Merge branch 'main' into feat/python-v2

Author: Brett Chaldecott

astro.config.mjs

@@ -37,7 +37,8 @@ export default defineConfig({
   redirects: {
     "/developer-tools/kinde-api/register-manage-apis/":
       "/developer-tools/your-apis/register-manage-apis/",
-    "/developer-tools/kinde-api/protect-your-api/": "/developer-tools/your-apis/protect-your-api/",
+    "/developer-tools/kinde-api/protect-your-api/": 
+      "/developer-tools/your-apis/protect-your-api/",
     "/developer-tools/kinde-api/access-to-your-api/":
       "/developer-tools/your-apis/access-to-your-api/",
     "/developer-tools/kinde-api/custom-api-scopes/":
@@ -51,7 +52,13 @@ export default defineConfig({
     "/developer-tools/kinde-api/test-the-connection-to-kindes-api/":
       "/developer-tools/kinde-api/troubleshoot-kinde-api/",
     "/developer-tools/sdks/native/expo-react-native/": 
-    "/developer-tools/sdks/native/expo/"
+      "/developer-tools/sdks/native/expo/",
+    "/design/pages/design-your-welcome-pages/":
+      "/design/brand/apply-branding-for-an-organization/",
+    "/developer-tools/guides/deploy-on-vercel/kinde.com/":
+      "/developer-tools/guides/deploy-on-vercel/",
+    "/design/pages/set-language-for-pages/":
+      "/design/content-customization/set-language-for-pages/"
   },
   markdown: {
     rehypePlugins: [

src/content/docs/authenticate/custom-configurations/custom-authentication-pages.mdx

@@ -10,9 +10,15 @@ relatedArticles:
   - 8b9376c4-308c-4eaa-a990-606fb8bbf770
 ---
 
-You can bring your own custom sign up and sign in pages to use with Kinde. Integrate your own designs for the initial sign up and sign in page, and still get the security of Kinde’s auth (and verification) process.
+You can host your own custom sign up and sign in pages to use with Kinde. Integrate your own designs for the initial sign up and sign in page, and still get the security of Kinde’s auth (and verification) process.
 
-This gives you the best of both worlds: the security of hosted auth, and the ability to customize the sign-up experience for your users.
+This gives you the best of both worlds: the security of hosted auth, and the ability to customize the initial sign-up experience for your users.
+
+<Aside title="Customizing the entire authentication experience">
+
+Bring your own HTML / CSS and JavaScript to our hosted pages [with Kinde's custom UI feature](/design/customize-with-code/customize-with-css-html/).
+
+</Aside>
 
 ## Custom sign in for social authentication
 
@@ -104,14 +110,14 @@ Here is an example using React.
 
 ```jsx
 <button
-    onClick={() =>
-      login({
-        connectionId: "conn_e5f80aa5258e4685bf629b38003ee954",
-        loginHint: "[email protected]"
-      })
-    }
+  onClick={() =>
+    login({
+      connectionId: "conn_e5f80aa5258e4685bf629b38003ee954",
+      loginHint: "[email protected]"
+    })
+  }
 >
-    Sign in with email
+  Sign in with email
 </button>
 ```
 

src/content/docs/authenticate/enterprise-connections/mapping-users-enterprise.mdx

@@ -75,7 +75,7 @@ Webhooks are a method of being notified when an event occurs in Kinde, e.g. a us
 Here’s some examples of webhook events that can be used to keep your users in sync:
 
 - `user.created` - when a user is created in Kinde either via the admin UI or registering
-- `user.updated` - when a user is added to an organization, their roles or permissions change, or when their assigned properties change
+- `user.updated` - when a user is added to an organization, or their roles or permissions change
 - `user.deleted` - when a user is deleted via the UI or via the API
 
 Here’s an example json schema for user.updated that could be used to sync your data:

src/content/docs/build/set-up-options/run-multiple-businesses.mdx

@@ -16,7 +16,7 @@ You can run multiple businesses on Kinde. This is helpful if you want to create
 
 ## **Add a new business**
 
-1. Select your profile in the bottom left of the Kinde home screen.
+1. Select your business profile in the bottom left of the Kinde home screen.
 2. From the menu, select **Switch business**. A screen showing all your businesses opens. 
 3. Select **Add business**.
 4. Complete the form, including your preferred Kinde domain and data storage region. These details cannot be changed later.
@@ -25,7 +25,7 @@ You can run multiple businesses on Kinde. This is helpful if you want to create
 
 ## **Switch between businesses**
 
-1. Select your profile in the bottom left of the Kinde home screen.
+1. Select your business profile in the bottom left of the Kinde home screen.
 2. From the menu, select **Switch business*. A screen showing all your businesses opens. 
 3. Select the one you want to work in. The business loads.
 

src/content/docs/design/brand/global-brand-defaults.mdx

@@ -48,15 +48,7 @@ The logo will be automatically linked to the [Redirect URL](/get-started/connec
 
 Favicons are small icons that appear on browser tabs. To add them to Kinde, they must measure 48x48px (or multiples of, such as 96x96).
 
-<img
-  src="https://imagedelivery.net/skPPZTHzSlcslvHjesZQcQ/310d10e2-ab73-4aec-9872-7352aca57200/public"
-  alt=""
-  width="672px"
-  height="auto"
-  fetchpriority="low"
-  loading="lazy"
-  decoding="async"
-/>
+![image of browsere favicons](https://imagedelivery.net/skPPZTHzSlcslvHjesZQcQ/f4cc6e0f-3f87-46af-f99d-7c4910602600/public)
 
 1. In Kinde, go to **Design > Global > Brand**.
 2. In the **Favicon** section:

src/content/docs/design/customize-with-code/understand-page-design.mdx

@@ -144,7 +144,7 @@ If you are using React for templating, note this code is rendered on the server.
 
 </Aside>
 
-### Page structure in the Git directory
+## Page structure in the Git directory
 
 The code for your pages must live in a GitHub repository (other git providers to be supported later). Your directory structure in the repo is critical to Kinde being able to run your design code.
 
@@ -162,7 +162,7 @@ myApp/
   └── kinde.json
 ```
 
-### Kinde.json
+## Kinde.json
 
 The `kinde.json` file defines the config for all custom code in Kinde, including workflows and custom pages. A typical config file will look as follows:
 
@@ -177,25 +177,93 @@ The `kinde.json` file defines the config for all custom code in Kinde, including
 
 `version` - based on the date when the API version was released. Any breaking changes will be released in a new API version.
 
-### Which pages can I customize?
+## Which pages can I customize?
 
 All Kinde hosted pages can be customized and use url route mapping to determine which template to use.
 
 If a specific mapped route does not exist, a special route called `(default)` will be rendered. Set up the `(default)` page to ensure all your pages follow this design unless you have overridden them with custom code.  
 
-Available routes:
+<Aside type="warning">
 
-`(default)` - The page template that will be used for all Kinde hosted pages when a specific one cannot be found.
+Once you start customizing pages, it's on you not to break them. We recommend always applying custom code to pages in a non-prod environment first.
 
-`(register)` - The sign up page
+</Aside>
+
+### Common pages
+
+These are the most frequently used or fallback pages.
+
+* `(default)` – Fallback template used when a specific page is not found.
+* `(register)` – The sign-up page.
+* `(login)` – The sign-in page.
+* `(index)` – Landing page when visiting the root domain (e.g. `https://<yourdomain>.kinde.com`).
+
+### Authentication
+
+Pages involved in initiating authentication flows.
+* `(register)` – The sign-up page.
+* `(login)` – The sign-in page.
+* `(sso_home_realm)` – Displayed when a user selects “Continue with SSO” to choose their identity provider.
+* `(provide_email)` – Shown when using a social login provider that does not return an email address.
+* `(clickwrap)` – Displays terms and conditions or agreements that must be accepted.
+
+### Password flows
+
+Used in password-based authentication and recovery.
+
+* `(verify_password)` – Shown during sign-in when using a password-based method.
+* `(set_password)` – Shown during a password-based sign-up flow.
+* `(reset_password_verify_email_otp)` – First step of the reset flow where the user verifies identity using an email OTP.
+* `(reset_password)` – Password entry screen shown after verification during the reset flow.
+
+### One-Time Passcode (OTP) verification
+
+Used in sign-in and sign-up flows with OTP (email or phone).
+
+* `(sign_in_use_email_otp)` – Sign in with a one-time email code.
+* `(sign_up_use_email_otp)` – Sign up with a one-time email code.
+* `(sign_in_sign_up_use_phone_otp)` – Sign in or sign up with a one-time phone code.
+
+### Multi-Factor Authentication (MFA)
+
+Shown after primary authentication when MFA is required or being set up.
+
+* `(mfa_method_selection)` – User selects their preferred MFA method.
+* `(mfa_authenticator_app)` – Setup screen for using an authenticator app.
+* `(mfa_setup_email)` – Setup screen for email-based MFA.
+* `(mfa_setup_phone)` – Setup screen for phone-based MFA.
+* `(mfa_use_email_otp)` – Enter a one-time email code for MFA.
+* `(mfa_use_phone_otp)` – Enter a one-time phone code for MFA.
+* `(mfa_use_recovery_code)` – Enter a recovery code if unable to use other MFA methods.
+* `(mfa_view_recovery_codes)` – View and save MFA recovery codes.
+
+### Billing (coming soon)
+
+Pages related to choosing a plan and making a payment.
+
+* `(choose_plan)` – User selects a subscription plan.
+* `(collect_payment_details)` – User enters billing information.
+* `(subscription_success)` – Confirmation page shown after successful subscription.
+
+### Early access
+
+Pages for gated access to your product before full launch.
+
+* `(request_access)` – Request early access to your product.
+* `(request_access_success)` – Confirmation page after a request is submitted.
+
+### Error pages
 
-`(login)` - The sign in page
+Shown when a user encounters an error state.
 
-`(index)` - If someone visits the root domain for your business, e.g. `https://<yourdomain>.kinde.com`
+* `(account_locked)` – The user’s account has been locked.
+* `(account_not_found)` – No account was found for the entered credentials.
+* `(invalid_redirect_url)` – The redirect URL is invalid or not on the allowed list.
+* `(error)` – Generic error screen.
 
 If you want specific customization for a page not listed here, reach out and let us know.
 
-### Set the page default export function
+## Set the page default export function
 
 Your `page.[ext]` file should contain a default export. It doesn’t matter what this is called, but the general convention is to call it `Page`. This is provided a single `event` argument which is an object containing 2 keys `context` and `request`.
 
@@ -225,7 +293,7 @@ The top level `context` key object contains information about the page itself, l
         - `description` the page description
         - `logoAlt` the alt text for your company logo
 
-### Page settings
+## Page settings
 
 Sometimes additional information needs to be passed to Kinde from your page. You can use the page settings object for this.
 

src/content/docs/developer-tools/sdks/backend/typescript-sdk.mdx

@@ -482,41 +482,9 @@ After the user has successfully logged in, you will have a JSON Web Token (JWT)
 const accessToken = await kindeClient.getToken(sessionManager);
 ```
 
-## **Kinde Management API**
+## Kinde Management API
 
-The sections below relate to how to call the Kinde Management API. You need to [add a machine to machine application](/developer-tools/kinde-api/connect-to-kinde-api/) and [get an access token to connect](/developer-tools/kinde-api/connect-to-kinde-api/):
-
-```typescript
-import {
-  Configuration,
-  GrantType,
-  UsersApi,
-  createKindeServerClient
-} from "@kinde-oss/kinde-typescript-sdk";
-
-const kindeApiClient = createKindeServerClient(GrantType.CLIENT_CREDENTIALS, {
-  authDomain: "https://<your_kinde_subdomain>.kinde.com",
-  clientId: "<your_kinde_client_id>",
-  clientSecret: "<your_kinde_client_secret>",
-  logoutRedirectURL: "http://localhost:3000",
-  audience: "https://<your_kinde_subdomain>.kinde.com/api",
-  scope: ""
-});
-
-const token = await kindeApiClient.getToken(sessionManager);
-
-const config = new Configuration({
-  basePath: "https://<your_kinde_subdomain>.kinde.com",
-  accessToken: token,
-  headers: {Accept: "application/json"}
-});
-
-const apiInstance = new UsersApi(config);
-
-const result = await apiInstance.getUsers({
-  pageSize: 5
-});
-```
+To use our management API please see [@kinde/management-api-js](https://github.com/kinde-oss/management-api-js)
 
 ## **SDK API reference**
 

src/content/docs/get-started/switch-to-kinde/auth0-to-kinde.mdx

@@ -12,7 +12,7 @@ This guide is designed to help you migrate from Auth0 to Kinde.
 
 Switching between providers for any service can be daunting, and especially where user data is involved. We’ll walk you through the process or migrating, to take some of the pain away.
 
-If you’ve got a lot of users (your export file is over 5MB) or are concerned about file size limits, you can contact us to ensure the import goes smoothly.
+If you’ve got a lot of users (your export file is over 20MB) or are concerned about file size limits, you can contact us to ensure the import goes smoothly.
 
 ## Still not sure about moving to Kinde?
 
@@ -46,20 +46,32 @@ You'll now see it in your list of installed extensions. The first time you launc
 File format guidelines:
 
 - User details and passwords must be in NDJSON (Newline Delimited JSON) format
-- Import file size limit is 5MB. You may need to split the file if the exported size exceeds this.
+- Import file size limit is 20MB. You may need to split the file if the exported size exceeds this.
 
 ### Supported auth methods
 
 Kinde supports migrating the following authentication methods from Auth0: Usernames, Email, Phone, Google, Apple, Microsoft, Facebook, GitHub, Twitch, Bitbucket. If you need to migrate another authentication type from Auth0 please get in touch with support.
 
+Auth methods are shown in the `connection` attribute. These are represented as follows in the identity array:
+
+- Username-Password-Authentication
+- email
+- sms
+- google-oauth2
+- github
+- twitch
+- facebook
+- bitbucket
+- windowslive
+
 ### Can’t get the passwords from Auth0?
 
-Some Auth0 plans don’t allow password exports, or you might not want to wait 2 weeks for the json file. If this is the case, import the user data you’re able to, and Kinde will ask users to set a new password the next time they sign in.
+Some Auth0 plans don’t allow password exports, or you might not want to wait 2 weeks for the file. If this is the case, import the user data you’re able to, and Kinde will ask users to set a new password the next time they sign in.
 
 ### Export Auth0 data
 
 1. Launch the extension by selecting **Import / Export Extension.**
-2. **E**xport your existing Auth0 users associated with database connections, select **Export**.
+2. Export your existing Auth0 users associated with database connections, select **Export**.
 
    ![Auth0 export selections screen shot](https://imagedelivery.net/skPPZTHzSlcslvHjesZQcQ/0748f464-d46f-4455-20dc-8f1c677fbb00/public)
 
@@ -87,7 +99,8 @@ Once the password hashes have been imported, your users will be able to sign in
 
 ### How Auth0 user identities are treated on import
 
-Social identities without an email can be imported, and are identified by the identity type. You can import users with multiple identities, these will be listed under the user’s profile.
+Social identities without an email can be imported and are identified by the `connection` attribute.  
+You can also import users with multiple identities; these will be listed under the user’s profile.
 
 ## After the migration
 

src/content/docs/get-started/team-and-account/add-team-members.mdx

@@ -9,36 +9,40 @@ app_context:
 
 You can invite other team members and give them access to your business on Kinde.
 
-## Team member roles
+## Member roles
 
-We’ve kept team roles simple. There’s really only two for now:
+We’ve kept roles simple. There’s really only two for now:
 
 **Owner** - The person who creates the business in Kinde is automatically the Owner. They have the highest access level in the Kinde business. Only an owner can approve data export from Kinde.
 
 **Admin** - All other team members in Kinde are created as Admins. They have access to all Kinde features, except data export approval.
 
-## Add **a new team member**
+## Add a new member**
 
 Owners and Admins can add other Admins.
 
-Go to **Settings > Business > Team.** The **Team** page shows a list of all your team members.
-
-1. Select **Add team member**.
-2. In the window that appears, enter the team member’s details.
-3. Select **Save**. Your team member will receive an email with an invitation to join your business on Kinde. They can set up an account or sign in to an existing account.
+1. On the Kinde home page, select the avatar menu on the bottom left, and then select **Business settings**. 
+2. Select **Members** in the side menu.
+3. Select **Add member**.
+4. In the window that appears, enter the team member’s details.
+5. Select **Save**. Your team member will receive an email with an invitation to join your business on Kinde. They can set up an account or sign in to an existing account.
 
 ## Promote a team member to an Owner
 
 To promote someone to an Owner role in your business, you will need to contact [email protected] (from an Owner email) and request that the new team member be promoted to the role of Owner.
 
 ## **Revoke an invitation**
 
-1. Go to **Settings > Business > Team.** The **Team** page shows a list of all your invited members.
-2. Find the team member in the **Invited** list, select the three dots, then select **Revoke invitation**.
+1. On the Kinde home page, select the avatar menu on the bottom left, and then select **Business settings**. 
+2. Select **Members** in the side menu.
+3. Find the team member in the list, they will have a tage showing 'invited' next to their name. 
+4. Select the three dots, then select **Revoke invitation**.
 
 ## Delete **team member**
 
-Owners and Admins can delete other Admins. Only Kinde can delete Owners, and only on request.
+Owners and Admins can delete other Admins. Only Kinde can delete Owners, and only on request and verification.
 
-1. Go to **Settings > Business > Team.** The **Team** page shows a list of all your team members.
-2. Find the team member in the **Members** list, select the three dots, then select **Delete team member**.
+1. On the Kinde home page, select the avatar menu on the bottom left and then select **Business settings**. 
+2. Select **Members** in the side menu.
+3. Find the team member in the list, select the three dots, then select **Delete team member**.
+4. Confirm the deletion when prompted.