{
  "$id": "https://schemas.ory.sh/kratos/selfservice/strategy/password/login.schema.json",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "csrf_token": {
      "type": "string"
    },
    "provider": {
      "type": "string",
      "minLength": 1
    },
    "traits": {
      "description": "DO NOT DELETE THIS FIELD. This field will be overwritten in login.go's and registration.go's decoder() method. Do not add anything to this field as it has no effect."
    },
    "transient_payload": {
      "type": "object",
      "additionalProperties": true
    },
    "method": {
      "type": "string"
    },
    "upstream_parameters": {
      "type": "object",
      "$comment": "Only the defined parameters are allowed. This is to prevent users from sending arbitrary parameters or craft URLs that cause unexpected behavior.",
      "properties": {
        "hd": {
          "description": "The hd (hosted domain) parameter streamlines the login process for G Suite hosted accounts. By including the domain of the G Suite user (for example, mycollege.edu), you can indicate that the account selection UI should be optimized for accounts at that domain.",
          "type": "string"
        },
        "prompt": {
          "description": "The prompt specifies whether the Authorization Server prompts the End-User for reauthentication and consent (for example, select_account).",
          "type": "string"
        },
        "auth_type": {
          "description": "The `auth_type` parameter specifies the requested authentication features (as a comma-separated list).",
          "type": "string"
        },
        "acr_values": {
          "description": "The `acr_values` parameter specifies the Authentication Context Class Reference values for the authorization request.",
          "type": "string"
        },
        "additionalProperties": false
      }
    },
    "id_token": {
      "type": "string",
      "description": "An optional id token provided by an OIDC provider"
    },
    "id_token_nonce": {
      "type": "string",
      "description": "The nonce used when requesting the id_token from the provider. Required, if an id_token is given and the provider supports it."
    }
  }
}