1Password Events Sign In Attempt Structure

{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/1password/refs/heads/main/json-structure/1password-events-sign-in-attempt-structure.json",
  "name": "SignInAttempt",
  "description": "Represents a single sign-in attempt to a 1Password account.",
  "type": "object",
  "properties": {
    "uuid": {
      "type": "uuid",
      "description": "The unique identifier for the sign-in attempt."
    },
    "session_uuid": {
      "type": "uuid",
      "description": "The UUID of the session associated with the sign-in attempt."
    },
    "timestamp": {
      "type": "datetime",
      "description": "When the sign-in attempt occurred."
    },
    "category": {
      "type": "string",
      "description": "The category of the sign-in attempt.",
      "enum": [
        "success",
        "credentials_failed",
        "mfa_failed",
        "modern_version_required",
        "sso_failed"
      ]
    },
    "type": {
      "type": "string",
      "description": "The type of sign-in method used.",
      "enum": [
        "credentials_ok",
        "mfa_ok",
        "password_secret_bad",
        "mfa_missing",
        "totp_disabled",
        "totp_bad",
        "u2f_failed",
        "duo_failed",
        "duo_native_failed",
        "sso_failed"
      ]
    },
    "country": {
      "type": "string",
      "description": "The two-letter ISO country code of the sign-in location.",
      "minLength": 2,
      "maxLength": 2
    },
    "target_user": {
      "$ref": "#/components/schemas/EventUser"
    },
    "client": {
      "$ref": "#/components/schemas/EventClient"
    }
  }
}