userBehaviors property in LogSecurityContext has incorrect type

[duttkin]

Describe the bug?

A MismatchedInputException was caused by a discrepancy between the Okta Java SDK's data model and the actual JSON response from the Okta API. Specifically, the SDK expected userBehaviors (within
LogSecurityContext) to be a list of strings, but the Okta API is currently returning them as a list of objects. This triggered a deserialization failure in Jackson.

What is expected to happen?

Jackson should not throw an exception

What is the actual behavior?

Unable to pull log events since a MismatchedInputException is thrown

Reproduction Steps?

Request logs for an event with LogSecurityContext. For example "eventType eq "inline_hook.executed" and outcome.result eq "FAILURE"" where you had a failure.

Example code:
`systemLogApi.listLogEventsPaged(
OffsetDateTime.now().toLocalDate().atStartOfDay().atOffset(OffsetDateTime.now().offset),
OffsetDateTime.now().toString(),
null,
"eventType eq "inline_hook.executed" and outcome.result eq "FAILURE"",
null,
null,
"ASCENDING"
)

oktaLogEvents.forEach{}`

Additional Information?

No response

Java Version

openjdk version "25.0.2" 2026-01-20
OpenJDK Runtime Environment Homebrew (build 25.0.2)
OpenJDK 64-Bit Server VM Homebrew (build 25.0.2, mixed mode, sharing)

SDK Version

25.0.3

OS version

Darwin JX96X779VQ 25.4.0 Darwin Kernel Version 25.4.0: Thu Mar 19 19:33:25 PDT 2026; root:xnu-12377.101.15~1/RELEASE_ARM64_T6041 arm64

[azdrenymeri]

I'm having the same issue, mismatch type of userBehaviors.

[prachi-okta]

Hi, thanks for reporting. We will take a look.

[prachi-okta]

Thanks for the report, @duttkin and @azdrenymeri!

The userBehaviors array in LogSecurityContext was missing an items type in our OpenAPI spec, causing the generator to produce List<String> instead of List<Object>. Fix is in , will ship in v25.0.4.