Sync from monorepo 8ac7a9897077

Author: FusionAuth Automation

fusionauth-netcore-client/domain/io/fusionauth/domain/AuthenticationThreats.cs

@@ -25,6 +25,15 @@ namespace io.fusionauth.domain
    * @author Brett Pontarelli
    */
   public enum AuthenticationThreats {
-        ImpossibleTravel
+        BotDetected, 
+        BlocklistedIp, 
+        DormantAccount, 
+        DormantPassword, 
+        ImpossibleTravel, 
+        RecentIdentityChange, 
+        RecentPasswordChange, 
+        SuspiciousUserAgent, 
+        UnrecognizedDevice, 
+        UntrustedDevice
   }
 }

fusionauth-netcore-client/domain/io/fusionauth/domain/ClientRiskConfiguration.cs

@@ -0,0 +1,54 @@
+/*
+ * Copyright (c) 2018-2026, FusionAuth, All Rights Reserved
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+ * either express or implied. See the License for the specific
+ * language governing permissions and limitations under the License.
+ */
+
+
+using System.Collections.Generic;
+using System;
+
+namespace io.fusionauth.domain
+{
+
+  /**
+   * Flags to enable or disable specific risk signals that contribute to the composite client risk calculation.
+   */
+  public class ClientRiskConfiguration: Enableable {
+
+    public bool? blocklistedIp;
+
+    public bool? botDetected;
+
+    public bool? dormantAccount;
+
+    public bool? dormantPassword;
+
+    public bool? impossibleTravel;
+
+    public bool? recentIdentityChange;
+
+    public bool? recentPasswordChange;
+
+    public bool? suspiciousUserAgent;
+
+    public bool? unrecognizedDevice;
+
+    public bool? untrustedDevice;
+
+    public ClientRiskConfiguration with(Action<ClientRiskConfiguration> action) {
+      action(this);
+      return this;
+    }
+  }
+}

fusionauth-netcore-client/domain/io/fusionauth/domain/MultiFactorLoginPolicy.cs

@@ -25,6 +25,8 @@ namespace io.fusionauth.domain
    * @author Daniel DeGroff
    */
   public enum MultiFactorLoginPolicy {
+        ChallengeOnHighRisk, 
+        ChallengeOnMediumRisk, 
         Disabled, 
         Enabled, 
         Required

fusionauth-netcore-client/domain/io/fusionauth/domain/Tenant.cs

@@ -35,6 +35,8 @@ public class Tenant {
 
     public TenantCaptchaConfiguration captchaConfiguration;
 
+    public ClientRiskConfiguration clientRiskConfiguration;
+
     public bool? configured;
 
     public List<ConnectorPolicy> connectorPolicies;

fusionauth-netcore-client/domain/io/fusionauth/domain/TenantMultiFactorConfiguration.cs

@@ -28,6 +28,8 @@ public class TenantMultiFactorConfiguration {
 
     public MultiFactorAuthenticatorMethod authenticator;
 
+    public bool? debug;
+
     public MultiFactorEmailMethod email;
 
     public MultiFactorLoginPolicy loginPolicy;

fusionauth-netcore-client/domain/io/fusionauth/domain/api/BaseLoginRequest.cs

@@ -29,6 +29,8 @@ public class BaseLoginRequest: BaseEventRequest {
 
     public Guid? applicationId;
 
+    public double? botDetectionScore;
+
     public string ipAddress;
 
     public MetaData metaData;

fusionauth-netcore-client/domain/io/fusionauth/domain/event/EventType.cs

@@ -98,6 +98,8 @@ public enum EventType {
         UserLoginSuccess, 
         [EnumMember(Value = "user.login.suspicious")]
         UserLoginSuspicious, 
+        [EnumMember(Value = "user.two-factor.challenge")]
+        UserTwoFactorChallenge, 
         [EnumMember(Value = "user.password.breach")]
         UserPasswordBreach, 
         [EnumMember(Value = "user.password.reset.send")]
@@ -137,6 +139,10 @@ public enum EventType {
         [EnumMember(Value = "user.identity.verified")]
         UserIdentityVerified, 
         [EnumMember(Value = "user.identity.update")]
-        UserIdentityUpdate
+        UserIdentityUpdate, 
+        [EnumMember(Value = "user.two-factor.failed-attempt")]
+        UserTwoFactorFailedAttempt, 
+        [EnumMember(Value = "user.two-factor.success")]
+        UserTwoFactorSuccess
   }
 }

fusionauth-netcore-client/domain/io/fusionauth/domain/event/UserTwoFactorChallengeEvent.cs

@@ -0,0 +1,38 @@
+/*
+ * Copyright (c) 2018-2026, FusionAuth, All Rights Reserved
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+ * either express or implied. See the License for the specific
+ * language governing permissions and limitations under the License.
+ */
+
+
+using System.Collections.Generic;
+using System;
+
+namespace io.fusionauth.domain.@event
+{
+
+  /**
+   * Models the User Two Factor Challenge Event. Fired when a two-factor challenge is started (before the user submits a code).
+   */
+  public class UserTwoFactorChallengeEvent: BaseUserEvent {
+
+    public Guid? applicationId;
+
+    public string clientRisk;
+
+    public UserTwoFactorChallengeEvent with(Action<UserTwoFactorChallengeEvent> action) {
+      action(this);
+      return this;
+    }
+  }
+}

fusionauth-netcore-client/domain/io/fusionauth/domain/event/UserTwoFactorFailedAttemptEvent.cs

@@ -0,0 +1,42 @@
+/*
+ * Copyright (c) 2018-2026, FusionAuth, All Rights Reserved
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+ * either express or implied. See the License for the specific
+ * language governing permissions and limitations under the License.
+ */
+
+
+using System.Collections.Generic;
+using System;
+
+namespace io.fusionauth.domain.@event
+{
+
+  /**
+   * Models the User Two Factor Failed Attempt Event. Fired when a user fails a two-factor challenge.
+   */
+  public class UserTwoFactorFailedAttemptEvent: BaseUserEvent {
+
+    public Guid? applicationId;
+
+    public string clientRisk;
+
+    public string messageType;
+
+    public string method;
+
+    public UserTwoFactorFailedAttemptEvent with(Action<UserTwoFactorFailedAttemptEvent> action) {
+      action(this);
+      return this;
+    }
+  }
+}

fusionauth-netcore-client/domain/io/fusionauth/domain/event/UserTwoFactorSuccessEvent.cs

@@ -0,0 +1,42 @@
+/*
+ * Copyright (c) 2018-2026, FusionAuth, All Rights Reserved
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+ * either express or implied. See the License for the specific
+ * language governing permissions and limitations under the License.
+ */
+
+
+using System.Collections.Generic;
+using System;
+
+namespace io.fusionauth.domain.@event
+{
+
+  /**
+   * Models the User Two Factor Success Event. Fired when a user successfully completes a two-factor challenge.
+   */
+  public class UserTwoFactorSuccessEvent: BaseUserEvent {
+
+    public Guid? applicationId;
+
+    public string clientRisk;
+
+    public string messageType;
+
+    public string method;
+
+    public UserTwoFactorSuccessEvent with(Action<UserTwoFactorSuccessEvent> action) {
+      action(this);
+      return this;
+    }
+  }
+}