Authentication and User Update properties

openapi/components/codeSamples/authentication.yaml

@@ -29,6 +29,13 @@
              -H "Content-Type: application/json" \
              -b "auth={authCookie}" \
              --data '{"code": "string"}'
+/auth/user/twofactorauth/otp:
+  get:
+    - lang: cURL
+      source: >-
+        curl -X GET "https://api.vrchat.cloud/api/1/auth/user/twofactorauth/otp" \
+             -H "Content-Type: application/json" \
+             -b "auth={authCookie}"
 /auth/twofactorauth/otp/verify:
   post:
     - lang: cURL

openapi/components/paths.yaml

@@ -10,6 +10,8 @@
   $ref: "./paths/authentication.yaml#/paths/~1auth~1user"
 "/auth/twofactorauth/totp/verify":
   $ref: "./paths/authentication.yaml#/paths/~1auth~1twofactorauth~1totp~1verify"
+"/auth/user/twofactorauth/otp":
+  $ref: "./paths/authentication.yaml#/paths/~1auth~1user~1twofactorauth~1otp"
 "/auth/twofactorauth/otp/verify":
   $ref: "./paths/authentication.yaml#/paths/~1auth~1twofactorauth~1otp~1verify"
 "/auth/twofactorauth/emailotp/verify":

openapi/components/paths/authentication.yaml

@@ -112,6 +112,22 @@ paths:
       security:
         - authCookie: []
       parameters: []
+  /auth/user/twofactorauth/otp:
+    get:
+      summary: Get 2FA Recovery codes
+      operationId: getRecoveryCodes
+      x-codeSamples:
+        $ref: "../codeSamples/authentication.yaml#/~1auth~1user~1twofactorauth~1otp/get"
+      responses:
+        '200':
+          $ref: ../responses/authentication/Get2FARecoveryCodesResponse.yaml
+        '401':
+          $ref: ../responses/MissingCredentialsError.yaml
+      description: Gets the OTP (One Time Password) recovery codes for accounts with 2FA-protection enabled.
+      tags:
+        - authentication
+      security:
+        - authCookie: []
   /auth/twofactorauth/otp/verify:
     post:
       summary: Verify 2FA code with Recovery code

openapi/components/paths/instances.yaml

@@ -71,7 +71,7 @@ paths:
       description: |-
         Close an instance or update the closedAt time when it will be closed.
 
-        You can only close an instance if the ownerId is yourself or if the instance owner is a group and you have the `group-instance-moderate` permission.
+        You can only close an instance if the ownerId is yourself or if the instance owner is a group and you have the `group-instance-manage` permission.
       responses:
         '200':
           $ref: ../responses/instances/InstanceResponse.yaml

openapi/components/paths/users.yaml

@@ -90,6 +90,8 @@ paths:
       responses:
         '200':
           $ref: ../responses/users/CurrentUserResponse.yaml
+        '400':
+          $ref: ../responses/users/CurrentPasswordRequiredError.yaml
         '401':
           $ref: ../responses/MissingCredentialsError.yaml
       description: Update a users information such as the email and birthday.

openapi/components/requests/UpdateUserRequest.yaml

@@ -3,6 +3,8 @@ type: object
 properties:
   email:
     type: string
+  unsubscribe:
+    type: boolean
   birthday:
     type: string
     format: date
@@ -35,3 +37,19 @@ properties:
     description: MUST be a valid VRChat /file/ url.
     example: 'https://api.vrchat.cloud/api/1/file/file_76dc2964-0ce8-41df-b2e7-8edf994fee31/1'
     minLength: 0
+  contentFilters:
+    description: These tags begin with `content_` and control content gating
+    type: array
+    items:
+      $ref: ../schemas/Tag.yaml
+  displayName:
+    description: MUST specify currentPassword as well to change display name
+    type: string
+  revertDisplayName:
+    description: MUST specify currentPassword as well to revert display name
+    type: boolean
+  password:
+    description: MUST specify currentPassword as well to change password
+    type: string
+  currentPassword:
+    type: string

openapi/components/responses/authentication/Get2FARecoveryCodesResponse.yaml

@@ -0,0 +1,5 @@
+description: Returns the two factor recovery codes
+content:
+  application/json:
+    schema:
+      $ref: ../../schemas/TwoFactorRecoveryCodes.yaml

openapi/components/responses/users/CurrentPasswordRequiredError.yaml

@@ -0,0 +1,5 @@
+description: Error response when a user attempts to change a property without supplying their current password.
+content:
+  application/json:
+    schema:
+      $ref: ../../schemas/Error.yaml

openapi/components/schemas/CurrentUser.yaml

@@ -42,6 +42,11 @@ properties:
     type: array  
     items:
       type: string
+  contentFilters:
+    description: These tags begin with `content_` and control content gating
+    type: array
+    items:
+      $ref: ./Tag.yaml
   currentAvatar:
     $ref: ./AvatarID.yaml
   currentAvatarImageUrl:

openapi/components/schemas/TwoFactorRecoveryCodes.yaml

@@ -0,0 +1,20 @@
+title: TwoFactorRecoveryCodes
+type: object
+properties:
+  requiresTwoFactorAuth:
+    type: array
+    items:
+      type: string
+  otp:
+    type: array
+    items:
+      type: object
+      required:
+        - code
+        - used
+      properties:
+        code:
+          type: string
+        used:
+          type: boolean
+