
+            q=q,
+            qi=qi,
+            x=x,
+            x5c=x5c,
+            y=y,
+        )
+
+        json_web_key.additional_properties = _d
+        return json_web_key
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/json_web_key_set.py b/libs/ory-hydra-client/ory_hydra_client/models/json_web_key_set.py
new file mode 100644
index 0000000..0ebed36
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/json_web_key_set.py
@@ -0,0 +1,78 @@
+from typing import Any, Dict, List, Type, TypeVar, Union
+
+import attr
+
+from ..models.json_web_key import JSONWebKey
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="JSONWebKeySet")
+
+
+@attr.s(auto_attribs=True)
+class JSONWebKeySet:
+    """It is important that this model object is named JSONWebKeySet for
+    "swagger generate spec" to generate only on definition of a
+    JSONWebKeySet. Since one with the same name is previously defined as
+    client.Client.JSONWebKeys and this one is last, this one will be
+    effectively written in the swagger spec.
+
+        Attributes:
+            keys (Union[Unset, List[JSONWebKey]]): The value of the "keys" parameter is an array of JWK values.  By
+                default, the order of the JWK values within the array does not imply
+                an order of preference among them, although applications of JWK Sets
+                can choose to assign a meaning to the order for their purposes, if
+                desired.
+    """
+
+    keys: Union[Unset, List[JSONWebKey]] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        keys: Union[Unset, List[Dict[str, Any]]] = UNSET
+        if not isinstance(self.keys, Unset):
+            keys = []
+            for keys_item_data in self.keys:
+                keys_item = keys_item_data.to_dict()
+
+                keys.append(keys_item)
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if keys is not UNSET:
+            field_dict["keys"] = keys
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        keys = []
+        _keys = _d.pop("keys", UNSET)
+        for keys_item_data in _keys or []:
+            keys_item = JSONWebKey.from_dict(keys_item_data)
+
+            keys.append(keys_item)
+
+        json_web_key_set = cls(
+            keys=keys,
+        )
+
+        json_web_key_set.additional_properties = _d
+        return json_web_key_set
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/json_web_key_set_generator_request.py b/libs/ory-hydra-client/ory_hydra_client/models/json_web_key_set_generator_request.py
new file mode 100644
index 0000000..e27f616
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/json_web_key_set_generator_request.py
@@ -0,0 +1,74 @@
+from typing import Any, Dict, List, Type, TypeVar
+
+import attr
+
+T = TypeVar("T", bound="JsonWebKeySetGeneratorRequest")
+
+
+@attr.s(auto_attribs=True)
+class JsonWebKeySetGeneratorRequest:
+    """
+    Attributes:
+        alg (str): The algorithm to be used for creating the key. Supports "RS256", "ES512", "HS512", and "HS256"
+        kid (str): The kid of the key to be created
+        use (str): The "use" (public key use) parameter identifies the intended use of
+            the public key. The "use" parameter is employed to indicate whether
+            a public key is used for encrypting data or verifying the signature
+            on data. Valid values are "enc" and "sig".
+    """
+
+    alg: str
+    kid: str
+    use: str
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        alg = self.alg
+        kid = self.kid
+        use = self.use
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "alg": alg,
+                "kid": kid,
+                "use": use,
+            }
+        )
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        alg = _d.pop("alg")
+
+        kid = _d.pop("kid")
+
+        use = _d.pop("use")
+
+        json_web_key_set_generator_request = cls(
+            alg=alg,
+            kid=kid,
+            use=use,
+        )
+
+        json_web_key_set_generator_request.additional_properties = _d
+        return json_web_key_set_generator_request
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/login_request.py b/libs/ory-hydra-client/ory_hydra_client/models/login_request.py
new file mode 100644
index 0000000..5f207c5
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/login_request.py
@@ -0,0 +1,147 @@
+from typing import Any, Dict, List, Type, TypeVar, Union, cast
+
+import attr
+
+from ..models.o_auth_2_client import OAuth2Client
+from ..models.open_id_connect_context import OpenIDConnectContext
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="LoginRequest")
+
+
+@attr.s(auto_attribs=True)
+class LoginRequest:
+    """
+    Attributes:
+        challenge (str): ID is the identifier ("login challenge") of the login request. It is used to
+            identify the session.
+        client (OAuth2Client):
+        request_url (str): RequestURL is the original OAuth 2.0 Authorization URL requested by the OAuth 2.0 client. It
+            is the URL which
+            initiates the OAuth 2.0 Authorization Code or OAuth 2.0 Implicit flow. This URL is typically not needed, but
+            might come in handy if you want to deal with additional request parameters.
+        requested_access_token_audience (List[str]):
+        requested_scope (List[str]):
+        skip (bool): Skip, if true, implies that the client has requested the same scopes from the same user previously.
+            If true, you can skip asking the user to grant the requested scopes, and simply forward the user to the redirect
+            URL.
+
+            This feature allows you to update / set session information.
+        subject (str): Subject is the user ID of the end-user that authenticated. Now, that end user needs to grant or
+            deny the scope
+            requested by the OAuth 2.0 client. If this value is set and `skip` is true, you MUST include this subject type
+            when accepting the login request, or the request will fail.
+        oidc_context (Union[Unset, OpenIDConnectContext]):
+        session_id (Union[Unset, str]): SessionID is the login session ID. If the user-agent reuses a login session (via
+            cookie / remember flag)
+            this ID will remain the same. If the user-agent did not have an existing authentication session (e.g. remember
+            is false)
+            this will be a new random value. This value is used as the "sid" parameter in the ID Token and in OIDC
+            Front-/Back-
+            channel logout. It's value can generally be used to associate consecutive login requests by a certain user.
+    """
+
+    challenge: str
+    client: OAuth2Client
+    request_url: str
+    requested_access_token_audience: List[str]
+    requested_scope: List[str]
+    skip: bool
+    subject: str
+    oidc_context: Union[Unset, OpenIDConnectContext] = UNSET
+    session_id: Union[Unset, str] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        challenge = self.challenge
+        client = self.client.to_dict()
+
+        request_url = self.request_url
+        requested_access_token_audience = self.requested_access_token_audience
+
+        requested_scope = self.requested_scope
+
+        skip = self.skip
+        subject = self.subject
+        oidc_context: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.oidc_context, Unset):
+            oidc_context = self.oidc_context.to_dict()
+
+        session_id = self.session_id
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "challenge": challenge,
+                "client": client,
+                "request_url": request_url,
+                "requested_access_token_audience": requested_access_token_audience,
+                "requested_scope": requested_scope,
+                "skip": skip,
+                "subject": subject,
+            }
+        )
+        if oidc_context is not UNSET:
+            field_dict["oidc_context"] = oidc_context
+        if session_id is not UNSET:
+            field_dict["session_id"] = session_id
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        challenge = _d.pop("challenge")
+
+        client = OAuth2Client.from_dict(_d.pop("client"))
+
+        request_url = _d.pop("request_url")
+
+        requested_access_token_audience = cast(List[str], _d.pop("requested_access_token_audience"))
+
+        requested_scope = cast(List[str], _d.pop("requested_scope"))
+
+        skip = _d.pop("skip")
+
+        subject = _d.pop("subject")
+
+        _oidc_context = _d.pop("oidc_context", UNSET)
+        oidc_context: Union[Unset, OpenIDConnectContext]
+        if isinstance(_oidc_context, Unset):
+            oidc_context = UNSET
+        else:
+            oidc_context = OpenIDConnectContext.from_dict(_oidc_context)
+
+        session_id = _d.pop("session_id", UNSET)
+
+        login_request = cls(
+            challenge=challenge,
+            client=client,
+            request_url=request_url,
+            requested_access_token_audience=requested_access_token_audience,
+            requested_scope=requested_scope,
+            skip=skip,
+            subject=subject,
+            oidc_context=oidc_context,
+            session_id=session_id,
+        )
+
+        login_request.additional_properties = _d
+        return login_request
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/logout_request.py b/libs/ory-hydra-client/ory_hydra_client/models/logout_request.py
new file mode 100644
index 0000000..730ed47
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/logout_request.py
@@ -0,0 +1,82 @@
+from typing import Any, Dict, List, Type, TypeVar, Union
+
+import attr
+
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="LogoutRequest")
+
+
+@attr.s(auto_attribs=True)
+class LogoutRequest:
+    """
+    Attributes:
+        request_url (Union[Unset, str]): RequestURL is the original Logout URL requested.
+        rp_initiated (Union[Unset, bool]): RPInitiated is set to true if the request was initiated by a Relying Party
+            (RP), also known as an OAuth 2.0 Client.
+        sid (Union[Unset, str]): SessionID is the login session ID that was requested to log out.
+        subject (Union[Unset, str]): Subject is the user for whom the logout was request.
+    """
+
+    request_url: Union[Unset, str] = UNSET
+    rp_initiated: Union[Unset, bool] = UNSET
+    sid: Union[Unset, str] = UNSET
+    subject: Union[Unset, str] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        request_url = self.request_url
+        rp_initiated = self.rp_initiated
+        sid = self.sid
+        subject = self.subject
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if request_url is not UNSET:
+            field_dict["request_url"] = request_url
+        if rp_initiated is not UNSET:
+            field_dict["rp_initiated"] = rp_initiated
+        if sid is not UNSET:
+            field_dict["sid"] = sid
+        if subject is not UNSET:
+            field_dict["subject"] = subject
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        request_url = _d.pop("request_url", UNSET)
+
+        rp_initiated = _d.pop("rp_initiated", UNSET)
+
+        sid = _d.pop("sid", UNSET)
+
+        subject = _d.pop("subject", UNSET)
+
+        logout_request = cls(
+            request_url=request_url,
+            rp_initiated=rp_initiated,
+            sid=sid,
+            subject=subject,
+        )
+
+        logout_request.additional_properties = _d
+        return logout_request
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/o_auth_2_client.py b/libs/ory-hydra-client/ory_hydra_client/models/o_auth_2_client.py
new file mode 100644
index 0000000..04e97f9
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/o_auth_2_client.py
@@ -0,0 +1,426 @@
+import datetime
+from typing import Any, Dict, List, Type, TypeVar, Union, cast
+
+import attr
+from dateutil.parser import isoparse
+
+from ..models.jose_json_web_key_set import JoseJSONWebKeySet
+from ..models.json_raw_message import JSONRawMessage
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="OAuth2Client")
+
+
+@attr.s(auto_attribs=True)
+class OAuth2Client:
+    """
+    Attributes:
+        allowed_cors_origins (Union[Unset, List[str]]):
+        audience (Union[Unset, List[str]]):
+        backchannel_logout_session_required (Union[Unset, bool]): Boolean value specifying whether the RP requires that
+            a sid (session ID) Claim be included in the Logout
+            Token to identify the RP session with the OP when the backchannel_logout_uri is used.
+            If omitted, the default value is false.
+        backchannel_logout_uri (Union[Unset, str]): RP URL that will cause the RP to log itself out when sent a Logout
+            Token by the OP.
+        client_id (Union[Unset, str]): ID  is the id for this client.
+        client_name (Union[Unset, str]): Name is the human-readable string name of the client to be presented to the
+            end-user during authorization.
+        client_secret (Union[Unset, str]): Secret is the client's secret. The secret will be included in the create
+            request as cleartext, and then
+            never again. The secret is stored using BCrypt so it is impossible to recover it. Tell your users
+            that they need to write the secret down as it will not be made available again.
+        client_secret_expires_at (Union[Unset, int]): SecretExpiresAt is an integer holding the time at which the client
+            secret will expire or 0 if it will not expire. The time is
+            represented as the number of seconds from 1970-01-01T00:00:00Z as
+            measured in UTC until the date/time of expiration.
+
+            This feature is currently not supported and it's value will always
+            be set to 0.
+        client_uri (Union[Unset, str]): ClientURI is an URL string of a web page providing information about the client.
+            If present, the server SHOULD display this URL to the end-user in
+            a clickable fashion.
+        contacts (Union[Unset, List[str]]):
+        created_at (Union[Unset, datetime.datetime]): CreatedAt returns the timestamp of the client's creation.
+        frontchannel_logout_session_required (Union[Unset, bool]): Boolean value specifying whether the RP requires that
+            iss (issuer) and sid (session ID) query parameters be
+            included to identify the RP session with the OP when the frontchannel_logout_uri is used.
+            If omitted, the default value is false.
+        frontchannel_logout_uri (Union[Unset, str]): RP URL that will cause the RP to log itself out when rendered in an
+            iframe by the OP. An iss (issuer) query
+            parameter and a sid (session ID) query parameter MAY be included by the OP to enable the RP to validate the
+            request and to determine which of the potentially multiple sessions is to be logged out; if either is
+            included, both MUST be.
+        grant_types (Union[Unset, List[str]]):
+        jwks (Union[Unset, JoseJSONWebKeySet]):
+        jwks_uri (Union[Unset, str]): URL for the Client's JSON Web Key Set [JWK] document. If the Client signs requests
+            to the Server, it contains
+            the signing key(s) the Server uses to validate signatures from the Client. The JWK Set MAY also contain the
+            Client's encryption keys(s), which are used by the Server to encrypt responses to the Client. When both signing
+            and encryption keys are made available, a use (Key Use) parameter value is REQUIRED for all keys in the
+            referenced
+            JWK Set to indicate each key's intended usage. Although some algorithms allow the same key to be used for both
+            signatures and encryption, doing so is NOT RECOMMENDED, as it is less secure. The JWK x5c parameter MAY be used
+            to provide X.509 representations of keys provided. When used, the bare key values MUST still be present and MUST
+            match those in the certificate.
+        logo_uri (Union[Unset, str]): LogoURI is an URL string that references a logo for the client.
+        metadata (Union[Unset, JSONRawMessage]):
+        owner (Union[Unset, str]): Owner is a string identifying the owner of the OAuth 2.0 Client.
+        policy_uri (Union[Unset, str]): PolicyURI is a URL string that points to a human-readable privacy policy
+            document
+            that describes how the deployment organization collects, uses,
+            retains, and discloses personal data.
+        post_logout_redirect_uris (Union[Unset, List[str]]):
+        redirect_uris (Union[Unset, List[str]]):
+        request_object_signing_alg (Union[Unset, str]): JWS [JWS] alg algorithm [JWA] that MUST be used for signing
+            Request Objects sent to the OP. All Request Objects
+            from this Client MUST be rejected, if not signed with this algorithm.
+        request_uris (Union[Unset, List[str]]):
+        response_types (Union[Unset, List[str]]):
+        scope (Union[Unset, str]): Scope is a string containing a space-separated list of scope values (as
+            described in Section 3.3 of OAuth 2.0 [RFC6749]) that the client
+            can use when requesting access tokens.
+        sector_identifier_uri (Union[Unset, str]): URL using the https scheme to be used in calculating Pseudonymous
+            Identifiers by the OP. The URL references a
+            file with a single JSON array of redirect_uri values.
+        subject_type (Union[Unset, str]): SubjectType requested for responses to this Client. The
+            subject_types_supported Discovery parameter contains a
+            list of the supported subject_type values for this server. Valid types include `pairwise` and `public`.
+        token_endpoint_auth_method (Union[Unset, str]): Requested Client Authentication method for the Token Endpoint.
+            The options are client_secret_post,
+            client_secret_basic, private_key_jwt, and none.
+        token_endpoint_auth_signing_alg (Union[Unset, str]): Requested Client Authentication signing algorithm for the
+            Token Endpoint.
+        tos_uri (Union[Unset, str]): TermsOfServiceURI is a URL string that points to a human-readable terms of service
+            document for the client that describes a contractual relationship
+            between the end-user and the client that the end-user accepts when
+            authorizing the client.
+        updated_at (Union[Unset, datetime.datetime]): UpdatedAt returns the timestamp of the last update.
+        userinfo_signed_response_alg (Union[Unset, str]): JWS alg algorithm [JWA] REQUIRED for signing UserInfo
+            Responses. If this is specified, the response will be JWT
+            [JWT] serialized, and signed using JWS. The default, if omitted, is for the UserInfo Response to return the
+            Claims
+            as a UTF-8 encoded JSON object using the application/json content-type.
+    """
+
+    allowed_cors_origins: Union[Unset, List[str]] = UNSET
+    audience: Union[Unset, List[str]] = UNSET
+    backchannel_logout_session_required: Union[Unset, bool] = UNSET
+    backchannel_logout_uri: Union[Unset, str] = UNSET
+    client_id: Union[Unset, str] = UNSET
+    client_name: Union[Unset, str] = UNSET
+    client_secret: Union[Unset, str] = UNSET
+    client_secret_expires_at: Union[Unset, int] = UNSET
+    client_uri: Union[Unset, str] = UNSET
+    contacts: Union[Unset, List[str]] = UNSET
+    created_at: Union[Unset, datetime.datetime] = UNSET
+    frontchannel_logout_session_required: Union[Unset, bool] = UNSET
+    frontchannel_logout_uri: Union[Unset, str] = UNSET
+    grant_types: Union[Unset, List[str]] = UNSET
+    jwks: Union[Unset, JoseJSONWebKeySet] = UNSET
+    jwks_uri: Union[Unset, str] = UNSET
+    logo_uri: Union[Unset, str] = UNSET
+    metadata: Union[Unset, JSONRawMessage] = UNSET
+    owner: Union[Unset, str] = UNSET
+    policy_uri: Union[Unset, str] = UNSET
+    post_logout_redirect_uris: Union[Unset, List[str]] = UNSET
+    redirect_uris: Union[Unset, List[str]] = UNSET
+    request_object_signing_alg: Union[Unset, str] = UNSET
+    request_uris: Union[Unset, List[str]] = UNSET
+    response_types: Union[Unset, List[str]] = UNSET
+    scope: Union[Unset, str] = UNSET
+    sector_identifier_uri: Union[Unset, str] = UNSET
+    subject_type: Union[Unset, str] = UNSET
+    token_endpoint_auth_method: Union[Unset, str] = UNSET
+    token_endpoint_auth_signing_alg: Union[Unset, str] = UNSET
+    tos_uri: Union[Unset, str] = UNSET
+    updated_at: Union[Unset, datetime.datetime] = UNSET
+    userinfo_signed_response_alg: Union[Unset, str] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        allowed_cors_origins: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.allowed_cors_origins, Unset):
+            allowed_cors_origins = self.allowed_cors_origins
+
+        audience: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.audience, Unset):
+            audience = self.audience
+
+        backchannel_logout_session_required = self.backchannel_logout_session_required
+        backchannel_logout_uri = self.backchannel_logout_uri
+        client_id = self.client_id
+        client_name = self.client_name
+        client_secret = self.client_secret
+        client_secret_expires_at = self.client_secret_expires_at
+        client_uri = self.client_uri
+        contacts: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.contacts, Unset):
+            contacts = self.contacts
+
+        created_at: Union[Unset, str] = UNSET
+        if not isinstance(self.created_at, Unset):
+            created_at = self.created_at.isoformat()
+
+        frontchannel_logout_session_required = self.frontchannel_logout_session_required
+        frontchannel_logout_uri = self.frontchannel_logout_uri
+        grant_types: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.grant_types, Unset):
+            grant_types = self.grant_types
+
+        jwks: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.jwks, Unset):
+            jwks = self.jwks.to_dict()
+
+        jwks_uri = self.jwks_uri
+        logo_uri = self.logo_uri
+        metadata: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.metadata, Unset):
+            metadata = self.metadata.to_dict()
+
+        owner = self.owner
+        policy_uri = self.policy_uri
+        post_logout_redirect_uris: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.post_logout_redirect_uris, Unset):
+            post_logout_redirect_uris = self.post_logout_redirect_uris
+
+        redirect_uris: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.redirect_uris, Unset):
+            redirect_uris = self.redirect_uris
+
+        request_object_signing_alg = self.request_object_signing_alg
+        request_uris: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.request_uris, Unset):
+            request_uris = self.request_uris
+
+        response_types: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.response_types, Unset):
+            response_types = self.response_types
+
+        scope = self.scope
+        sector_identifier_uri = self.sector_identifier_uri
+        subject_type = self.subject_type
+        token_endpoint_auth_method = self.token_endpoint_auth_method
+        token_endpoint_auth_signing_alg = self.token_endpoint_auth_signing_alg
+        tos_uri = self.tos_uri
+        updated_at: Union[Unset, str] = UNSET
+        if not isinstance(self.updated_at, Unset):
+            updated_at = self.updated_at.isoformat()
+
+        userinfo_signed_response_alg = self.userinfo_signed_response_alg
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if allowed_cors_origins is not UNSET:
+            field_dict["allowed_cors_origins"] = allowed_cors_origins
+        if audience is not UNSET:
+            field_dict["audience"] = audience
+        if backchannel_logout_session_required is not UNSET:
+            field_dict["backchannel_logout_session_required"] = backchannel_logout_session_required
+        if backchannel_logout_uri is not UNSET:
+            field_dict["backchannel_logout_uri"] = backchannel_logout_uri
+        if client_id is not UNSET:
+            field_dict["client_id"] = client_id
+        if client_name is not UNSET:
+            field_dict["client_name"] = client_name
+        if client_secret is not UNSET:
+            field_dict["client_secret"] = client_secret
+        if client_secret_expires_at is not UNSET:
+            field_dict["client_secret_expires_at"] = client_secret_expires_at
+        if client_uri is not UNSET:
+            field_dict["client_uri"] = client_uri
+        if contacts is not UNSET:
+            field_dict["contacts"] = contacts
+        if created_at is not UNSET:
+            field_dict["created_at"] = created_at
+        if frontchannel_logout_session_required is not UNSET:
+            field_dict["frontchannel_logout_session_required"] = frontchannel_logout_session_required
+        if frontchannel_logout_uri is not UNSET:
+            field_dict["frontchannel_logout_uri"] = frontchannel_logout_uri
+        if grant_types is not UNSET:
+            field_dict["grant_types"] = grant_types
+        if jwks is not UNSET:
+            field_dict["jwks"] = jwks
+        if jwks_uri is not UNSET:
+            field_dict["jwks_uri"] = jwks_uri
+        if logo_uri is not UNSET:
+            field_dict["logo_uri"] = logo_uri
+        if metadata is not UNSET:
+            field_dict["metadata"] = metadata
+        if owner is not UNSET:
+            field_dict["owner"] = owner
+        if policy_uri is not UNSET:
+            field_dict["policy_uri"] = policy_uri
+        if post_logout_redirect_uris is not UNSET:
+            field_dict["post_logout_redirect_uris"] = post_logout_redirect_uris
+        if redirect_uris is not UNSET:
+            field_dict["redirect_uris"] = redirect_uris
+        if request_object_signing_alg is not UNSET:
+            field_dict["request_object_signing_alg"] = request_object_signing_alg
+        if request_uris is not UNSET:
+            field_dict["request_uris"] = request_uris
+        if response_types is not UNSET:
+            field_dict["response_types"] = response_types
+        if scope is not UNSET:
+            field_dict["scope"] = scope
+        if sector_identifier_uri is not UNSET:
+            field_dict["sector_identifier_uri"] = sector_identifier_uri
+        if subject_type is not UNSET:
+            field_dict["subject_type"] = subject_type
+        if token_endpoint_auth_method is not UNSET:
+            field_dict["token_endpoint_auth_method"] = token_endpoint_auth_method
+        if token_endpoint_auth_signing_alg is not UNSET:
+            field_dict["token_endpoint_auth_signing_alg"] = token_endpoint_auth_signing_alg
+        if tos_uri is not UNSET:
+            field_dict["tos_uri"] = tos_uri
+        if updated_at is not UNSET:
+            field_dict["updated_at"] = updated_at
+        if userinfo_signed_response_alg is not UNSET:
+            field_dict["userinfo_signed_response_alg"] = userinfo_signed_response_alg
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        allowed_cors_origins = cast(List[str], _d.pop("allowed_cors_origins", UNSET))
+
+        audience = cast(List[str], _d.pop("audience", UNSET))
+
+        backchannel_logout_session_required = _d.pop("backchannel_logout_session_required", UNSET)
+
+        backchannel_logout_uri = _d.pop("backchannel_logout_uri", UNSET)
+
+        client_id = _d.pop("client_id", UNSET)
+
+        client_name = _d.pop("client_name", UNSET)
+
+        client_secret = _d.pop("client_secret", UNSET)
+
+        client_secret_expires_at = _d.pop("client_secret_expires_at", UNSET)
+
+        client_uri = _d.pop("client_uri", UNSET)
+
+        contacts = cast(List[str], _d.pop("contacts", UNSET))
+
+        _created_at = _d.pop("created_at", UNSET)
+        created_at: Union[Unset, datetime.datetime]
+        if isinstance(_created_at, Unset):
+            created_at = UNSET
+        else:
+            created_at = isoparse(_created_at)
+
+        frontchannel_logout_session_required = _d.pop("frontchannel_logout_session_required", UNSET)
+
+        frontchannel_logout_uri = _d.pop("frontchannel_logout_uri", UNSET)
+
+        grant_types = cast(List[str], _d.pop("grant_types", UNSET))
+
+        _jwks = _d.pop("jwks", UNSET)
+        jwks: Union[Unset, JoseJSONWebKeySet]
+        if isinstance(_jwks, Unset):
+            jwks = UNSET
+        else:
+            jwks = JoseJSONWebKeySet.from_dict(_jwks)
+
+        jwks_uri = _d.pop("jwks_uri", UNSET)
+
+        logo_uri = _d.pop("logo_uri", UNSET)
+
+        _metadata = _d.pop("metadata", UNSET)
+        metadata: Union[Unset, JSONRawMessage]
+        if isinstance(_metadata, Unset):
+            metadata = UNSET
+        else:
+            metadata = JSONRawMessage.from_dict(_metadata)
+
+        owner = _d.pop("owner", UNSET)
+
+        policy_uri = _d.pop("policy_uri", UNSET)
+
+        post_logout_redirect_uris = cast(List[str], _d.pop("post_logout_redirect_uris", UNSET))
+
+        redirect_uris = cast(List[str], _d.pop("redirect_uris", UNSET))
+
+        request_object_signing_alg = _d.pop("request_object_signing_alg", UNSET)
+
+        request_uris = cast(List[str], _d.pop("request_uris", UNSET))
+
+        response_types = cast(List[str], _d.pop("response_types", UNSET))
+
+        scope = _d.pop("scope", UNSET)
+
+        sector_identifier_uri = _d.pop("sector_identifier_uri", UNSET)
+
+        subject_type = _d.pop("subject_type", UNSET)
+
+        token_endpoint_auth_method = _d.pop("token_endpoint_auth_method", UNSET)
+
+        token_endpoint_auth_signing_alg = _d.pop("token_endpoint_auth_signing_alg", UNSET)
+
+        tos_uri = _d.pop("tos_uri", UNSET)
+
+        _updated_at = _d.pop("updated_at", UNSET)
+        updated_at: Union[Unset, datetime.datetime]
+        if isinstance(_updated_at, Unset):
+            updated_at = UNSET
+        else:
+            updated_at = isoparse(_updated_at)
+
+        userinfo_signed_response_alg = _d.pop("userinfo_signed_response_alg", UNSET)
+
+        o_auth_2_client = cls(
+            allowed_cors_origins=allowed_cors_origins,
+            audience=audience,
+            backchannel_logout_session_required=backchannel_logout_session_required,
+            backchannel_logout_uri=backchannel_logout_uri,
+            client_id=client_id,
+            client_name=client_name,
+            client_secret=client_secret,
+            client_secret_expires_at=client_secret_expires_at,
+            client_uri=client_uri,
+            contacts=contacts,
+            created_at=created_at,
+            frontchannel_logout_session_required=frontchannel_logout_session_required,
+            frontchannel_logout_uri=frontchannel_logout_uri,
+            grant_types=grant_types,
+            jwks=jwks,
+            jwks_uri=jwks_uri,
+            logo_uri=logo_uri,
+            metadata=metadata,
+            owner=owner,
+            policy_uri=policy_uri,
+            post_logout_redirect_uris=post_logout_redirect_uris,
+            redirect_uris=redirect_uris,
+            request_object_signing_alg=request_object_signing_alg,
+            request_uris=request_uris,
+            response_types=response_types,
+            scope=scope,
+            sector_identifier_uri=sector_identifier_uri,
+            subject_type=subject_type,
+            token_endpoint_auth_method=token_endpoint_auth_method,
+            token_endpoint_auth_signing_alg=token_endpoint_auth_signing_alg,
+            tos_uri=tos_uri,
+            updated_at=updated_at,
+            userinfo_signed_response_alg=userinfo_signed_response_alg,
+        )
+
+        o_auth_2_client.additional_properties = _d
+        return o_auth_2_client
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/o_auth_2_token_introspection.py b/libs/ory-hydra-client/ory_hydra_client/models/o_auth_2_token_introspection.py
new file mode 100644
index 0000000..d0e8689
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/o_auth_2_token_introspection.py
@@ -0,0 +1,197 @@
+from typing import Any, Dict, List, Type, TypeVar, Union, cast
+
+import attr
+
+from ..models.o_auth_2_token_introspection_ext import OAuth2TokenIntrospectionExt
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="OAuth2TokenIntrospection")
+
+
+@attr.s(auto_attribs=True)
+class OAuth2TokenIntrospection:
+    """https://tools.ietf.org/html/rfc7662
+
+    Attributes:
+        active (bool): Active is a boolean indicator of whether or not the presented token
+            is currently active.  The specifics of a token's "active" state
+            will vary depending on the implementation of the authorization
+            server and the information it keeps about its tokens, but a "true"
+            value return for the "active" property will generally indicate
+            that a given token has been issued by this authorization server,
+            has not been revoked by the resource owner, and is within its
+            given time window of validity (e.g., after its issuance time and
+            before its expiration time).
+        aud (Union[Unset, List[str]]): Audience contains a list of the token's intended audiences.
+        client_id (Union[Unset, str]): ID is aclient identifier for the OAuth 2.0 client that
+            requested this token.
+        exp (Union[Unset, int]): Expires at is an integer timestamp, measured in the number of seconds
+            since January 1 1970 UTC, indicating when this token will expire.
+        ext (Union[Unset, OAuth2TokenIntrospectionExt]): Extra is arbitrary data set by the session.
+        iat (Union[Unset, int]): Issued at is an integer timestamp, measured in the number of seconds
+            since January 1 1970 UTC, indicating when this token was
+            originally issued.
+        iss (Union[Unset, str]): IssuerURL is a string representing the issuer of this token
+        nbf (Union[Unset, int]): NotBefore is an integer timestamp, measured in the number of seconds
+            since January 1 1970 UTC, indicating when this token is not to be
+            used before.
+        obfuscated_subject (Union[Unset, str]): ObfuscatedSubject is set when the subject identifier algorithm was set
+            to "pairwise" during authorization.
+            It is the `sub` value of the ID Token that was issued.
+        scope (Union[Unset, str]): Scope is a JSON string containing a space-separated list of
+            scopes associated with this token.
+        sub (Union[Unset, str]): Subject of the token, as defined in JWT [RFC7519].
+            Usually a machine-readable identifier of the resource owner who
+            authorized this token.
+        token_type (Union[Unset, str]): TokenType is the introspected token's type, typically `Bearer`.
+        token_use (Union[Unset, str]): TokenUse is the introspected token's use, for example `access_token` or
+            `refresh_token`.
+        username (Union[Unset, str]): Username is a human-readable identifier for the resource owner who
+            authorized this token.
+    """
+
+    active: bool
+    aud: Union[Unset, List[str]] = UNSET
+    client_id: Union[Unset, str] = UNSET
+    exp: Union[Unset, int] = UNSET
+    ext: Union[Unset, OAuth2TokenIntrospectionExt] = UNSET
+    iat: Union[Unset, int] = UNSET
+    iss: Union[Unset, str] = UNSET
+    nbf: Union[Unset, int] = UNSET
+    obfuscated_subject: Union[Unset, str] = UNSET
+    scope: Union[Unset, str] = UNSET
+    sub: Union[Unset, str] = UNSET
+    token_type: Union[Unset, str] = UNSET
+    token_use: Union[Unset, str] = UNSET
+    username: Union[Unset, str] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        active = self.active
+        aud: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.aud, Unset):
+            aud = self.aud
+
+        client_id = self.client_id
+        exp = self.exp
+        ext: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.ext, Unset):
+            ext = self.ext.to_dict()
+
+        iat = self.iat
+        iss = self.iss
+        nbf = self.nbf
+        obfuscated_subject = self.obfuscated_subject
+        scope = self.scope
+        sub = self.sub
+        token_type = self.token_type
+        token_use = self.token_use
+        username = self.username
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "active": active,
+            }
+        )
+        if aud is not UNSET:
+            field_dict["aud"] = aud
+        if client_id is not UNSET:
+            field_dict["client_id"] = client_id
+        if exp is not UNSET:
+            field_dict["exp"] = exp
+        if ext is not UNSET:
+            field_dict["ext"] = ext
+        if iat is not UNSET:
+            field_dict["iat"] = iat
+        if iss is not UNSET:
+            field_dict["iss"] = iss
+        if nbf is not UNSET:
+            field_dict["nbf"] = nbf
+        if obfuscated_subject is not UNSET:
+            field_dict["obfuscated_subject"] = obfuscated_subject
+        if scope is not UNSET:
+            field_dict["scope"] = scope
+        if sub is not UNSET:
+            field_dict["sub"] = sub
+        if token_type is not UNSET:
+            field_dict["token_type"] = token_type
+        if token_use is not UNSET:
+            field_dict["token_use"] = token_use
+        if username is not UNSET:
+            field_dict["username"] = username
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        active = _d.pop("active")
+
+        aud = cast(List[str], _d.pop("aud", UNSET))
+
+        client_id = _d.pop("client_id", UNSET)
+
+        exp = _d.pop("exp", UNSET)
+
+        _ext = _d.pop("ext", UNSET)
+        ext: Union[Unset, OAuth2TokenIntrospectionExt]
+        if isinstance(_ext, Unset):
+            ext = UNSET
+        else:
+            ext = OAuth2TokenIntrospectionExt.from_dict(_ext)
+
+        iat = _d.pop("iat", UNSET)
+
+        iss = _d.pop("iss", UNSET)
+
+        nbf = _d.pop("nbf", UNSET)
+
+        obfuscated_subject = _d.pop("obfuscated_subject", UNSET)
+
+        scope = _d.pop("scope", UNSET)
+
+        sub = _d.pop("sub", UNSET)
+
+        token_type = _d.pop("token_type", UNSET)
+
+        token_use = _d.pop("token_use", UNSET)
+
+        username = _d.pop("username", UNSET)
+
+        o_auth_2_token_introspection = cls(
+            active=active,
+            aud=aud,
+            client_id=client_id,
+            exp=exp,
+            ext=ext,
+            iat=iat,
+            iss=iss,
+            nbf=nbf,
+            obfuscated_subject=obfuscated_subject,
+            scope=scope,
+            sub=sub,
+            token_type=token_type,
+            token_use=token_use,
+            username=username,
+        )
+
+        o_auth_2_token_introspection.additional_properties = _d
+        return o_auth_2_token_introspection
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/o_auth_2_token_introspection_ext.py b/libs/ory-hydra-client/ory_hydra_client/models/o_auth_2_token_introspection_ext.py
new file mode 100644
index 0000000..5b6bfdd
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/o_auth_2_token_introspection_ext.py
@@ -0,0 +1,44 @@
+from typing import Any, Dict, List, Type, TypeVar
+
+import attr
+
+T = TypeVar("T", bound="OAuth2TokenIntrospectionExt")
+
+
+@attr.s(auto_attribs=True)
+class OAuth2TokenIntrospectionExt:
+    """Extra is arbitrary data set by the session."""
+
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        o_auth_2_token_introspection_ext = cls()
+
+        o_auth_2_token_introspection_ext.additional_properties = _d
+        return o_auth_2_token_introspection_ext
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/oauth_2_token_response.py b/libs/ory-hydra-client/ory_hydra_client/models/oauth_2_token_response.py
new file mode 100644
index 0000000..028254b
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/oauth_2_token_response.py
@@ -0,0 +1,98 @@
+from typing import Any, Dict, List, Type, TypeVar, Union
+
+import attr
+
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="Oauth2TokenResponse")
+
+
+@attr.s(auto_attribs=True)
+class Oauth2TokenResponse:
+    """The Access Token Response
+
+    Attributes:
+        access_token (Union[Unset, str]):
+        expires_in (Union[Unset, int]):
+        id_token (Union[Unset, str]):
+        refresh_token (Union[Unset, str]):
+        scope (Union[Unset, str]):
+        token_type (Union[Unset, str]):
+    """
+
+    access_token: Union[Unset, str] = UNSET
+    expires_in: Union[Unset, int] = UNSET
+    id_token: Union[Unset, str] = UNSET
+    refresh_token: Union[Unset, str] = UNSET
+    scope: Union[Unset, str] = UNSET
+    token_type: Union[Unset, str] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        access_token = self.access_token
+        expires_in = self.expires_in
+        id_token = self.id_token
+        refresh_token = self.refresh_token
+        scope = self.scope
+        token_type = self.token_type
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if access_token is not UNSET:
+            field_dict["access_token"] = access_token
+        if expires_in is not UNSET:
+            field_dict["expires_in"] = expires_in
+        if id_token is not UNSET:
+            field_dict["id_token"] = id_token
+        if refresh_token is not UNSET:
+            field_dict["refresh_token"] = refresh_token
+        if scope is not UNSET:
+            field_dict["scope"] = scope
+        if token_type is not UNSET:
+            field_dict["token_type"] = token_type
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        access_token = _d.pop("access_token", UNSET)
+
+        expires_in = _d.pop("expires_in", UNSET)
+
+        id_token = _d.pop("id_token", UNSET)
+
+        refresh_token = _d.pop("refresh_token", UNSET)
+
+        scope = _d.pop("scope", UNSET)
+
+        token_type = _d.pop("token_type", UNSET)
+
+        oauth_2_token_response = cls(
+            access_token=access_token,
+            expires_in=expires_in,
+            id_token=id_token,
+            refresh_token=refresh_token,
+            scope=scope,
+            token_type=token_type,
+        )
+
+        oauth_2_token_response.additional_properties = _d
+        return oauth_2_token_response
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/open_id_connect_context.py b/libs/ory-hydra-client/ory_hydra_client/models/open_id_connect_context.py
new file mode 100644
index 0000000..44eb16f
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/open_id_connect_context.py
@@ -0,0 +1,140 @@
+from typing import Any, Dict, List, Type, TypeVar, Union, cast
+
+import attr
+
+from ..models.open_id_connect_context_id_token_hint_claims import OpenIDConnectContextIdTokenHintClaims
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="OpenIDConnectContext")
+
+
+@attr.s(auto_attribs=True)
+class OpenIDConnectContext:
+    """
+    Attributes:
+        acr_values (Union[Unset, List[str]]): ACRValues is the Authentication AuthorizationContext Class Reference
+            requested in the OAuth 2.0 Authorization request.
+            It is a parameter defined by OpenID Connect and expresses which level of authentication (e.g. 2FA) is required.
+
+            OpenID Connect defines it as follows:
+            > Requested Authentication AuthorizationContext Class Reference values. Space-separated string that specifies
+            the acr values
+            that the Authorization Server is being requested to use for processing this Authentication Request, with the
+            values appearing in order of preference. The Authentication AuthorizationContext Class satisfied by the
+            authentication
+            performed is returned as the acr Claim Value, as specified in Section 2. The acr Claim is requested as a
+            Voluntary Claim by this parameter.
+        display (Union[Unset, str]): Display is a string value that specifies how the Authorization Server displays the
+            authentication and consent user interface pages to the End-User.
+            The defined values are:
+            page: The Authorization Server SHOULD display the authentication and consent UI consistent with a full User
+            Agent page view. If the display parameter is not specified, this is the default display mode.
+            popup: The Authorization Server SHOULD display the authentication and consent UI consistent with a popup User
+            Agent window. The popup User Agent window should be of an appropriate size for a login-focused dialog and should
+            not obscure the entire window that it is popping up over.
+            touch: The Authorization Server SHOULD display the authentication and consent UI consistent with a device that
+            leverages a touch interface.
+            wap: The Authorization Server SHOULD display the authentication and consent UI consistent with a "feature phone"
+            type display.
+
+            The Authorization Server MAY also attempt to detect the capabilities of the User Agent and present an
+            appropriate display.
+        id_token_hint_claims (Union[Unset, OpenIDConnectContextIdTokenHintClaims]): IDTokenHintClaims are the claims of
+            the ID Token previously issued by the Authorization Server being passed as a hint about the
+            End-User's current or past authenticated session with the Client.
+        login_hint (Union[Unset, str]): LoginHint hints about the login identifier the End-User might use to log in (if
+            necessary).
+            This hint can be used by an RP if it first asks the End-User for their e-mail address (or other identifier)
+            and then wants to pass that value as a hint to the discovered authorization service. This value MAY also be a
+            phone number in the format specified for the phone_number Claim. The use of this parameter is optional.
+        ui_locales (Union[Unset, List[str]]): UILocales is the End-User'id preferred languages and scripts for the user
+            interface, represented as a
+            space-separated list of BCP47 [RFC5646] language tag values, ordered by preference. For instance, the value
+            "fr-CA fr en" represents a preference for French as spoken in Canada, then French (without a region
+            designation),
+            followed by English (without a region designation). An error SHOULD NOT result if some or all of the requested
+            locales are not supported by the OpenID Provider.
+    """
+
+    acr_values: Union[Unset, List[str]] = UNSET
+    display: Union[Unset, str] = UNSET
+    id_token_hint_claims: Union[Unset, OpenIDConnectContextIdTokenHintClaims] = UNSET
+    login_hint: Union[Unset, str] = UNSET
+    ui_locales: Union[Unset, List[str]] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        acr_values: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.acr_values, Unset):
+            acr_values = self.acr_values
+
+        display = self.display
+        id_token_hint_claims: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.id_token_hint_claims, Unset):
+            id_token_hint_claims = self.id_token_hint_claims.to_dict()
+
+        login_hint = self.login_hint
+        ui_locales: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.ui_locales, Unset):
+            ui_locales = self.ui_locales
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if acr_values is not UNSET:
+            field_dict["acr_values"] = acr_values
+        if display is not UNSET:
+            field_dict["display"] = display
+        if id_token_hint_claims is not UNSET:
+            field_dict["id_token_hint_claims"] = id_token_hint_claims
+        if login_hint is not UNSET:
+            field_dict["login_hint"] = login_hint
+        if ui_locales is not UNSET:
+            field_dict["ui_locales"] = ui_locales
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        acr_values = cast(List[str], _d.pop("acr_values", UNSET))
+
+        display = _d.pop("display", UNSET)
+
+        _id_token_hint_claims = _d.pop("id_token_hint_claims", UNSET)
+        id_token_hint_claims: Union[Unset, OpenIDConnectContextIdTokenHintClaims]
+        if isinstance(_id_token_hint_claims, Unset):
+            id_token_hint_claims = UNSET
+        else:
+            id_token_hint_claims = OpenIDConnectContextIdTokenHintClaims.from_dict(_id_token_hint_claims)
+
+        login_hint = _d.pop("login_hint", UNSET)
+
+        ui_locales = cast(List[str], _d.pop("ui_locales", UNSET))
+
+        open_id_connect_context = cls(
+            acr_values=acr_values,
+            display=display,
+            id_token_hint_claims=id_token_hint_claims,
+            login_hint=login_hint,
+            ui_locales=ui_locales,
+        )
+
+        open_id_connect_context.additional_properties = _d
+        return open_id_connect_context
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/open_id_connect_context_id_token_hint_claims.py b/libs/ory-hydra-client/ory_hydra_client/models/open_id_connect_context_id_token_hint_claims.py
new file mode 100644
index 0000000..3fa84e3
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/open_id_connect_context_id_token_hint_claims.py
@@ -0,0 +1,48 @@
+from typing import Any, Dict, List, Type, TypeVar
+
+import attr
+
+T = TypeVar("T", bound="OpenIDConnectContextIdTokenHintClaims")
+
+
+@attr.s(auto_attribs=True)
+class OpenIDConnectContextIdTokenHintClaims:
+    """IDTokenHintClaims are the claims of the ID Token previously issued by the Authorization Server being passed as a
+    hint about the
+    End-User's current or past authenticated session with the Client.
+
+    """
+
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        open_id_connect_context_id_token_hint_claims = cls()
+
+        open_id_connect_context_id_token_hint_claims.additional_properties = _d
+        return open_id_connect_context_id_token_hint_claims
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/plugin_config.py b/libs/ory-hydra-client/ory_hydra_client/models/plugin_config.py
new file mode 100644
index 0000000..e4019c9
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/plugin_config.py
@@ -0,0 +1,215 @@
+from typing import Any, Dict, List, Type, TypeVar, Union, cast
+
+import attr
+
+from ..models.plugin_config_args import PluginConfigArgs
+from ..models.plugin_config_interface import PluginConfigInterface
+from ..models.plugin_config_linux import PluginConfigLinux
+from ..models.plugin_config_network import PluginConfigNetwork
+from ..models.plugin_config_rootfs import PluginConfigRootfs
+from ..models.plugin_config_user import PluginConfigUser
+from ..models.plugin_env import PluginEnv
+from ..models.plugin_mount import PluginMount
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="PluginConfig")
+
+
+@attr.s(auto_attribs=True)
+class PluginConfig:
+    """
+    Attributes:
+        args (PluginConfigArgs): PluginConfigArgs plugin config args
+        description (str): description
+        documentation (str): documentation
+        entrypoint (List[str]): entrypoint
+        env (List[PluginEnv]): env
+        interface (PluginConfigInterface): PluginConfigInterface The interface between Docker and the plugin
+        ipc_host (bool): ipc host
+        linux (PluginConfigLinux): PluginConfigLinux plugin config linux
+        mounts (List[PluginMount]): mounts
+        network (PluginConfigNetwork): PluginConfigNetwork plugin config network
+        pid_host (bool): pid host
+        propagated_mount (str): propagated mount
+        work_dir (str): work dir
+        docker_version (Union[Unset, str]): Docker Version used to create the plugin
+        user (Union[Unset, PluginConfigUser]): PluginConfigUser plugin config user
+        rootfs (Union[Unset, PluginConfigRootfs]): PluginConfigRootfs plugin config rootfs
+    """
+
+    args: PluginConfigArgs
+    description: str
+    documentation: str
+    entrypoint: List[str]
+    env: List[PluginEnv]
+    interface: PluginConfigInterface
+    ipc_host: bool
+    linux: PluginConfigLinux
+    mounts: List[PluginMount]
+    network: PluginConfigNetwork
+    pid_host: bool
+    propagated_mount: str
+    work_dir: str
+    docker_version: Union[Unset, str] = UNSET
+    user: Union[Unset, PluginConfigUser] = UNSET
+    rootfs: Union[Unset, PluginConfigRootfs] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        args = self.args.to_dict()
+
+        description = self.description
+        documentation = self.documentation
+        entrypoint = self.entrypoint
+
+        env = []
+        for env_item_data in self.env:
+            env_item = env_item_data.to_dict()
+
+            env.append(env_item)
+
+        interface = self.interface.to_dict()
+
+        ipc_host = self.ipc_host
+        linux = self.linux.to_dict()
+
+        mounts = []
+        for mounts_item_data in self.mounts:
+            mounts_item = mounts_item_data.to_dict()
+
+            mounts.append(mounts_item)
+
+        network = self.network.to_dict()
+
+        pid_host = self.pid_host
+        propagated_mount = self.propagated_mount
+        work_dir = self.work_dir
+        docker_version = self.docker_version
+        user: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.user, Unset):
+            user = self.user.to_dict()
+
+        rootfs: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.rootfs, Unset):
+            rootfs = self.rootfs.to_dict()
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "Args": args,
+                "Description": description,
+                "Documentation": documentation,
+                "Entrypoint": entrypoint,
+                "Env": env,
+                "Interface": interface,
+                "IpcHost": ipc_host,
+                "Linux": linux,
+                "Mounts": mounts,
+                "Network": network,
+                "PidHost": pid_host,
+                "PropagatedMount": propagated_mount,
+                "WorkDir": work_dir,
+            }
+        )
+        if docker_version is not UNSET:
+            field_dict["DockerVersion"] = docker_version
+        if user is not UNSET:
+            field_dict["User"] = user
+        if rootfs is not UNSET:
+            field_dict["rootfs"] = rootfs
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        args = PluginConfigArgs.from_dict(_d.pop("Args"))
+
+        description = _d.pop("Description")
+
+        documentation = _d.pop("Documentation")
+
+        entrypoint = cast(List[str], _d.pop("Entrypoint"))
+
+        env = []
+        _env = _d.pop("Env")
+        for env_item_data in _env:
+            env_item = PluginEnv.from_dict(env_item_data)
+
+            env.append(env_item)
+
+        interface = PluginConfigInterface.from_dict(_d.pop("Interface"))
+
+        ipc_host = _d.pop("IpcHost")
+
+        linux = PluginConfigLinux.from_dict(_d.pop("Linux"))
+
+        mounts = []
+        _mounts = _d.pop("Mounts")
+        for mounts_item_data in _mounts:
+            mounts_item = PluginMount.from_dict(mounts_item_data)
+
+            mounts.append(mounts_item)
+
+        network = PluginConfigNetwork.from_dict(_d.pop("Network"))
+
+        pid_host = _d.pop("PidHost")
+
+        propagated_mount = _d.pop("PropagatedMount")
+
+        work_dir = _d.pop("WorkDir")
+
+        docker_version = _d.pop("DockerVersion", UNSET)
+
+        _user = _d.pop("User", UNSET)
+        user: Union[Unset, PluginConfigUser]
+        if isinstance(_user, Unset):
+            user = UNSET
+        else:
+            user = PluginConfigUser.from_dict(_user)
+
+        _rootfs = _d.pop("rootfs", UNSET)
+        rootfs: Union[Unset, PluginConfigRootfs]
+        if isinstance(_rootfs, Unset):
+            rootfs = UNSET
+        else:
+            rootfs = PluginConfigRootfs.from_dict(_rootfs)
+
+        plugin_config = cls(
+            args=args,
+            description=description,
+            documentation=documentation,
+            entrypoint=entrypoint,
+            env=env,
+            interface=interface,
+            ipc_host=ipc_host,
+            linux=linux,
+            mounts=mounts,
+            network=network,
+            pid_host=pid_host,
+            propagated_mount=propagated_mount,
+            work_dir=work_dir,
+            docker_version=docker_version,
+            user=user,
+            rootfs=rootfs,
+        )
+
+        plugin_config.additional_properties = _d
+        return plugin_config
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_args.py b/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_args.py
new file mode 100644
index 0000000..2e0e932
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_args.py
@@ -0,0 +1,80 @@
+from typing import Any, Dict, List, Type, TypeVar, cast
+
+import attr
+
+T = TypeVar("T", bound="PluginConfigArgs")
+
+
+@attr.s(auto_attribs=True)
+class PluginConfigArgs:
+    """PluginConfigArgs plugin config args
+
+    Attributes:
+        description (str): description
+        name (str): name
+        settable (List[str]): settable
+        value (List[str]): value
+    """
+
+    description: str
+    name: str
+    settable: List[str]
+    value: List[str]
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        description = self.description
+        name = self.name
+        settable = self.settable
+
+        value = self.value
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "Description": description,
+                "Name": name,
+                "Settable": settable,
+                "Value": value,
+            }
+        )
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        description = _d.pop("Description")
+
+        name = _d.pop("Name")
+
+        settable = cast(List[str], _d.pop("Settable"))
+
+        value = cast(List[str], _d.pop("Value"))
+
+        plugin_config_args = cls(
+            description=description,
+            name=name,
+            settable=settable,
+            value=value,
+        )
+
+        plugin_config_args.additional_properties = _d
+        return plugin_config_args
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_interface.py b/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_interface.py
new file mode 100644
index 0000000..260e987
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_interface.py
@@ -0,0 +1,76 @@
+from typing import Any, Dict, List, Type, TypeVar
+
+import attr
+
+from ..models.plugin_interface_type import PluginInterfaceType
+
+T = TypeVar("T", bound="PluginConfigInterface")
+
+
+@attr.s(auto_attribs=True)
+class PluginConfigInterface:
+    """PluginConfigInterface The interface between Docker and the plugin
+
+    Attributes:
+        socket (str): socket
+        types (List[PluginInterfaceType]): types
+    """
+
+    socket: str
+    types: List[PluginInterfaceType]
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        socket = self.socket
+        types = []
+        for types_item_data in self.types:
+            types_item = types_item_data.to_dict()
+
+            types.append(types_item)
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "Socket": socket,
+                "Types": types,
+            }
+        )
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        socket = _d.pop("Socket")
+
+        types = []
+        _types = _d.pop("Types")
+        for types_item_data in _types:
+            types_item = PluginInterfaceType.from_dict(types_item_data)
+
+            types.append(types_item)
+
+        plugin_config_interface = cls(
+            socket=socket,
+            types=types,
+        )
+
+        plugin_config_interface.additional_properties = _d
+        return plugin_config_interface
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_linux.py b/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_linux.py
new file mode 100644
index 0000000..abe003e
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_linux.py
@@ -0,0 +1,84 @@
+from typing import Any, Dict, List, Type, TypeVar, cast
+
+import attr
+
+from ..models.plugin_device import PluginDevice
+
+T = TypeVar("T", bound="PluginConfigLinux")
+
+
+@attr.s(auto_attribs=True)
+class PluginConfigLinux:
+    """PluginConfigLinux plugin config linux
+
+    Attributes:
+        allow_all_devices (bool): allow all devices
+        capabilities (List[str]): capabilities
+        devices (List[PluginDevice]): devices
+    """
+
+    allow_all_devices: bool
+    capabilities: List[str]
+    devices: List[PluginDevice]
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        allow_all_devices = self.allow_all_devices
+        capabilities = self.capabilities
+
+        devices = []
+        for devices_item_data in self.devices:
+            devices_item = devices_item_data.to_dict()
+
+            devices.append(devices_item)
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "AllowAllDevices": allow_all_devices,
+                "Capabilities": capabilities,
+                "Devices": devices,
+            }
+        )
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        allow_all_devices = _d.pop("AllowAllDevices")
+
+        capabilities = cast(List[str], _d.pop("Capabilities"))
+
+        devices = []
+        _devices = _d.pop("Devices")
+        for devices_item_data in _devices:
+            devices_item = PluginDevice.from_dict(devices_item_data)
+
+            devices.append(devices_item)
+
+        plugin_config_linux = cls(
+            allow_all_devices=allow_all_devices,
+            capabilities=capabilities,
+            devices=devices,
+        )
+
+        plugin_config_linux.additional_properties = _d
+        return plugin_config_linux
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_network.py b/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_network.py
new file mode 100644
index 0000000..074c3dc
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_network.py
@@ -0,0 +1,58 @@
+from typing import Any, Dict, List, Type, TypeVar
+
+import attr
+
+T = TypeVar("T", bound="PluginConfigNetwork")
+
+
+@attr.s(auto_attribs=True)
+class PluginConfigNetwork:
+    """PluginConfigNetwork plugin config network
+
+    Attributes:
+        type (str): type
+    """
+
+    type: str
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        type = self.type
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "Type": type,
+            }
+        )
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        type = _d.pop("Type")
+
+        plugin_config_network = cls(
+            type=type,
+        )
+
+        plugin_config_network.additional_properties = _d
+        return plugin_config_network
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_rootfs.py b/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_rootfs.py
new file mode 100644
index 0000000..1da33c6
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_rootfs.py
@@ -0,0 +1,69 @@
+from typing import Any, Dict, List, Type, TypeVar, Union, cast
+
+import attr
+
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="PluginConfigRootfs")
+
+
+@attr.s(auto_attribs=True)
+class PluginConfigRootfs:
+    """PluginConfigRootfs plugin config rootfs
+
+    Attributes:
+        diff_ids (Union[Unset, List[str]]): diff ids
+        type (Union[Unset, str]): type
+    """
+
+    diff_ids: Union[Unset, List[str]] = UNSET
+    type: Union[Unset, str] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        diff_ids: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.diff_ids, Unset):
+            diff_ids = self.diff_ids
+
+        type = self.type
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if diff_ids is not UNSET:
+            field_dict["diff_ids"] = diff_ids
+        if type is not UNSET:
+            field_dict["type"] = type
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        diff_ids = cast(List[str], _d.pop("diff_ids", UNSET))
+
+        type = _d.pop("type", UNSET)
+
+        plugin_config_rootfs = cls(
+            diff_ids=diff_ids,
+            type=type,
+        )
+
+        plugin_config_rootfs.additional_properties = _d
+        return plugin_config_rootfs
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_user.py b/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_user.py
new file mode 100644
index 0000000..22e24b1
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/plugin_config_user.py
@@ -0,0 +1,66 @@
+from typing import Any, Dict, List, Type, TypeVar, Union
+
+import attr
+
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="PluginConfigUser")
+
+
+@attr.s(auto_attribs=True)
+class PluginConfigUser:
+    """PluginConfigUser plugin config user
+
+    Attributes:
+        gid (Union[Unset, int]): g ID
+        uid (Union[Unset, int]): UID
+    """
+
+    gid: Union[Unset, int] = UNSET
+    uid: Union[Unset, int] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        gid = self.gid
+        uid = self.uid
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if gid is not UNSET:
+            field_dict["GID"] = gid
+        if uid is not UNSET:
+            field_dict["UID"] = uid
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        gid = _d.pop("GID", UNSET)
+
+        uid = _d.pop("UID", UNSET)
+
+        plugin_config_user = cls(
+            gid=gid,
+            uid=uid,
+        )
+
+        plugin_config_user.additional_properties = _d
+        return plugin_config_user
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/plugin_device.py b/libs/ory-hydra-client/ory_hydra_client/models/plugin_device.py
new file mode 100644
index 0000000..5c5584b
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/plugin_device.py
@@ -0,0 +1,79 @@
+from typing import Any, Dict, List, Type, TypeVar, cast
+
+import attr
+
+T = TypeVar("T", bound="PluginDevice")
+
+
+@attr.s(auto_attribs=True)
+class PluginDevice:
+    """PluginDevice plugin device
+
+    Attributes:
+        description (str): description
+        name (str): name
+        path (str): path
+        settable (List[str]): settable
+    """
+
+    description: str
+    name: str
+    path: str
+    settable: List[str]
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        description = self.description
+        name = self.name
+        path = self.path
+        settable = self.settable
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "Description": description,
+                "Name": name,
+                "Path": path,
+                "Settable": settable,
+            }
+        )
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        description = _d.pop("Description")
+
+        name = _d.pop("Name")
+
+        path = _d.pop("Path")
+
+        settable = cast(List[str], _d.pop("Settable"))
+
+        plugin_device = cls(
+            description=description,
+            name=name,
+            path=path,
+            settable=settable,
+        )
+
+        plugin_device.additional_properties = _d
+        return plugin_device
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/plugin_env.py b/libs/ory-hydra-client/ory_hydra_client/models/plugin_env.py
new file mode 100644
index 0000000..3599788
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/plugin_env.py
@@ -0,0 +1,80 @@
+from typing import Any, Dict, List, Type, TypeVar, cast
+
+import attr
+
+T = TypeVar("T", bound="PluginEnv")
+
+
+@attr.s(auto_attribs=True)
+class PluginEnv:
+    """PluginEnv plugin env
+
+    Attributes:
+        description (str): description
+        name (str): name
+        settable (List[str]): settable
+        value (str): value
+    """
+
+    description: str
+    name: str
+    settable: List[str]
+    value: str
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        description = self.description
+        name = self.name
+        settable = self.settable
+
+        value = self.value
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "Description": description,
+                "Name": name,
+                "Settable": settable,
+                "Value": value,
+            }
+        )
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        description = _d.pop("Description")
+
+        name = _d.pop("Name")
+
+        settable = cast(List[str], _d.pop("Settable"))
+
+        value = _d.pop("Value")
+
+        plugin_env = cls(
+            description=description,
+            name=name,
+            settable=settable,
+            value=value,
+        )
+
+        plugin_env.additional_properties = _d
+        return plugin_env
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/plugin_interface_type.py b/libs/ory-hydra-client/ory_hydra_client/models/plugin_interface_type.py
new file mode 100644
index 0000000..b79b108
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/plugin_interface_type.py
@@ -0,0 +1,72 @@
+from typing import Any, Dict, List, Type, TypeVar
+
+import attr
+
+T = TypeVar("T", bound="PluginInterfaceType")
+
+
+@attr.s(auto_attribs=True)
+class PluginInterfaceType:
+    """PluginInterfaceType plugin interface type
+
+    Attributes:
+        capability (str): capability
+        prefix (str): prefix
+        version (str): version
+    """
+
+    capability: str
+    prefix: str
+    version: str
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        capability = self.capability
+        prefix = self.prefix
+        version = self.version
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "Capability": capability,
+                "Prefix": prefix,
+                "Version": version,
+            }
+        )
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        capability = _d.pop("Capability")
+
+        prefix = _d.pop("Prefix")
+
+        version = _d.pop("Version")
+
+        plugin_interface_type = cls(
+            capability=capability,
+            prefix=prefix,
+            version=version,
+        )
+
+        plugin_interface_type.additional_properties = _d
+        return plugin_interface_type
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/plugin_mount.py b/libs/ory-hydra-client/ory_hydra_client/models/plugin_mount.py
new file mode 100644
index 0000000..3a13dca
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/plugin_mount.py
@@ -0,0 +1,102 @@
+from typing import Any, Dict, List, Type, TypeVar, cast
+
+import attr
+
+T = TypeVar("T", bound="PluginMount")
+
+
+@attr.s(auto_attribs=True)
+class PluginMount:
+    """PluginMount plugin mount
+
+    Attributes:
+        description (str): description
+        destination (str): destination
+        name (str): name
+        options (List[str]): options
+        settable (List[str]): settable
+        source (str): source
+        type (str): type
+    """
+
+    description: str
+    destination: str
+    name: str
+    options: List[str]
+    settable: List[str]
+    source: str
+    type: str
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        description = self.description
+        destination = self.destination
+        name = self.name
+        options = self.options
+
+        settable = self.settable
+
+        source = self.source
+        type = self.type
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "Description": description,
+                "Destination": destination,
+                "Name": name,
+                "Options": options,
+                "Settable": settable,
+                "Source": source,
+                "Type": type,
+            }
+        )
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        description = _d.pop("Description")
+
+        destination = _d.pop("Destination")
+
+        name = _d.pop("Name")
+
+        options = cast(List[str], _d.pop("Options"))
+
+        settable = cast(List[str], _d.pop("Settable"))
+
+        source = _d.pop("Source")
+
+        type = _d.pop("Type")
+
+        plugin_mount = cls(
+            description=description,
+            destination=destination,
+            name=name,
+            options=options,
+            settable=settable,
+            source=source,
+            type=type,
+        )
+
+        plugin_mount.additional_properties = _d
+        return plugin_mount
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/plugin_settings.py b/libs/ory-hydra-client/ory_hydra_client/models/plugin_settings.py
new file mode 100644
index 0000000..1a0a2ac
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/plugin_settings.py
@@ -0,0 +1,102 @@
+from typing import Any, Dict, List, Type, TypeVar, cast
+
+import attr
+
+from ..models.plugin_device import PluginDevice
+from ..models.plugin_mount import PluginMount
+
+T = TypeVar("T", bound="PluginSettings")
+
+
+@attr.s(auto_attribs=True)
+class PluginSettings:
+    """
+    Attributes:
+        args (List[str]): args
+        devices (List[PluginDevice]): devices
+        env (List[str]): env
+        mounts (List[PluginMount]): mounts
+    """
+
+    args: List[str]
+    devices: List[PluginDevice]
+    env: List[str]
+    mounts: List[PluginMount]
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        args = self.args
+
+        devices = []
+        for devices_item_data in self.devices:
+            devices_item = devices_item_data.to_dict()
+
+            devices.append(devices_item)
+
+        env = self.env
+
+        mounts = []
+        for mounts_item_data in self.mounts:
+            mounts_item = mounts_item_data.to_dict()
+
+            mounts.append(mounts_item)
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "Args": args,
+                "Devices": devices,
+                "Env": env,
+                "Mounts": mounts,
+            }
+        )
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        args = cast(List[str], _d.pop("Args"))
+
+        devices = []
+        _devices = _d.pop("Devices")
+        for devices_item_data in _devices:
+            devices_item = PluginDevice.from_dict(devices_item_data)
+
+            devices.append(devices_item)
+
+        env = cast(List[str], _d.pop("Env"))
+
+        mounts = []
+        _mounts = _d.pop("Mounts")
+        for mounts_item_data in _mounts:
+            mounts_item = PluginMount.from_dict(mounts_item_data)
+
+            mounts.append(mounts_item)
+
+        plugin_settings = cls(
+            args=args,
+            devices=devices,
+            env=env,
+            mounts=mounts,
+        )
+
+        plugin_settings.additional_properties = _d
+        return plugin_settings
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/previous_consent_session.py b/libs/ory-hydra-client/ory_hydra_client/models/previous_consent_session.py
new file mode 100644
index 0000000..c4e5220
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/previous_consent_session.py
@@ -0,0 +1,144 @@
+import datetime
+from typing import Any, Dict, List, Type, TypeVar, Union, cast
+
+import attr
+from dateutil.parser import isoparse
+
+from ..models.consent_request import ConsentRequest
+from ..models.consent_request_session import ConsentRequestSession
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="PreviousConsentSession")
+
+
+@attr.s(auto_attribs=True)
+class PreviousConsentSession:
+    """The response used to return used consent requests
+    same as HandledLoginRequest, just with consent_request exposed as json
+
+        Attributes:
+            consent_request (Union[Unset, ConsentRequest]):
+            grant_access_token_audience (Union[Unset, List[str]]):
+            grant_scope (Union[Unset, List[str]]):
+            handled_at (Union[Unset, datetime.datetime]):
+            remember (Union[Unset, bool]): Remember, if set to true, tells ORY Hydra to remember this consent authorization
+                and reuse it if the same
+                client asks the same user for the same, or a subset of, scope.
+            remember_for (Union[Unset, int]): RememberFor sets how long the consent authorization should be remembered for
+                in seconds. If set to `0`, the
+                authorization will be remembered indefinitely.
+            session (Union[Unset, ConsentRequestSession]):
+    """
+
+    consent_request: Union[Unset, ConsentRequest] = UNSET
+    grant_access_token_audience: Union[Unset, List[str]] = UNSET
+    grant_scope: Union[Unset, List[str]] = UNSET
+    handled_at: Union[Unset, datetime.datetime] = UNSET
+    remember: Union[Unset, bool] = UNSET
+    remember_for: Union[Unset, int] = UNSET
+    session: Union[Unset, ConsentRequestSession] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        consent_request: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.consent_request, Unset):
+            consent_request = self.consent_request.to_dict()
+
+        grant_access_token_audience: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.grant_access_token_audience, Unset):
+            grant_access_token_audience = self.grant_access_token_audience
+
+        grant_scope: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.grant_scope, Unset):
+            grant_scope = self.grant_scope
+
+        handled_at: Union[Unset, str] = UNSET
+        if not isinstance(self.handled_at, Unset):
+            handled_at = self.handled_at.isoformat()
+
+        remember = self.remember
+        remember_for = self.remember_for
+        session: Union[Unset, Dict[str, Any]] = UNSET
+        if not isinstance(self.session, Unset):
+            session = self.session.to_dict()
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if consent_request is not UNSET:
+            field_dict["consent_request"] = consent_request
+        if grant_access_token_audience is not UNSET:
+            field_dict["grant_access_token_audience"] = grant_access_token_audience
+        if grant_scope is not UNSET:
+            field_dict["grant_scope"] = grant_scope
+        if handled_at is not UNSET:
+            field_dict["handled_at"] = handled_at
+        if remember is not UNSET:
+            field_dict["remember"] = remember
+        if remember_for is not UNSET:
+            field_dict["remember_for"] = remember_for
+        if session is not UNSET:
+            field_dict["session"] = session
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        _consent_request = _d.pop("consent_request", UNSET)
+        consent_request: Union[Unset, ConsentRequest]
+        if isinstance(_consent_request, Unset):
+            consent_request = UNSET
+        else:
+            consent_request = ConsentRequest.from_dict(_consent_request)
+
+        grant_access_token_audience = cast(List[str], _d.pop("grant_access_token_audience", UNSET))
+
+        grant_scope = cast(List[str], _d.pop("grant_scope", UNSET))
+
+        _handled_at = _d.pop("handled_at", UNSET)
+        handled_at: Union[Unset, datetime.datetime]
+        if isinstance(_handled_at, Unset):
+            handled_at = UNSET
+        else:
+            handled_at = isoparse(_handled_at)
+
+        remember = _d.pop("remember", UNSET)
+
+        remember_for = _d.pop("remember_for", UNSET)
+
+        _session = _d.pop("session", UNSET)
+        session: Union[Unset, ConsentRequestSession]
+        if isinstance(_session, Unset):
+            session = UNSET
+        else:
+            session = ConsentRequestSession.from_dict(_session)
+
+        previous_consent_session = cls(
+            consent_request=consent_request,
+            grant_access_token_audience=grant_access_token_audience,
+            grant_scope=grant_scope,
+            handled_at=handled_at,
+            remember=remember,
+            remember_for=remember_for,
+            session=session,
+        )
+
+        previous_consent_session.additional_properties = _d
+        return previous_consent_session
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/reject_request.py b/libs/ory-hydra-client/ory_hydra_client/models/reject_request.py
new file mode 100644
index 0000000..cf1aac0
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/reject_request.py
@@ -0,0 +1,96 @@
+from typing import Any, Dict, List, Type, TypeVar, Union
+
+import attr
+
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="RejectRequest")
+
+
+@attr.s(auto_attribs=True)
+class RejectRequest:
+    """
+    Attributes:
+        error (Union[Unset, str]): The error should follow the OAuth2 error format (e.g. `invalid_request`,
+            `login_required`).
+
+            Defaults to `request_denied`.
+        error_debug (Union[Unset, str]): Debug contains information to help resolve the problem as a developer. Usually
+            not exposed
+            to the public but only in the server logs.
+        error_description (Union[Unset, str]): Description of the error in a human readable format.
+        error_hint (Union[Unset, str]): Hint to help resolve the error.
+        status_code (Union[Unset, int]): Represents the HTTP status code of the error (e.g. 401 or 403)
+
+            Defaults to 400
+    """
+
+    error: Union[Unset, str] = UNSET
+    error_debug: Union[Unset, str] = UNSET
+    error_description: Union[Unset, str] = UNSET
+    error_hint: Union[Unset, str] = UNSET
+    status_code: Union[Unset, int] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        error = self.error
+        error_debug = self.error_debug
+        error_description = self.error_description
+        error_hint = self.error_hint
+        status_code = self.status_code
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if error is not UNSET:
+            field_dict["error"] = error
+        if error_debug is not UNSET:
+            field_dict["error_debug"] = error_debug
+        if error_description is not UNSET:
+            field_dict["error_description"] = error_description
+        if error_hint is not UNSET:
+            field_dict["error_hint"] = error_hint
+        if status_code is not UNSET:
+            field_dict["status_code"] = status_code
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        error = _d.pop("error", UNSET)
+
+        error_debug = _d.pop("error_debug", UNSET)
+
+        error_description = _d.pop("error_description", UNSET)
+
+        error_hint = _d.pop("error_hint", UNSET)
+
+        status_code = _d.pop("status_code", UNSET)
+
+        reject_request = cls(
+            error=error,
+            error_debug=error_debug,
+            error_description=error_description,
+            error_hint=error_hint,
+            status_code=status_code,
+        )
+
+        reject_request.additional_properties = _d
+        return reject_request
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/userinfo_response.py b/libs/ory-hydra-client/ory_hydra_client/models/userinfo_response.py
new file mode 100644
index 0000000..014a36e
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/userinfo_response.py
@@ -0,0 +1,239 @@
+from typing import Any, Dict, List, Type, TypeVar, Union
+
+import attr
+
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="UserinfoResponse")
+
+
+@attr.s(auto_attribs=True)
+class UserinfoResponse:
+    """The userinfo response
+
+    Attributes:
+        birthdate (Union[Unset, str]): End-User's birthday, represented as an ISO 8601:2004 [ISO8601‑2004] YYYY-MM-DD
+            format. The year MAY be 0000, indicating that it is omitted. To represent only the year, YYYY format is allowed.
+            Note that depending on the underlying platform's date related function, providing just year can result in
+            varying month and day, so the implementers need to take this factor into account to correctly process the dates.
+        email (Union[Unset, str]): End-User's preferred e-mail address. Its value MUST conform to the RFC 5322 [RFC5322]
+            addr-spec syntax. The RP MUST NOT rely upon this value being unique, as discussed in Section 5.7.
+        email_verified (Union[Unset, bool]): True if the End-User's e-mail address has been verified; otherwise false.
+            When this Claim Value is true, this means that the OP took affirmative steps to ensure that this e-mail address
+            was controlled by the End-User at the time the verification was performed. The means by which an e-mail address
+            is verified is context-specific, and dependent upon the trust framework or contractual agreements within which
+            the parties are operating.
+        family_name (Union[Unset, str]): Surname(s) or last name(s) of the End-User. Note that in some cultures, people
+            can have multiple family names or no family name; all can be present, with the names being separated by space
+            characters.
+        gender (Union[Unset, str]): End-User's gender. Values defined by this specification are female and male. Other
+            values MAY be used when neither of the defined values are applicable.
+        given_name (Union[Unset, str]): Given name(s) or first name(s) of the End-User. Note that in some cultures,
+            people can have multiple given names; all can be present, with the names being separated by space characters.
+        locale (Union[Unset, str]): End-User's locale, represented as a BCP47 [RFC5646] language tag. This is typically
+            an ISO 639-1 Alpha-2 [ISO639‑1] language code in lowercase and an ISO 3166-1 Alpha-2 [ISO3166‑1] country code in
+            uppercase, separated by a dash. For example, en-US or fr-CA. As a compatibility note, some implementations have
+            used an underscore as the separator rather than a dash, for example, en_US; Relying Parties MAY choose to accept
+            this locale syntax as well.
+        middle_name (Union[Unset, str]): Middle name(s) of the End-User. Note that in some cultures, people can have
+            multiple middle names; all can be present, with the names being separated by space characters. Also note that in
+            some cultures, middle names are not used.
+        name (Union[Unset, str]): End-User's full name in displayable form including all name parts, possibly including
+            titles and suffixes, ordered according to the End-User's locale and preferences.
+        nickname (Union[Unset, str]): Casual name of the End-User that may or may not be the same as the given_name. For
+            instance, a nickname value of Mike might be returned alongside a given_name value of Michael.
+        phone_number (Union[Unset, str]): End-User's preferred telephone number. E.164 [E.164] is RECOMMENDED as the
+            format of this Claim, for example, +1 (425) 555-1212 or +56 (2) 687 2400. If the phone number contains an
+            extension, it is RECOMMENDED that the extension be represented using the RFC 3966 [RFC3966] extension syntax,
+            for example, +1 (604) 555-1234;ext=5678.
+        phone_number_verified (Union[Unset, bool]): True if the End-User's phone number has been verified; otherwise
+            false. When this Claim Value is true, this means that the OP took affirmative steps to ensure that this phone
+            number was controlled by the End-User at the time the verification was performed. The means by which a phone
+            number is verified is context-specific, and dependent upon the trust framework or contractual agreements within
+            which the parties are operating. When true, the phone_number Claim MUST be in E.164 format and any extensions
+            MUST be represented in RFC 3966 format.
+        picture (Union[Unset, str]): URL of the End-User's profile picture. This URL MUST refer to an image file (for
+            example, a PNG, JPEG, or GIF image file), rather than to a Web page containing an image. Note that this URL
+            SHOULD specifically reference a profile photo of the End-User suitable for displaying when describing the End-
+            User, rather than an arbitrary photo taken by the End-User.
+        preferred_username (Union[Unset, str]): Non-unique shorthand name by which the End-User wishes to be referred to
+            at the RP, such as janedoe or j.doe. This value MAY be any valid JSON string including special characters such
+            as @, /, or whitespace.
+        profile (Union[Unset, str]): URL of the End-User's profile page. The contents of this Web page SHOULD be about
+            the End-User.
+        sub (Union[Unset, str]): Subject - Identifier for the End-User at the IssuerURL.
+        updated_at (Union[Unset, int]): Time the End-User's information was last updated. Its value is a JSON number
+            representing the number of seconds from 1970-01-01T0:0:0Z as measured in UTC until the date/time.
+        website (Union[Unset, str]): URL of the End-User's Web page or blog. This Web page SHOULD contain information
+            published by the End-User or an organization that the End-User is affiliated with.
+        zoneinfo (Union[Unset, str]): String from zoneinfo [zoneinfo] time zone database representing the End-User's
+            time zone. For example, Europe/Paris or America/Los_Angeles.
+    """
+
+    birthdate: Union[Unset, str] = UNSET
+    email: Union[Unset, str] = UNSET
+    email_verified: Union[Unset, bool] = UNSET
+    family_name: Union[Unset, str] = UNSET
+    gender: Union[Unset, str] = UNSET
+    given_name: Union[Unset, str] = UNSET
+    locale: Union[Unset, str] = UNSET
+    middle_name: Union[Unset, str] = UNSET
+    name: Union[Unset, str] = UNSET
+    nickname: Union[Unset, str] = UNSET
+    phone_number: Union[Unset, str] = UNSET
+    phone_number_verified: Union[Unset, bool] = UNSET
+    picture: Union[Unset, str] = UNSET
+    preferred_username: Union[Unset, str] = UNSET
+    profile: Union[Unset, str] = UNSET
+    sub: Union[Unset, str] = UNSET
+    updated_at: Union[Unset, int] = UNSET
+    website: Union[Unset, str] = UNSET
+    zoneinfo: Union[Unset, str] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        birthdate = self.birthdate
+        email = self.email
+        email_verified = self.email_verified
+        family_name = self.family_name
+        gender = self.gender
+        given_name = self.given_name
+        locale = self.locale
+        middle_name = self.middle_name
+        name = self.name
+        nickname = self.nickname
+        phone_number = self.phone_number
+        phone_number_verified = self.phone_number_verified
+        picture = self.picture
+        preferred_username = self.preferred_username
+        profile = self.profile
+        sub = self.sub
+        updated_at = self.updated_at
+        website = self.website
+        zoneinfo = self.zoneinfo
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if birthdate is not UNSET:
+            field_dict["birthdate"] = birthdate
+        if email is not UNSET:
+            field_dict["email"] = email
+        if email_verified is not UNSET:
+            field_dict["email_verified"] = email_verified
+        if family_name is not UNSET:
+            field_dict["family_name"] = family_name
+        if gender is not UNSET:
+            field_dict["gender"] = gender
+        if given_name is not UNSET:
+            field_dict["given_name"] = given_name
+        if locale is not UNSET:
+            field_dict["locale"] = locale
+        if middle_name is not UNSET:
+            field_dict["middle_name"] = middle_name
+        if name is not UNSET:
+            field_dict["name"] = name
+        if nickname is not UNSET:
+            field_dict["nickname"] = nickname
+        if phone_number is not UNSET:
+            field_dict["phone_number"] = phone_number
+        if phone_number_verified is not UNSET:
+            field_dict["phone_number_verified"] = phone_number_verified
+        if picture is not UNSET:
+            field_dict["picture"] = picture
+        if preferred_username is not UNSET:
+            field_dict["preferred_username"] = preferred_username
+        if profile is not UNSET:
+            field_dict["profile"] = profile
+        if sub is not UNSET:
+            field_dict["sub"] = sub
+        if updated_at is not UNSET:
+            field_dict["updated_at"] = updated_at
+        if website is not UNSET:
+            field_dict["website"] = website
+        if zoneinfo is not UNSET:
+            field_dict["zoneinfo"] = zoneinfo
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        birthdate = _d.pop("birthdate", UNSET)
+
+        email = _d.pop("email", UNSET)
+
+        email_verified = _d.pop("email_verified", UNSET)
+
+        family_name = _d.pop("family_name", UNSET)
+
+        gender = _d.pop("gender", UNSET)
+
+        given_name = _d.pop("given_name", UNSET)
+
+        locale = _d.pop("locale", UNSET)
+
+        middle_name = _d.pop("middle_name", UNSET)
+
+        name = _d.pop("name", UNSET)
+
+        nickname = _d.pop("nickname", UNSET)
+
+        phone_number = _d.pop("phone_number", UNSET)
+
+        phone_number_verified = _d.pop("phone_number_verified", UNSET)
+
+        picture = _d.pop("picture", UNSET)
+
+        preferred_username = _d.pop("preferred_username", UNSET)
+
+        profile = _d.pop("profile", UNSET)
+
+        sub = _d.pop("sub", UNSET)
+
+        updated_at = _d.pop("updated_at", UNSET)
+
+        website = _d.pop("website", UNSET)
+
+        zoneinfo = _d.pop("zoneinfo", UNSET)
+
+        userinfo_response = cls(
+            birthdate=birthdate,
+            email=email,
+            email_verified=email_verified,
+            family_name=family_name,
+            gender=gender,
+            given_name=given_name,
+            locale=locale,
+            middle_name=middle_name,
+            name=name,
+            nickname=nickname,
+            phone_number=phone_number,
+            phone_number_verified=phone_number_verified,
+            picture=picture,
+            preferred_username=preferred_username,
+            profile=profile,
+            sub=sub,
+            updated_at=updated_at,
+            website=website,
+            zoneinfo=zoneinfo,
+        )
+
+        userinfo_response.additional_properties = _d
+        return userinfo_response
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/version.py b/libs/ory-hydra-client/ory_hydra_client/models/version.py
new file mode 100644
index 0000000..52b40f1
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/version.py
@@ -0,0 +1,57 @@
+from typing import Any, Dict, List, Type, TypeVar, Union
+
+import attr
+
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="Version")
+
+
+@attr.s(auto_attribs=True)
+class Version:
+    """
+    Attributes:
+        version (Union[Unset, str]): Version is the service's version.
+    """
+
+    version: Union[Unset, str] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        version = self.version
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update({})
+        if version is not UNSET:
+            field_dict["version"] = version
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        version = _d.pop("version", UNSET)
+
+        version = cls(
+            version=version,
+        )
+
+        version.additional_properties = _d
+        return version
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/volume_usage_data.py b/libs/ory-hydra-client/ory_hydra_client/models/volume_usage_data.py
new file mode 100644
index 0000000..2c63788
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/volume_usage_data.py
@@ -0,0 +1,70 @@
+from typing import Any, Dict, List, Type, TypeVar
+
+import attr
+
+T = TypeVar("T", bound="VolumeUsageData")
+
+
+@attr.s(auto_attribs=True)
+class VolumeUsageData:
+    """VolumeUsageData Usage details about the volume. This information is used by the
+    `GET /system/df` endpoint, and omitted in other endpoints.
+
+        Attributes:
+            ref_count (int): The number of containers referencing this volume. This field
+                is set to `-1` if the reference-count is not available.
+            size (int): Amount of disk space used by the volume (in bytes). This information
+                is only available for volumes created with the `"local"` volume
+                driver. For volumes created with other volume drivers, this field
+                is set to `-1` ("not available")
+    """
+
+    ref_count: int
+    size: int
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        ref_count = self.ref_count
+        size = self.size
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "RefCount": ref_count,
+                "Size": size,
+            }
+        )
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        ref_count = _d.pop("RefCount")
+
+        size = _d.pop("Size")
+
+        volume_usage_data = cls(
+            ref_count=ref_count,
+            size=size,
+        )
+
+        volume_usage_data.additional_properties = _d
+        return volume_usage_data
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/models/well_known.py b/libs/ory-hydra-client/ory_hydra_client/models/well_known.py
new file mode 100644
index 0000000..ba22d23
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/models/well_known.py
@@ -0,0 +1,330 @@
+from typing import Any, Dict, List, Type, TypeVar, Union, cast
+
+import attr
+
+from ..types import UNSET, Unset
+
+T = TypeVar("T", bound="WellKnown")
+
+
+@attr.s(auto_attribs=True)
+class WellKnown:
+    """It includes links to several endpoints (e.g. /oauth2/token) and exposes information on supported signature
+    algorithms
+    among others.
+
+        Attributes:
+            authorization_endpoint (str): URL of the OP's OAuth 2.0 Authorization Endpoint. Example:
+                https://playground.ory.sh/ory-hydra/public/oauth2/auth.
+            id_token_signing_alg_values_supported (List[str]): JSON array containing a list of the JWS signing algorithms
+                (alg values) supported by the OP for the ID Token
+                to encode the Claims in a JWT.
+            issuer (str): URL using the https scheme with no query or fragment component that the OP asserts as its
+                IssuerURL Identifier.
+                If IssuerURL discovery is supported , this value MUST be identical to the issuer value returned
+                by WebFinger. This also MUST be identical to the iss Claim value in ID Tokens issued from this IssuerURL.
+                Example: https://playground.ory.sh/ory-hydra/public/.
+            jwks_uri (str): URL of the OP's JSON Web Key Set [JWK] document. This contains the signing key(s) the RP uses to
+                validate
+                signatures from the OP. The JWK Set MAY also contain the Server's encryption key(s), which are used by RPs
+                to encrypt requests to the Server. When both signing and encryption keys are made available, a use (Key Use)
+                parameter value is REQUIRED for all keys in the referenced JWK Set to indicate each key's intended usage.
+                Although some algorithms allow the same key to be used for both signatures and encryption, doing so is
+                NOT RECOMMENDED, as it is less secure. The JWK x5c parameter MAY be used to provide X.509 representations of
+                keys provided. When used, the bare key values MUST still be present and MUST match those in the certificate.
+                Example: https://playground.ory.sh/ory-hydra/public/.well-known/jwks.json.
+            response_types_supported (List[str]): JSON array containing a list of the OAuth 2.0 response_type values that
+                this OP supports. Dynamic OpenID
+                Providers MUST support the code, id_token, and the token id_token Response Type values.
+            subject_types_supported (List[str]): JSON array containing a list of the Subject Identifier types that this OP
+                supports. Valid types include
+                pairwise and public.
+            token_endpoint (str): URL of the OP's OAuth 2.0 Token Endpoint Example: https://playground.ory.sh/ory-
+                hydra/public/oauth2/token.
+            backchannel_logout_session_supported (Union[Unset, bool]): Boolean value specifying whether the OP can pass a
+                sid (session ID) Claim in the Logout Token to identify the RP
+                session with the OP. If supported, the sid Claim is also included in ID Tokens issued by the OP
+            backchannel_logout_supported (Union[Unset, bool]): Boolean value specifying whether the OP supports back-channel
+                logout, with true indicating support.
+            claims_parameter_supported (Union[Unset, bool]): Boolean value specifying whether the OP supports use of the
+                claims parameter, with true indicating support.
+            claims_supported (Union[Unset, List[str]]): JSON array containing a list of the Claim Names of the Claims that
+                the OpenID Provider MAY be able to supply
+                values for. Note that for privacy or other reasons, this might not be an exhaustive list.
+            end_session_endpoint (Union[Unset, str]): URL at the OP to which an RP can perform a redirect to request that
+                the End-User be logged out at the OP.
+            frontchannel_logout_session_supported (Union[Unset, bool]): Boolean value specifying whether the OP can pass iss
+                (issuer) and sid (session ID) query parameters to identify
+                the RP session with the OP when the frontchannel_logout_uri is used. If supported, the sid Claim is also
+                included in ID Tokens issued by the OP.
+            frontchannel_logout_supported (Union[Unset, bool]): Boolean value specifying whether the OP supports HTTP-based
+                logout, with true indicating support.
+            grant_types_supported (Union[Unset, List[str]]): JSON array containing a list of the OAuth 2.0 Grant Type values
+                that this OP supports.
+            registration_endpoint (Union[Unset, str]): URL of the OP's Dynamic Client Registration Endpoint. Example:
+                https://playground.ory.sh/ory-hydra/admin/client.
+            request_object_signing_alg_values_supported (Union[Unset, List[str]]): JSON array containing a list of the JWS
+                signing algorithms (alg values) supported by the OP for Request Objects,
+                which are described in Section 6.1 of OpenID Connect Core 1.0 [OpenID.Core]. These algorithms are used both when
+                the Request Object is passed by value (using the request parameter) and when it is passed by reference
+                (using the request_uri parameter).
+            request_parameter_supported (Union[Unset, bool]): Boolean value specifying whether the OP supports use of the
+                request parameter, with true indicating support.
+            request_uri_parameter_supported (Union[Unset, bool]): Boolean value specifying whether the OP supports use of
+                the request_uri parameter, with true indicating support.
+            require_request_uri_registration (Union[Unset, bool]): Boolean value specifying whether the OP requires any
+                request_uri values used to be pre-registered
+                using the request_uris registration parameter.
+            response_modes_supported (Union[Unset, List[str]]): JSON array containing a list of the OAuth 2.0 response_mode
+                values that this OP supports.
+            revocation_endpoint (Union[Unset, str]): URL of the authorization server's OAuth 2.0 revocation endpoint.
+            scopes_supported (Union[Unset, List[str]]): SON array containing a list of the OAuth 2.0 [RFC6749] scope values
+                that this server supports. The server MUST
+                support the openid scope value. Servers MAY choose not to advertise some supported scope values even when this
+                parameter is used
+            token_endpoint_auth_methods_supported (Union[Unset, List[str]]): JSON array containing a list of Client
+                Authentication methods supported by this Token Endpoint. The options are
+                client_secret_post, client_secret_basic, client_secret_jwt, and private_key_jwt, as described in Section 9 of
+                OpenID Connect Core 1.0
+            userinfo_endpoint (Union[Unset, str]): URL of the OP's UserInfo Endpoint.
+            userinfo_signing_alg_values_supported (Union[Unset, List[str]]): JSON array containing a list of the JWS [JWS]
+                signing algorithms (alg values) [JWA] supported by the UserInfo Endpoint to encode the Claims in a JWT [JWT].
+    """
+
+    authorization_endpoint: str
+    id_token_signing_alg_values_supported: List[str]
+    issuer: str
+    jwks_uri: str
+    response_types_supported: List[str]
+    subject_types_supported: List[str]
+    token_endpoint: str
+    backchannel_logout_session_supported: Union[Unset, bool] = UNSET
+    backchannel_logout_supported: Union[Unset, bool] = UNSET
+    claims_parameter_supported: Union[Unset, bool] = UNSET
+    claims_supported: Union[Unset, List[str]] = UNSET
+    end_session_endpoint: Union[Unset, str] = UNSET
+    frontchannel_logout_session_supported: Union[Unset, bool] = UNSET
+    frontchannel_logout_supported: Union[Unset, bool] = UNSET
+    grant_types_supported: Union[Unset, List[str]] = UNSET
+    registration_endpoint: Union[Unset, str] = UNSET
+    request_object_signing_alg_values_supported: Union[Unset, List[str]] = UNSET
+    request_parameter_supported: Union[Unset, bool] = UNSET
+    request_uri_parameter_supported: Union[Unset, bool] = UNSET
+    require_request_uri_registration: Union[Unset, bool] = UNSET
+    response_modes_supported: Union[Unset, List[str]] = UNSET
+    revocation_endpoint: Union[Unset, str] = UNSET
+    scopes_supported: Union[Unset, List[str]] = UNSET
+    token_endpoint_auth_methods_supported: Union[Unset, List[str]] = UNSET
+    userinfo_endpoint: Union[Unset, str] = UNSET
+    userinfo_signing_alg_values_supported: Union[Unset, List[str]] = UNSET
+    additional_properties: Dict[str, Any] = attr.ib(init=False, factory=dict)
+
+    def to_dict(self) -> Dict[str, Any]:
+        authorization_endpoint = self.authorization_endpoint
+        id_token_signing_alg_values_supported = self.id_token_signing_alg_values_supported
+
+        issuer = self.issuer
+        jwks_uri = self.jwks_uri
+        response_types_supported = self.response_types_supported
+
+        subject_types_supported = self.subject_types_supported
+
+        token_endpoint = self.token_endpoint
+        backchannel_logout_session_supported = self.backchannel_logout_session_supported
+        backchannel_logout_supported = self.backchannel_logout_supported
+        claims_parameter_supported = self.claims_parameter_supported
+        claims_supported: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.claims_supported, Unset):
+            claims_supported = self.claims_supported
+
+        end_session_endpoint = self.end_session_endpoint
+        frontchannel_logout_session_supported = self.frontchannel_logout_session_supported
+        frontchannel_logout_supported = self.frontchannel_logout_supported
+        grant_types_supported: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.grant_types_supported, Unset):
+            grant_types_supported = self.grant_types_supported
+
+        registration_endpoint = self.registration_endpoint
+        request_object_signing_alg_values_supported: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.request_object_signing_alg_values_supported, Unset):
+            request_object_signing_alg_values_supported = self.request_object_signing_alg_values_supported
+
+        request_parameter_supported = self.request_parameter_supported
+        request_uri_parameter_supported = self.request_uri_parameter_supported
+        require_request_uri_registration = self.require_request_uri_registration
+        response_modes_supported: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.response_modes_supported, Unset):
+            response_modes_supported = self.response_modes_supported
+
+        revocation_endpoint = self.revocation_endpoint
+        scopes_supported: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.scopes_supported, Unset):
+            scopes_supported = self.scopes_supported
+
+        token_endpoint_auth_methods_supported: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.token_endpoint_auth_methods_supported, Unset):
+            token_endpoint_auth_methods_supported = self.token_endpoint_auth_methods_supported
+
+        userinfo_endpoint = self.userinfo_endpoint
+        userinfo_signing_alg_values_supported: Union[Unset, List[str]] = UNSET
+        if not isinstance(self.userinfo_signing_alg_values_supported, Unset):
+            userinfo_signing_alg_values_supported = self.userinfo_signing_alg_values_supported
+
+        field_dict: Dict[str, Any] = {}
+        field_dict.update(self.additional_properties)
+        field_dict.update(
+            {
+                "authorization_endpoint": authorization_endpoint,
+                "id_token_signing_alg_values_supported": id_token_signing_alg_values_supported,
+                "issuer": issuer,
+                "jwks_uri": jwks_uri,
+                "response_types_supported": response_types_supported,
+                "subject_types_supported": subject_types_supported,
+                "token_endpoint": token_endpoint,
+            }
+        )
+        if backchannel_logout_session_supported is not UNSET:
+            field_dict["backchannel_logout_session_supported"] = backchannel_logout_session_supported
+        if backchannel_logout_supported is not UNSET:
+            field_dict["backchannel_logout_supported"] = backchannel_logout_supported
+        if claims_parameter_supported is not UNSET:
+            field_dict["claims_parameter_supported"] = claims_parameter_supported
+        if claims_supported is not UNSET:
+            field_dict["claims_supported"] = claims_supported
+        if end_session_endpoint is not UNSET:
+            field_dict["end_session_endpoint"] = end_session_endpoint
+        if frontchannel_logout_session_supported is not UNSET:
+            field_dict["frontchannel_logout_session_supported"] = frontchannel_logout_session_supported
+        if frontchannel_logout_supported is not UNSET:
+            field_dict["frontchannel_logout_supported"] = frontchannel_logout_supported
+        if grant_types_supported is not UNSET:
+            field_dict["grant_types_supported"] = grant_types_supported
+        if registration_endpoint is not UNSET:
+            field_dict["registration_endpoint"] = registration_endpoint
+        if request_object_signing_alg_values_supported is not UNSET:
+            field_dict["request_object_signing_alg_values_supported"] = request_object_signing_alg_values_supported
+        if request_parameter_supported is not UNSET:
+            field_dict["request_parameter_supported"] = request_parameter_supported
+        if request_uri_parameter_supported is not UNSET:
+            field_dict["request_uri_parameter_supported"] = request_uri_parameter_supported
+        if require_request_uri_registration is not UNSET:
+            field_dict["require_request_uri_registration"] = require_request_uri_registration
+        if response_modes_supported is not UNSET:
+            field_dict["response_modes_supported"] = response_modes_supported
+        if revocation_endpoint is not UNSET:
+            field_dict["revocation_endpoint"] = revocation_endpoint
+        if scopes_supported is not UNSET:
+            field_dict["scopes_supported"] = scopes_supported
+        if token_endpoint_auth_methods_supported is not UNSET:
+            field_dict["token_endpoint_auth_methods_supported"] = token_endpoint_auth_methods_supported
+        if userinfo_endpoint is not UNSET:
+            field_dict["userinfo_endpoint"] = userinfo_endpoint
+        if userinfo_signing_alg_values_supported is not UNSET:
+            field_dict["userinfo_signing_alg_values_supported"] = userinfo_signing_alg_values_supported
+
+        return field_dict
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+        authorization_endpoint = _d.pop("authorization_endpoint")
+
+        id_token_signing_alg_values_supported = cast(List[str], _d.pop("id_token_signing_alg_values_supported"))
+
+        issuer = _d.pop("issuer")
+
+        jwks_uri = _d.pop("jwks_uri")
+
+        response_types_supported = cast(List[str], _d.pop("response_types_supported"))
+
+        subject_types_supported = cast(List[str], _d.pop("subject_types_supported"))
+
+        token_endpoint = _d.pop("token_endpoint")
+
+        backchannel_logout_session_supported = _d.pop("backchannel_logout_session_supported", UNSET)
+
+        backchannel_logout_supported = _d.pop("backchannel_logout_supported", UNSET)
+
+        claims_parameter_supported = _d.pop("claims_parameter_supported", UNSET)
+
+        claims_supported = cast(List[str], _d.pop("claims_supported", UNSET))
+
+        end_session_endpoint = _d.pop("end_session_endpoint", UNSET)
+
+        frontchannel_logout_session_supported = _d.pop("frontchannel_logout_session_supported", UNSET)
+
+        frontchannel_logout_supported = _d.pop("frontchannel_logout_supported", UNSET)
+
+        grant_types_supported = cast(List[str], _d.pop("grant_types_supported", UNSET))
+
+        registration_endpoint = _d.pop("registration_endpoint", UNSET)
+
+        request_object_signing_alg_values_supported = cast(
+            List[str], _d.pop("request_object_signing_alg_values_supported", UNSET)
+        )
+
+        request_parameter_supported = _d.pop("request_parameter_supported", UNSET)
+
+        request_uri_parameter_supported = _d.pop("request_uri_parameter_supported", UNSET)
+
+        require_request_uri_registration = _d.pop("require_request_uri_registration", UNSET)
+
+        response_modes_supported = cast(List[str], _d.pop("response_modes_supported", UNSET))
+
+        revocation_endpoint = _d.pop("revocation_endpoint", UNSET)
+
+        scopes_supported = cast(List[str], _d.pop("scopes_supported", UNSET))
+
+        token_endpoint_auth_methods_supported = cast(List[str], _d.pop("token_endpoint_auth_methods_supported", UNSET))
+
+        userinfo_endpoint = _d.pop("userinfo_endpoint", UNSET)
+
+        userinfo_signing_alg_values_supported = cast(List[str], _d.pop("userinfo_signing_alg_values_supported", UNSET))
+
+        well_known = cls(
+            authorization_endpoint=authorization_endpoint,
+            id_token_signing_alg_values_supported=id_token_signing_alg_values_supported,
+            issuer=issuer,
+            jwks_uri=jwks_uri,
+            response_types_supported=response_types_supported,
+            subject_types_supported=subject_types_supported,
+            token_endpoint=token_endpoint,
+            backchannel_logout_session_supported=backchannel_logout_session_supported,
+            backchannel_logout_supported=backchannel_logout_supported,
+            claims_parameter_supported=claims_parameter_supported,
+            claims_supported=claims_supported,
+            end_session_endpoint=end_session_endpoint,
+            frontchannel_logout_session_supported=frontchannel_logout_session_supported,
+            frontchannel_logout_supported=frontchannel_logout_supported,
+            grant_types_supported=grant_types_supported,
+            registration_endpoint=registration_endpoint,
+            request_object_signing_alg_values_supported=request_object_signing_alg_values_supported,
+            request_parameter_supported=request_parameter_supported,
+            request_uri_parameter_supported=request_uri_parameter_supported,
+            require_request_uri_registration=require_request_uri_registration,
+            response_modes_supported=response_modes_supported,
+            revocation_endpoint=revocation_endpoint,
+            scopes_supported=scopes_supported,
+            token_endpoint_auth_methods_supported=token_endpoint_auth_methods_supported,
+            userinfo_endpoint=userinfo_endpoint,
+            userinfo_signing_alg_values_supported=userinfo_signing_alg_values_supported,
+        )
+
+        well_known.additional_properties = _d
+        return well_known
+
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> Any:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: Any) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
diff --git a/libs/ory-hydra-client/ory_hydra_client/py.typed b/libs/ory-hydra-client/ory_hydra_client/py.typed
new file mode 100644
index 0000000..1aad327
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/py.typed
@@ -0,0 +1 @@
+# Marker file for PEP 561
\ No newline at end of file
diff --git a/libs/ory-hydra-client/ory_hydra_client/types.py b/libs/ory-hydra-client/ory_hydra_client/types.py
new file mode 100644
index 0000000..d872757
--- /dev/null
+++ b/libs/ory-hydra-client/ory_hydra_client/types.py
@@ -0,0 +1,43 @@
+""" Contains some shared types for properties """
+from typing import BinaryIO, Generic, MutableMapping, Optional, Tuple, TypeVar
+
+import attr
+
+
+class Unset:
+    def __bool__(self) -> bool:
+        return False
+
+
+UNSET: Unset = Unset()
+
+FileJsonType = Tuple[Optional[str], BinaryIO, Optional[str]]
+
+
+@attr.s(auto_attribs=True)
+class File:
+    """Contains information for file uploads"""
+
+    payload: BinaryIO
+    file_name: Optional[str] = None
+    mime_type: Optional[str] = None
+
+    def to_tuple(self) -> FileJsonType:
+        """Return a tuple representation that httpx will accept for multipart/form-data"""
+        return self.file_name, self.payload, self.mime_type
+
+
+T = TypeVar("T")
+
+
+@attr.s(auto_attribs=True)
+class Response(Generic[T]):
+    """A response from an endpoint"""
+
+    status_code: int
+    content: bytes
+    headers: MutableMapping[str, str]
+    parsed: Optional[T]
+
+
+__all__ = ["File", "Response", "FileJsonType"]
diff --git a/libs/ory-hydra-client/pyproject.toml b/libs/ory-hydra-client/pyproject.toml
new file mode 100644
index 0000000..86a0cba
--- /dev/null
+++ b/libs/ory-hydra-client/pyproject.toml
@@ -0,0 +1,16 @@
+[tool.black]
+line-length = 120
+target_version = ['py37', 'py38', 'py39']
+exclude = '''
+(
+  /(
+    | \.git
+    | \.venv
+    | \.mypy_cache
+  )/
+)
+'''
+
+[tool.isort]
+line_length = 120
+profile = "black"
\ No newline at end of file
diff --git a/libs/ory-hydra-client/setup.py b/libs/ory-hydra-client/setup.py
new file mode 100644
index 0000000..48c2c94
--- /dev/null
+++ b/libs/ory-hydra-client/setup.py
@@ -0,0 +1,18 @@
+import pathlib
+
+from setuptools import find_packages, setup
+
+here = pathlib.Path(__file__).parent.resolve()
+long_description = (here / "README.md").read_text(encoding="utf-8")
+
+setup(
+    name="ory-hydra-client",
+    version="1.9.2",
+    description="A client library for accessing ORY Hydra",
+    long_description=long_description,
+    long_description_content_type="text/markdown",
+    packages=find_packages(),
+    python_requires=">=3.7, <4",
+    install_requires=["httpx >= 0.15.0, < 0.23.0", "attrs >= 21.3.0", "python-dateutil >= 2.8.0, < 3"],
+    package_data={"ory_hydra_client": ["py.typed"]},
+)
diff --git a/specs/api_template/.gitignore.jinja b/specs/api_template/.gitignore.jinja
new file mode 100644
index 0000000..79a2c3d
--- /dev/null
+++ b/specs/api_template/.gitignore.jinja
@@ -0,0 +1,23 @@
+__pycache__/
+build/
+dist/
+*.egg-info/
+.pytest_cache/
+
+# pyenv
+.python-version
+
+# Environments
+.env
+.venv
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# JetBrains
+.idea/
+
+/coverage.xml
+/.coverage
diff --git a/specs/api_template/README.md.jinja b/specs/api_template/README.md.jinja
new file mode 100644
index 0000000..e35cd25
--- /dev/null
+++ b/specs/api_template/README.md.jinja
@@ -0,0 +1,87 @@
+# {{ project_name }}
+{{ package_description }}
+
+## Usage
+First, create a client:
+
+```python
+from {{ package_name }} import Client
+
+client = Client(base_url="https://api.example.com")
+```
+
+If the endpoints you're going to hit require authentication, use `AuthenticatedClient` instead:
+
+```python
+from {{ package_name }} import AuthenticatedClient
+
+client = AuthenticatedClient(base_url="https://api.example.com", token="SuperSecretToken")
+```
+
+Now call your endpoint and use your models:
+
+```python
+from {{ package_name }}.models import MyDataModel
+from {{ package_name }}.api.my_tag import get_my_data_model
+from {{ package_name }}.types import Response
+
+my_data: MyDataModel = get_my_data_model.sync(client=client)
+# or if you need more info (e.g. status_code)
+response: Response[MyDataModel] = get_my_data_model.sync_detailed(client=client)
+```
+
+Or do the same thing with an async version:
+
+```python
+from {{ package_name }}.models import MyDataModel
+from {{ package_name }}.api.my_tag import get_my_data_model
+from {{ package_name }}.types import Response
+
+my_data: MyDataModel = await get_my_data_model.asyncio(client=client)
+response: Response[MyDataModel] = await get_my_data_model.asyncio_detailed(client=client)
+```
+
+By default, when you're calling an HTTPS API it will attempt to verify that SSL is working correctly. Using certificate verification is highly recommended most of the time, but sometimes you may need to authenticate to a server (especially an internal server) using a custom certificate bundle.
+
+```python
+client = AuthenticatedClient(
+    base_url="https://internal_api.example.com", 
+    token="SuperSecretToken",
+    verify_ssl="/path/to/certificate_bundle.pem",
+)
+```
+
+You can also disable certificate validation altogether, but beware that **this is a security risk**.
+
+```python
+client = AuthenticatedClient(
+    base_url="https://internal_api.example.com", 
+    token="SuperSecretToken", 
+    verify_ssl=False
+)
+```
+
+Things to know:
+1. Every path/method combo becomes a Python module with four functions:
+    1. `sync`: Blocking request that returns parsed data (if successful) or `None`
+    1. `sync_detailed`: Blocking request that always returns a `Request`, optionally with `parsed` set if the request was successful.
+    1. `asyncio`: Like `sync` but the async instead of blocking
+    1. `asyncio_detailed`: Like `sync_detailed` by async instead of blocking
+
+1. All path/query params, and bodies become method arguments.
+1. If your endpoint had any tags on it, the first tag will be used as a module name for the function (my_tag above)
+1. Any endpoint which did not have a tag will be in `{{ package_name }}.api.default`
+
+## Building / publishing this Client
+This project uses [Poetry](https://python-poetry.org/) to manage dependencies  and packaging.  Here are the basics:
+1. Update the metadata in pyproject.toml (e.g. authors, version)
+1. If you're using a private repository, configure it with Poetry
+    1. `poetry config repositories.<your-repository-name> <url-to-your-repository>`
+    1. `poetry config http-basic.<your-repository-name> <username> <password>`
+1. Publish the client with `poetry publish --build -r <your-repository-name>` or, if for public PyPI, just `poetry publish --build`
+
+If you want to install this client into another project without publishing it (e.g. for development) then:
+1. If that project **is using Poetry**, you can simply do `poetry add <path-to-this-client>` from that project
+1. If that project is not using Poetry:
+    1. Build a wheel with `poetry build -f wheel`
+    1. Install that wheel from the other project `pip install <path-to-wheel>`
diff --git a/specs/api_template/api_init.py.jinja b/specs/api_template/api_init.py.jinja
new file mode 100644
index 0000000..dc035f4
--- /dev/null
+++ b/specs/api_template/api_init.py.jinja
@@ -0,0 +1 @@
+""" Contains methods for accessing the API """
diff --git a/specs/api_template/client.py.jinja b/specs/api_template/client.py.jinja
new file mode 100644
index 0000000..028a63a
--- /dev/null
+++ b/specs/api_template/client.py.jinja
@@ -0,0 +1,45 @@
+import ssl
+from typing import Dict, Union
+import attr
+
+@attr.s(auto_attribs=True)
+class Client:
+    """ A class for keeping track of data related to the API """
+
+    base_url: str
+    cookies: Dict[str, str] = attr.ib(factory=dict, kw_only=True)
+    headers: Dict[str, str] = attr.ib(factory=dict, kw_only=True)
+    timeout: float = attr.ib(5.0, kw_only=True)
+    verify_ssl: Union[str, bool, ssl.SSLContext] = attr.ib(True, kw_only=True)
+
+    def get_headers(self) -> Dict[str, str]:
+        """ Get headers to be used in all endpoints """
+        return {**self.headers}
+
+    def with_headers(self, headers: Dict[str, str]) -> "Client":
+        """ Get a new client matching this one with additional headers """
+        return attr.evolve(self, headers={**self.headers, **headers})
+
+    def get_cookies(self) -> Dict[str, str]:
+        return {**self.cookies}
+
+    def with_cookies(self, cookies: Dict[str, str]) -> "Client":
+        """ Get a new client matching this one with additional cookies """
+        return attr.evolve(self, cookies={**self.cookies, **cookies})
+
+    def get_timeout(self) -> float:
+        return self.timeout
+
+    def with_timeout(self, timeout: float) -> "Client":
+        """ Get a new client matching this one with a new timeout (in seconds) """
+        return attr.evolve(self, timeout=timeout)
+
+@attr.s(auto_attribs=True)
+class AuthenticatedClient(Client):
+    """ A Client which has been authenticated for use on secured endpoints """
+
+    token: str
+
+    def get_headers(self) -> Dict[str, str]:
+        """ Get headers to be used in authenticated endpoints """
+        return {"Authorization": f"Bearer {self.token}", **self.headers}
diff --git a/specs/api_template/endpoint_init.py.jinja b/specs/api_template/endpoint_init.py.jinja
new file mode 100644
index 0000000..e69de29
diff --git a/specs/api_template/endpoint_macros.py.jinja b/specs/api_template/endpoint_macros.py.jinja
new file mode 100644
index 0000000..290374c
--- /dev/null
+++ b/specs/api_template/endpoint_macros.py.jinja
@@ -0,0 +1,165 @@
+{% from "property_templates/helpers.jinja" import guarded_statement %}
+
+{% macro header_params(endpoint) %}
+{% if endpoint.header_parameters %}
+    {% for parameter in endpoint.header_parameters.values() %}
+        {% set destination = 'headers["' +  parameter.name + '"]' %}
+        {% import "property_templates/" + parameter.template as param_template %}
+        {% if param_template.transform_header %}
+            {% set statement = param_template.transform_header(parameter, parameter.python_name, destination) %}
+        {% else %}
+            {% set statement = destination + " = " + parameter.python_name %}
+        {% endif %}
+{{ guarded_statement(parameter, parameter.python_name, statement) }}
+    {% endfor %}
+{% endif %}
+{% endmacro %}
+
+{% macro cookie_params(endpoint) %}
+{% if endpoint.cookie_parameters %}
+    {% for parameter in endpoint.cookie_parameters.values() %}
+        {% if parameter.required %}
+cookies["{{ parameter.name}}"] = {{ parameter.python_name }}
+        {% else %}
+if {{ parameter.python_name }} is not UNSET:
+    cookies["{{ parameter.name}}"] = {{ parameter.python_name }}
+        {% endif %}
+    {% endfor %}
+{% endif %}
+{% endmacro %}
+
+
+{% macro query_params(endpoint) %}
+{% if endpoint.query_parameters %}
+params: Dict[str, Any] = {}
+{% for property in endpoint.query_parameters.values() %}
+    {% set destination = property.python_name %}
+    {% import "property_templates/" + property.template as prop_template %}
+    {% if prop_template.transform %}
+        {% set destination = "json_" + property.python_name %}
+{{ prop_template.transform(property, property.python_name, destination) }}
+    {% endif %}
+    {%- if not property.json_is_dict %}
+params["{{ property.name }}"] = {{ destination }}
+    {% else %}
+{{ guarded_statement(property, destination, "params.update(" + destination + ")") }}
+    {% endif %}
+
+
+{% endfor %}
+
+params = {k: v for k, v in params.items() if v is not UNSET and v is not None}
+{% endif %}
+{% endmacro %}
+
+{% macro json_body(endpoint) %}
+{% if endpoint.json_body %}
+    {% set property = endpoint.json_body %}
+    {% set destination = "json_" + property.python_name %}
+    {% import "property_templates/" + property.template as prop_template %}
+    {% if prop_template.transform %}
+{{ prop_template.transform(property, property.python_name, destination) }}
+    {% else %}
+{{ destination }} = {{ property.python_name }}
+    {% endif %}
+{% endif %}
+{% endmacro %}
+
+{% macro multipart_body(endpoint) %}
+{% if endpoint.multipart_body %}
+    {% set property = endpoint.multipart_body %}
+    {% set destination = "multipart_" + property.python_name %}
+    {% import "property_templates/" + property.template as prop_template %}
+    {% if prop_template.transform_multipart %}
+{{ prop_template.transform_multipart(property, property.python_name, destination) }}
+    {% endif %}
+{% endif %}
+{% endmacro %}
+
+{# The all the kwargs passed into an endpoint (and variants thereof)) #}
+{% macro arguments(endpoint) %}
+{# path parameters #}
+{% for parameter in endpoint.path_parameters.values() %}
+{{ parameter.to_string() }},
+{% endfor %}
+*,
+{# Proper _client based on whether or not the endpoint requires authentication #}
+{% if endpoint.requires_security %}
+_client: AuthenticatedClient,
+{% else %}
+_client: Client,
+{% endif %}
+{# Form data if any #}
+{% if endpoint.form_body_class %}
+form_data: {{ endpoint.form_body_class.name }},
+{% endif %}
+{# Multipart data if any #}
+{% if endpoint.multipart_body %}
+multipart_data: {{ endpoint.multipart_body.get_type_string() }},
+{% endif %}
+{# JSON body if any #}
+{% if endpoint.json_body %}
+json_body: {{ endpoint.json_body.get_type_string() }},
+{% endif %}
+{# query parameters #}
+{% for parameter in endpoint.query_parameters.values() %}
+{{ parameter.to_string() }},
+{% endfor %}
+{% for parameter in endpoint.header_parameters.values() %}
+{{ parameter.to_string() }},
+{% endfor %}
+{# cookie parameters #}
+{% for parameter in endpoint.cookie_parameters.values() %}
+{{ parameter.to_string() }},
+{% endfor %}
+{% endmacro %}
+
+{# Just lists all kwargs to endpoints as name=name for passing to other functions #}
+{% macro kwargs(endpoint) %}
+{% for parameter in endpoint.path_parameters.values() %}
+{{ parameter.python_name }}={{ parameter.python_name }},
+{% endfor %}
+_client=_client,
+{% if endpoint.form_body_class %}
+form_data=form_data,
+{% endif %}
+{% if endpoint.multipart_body %}
+multipart_data=multipart_data,
+{% endif %}
+{% if endpoint.json_body %}
+json_body=json_body,
+{% endif %}
+{% for parameter in endpoint.query_parameters.values() %}
+{{ parameter.python_name }}={{ parameter.python_name }},
+{% endfor %}
+{% for parameter in endpoint.header_parameters.values() %}
+{{ parameter.python_name }}={{ parameter.python_name }},
+{% endfor %}
+{% for parameter in endpoint.cookie_parameters.values() %}
+{{ parameter.python_name }}={{ parameter.python_name }},
+{% endfor %}
+{% endmacro %}
+
+{% macro docstring(endpoint, return_string) %}
+"""{% if endpoint.summary %}{{ endpoint.summary | wordwrap(100)}}
+
+{% endif -%}
+{%- if endpoint.description %} {{ endpoint.description | wordwrap(100) }}
+
+{% endif %}
+{% if not endpoint.summary and not endpoint.description %}
+{# Leave extra space so that Args or Returns isn't at the top #}
+
+{% endif %}
+{% set all_parameters = endpoint.list_all_parameters() %}
+{% if all_parameters %}
+Args:
+    {% for parameter in all_parameters %}
+    {{ parameter.to_docstring() | wordwrap(90) | indent(8) }}
+    {% endfor %}
+
+{% endif %}
+Returns:
+    Response[{{ return_string }}]
+"""
+{% endmacro %}
diff --git a/specs/api_template/endpoint_module.py.jinja b/specs/api_template/endpoint_module.py.jinja
new file mode 100644
index 0000000..d196b3a
--- /dev/null
+++ b/specs/api_template/endpoint_module.py.jinja
@@ -0,0 +1,142 @@
+from typing import Any, Dict, List, Optional, Union, cast
+
+import httpx
+
+from ...client import AuthenticatedClient, Client
+from ...types import Response, UNSET
+
+{% for relative in endpoint.relative_imports %}
+{{ relative }}
+{% endfor %}
+
+{% from "endpoint_macros.py.jinja" import header_params, cookie_params, query_params, json_body, multipart_body,
+    arguments, client, kwargs, parse_response, docstring %}
+
+{% set return_string = endpoint.response_type() %}
+{% set parsed_responses = (endpoint.responses | length > 0) and return_string != "Any" %}
+
+def _get_kwargs(
+    {{ arguments(endpoint) | indent(4) }}
+) -> Dict[str, Any]:
+    url = "{}{{ endpoint.path }}".format(
+        _client.base_url
+        {%- for parameter in endpoint.path_parameters.values() -%}
+        ,{{parameter.name}}={{parameter.python_name}}
+        {%- endfor -%}
+    )
+
+    headers: Dict[str, str] = _client.get_headers()
+    cookies: Dict[str, Any] = _client.get_cookies()
+
+    {{ header_params(endpoint) | indent(4) }}
+
+    {{ cookie_params(endpoint) | indent(4) }}
+
+    {{ query_params(endpoint) | indent(4) }}
+
+    {{ json_body(endpoint) | indent(4) }}
+
+    {{ multipart_body(endpoint) | indent(4) }}
+
+    return {
+	    "method": "{{ endpoint.method }}",
+        "url": url,
+        "headers": headers,
+        "cookies": cookies,
+        "timeout": _client.get_timeout(),
+        {% if endpoint.form_body_class %}
+        "data": form_data.to_dict(),
+        {% elif endpoint.multipart_body %}
+        "files": {{ "multipart_" + endpoint.multipart_body.python_name }},
+        {% elif endpoint.json_body %}
+        "json": {{ "json_" + endpoint.json_body.python_name }},
+        {% endif %}
+        {% if endpoint.query_parameters %}
+        "params": params,
+        {% endif %}
+    }
+
+
+{% if parsed_responses %}
+def _parse_response(*, response: httpx.Response) -> Optional[{{ return_string }}]:
+    {% for response in endpoint.responses %}
+    if response.status_code == {{ response.status_code }}:
+        {% import "property_templates/" + response.prop.template as prop_template %}
+        {% if prop_template.construct %}
+        {{ prop_template.construct(response.prop, response.source) | indent(8) }}
+        {% else %}
+        {{ response.prop.python_name }} = cast({{ response.prop.get_type_string() }}, {{ response.source }})
+        {% endif %}
+        return {{ response.prop.python_name }}
+    {% endfor %}
+    return None
+{% endif %}
+
+
+def _build_response(*, response: httpx.Response) -> Response[{{ return_string }}]:
+    return Response(
+        status_code=response.status_code,
+        content=response.content,
+        headers=response.headers,
+        {% if parsed_responses %}
+        parsed=_parse_response(response=response),
+        {% else %}
+        parsed=None,
+        {% endif %}
+    )
+
+
+def sync_detailed(
+    {{ arguments(endpoint) | indent(4) }}
+) -> Response[{{ return_string }}]:
+    {{ docstring(endpoint, return_string) | indent(4) }}
+
+    kwargs = _get_kwargs(
+        {{ kwargs(endpoint) }}
+    )
+
+    response = httpx.request(
+        verify=_client.verify_ssl,
+        **kwargs,
+    )
+
+    return _build_response(response=response)
+
+{% if parsed_responses %}
+def sync(
+    {{ arguments(endpoint) | indent(4) }}
+) -> Optional[{{ return_string }}]:
+    {{ docstring(endpoint, return_string) | indent(4) }}
+
+    return sync_detailed(
+        {{ kwargs(endpoint) }}
+    ).parsed
+{% endif %}
+
+async def asyncio_detailed(
+    {{ arguments(endpoint) | indent(4) }}
+) -> Response[{{ return_string }}]:
+    {{ docstring(endpoint, return_string) | indent(4) }}
+
+    kwargs = _get_kwargs(
+        {{ kwargs(endpoint) }}
+    )
+
+    async with httpx.AsyncClient(verify=_client.verify_ssl) as __client:
+        response = await __client.request(
+            **kwargs
+        )
+
+    return _build_response(response=response)
+
+{% if parsed_responses %}
+async def asyncio(
+    {{ arguments(endpoint) | indent(4) }}
+) -> Optional[{{ return_string }}]:
+    {{ docstring(endpoint, return_string) | indent(4) }}
+
+    return (await asyncio_detailed(
+        {{ kwargs(endpoint) }}
+    )).parsed
+{% endif %}
+
diff --git a/specs/api_template/int_enum.py.jinja b/specs/api_template/int_enum.py.jinja
new file mode 100644
index 0000000..a508f1c
--- /dev/null
+++ b/specs/api_template/int_enum.py.jinja
@@ -0,0 +1,9 @@
+from enum import IntEnum
+
+class {{ enum.class_info.name }}(IntEnum):
+    {% for key, value in enum.values.items() %}
+    {{ key }} = {{ value }}
+    {% endfor %}
+
+    def __str__(self) -> str:
+        return str(self.value)
diff --git a/specs/api_template/model.py.jinja b/specs/api_template/model.py.jinja
new file mode 100644
index 0000000..646402c
--- /dev/null
+++ b/specs/api_template/model.py.jinja
@@ -0,0 +1,181 @@
+from typing import Any, Dict, Type, TypeVar, Tuple, Optional, BinaryIO, TextIO
+
+{% if model.additional_properties %}
+from typing import List
+
+{% endif %}
+
+import attr
+{% if model.is_multipart_body %}
+import json
+{% endif %}
+
+from ..types import UNSET, Unset
+
+{% for relative in model.relative_imports %}
+{{ relative }}
+{% endfor %}
+
+
+{% if model.additional_properties %}
+{% set additional_property_type = 'Any' if model.additional_properties == True else model.additional_properties.get_type_string() %}
+{% endif %}
+
+{% set class_name = model.class_info.name %}
+{% set module_name = model.class_info.module_name %}
+
+T = TypeVar("T", bound="{{ class_name }}")
+
+@attr.s(auto_attribs=True)
+class {{ class_name }}:
+    """{% if model.title %}{{ model.title | wordwrap(116) }}
+
+    {% endif -%}
+    {%- if model.description %}{{ model.description | wordwrap(116) }}
+
+    {% endif %}
+    {% if not model.title and not model.description %}
+    {# Leave extra space so that a section doesn't start on the first line #}
+
+    {% endif %}
+    {% if model.example %}
+    Example:
+        {{ model.example | string | wordwrap(112) | indent(12) }}
+
+    {% endif %}
+    {% if model.required_properties or model.optional_properties %}
+    Attributes:
+    {% for property in model.required_properties + model.optional_properties %}
+        {{ property.to_docstring() | wordwrap(112) | indent(12) }}
+    {% endfor %}{% endif %}
+    """
+
+    {% for property in model.required_properties + model.optional_properties %}
+    {% if property.default is none and property.required %}
+    {{ property.to_string() }}
+    {% endif %}
+    {% endfor %}
+    {% for property in model.required_properties + model.optional_properties %}
+    {% if property.default is not none or not property.required %}
+    {{ property.to_string() }}
+    {% endif %}
+    {% endfor %}
+    {% if model.additional_properties %}
+    additional_properties: Dict[str, {{ additional_property_type }}] = attr.ib(init=False, factory=dict)
+    {% endif %}
+
+{% macro _to_dict(multipart=False) %}
+{% for property in model.required_properties + model.optional_properties %}
+{% import "property_templates/" + property.template as prop_template %}
+{% if prop_template.transform %}
+{{ prop_template.transform(property, "self." + property.python_name, property.python_name, multipart=multipart) }}
+{% elif multipart %}
+{{ property.python_name }} = self.{{ property.python_name }} if isinstance(self.{{ property.python_name }}, Unset) else (None, str(self.{{ property.python_name }}).encode(), "text/plain")
+{% else %}
+{{ property.python_name }} = self.{{ property.python_name }}
+{% endif %}
+{% endfor %}
+
+field_dict: Dict[str, Any] = {}
+{% if model.additional_properties %}
+{% if model.additional_properties.template %}{# Can be a bool instead of an object #}
+    {% import "property_templates/" + model.additional_properties.template as prop_template %}
+{% else %}
+    {% set prop_template = None %}
+{% endif %}
+{% if prop_template and prop_template.transform %}
+for prop_name, prop in self.additional_properties.items():
+    {{ prop_template.transform(model.additional_properties, "prop", "field_dict[prop_name]", multipart=multipart) | indent(4) }}
+{% elif multipart %}
+field_dict.update({
+    key: (None, str(value).encode(), "text/plain")
+    for key, value in self.additional_properties.items()
+})
+{% else %}
+field_dict.update(self.additional_properties)
+{% endif %}
+{% endif %}
+field_dict.update({
+    {% for property in model.required_properties + model.optional_properties %}
+    {% if property.required %}
+    "{{ property.name }}": {{ property.python_name }},
+    {% endif %}
+    {% endfor %}
+})
+{% for property in model.optional_properties %}
+{% if not property.required %}
+if {{ property.python_name }} is not UNSET:
+    field_dict["{{ property.name }}"] = {{ property.python_name }}
+{% endif %}
+{% endfor %}
+
+return field_dict
+{% endmacro %}
+
+    def to_dict(self) -> Dict[str, Any]:
+        {{ _to_dict() | indent(8) }}
+
+{% if model.is_multipart_body %}
+    def to_multipart(self) -> Dict[str, Any]:
+        {{ _to_dict(multipart=True) | indent(8) }}
+{% endif %}
+
+    @classmethod
+    def from_dict(cls: Type[T], src_dict: Dict[str, Any]) -> T:
+        _d = src_dict.copy()
+{% for property in model.required_properties + model.optional_properties %}
+    {% if property.required %}
+        {% set property_source = '_d.pop("' + property.name + '")' %}
+    {% else %}
+        {% set property_source = '_d.pop("' + property.name + '", UNSET)' %}
+    {% endif %}
+    {% import "property_templates/" + property.template as prop_template %}
+    {% if prop_template.construct %}
+        {{ prop_template.construct(property, property_source) | indent(8) }}
+    {% else %}
+        {{ property.python_name }} = {{ property_source }}
+    {% endif %}
+
+{% endfor %}
+        {{ module_name }} = cls(
+{% for property in model.required_properties + model.optional_properties %}
+            {{ property.python_name }}={{ property.python_name }},
+{% endfor %}
+        )
+
+{% if model.additional_properties %}
+    {% if model.additional_properties.template %}{# Can be a bool instead of an object #}
+        {% import "property_templates/" + model.additional_properties.template as prop_template %}
+    {% else %}
+        {% set prop_template = None %}
+    {% endif %}
+    {% if prop_template and prop_template.construct %}
+        additional_properties = {}
+        for prop_name, prop_dict in _d.items():
+            {{ prop_template.construct(model.additional_properties, "prop_dict") | indent(12) }}
+            additional_properties[prop_name] = {{ model.additional_properties.python_name }}
+
+        {{ module_name }}.additional_properties = additional_properties
+    {% else %}
+        {{ module_name }}.additional_properties = _d
+    {% endif %}
+{% endif %}
+        return {{ module_name }}
+
+    {% if model.additional_properties %}
+    @property
+    def additional_keys(self) -> List[str]:
+        return list(self.additional_properties.keys())
+
+    def __getitem__(self, key: str) -> {{ additional_property_type }}:
+        return self.additional_properties[key]
+
+    def __setitem__(self, key: str, value: {{ additional_property_type }}) -> None:
+        self.additional_properties[key] = value
+
+    def __delitem__(self, key: str) -> None:
+        del self.additional_properties[key]
+
+    def __contains__(self, key: str) -> bool:
+        return key in self.additional_properties
+    {% endif %}
diff --git a/specs/api_template/models_init.py.jinja b/specs/api_template/models_init.py.jinja
new file mode 100644
index 0000000..d595422
--- /dev/null
+++ b/specs/api_template/models_init.py.jinja
@@ -0,0 +1,5 @@
+""" Contains all the data models used in inputs/outputs """
+
+{% for import in imports | sort %}
+{{ import }}
+{% endfor %}
diff --git a/specs/api_template/package_init.py.jinja b/specs/api_template/package_init.py.jinja
new file mode 100644
index 0000000..f146549
--- /dev/null
+++ b/specs/api_template/package_init.py.jinja
@@ -0,0 +1,2 @@
+""" {{ package_description }} """
+from .client import AuthenticatedClient, Client
diff --git a/specs/api_template/property_templates/any_property.py.jinja b/specs/api_template/property_templates/any_property.py.jinja
new file mode 100644
index 0000000..e69de29
diff --git a/specs/api_template/property_templates/boolean_property.py.jinja b/specs/api_template/property_templates/boolean_property.py.jinja
new file mode 100644
index 0000000..a63639b
--- /dev/null
+++ b/specs/api_template/property_templates/boolean_property.py.jinja
@@ -0,0 +1,3 @@
+{% macro transform_header(property, source, destination) %}
+{{ destination }} = "true" if {{ source }} else "false"
+{% endmacro %}
diff --git a/specs/api_template/property_templates/date_property.py.jinja b/specs/api_template/property_templates/date_property.py.jinja
new file mode 100644
index 0000000..2107c5c
--- /dev/null
+++ b/specs/api_template/property_templates/date_property.py.jinja
@@ -0,0 +1,35 @@
+{% macro construct_function(property, source) %}
+isoparse({{ source }}).date()
+{% endmacro %}
+
+{% from "property_templates/property_macros.py.jinja" import construct_template %}
+
+{% macro construct(property, source, initial_value=None) %}
+{{ construct_template(construct_function, property, source, initial_value=initial_value) }}
+{% endmacro %}
+
+{% macro check_type_for_construct(property, source) %}isinstance({{ source }}, str){% endmacro %}
+
+{% macro transform(property, source, destination, declare_type=True, multipart=False) %}
+{% set transformed = source + ".isoformat()" %}
+{% if multipart %}{# Multipart data must be bytes, not str #}
+{% set transformed = transformed + ".encode()" %}
+{% endif %}
+{% if property.required %}
+{{ destination }} = {{ transformed }} {% if property.nullable %}if {{ source }} else None {%endif%}
+{% else %}
+{% if declare_type %}
+{% set type_annotation = property.get_type_string(json=True) %}
+{% if multipart %}{% set type_annotation = type_annotation | replace("str", "bytes") %}{% endif %}
+{{ destination }}: {{ type_annotation }} = UNSET
+{% else %}
+{{ destination }} = UNSET
+{% endif %}
+if not isinstance({{ source }}, Unset):
+{% if property.nullable %}
+    {{ destination }} = {{ transformed }} if {{ source }} else None
+{% else %}
+    {{ destination }} = {{ transformed }}
+{% endif %}
+{% endif %}
+{% endmacro %}
diff --git a/specs/api_template/property_templates/datetime_property.py.jinja b/specs/api_template/property_templates/datetime_property.py.jinja
new file mode 100644
index 0000000..29a2b41
--- /dev/null
+++ b/specs/api_template/property_templates/datetime_property.py.jinja
@@ -0,0 +1,39 @@
+{% macro construct_function(property, source) %}
+isoparse({{ source }})
+{% endmacro %}
+
+{% from "property_templates/property_macros.py.jinja" import construct_template %}
+
+{% macro construct(property, source, initial_value=None) %}
+{{ construct_template(construct_function, property, source, initial_value=initial_value) }}
+{% endmacro %}
+
+{% macro check_type_for_construct(property, source) %}isinstance({{ source }}, str){% endmacro %}
+
+{% macro transform(property, source, destination, declare_type=True, multipart=False) %}
+{% set transformed = source + ".isoformat()" %}
+{% if multipart %}{# Multipart data must be bytes, not str #}
+{% set transformed = transformed + ".encode()" %}
+{% endif %}
+{% if property.required %}
+{% if property.nullable %}
+{{ destination }} = {{ transformed }} if {{ source }} else None
+{% else %}
+{{ destination }} = {{ transformed }}
+{% endif %}
+{% else %}
+{% if declare_type %}
+{% set type_annotation = property.get_type_string(json=True) %}
+{% if multipart %}{% set type_annotation = type_annotation | replace("str", "bytes") %}{% endif %}
+{{ destination }}: {{ type_annotation }} = UNSET
+{% else %}
+{{ destination }} = UNSET
+{% endif %}
+if not isinstance({{ source }}, Unset):
+{% if property.nullable %}
+    {{ destination }} = {{ transformed }} if {{ source }} else None
+{% else %}
+    {{ destination }} = {{ transformed }}
+{% endif %}
+{% endif %}
+{% endmacro %}
diff --git a/specs/api_template/property_templates/enum_property.py.jinja b/specs/api_template/property_templates/enum_property.py.jinja
new file mode 100644
index 0000000..ffc07dd
--- /dev/null
+++ b/specs/api_template/property_templates/enum_property.py.jinja
@@ -0,0 +1,35 @@
+{% macro construct_function(property, source) %}
+{{ property.class_info.name }}({{ source }})
+{% endmacro %}
+
+{% from "property_templates/property_macros.py.jinja" import construct_template %}
+
+{% macro construct(property, source, initial_value=None) %}
+{{ construct_template(construct_function, property, source, initial_value=initial_value) }}
+{% endmacro %}
+
+{% macro check_type_for_construct(property, source) %}isinstance({{ source }}, {{ property.value_type.__name__ }}){% endmacro %}
+
+{% macro transform(property, source, destination, declare_type=True, multipart=False) %}
+{% set transformed = source + ".value" %}
+{% set type_string = property.get_type_string(json=True) %}
+{% if multipart %}
+    {% set transformed = "(None, str(" + transformed + ").encode(), \"text/plain\")" %}
+    {% set type_string = "Union[Unset, Tuple[None, bytes, str]]" %}
+{% endif %}
+{% if property.required %}
+{% if property.nullable %}
+{{ destination }} = {{ transformed }} if {{ source }} else None
+{% else %}
+{{ destination }} = {{ transformed }}
+{% endif %}
+{% else %}
+{{ destination }}{% if declare_type %}: {{ type_string }}{% endif %} = UNSET
+if not isinstance({{ source }}, Unset):
+{% if property.nullable %}
+    {{ destination }} = {{ transformed }} if {{ source }} else None
+{% else %}
+    {{ destination }} = {{ transformed }}
+{% endif %}
+{% endif %}
+{% endmacro %}
diff --git a/specs/api_template/property_templates/file_property.py.jinja b/specs/api_template/property_templates/file_property.py.jinja
new file mode 100644
index 0000000..b2fec1f
--- /dev/null
+++ b/specs/api_template/property_templates/file_property.py.jinja
@@ -0,0 +1,31 @@
+{% macro construct_function(property, source) %}
+File(
+     payload = BytesIO({{ source }})
+)
+{% endmacro %}
+
+{% from "property_templates/property_macros.py.jinja" import construct_template %}
+
+{% macro construct(property, source, initial_value=None) %}
+{{ construct_template(construct_function, property, source, initial_value=initial_value) }}
+{% endmacro %}
+
+{% macro check_type_for_construct(property, source) %}isinstance({{ source }}, bytes){% endmacro %}
+
+{% macro transform(property, source, destination, declare_type=True, multipart=False) %}
+{% if property.required %}
+{% if property.nullable %}
+{{ destination }} = {{ source }}.to_tuple() if {{ source }} else None
+{% else %}
+{{ destination }} = {{ source }}.to_tuple()
+{% endif %}
+{% else %}
+{{ destination }}{% if declare_type %}: {{ property.get_type_string(json=True) }}{% endif %} = UNSET
+if not isinstance({{ source }}, Unset):
+{% if property.nullable %}
+    {{ destination }} = {{ source }}.to_tuple() if {{ source }} else None
+{% else %}
+    {{ destination }} = {{ source }}.to_tuple()
+{% endif %}
+{% endif %}
+{% endmacro %}
diff --git a/specs/api_template/property_templates/float_property.py.jinja b/specs/api_template/property_templates/float_property.py.jinja
new file mode 100644
index 0000000..f66f991
--- /dev/null
+++ b/specs/api_template/property_templates/float_property.py.jinja
@@ -0,0 +1,3 @@
+{% macro transform_header(property, source, destination) %}
+{{ destination }} = str({{ source }})
+{% endmacro %}
diff --git a/specs/api_template/property_templates/helpers.jinja b/specs/api_template/property_templates/helpers.jinja
new file mode 100644
index 0000000..33c753d
--- /dev/null
+++ b/specs/api_template/property_templates/helpers.jinja
@@ -0,0 +1,18 @@
+{% macro guarded_statement(property, source, statement) %}
+{# If the property can be UNSET or None, this macro returns the provided statement guarded by an if which will check
+ for those invalid values. Otherwise, it returns the statement unmodified. #}
+{% if property.required and not property.nullable %}
+{{ statement }}
+{% else %}
+    {% if property.nullable and not property.required %}
+if not isinstance({{ source }}, Unset) and {{ source }} is not None:
+    {{ statement }}
+    {% elif property.nullable %}
+if {{ source }} is not None:
+    {{ statement }}
+    {% else %}
+if not isinstance({{ source }}, Unset):
+    {{ statement }}
+    {% endif %}
+{% endif %}
+{% endmacro %}
diff --git a/specs/api_template/property_templates/int_property.py.jinja b/specs/api_template/property_templates/int_property.py.jinja
new file mode 100644
index 0000000..f66f991
--- /dev/null
+++ b/specs/api_template/property_templates/int_property.py.jinja
@@ -0,0 +1,3 @@
+{% macro transform_header(property, source, destination) %}
+{{ destination }} = str({{ source }})
+{% endmacro %}
diff --git a/specs/api_template/property_templates/list_property.py.jinja b/specs/api_template/property_templates/list_property.py.jinja
new file mode 100644
index 0000000..9686f69
--- /dev/null
+++ b/specs/api_template/property_templates/list_property.py.jinja
@@ -0,0 +1,77 @@
+{% macro construct(property, source, initial_value="[]") %}
+{% set inner_property = property.inner_property %}
+{% import "property_templates/" + inner_property.template as inner_template %}
+{% if inner_template.construct %}
+{% set inner_source = inner_property.python_name + "_data" %}
+{{ property.python_name }} = {{ initial_value }}
+_{{ property.python_name }} = {{ source }}
+{% if property.required and not property.nullable %}
+for {{ inner_source }} in (_{{ property.python_name }}):
+{% else %}
+for {{ inner_source }} in (_{{ property.python_name }} or []):
+{% endif %}
+    {{ inner_template.construct(inner_property, inner_source) | indent(4) }}
+    {{ property.python_name }}.append({{ inner_property.python_name }})
+{% else %}
+{{ property.python_name }} = cast({{ property.get_type_string(no_optional=True) }}, {{ source }})
+{% endif %}
+{% endmacro %}
+
+{% macro _transform(property, source, destination, multipart, transform_method) %}
+{% set inner_property = property.inner_property %}
+{% if multipart %}
+{% set multipart_destination = destination %}
+{% set destination = "_temp_" + destination %}
+{% endif %}
+{% import "property_templates/" + inner_property.template as inner_template %}
+{% if inner_template.transform %}
+{% set inner_source = inner_property.python_name + "_data" %}
+{{ destination }} = []
+for {{ inner_source }} in {{ source }}:
+    {{ inner_template.transform(inner_property, inner_source, inner_property.python_name, transform_method) | indent(4) }}
+    {{ destination }}.append({{ inner_property.python_name }})
+{% else %}
+{{ destination }} = {{ source }}
+{% endif %}
+{% if multipart %}
+{{ multipart_destination }} = (None, json.dumps({{ destination }}).encode(), 'application/json')
+{% endif %}
+{% endmacro %}
+
+{% macro check_type_for_construct(property, source) %}isinstance({{ source }}, list){% endmacro %}
+
+{% macro transform(property, source, destination, declare_type=True, multipart=False, transform_method="to_dict") %}
+{% set inner_property = property.inner_property %}
+{% if multipart %}
+    {% set type_string = "Union[Unset, Tuple[None, bytes, str]]" %}
+{% else %}
+    {% set type_string = property.get_type_string(json=True) %}
+{% endif %}
+{% if property.required %}
+{% if property.nullable %}
+if {{ source }} is None:
+    {{ destination }} = None
+else:
+    {{ _transform(property, source, destination, multipart, transform_method) | indent(4) }}
+{% else %}
+{{ _transform(property, source, destination, multipart, transform_method) }}
+{% endif %}
+{% else %}
+{{ destination }}{% if declare_type %}: {{ type_string }}{% endif %} = UNSET
+if not isinstance({{ source }}, Unset):
+{% if property.nullable %}
+    if {{ source }} is None:
+        {{ destination }} = None
+    else:
+        {{ _transform(property, source, destination, multipart, transform_method) | indent(8)}}
+{% else %}
+    {{ _transform(property, source, destination, multipart, transform_method) | indent(4)}}
+{% endif %}
+{% endif %}
+
+
+{% endmacro %}
+
+{% macro transform_multipart(property, source, destination) %}
+{{ transform(property, source, destination, transform_method="to_multipart") }}
+{% endmacro %}
diff --git a/specs/api_template/property_templates/model_property.py.jinja b/specs/api_template/property_templates/model_property.py.jinja
new file mode 100644
index 0000000..903aeef
--- /dev/null
+++ b/specs/api_template/property_templates/model_property.py.jinja
@@ -0,0 +1,40 @@
+{% macro construct_function(property, source) %}
+{{ property.class_info.name }}.from_dict({{ source }})
+{% endmacro %}
+
+{% from "property_templates/property_macros.py.jinja" import construct_template %}
+
+{% macro construct(property, source, initial_value=None) %}
+{{ construct_template(construct_function, property, source, initial_value=initial_value) }}
+{% endmacro %}
+
+{% macro check_type_for_construct(property, source) %}isinstance({{ source }}, dict){% endmacro %}
+
+{% macro transform(property, source, destination, declare_type=True, multipart=False, transform_method="to_dict") %}
+{% set transformed = source + "." + transform_method + "()" %}
+{% if multipart %}
+    {% set transformed = "(None, json.dumps(" + transformed + ").encode(), 'application/json')" %}
+    {% set type_string = "Union[Unset, Tuple[None, bytes, str]]" %}
+{% else %}
+    {% set type_string = property.get_type_string(json=True) %}
+{% endif %}
+{% if property.required %}
+{% if property.nullable %}
+{{ destination }} = {{ transformed }} if {{ source }} else None
+{% else %}
+{{ destination }} = {{ transformed }}
+{% endif %}
+{% else %}
+{{ destination }}{% if declare_type %}: {{ type_string }}{% endif %} = UNSET
+if not isinstance({{ source }}, Unset):
+{% if property.nullable %}
+    {{ destination }} = {{ transformed }} if {{ source }} else None
+{% else %}
+    {{ destination }} = {{ transformed }}
+{% endif %}
+{% endif %}
+{% endmacro %}
+
+{% macro transform_multipart(property, source, destination) %}
+{{ transform(property, source, destination, transform_method="to_multipart") }}
+{% endmacro %}
diff --git a/specs/api_template/property_templates/property_macros.py.jinja b/specs/api_template/property_templates/property_macros.py.jinja
new file mode 100644
index 0000000..d578d1d
--- /dev/null
+++ b/specs/api_template/property_templates/property_macros.py.jinja
@@ -0,0 +1,20 @@
+{% macro construct_template(construct_function, property, source, initial_value=None) %}
+{% if property.required and not property.nullable %}
+{{ property.python_name }} = {{ construct_function(property, source) }}
+{% else %}{# Must be nullable OR non-required #}
+_{{ property.python_name }} = {{ source }}
+{{ property.python_name }}: {{ property.get_type_string() }}
+    {% if property.nullable %}
+if _{{ property.python_name }} is None:
+    {{ property.python_name }} = {% if initial_value != None %}{{ initial_value }}{% else %}None{% endif %}
+
+    {% endif %}
+    {% if not property.required %}
+{% if property.nullable %}elif{% else %}if{% endif %} isinstance(_{{ property.python_name }},  Unset):
+    {{ property.python_name }} = {% if initial_value != None %}{{ initial_value }}{% else %}UNSET{% endif %}
+
+    {% endif %}
+else:
+    {{ property.python_name }} = {{ construct_function(property, "_" + property.python_name) }}
+{% endif %}
+{% endmacro %}
diff --git a/specs/api_template/property_templates/union_property.py.jinja b/specs/api_template/property_templates/union_property.py.jinja
new file mode 100644
index 0000000..8a7d506
--- /dev/null
+++ b/specs/api_template/property_templates/union_property.py.jinja
@@ -0,0 +1,85 @@
+{% macro construct(property, source, initial_value=None) %}
+def _parse_{{ property.python_name }}(data: object) -> {{ property.get_type_string() }}:
+    {% if "None" in property.get_type_strings_in_union(json=True) %}
+    if data is None:
+        return data
+    {% endif %}
+    {% if "Unset" in property.get_type_strings_in_union(json=True) %}
+    if isinstance(data, Unset):
+        return data
+    {% endif %}
+    {% set ns = namespace(contains_unmodified_properties = false) %}
+    {% for inner_property in property.inner_properties %}
+    {% import "property_templates/" + inner_property.template as inner_template %}
+        {% if not inner_template.construct %}
+            {% set ns.contains_unmodified_properties = true %}
+            {% continue %}
+        {% endif %}
+    {% if inner_template.check_type_for_construct and (not loop.last or ns.contains_unmodified_properties) %}
+    try:
+        if not {{ inner_template.check_type_for_construct(inner_property, "data") }}:
+            raise TypeError()
+        {{ inner_template.construct(inner_property, "data", initial_value="UNSET") | indent(8) }}
+        return {{ inner_property.python_name }}
+    except: # noqa: E722
+        pass
+    {% else  %}{# Don't do try/except for the last one nor any properties with no type checking #}
+    {% if inner_template.check_type_for_construct %}
+    if not {{ inner_template.check_type_for_construct(inner_property, "data") }}:
+        raise TypeError()
+    {% endif %}
+    {{ inner_template.construct(inner_property, "data", initial_value="UNSET") | indent(4) }}
+    return {{ inner_property.python_name }}
+    {% endif %}
+    {% endfor %}
+    {% if ns.contains_unmodified_properties %}
+    return cast({{ property.get_type_string() }}, data)
+    {% endif %}
+
+{{ property.python_name }} = _parse_{{ property.python_name }}({{ source }})
+{% endmacro %}
+
+{% macro transform(property, source, destination, declare_type=True, multipart=False) %}
+{% if not property.required or property.nullable %}
+{{ destination }}{% if declare_type %}: {{ property.get_type_string(json=True) }}{% endif %}
+
+{% if not property.required %}
+if isinstance({{ source }}, Unset):
+    {{ destination }} = UNSET
+{% endif %}
+{% endif %}
+{% if property.nullable %}
+    {% if property.required %}
+if {{ source }} is None:
+    {% else %}{# There's an if UNSET statement before this #}
+elif {{ source }} is None:
+    {% endif %}
+    {{ destination }} = None
+{% endif %}
+
+{% set ns = namespace(contains_properties_without_transform = false, contains_modified_properties = not property.required) %}
+{% for inner_property in property.inner_properties %}
+    {% import "property_templates/" + inner_property.template as inner_template %}
+    {% if not inner_template.transform %}
+        {% set ns.contains_properties_without_transform = true %}
+        {% continue %}
+    {% else %}
+        {% set ns.contains_modified_properties = true %}
+    {% endif %}
+    {% if loop.first and property.required and not property.nullable %}{# No if UNSET or if None statement before this #}
+if isinstance({{ source }}, {{ inner_property.get_instance_type_string() }}):
+    {% elif not loop.last or ns.contains_properties_without_transform %}
+elif isinstance({{ source }}, {{ inner_property.get_instance_type_string() }}):
+    {% else %}
+else:
+    {% endif %}
+    {{ inner_template.transform(inner_property, source, destination, declare_type=False, multipart=multipart) | indent(4) }}
+{% endfor %}
+{% if ns.contains_properties_without_transform and ns.contains_modified_properties %}
+else:
+    {{ destination }} = {{ source }}
+{% elif ns.contains_properties_without_transform %}
+{{ destination }} = {{ source }}
+{% endif %}
+
+{% endmacro %}
diff --git a/specs/api_template/pyproject.toml.jinja b/specs/api_template/pyproject.toml.jinja
new file mode 100644
index 0000000..5e2c2b1
--- /dev/null
+++ b/specs/api_template/pyproject.toml.jinja
@@ -0,0 +1,41 @@
+{% if use_poetry %}
+[tool.poetry]
+name = "{{ project_name }}"
+version = "{{ package_version }}"
+description = "{{ package_description }}"
+
+authors = []
+
+readme = "README.md"
+packages = [
+    {include = "{{ package_name }}"},
+]
+include = ["CHANGELOG.md", "{{ package_name }}/py.typed"]
+
+[tool.poetry.dependencies]
+python = "^3.7"
+httpx = ">=0.15.4,<0.23.0"
+attrs = ">=21.3.0"
+python-dateutil = "^2.8.0"
+
+[build-system]
+requires = ["poetry-core>=1.0.0"]
+build-backend = "poetry.core.masonry.api"
+
+{% endif %}
+[tool.black]
+line-length = 120
+target_version = ['py37', 'py38', 'py39']
+exclude = '''
+(
+  /(
+    | \.git
+    | \.venv
+    | \.mypy_cache
+  )/
+)
+'''
+
+[tool.isort]
+line_length = 120
+profile = "black"
diff --git a/specs/api_template/pyproject_no_poetry.toml.jinja b/specs/api_template/pyproject_no_poetry.toml.jinja
new file mode 100644
index 0000000..2d06853
--- /dev/null
+++ b/specs/api_template/pyproject_no_poetry.toml.jinja
@@ -0,0 +1,16 @@
+[tool.black]
+line-length = 120
+target_version = ['py36', 'py37', 'py38']
+exclude = '''
+(
+  /(
+    | \.git
+    | \.venv
+    | \.mypy_cache
+  )/
+)
+'''
+
+[tool.isort]
+line_length = 120
+profile = "black"
diff --git a/specs/api_template/setup.py.jinja b/specs/api_template/setup.py.jinja
new file mode 100644
index 0000000..af32f1c
--- /dev/null
+++ b/specs/api_template/setup.py.jinja
@@ -0,0 +1,18 @@
+import pathlib
+
+from setuptools import find_packages, setup
+
+here = pathlib.Path(__file__).parent.resolve()
+long_description = (here / "README.md").read_text(encoding="utf-8")
+
+setup(
+    name="{{ project_name }}",
+    version="{{ package_version }}",
+    description="{{ package_description }}",
+    long_description=long_description,
+    long_description_content_type="text/markdown",
+    packages=find_packages(),
+    python_requires=">=3.7, <4",
+    install_requires=["httpx >= 0.15.0, < 0.23.0", "attrs >= 21.3.0", "python-dateutil >= 2.8.0, < 3"],
+    package_data={"{{ package_name }}": ["py.typed"]},
+)
diff --git a/specs/api_template/str_enum.py.jinja b/specs/api_template/str_enum.py.jinja
new file mode 100644
index 0000000..4a9ab38
--- /dev/null
+++ b/specs/api_template/str_enum.py.jinja
@@ -0,0 +1,9 @@
+from enum import Enum
+
+class {{ enum.class_info.name }}(str, Enum):
+    {% for key, value in enum.values.items() %}
+    {{ key }} = "{{ value }}"
+    {% endfor %}
+
+    def __str__(self) -> str:
+        return str(self.value)
diff --git a/specs/api_template/types.py.jinja b/specs/api_template/types.py.jinja
new file mode 100644
index 0000000..bf90d01
--- /dev/null
+++ b/specs/api_template/types.py.jinja
@@ -0,0 +1,44 @@
+""" Contains some shared types for properties """
+from typing import Any, BinaryIO, Generic, MutableMapping, Optional, Tuple, TypeVar
+
+import attr
+
+
+class Unset:
+    def __bool__(self) -> bool:
+        return False
+
+
+UNSET: Unset = Unset()
+
+{# Used as `FileProperty._json_type_string` #}
+FileJsonType = Tuple[Optional[str], BinaryIO, Optional[str]]
+
+
+@attr.s(auto_attribs=True)
+class File:
+    """ Contains information for file uploads """
+
+    payload: BinaryIO
+    file_name: Optional[str] = None
+    mime_type: Optional[str] = None
+
+    def to_tuple(self) -> FileJsonType:
+        """ Return a tuple representation that httpx will accept for multipart/form-data """
+        return self.file_name, self.payload, self.mime_type
+
+
+T = TypeVar("T")
+
+
+@attr.s(auto_attribs=True)
+class Response(Generic[T]):
+    """ A response from an endpoint """
+
+    status_code: int
+    content: bytes
+    headers: MutableMapping[str, str]
+    parsed: Optional[T]
+
+
+__all__ = ["File", "Response", "FileJsonType"]
diff --git a/specs/hydra.yaml b/specs/hydra.yaml
new file mode 100644
index 0000000..9b314b6
--- /dev/null
+++ b/specs/hydra.yaml
@@ -0,0 +1,2960 @@
+openapi: 3.0.1
+info:
+  title: ORY Hydra
+  description: Welcome to the ORY Hydra HTTP API documentation. You will find documentation
+    for all HTTP APIs here.
+  version: 1.9.2
+servers:
+- url: /
+paths:
+  /.well-known/jwks.json:
+    get:
+      tags:
+      - public
+      summary: JSON Web Keys Discovery
+      description: |-
+        This endpoint returns JSON Web Keys to be used as public keys for verifying OpenID Connect ID Tokens and,
+        if enabled, OAuth 2.0 JWT Access Tokens. This endpoint can be used with client libraries like
+        [node-jwks-rsa](https://github.com/auth0/node-jwks-rsa) among others.
+      operationId: wellKnown
+      responses:
+        200:
+          description: JSONWebKeySet
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/JSONWebKeySet'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /.well-known/openid-configuration:
+    get:
+      tags:
+      - public
+      summary: OpenID Connect Discovery
+      description: |-
+        The well known endpoint an be used to retrieve information for OpenID Connect clients. We encourage you to not roll
+        your own OpenID Connect client but to use an OpenID Connect client library instead. You can learn more on this
+        flow at https://openid.net/specs/openid-connect-discovery-1_0.html .
+
+        Popular libraries for OpenID Connect clients include oidc-client-js (JavaScript), go-oidc (Golang), and others.
+        For a full list of clients go here: https://openid.net/developers/certified/
+      operationId: discoverOpenIDConfiguration
+      responses:
+        200:
+          description: wellKnown
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/wellKnown'
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /clients:
+    get:
+      tags:
+      - admin
+      summary: List OAuth 2.0 Clients
+      description: |-
+        This endpoint lists all clients in the database, and never returns client secrets. As a default it lists the first 100 clients. The `limit` parameter can be used to retrieve more clients, but it has an upper bound at 500 objects. Pagination should be used to retrieve more than 500 objects.
+
+        OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities. To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well protected and only callable by first-party components.
+        The "Link" header is also included in successful responses, which contains one or more links for pagination, formatted like so: '<https://hydra-url/admin/clients?limit={limit}&offset={offset}>; rel="{page}"', where page is one of the following applicable pages: 'first', 'next', 'last', and 'previous'.
+        Multiple links can be included in this header, and will be separated by a comma.
+      operationId: listOAuth2Clients
+      parameters:
+      - name: limit
+        in: query
+        description: The maximum amount of policies returned, upper bound is 500 policies
+        schema:
+          type: integer
+          format: int64
+      - name: offset
+        in: query
+        description: The offset from where to start looking.
+        schema:
+          type: integer
+          format: int64
+      responses:
+        200:
+          description: A list of clients.
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  $ref: '#/components/schemas/oAuth2Client'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+    post:
+      tags:
+      - admin
+      summary: Create an OAuth 2.0 Client
+      description: |-
+        Create a new OAuth 2.0 client If you pass `client_secret` the secret will be used, otherwise a random secret will be generated. The secret will be returned in the response and you will not be able to retrieve it later on. Write the secret down and keep it somwhere safe.
+
+        OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities. To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well protected and only callable by first-party components.
+      operationId: createOAuth2Client
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/oAuth2Client'
+        required: true
+      responses:
+        201:
+          description: oAuth2Client
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/oAuth2Client'
+        400:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        409:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+      x-codegen-request-body-name: Body
+  /clients/{id}:
+    get:
+      tags:
+      - admin
+      summary: Get an OAuth 2.0 Client.
+      description: |-
+        Get an OAUth 2.0 client by its ID. This endpoint never returns passwords.
+
+        OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities. To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well protected and only callable by first-party components.
+      operationId: getOAuth2Client
+      parameters:
+      - name: id
+        in: path
+        description: The id of the OAuth 2.0 Client.
+        required: true
+        schema:
+          type: string
+      responses:
+        200:
+          description: oAuth2Client
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/oAuth2Client'
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+    put:
+      tags:
+      - admin
+      summary: Update an OAuth 2.0 Client
+      description: |-
+        Update an existing OAuth 2.0 Client. If you pass `client_secret` the secret will be updated and returned via the API. This is the only time you will be able to retrieve the client secret, so write it down and keep it safe.
+
+        OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities. To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well protected and only callable by first-party components.
+      operationId: updateOAuth2Client
+      parameters:
+      - name: id
+        in: path
+        required: true
+        schema:
+          type: string
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/oAuth2Client'
+        required: true
+      responses:
+        200:
+          description: oAuth2Client
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/oAuth2Client'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+      x-codegen-request-body-name: Body
+    delete:
+      tags:
+      - admin
+      summary: Deletes an OAuth 2.0 Client
+      description: |-
+        Delete an existing OAuth 2.0 Client by its ID.
+
+        OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities. To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well protected and only callable by first-party components.
+      operationId: deleteOAuth2Client
+      parameters:
+      - name: id
+        in: path
+        description: The id of the OAuth 2.0 Client.
+        required: true
+        schema:
+          type: string
+      responses:
+        204:
+          description: |-
+            Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is
+            typically 201.
+          content: {}
+        404:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /health/alive:
+    get:
+      tags:
+      - admin
+      summary: Check Alive Status
+      description: |-
+        This endpoint returns a 200 status code when the HTTP server is up running.
+        This status does currently not include checks whether the database connection is working.
+
+        If the service supports TLS Edge Termination, this endpoint does not require the
+        `X-Forwarded-Proto` header to be set.
+
+        Be aware that if you are running multiple nodes of this service, the health status will never
+        refer to the cluster state, only to a single instance.
+      operationId: isInstanceAlive
+      responses:
+        200:
+          description: healthStatus
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/healthStatus'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /health/ready:
+    get:
+      tags:
+      - public
+      summary: Check Readiness Status
+      description: |-
+        This endpoint returns a 200 status code when the HTTP server is up running and the environment dependencies (e.g.
+        the database) are responsive as well.
+
+        If the service supports TLS Edge Termination, this endpoint does not require the
+        `X-Forwarded-Proto` header to be set.
+
+        Be aware that if you are running multiple nodes of this service, the health status will never
+        refer to the cluster state, only to a single instance.
+      operationId: isInstanceReady
+      responses:
+        200:
+          description: healthStatus
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/healthStatus'
+        503:
+          description: healthNotReadyStatus
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/healthNotReadyStatus'
+  /keys/{set}:
+    get:
+      tags:
+      - admin
+      summary: Retrieve a JSON Web Key Set
+      description: |-
+        This endpoint can be used to retrieve JWK Sets stored in ORY Hydra.
+
+        A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.
+      operationId: getJsonWebKeySet
+      parameters:
+      - name: set
+        in: path
+        description: The set
+        required: true
+        schema:
+          type: string
+      responses:
+        200:
+          description: JSONWebKeySet
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/JSONWebKeySet'
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        403:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+    put:
+      tags:
+      - admin
+      summary: Update a JSON Web Key Set
+      description: |-
+        Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your own.
+
+        A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.
+      operationId: updateJsonWebKeySet
+      parameters:
+      - name: set
+        in: path
+        description: The set
+        required: true
+        schema:
+          type: string
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/JSONWebKeySet'
+        required: false
+      responses:
+        200:
+          description: JSONWebKeySet
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/JSONWebKeySet'
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        403:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+      x-codegen-request-body-name: Body
+    post:
+      tags:
+      - admin
+      summary: Generate a New JSON Web Key
+      description: |-
+        This endpoint is capable of generating JSON Web Key Sets for you. There a different strategies available, such as symmetric cryptographic keys (HS256, HS512) and asymetric cryptographic keys (RS256, ECDSA). If the specified JSON Web Key Set does not exist, it will be created.
+
+        A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.
+      operationId: createJsonWebKeySet
+      parameters:
+      - name: set
+        in: path
+        description: The set
+        required: true
+        schema:
+          type: string
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/jsonWebKeySetGeneratorRequest'
+        required: false
+      responses:
+        201:
+          description: JSONWebKeySet
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/JSONWebKeySet'
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        403:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+      x-codegen-request-body-name: Body
+    delete:
+      tags:
+      - admin
+      summary: Delete a JSON Web Key Set
+      description: |-
+        Use this endpoint to delete a complete JSON Web Key Set and all the keys in that set.
+
+        A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.
+      operationId: deleteJsonWebKeySet
+      parameters:
+      - name: set
+        in: path
+        description: The set
+        required: true
+        schema:
+          type: string
+      responses:
+        204:
+          description: |-
+            Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is
+            typically 201.
+          content: {}
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        403:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /keys/{set}/{kid}:
+    get:
+      tags:
+      - admin
+      summary: Fetch a JSON Web Key
+      description: This endpoint returns a singular JSON Web Key, identified by the
+        set and the specific key ID (kid).
+      operationId: getJsonWebKey
+      parameters:
+      - name: kid
+        in: path
+        description: The kid of the desired key
+        required: true
+        schema:
+          type: string
+      - name: set
+        in: path
+        description: The set
+        required: true
+        schema:
+          type: string
+      responses:
+        200:
+          description: JSONWebKeySet
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/JSONWebKeySet'
+        404:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+    put:
+      tags:
+      - admin
+      summary: Update a JSON Web Key
+      description: |-
+        Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your own.
+
+        A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.
+      operationId: updateJsonWebKey
+      parameters:
+      - name: kid
+        in: path
+        description: The kid of the desired key
+        required: true
+        schema:
+          type: string
+      - name: set
+        in: path
+        description: The set
+        required: true
+        schema:
+          type: string
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/JSONWebKey'
+        required: false
+      responses:
+        200:
+          description: JSONWebKey
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/JSONWebKey'
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        403:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+      x-codegen-request-body-name: Body
+    delete:
+      tags:
+      - admin
+      summary: Delete a JSON Web Key
+      description: |-
+        Use this endpoint to delete a single JSON Web Key.
+
+        A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.
+      operationId: deleteJsonWebKey
+      parameters:
+      - name: kid
+        in: path
+        description: The kid of the desired key
+        required: true
+        schema:
+          type: string
+      - name: set
+        in: path
+        description: The set
+        required: true
+        schema:
+          type: string
+      responses:
+        204:
+          description: |-
+            Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is
+            typically 201.
+          content: {}
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        403:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /metrics/prometheus:
+    get:
+      tags:
+      - admin
+      summary: Get Snapshot Metrics from the Hydra Service.
+      description: |-
+        If you're using k8s, you can then add annotations to your deployment like so:
+
+        ```
+        metadata:
+        annotations:
+        prometheus.io/port: "4445"
+        prometheus.io/path: "/metrics/prometheus"
+        ```
+
+        If the service supports TLS Edge Termination, this endpoint does not require the
+        `X-Forwarded-Proto` header to be set.
+      operationId: prometheus
+      responses:
+        200:
+          description: |-
+            Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is
+            typically 201.
+          content: {}
+  /oauth2/auth:
+    get:
+      tags:
+      - public
+      summary: The OAuth 2.0 Authorize Endpoint
+      description: |-
+        This endpoint is not documented here because you should never use your own implementation to perform OAuth2 flows.
+        OAuth2 is a very popular protocol and a library for your programming language will exists.
+
+        To learn more about this flow please refer to the specification: https://tools.ietf.org/html/rfc6749
+      operationId: oauthAuth
+      responses:
+        302:
+          description: |-
+            Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is
+            typically 201.
+          content: {}
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /oauth2/auth/requests/consent:
+    get:
+      tags:
+      - admin
+      summary: Get Consent Request Information
+      description: |-
+        When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the login provider
+        to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated, he/she must now be asked if
+        the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the subject's behalf.
+
+        The consent provider which handles this request and is a web app implemented and hosted by you. It shows a subject interface which asks the subject to
+        grant or deny the client access to the requested scope ("Application my-dropbox-app wants write access to all your private files").
+
+        The consent challenge is appended to the consent provider's URL to which the subject's user-agent (browser) is redirected to. The consent
+        provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if the subject accepted
+        or rejected the request.
+      operationId: getConsentRequest
+      parameters:
+      - name: consent_challenge
+        in: query
+        required: true
+        schema:
+          type: string
+      responses:
+        200:
+          description: consentRequest
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/consentRequest'
+        404:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        409:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /oauth2/auth/requests/consent/accept:
+    put:
+      tags:
+      - admin
+      summary: Accept a Consent Request
+      description: |-
+        When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the login provider
+        to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated, he/she must now be asked if
+        the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the subject's behalf.
+
+        The consent provider which handles this request and is a web app implemented and hosted by you. It shows a subject interface which asks the subject to
+        grant or deny the client access to the requested scope ("Application my-dropbox-app wants write access to all your private files").
+
+        The consent challenge is appended to the consent provider's URL to which the subject's user-agent (browser) is redirected to. The consent
+        provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if the subject accepted
+        or rejected the request.
+
+        This endpoint tells ORY Hydra that the subject has authorized the OAuth 2.0 client to access resources on his/her behalf.
+        The consent provider includes additional information, such as session data for access and ID tokens, and if the
+        consent request should be used as basis for future requests.
+
+        The response contains a redirect URL which the consent provider should redirect the user-agent to.
+      operationId: acceptConsentRequest
+      parameters:
+      - name: consent_challenge
+        in: query
+        required: true
+        schema:
+          type: string
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/acceptConsentRequest'
+        required: false
+      responses:
+        200:
+          description: completedRequest
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/completedRequest'
+        404:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+      x-codegen-request-body-name: Body
+  /oauth2/auth/requests/consent/reject:
+    put:
+      tags:
+      - admin
+      summary: Reject a Consent Request
+      description: |-
+        When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the login provider
+        to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated, he/she must now be asked if
+        the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the subject's behalf.
+
+        The consent provider which handles this request and is a web app implemented and hosted by you. It shows a subject interface which asks the subject to
+        grant or deny the client access to the requested scope ("Application my-dropbox-app wants write access to all your private files").
+
+        The consent challenge is appended to the consent provider's URL to which the subject's user-agent (browser) is redirected to. The consent
+        provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if the subject accepted
+        or rejected the request.
+
+        This endpoint tells ORY Hydra that the subject has not authorized the OAuth 2.0 client to access resources on his/her behalf.
+        The consent provider must include a reason why the consent was not granted.
+
+        The response contains a redirect URL which the consent provider should redirect the user-agent to.
+      operationId: rejectConsentRequest
+      parameters:
+      - name: consent_challenge
+        in: query
+        required: true
+        schema:
+          type: string
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/rejectRequest'
+        required: false
+      responses:
+        200:
+          description: completedRequest
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/completedRequest'
+        404:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+      x-codegen-request-body-name: Body
+  /oauth2/auth/requests/login:
+    get:
+      tags:
+      - admin
+      summary: Get a Login Request
+      description: |-
+        When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the login provider
+        (sometimes called "identity provider") to authenticate the subject and then tell ORY Hydra now about it. The login
+        provider is an web-app you write and host, and it must be able to authenticate ("show the subject a login screen")
+        a subject (in OAuth2 the proper name for subject is "resource owner").
+
+        The authentication challenge is appended to the login provider URL to which the subject's user-agent (browser) is redirected to. The login
+        provider uses that challenge to fetch information on the OAuth2 request and then accept or reject the requested authentication process.
+      operationId: getLoginRequest
+      parameters:
+      - name: login_challenge
+        in: query
+        required: true
+        schema:
+          type: string
+      responses:
+        200:
+          description: loginRequest
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/loginRequest'
+        400:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        404:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        409:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /oauth2/auth/requests/login/accept:
+    put:
+      tags:
+      - admin
+      summary: Accept a Login Request
+      description: |-
+        When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the login provider
+        (sometimes called "identity provider") to authenticate the subject and then tell ORY Hydra now about it. The login
+        provider is an web-app you write and host, and it must be able to authenticate ("show the subject a login screen")
+        a subject (in OAuth2 the proper name for subject is "resource owner").
+
+        The authentication challenge is appended to the login provider URL to which the subject's user-agent (browser) is redirected to. The login
+        provider uses that challenge to fetch information on the OAuth2 request and then accept or reject the requested authentication process.
+
+        This endpoint tells ORY Hydra that the subject has successfully authenticated and includes additional information such as
+        the subject's ID and if ORY Hydra should remember the subject's subject agent for future authentication attempts by setting
+        a cookie.
+
+        The response contains a redirect URL which the login provider should redirect the user-agent to.
+      operationId: acceptLoginRequest
+      parameters:
+      - name: login_challenge
+        in: query
+        required: true
+        schema:
+          type: string
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/acceptLoginRequest'
+        required: false
+      responses:
+        200:
+          description: completedRequest
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/completedRequest'
+        400:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        404:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+      x-codegen-request-body-name: Body
+  /oauth2/auth/requests/login/reject:
+    put:
+      tags:
+      - admin
+      summary: Reject a Login Request
+      description: |-
+        When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the login provider
+        (sometimes called "identity provider") to authenticate the subject and then tell ORY Hydra now about it. The login
+        provider is an web-app you write and host, and it must be able to authenticate ("show the subject a login screen")
+        a subject (in OAuth2 the proper name for subject is "resource owner").
+
+        The authentication challenge is appended to the login provider URL to which the subject's user-agent (browser) is redirected to. The login
+        provider uses that challenge to fetch information on the OAuth2 request and then accept or reject the requested authentication process.
+
+        This endpoint tells ORY Hydra that the subject has not authenticated and includes a reason why the authentication
+        was be denied.
+
+        The response contains a redirect URL which the login provider should redirect the user-agent to.
+      operationId: rejectLoginRequest
+      parameters:
+      - name: login_challenge
+        in: query
+        required: true
+        schema:
+          type: string
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/rejectRequest'
+        required: false
+      responses:
+        200:
+          description: completedRequest
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/completedRequest'
+        400:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        404:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+      x-codegen-request-body-name: Body
+  /oauth2/auth/requests/logout:
+    get:
+      tags:
+      - admin
+      summary: Get a Logout Request
+      description: Use this endpoint to fetch a logout request.
+      operationId: getLogoutRequest
+      parameters:
+      - name: logout_challenge
+        in: query
+        required: true
+        schema:
+          type: string
+      responses:
+        200:
+          description: logoutRequest
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/logoutRequest'
+        404:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /oauth2/auth/requests/logout/accept:
+    put:
+      tags:
+      - admin
+      summary: Accept a Logout Request
+      description: |-
+        When a user or an application requests ORY Hydra to log out a user, this endpoint is used to confirm that logout request.
+        No body is required.
+
+        The response contains a redirect URL which the consent provider should redirect the user-agent to.
+      operationId: acceptLogoutRequest
+      parameters:
+      - name: logout_challenge
+        in: query
+        required: true
+        schema:
+          type: string
+      responses:
+        200:
+          description: completedRequest
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/completedRequest'
+        404:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /oauth2/auth/requests/logout/reject:
+    put:
+      tags:
+      - admin
+      summary: Reject a Logout Request
+      description: |-
+        When a user or an application requests ORY Hydra to log out a user, this endpoint is used to deny that logout request.
+        No body is required.
+
+        The response is empty as the logout provider has to chose what action to perform next.
+      operationId: rejectLogoutRequest
+      parameters:
+      - name: logout_challenge
+        in: query
+        required: true
+        schema:
+          type: string
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/rejectRequest'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/rejectRequest'
+        required: false
+      responses:
+        204:
+          description: |-
+            Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is
+            typically 201.
+          content: {}
+        404:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+      x-codegen-request-body-name: Body
+  /oauth2/auth/sessions/consent:
+    get:
+      tags:
+      - admin
+      summary: Lists All Consent Sessions of a Subject
+      description: |-
+        This endpoint lists all subject's granted consent sessions, including client and granted scope.
+        If the subject is unknown or has not granted any consent sessions yet, the endpoint returns an
+        empty JSON array with status code 200 OK.
+
+
+        The "Link" header is also included in successful responses, which contains one or more links for pagination, formatted like so: '<https://hydra-url/admin/oauth2/auth/sessions/consent?subject={user}&limit={limit}&offset={offset}>; rel="{page}"', where page is one of the following applicable pages: 'first', 'next', 'last', and 'previous'.
+        Multiple links can be included in this header, and will be separated by a comma.
+      operationId: listSubjectConsentSessions
+      parameters:
+      - name: subject
+        in: query
+        required: true
+        schema:
+          type: string
+      responses:
+        200:
+          description: A list of used consent requests.
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  $ref: '#/components/schemas/PreviousConsentSession'
+        400:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+    delete:
+      tags:
+      - admin
+      summary: Revokes Consent Sessions of a Subject for a Specific OAuth 2.0 Client
+      description: |-
+        This endpoint revokes a subject's granted consent sessions for a specific OAuth 2.0 Client and invalidates all
+        associated OAuth 2.0 Access Tokens.
+      operationId: revokeConsentSessions
+      parameters:
+      - name: subject
+        in: query
+        description: The subject (Subject) who's consent sessions should be deleted.
+        required: true
+        schema:
+          type: string
+      - name: client
+        in: query
+        description: If set, deletes only those consent sessions by the Subject that
+          have been granted to the specified OAuth 2.0 Client ID
+        schema:
+          type: string
+      - name: all
+        in: query
+        description: If set to `?all=true`, deletes all consent sessions by the Subject
+          that have been granted.
+        schema:
+          type: boolean
+      responses:
+        204:
+          description: |-
+            Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is
+            typically 201.
+          content: {}
+        400:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        404:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /oauth2/auth/sessions/login:
+    delete:
+      tags:
+      - admin
+      summary: |-
+        Invalidates All Login Sessions of a Certain User
+        Invalidates a Subject's Authentication Session
+      description: |-
+        This endpoint invalidates a subject's authentication session. After revoking the authentication session, the subject
+        has to re-authenticate at ORY Hydra. This endpoint does not invalidate any tokens and does not work with OpenID Connect
+        Front- or Back-channel logout.
+      operationId: revokeAuthenticationSession
+      parameters:
+      - name: subject
+        in: query
+        required: true
+        schema:
+          type: string
+      responses:
+        204:
+          description: |-
+            Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is
+            typically 201.
+          content: {}
+        400:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        404:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /oauth2/flush:
+    post:
+      tags:
+      - admin
+      summary: Flush Expired OAuth2 Access Tokens
+      description: |-
+        This endpoint flushes expired OAuth2 access tokens from the database. You can set a time after which no tokens will be
+        not be touched, in case you want to keep recent tokens for auditing. Refresh tokens can not be flushed as they are deleted
+        automatically when performing the refresh flow.
+      operationId: flushInactiveOAuth2Tokens
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/flushInactiveOAuth2TokensRequest'
+        required: false
+      responses:
+        204:
+          description: |-
+            Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is
+            typically 201.
+          content: {}
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+      x-codegen-request-body-name: Body
+  /oauth2/introspect:
+    post:
+      tags:
+      - admin
+      summary: Introspect OAuth2 Tokens
+      description: |-
+        The introspection endpoint allows to check if a token (both refresh and access) is active or not. An active token
+        is neither expired nor revoked. If a token is active, additional information on the token will be included. You can
+        set additional data for a token by setting `accessTokenExtra` during the consent flow.
+
+        For more information [read this blog post](https://www.oauth.com/oauth2-servers/token-introspection-endpoint/).
+      operationId: introspectOAuth2Token
+      requestBody:
+        content:
+          application/x-www-form-urlencoded:
+            schema:
+              required:
+              - token
+              properties:
+                token:
+                  type: string
+                  description: |-
+                    The string value of the token. For access tokens, this
+                    is the "access_token" value returned from the token endpoint
+                    defined in OAuth 2.0. For refresh tokens, this is the "refresh_token"
+                    value returned.
+                scope:
+                  type: string
+                  description: |-
+                    An optional, space separated list of required scopes. If the access token was not granted one of the
+                    scopes, the result of active will be false.
+        required: true
+      responses:
+        200:
+          description: oAuth2TokenIntrospection
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/oAuth2TokenIntrospection'
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /oauth2/revoke:
+    post:
+      tags:
+      - public
+      summary: Revoke OAuth2 Tokens
+      description: |-
+        Revoking a token (both access and refresh) means that the tokens will be invalid. A revoked access token can no
+        longer be used to make access requests, and a revoked refresh token can no longer be used to refresh an access token.
+        Revoking a refresh token also invalidates the access token that was created with it. A token may only be revoked by
+        the client the token was generated for.
+      operationId: revokeOAuth2Token
+      requestBody:
+        content:
+          application/x-www-form-urlencoded:
+            schema:
+              required:
+              - token
+              properties:
+                token:
+                  type: string
+        required: true
+      responses:
+        200:
+          description: |-
+            Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is
+            typically 201.
+          content: {}
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+      security:
+      - basic: []
+      - oauth2: []
+  /oauth2/sessions/logout:
+    get:
+      tags:
+      - public
+      summary: OpenID Connect Front-Backchannel Enabled Logout
+      description: |-
+        This endpoint initiates and completes user logout at ORY Hydra and initiates OpenID Connect Front-/Back-channel logout:
+
+        https://openid.net/specs/openid-connect-frontchannel-1_0.html
+        https://openid.net/specs/openid-connect-backchannel-1_0.html
+      operationId: disconnectUser
+      responses:
+        302:
+          description: |-
+            Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is
+            typically 201.
+          content: {}
+  /oauth2/token:
+    post:
+      tags:
+      - public
+      summary: The OAuth 2.0 Token Endpoint
+      description: |-
+        The client makes a request to the token endpoint by sending the
+        following parameters using the "application/x-www-form-urlencoded" HTTP
+        request entity-body.
+
+        > Do not implement a client for this endpoint yourself. Use a library. There are many libraries
+        > available for any programming language. You can find a list of libraries here: https://oauth.net/code/
+        >
+        > Do note that Hydra SDK does not implement this endpoint properly. Use one of the libraries listed above!
+      operationId: oauth2Token
+      requestBody:
+        content:
+          application/x-www-form-urlencoded:
+            schema:
+              required:
+              - grant_type
+              properties:
+                grant_type:
+                  type: string
+                code:
+                  type: string
+                refresh_token:
+                  type: string
+                redirect_uri:
+                  type: string
+                client_id:
+                  type: string
+        required: true
+      responses:
+        200:
+          description: oauth2TokenResponse
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/oauth2TokenResponse'
+        400:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+      security:
+      - basic: []
+      - oauth2: []
+  /oauth2/tokens:
+    delete:
+      tags:
+      - admin
+      summary: Delete OAuth2 Access Tokens from a Client
+      description: This endpoint deletes OAuth2 access tokens issued for a client
+        from the database
+      operationId: deleteOAuth2Token
+      parameters:
+      - name: client_id
+        in: query
+        required: true
+        schema:
+          type: string
+      responses:
+        204:
+          description: |-
+            Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is
+            typically 201.
+          content: {}
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+  /userinfo:
+    get:
+      tags:
+      - public
+      summary: OpenID Connect Userinfo
+      description: |-
+        This endpoint returns the payload of the ID Token, including the idTokenExtra values, of
+        the provided OAuth 2.0 Access Token.
+
+        For more information please [refer to the spec](http://openid.net/specs/openid-connect-core-1_0.html#UserInfo).
+      operationId: userinfo
+      responses:
+        200:
+          description: userinfoResponse
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/userinfoResponse'
+        401:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+        500:
+          description: genericError
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/genericError'
+      security:
+      - oauth2: []
+  /version:
+    get:
+      tags:
+      - admin
+      summary: Get Service Version
+      description: |-
+        This endpoint returns the service version typically notated using semantic versioning.
+
+        If the service supports TLS Edge Termination, this endpoint does not require the
+        `X-Forwarded-Proto` header to be set.
+      operationId: getVersion
+      responses:
+        200:
+          description: version
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/version'
+components:
+  schemas:
+    ContainerWaitOKBodyError:
+      type: object
+      properties:
+        Message:
+          type: string
+          description: Details of an error
+      description: ContainerWaitOKBodyError container waiting error, if any
+    JSONRawMessage:
+      #title: JSONRawMessage represents a json.RawMessage that works well with JSON,
+      #  SQL, and Swagger.
+      type: object
+    JSONWebKey:
+      required:
+      - alg
+      - kid
+      - kty
+      - use
+      type: object
+      properties:
+        alg:
+          type: string
+          description: |-
+            The "alg" (algorithm) parameter identifies the algorithm intended for
+            use with the key.  The values used should either be registered in the
+            IANA "JSON Web Signature and Encryption Algorithms" registry
+            established by [JWA] or be a value that contains a Collision-
+            Resistant Name.
+          example: RS256
+        crv:
+          type: string
+          example: P-256
+        d:
+          type: string
+          example: T_N8I-6He3M8a7X1vWt6TGIx4xB_GP3Mb4SsZSA4v-orvJzzRiQhLlRR81naWYxfQAYt5isDI6_C2L9bdWo4FFPjGQFvNoRX-_sBJyBI_rl-TBgsZYoUlAj3J92WmY2inbA-PwyJfsaIIDceYBC-eX-xiCu6qMqkZi3MwQAFL6bMdPEM0z4JBcwFT3VdiWAIRUuACWQwrXMq672x7fMuaIaHi7XDGgt1ith23CLfaREmJku9PQcchbt_uEY-hqrFY6ntTtS4paWWQj86xLL94S-Tf6v6xkL918PfLSOTq6XCzxvlFwzBJqApnAhbwqLjpPhgUG04EDRrqrSBc5Y1BLevn6Ip5h1AhessBp3wLkQgz_roeckt-ybvzKTjESMuagnpqLvOT7Y9veIug2MwPJZI2VjczRc1vzMs25XrFQ8DpUy-bNdp89TmvAXwctUMiJdgHloJw23Cv03gIUAkDnsTqZmkpbIf-crpgNKFmQP_EDKoe8p_PXZZgfbRri3NoEVGP7Mk6yEu8LjJhClhZaBNjuWw2-KlBfOA3g79mhfBnkInee5KO9mGR50qPk1V-MorUYNTFMZIm0kFE6eYVWFBwJHLKYhHU34DoiK1VP-svZpC2uAMFNA_UJEwM9CQ2b8qe4-5e9aywMvwcuArRkAB5mBIfOaOJao3mfukKAE
+        dp:
+          type: string
+          example: G4sPXkc6Ya9y8oJW9_ILj4xuppu0lzi_H7VTkS8xj5SdX3coE0oimYwxIi2emTAue0UOa5dpgFGyBJ4c8tQ2VF402XRugKDTP8akYhFo5tAA77Qe_NmtuYZc3C3m3I24G2GvR5sSDxUyAN2zq8Lfn9EUms6rY3Ob8YeiKkTiBj0
+        dq:
+          type: string
+          example: s9lAH9fggBsoFR8Oac2R_E2gw282rT2kGOAhvIllETE1efrA6huUUvMfBcMpn8lqeW6vzznYY5SSQF7pMdC_agI3nG8Ibp1BUb0JUiraRNqUfLhcQb_d9GF4Dh7e74WbRsobRonujTYN1xCaP6TO61jvWrX-L18txXw494Q_cgk
+        e:
+          type: string
+          example: AQAB
+        k:
+          type: string
+          example: GawgguFyGrWKav7AX4VKUg
+        kid:
+          type: string
+          description: |-
+            The "kid" (key ID) parameter is used to match a specific key.  This
+            is used, for instance, to choose among a set of keys within a JWK Set
+            during key rollover.  The structure of the "kid" value is
+            unspecified.  When "kid" values are used within a JWK Set, different
+            keys within the JWK Set SHOULD use distinct "kid" values.  (One
+            example in which different keys might use the same "kid" value is if
+            they have different "kty" (key type) values but are considered to be
+            equivalent alternatives by the application using them.)  The "kid"
+            value is a case-sensitive string.
+          example: 1603dfe0af8f4596
+        kty:
+          type: string
+          description: |-
+            The "kty" (key type) parameter identifies the cryptographic algorithm
+            family used with the key, such as "RSA" or "EC". "kty" values should
+            either be registered in the IANA "JSON Web Key Types" registry
+            established by [JWA] or be a value that contains a Collision-
+            Resistant Name.  The "kty" value is a case-sensitive string.
+          example: RSA
+        n:
+          type: string
+          example: vTqrxUyQPl_20aqf5kXHwDZrel-KovIp8s7ewJod2EXHl8tWlRB3_Rem34KwBfqlKQGp1nqah-51H4Jzruqe0cFP58hPEIt6WqrvnmJCXxnNuIB53iX_uUUXXHDHBeaPCSRoNJzNysjoJ30TIUsKBiirhBa7f235PXbKiHducLevV6PcKxJ5cY8zO286qJLBWSPm-OIevwqsIsSIH44Qtm9sioFikhkbLwoqwWORGAY0nl6XvVOlhADdLjBSqSAeT1FPuCDCnXwzCDR8N9IFB_IjdStFkC-rVt2K5BYfPd0c3yFp_vHR15eRd0zJ8XQ7woBC8Vnsac6Et1pKS59pX6256DPWu8UDdEOolKAPgcd_g2NpA76cAaF_jcT80j9KrEzw8Tv0nJBGesuCjPNjGs_KzdkWTUXt23Hn9QJsdc1MZuaW0iqXBepHYfYoqNelzVte117t4BwVp0kUM6we0IqyXClaZgOI8S-WDBw2_Ovdm8e5NmhYAblEVoygcX8Y46oH6bKiaCQfKCFDMcRgChme7AoE1yZZYsPbaG_3IjPrC4LBMHQw8rM9dWjJ8ImjicvZ1pAm0dx-KHCP3y5PVKrxBDf1zSOsBRkOSjB8TPODnJMz6-jd5hTtZxpZPwPoIdCanTZ3ZD6uRBpTmDwtpRGm63UQs1m5FWPwb0T2IF0
+        p:
+          type: string
+          example: 6NbkXwDWUhi-eR55Cgbf27FkQDDWIamOaDr0rj1q0f1fFEz1W5A_09YvG09Fiv1AO2-D8Rl8gS1Vkz2i0zCSqnyy8A025XOcRviOMK7nIxE4OH_PEsko8dtIrb3TmE2hUXvCkmzw9EsTF1LQBOGC6iusLTXepIC1x9ukCKFZQvdgtEObQ5kzd9Nhq-cdqmSeMVLoxPLd1blviVT9Vm8-y12CtYpeJHOaIDtVPLlBhJiBoPKWg3vxSm4XxIliNOefqegIlsmTIa3MpS6WWlCK3yHhat0Q-rRxDxdyiVdG_wzJvp0Iw_2wms7pe-PgNPYvUWH9JphWP5K38YqEBiJFXQ
+        q:
+          type: string
+          example: 0A1FmpOWR91_RAWpqreWSavNaZb9nXeKiBo0DQGBz32DbqKqQ8S4aBJmbRhJcctjCLjain-ivut477tAUMmzJwVJDDq2MZFwC9Q-4VYZmFU4HJityQuSzHYe64RjN-E_NQ02TWhG3QGW6roq6c57c99rrUsETwJJiwS8M5p15Miuz53DaOjv-uqqFAFfywN5WkxHbraBcjHtMiQuyQbQqkCFh-oanHkwYNeytsNhTu2mQmwR5DR2roZ2nPiFjC6nsdk-A7E3S3wMzYYFw7jvbWWoYWo9vB40_MY2Y0FYQSqcDzcBIcq_0tnnasf3VW4Fdx6m80RzOb2Fsnln7vKXAQ
+        qi:
+          type: string
+          example: GyM_p6JrXySiz1toFgKbWV-JdI3jQ4ypu9rbMWx3rQJBfmt0FoYzgUIZEVFEcOqwemRN81zoDAaa-Bk0KWNGDjJHZDdDmFhW3AN7lI-puxk_mHZGJ11rxyR8O55XLSe3SPmRfKwZI6yU24ZxvQKFYItdldUKGzO6Ia6zTKhAVRU
+        use:
+          type: string
+          description: |-
+            Use ("public key use") identifies the intended use of
+            the public key. The "use" parameter is employed to indicate whether
+            a public key is used for encrypting data or verifying the signature
+            on data. Values are commonly "sig" (signature) or "enc" (encryption).
+          example: sig
+        x:
+          type: string
+          example: f83OJ3D2xF1Bg8vub9tLe1gHMzV76e8Tus9uPHvRVEU
+        x5c:
+          type: array
+          description: |-
+            The "x5c" (X.509 certificate chain) parameter contains a chain of one
+            or more PKIX certificates [RFC5280].  The certificate chain is
+            represented as a JSON array of certificate value strings.  Each
+            string in the array is a base64-encoded (Section 4 of [RFC4648] --
+            not base64url-encoded) DER [ITU.X690.1994] PKIX certificate value.
+            The PKIX certificate containing the key value MUST be the first
+            certificate.
+          items:
+            type: string
+        y:
+          type: string
+          example: x_FEzRu9m36HLN_tue659LNpXW6pCyStikYjKIWI5a0
+      description: |-
+        It is important that this model object is named JSONWebKey for
+        "swagger generate spec" to generate only on definition of a
+        JSONWebKey.
+    JSONWebKeySet:
+      type: object
+      properties:
+        keys:
+          type: array
+          description: |-
+            The value of the "keys" parameter is an array of JWK values.  By
+            default, the order of the JWK values within the array does not imply
+            an order of preference among them, although applications of JWK Sets
+            can choose to assign a meaning to the order for their purposes, if
+            desired.
+          items:
+            $ref: '#/components/schemas/JSONWebKey'
+      description: |-
+        It is important that this model object is named JSONWebKeySet for
+        "swagger generate spec" to generate only on definition of a
+        JSONWebKeySet. Since one with the same name is previously defined as
+        client.Client.JSONWebKeys and this one is last, this one will be
+        effectively written in the swagger spec.
+    JoseJSONWebKeySet:
+      type: object
+    NullTime:
+      #title: NullTime implements sql.NullTime functionality.
+      type: string
+      format: date-time
+    PluginConfig:
+      #title: PluginConfig The config of a plugin.
+      required:
+      - Args
+      - Description
+      - Documentation
+      - Entrypoint
+      - Env
+      - Interface
+      - IpcHost
+      - Linux
+      - Mounts
+      - Network
+      - PidHost
+      - PropagatedMount
+      - WorkDir
+      type: object
+      properties:
+        Args:
+          $ref: '#/components/schemas/PluginConfigArgs'
+        Description:
+          type: string
+          description: description
+        DockerVersion:
+          type: string
+          description: Docker Version used to create the plugin
+        Documentation:
+          type: string
+          description: documentation
+        Entrypoint:
+          type: array
+          description: entrypoint
+          items:
+            type: string
+        Env:
+          type: array
+          description: env
+          items:
+            $ref: '#/components/schemas/PluginEnv'
+        Interface:
+          $ref: '#/components/schemas/PluginConfigInterface'
+        IpcHost:
+          type: boolean
+          description: ipc host
+        Linux:
+          $ref: '#/components/schemas/PluginConfigLinux'
+        Mounts:
+          type: array
+          description: mounts
+          items:
+            $ref: '#/components/schemas/PluginMount'
+        Network:
+          $ref: '#/components/schemas/PluginConfigNetwork'
+        PidHost:
+          type: boolean
+          description: pid host
+        PropagatedMount:
+          type: string
+          description: propagated mount
+        User:
+          $ref: '#/components/schemas/PluginConfigUser'
+        WorkDir:
+          type: string
+          description: work dir
+        rootfs:
+          $ref: '#/components/schemas/PluginConfigRootfs'
+    PluginConfigArgs:
+      required:
+      - Description
+      - Name
+      - Settable
+      - Value
+      type: object
+      properties:
+        Description:
+          type: string
+          description: description
+        Name:
+          type: string
+          description: name
+        Settable:
+          type: array
+          description: settable
+          items:
+            type: string
+        Value:
+          type: array
+          description: value
+          items:
+            type: string
+      description: PluginConfigArgs plugin config args
+    PluginConfigInterface:
+      required:
+      - Socket
+      - Types
+      type: object
+      properties:
+        Socket:
+          type: string
+          description: socket
+        Types:
+          type: array
+          description: types
+          items:
+            $ref: '#/components/schemas/PluginInterfaceType'
+      description: PluginConfigInterface The interface between Docker and the plugin
+    PluginConfigLinux:
+      required:
+      - AllowAllDevices
+      - Capabilities
+      - Devices
+      type: object
+      properties:
+        AllowAllDevices:
+          type: boolean
+          description: allow all devices
+        Capabilities:
+          type: array
+          description: capabilities
+          items:
+            type: string
+        Devices:
+          type: array
+          description: devices
+          items:
+            $ref: '#/components/schemas/PluginDevice'
+      description: PluginConfigLinux plugin config linux
+    PluginConfigNetwork:
+      required:
+      - Type
+      type: object
+      properties:
+        Type:
+          type: string
+          description: type
+      description: PluginConfigNetwork plugin config network
+    PluginConfigRootfs:
+      type: object
+      properties:
+        diff_ids:
+          type: array
+          description: diff ids
+          items:
+            type: string
+        type:
+          type: string
+          description: type
+      description: PluginConfigRootfs plugin config rootfs
+    PluginConfigUser:
+      type: object
+      properties:
+        GID:
+          type: integer
+          description: g ID
+          format: uint32
+        UID:
+          type: integer
+          description: UID
+          format: uint32
+      description: PluginConfigUser plugin config user
+    PluginDevice:
+      required:
+      - Description
+      - Name
+      - Path
+      - Settable
+      type: object
+      properties:
+        Description:
+          type: string
+          description: description
+        Name:
+          type: string
+          description: name
+        Path:
+          type: string
+          description: path
+        Settable:
+          type: array
+          description: settable
+          items:
+            type: string
+      description: PluginDevice plugin device
+    PluginEnv:
+      required:
+      - Description
+      - Name
+      - Settable
+      - Value
+      type: object
+      properties:
+        Description:
+          type: string
+          description: description
+        Name:
+          type: string
+          description: name
+        Settable:
+          type: array
+          description: settable
+          items:
+            type: string
+        Value:
+          type: string
+          description: value
+      description: PluginEnv plugin env
+    PluginInterfaceType:
+      required:
+      - Capability
+      - Prefix
+      - Version
+      type: object
+      properties:
+        Capability:
+          type: string
+          description: capability
+        Prefix:
+          type: string
+          description: prefix
+        Version:
+          type: string
+          description: version
+      description: PluginInterfaceType plugin interface type
+    PluginMount:
+      required:
+      - Description
+      - Destination
+      - Name
+      - Options
+      - Settable
+      - Source
+      - Type
+      type: object
+      properties:
+        Description:
+          type: string
+          description: description
+        Destination:
+          type: string
+          description: destination
+        Name:
+          type: string
+          description: name
+        Options:
+          type: array
+          description: options
+          items:
+            type: string
+        Settable:
+          type: array
+          description: settable
+          items:
+            type: string
+        Source:
+          type: string
+          description: source
+        Type:
+          type: string
+          description: type
+      description: PluginMount plugin mount
+    PluginSettings:
+      #title: PluginSettings Settings that can be modified by users.
+      required:
+      - Args
+      - Devices
+      - Env
+      - Mounts
+      type: object
+      properties:
+        Args:
+          type: array
+          description: args
+          items:
+            type: string
+        Devices:
+          type: array
+          description: devices
+          items:
+            $ref: '#/components/schemas/PluginDevice'
+        Env:
+          type: array
+          description: env
+          items:
+            type: string
+        Mounts:
+          type: array
+          description: mounts
+          items:
+            $ref: '#/components/schemas/PluginMount'
+    PreviousConsentSession:
+      type: object
+      properties:
+        consent_request:
+          $ref: '#/components/schemas/consentRequest'
+        grant_access_token_audience:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        grant_scope:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        handled_at:
+          $ref: '#/components/schemas/NullTime'
+        remember:
+          type: boolean
+          description: |-
+            Remember, if set to true, tells ORY Hydra to remember this consent authorization and reuse it if the same
+            client asks the same user for the same, or a subset of, scope.
+        remember_for:
+          type: integer
+          description: |-
+            RememberFor sets how long the consent authorization should be remembered for in seconds. If set to `0`, the
+            authorization will be remembered indefinitely.
+          format: int64
+        session:
+          $ref: '#/components/schemas/consentRequestSession'
+      description: |-
+        The response used to return used consent requests
+        same as HandledLoginRequest, just with consent_request exposed as json
+    StringSlicePipeDelimiter:
+      #title: StringSlicePipeDelimiter de/encodes the string slice to/from a SQL string.
+      type: array
+      items:
+        type: string
+    VolumeUsageData:
+      required:
+      - RefCount
+      - Size
+      type: object
+      properties:
+        RefCount:
+          type: integer
+          description: |-
+            The number of containers referencing this volume. This field
+            is set to `-1` if the reference-count is not available.
+          format: int64
+        Size:
+          type: integer
+          description: |-
+            Amount of disk space used by the volume (in bytes). This information
+            is only available for volumes created with the `"local"` volume
+            driver. For volumes created with other volume drivers, this field
+            is set to `-1` ("not available")
+          format: int64
+      description: |-
+        VolumeUsageData Usage details about the volume. This information is used by the
+        `GET /system/df` endpoint, and omitted in other endpoints.
+    acceptConsentRequest:
+      #title: The request payload used to accept a consent request.
+      type: object
+      properties:
+        grant_access_token_audience:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        grant_scope:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        handled_at:
+          $ref: '#/components/schemas/NullTime'
+        remember:
+          type: boolean
+          description: |-
+            Remember, if set to true, tells ORY Hydra to remember this consent authorization and reuse it if the same
+            client asks the same user for the same, or a subset of, scope.
+        remember_for:
+          type: integer
+          description: |-
+            RememberFor sets how long the consent authorization should be remembered for in seconds. If set to `0`, the
+            authorization will be remembered indefinitely.
+          format: int64
+        session:
+          $ref: '#/components/schemas/consentRequestSession'
+    acceptLoginRequest:
+      #title: HandledLoginRequest is the request payload used to accept a login request.
+      required:
+      - subject
+      type: object
+      properties:
+        acr:
+          type: string
+          description: |-
+            ACR sets the Authentication AuthorizationContext Class Reference value for this authentication session. You can use it
+            to express that, for example, a user authenticated using two factor authentication.
+        context:
+          $ref: '#/components/schemas/JSONRawMessage'
+        force_subject_identifier:
+          type: string
+          description: |-
+            ForceSubjectIdentifier forces the "pairwise" user ID of the end-user that authenticated. The "pairwise" user ID refers to the
+            (Pairwise Identifier Algorithm)[http://openid.net/specs/openid-connect-core-1_0.html#PairwiseAlg] of the OpenID
+            Connect specification. It allows you to set an obfuscated subject ("user") identifier that is unique to the client.
+
+            Please note that this changes the user ID on endpoint /userinfo and sub claim of the ID Token. It does not change the
+            sub claim in the OAuth 2.0 Introspection.
+
+            Per default, ORY Hydra handles this value with its own algorithm. In case you want to set this yourself
+            you can use this field. Please note that setting this field has no effect if `pairwise` is not configured in
+            ORY Hydra or the OAuth 2.0 Client does not expect a pairwise identifier (set via `subject_type` key in the client's
+            configuration).
+
+            Please also be aware that ORY Hydra is unable to properly compute this value during authentication. This implies
+            that you have to compute this value on every authentication process (probably depending on the client ID or some
+            other unique value).
+
+            If you fail to compute the proper value, then authentication processes which have id_token_hint set might fail.
+        remember:
+          type: boolean
+          description: |-
+            Remember, if set to true, tells ORY Hydra to remember this user by telling the user agent (browser) to store
+            a cookie with authentication data. If the same user performs another OAuth 2.0 Authorization Request, he/she
+            will not be asked to log in again.
+        remember_for:
+          type: integer
+          description: |-
+            RememberFor sets how long the authentication should be remembered for in seconds. If set to `0`, the
+            authorization will be remembered for the duration of the browser session (using a session cookie).
+          format: int64
+        subject:
+          type: string
+          description: Subject is the user ID of the end-user that authenticated.
+    completedRequest:
+      #title: The response payload sent when accepting or rejecting a login or consent
+      #  request.
+      required:
+      - redirect_to
+      type: object
+      properties:
+        redirect_to:
+          type: string
+          description: RedirectURL is the URL which you should redirect the user to
+            once the authentication process is completed.
+    consentRequest:
+      #title: Contains information on an ongoing consent request.
+      required:
+      - challenge
+      type: object
+      properties:
+        acr:
+          type: string
+          description: |-
+            ACR represents the Authentication AuthorizationContext Class Reference value for this authentication session. You can use it
+            to express that, for example, a user authenticated using two factor authentication.
+        challenge:
+          type: string
+          description: |-
+            ID is the identifier ("authorization challenge") of the consent authorization request. It is used to
+            identify the session.
+        client:
+          $ref: '#/components/schemas/oAuth2Client'
+        context:
+          $ref: '#/components/schemas/JSONRawMessage'
+        login_challenge:
+          type: string
+          description: |-
+            LoginChallenge is the login challenge this consent challenge belongs to. It can be used to associate
+            a login and consent request in the login & consent app.
+        login_session_id:
+          type: string
+          description: |-
+            LoginSessionID is the login session ID. If the user-agent reuses a login session (via cookie / remember flag)
+            this ID will remain the same. If the user-agent did not have an existing authentication session (e.g. remember is false)
+            this will be a new random value. This value is used as the "sid" parameter in the ID Token and in OIDC Front-/Back-
+            channel logout. It's value can generally be used to associate consecutive login requests by a certain user.
+        oidc_context:
+          $ref: '#/components/schemas/openIDConnectContext'
+        request_url:
+          type: string
+          description: |-
+            RequestURL is the original OAuth 2.0 Authorization URL requested by the OAuth 2.0 client. It is the URL which
+            initiates the OAuth 2.0 Authorization Code or OAuth 2.0 Implicit flow. This URL is typically not needed, but
+            might come in handy if you want to deal with additional request parameters.
+        requested_access_token_audience:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        requested_scope:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        skip:
+          type: boolean
+          description: |-
+            Skip, if true, implies that the client has requested the same scopes from the same user previously.
+            If true, you must not ask the user to grant the requested scopes. You must however either allow or deny the
+            consent request using the usual API call.
+        subject:
+          type: string
+          description: |-
+            Subject is the user ID of the end-user that authenticated. Now, that end user needs to grant or deny the scope
+            requested by the OAuth 2.0 client.
+    consentRequestSession:
+      #title: Used to pass session data to a consent request.
+      type: object
+      properties:
+        access_token:
+          type: object
+          properties: {}
+          description: |-
+            AccessToken sets session data for the access and refresh token, as well as any future tokens issued by the
+            refresh grant. Keep in mind that this data will be available to anyone performing OAuth 2.0 Challenge Introspection.
+            If only your services can perform OAuth 2.0 Challenge Introspection, this is usually fine. But if third parties
+            can access that endpoint as well, sensitive data from the session might be exposed to them. Use with care!
+        id_token:
+          type: object
+          properties: {}
+          description: |-
+            IDToken sets session data for the OpenID Connect ID token. Keep in mind that the session'id payloads are readable
+            by anyone that has access to the ID Challenge. Use with care!
+    flushInactiveOAuth2TokensRequest:
+      type: object
+      properties:
+        notAfter:
+          type: string
+          description: |-
+            NotAfter sets after which point tokens should not be flushed. This is useful when you want to keep a history
+            of recently issued tokens for auditing.
+          format: date-time
+    genericError:
+      #title: Error response
+      required:
+      - error
+      type: object
+      properties:
+        debug:
+          type: string
+          description: Debug contains debug information. This is usually not available
+            and has to be enabled.
+          example: The database adapter was unable to find the element
+        error:
+          type: string
+          description: Name is the error name.
+          example: The requested resource could not be found
+        error_description:
+          type: string
+          description: Description contains further information on the nature of the
+            error.
+          example: Object with ID 12345 does not exist
+        status_code:
+          type: integer
+          description: Code represents the error status code (404, 403, 401, ...).
+          format: int64
+          example: 404
+      description: Error responses are sent when an error (e.g. unauthorized, bad
+        request, ...) occurred.
+    healthNotReadyStatus:
+      type: object
+      properties:
+        errors:
+          type: object
+          additionalProperties:
+            type: string
+          description: Errors contains a list of errors that caused the not ready
+            status.
+    healthStatus:
+      type: object
+      properties:
+        status:
+          type: string
+          description: Status always contains "ok".
+    jsonWebKeySetGeneratorRequest:
+      required:
+      - alg
+      - kid
+      - use
+      type: object
+      properties:
+        alg:
+          type: string
+          description: The algorithm to be used for creating the key. Supports "RS256",
+            "ES512", "HS512", and "HS256"
+        kid:
+          type: string
+          description: The kid of the key to be created
+        use:
+          type: string
+          description: |-
+            The "use" (public key use) parameter identifies the intended use of
+            the public key. The "use" parameter is employed to indicate whether
+            a public key is used for encrypting data or verifying the signature
+            on data. Valid values are "enc" and "sig".
+    loginRequest:
+      #title: Contains information on an ongoing login request.
+      required:
+      - challenge
+      - client
+      - request_url
+      - requested_access_token_audience
+      - requested_scope
+      - skip
+      - subject
+      type: object
+      properties:
+        challenge:
+          type: string
+          description: |-
+            ID is the identifier ("login challenge") of the login request. It is used to
+            identify the session.
+        client:
+          $ref: '#/components/schemas/oAuth2Client'
+        oidc_context:
+          $ref: '#/components/schemas/openIDConnectContext'
+        request_url:
+          type: string
+          description: |-
+            RequestURL is the original OAuth 2.0 Authorization URL requested by the OAuth 2.0 client. It is the URL which
+            initiates the OAuth 2.0 Authorization Code or OAuth 2.0 Implicit flow. This URL is typically not needed, but
+            might come in handy if you want to deal with additional request parameters.
+        requested_access_token_audience:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        requested_scope:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        session_id:
+          type: string
+          description: |-
+            SessionID is the login session ID. If the user-agent reuses a login session (via cookie / remember flag)
+            this ID will remain the same. If the user-agent did not have an existing authentication session (e.g. remember is false)
+            this will be a new random value. This value is used as the "sid" parameter in the ID Token and in OIDC Front-/Back-
+            channel logout. It's value can generally be used to associate consecutive login requests by a certain user.
+        skip:
+          type: boolean
+          description: |-
+            Skip, if true, implies that the client has requested the same scopes from the same user previously.
+            If true, you can skip asking the user to grant the requested scopes, and simply forward the user to the redirect URL.
+
+            This feature allows you to update / set session information.
+        subject:
+          type: string
+          description: |-
+            Subject is the user ID of the end-user that authenticated. Now, that end user needs to grant or deny the scope
+            requested by the OAuth 2.0 client. If this value is set and `skip` is true, you MUST include this subject type
+            when accepting the login request, or the request will fail.
+    logoutRequest:
+      #title: Contains information about an ongoing logout request.
+      type: object
+      properties:
+        request_url:
+          type: string
+          description: RequestURL is the original Logout URL requested.
+        rp_initiated:
+          type: boolean
+          description: RPInitiated is set to true if the request was initiated by
+            a Relying Party (RP), also known as an OAuth 2.0 Client.
+        sid:
+          type: string
+          description: SessionID is the login session ID that was requested to log
+            out.
+        subject:
+          type: string
+          description: Subject is the user for whom the logout was request.
+    oAuth2Client:
+      #title: Client represents an OAuth 2.0 Client.
+      type: object
+      properties:
+        allowed_cors_origins:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        audience:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        backchannel_logout_session_required:
+          type: boolean
+          description: |-
+            Boolean value specifying whether the RP requires that a sid (session ID) Claim be included in the Logout
+            Token to identify the RP session with the OP when the backchannel_logout_uri is used.
+            If omitted, the default value is false.
+        backchannel_logout_uri:
+          type: string
+          description: RP URL that will cause the RP to log itself out when sent a
+            Logout Token by the OP.
+        client_id:
+          type: string
+          description: ID  is the id for this client.
+        client_name:
+          type: string
+          description: |-
+            Name is the human-readable string name of the client to be presented to the
+            end-user during authorization.
+        client_secret:
+          type: string
+          description: |-
+            Secret is the client's secret. The secret will be included in the create request as cleartext, and then
+            never again. The secret is stored using BCrypt so it is impossible to recover it. Tell your users
+            that they need to write the secret down as it will not be made available again.
+        client_secret_expires_at:
+          type: integer
+          description: |-
+            SecretExpiresAt is an integer holding the time at which the client
+            secret will expire or 0 if it will not expire. The time is
+            represented as the number of seconds from 1970-01-01T00:00:00Z as
+            measured in UTC until the date/time of expiration.
+
+            This feature is currently not supported and it's value will always
+            be set to 0.
+          format: int64
+        client_uri:
+          type: string
+          description: |-
+            ClientURI is an URL string of a web page providing information about the client.
+            If present, the server SHOULD display this URL to the end-user in
+            a clickable fashion.
+        contacts:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        created_at:
+          type: string
+          description: CreatedAt returns the timestamp of the client's creation.
+          format: date-time
+        frontchannel_logout_session_required:
+          type: boolean
+          description: |-
+            Boolean value specifying whether the RP requires that iss (issuer) and sid (session ID) query parameters be
+            included to identify the RP session with the OP when the frontchannel_logout_uri is used.
+            If omitted, the default value is false.
+        frontchannel_logout_uri:
+          type: string
+          description: |-
+            RP URL that will cause the RP to log itself out when rendered in an iframe by the OP. An iss (issuer) query
+            parameter and a sid (session ID) query parameter MAY be included by the OP to enable the RP to validate the
+            request and to determine which of the potentially multiple sessions is to be logged out; if either is
+            included, both MUST be.
+        grant_types:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        jwks:
+          $ref: '#/components/schemas/JoseJSONWebKeySet'
+        jwks_uri:
+          type: string
+          description: |-
+            URL for the Client's JSON Web Key Set [JWK] document. If the Client signs requests to the Server, it contains
+            the signing key(s) the Server uses to validate signatures from the Client. The JWK Set MAY also contain the
+            Client's encryption keys(s), which are used by the Server to encrypt responses to the Client. When both signing
+            and encryption keys are made available, a use (Key Use) parameter value is REQUIRED for all keys in the referenced
+            JWK Set to indicate each key's intended usage. Although some algorithms allow the same key to be used for both
+            signatures and encryption, doing so is NOT RECOMMENDED, as it is less secure. The JWK x5c parameter MAY be used
+            to provide X.509 representations of keys provided. When used, the bare key values MUST still be present and MUST
+            match those in the certificate.
+        logo_uri:
+          type: string
+          description: LogoURI is an URL string that references a logo for the client.
+        metadata:
+          $ref: '#/components/schemas/JSONRawMessage'
+        owner:
+          type: string
+          description: Owner is a string identifying the owner of the OAuth 2.0 Client.
+        policy_uri:
+          type: string
+          description: |-
+            PolicyURI is a URL string that points to a human-readable privacy policy document
+            that describes how the deployment organization collects, uses,
+            retains, and discloses personal data.
+        post_logout_redirect_uris:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        redirect_uris:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        request_object_signing_alg:
+          type: string
+          description: |-
+            JWS [JWS] alg algorithm [JWA] that MUST be used for signing Request Objects sent to the OP. All Request Objects
+            from this Client MUST be rejected, if not signed with this algorithm.
+        request_uris:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        response_types:
+          $ref: '#/components/schemas/StringSlicePipeDelimiter'
+        scope:
+          pattern: ([a-zA-Z0-9\.\*]+\s?)+
+          type: string
+          description: |-
+            Scope is a string containing a space-separated list of scope values (as
+            described in Section 3.3 of OAuth 2.0 [RFC6749]) that the client
+            can use when requesting access tokens.
+        sector_identifier_uri:
+          type: string
+          description: |-
+            URL using the https scheme to be used in calculating Pseudonymous Identifiers by the OP. The URL references a
+            file with a single JSON array of redirect_uri values.
+        subject_type:
+          type: string
+          description: |-
+            SubjectType requested for responses to this Client. The subject_types_supported Discovery parameter contains a
+            list of the supported subject_type values for this server. Valid types include `pairwise` and `public`.
+        token_endpoint_auth_method:
+          type: string
+          description: |-
+            Requested Client Authentication method for the Token Endpoint. The options are client_secret_post,
+            client_secret_basic, private_key_jwt, and none.
+        token_endpoint_auth_signing_alg:
+          type: string
+          description: Requested Client Authentication signing algorithm for the Token
+            Endpoint.
+        tos_uri:
+          type: string
+          description: |-
+            TermsOfServiceURI is a URL string that points to a human-readable terms of service
+            document for the client that describes a contractual relationship
+            between the end-user and the client that the end-user accepts when
+            authorizing the client.
+        updated_at:
+          type: string
+          description: UpdatedAt returns the timestamp of the last update.
+          format: date-time
+        userinfo_signed_response_alg:
+          type: string
+          description: |-
+            JWS alg algorithm [JWA] REQUIRED for signing UserInfo Responses. If this is specified, the response will be JWT
+            [JWT] serialized, and signed using JWS. The default, if omitted, is for the UserInfo Response to return the Claims
+            as a UTF-8 encoded JSON object using the application/json content-type.
+    oAuth2TokenIntrospection:
+      #title: 'Introspection contains an access token''s session data as specified
+      #  by IETF RFC 7662, see:'
+      required:
+      - active
+      type: object
+      properties:
+        active:
+          type: boolean
+          description: |-
+            Active is a boolean indicator of whether or not the presented token
+            is currently active.  The specifics of a token's "active" state
+            will vary depending on the implementation of the authorization
+            server and the information it keeps about its tokens, but a "true"
+            value return for the "active" property will generally indicate
+            that a given token has been issued by this authorization server,
+            has not been revoked by the resource owner, and is within its
+            given time window of validity (e.g., after its issuance time and
+            before its expiration time).
+        aud:
+          type: array
+          description: Audience contains a list of the token's intended audiences.
+          items:
+            type: string
+        client_id:
+          type: string
+          description: |-
+            ID is aclient identifier for the OAuth 2.0 client that
+            requested this token.
+        exp:
+          type: integer
+          description: |-
+            Expires at is an integer timestamp, measured in the number of seconds
+            since January 1 1970 UTC, indicating when this token will expire.
+          format: int64
+        ext:
+          type: object
+          properties: {}
+          description: Extra is arbitrary data set by the session.
+        iat:
+          type: integer
+          description: |-
+            Issued at is an integer timestamp, measured in the number of seconds
+            since January 1 1970 UTC, indicating when this token was
+            originally issued.
+          format: int64
+        iss:
+          type: string
+          description: IssuerURL is a string representing the issuer of this token
+        nbf:
+          type: integer
+          description: |-
+            NotBefore is an integer timestamp, measured in the number of seconds
+            since January 1 1970 UTC, indicating when this token is not to be
+            used before.
+          format: int64
+        obfuscated_subject:
+          type: string
+          description: |-
+            ObfuscatedSubject is set when the subject identifier algorithm was set to "pairwise" during authorization.
+            It is the `sub` value of the ID Token that was issued.
+        scope:
+          type: string
+          description: |-
+            Scope is a JSON string containing a space-separated list of
+            scopes associated with this token.
+        sub:
+          type: string
+          description: |-
+            Subject of the token, as defined in JWT [RFC7519].
+            Usually a machine-readable identifier of the resource owner who
+            authorized this token.
+        token_type:
+          type: string
+          description: TokenType is the introspected token's type, typically `Bearer`.
+        token_use:
+          type: string
+          description: TokenUse is the introspected token's use, for example `access_token`
+            or `refresh_token`.
+        username:
+          type: string
+          description: |-
+            Username is a human-readable identifier for the resource owner who
+            authorized this token.
+      description: https://tools.ietf.org/html/rfc7662
+    oauth2TokenResponse:
+      type: object
+      properties:
+        access_token:
+          type: string
+        expires_in:
+          type: integer
+          format: int64
+        id_token:
+          type: string
+        refresh_token:
+          type: string
+        scope:
+          type: string
+        token_type:
+          type: string
+      description: The Access Token Response
+    openIDConnectContext:
+      #title: Contains optional information about the OpenID Connect request.
+      type: object
+      properties:
+        acr_values:
+          type: array
+          description: |-
+            ACRValues is the Authentication AuthorizationContext Class Reference requested in the OAuth 2.0 Authorization request.
+            It is a parameter defined by OpenID Connect and expresses which level of authentication (e.g. 2FA) is required.
+
+            OpenID Connect defines it as follows:
+            > Requested Authentication AuthorizationContext Class Reference values. Space-separated string that specifies the acr values
+            that the Authorization Server is being requested to use for processing this Authentication Request, with the
+            values appearing in order of preference. The Authentication AuthorizationContext Class satisfied by the authentication
+            performed is returned as the acr Claim Value, as specified in Section 2. The acr Claim is requested as a
+            Voluntary Claim by this parameter.
+          items:
+            type: string
+        display:
+          type: string
+          description: |-
+            Display is a string value that specifies how the Authorization Server displays the authentication and consent user interface pages to the End-User.
+            The defined values are:
+            page: The Authorization Server SHOULD display the authentication and consent UI consistent with a full User Agent page view. If the display parameter is not specified, this is the default display mode.
+            popup: The Authorization Server SHOULD display the authentication and consent UI consistent with a popup User Agent window. The popup User Agent window should be of an appropriate size for a login-focused dialog and should not obscure the entire window that it is popping up over.
+            touch: The Authorization Server SHOULD display the authentication and consent UI consistent with a device that leverages a touch interface.
+            wap: The Authorization Server SHOULD display the authentication and consent UI consistent with a "feature phone" type display.
+
+            The Authorization Server MAY also attempt to detect the capabilities of the User Agent and present an appropriate display.
+        id_token_hint_claims:
+          type: object
+          properties: {}
+          description: |-
+            IDTokenHintClaims are the claims of the ID Token previously issued by the Authorization Server being passed as a hint about the
+            End-User's current or past authenticated session with the Client.
+        login_hint:
+          type: string
+          description: |-
+            LoginHint hints about the login identifier the End-User might use to log in (if necessary).
+            This hint can be used by an RP if it first asks the End-User for their e-mail address (or other identifier)
+            and then wants to pass that value as a hint to the discovered authorization service. This value MAY also be a
+            phone number in the format specified for the phone_number Claim. The use of this parameter is optional.
+        ui_locales:
+          type: array
+          description: |-
+            UILocales is the End-User'id preferred languages and scripts for the user interface, represented as a
+            space-separated list of BCP47 [RFC5646] language tag values, ordered by preference. For instance, the value
+            "fr-CA fr en" represents a preference for French as spoken in Canada, then French (without a region designation),
+            followed by English (without a region designation). An error SHOULD NOT result if some or all of the requested
+            locales are not supported by the OpenID Provider.
+          items:
+            type: string
+    rejectRequest:
+      #title: The request payload used to accept a login or consent request.
+      type: object
+      properties:
+        error:
+          type: string
+          description: |-
+            The error should follow the OAuth2 error format (e.g. `invalid_request`, `login_required`).
+
+            Defaults to `request_denied`.
+        error_debug:
+          type: string
+          description: |-
+            Debug contains information to help resolve the problem as a developer. Usually not exposed
+            to the public but only in the server logs.
+        error_description:
+          type: string
+          description: Description of the error in a human readable format.
+        error_hint:
+          type: string
+          description: Hint to help resolve the error.
+        status_code:
+          type: integer
+          description: |-
+            Represents the HTTP status code of the error (e.g. 401 or 403)
+
+            Defaults to 400
+          format: int64
+    userinfoResponse:
+      type: object
+      properties:
+        birthdate:
+          type: string
+          description: End-User's birthday, represented as an ISO 8601:2004 [ISO8601‑2004]
+            YYYY-MM-DD format. The year MAY be 0000, indicating that it is omitted.
+            To represent only the year, YYYY format is allowed. Note that depending
+            on the underlying platform's date related function, providing just year
+            can result in varying month and day, so the implementers need to take
+            this factor into account to correctly process the dates.
+        email:
+          type: string
+          description: End-User's preferred e-mail address. Its value MUST conform
+            to the RFC 5322 [RFC5322] addr-spec syntax. The RP MUST NOT rely upon
+            this value being unique, as discussed in Section 5.7.
+        email_verified:
+          type: boolean
+          description: True if the End-User's e-mail address has been verified; otherwise
+            false. When this Claim Value is true, this means that the OP took affirmative
+            steps to ensure that this e-mail address was controlled by the End-User
+            at the time the verification was performed. The means by which an e-mail
+            address is verified is context-specific, and dependent upon the trust
+            framework or contractual agreements within which the parties are operating.
+        family_name:
+          type: string
+          description: Surname(s) or last name(s) of the End-User. Note that in some
+            cultures, people can have multiple family names or no family name; all
+            can be present, with the names being separated by space characters.
+        gender:
+          type: string
+          description: End-User's gender. Values defined by this specification are
+            female and male. Other values MAY be used when neither of the defined
+            values are applicable.
+        given_name:
+          type: string
+          description: Given name(s) or first name(s) of the End-User. Note that in
+            some cultures, people can have multiple given names; all can be present,
+            with the names being separated by space characters.
+        locale:
+          type: string
+          description: End-User's locale, represented as a BCP47 [RFC5646] language
+            tag. This is typically an ISO 639-1 Alpha-2 [ISO639‑1] language code in
+            lowercase and an ISO 3166-1 Alpha-2 [ISO3166‑1] country code in uppercase,
+            separated by a dash. For example, en-US or fr-CA. As a compatibility note,
+            some implementations have used an underscore as the separator rather than
+            a dash, for example, en_US; Relying Parties MAY choose to accept this
+            locale syntax as well.
+        middle_name:
+          type: string
+          description: Middle name(s) of the End-User. Note that in some cultures,
+            people can have multiple middle names; all can be present, with the names
+            being separated by space characters. Also note that in some cultures,
+            middle names are not used.
+        name:
+          type: string
+          description: End-User's full name in displayable form including all name
+            parts, possibly including titles and suffixes, ordered according to the
+            End-User's locale and preferences.
+        nickname:
+          type: string
+          description: Casual name of the End-User that may or may not be the same
+            as the given_name. For instance, a nickname value of Mike might be returned
+            alongside a given_name value of Michael.
+        phone_number:
+          type: string
+          description: End-User's preferred telephone number. E.164 [E.164] is RECOMMENDED
+            as the format of this Claim, for example, +1 (425) 555-1212 or +56 (2)
+            687 2400. If the phone number contains an extension, it is RECOMMENDED
+            that the extension be represented using the RFC 3966 [RFC3966] extension
+            syntax, for example, +1 (604) 555-1234;ext=5678.
+        phone_number_verified:
+          type: boolean
+          description: True if the End-User's phone number has been verified; otherwise
+            false. When this Claim Value is true, this means that the OP took affirmative
+            steps to ensure that this phone number was controlled by the End-User
+            at the time the verification was performed. The means by which a phone
+            number is verified is context-specific, and dependent upon the trust framework
+            or contractual agreements within which the parties are operating. When
+            true, the phone_number Claim MUST be in E.164 format and any extensions
+            MUST be represented in RFC 3966 format.
+        picture:
+          type: string
+          description: URL of the End-User's profile picture. This URL MUST refer
+            to an image file (for example, a PNG, JPEG, or GIF image file), rather
+            than to a Web page containing an image. Note that this URL SHOULD specifically
+            reference a profile photo of the End-User suitable for displaying when
+            describing the End-User, rather than an arbitrary photo taken by the End-User.
+        preferred_username:
+          type: string
+          description: Non-unique shorthand name by which the End-User wishes to be
+            referred to at the RP, such as janedoe or j.doe. This value MAY be any
+            valid JSON string including special characters such as @, /, or whitespace.
+        profile:
+          type: string
+          description: URL of the End-User's profile page. The contents of this Web
+            page SHOULD be about the End-User.
+        sub:
+          type: string
+          description: Subject - Identifier for the End-User at the IssuerURL.
+        updated_at:
+          type: integer
+          description: Time the End-User's information was last updated. Its value
+            is a JSON number representing the number of seconds from 1970-01-01T0:0:0Z
+            as measured in UTC until the date/time.
+          format: int64
+        website:
+          type: string
+          description: URL of the End-User's Web page or blog. This Web page SHOULD
+            contain information published by the End-User or an organization that
+            the End-User is affiliated with.
+        zoneinfo:
+          type: string
+          description: String from zoneinfo [zoneinfo] time zone database representing
+            the End-User's time zone. For example, Europe/Paris or America/Los_Angeles.
+      description: The userinfo response
+    version:
+      type: object
+      properties:
+        version:
+          type: string
+          description: Version is the service's version.
+    wellKnown:
+      #title: WellKnown represents important OpenID Connect discovery metadata
+      required:
+      - authorization_endpoint
+      - id_token_signing_alg_values_supported
+      - issuer
+      - jwks_uri
+      - response_types_supported
+      - subject_types_supported
+      - token_endpoint
+      type: object
+      properties:
+        authorization_endpoint:
+          type: string
+          description: URL of the OP's OAuth 2.0 Authorization Endpoint.
+          example: https://playground.ory.sh/ory-hydra/public/oauth2/auth
+        backchannel_logout_session_supported:
+          type: boolean
+          description: |-
+            Boolean value specifying whether the OP can pass a sid (session ID) Claim in the Logout Token to identify the RP
+            session with the OP. If supported, the sid Claim is also included in ID Tokens issued by the OP
+        backchannel_logout_supported:
+          type: boolean
+          description: Boolean value specifying whether the OP supports back-channel
+            logout, with true indicating support.
+        claims_parameter_supported:
+          type: boolean
+          description: Boolean value specifying whether the OP supports use of the
+            claims parameter, with true indicating support.
+        claims_supported:
+          type: array
+          description: |-
+            JSON array containing a list of the Claim Names of the Claims that the OpenID Provider MAY be able to supply
+            values for. Note that for privacy or other reasons, this might not be an exhaustive list.
+          items:
+            type: string
+        end_session_endpoint:
+          type: string
+          description: URL at the OP to which an RP can perform a redirect to request
+            that the End-User be logged out at the OP.
+        frontchannel_logout_session_supported:
+          type: boolean
+          description: |-
+            Boolean value specifying whether the OP can pass iss (issuer) and sid (session ID) query parameters to identify
+            the RP session with the OP when the frontchannel_logout_uri is used. If supported, the sid Claim is also
+            included in ID Tokens issued by the OP.
+        frontchannel_logout_supported:
+          type: boolean
+          description: Boolean value specifying whether the OP supports HTTP-based
+            logout, with true indicating support.
+        grant_types_supported:
+          type: array
+          description: JSON array containing a list of the OAuth 2.0 Grant Type values
+            that this OP supports.
+          items:
+            type: string
+        id_token_signing_alg_values_supported:
+          type: array
+          description: |-
+            JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for the ID Token
+            to encode the Claims in a JWT.
+          items:
+            type: string
+        issuer:
+          type: string
+          description: |-
+            URL using the https scheme with no query or fragment component that the OP asserts as its IssuerURL Identifier.
+            If IssuerURL discovery is supported , this value MUST be identical to the issuer value returned
+            by WebFinger. This also MUST be identical to the iss Claim value in ID Tokens issued from this IssuerURL.
+          example: https://playground.ory.sh/ory-hydra/public/
+        jwks_uri:
+          type: string
+          description: |-
+            URL of the OP's JSON Web Key Set [JWK] document. This contains the signing key(s) the RP uses to validate
+            signatures from the OP. The JWK Set MAY also contain the Server's encryption key(s), which are used by RPs
+            to encrypt requests to the Server. When both signing and encryption keys are made available, a use (Key Use)
+            parameter value is REQUIRED for all keys in the referenced JWK Set to indicate each key's intended usage.
+            Although some algorithms allow the same key to be used for both signatures and encryption, doing so is
+            NOT RECOMMENDED, as it is less secure. The JWK x5c parameter MAY be used to provide X.509 representations of
+            keys provided. When used, the bare key values MUST still be present and MUST match those in the certificate.
+          example: https://playground.ory.sh/ory-hydra/public/.well-known/jwks.json
+        registration_endpoint:
+          type: string
+          description: URL of the OP's Dynamic Client Registration Endpoint.
+          example: https://playground.ory.sh/ory-hydra/admin/client
+        request_object_signing_alg_values_supported:
+          type: array
+          description: |-
+            JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for Request Objects,
+            which are described in Section 6.1 of OpenID Connect Core 1.0 [OpenID.Core]. These algorithms are used both when
+            the Request Object is passed by value (using the request parameter) and when it is passed by reference
+            (using the request_uri parameter).
+          items:
+            type: string
+        request_parameter_supported:
+          type: boolean
+          description: Boolean value specifying whether the OP supports use of the
+            request parameter, with true indicating support.
+        request_uri_parameter_supported:
+          type: boolean
+          description: Boolean value specifying whether the OP supports use of the
+            request_uri parameter, with true indicating support.
+        require_request_uri_registration:
+          type: boolean
+          description: |-
+            Boolean value specifying whether the OP requires any request_uri values used to be pre-registered
+            using the request_uris registration parameter.
+        response_modes_supported:
+          type: array
+          description: JSON array containing a list of the OAuth 2.0 response_mode
+            values that this OP supports.
+          items:
+            type: string
+        response_types_supported:
+          type: array
+          description: |-
+            JSON array containing a list of the OAuth 2.0 response_type values that this OP supports. Dynamic OpenID
+            Providers MUST support the code, id_token, and the token id_token Response Type values.
+          items:
+            type: string
+        revocation_endpoint:
+          type: string
+          description: URL of the authorization server's OAuth 2.0 revocation endpoint.
+        scopes_supported:
+          type: array
+          description: |-
+            SON array containing a list of the OAuth 2.0 [RFC6749] scope values that this server supports. The server MUST
+            support the openid scope value. Servers MAY choose not to advertise some supported scope values even when this parameter is used
+          items:
+            type: string
+        subject_types_supported:
+          type: array
+          description: |-
+            JSON array containing a list of the Subject Identifier types that this OP supports. Valid types include
+            pairwise and public.
+          items:
+            type: string
+        token_endpoint:
+          type: string
+          description: URL of the OP's OAuth 2.0 Token Endpoint
+          example: https://playground.ory.sh/ory-hydra/public/oauth2/token
+        token_endpoint_auth_methods_supported:
+          type: array
+          description: |-
+            JSON array containing a list of Client Authentication methods supported by this Token Endpoint. The options are
+            client_secret_post, client_secret_basic, client_secret_jwt, and private_key_jwt, as described in Section 9 of OpenID Connect Core 1.0
+          items:
+            type: string
+        userinfo_endpoint:
+          type: string
+          description: URL of the OP's UserInfo Endpoint.
+        userinfo_signing_alg_values_supported:
+          type: array
+          description: JSON array containing a list of the JWS [JWS] signing algorithms
+            (alg values) [JWA] supported by the UserInfo Endpoint to encode the Claims
+            in a JWT [JWT].
+          items:
+            type: string
+      description: |-
+        It includes links to several endpoints (e.g. /oauth2/token) and exposes information on supported signature algorithms
+        among others.
+  securitySchemes:
+    basic:
+      type: http
+      scheme: basic
+    oauth2:
+      type: oauth2
+      flows:
+        authorizationCode:
+          authorizationUrl: https://hydra.demo.ory.sh/oauth2/auth
+          tokenUrl: https://hydra.demo.ory.sh/oauth2/token
+          scopes:
+            offline: A scope required when requesting refresh tokens (alias for `offline_access`)
+            offline_access: A scope required when requesting refresh tokens
+            openid: Request an OpenID Connect ID Token
+x-forwarded-proto: string
+x-request-id: string
+
+