productivity
Logto Lua API for KosmoKrator Agents
Agent-facing Lua documentation and function reference for the Logto KosmoKrator integration.Lua Namespace
Agents call this integration through app.integrations.logto.*.
Use lua_read_doc("integrations.logto") inside KosmoKrator to discover the same reference at runtime.
Call Lua from the Headless CLI
Use kosmo integrations:lua when a shell script, CI job, cron job, or another coding CLI should run a deterministic
Logto workflow without starting an interactive agent session.
kosmo integrations:lua --eval 'dump(app.integrations.logto.add_mfa_verification({}))' --json kosmo integrations:lua --eval 'print(docs.read("logto"))' --json
kosmo integrations:lua --eval 'print(docs.read("logto.add_mfa_verification"))' --json Workflow file
Put repeatable logic in a Lua file, then execute it with JSON output for the calling process.
local logto = app.integrations.logto
local result = logto.add_mfa_verification({})
dump(result) kosmo integrations:lua workflow.lua --json
kosmo integrations:lua workflow.lua --force --json integrations:lua exposes app.integrations.logto, app.mcp.*, docs.*, json.*, and regex.*. Use app.integrations.logto.default.* or app.integrations.logto.work.* when you configured named credential accounts.
MCP-only Lua
If the script only needs configured MCP servers and does not need Logto, use the narrower mcp:lua command.
# Use mcp:lua for MCP-only scripts; use integrations:lua for this integration namespace.
kosmo mcp:lua --eval 'dump(mcp.servers())' --json Agent-Facing Lua Docs
This is the rendered version of the full Lua documentation exposed to agents when they inspect the integration namespace.
Logto Lua Docs
Namespace: logto
Logto exposes the official Management API operation set. Tools are generated one-to-one from the public Logto OpenAPI source and preserve upstream path, query, header, and request-body shapes.
Configuration
Provide either a pre-issued access_token or a machine-to-machine client_id and client_secret. Set base_url to the tenant root, for example https://tenant.logto.app. When using client credentials, the service exchanges a token at /oidc/token with resource = <base_url>/api and scope = all unless overridden.
Usage Notes
- Path parameters use snake_case tool arguments, such as
user_id,application_id, ororganization_id. - Query parameters preserve Logto names on the wire but use snake_case arguments where needed.
- For create, patch, replace, and action endpoints, pass
bodyas an object matching the Logto API request schema. - Empty responses return
{ success = true, status = <code> }. - Use fake tenants, users, apps, and domains in tests and examples.
Examples
local users = logto.logto_list_users({
page = 1,
page_size = 20,
})
local created = logto.logto_create_user({
body = {
primaryEmail = "[email protected]",
name = "Agent Test",
},
})Raw agent markdown
# Logto Lua Docs
Namespace: `logto`
Logto exposes the official Management API operation set. Tools are generated one-to-one from the public Logto OpenAPI source and preserve upstream path, query, header, and request-body shapes.
## Configuration
Provide either a pre-issued `access_token` or a machine-to-machine `client_id` and `client_secret`. Set `base_url` to the tenant root, for example `https://tenant.logto.app`. When using client credentials, the service exchanges a token at `/oidc/token` with `resource = <base_url>/api` and `scope = all` unless overridden.
## Usage Notes
- Path parameters use snake_case tool arguments, such as `user_id`, `application_id`, or `organization_id`.
- Query parameters preserve Logto names on the wire but use snake_case arguments where needed.
- For create, patch, replace, and action endpoints, pass `body` as an object matching the Logto API request schema.
- Empty responses return `{ success = true, status = <code> }`.
- Use fake tenants, users, apps, and domains in tests and examples.
## Examples
```lua
local users = logto.logto_list_users({
page = 1,
page_size = 20,
})
```
```lua
local created = logto.logto_create_user({
body = {
primaryEmail = "[email protected]",
name = "Agent Test",
},
})
``` local result = app.integrations.logto.add_mfa_verification({})
print(result) Functions
add_mfa_verification Write
Add a MFA verification to the user, a logto-verification-id in header is required for checking sensitive permissions.
- Lua path
app.integrations.logto.add_mfa_verification- Full name
logto.logto_add_mfa_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_one_time_token Write
Create a new one-time token associated with an email address. The token can be used for verification purposes and has an expiration time.
- Lua path
app.integrations.logto.create_one_time_token- Full name
logto.logto_add_one_time_tokens
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
add_organization_application Write
Add an application to the organization.
- Lua path
app.integrations.logto.add_organization_application- Full name
logto.logto_add_organization_applications
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
add_user_members_organization Write
Add users as members to the specified organization with the given user IDs.
- Lua path
app.integrations.logto.add_user_members_organization- Full name
logto.logto_add_organization_users
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
add_user_identity Write
Add an identity (social identity) to the user, a logto-verification-id in header is required for checking sensitive permissions, and a verification record for the social identity is required.
- Lua path
app.integrations.logto.add_user_identity- Full name
logto.logto_add_user_identities
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
add_user_profile Write
Adds user profile data to the current experience interaction. - For `Register`: The profile data provided before the identification request will be used to create a new user account. - For `SignIn` and `Register`: The profile data provided after the user is identified will be used to update the user's profile when the interaction is submitted. - `ForgotPassword`: Not supported.
- Lua path
app.integrations.logto.add_user_profile- Full name
logto.logto_add_user_profile
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
saml_acs_endpoint_social Write
The Assertion Consumer Service (ACS) endpoint for Simple Assertion Markup Language (SAML) social connectors. SAML social connectors are deprecated. Use the SSO SAML connector instead.
- Lua path
app.integrations.logto.saml_acs_endpoint_social- Full name
logto.logto_assert_saml
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
saml_acs_endpoint_sso Write
The Assertion Consumer Service (ACS) endpoint for Simple Assertion Markup Language (SAML) single sign-on (SSO) connectors. This endpoint is used to complete the SAML SSO authentication flow. It receives the SAML assertion response from the identity provider (IdP) and redirects the user to complete the authentication flow.
- Lua path
app.integrations.logto.saml_acs_endpoint_sso- Full name
logto.logto_assert_single_sign_on_saml
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
assign_api_resource_roles_application Write
Assign API resource roles to the specified application. The API resource roles will be added to the existing API resource roles.
- Lua path
app.integrations.logto.assign_api_resource_roles_application- Full name
logto.logto_assign_application_roles
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
add_organization_application_role Write
Add a role to the application in the organization.
- Lua path
app.integrations.logto.add_organization_application_role- Full name
logto.logto_assign_organization_roles_to_application
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
assign_roles_applications_organization Write
Assign roles to applications in the specified organization.
- Lua path
app.integrations.logto.assign_roles_applications_organization- Full name
logto.logto_assign_organization_roles_to_applications
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
assign_roles_user_organization Write
Assign roles to a user in the specified organization with the provided data.
- Lua path
app.integrations.logto.assign_roles_user_organization- Full name
logto.logto_assign_organization_roles_to_user
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
assign_roles_organization_user_members Write
Assign roles to user members of the specified organization.
- Lua path
app.integrations.logto.assign_roles_organization_user_members- Full name
logto.logto_assign_organization_roles_to_users
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
assign_roles_user Write
Assign API resource roles to the user. The roles will be added to the existing roles.
- Lua path
app.integrations.logto.assign_roles_user- Full name
logto.logto_assign_user_roles
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
bind_mfa_verification_by_verificationid Write
Bind new MFA verification to the user profile using the verificationId.
- Lua path
app.integrations.logto.bind_mfa_verification_by_verificationid- Full name
logto.logto_bind_mfa_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
bind_passkey_sign Write
Bind a WebAuthn credential as a passkey for sign-in purposes. Unlike `POST /api/experience/profile/mfa` with `type: WebAuthn`, this endpoint is exclusively for adding a passkey as a sign-in method and does NOT mark the user's optional MFA as enabled.
- Lua path
app.integrations.logto.bind_passkey_sign- Full name
logto.logto_bind_passkey
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
check_if_password_meets_password_policy Write
Check if a password meets the password policy in the sign-in experience settings.
- Lua path
app.integrations.logto.check_if_password_meets_password_policy- Full name
logto.logto_check_password_with_default_sign_in_experience
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
cleanup_stale_domains Write
Clean up custom domains that have been inactive (not verified) for a specified number of days. This uses Cloudflare as the source of truth to determine domain activity.
- Lua path
app.integrations.logto.cleanup_stale_domains- Full name
logto.logto_cleanup_domains
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_and_send_mfa_verification_code Write
Create a new MFA verification code and send it to the user's bound identifier (email or phone). This endpoint automatically uses the user's bound email address or phone number from their profile for MFA verification. The user must be identified before calling this endpoint.
- Lua path
app.integrations.logto.create_and_send_mfa_verification_code- Full name
logto.logto_create_and_send_mfa_verification_code
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_and_send_verification_code Write
Create a new `CodeVerification` record and sends the code to the specified identifier. The code verification can be used to verify the given identifier.
- Lua path
app.integrations.logto.create_and_send_verification_code- Full name
logto.logto_create_and_send_verification_code
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_application Write
Create a new application with the given data.
- Lua path
app.integrations.logto.create_application- Full name
logto.logto_create_application
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
add_custom_domain_application Write
Add a custom domain to the application. You'll need to setup DNS record later.
- Lua path
app.integrations.logto.add_custom_domain_application- Full name
logto.logto_create_application_protected_app_metadata_custom_domain
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
add_application_secret Write
Add a new secret for the application.
- Lua path
app.integrations.logto.add_application_secret- Full name
logto.logto_create_application_secret
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
grant_list_organization_access_user_application Write
Grant a list of organization access of a user for a application by application id and user id. The user must be a member of all the organizations. Only third-party application needs to be granted access to organizations, all the other applications can request for all the organizations' access by default.
- Lua path
app.integrations.logto.grant_list_organization_access_user_application- Full name
logto.logto_create_application_user_consent_organization
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
assign_user_consent_scopes_application Write
Assign the user consent scopes to an application by application id
- Lua path
app.integrations.logto.assign_user_consent_scopes_application- Full name
logto.logto_create_application_user_consent_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_connector Write
Create a connector with the given data.
- Lua path
app.integrations.logto.create_connector- Full name
logto.logto_create_connector
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_connector_authorization_uri Write
Get authorization URI for specified connector by providing redirect URI and randomly generated state.
- Lua path
app.integrations.logto.get_connector_authorization_uri- Full name
logto.logto_create_connector_authorization_uri
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
test_passwordless_connector Write
Test a passwordless (email or SMS) connector by sending a test message to the given phone number or email address.
- Lua path
app.integrations.logto.test_passwordless_connector- Full name
logto.logto_create_connector_test
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_custom_profile_field Write
Create a custom profile field.
- Lua path
app.integrations.logto.create_custom_profile_field- Full name
logto.logto_create_custom_profile_field
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
batch_create_custom_profile_fields Write
Create multiple custom profile fields in a single request (max 20 items).
- Lua path
app.integrations.logto.batch_create_custom_profile_fields- Full name
logto.logto_create_custom_profile_fields_batch
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_domain Write
Create a new domain with the given data. The maximum domain number is 1, once created, can not be modified, you'll have to delete and recreate one.
- Lua path
app.integrations.logto.create_domain- Full name
logto.logto_create_domain
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_enterprise_sso_verification Write
Create a new EnterpriseSSO verification record and return the provider's authorization URI for the given connector.
- Lua path
app.integrations.logto.create_enterprise_sso_verification- Full name
logto.logto_create_enterprise_sso_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_hook Write
Create a new hook with the given data.
- Lua path
app.integrations.logto.create_hook- Full name
logto.logto_create_hook
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
test_hook Write
Test the specified hook with the given events and config.
- Lua path
app.integrations.logto.test_hook- Full name
logto.logto_create_hook_test
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_new_password_identity_verification Write
Create a NewPasswordIdentity verification record for the new user registration use. The verification record includes a unique user identifier and a password that can be used to create a new user account.
- Lua path
app.integrations.logto.create_new_password_identity_verification- Full name
logto.logto_create_new_password_identity_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_or_replace_authenticator_app Write
Create or replace the user's TOTP MFA verification with a new authenticator app binding. If the user already has a TOTP verification, it will be replaced; otherwise, a new one will be created. Requires a logto-verification-id header for sensitive permission checks, a valid TOTP secret, and a valid TOTP code generated from the secret.
- Lua path
app.integrations.logto.create_or_replace_authenticator_app- Full name
logto.logto_create_or_replace_totp_mfa_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_organization Write
Create a new organization with the given data.
- Lua path
app.integrations.logto.create_organization- Full name
logto.logto_create_organization
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_organization_invitation Write
Create an organization invitation and optionally send it via email. The tenant should have an email connector configured if you want to send the invitation via email at this point.
- Lua path
app.integrations.logto.create_organization_invitation- Full name
logto.logto_create_organization_invitation
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
resend_invitation_message Write
Resend the invitation message to the invitee.
- Lua path
app.integrations.logto.resend_invitation_message- Full name
logto.logto_create_organization_invitation_message
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
add_organization_jit_email_domain Write
Add a new email domain for just-in-time provisioning of users in the organization.
- Lua path
app.integrations.logto.add_organization_jit_email_domain- Full name
logto.logto_create_organization_jit_email_domain
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
add_organization_jit_default_roles Write
Add new organization roles that will be assigned to users during just-in-time provisioning.
- Lua path
app.integrations.logto.add_organization_jit_default_roles- Full name
logto.logto_create_organization_jit_role
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
add_organization_jit_sso_connectors Write
Add new enterprise SSO connectors for just-in-time provisioning of users in the organization.
- Lua path
app.integrations.logto.add_organization_jit_sso_connectors- Full name
logto.logto_create_organization_jit_sso_connector
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_organization_role Write
Create a new organization role with the given data.
- Lua path
app.integrations.logto.create_organization_role- Full name
logto.logto_create_organization_role
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
assign_resource_scopes_organization_role Write
Assign resource scopes to the specified organization role
- Lua path
app.integrations.logto.assign_resource_scopes_organization_role- Full name
logto.logto_create_organization_role_resource_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
assign_organization_scopes_organization_role Write
Assign organization scopes to the specified organization role
- Lua path
app.integrations.logto.assign_organization_scopes_organization_role- Full name
logto.logto_create_organization_role_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_organization_scope Write
Create a new organization scope with the given data.
- Lua path
app.integrations.logto.create_organization_scope- Full name
logto.logto_create_organization_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_password_verification_record Write
Create and verify a new Password verification record. The verification record can only be created if the provided user credentials are correct.
- Lua path
app.integrations.logto.create_password_verification_record- Full name
logto.logto_create_password_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_api_resource Write
Create an API resource in the current tenant.
- Lua path
app.integrations.logto.create_api_resource- Full name
logto.logto_create_resource
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_api_resource_scope Write
Create a new scope (permission) for an API resource.
- Lua path
app.integrations.logto.create_api_resource_scope- Full name
logto.logto_create_resource_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_role Write
Create a new role with the given data.
- Lua path
app.integrations.logto.create_role- Full name
logto.logto_create_role
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
assign_role_applications Write
Assign a role to a list of applications. The role must have the type `Application`.
- Lua path
app.integrations.logto.assign_role_applications- Full name
logto.logto_create_role_application
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
link_scopes_role Write
Link a list of API resource scopes (permissions) to a role. The original linked scopes will be kept.
- Lua path
app.integrations.logto.link_scopes_role- Full name
logto.logto_create_role_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
assign_role_users Write
Assign a role to a list of users. The role must have the type `User`.
- Lua path
app.integrations.logto.assign_role_users- Full name
logto.logto_create_role_user
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_saml_application Write
Create a new SAML application with the given configuration. A default signing certificate with 3 years lifetime will be automatically created.
- Lua path
app.integrations.logto.create_saml_application- Full name
logto.logto_create_saml_application
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_saml_application_secret Write
Create a new signing certificate for the SAML application.
- Lua path
app.integrations.logto.create_saml_application_secret- Full name
logto.logto_create_saml_application_secret
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
handle_saml_authentication_request_post_binding Write
Process SAML authentication request using HTTP POST binding.
- Lua path
app.integrations.logto.handle_saml_authentication_request_post_binding- Full name
logto.logto_create_saml_authn
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_passkey_sign_webauthn_authentication Write
Create WebAuthn authentication options for passkey sign-in. The user will be resolved later by the credential during verification.
- Lua path
app.integrations.logto.create_passkey_sign_webauthn_authentication- Full name
logto.logto_create_sign_in_passkey_authentication
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_passkey_sign_webauthn_authentication_with_identifier Write
Create WebAuthn authentication options for passkey sign-in with an identifier. The identifier is used to look up the user's WebAuthn credentials and generate non-discoverable authentication options.
- Lua path
app.integrations.logto.create_passkey_sign_webauthn_authentication_with_identifier- Full name
logto.logto_create_sign_in_passkey_authentication_with_identifier
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_social_verification Write
Create a new SocialVerification record and return the provider's authorization URI for the given connector.
- Lua path
app.integrations.logto.create_social_verification- Full name
logto.logto_create_social_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_sso_connector Write
Create an new SSO connector instance for a given provider.
- Lua path
app.integrations.logto.create_sso_connector- Full name
logto.logto_create_sso_connector
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_new_subject_token Write
Create a new subject token for the use of impersonating the user.
- Lua path
app.integrations.logto.create_new_subject_token- Full name
logto.logto_create_subject_token
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_totp_secret Write
Create a new TOTP verification record and generate a new TOTP secret for the user. This secret can be used to bind a new TOTP verification to the user's profile. The verification record must be verified before the secret can be used to bind a new TOTP verification to the user's profile.
- Lua path
app.integrations.logto.create_totp_secret- Full name
logto.logto_create_totp_secret
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_user Write
Create a new user with the given data.
- Lua path
app.integrations.logto.create_user- Full name
logto.logto_create_user
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
upload_asset Write
Upload a user asset.
- Lua path
app.integrations.logto.upload_asset- Full name
logto.logto_create_user_asset
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
link_social_identity_user Write
Link authenticated user identity from a social platform to a Logto user. The usage of this API is usually coupled with `POST /connectors/:connectorId/authorization-uri`. With the help of these pair of APIs, you can implement a user profile page with the link social account feature in your application. Note: Currently due to technical limitations, this API does not support the following connectors that rely on Logto interaction session: `@logto/connector-apple`, `@logto/connector-saml`, `@logto/c
- Lua path
app.integrations.logto.link_social_identity_user- Full name
logto.logto_create_user_identity
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_mfa_verification_user Write
Create a new MFA verification for a given user ID.
- Lua path
app.integrations.logto.create_mfa_verification_user- Full name
logto.logto_create_user_mfa_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
add_personal_access_token Write
Add a new personal access token for the user.
- Lua path
app.integrations.logto.add_personal_access_token- Full name
logto.logto_create_user_personal_access_token
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_record_by_password Write
Create a verification record by verifying the password.
- Lua path
app.integrations.logto.create_record_by_password- Full name
logto.logto_create_verification_by_password
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_social_verification_record Write
Create a social verification record and return the authorization URI.
- Lua path
app.integrations.logto.create_social_verification_record- Full name
logto.logto_create_verification_by_social
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_record_by_verification_code Write
Create a verification record and send the code to the specified identifier. The code verification can be used to verify the given identifier.
- Lua path
app.integrations.logto.create_record_by_verification_code- Full name
logto.logto_create_verification_by_verification_code
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
request_and_send_verification_code Write
Request a verification code for the provided identifier (email/phone). if you're using email as the identifier, you need to setup your email connector first. if you're using phone as the identifier, you need to setup your SMS connector first.
- Lua path
app.integrations.logto.request_and_send_verification_code- Full name
logto.logto_create_verification_code
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_webauthn_authentication_verification Write
Create a new WebAuthn authentication verification record based on the user's existing WebAuthn credential. This verification record can be used to verify the user's WebAuthn credential.
- Lua path
app.integrations.logto.create_webauthn_authentication_verification- Full name
logto.logto_create_web_authn_authentication_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_webauthn_registration_verification Write
Create a new WebAuthn registration verification record. The verification record can be used to bind a new WebAuthn credential to the user's profile.
- Lua path
app.integrations.logto.create_webauthn_registration_verification- Full name
logto.logto_create_web_authn_registration_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_application Write
Delete application by ID.
- Lua path
app.integrations.logto.delete_application- Full name
logto.logto_delete_application
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_application_legacy_secret Write
Delete the legacy secret for the application and replace it with a new internal secret. Note: This operation does not "really" delete the legacy secret because it is still needed for internal validation. We may remove the display of the legacy secret (the `secret` field in the application response) in the future.
- Lua path
app.integrations.logto.delete_application_legacy_secret- Full name
logto.logto_delete_application_legacy_secret
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_custom_domain Write
Remove custom domain from the specified application.
- Lua path
app.integrations.logto.remove_custom_domain- Full name
logto.logto_delete_application_protected_app_metadata_custom_domain
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_api_resource_role_from_application Write
Remove a API resource role from the specified application.
- Lua path
app.integrations.logto.remove_api_resource_role_from_application- Full name
logto.logto_delete_application_role
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_application_secret Write
Delete a secret for the application by name.
- Lua path
app.integrations.logto.delete_application_secret- Full name
logto.logto_delete_application_secret
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
revoke_user_access_organization_application Write
Revoke a user's access to an organization for a application by application id, user id and organization id.
- Lua path
app.integrations.logto.revoke_user_access_organization_application- Full name
logto.logto_delete_application_user_consent_organization
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_user_consent_scope_from_application Write
Remove the user consent scope from an application by application id, scope type and scope id
- Lua path
app.integrations.logto.remove_user_consent_scope_from_application- Full name
logto.logto_delete_application_user_consent_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_captcha_provider Write
Delete the captcha provider.
- Lua path
app.integrations.logto.delete_captcha_provider- Full name
logto.logto_delete_captcha_provider
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_connector Write
Delete connector by ID.
- Lua path
app.integrations.logto.delete_connector- Full name
logto.logto_delete_connector
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_custom_phrase Write
Delete custom phrases for the specified language tag.
- Lua path
app.integrations.logto.delete_custom_phrase- Full name
logto.logto_delete_custom_phrase
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_custom_profile_field_by_name Write
Delete a custom profile field by name.
- Lua path
app.integrations.logto.delete_custom_profile_field_by_name- Full name
logto.logto_delete_custom_profile_field_by_name
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_domain Write
Delete domain by ID.
- Lua path
app.integrations.logto.delete_domain- Full name
logto.logto_delete_domain
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_email_template Write
Delete an email template by its ID.
- Lua path
app.integrations.logto.delete_email_template- Full name
logto.logto_delete_email_template
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_email_templates Write
Bulk delete email templates by their language tag and template type.
- Lua path
app.integrations.logto.delete_email_templates- Full name
logto.logto_delete_email_templates
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
revoke_grant_by_id Write
Revoke a specific user application grant by grant ID and remove the related session authorization. A logto-verification-id in header is required for revoking grants.
- Lua path
app.integrations.logto.revoke_grant_by_id- Full name
logto.logto_delete_grant_by_id
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_hook Write
Delete hook by ID.
- Lua path
app.integrations.logto.delete_hook- Full name
logto.logto_delete_hook
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_user_identity Write
Delete an identity (social identity) from the user, a logto-verification-id in header is required for checking sensitive permissions. The request is rejected if it would remove the user's last identifier.
- Lua path
app.integrations.logto.delete_user_identity- Full name
logto.logto_delete_identity
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_jwt_customizer Write
Delete the JWT customizer for the given token type.
- Lua path
app.integrations.logto.delete_jwt_customizer- Full name
logto.logto_delete_jwt_customizer
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_mfa_verification Write
Delete an MFA verification, a logto-verification-id in header is required for checking sensitive permissions.
- Lua path
app.integrations.logto.delete_mfa_verification- Full name
logto.logto_delete_mfa_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_oidc_key Write
Delete an OIDC signing key by key type and key ID.
- Lua path
app.integrations.logto.delete_oidc_key- Full name
logto.logto_delete_oidc_key
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_one_time_token_by_id Write
Delete a one-time token by its ID.
- Lua path
app.integrations.logto.delete_one_time_token_by_id- Full name
logto.logto_delete_one_time_token
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_organization Write
Delete organization by ID.
- Lua path
app.integrations.logto.delete_organization- Full name
logto.logto_delete_organization
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_organization_application Write
Remove an application from the organization.
- Lua path
app.integrations.logto.remove_organization_application- Full name
logto.logto_delete_organization_application
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_organization_application_role Write
Remove a role from the application in the organization.
- Lua path
app.integrations.logto.remove_organization_application_role- Full name
logto.logto_delete_organization_application_role
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_organization_invitation Write
Delete an organization invitation by ID.
- Lua path
app.integrations.logto.delete_organization_invitation- Full name
logto.logto_delete_organization_invitation
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_organization_jit_email_domain Write
Remove an email domain for just-in-time provisioning of users in the organization.
- Lua path
app.integrations.logto.remove_organization_jit_email_domain- Full name
logto.logto_delete_organization_jit_email_domain
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_organization_jit_default_role Write
Remove an organization role that will be assigned to users during just-in-time provisioning.
- Lua path
app.integrations.logto.remove_organization_jit_default_role- Full name
logto.logto_delete_organization_jit_role
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_organization_jit_sso_connector Write
Remove an enterprise SSO connector for just-in-time provisioning of users in the organization.
- Lua path
app.integrations.logto.remove_organization_jit_sso_connector- Full name
logto.logto_delete_organization_jit_sso_connector
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_organization_role Write
Delete organization role by ID.
- Lua path
app.integrations.logto.delete_organization_role- Full name
logto.logto_delete_organization_role
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_resource_scope Write
Remove a resource scope assignment from the specified organization role.
- Lua path
app.integrations.logto.remove_resource_scope- Full name
logto.logto_delete_organization_role_resource_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_organization_scope Write
Remove a organization scope assignment from the specified organization role.
- Lua path
app.integrations.logto.remove_organization_scope- Full name
logto.logto_delete_organization_role_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_organization_scope Write
Delete organization scope by ID.
- Lua path
app.integrations.logto.delete_organization_scope- Full name
logto.logto_delete_organization_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_user_member_from_organization Write
Remove a user's membership from the specified organization.
- Lua path
app.integrations.logto.remove_user_member_from_organization- Full name
logto.logto_delete_organization_user
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_role_from_user_organization Write
Remove a role assignment from a user in the specified organization.
- Lua path
app.integrations.logto.remove_role_from_user_organization- Full name
logto.logto_delete_organization_user_role
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_personal_access_token Write
Delete a token for the user by name.
- Lua path
app.integrations.logto.delete_personal_access_token- Full name
logto.logto_delete_personal_access_token_post
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_primary_email Write
Delete primary email for the user, a logto-verification-id header is required for checking sensitive permissions. The request is rejected if it would remove the user's last identifier.
- Lua path
app.integrations.logto.delete_primary_email- Full name
logto.logto_delete_primary_email
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_primary_phone Write
Delete primary phone for the user, a logto-verification-id header is required for checking sensitive permissions. The request is rejected if it would remove the user's last identifier.
- Lua path
app.integrations.logto.delete_primary_phone- Full name
logto.logto_delete_primary_phone
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_api_resource Write
Delete an API resource by ID.
- Lua path
app.integrations.logto.delete_api_resource- Full name
logto.logto_delete_resource
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_api_resource_scope Write
Delete an API resource scope (permission) from the given resource.
- Lua path
app.integrations.logto.delete_api_resource_scope- Full name
logto.logto_delete_resource_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_role Write
Delete a role with the given ID.
- Lua path
app.integrations.logto.delete_role- Full name
logto.logto_delete_role
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_role_from_application Write
Remove the role from an application with the given ID.
- Lua path
app.integrations.logto.remove_role_from_application- Full name
logto.logto_delete_role_application
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
unlink_scope_from_role Write
Unlink an API resource scope (permission) from a role with the given ID.
- Lua path
app.integrations.logto.unlink_scope_from_role- Full name
logto.logto_delete_role_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_role_from_user Write
Remove a role from a user with the given ID.
- Lua path
app.integrations.logto.remove_role_from_user- Full name
logto.logto_delete_role_user
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_saml_application Write
Delete a SAML application by ID.
- Lua path
app.integrations.logto.delete_saml_application- Full name
logto.logto_delete_saml_application
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_saml_application_secret Write
Delete a signing certificate of the SAML application. Active certificates cannot be deleted.
- Lua path
app.integrations.logto.delete_saml_application_secret- Full name
logto.logto_delete_saml_application_secret
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_secret Write
Delete a secret by its ID.
- Lua path
app.integrations.logto.delete_secret- Full name
logto.logto_delete_secret
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
bulk_delete_sentinel_activities Write
Remove sentinel activity reports based on the provided target value(identifier).Use this endpoint to unblock users who may be locked out due to too many failed authentication attempts.
- Lua path
app.integrations.logto.bulk_delete_sentinel_activities- Full name
logto.logto_delete_sentinel_activities
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
revoke_session_by_id Write
Revoke a specific user session by its ID, optionally revoking target associated grants and tokens. A logto-verification-id in header is required for revoking sessions.
- Lua path
app.integrations.logto.revoke_session_by_id- Full name
logto.logto_delete_session_by_id
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_sso_connector Write
Delete an SSO connector by ID.
- Lua path
app.integrations.logto.delete_sso_connector- Full name
logto.logto_delete_sso_connector
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_user Write
Delete user with the given ID. Note all associated data will be deleted cascadingly.
- Lua path
app.integrations.logto.delete_user- Full name
logto.logto_delete_user
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
revoke_user_grant Write
Revoke a specific grant and its associated token chain by grant ID. Also removes the matching session authorization entry for this grant from the related active session. The grant must belong to the user.
- Lua path
app.integrations.logto.revoke_user_grant- Full name
logto.logto_delete_user_grant
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_social_identity_from_user Write
Delete a social identity from the user.
- Lua path
app.integrations.logto.delete_social_identity_from_user- Full name
logto.logto_delete_user_identity
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_mfa_verification_user Write
Delete an MFA verification for the user with the given verification ID. The verification ID must be associated with the given user ID.
- Lua path
app.integrations.logto.delete_mfa_verification_user- Full name
logto.logto_delete_user_mfa_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
delete_personal_access_token Write
Delete a token for the user by name using the legacy path parameter. Deprecated: use the POST /delete endpoint instead to avoid url name encoding issues.
- Lua path
app.integrations.logto.delete_personal_access_token- Full name
logto.logto_delete_user_personal_access_token
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
remove_role_from_user Write
Remove an API resource role from the user.
- Lua path
app.integrations.logto.remove_role_from_user- Full name
logto.logto_delete_user_role
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
revoke_user_session Write
Revoke a specific user session by its ID, optionally revoking associated target grants and tokens.
- Lua path
app.integrations.logto.revoke_user_session- Full name
logto.logto_delete_user_session
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
generate_backup_codes Write
Create a new BackupCode verification record with new backup codes generated. This verification record will be used to bind the backup codes to the user's profile.
- Lua path
app.integrations.logto.generate_backup_codes- Full name
logto.logto_generate_backup_codes
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
generate_backup_codes Write
Generate backup codes for the user.
- Lua path
app.integrations.logto.generate_backup_codes- Full name
logto.logto_generate_my_account_backup_codes
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
generate_totp_secret Write
Generate a TOTP secret for the user.
- Lua path
app.integrations.logto.generate_totp_secret- Full name
logto.logto_generate_totp_secret
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
generate_webauthn_registration_options Write
Generate WebAuthn registration options for the user to register a new WebAuthn device.
- Lua path
app.integrations.logto.generate_webauthn_registration_options- Full name
logto.logto_generate_web_authn_registration_options
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_account_center_settings Read
Get the account center settings.
- Lua path
app.integrations.logto.get_account_center_settings- Full name
logto.logto_get_account_center_settings
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_active_user_data Read
Get active user data, including daily active user (DAU), weekly active user (WAU) and monthly active user (MAU). It also includes an array of DAU in the past 30 days.
- Lua path
app.integrations.logto.get_active_user_data- Full name
logto.logto_get_active_user_counts
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_admin_console_config Read
Get the global configuration object for Logto Console.
- Lua path
app.integrations.logto.get_admin_console_config- Full name
logto.logto_get_admin_console_config
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_application Read
Get application details by ID.
- Lua path
app.integrations.logto.get_application- Full name
logto.logto_get_application
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_application_level_sign_experience Read
Get application level sign-in experience for a given application. - Only branding properties and terms links customization is supported for now. - Only third-party applications can have the sign-in experience customization for now.
- Lua path
app.integrations.logto.get_application_level_sign_experience- Full name
logto.logto_get_application_sign_in_experience
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_backup_codes Read
Get all backup codes for the user with their usage status. Requires identity verification.
- Lua path
app.integrations.logto.get_backup_codes- Full name
logto.logto_get_backup_codes
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_captcha_provider Read
Get the captcha provider, you can only have one captcha provider.
- Lua path
app.integrations.logto.get_captcha_provider- Full name
logto.logto_get_captcha_provider
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_connector Read
Get connector data by ID
- Lua path
app.integrations.logto.get_connector- Full name
logto.logto_get_connector
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_connector_factory Read
Get connector factory by the given ID.
- Lua path
app.integrations.logto.get_connector_factory- Full name
logto.logto_get_connector_factory
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_custom_phrases Read
Get custom phrases for the specified language tag.
- Lua path
app.integrations.logto.get_custom_phrases- Full name
logto.logto_get_custom_phrase
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_custom_profile_field_by_name Read
Get a custom profile field by name.
- Lua path
app.integrations.logto.get_custom_profile_field_by_name- Full name
logto.logto_get_custom_profile_field_by_name
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_domain Read
Get domain details by ID, by calling this API, the domain status will be synced from remote provider.
- Lua path
app.integrations.logto.get_domain- Full name
logto.logto_get_domain
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_email_template_by_id Read
Get the email template by its ID.
- Lua path
app.integrations.logto.get_email_template_by_id- Full name
logto.logto_get_email_template
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_enabled_sso_connectors_by_given_email_domain Read
Extract the email domain from the provided email address. Returns all the enabled SSO connectors that match the email domain.
- Lua path
app.integrations.logto.get_enabled_sso_connectors_by_given_email_domain- Full name
logto.logto_get_enabled_sso_connectors
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
retrieve_access_token_issued_by_third_party_enterprise_sso_provider Read
This API retrieves the access token issued by a third-party enterprise SSO provider for a given SSO connector ID. Access is only available if token storage is enabled for the corresponding connector. When a user authenticates through a SSO provider, Logto automatically stores the provider's tokens in an encrypted form. You can use this API to securely retrieve the stored access token and use it to access third-party APIs on behalf of the user.
- Lua path
app.integrations.logto.retrieve_access_token_issued_by_third_party_enterprise_sso_provider- Full name
logto.logto_get_enterprise_sso_identity_access_token
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_all_active_grants Read
Retrieve all active application grants for the user. A logto-verification-id in header is required for checking grant details.
- Lua path
app.integrations.logto.get_all_active_grants- Full name
logto.logto_get_grants
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
hasura_auth_hook_endpoint Read
The `HASURA_GRAPHQL_AUTH_HOOK` endpoint for Hasura auth. Use this endpoint to integrate Hasura's [webhook authentication flow](https://hasura.io/docs/latest/auth/authentication/webhook/).
- Lua path
app.integrations.logto.hasura_auth_hook_endpoint- Full name
logto.logto_get_hasura_auth
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_hook Read
Get hook details by ID.
- Lua path
app.integrations.logto.get_hook- Full name
logto.logto_get_hook
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_id_token_claims_configuration Read
Get the ID token extended claims configuration for the tenant. This configuration controls which extended claims (e.g., `custom_data`, `identities`, `roles`, `organizations`, `organization_roles`) are included in ID tokens.
- Lua path
app.integrations.logto.get_id_token_claims_configuration- Full name
logto.logto_get_id_token_config
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_public_interaction_data Read
Get the public interaction data.
- Lua path
app.integrations.logto.get_public_interaction_data- Full name
logto.logto_get_interaction
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_jwt_customizer Read
Get the JWT customizer for the given token type.
- Lua path
app.integrations.logto.get_jwt_customizer- Full name
logto.logto_get_jwt_customizer
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get Read
Get log details by ID.
- Lua path
app.integrations.logto.get- Full name
logto.logto_get_log
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_config Read
Retrieve the exposed portion of the current user's logto config. This includes MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in binding states (skipped). Passkey is a WebAuthn MFA factor and shares the same account center field access control as MFA.
- Lua path
app.integrations.logto.get_config- Full name
logto.logto_get_logto_config
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_mfa_settings Read
Get MFA settings for the user. This endpoint requires the Identities scope. Returns current MFA configuration preferences.
- Lua path
app.integrations.logto.get_mfa_settings- Full name
logto.logto_get_mfa_settings
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_mfa_verifications Read
Get MFA verifications for the user.
- Lua path
app.integrations.logto.get_mfa_verifications- Full name
logto.logto_get_mfa_verifications
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_new_user_count Read
Get new user count in the past 7 days.
- Lua path
app.integrations.logto.get_new_user_count- Full name
logto.logto_get_new_user_counts
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_oidc_keys Read
Get OIDC signing keys by key type. The actual key will be redacted from the result.
- Lua path
app.integrations.logto.get_oidc_keys- Full name
logto.logto_get_oidc_keys
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_oidc_session_config Read
Get the OIDC session configuration for the tenant.
- Lua path
app.integrations.logto.get_oidc_session_config- Full name
logto.logto_get_oidc_session_config
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_one_time_token_by_id Read
Get a one-time token by its ID.
- Lua path
app.integrations.logto.get_one_time_token_by_id- Full name
logto.logto_get_one_time_token
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization Read
Get organization details by ID.
- Lua path
app.integrations.logto.get_organization- Full name
logto.logto_get_organization
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization_invitation Read
Get an organization invitation by ID.
- Lua path
app.integrations.logto.get_organization_invitation- Full name
logto.logto_get_organization_invitation
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization_role Read
Get organization role details by ID.
- Lua path
app.integrations.logto.get_organization_role- Full name
logto.logto_get_organization_role
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization_scope Read
Get organization scope details by ID.
- Lua path
app.integrations.logto.get_organization_scope- Full name
logto.logto_get_organization_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_profile Read
Get profile for the user.
- Lua path
app.integrations.logto.get_profile- Full name
logto.logto_get_profile
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_api_resource Read
Get an API resource details by ID.
- Lua path
app.integrations.logto.get_api_resource- Full name
logto.logto_get_resource
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_role Read
Get role details by ID.
- Lua path
app.integrations.logto.get_role- Full name
logto.logto_get_role
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_saml_application Read
Get SAML application details by ID.
- Lua path
app.integrations.logto.get_saml_application- Full name
logto.logto_get_saml_application
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
saml_application_callback Read
Handle the OIDC callback for SAML application and generate SAML response.
- Lua path
app.integrations.logto.saml_application_callback- Full name
logto.logto_get_saml_application_callback
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
handle_saml_authentication_request_redirect_binding Read
Process SAML authentication request using HTTP Redirect binding.
- Lua path
app.integrations.logto.handle_saml_authentication_request_redirect_binding- Full name
logto.logto_get_saml_authn
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_all_active_sessions Read
Retrieve all non-expired sessions for the user, including session metadata and interaction details when available. A logto-verification-id in header is required for checking sensitive session details.
- Lua path
app.integrations.logto.get_all_active_sessions- Full name
logto.logto_get_sessions
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_default_sign_experience_settings Read
Get the default sign-in experience settings.
- Lua path
app.integrations.logto.get_default_sign_experience_settings- Full name
logto.logto_get_sign_in_exp
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_full_sign_experience Read
Get the full sign-in experience configuration.
- Lua path
app.integrations.logto.get_full_sign_experience- Full name
logto.logto_get_sign_in_experience_config
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_localized_phrases Read
Get localized phrases based on the specified language.
- Lua path
app.integrations.logto.get_localized_phrases- Full name
logto.logto_get_sign_in_experience_phrases
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
retrieve_access_token_issued_by_third_party_social_provider Read
This API retrieves the access token issued by a third-party social provider for a given social target. Access is only available if token storage is enabled for the corresponding social connector. When a user authenticates through a social provider, Logto automatically stores the provider's tokens in an encrypted form. You can use this API to securely retrieve the stored access token and use it to access third-party APIs on behalf of the user.
- Lua path
app.integrations.logto.retrieve_access_token_issued_by_third_party_social_provider- Full name
logto.logto_get_social_identity_access_token
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_sso_connector Read
Get SSO connector data by ID. In addition to the raw SSO connector data, a copy of fetched or parsed IdP configs and a copy of connector provider's data will be attached.
- Lua path
app.integrations.logto.get_sso_connector- Full name
logto.logto_get_sso_connector
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
health_check Read
The traditional health check API. No authentication needed. > **Note** > Even if 204 is returned, it does not guarantee all the APIs are working properly since they may depend on additional resources or external services.
- Lua path
app.integrations.logto.health_check- Full name
logto.logto_get_status
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_swagger_json Read
The endpoint for the current JSON document. The JSON conforms to the [OpenAPI v3.0.1](https://spec.openapis.org/oas/v3.0.1) (a.k.a. Swagger) specification.
- Lua path
app.integrations.logto.get_swagger_json- Full name
logto.logto_get_swagger_json
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_application_constants Read
Get the application constants.
- Lua path
app.integrations.logto.get_application_constants- Full name
logto.logto_get_system_application_config
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_total_user_count Read
Get total user count in the current tenant.
- Lua path
app.integrations.logto.get_total_user_count- Full name
logto.logto_get_total_user_count
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_user Read
Get user data for the given ID.
- Lua path
app.integrations.logto.get_user- Full name
logto.logto_get_user
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_service_status Read
Get user assets service status.
- Lua path
app.integrations.logto.get_service_status- Full name
logto.logto_get_user_asset_service_status
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
check_if_user_has_password Read
Check if the user with the given ID has a password set.
- Lua path
app.integrations.logto.check_if_user_has_password- Full name
logto.logto_get_user_has_password
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
retrieve_user_social_identity_and_associated_token_storage Read
This API retrieves the social identity and its associated token set for the specified user from the Logto Secret Vault. The token set will only be available if token storage is enabled for the corresponding social connector.
- Lua path
app.integrations.logto.retrieve_user_social_identity_and_associated_token_storage- Full name
logto.logto_get_user_identity
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_user_active_session Read
Retrieve a non-expired session for the user by session ID, including session metadata and interaction details when available.
- Lua path
app.integrations.logto.get_user_active_session- Full name
logto.logto_get_user_session
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
retrieve_user_enterprise_sso_identity_and_associated_token_secret_if_token_storage_is_enabled Read
This API retrieves the user's enterprise SSO identity and associated token set record from the Logto Secret Vault. The token set will only be available if token storage is enabled for the corresponding SSO connector.
- Lua path
app.integrations.logto.retrieve_user_enterprise_sso_identity_and_associated_token_secret_if_token_storage_is_enabled- Full name
logto.logto_get_user_sso_identity
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_default_account_center Read
Get the default account center configuration.
- Lua path
app.integrations.logto.get_default_account_center- Full name
logto.logto_get_well_known_account_center
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_full_sign_experience Read
Get the full sign-in experience configuration.
- Lua path
app.integrations.logto.get_full_sign_experience- Full name
logto.logto_get_well_known_experience
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_experience_api_swagger_json Read
The endpoint for the Experience API JSON document. The JSON conforms to the [OpenAPI v3.0.1](https://spec.openapis.org/oas/v3.0.1) (a.k.a. Swagger) specification.
- Lua path
app.integrations.logto.get_experience_api_swagger_json- Full name
logto.logto_get_well_known_experience_openapi_json
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_management_api_swagger_json Read
The endpoint for the Management API JSON document. The JSON conforms to the [OpenAPI v3.0.1](https://spec.openapis.org/oas/v3.0.1) (a.k.a. Swagger) specification.
- Lua path
app.integrations.logto.get_management_api_swagger_json- Full name
logto.logto_get_well_known_management_openapi_json
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_user_api_swagger_json Read
The endpoint for the User API JSON document. The JSON conforms to the [OpenAPI v3.0.1](https://spec.openapis.org/oas/v3.0.1) (a.k.a. Swagger) specification.
- Lua path
app.integrations.logto.get_user_api_swagger_json- Full name
logto.logto_get_well_known_user_openapi_json
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
identify_user_current_interaction Write
This API identifies the user based on the verificationId within the current experience interaction: - `SignIn` and `ForgotPassword` interactions: Verifies the user's identity using the provided `verificationId`. - `Register` interaction: Creates a new user account using the profile data from the current interaction. If a verificationId is provided, the profile data will first be updated with the verification record before creating the account. If not, the account is created directly from the sto
- Lua path
app.integrations.logto.identify_user_current_interaction- Full name
logto.logto_identify_user
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
init_new_interaction Write
Init a new experience interaction with the given interaction type. Any existing interaction data will be cleared.
- Lua path
app.integrations.logto.init_new_interaction- Full name
logto.logto_init_interaction
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_application_organizations Read
Get the list of organizations that an application is associated with.
- Lua path
app.integrations.logto.get_application_organizations- Full name
logto.logto_list_application_organizations
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_application_custom_domains Read
Get custom domains of the specified application, the application type should be protected app.
- Lua path
app.integrations.logto.get_application_custom_domains- Full name
logto.logto_list_application_protected_app_metadata_custom_domains
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_application_api_resource_roles Read
Get API resource roles assigned to the specified application with pagination.
- Lua path
app.integrations.logto.get_application_api_resource_roles- Full name
logto.logto_list_application_roles
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_application_secrets Read
Get all the secrets for the application.
- Lua path
app.integrations.logto.get_application_secrets- Full name
logto.logto_list_application_secrets
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
list_all_user_consented_organizations_application Read
List all the user consented organizations for a application by application id and user id.
- Lua path
app.integrations.logto.list_all_user_consented_organizations_application- Full name
logto.logto_list_application_user_consent_organizations
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
list_all_user_consent_scopes_application Read
List all the user consent scopes of an application by application id
- Lua path
app.integrations.logto.list_all_user_consent_scopes_application- Full name
logto.logto_list_application_user_consent_scopes
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_applications Read
Get applications that match the given query with pagination.
- Lua path
app.integrations.logto.get_applications- Full name
logto.logto_list_applications
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_connector_factories Read
Get all connector factories data available in Logto.
- Lua path
app.integrations.logto.get_connector_factories- Full name
logto.logto_list_connector_factories
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_connectors Read
Get all connectors in the current tenant.
- Lua path
app.integrations.logto.get_connectors- Full name
logto.logto_list_connectors
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_all_custom_phrases Read
Get all custom phrases for all languages.
- Lua path
app.integrations.logto.get_all_custom_phrases- Full name
logto.logto_list_custom_phrases
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_all_custom_profile_fields Read
Get all custom profile fields.
- Lua path
app.integrations.logto.get_all_custom_profile_fields- Full name
logto.logto_list_custom_profile_fields
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_domains Read
Get all of your custom domains.
- Lua path
app.integrations.logto.get_domains- Full name
logto.logto_list_domains
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_email_templates Read
Get the list of email templates.
- Lua path
app.integrations.logto.get_email_templates- Full name
logto.logto_list_email_templates
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_recent_hook Read
Get recent logs that match the given query for the specified hook with pagination.
- Lua path
app.integrations.logto.get_recent_hook- Full name
logto.logto_list_hook_recent_logs
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_hooks Read
Get a list of hooks with optional pagination.
- Lua path
app.integrations.logto.get_hooks- Full name
logto.logto_list_hooks
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_all_jwt_customizers Read
Get all JWT customizers for the tenant.
- Lua path
app.integrations.logto.get_all_jwt_customizers- Full name
logto.logto_list_jwt_customizers
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get Read
Get logs that match the given query with pagination.
- Lua path
app.integrations.logto.get- Full name
logto.logto_list_logs
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_one_time_tokens Read
Get a list of one-time tokens, filtering by email and status, with optional pagination.
- Lua path
app.integrations.logto.get_one_time_tokens- Full name
logto.logto_list_one_time_tokens
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization_application_roles Read
Get roles associated with the application in the organization.
- Lua path
app.integrations.logto.get_organization_application_roles- Full name
logto.logto_list_organization_application_roles
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization_applications Read
Get applications associated with the organization.
- Lua path
app.integrations.logto.get_organization_applications- Full name
logto.logto_list_organization_applications
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization_invitations Read
Get organization invitations.
- Lua path
app.integrations.logto.get_organization_invitations- Full name
logto.logto_list_organization_invitations
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization_jit_email_domains Read
Get email domains for just-in-time provisioning of users in the organization.
- Lua path
app.integrations.logto.get_organization_jit_email_domains- Full name
logto.logto_list_organization_jit_email_domains
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization_jit_default_roles Read
Get organization roles that will be assigned to users during just-in-time provisioning.
- Lua path
app.integrations.logto.get_organization_jit_default_roles- Full name
logto.logto_list_organization_jit_roles
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization_jit_sso_connectors Read
Get enterprise SSO connectors for just-in-time provisioning of users in the organization.
- Lua path
app.integrations.logto.get_organization_jit_sso_connectors- Full name
logto.logto_list_organization_jit_sso_connectors
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization_role_resource_scopes Read
Get resource scopes that are assigned to the specified organization role with optional pagination.
- Lua path
app.integrations.logto.get_organization_role_resource_scopes- Full name
logto.logto_list_organization_role_resource_scopes
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization_role_scopes Read
Get organization scopes that are assigned to the specified organization role with optional pagination.
- Lua path
app.integrations.logto.get_organization_role_scopes- Full name
logto.logto_list_organization_role_scopes
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization_roles Read
Get organization roles with pagination.
- Lua path
app.integrations.logto.get_organization_roles- Full name
logto.logto_list_organization_roles
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization_scopes Read
Get organization scopes that match with optional pagination.
- Lua path
app.integrations.logto.get_organization_scopes- Full name
logto.logto_list_organization_scopes
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_roles_user_organization Read
Get roles assigned to a user in the specified organization with pagination.
- Lua path
app.integrations.logto.get_roles_user_organization- Full name
logto.logto_list_organization_user_roles
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_scopes_user_organization_tailored_by_organization_roles Read
Get scopes assigned to a user in the specified organization tailored by the organization roles. The scopes are derived from the organization roles assigned to the user.
- Lua path
app.integrations.logto.get_scopes_user_organization_tailored_by_organization_roles- Full name
logto.logto_list_organization_user_scopes
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organization_user_members Read
Get users that are members of the specified organization for the given query with pagination.
- Lua path
app.integrations.logto.get_organization_user_members- Full name
logto.logto_list_organization_users
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organizations Read
Get organizations that match the given query with pagination.
- Lua path
app.integrations.logto.get_organizations- Full name
logto.logto_list_organizations
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_api_resource_scopes Read
Get scopes (permissions) defined for an API resource.
- Lua path
app.integrations.logto.get_api_resource_scopes- Full name
logto.logto_list_resource_scopes
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_api_resources Read
Get API resources in the current tenant with pagination.
- Lua path
app.integrations.logto.get_api_resources- Full name
logto.logto_list_resources
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_role_applications Read
Get applications that have the role assigned with pagination.
- Lua path
app.integrations.logto.get_role_applications- Full name
logto.logto_list_role_applications
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_role_scopes Read
Get API resource scopes (permissions) linked with a role.
- Lua path
app.integrations.logto.get_role_scopes- Full name
logto.logto_list_role_scopes
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_role_users Read
Get users who have the role assigned with pagination.
- Lua path
app.integrations.logto.get_role_users- Full name
logto.logto_list_role_users
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_roles Read
Get roles with filters and pagination.
- Lua path
app.integrations.logto.get_roles- Full name
logto.logto_list_roles
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_saml_application_metadata Read
Get the SAML metadata XML for the application.
- Lua path
app.integrations.logto.get_saml_application_metadata- Full name
logto.logto_list_saml_application_metadata
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
list_saml_application_secrets Read
Get all signing certificates of the SAML application.
- Lua path
app.integrations.logto.list_saml_application_secrets- Full name
logto.logto_list_saml_application_secrets
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
list_all_supported_sso_connector_provider_details Read
Get a complete list of supported SSO connector providers.
- Lua path
app.integrations.logto.list_all_supported_sso_connector_provider_details- Full name
logto.logto_list_sso_connector_providers
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
list_sso_connectors Read
Get SSO connectors with pagination. In addition to the raw SSO connector data, a copy of fetched or parsed IdP configs and a copy of connector provider's data will be attached.
- Lua path
app.integrations.logto.list_sso_connectors- Full name
logto.logto_list_sso_connectors
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
retrieve_social_identities_enterprise_sso_identities_and_associated_token_secret_if_token_storage_is_enabled_user Read
This API retrieves all identities (social and enterprise SSO) for a user, along with their associated token set records from the Logto Secret Vault. The token sets will only be available if token storage is enabled for the corresponding identity connector.
- Lua path
app.integrations.logto.retrieve_social_identities_enterprise_sso_identities_and_associated_token_secret_if_token_storage_is_enabled_user- Full name
logto.logto_list_user_all_identities
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_user_custom_data Read
Get custom data for the given user ID.
- Lua path
app.integrations.logto.get_user_custom_data- Full name
logto.logto_list_user_custom_data
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_user_active_grants Read
Retrieve all non-expired grants of the user. Optionally filter by application type via `appType`; when omitted, grants from all application types are returned.
- Lua path
app.integrations.logto.get_user_active_grants- Full name
logto.logto_list_user_grants
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_user_config Read
Retrieve the exposed portion of a user's logto config. Includes MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in states (skipped).
- Lua path
app.integrations.logto.get_user_config- Full name
logto.logto_list_user_logto_configs
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_user_mfa_verifications Read
Get a user's existing MFA verifications for a given user ID.
- Lua path
app.integrations.logto.get_user_mfa_verifications- Full name
logto.logto_list_user_mfa_verifications
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_organizations_user Read
Get all organizations that the user is a member of. In each organization object, the user's roles in that organization are included in the `organizationRoles` array.
- Lua path
app.integrations.logto.get_organizations_user- Full name
logto.logto_list_user_organizations
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_personal_access_tokens Read
Get all personal access tokens for the user.
- Lua path
app.integrations.logto.get_personal_access_tokens- Full name
logto.logto_list_user_personal_access_tokens
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_roles_user Read
Get API resource roles assigned to the user with pagination.
- Lua path
app.integrations.logto.get_roles_user- Full name
logto.logto_list_user_roles
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_user_active_sessions Read
Retrieve all non-expired sessions for the user, including session metadata and interaction details when available.
- Lua path
app.integrations.logto.get_user_active_sessions- Full name
logto.logto_list_user_sessions
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
get_users Read
Get users with filters and pagination. Logto provides a very flexible way to query users. You can filter users by almost any fields with multiple modes. To learn more about the query syntax, please refer to [Advanced user search](https://docs.logto.io/docs/recipes/manage-users/advanced-user-search/).
- Lua path
app.integrations.logto.get_users- Full name
logto.logto_list_users
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
mark_mfa_as_enabled Write
Mark the user's MFA as enabled for the current interaction and persist in DB user configs upon successful submission.
- Lua path
app.integrations.logto.mark_mfa_as_enabled- Full name
logto.logto_mark_mfa_enabled
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_api_resource_roles_application Write
Update API resource roles assigned to the specified application. This will replace the existing API resource roles.
- Lua path
app.integrations.logto.update_api_resource_roles_application- Full name
logto.logto_replace_application_roles
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_application_level_sign_experience Write
Update application level sign-in experience for the specified application. Create a new sign-in experience if it does not exist. - Only branding properties and terms links customization is supported for now. - Only third-party applications can be customized for now. - Application level sign-in experience customization is optional, if provided, it will override the default branding and terms links.
- Lua path
app.integrations.logto.update_application_level_sign_experience- Full name
logto.logto_replace_application_sign_in_experience
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
grant_list_organization_access_user_application Write
Grant a list of organization access of a user for a application by application id and user id. The user must be a member of all the organizations. Only third-party application needs to be granted access to organizations, all the other applications can request for all the organizations' access by default.
- Lua path
app.integrations.logto.grant_list_organization_access_user_application- Full name
logto.logto_replace_application_user_consent_organizations
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
upsert_custom_phrases Write
Upsert custom phrases for the specified language tag. Upsert means that if the custom phrases already exist, they will be updated. Otherwise, they will be created.
- Lua path
app.integrations.logto.upsert_custom_phrases- Full name
logto.logto_replace_custom_phrase
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
replace_email_templates Write
Create or replace a list of email templates. If an email template with the same language tag and template type already exists, its details will be updated.
- Lua path
app.integrations.logto.replace_email_templates- Full name
logto.logto_replace_email_templates
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_one_time_token_status Write
Update the status of a one-time token by its ID. This can be used to mark the token as consumed or expired.
- Lua path
app.integrations.logto.update_one_time_token_status- Full name
logto.logto_replace_one_time_token_status
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
replace_organization_application_roles Write
Replace all roles associated with the application in the organization with the given data.
- Lua path
app.integrations.logto.replace_organization_application_roles- Full name
logto.logto_replace_organization_application_roles
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
replace_organization_applications Write
Replace all applications associated with the organization with the given data.
- Lua path
app.integrations.logto.replace_organization_applications- Full name
logto.logto_replace_organization_applications
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_organization_invitation_status Write
Update the status of an organization invitation by ID.
- Lua path
app.integrations.logto.update_organization_invitation_status- Full name
logto.logto_replace_organization_invitation_status
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
replace_organization_jit_email_domains Write
Replace all just-in-time provisioning email domains for the organization with the given data.
- Lua path
app.integrations.logto.replace_organization_jit_email_domains- Full name
logto.logto_replace_organization_jit_email_domains
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
replace_organization_jit_default_roles Write
Replace all organization roles that will be assigned to users during just-in-time provisioning with the given data.
- Lua path
app.integrations.logto.replace_organization_jit_default_roles- Full name
logto.logto_replace_organization_jit_roles
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
replace_organization_jit_sso_connectors Write
Replace all enterprise SSO connectors for just-in-time provisioning of users in the organization with the given data.
- Lua path
app.integrations.logto.replace_organization_jit_sso_connectors- Full name
logto.logto_replace_organization_jit_sso_connectors
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
replace_resource_scopes_organization_role Write
Replace all resource scopes that are assigned to the specified organization role with the given resource scopes. This effectively removes all existing organization scope assignments and replaces them with the new ones.
- Lua path
app.integrations.logto.replace_resource_scopes_organization_role- Full name
logto.logto_replace_organization_role_resource_scopes
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
replace_organization_scopes_organization_role Write
Replace all organization scopes that are assigned to the specified organization role with the given organization scopes. This effectively removes all existing organization scope assignments and replaces them with the new ones.
- Lua path
app.integrations.logto.replace_organization_scopes_organization_role- Full name
logto.logto_replace_organization_role_scopes
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_roles_user_organization Write
Update roles assigned to a user in the specified organization with the provided data.
- Lua path
app.integrations.logto.update_roles_user_organization- Full name
logto.logto_replace_organization_user_roles
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
replace_organization_user_members Write
Replace all user members for the specified organization with the given users. This effectively removing all existing user memberships in the organization and adding the new users as members.
- Lua path
app.integrations.logto.replace_organization_user_members- Full name
logto.logto_replace_organization_users
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_social_identity_user Write
Directly update a social identity of the user.
- Lua path
app.integrations.logto.update_social_identity_user- Full name
logto.logto_replace_user_identity
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_roles_user Write
Update API resource roles assigned to the user. This will replace the existing roles.
- Lua path
app.integrations.logto.update_roles_user- Full name
logto.logto_replace_user_roles
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
reset_user_password Write
Reset the user's password. (`ForgotPassword` interaction only)
- Lua path
app.integrations.logto.reset_user_password- Full name
logto.logto_reset_user_password
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
rotate_oidc_keys Write
A new key will be generated and prepend to the list of keys. Only two recent keys will be kept. The oldest key will be automatically removed if there are more than two keys.
- Lua path
app.integrations.logto.rotate_oidc_keys- Full name
logto.logto_rotate_oidc_keys
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
skip_mfa_binding_flow Write
Skip MFA verification binding flow. If the MFA is enabled in the sign-in experience settings and marked as `UserControlled`, the user can skip the MFA verification binding flow by calling this API.
- Lua path
app.integrations.logto.skip_mfa_binding_flow- Full name
logto.logto_skip_mfa_binding_flow
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
skip_additional_mfa_suggestion Write
Mark the optional additional MFA binding suggestion as skipped for the current interaction. When multiple MFA factors are enabled and only an email/phone factor is configured, a suggestion to add another factor may be shown; this endpoint records the choice to skip.
- Lua path
app.integrations.logto.skip_additional_mfa_suggestion- Full name
logto.logto_skip_mfa_suggestion
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
skip_passkey_binding Write
Skip passkey binding flow. The users can temporarily skip the passkey binding flow by calling this API during sign-up. On sign-in, the skip flag will be persisted to user config.
- Lua path
app.integrations.logto.skip_passkey_binding- Full name
logto.logto_skip_passkey_binding
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
submit_interaction Write
Submit the current interaction. - Submit the verified user identity to the OIDC provider for further authentication (SignIn and Register). - Update the user's profile data if any (SignIn and Register). - Reset the password and clear all the interaction records (ForgotPassword).
- Lua path
app.integrations.logto.submit_interaction- Full name
logto.logto_submit_interaction
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
test_jwt_customizer Write
Test the JWT customizer script with the given sample context and sample token payload.
- Lua path
app.integrations.logto.test_jwt_customizer- Full name
logto.logto_test_jwt_customizer
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_account_center_settings Write
Update the account center settings with the provided settings.
- Lua path
app.integrations.logto.update_account_center_settings- Full name
logto.logto_update_account_center_settings
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_admin_console_config Write
Update the global configuration object for Logto Console. This method performs a partial update.
- Lua path
app.integrations.logto.update_admin_console_config- Full name
logto.logto_update_admin_console_config
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_application Write
Update application details by ID with the given data.
- Lua path
app.integrations.logto.update_application- Full name
logto.logto_update_application
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_application_custom_data Write
Update the custom data of an application.
- Lua path
app.integrations.logto.update_application_custom_data- Full name
logto.logto_update_application_custom_data
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_application_secret Write
Update a secret for the application by name.
- Lua path
app.integrations.logto.update_application_secret- Full name
logto.logto_update_application_secret
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_captcha_provider Write
Update the captcha provider with the provided settings.
- Lua path
app.integrations.logto.update_captcha_provider- Full name
logto.logto_update_captcha_provider
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_connector Write
Update connector by ID with the given data. This methods performs a partial update.
- Lua path
app.integrations.logto.update_connector- Full name
logto.logto_update_connector
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_custom_profile_field_by_name Write
Update a custom profile field by name.
- Lua path
app.integrations.logto.update_custom_profile_field_by_name- Full name
logto.logto_update_custom_profile_field_by_name
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_display_order_custom_profile_fields_sign_experience Write
Update the display order of the custom profile fields in Sign-in Experience.
- Lua path
app.integrations.logto.update_display_order_custom_profile_fields_sign_experience- Full name
logto.logto_update_custom_profile_fields_sie_order
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_email_template_details Write
Update the details of an email template by its ID.
- Lua path
app.integrations.logto.update_email_template_details- Full name
logto.logto_update_email_template_details
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_hook Write
Update hook details by ID with the given data.
- Lua path
app.integrations.logto.update_hook- Full name
logto.logto_update_hook
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_signing_key_hook Write
Update the signing key for the specified hook.
- Lua path
app.integrations.logto.update_signing_key_hook- Full name
logto.logto_update_hook_signing_key
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_interaction_event Write
Update the current experience interaction event to the given event type. This API is used to switch the interaction event between `SignIn` and `Register`, while keeping all the verification records data.
- Lua path
app.integrations.logto.update_interaction_event- Full name
logto.logto_update_interaction_event
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_jwt_customizer Write
Update the JWT customizer for the given token type.
- Lua path
app.integrations.logto.update_jwt_customizer- Full name
logto.logto_update_jwt_customizer
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_config Write
Update the exposed portion of the current user's logto config. Supports updating MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in binding states (skipped). Passkey is a WebAuthn MFA factor and shares the same account center field access control as MFA.
- Lua path
app.integrations.logto.update_config- Full name
logto.logto_update_logto_config
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_mfa_settings Write
Update MFA settings for the user. This endpoint requires identity verification and the Identities scope. Controls whether MFA verification is required during sign-in when the user has MFA configured.
- Lua path
app.integrations.logto.update_mfa_settings- Full name
logto.logto_update_mfa_settings
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_mfa_verification_name Write
Update a MFA verification name, a logto-verification-id in header is required for checking sensitive permissions. Only WebAuthn is supported for now.
- Lua path
app.integrations.logto.update_mfa_verification_name- Full name
logto.logto_update_mfa_verification_name
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_oidc_session_config Write
Update the OIDC session configuration for the tenant. This method performs a partial update. If the configuration does not exist, it will be created.
- Lua path
app.integrations.logto.update_oidc_session_config- Full name
logto.logto_update_oidc_session_config
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_organization Write
Update organization details by ID with the given data.
- Lua path
app.integrations.logto.update_organization- Full name
logto.logto_update_organization
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_organization_role Write
Update organization role details by ID with the given data.
- Lua path
app.integrations.logto.update_organization_role- Full name
logto.logto_update_organization_role
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_organization_scope Write
Update organization scope details by ID with the given data.
- Lua path
app.integrations.logto.update_organization_scope- Full name
logto.logto_update_organization_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_other_profile Write
Update other profile for the user, only the fields that are passed in will be updated, to update the address, the user must have the address scope.
- Lua path
app.integrations.logto.update_other_profile- Full name
logto.logto_update_other_profile
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_password Write
Update password for the user, a logto-verification-id in header is required for checking sensitive permissions.
- Lua path
app.integrations.logto.update_password- Full name
logto.logto_update_password
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_personal_access_token Write
Update a token for the user by name.
- Lua path
app.integrations.logto.update_personal_access_token- Full name
logto.logto_update_personal_access_token_name
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_primary_email Write
Update primary email for the user, a logto-verification-id in header is required for checking sensitive permissions, and a new identifier verification record is required for the new email ownership verification.
- Lua path
app.integrations.logto.update_primary_email- Full name
logto.logto_update_primary_email
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_primary_phone Write
Update primary phone for the user, a logto-verification-id in header is required for checking sensitive permissions, and a new identifier verification record is required for the new phone ownership verification.
- Lua path
app.integrations.logto.update_primary_phone- Full name
logto.logto_update_primary_phone
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_profile Write
Update profile for the user, only the fields that are passed in will be updated. Updating or deleting username requires a logto-verification-id header for checking sensitive permissions. Removing any sign-in identifier, including username, is rejected if it would remove the user's last identifier.
- Lua path
app.integrations.logto.update_profile- Full name
logto.logto_update_profile
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_api_resource Write
Update an API resource details by ID with the given data. This method performs a partial update.
- Lua path
app.integrations.logto.update_api_resource- Full name
logto.logto_update_resource
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
set_api_resource_as_default Write
Set an API resource as the default resource for the current tenant. Each tenant can have only one default API resource. If an API resource is set as default, the previously set default API resource will be set as non-default. See [this section](https://docs.logto.io/docs/references/resources/#default-api) for more information.
- Lua path
app.integrations.logto.set_api_resource_as_default- Full name
logto.logto_update_resource_is_default
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_api_resource_scope Write
Update an API resource scope (permission) for the given resource. This method performs a partial update.
- Lua path
app.integrations.logto.update_api_resource_scope- Full name
logto.logto_update_resource_scope
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_role Write
Update role details. This method performs a partial update.
- Lua path
app.integrations.logto.update_role- Full name
logto.logto_update_role
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_saml_application Write
Update SAML application details by ID.
- Lua path
app.integrations.logto.update_saml_application- Full name
logto.logto_update_saml_application
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_saml_application_secret Write
Update the status of a signing certificate.
- Lua path
app.integrations.logto.update_saml_application_secret- Full name
logto.logto_update_saml_application_secret
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_default_sign_experience_settings Write
Update the default sign-in experience settings with the provided data.
- Lua path
app.integrations.logto.update_default_sign_experience_settings- Full name
logto.logto_update_sign_in_exp
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_access_token_social_identity_by_verification_id Write
This API updates the token storage for a social identity by a given social verification ID. It is used to fetch a new access token from the social provider and store it securely in Logto.
- Lua path
app.integrations.logto.update_access_token_social_identity_by_verification_id- Full name
logto.logto_update_social_identity_access_token_by_verification_id
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_sso_connector Write
Update an SSO connector by ID. This method performs a partial update.
- Lua path
app.integrations.logto.update_sso_connector- Full name
logto.logto_update_sso_connector
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_user Write
Update user data for the given ID. This method performs a partial update.
- Lua path
app.integrations.logto.update_user- Full name
logto.logto_update_user
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_user_custom_data Write
Update custom data for the given user ID. This method performs a partial update of the custom data object.
- Lua path
app.integrations.logto.update_user_custom_data- Full name
logto.logto_update_user_custom_data
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_user_suspension_status Write
Update user suspension status for the given ID.
- Lua path
app.integrations.logto.update_user_suspension_status- Full name
logto.logto_update_user_is_suspended
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_user_config Write
Update the exposed portion of a user's logto config. Supports updating MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in states (skipped). All fields are optional - only provided fields will be updated.
- Lua path
app.integrations.logto.update_user_config- Full name
logto.logto_update_user_logto_configs
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_user_password Write
Update user password for the given ID.
- Lua path
app.integrations.logto.update_user_password- Full name
logto.logto_update_user_password
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_personal_access_token Write
Update a token for the user by name using the legacy path parameter. Deprecated: use the PATCH /personal-access-tokens endpoint instead to avoid url name encoding issues.
- Lua path
app.integrations.logto.update_personal_access_token- Full name
logto.logto_update_user_personal_access_token
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
update_user_profile Write
Update profile for the given user ID. This method performs a partial update of the profile object.
- Lua path
app.integrations.logto.update_user_profile- Full name
logto.logto_update_user_profile
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
upload_custom_ui_assets Write
Upload a zip file containing custom web assets such as HTML, CSS, and JavaScript files, then replace the default sign-in experience with the custom UI assets.
- Lua path
app.integrations.logto.upload_custom_ui_assets- Full name
logto.logto_upload_custom_ui_assets
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
upsert_id_token_claims_configuration Write
Create or update the ID token extended claims configuration for the tenant. This controls which extended claims are included in ID tokens when the corresponding scopes are requested.
- Lua path
app.integrations.logto.upsert_id_token_claims_configuration- Full name
logto.logto_upsert_id_token_config
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
create_or_update_jwt_customizer Write
Create or update a JWT customizer for the given token type.
- Lua path
app.integrations.logto.create_or_update_jwt_customizer- Full name
logto.logto_upsert_jwt_customizer
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_backup_code Write
Create a new BackupCode verification record and verify the provided backup code against the user's backup codes. The verification record will be marked as verified if the code is correct.
- Lua path
app.integrations.logto.verify_backup_code- Full name
logto.logto_verify_backup_code
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_enterprise_sso_verification Write
Verify the SSO authorization response data and get the user's identity from the SSO provider.
- Lua path
app.integrations.logto.verify_enterprise_sso_verification- Full name
logto.logto_verify_enterprise_sso_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_mfa_verification_code Write
Verify the provided MFA verification code. The verification code must have been sent using the MFA verification code endpoint. This endpoint verifies the code against the user's bound identifier and marks the verification as complete if successful.
- Lua path
app.integrations.logto.verify_mfa_verification_code- Full name
logto.logto_verify_mfa_verification_code
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_one_time_token Write
Verify a one-time token associated with an email address. If the token is valid and not expired, it will be marked as consumed.
- Lua path
app.integrations.logto.verify_one_time_token- Full name
logto.logto_verify_one_time_token
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_one_time_token Write
Verify the provided one-time token against the user's email. If successful, the verification record will be marked as verified.
- Lua path
app.integrations.logto.verify_one_time_token- Full name
logto.logto_verify_one_time_token_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_passkey_sign_webauthn_authentication Write
Verify the passkey sign-in WebAuthn authentication response against the stored authentication challenge. When `verificationId` is provided, it verifies against the challenge generated by the identifier-based authentication endpoint. When omitted, it verifies against the preflight authentication options stored in the interaction. Upon successful verification, the verification record will be marked as verified and the user will be resolved by the credential if not provided earlier.
- Lua path
app.integrations.logto.verify_passkey_sign_webauthn_authentication- Full name
logto.logto_verify_sign_in_passkey_authentication
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_social_verification Write
Verify the social authorization response data and get the user's identity data from the social provider.
- Lua path
app.integrations.logto.verify_social_verification- Full name
logto.logto_verify_social_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_totp_verification Write
Verifies the provided TOTP code against the new created TOTP secret or the existing TOTP secret. If a verificationId is provided, this API will verify the code against the TOTP secret that is associated with the verification record. Otherwise, a new TOTP verification record will be created and verified against the user's existing TOTP secret.
- Lua path
app.integrations.logto.verify_totp_verification- Full name
logto.logto_verify_totp_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_user_password Write
Test if the given password matches the user's password.
- Lua path
app.integrations.logto.verify_user_password- Full name
logto.logto_verify_user_password
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_social_verification_record Write
Verify a social verification record by callback connector data, and save the user information to the record.
- Lua path
app.integrations.logto.verify_social_verification_record- Full name
logto.logto_verify_verification_by_social
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_verification_code Write
Verify the provided verification code against the identifier. If successful, the verification record will be marked as verified.
- Lua path
app.integrations.logto.verify_verification_code- Full name
logto.logto_verify_verification_by_verification_code
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_verification_code Write
Verify a verification code for a specified identifier. if you're using email as the identifier, you need to setup your email connector first. if you're using phone as the identifier, you need to setup your SMS connector first.
- Lua path
app.integrations.logto.verify_verification_code- Full name
logto.logto_verify_verification_code
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_verification_code Write
Verify the provided verification code against the user's identifier. If successful, the verification record will be marked as verified.
- Lua path
app.integrations.logto.verify_verification_code- Full name
logto.logto_verify_verification_code_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_webauthn_authentication_verification Write
Verifies the WebAuthn authentication response against the user's authentication challenge. Upon successful verification, the verification record will be marked as verified.
- Lua path
app.integrations.logto.verify_webauthn_authentication_verification- Full name
logto.logto_verify_web_authn_authentication_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_webauthn_registration Write
Verify the WebAuthn registration by the user's response.
- Lua path
app.integrations.logto.verify_webauthn_registration- Full name
logto.logto_verify_web_authn_registration
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||
verify_webauthn_registration_verification Write
Verify the WebAuthn registration response against the user's WebAuthn registration challenge. If the response is valid, the WebAuthn registration record will be marked as verified.
- Lua path
app.integrations.logto.verify_webauthn_registration_verification- Full name
logto.logto_verify_web_authn_registration_verification
| Parameter | Type | Required | Description |
|---|---|---|---|
| No parameters. | |||