authlete 1.6.0 → 1.10.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (11) hide show
  1. checksums.yaml +5 -5
  2. data/authlete.gemspec +2 -2
  3. data/lib/authlete/model/client.rb +163 -145
  4. data/lib/authlete/model/hsk.rb +67 -0
  5. data/lib/authlete/model/service.rb +264 -219
  6. data/lib/authlete/version.rb +1 -1
  7. data/lib/authlete.rb +1 -0
  8. data/test/authlete/model/test_client.rb +416 -401
  9. data/test/authlete/model/test_hsk.rb +108 -0
  10. data/test/authlete/model/test_service.rb +511 -459
  11. metadata +14 -12
data/lib/authlete/model/service.rb CHANGED
@@ -445,232 +445,277 @@ module Authlete
445
445
  alias_method :token_expiration_linked, :tokenExpirationLinked
446
446
  alias_method :token_expiration_linked=, :tokenExpirationLinked=
447
447
 
448
+ attr_accessor :frontChannelRequestObjectEncryptionRequired
449
+ alias_method :front_channel_request_object_encryption_required, :frontChannelRequestObjectEncryptionRequired
450
+ alias_method :front_channel_request_object_encryption_required=, :frontChannelRequestObjectEncryptionRequired=
451
+
452
+ attr_accessor :requestObjectEncryptionAlgMatchRequired
453
+ alias_method :request_object_encryption_alg_match_required, :requestObjectEncryptionAlgMatchRequired
454
+ alias_method :request_object_encryption_alg_match_required=, :requestObjectEncryptionAlgMatchRequired=
455
+
456
+ attr_accessor :requestObjectEncryptionEncMatchRequired
457
+ alias_method :request_object_encryption_enc_match_required, :requestObjectEncryptionEncMatchRequired
458
+ alias_method :request_object_encryption_enc_match_required=, :requestObjectEncryptionEncMatchRequired=
459
+
460
+ attr_accessor :hsks
461
+
462
+ attr_accessor :hsmEnabled
463
+ alias_method :hsm_enabled, :hsmEnabled
464
+ alias_method :hsm_enabled=, :hsmEnabled=
465
+
466
+ attr_accessor :refreshTokenDurationReset
467
+ alias_method :refresh_token_duration_reset, :refreshTokenDurationReset
468
+ alias_method :refresh_token_duration_reset=, :refreshTokenDurationReset=
469
+
470
+ attr_accessor :grantManagementEndpoint
471
+ alias_method :grant_management_endpoint, :grantManagementEndpoint
472
+ alias_method :grant_management_endpoint=, :grantManagementEndpoint=
473
+
474
+ attr_accessor :grantManagementActionRequired
475
+ alias_method :grant_management_action_required, :grantManagementActionRequired
476
+ alias_method :grant_management_action_required=, :grantManagementActionRequired=
448
477
  private
449
478
 
450
479
  def defaults
451
480
  {
452
- number: 0,
453
- serviceOwnerNumber: 0,
454
- serviceName: nil,
455
- apiKey: 0,
456
- apiSecret: nil,
457
- issuer: nil,
458
- authorizationEndpoint: nil,
459
- tokenEndpoint: nil,
460
- revocationEndpoint: nil,
461
- supportedRevocationAuthMethods: nil,
462
- userInfoEndpoint: nil,
463
- jwksUri: nil,
464
- jwks: nil,
465
- registrationEndpoint: nil,
466
- registrationManagementEndpoint: nil,
467
- supportedScopes: nil,
468
- supportedResponseTypes: nil,
469
- supportedGrantTypes: nil,
470
- supportedAcrs: nil,
471
- supportedTokenAuthMethods: nil,
472
- supportedDisplays: nil,
473
- supportedClaimTypes: nil,
474
- supportedClaims: nil,
475
- serviceDocumentation: nil,
476
- supportedClaimLocales: nil,
477
- supportedUiLocales: nil,
478
- policyUri: nil,
479
- tosUri: nil,
480
- authenticationCallbackEndpoint: nil,
481
- authenticationCallbackApiKey: nil,
482
- authenticationCallbackApiSecret: nil,
483
- supportedSnses: nil,
484
- snsCredentials: nil,
485
- createdAt: 0,
486
- modifiedAt: 0,
487
- developerAuthenticationCallbackEndpoint: nil,
488
- developerAuthenticationCallbackApiKey: nil,
489
- developerAuthenticationCallbackApiSecret: nil,
490
- supportedDeveloperSnses: nil,
491
- developerSnsCredentials: nil,
492
- clientsPerDeveloper: 0,
493
- directAuthorizationEndpointEnabled: false,
494
- directTokenEndpointEnabled: false,
495
- directRevocationEndpointEnabled: false,
496
- directUserInfoEndpointEnabled: false,
497
- directJwksEndpointEnabled: false,
498
- directIntrospectionEndpointEnabled: false,
499
- singleAccessTokenPerSubject: false,
500
- pkceRequired: false,
501
- pkceS256Required: false,
502
- refreshTokenKept: false,
503
- refreshTokenDurationKept: false,
504
- errorDescriptionOmitted: false,
505
- errorUriOmitted: false,
506
- clientIdAliasEnabled: false,
507
- supportedServiceProfiles: nil,
508
- tlsClientCertificateBoundAccessTokens: false,
509
- introspectionEndpoint: nil,
510
- supportedIntrospectionAuthMethods: nil,
511
- mutualTlsValidatePkiCertChain: false,
512
- trustedRootCertificates: nil,
513
- dynamicRegistrationSupported: false,
514
- endSessionEndpoint: nil,
515
- description: nil,
516
- accessTokenType: nil,
517
- accessTokenSignAlg: nil,
518
- accessTokenDuration: 0,
519
- refreshTokenDuration: 0,
520
- idTokenDuration: 0,
521
- authorizationResponseDuration: 0,
522
- pushedAuthReqDuration: 0,
523
- metadata: nil,
524
- accessTokenSignatureKeyId: nil,
525
- authorizationSignatureKeyId: nil,
526
- idTokenSignatureKeyId: nil,
527
- userInfoSignatureKeyId: nil,
528
- supportedBackchannelTokenDeliveryModes: nil,
529
- backchannelAuthenticationEndpoint: nil,
530
- backchannelUserCodeParameterSupported: false,
531
- backchannelAuthReqIdDuration: 0,
532
- backchannelPollingInterval: 0,
533
- backchannelBindingMessageRequiredInFapi: false,
534
- allowableClockSkew: 0,
535
- deviceAuthorizationEndpoint: nil,
536
- deviceVerificationUri: nil,
537
- deviceVerificationUriComplete: nil,
538
- deviceFlowCodeDuration: 0,
539
- deviceFlowPollingInterval: 0,
540
- userCodeCharset: nil,
541
- userCodeLength: 0,
542
- pushedAuthReqEndpoint: nil,
543
- mtlsEndpointAliases: nil,
544
- supportedAuthorizationDetailsTypes: nil,
545
- supportedTrustFrameworks: nil,
546
- supportedEvidence: nil,
547
- supportedIdentityDocuments: nil,
548
- supportedVerificationMethods: nil,
549
- supportedVerifiedClaims: nil,
550
- missingClientIdAllowed: false,
551
- parRequired: false,
552
- requestObjectRequired: false,
553
- traditionalRequestObjectProcessingApplied: false,
554
- claimShortcutRestrictive: false,
555
- scopeRequired: false,
556
- nbfOptional: false,
557
- issSuppressed: false,
558
- attributes: nil,
559
- supportedCustomClientMetadata: nil,
560
- tokenExpirationLinked: false
481
+ number: 0,
482
+ serviceOwnerNumber: 0,
483
+ serviceName: nil,
484
+ apiKey: 0,
485
+ apiSecret: nil,
486
+ issuer: nil,
487
+ authorizationEndpoint: nil,
488
+ tokenEndpoint: nil,
489
+ revocationEndpoint: nil,
490
+ supportedRevocationAuthMethods: nil,
491
+ userInfoEndpoint: nil,
492
+ jwksUri: nil,
493
+ jwks: nil,
494
+ registrationEndpoint: nil,
495
+ registrationManagementEndpoint: nil,
496
+ supportedScopes: nil,
497
+ supportedResponseTypes: nil,
498
+ supportedGrantTypes: nil,
499
+ supportedAcrs: nil,
500
+ supportedTokenAuthMethods: nil,
501
+ supportedDisplays: nil,
502
+ supportedClaimTypes: nil,
503
+ supportedClaims: nil,
504
+ serviceDocumentation: nil,
505
+ supportedClaimLocales: nil,
506
+ supportedUiLocales: nil,
507
+ policyUri: nil,
508
+ tosUri: nil,
509
+ authenticationCallbackEndpoint: nil,
510
+ authenticationCallbackApiKey: nil,
511
+ authenticationCallbackApiSecret: nil,
512
+ supportedSnses: nil,
513
+ snsCredentials: nil,
514
+ createdAt: 0,
515
+ modifiedAt: 0,
516
+ developerAuthenticationCallbackEndpoint: nil,
517
+ developerAuthenticationCallbackApiKey: nil,
518
+ developerAuthenticationCallbackApiSecret: nil,
519
+ supportedDeveloperSnses: nil,
520
+ developerSnsCredentials: nil,
521
+ clientsPerDeveloper: 0,
522
+ directAuthorizationEndpointEnabled: false,
523
+ directTokenEndpointEnabled: false,
524
+ directRevocationEndpointEnabled: false,
525
+ directUserInfoEndpointEnabled: false,
526
+ directJwksEndpointEnabled: false,
527
+ directIntrospectionEndpointEnabled: false,
528
+ singleAccessTokenPerSubject: false,
529
+ pkceRequired: false,
530
+ pkceS256Required: false,
531
+ refreshTokenKept: false,
532
+ refreshTokenDurationKept: false,
533
+ errorDescriptionOmitted: false,
534
+ errorUriOmitted: false,
535
+ clientIdAliasEnabled: false,
536
+ supportedServiceProfiles: nil,
537
+ tlsClientCertificateBoundAccessTokens: false,
538
+ introspectionEndpoint: nil,
539
+ supportedIntrospectionAuthMethods: nil,
540
+ mutualTlsValidatePkiCertChain: false,
541
+ trustedRootCertificates: nil,
542
+ dynamicRegistrationSupported: false,
543
+ endSessionEndpoint: nil,
544
+ description: nil,
545
+ accessTokenType: nil,
546
+ accessTokenSignAlg: nil,
547
+ accessTokenDuration: 0,
548
+ refreshTokenDuration: 0,
549
+ idTokenDuration: 0,
550
+ authorizationResponseDuration: 0,
551
+ pushedAuthReqDuration: 0,
552
+ metadata: nil,
553
+ accessTokenSignatureKeyId: nil,
554
+ authorizationSignatureKeyId: nil,
555
+ idTokenSignatureKeyId: nil,
556
+ userInfoSignatureKeyId: nil,
557
+ supportedBackchannelTokenDeliveryModes: nil,
558
+ backchannelAuthenticationEndpoint: nil,
559
+ backchannelUserCodeParameterSupported: false,
560
+ backchannelAuthReqIdDuration: 0,
561
+ backchannelPollingInterval: 0,
562
+ backchannelBindingMessageRequiredInFapi: false,
563
+ allowableClockSkew: 0,
564
+ deviceAuthorizationEndpoint: nil,
565
+ deviceVerificationUri: nil,
566
+ deviceVerificationUriComplete: nil,
567
+ deviceFlowCodeDuration: 0,
568
+ deviceFlowPollingInterval: 0,
569
+ userCodeCharset: nil,
570
+ userCodeLength: 0,
571
+ pushedAuthReqEndpoint: nil,
572
+ mtlsEndpointAliases: nil,
573
+ supportedAuthorizationDetailsTypes: nil,
574
+ supportedTrustFrameworks: nil,
575
+ supportedEvidence: nil,
576
+ supportedIdentityDocuments: nil,
577
+ supportedVerificationMethods: nil,
578
+ supportedVerifiedClaims: nil,
579
+ missingClientIdAllowed: false,
580
+ parRequired: false,
581
+ requestObjectRequired: false,
582
+ traditionalRequestObjectProcessingApplied: false,
583
+ claimShortcutRestrictive: false,
584
+ scopeRequired: false,
585
+ nbfOptional: false,
586
+ issSuppressed: false,
587
+ attributes: nil,
588
+ supportedCustomClientMetadata: nil,
589
+ tokenExpirationLinked: false,
590
+ frontChannelRequestObjectEncryptionRequired: false,
591
+ requestObjectEncryptionAlgMatchRequired: false,
592
+ requestObjectEncryptionEncMatchRequired: false,
593
+ hsks: nil,
594
+ hsmEnabled: false,
595
+ refreshTokenDurationReset: false,
596
+ grantManagementEndpoint: nil,
597
+ grantManagementActionRequired: false,
561
598
  }
562
599
  end
563
600
 
564
601
  def set_params(hash)
565
- @number = hash[:number]
566
- @serviceOwnerNumber = hash[:serviceOwnerNumber]
567
- @serviceName = hash[:serviceName]
568
- @apiKey = hash[:apiKey]
569
- @apiSecret = hash[:apiSecret]
570
- @issuer = hash[:issuer]
571
- @authorizationEndpoint = hash[:authorizationEndpoint]
572
- @tokenEndpoint = hash[:tokenEndpoint]
573
- @revocationEndpoint = hash[:revocationEndpoint]
574
- @supportedRevocationAuthMethods = hash[:supportedRevocationAuthMethods]
575
- @userInfoEndpoint = hash[:userInfoEndpoint]
576
- @jwksUri = hash[:jwksUri]
577
- @jwks = hash[:jwks]
578
- @registrationEndpoint = hash[:registrationEndpoint]
579
- @registrationManagementEndpoint = hash[:registrationManagementEndpoint]
580
- @supportedScopes = get_parsed_array(hash[:supportedScopes]) { |e| Authlete::Model::Scope.parse(e) }
581
- @supportedResponseTypes = hash[:supportedResponseTypes]
582
- @supportedGrantTypes = hash[:supportedGrantTypes]
583
- @supportedAcrs = hash[:supportedAcrs]
584
- @supportedTokenAuthMethods = hash[:supportedTokenAuthMethods]
585
- @supportedDisplays = hash[:supportedDisplays]
586
- @supportedClaimTypes = hash[:supportedClaimTypes]
587
- @supportedClaims = hash[:supportedClaims]
588
- @serviceDocumentation = hash[:serviceDocumentation]
589
- @supportedClaimLocales = hash[:supportedClaimLocales]
590
- @supportedUiLocales = hash[:supportedUiLocales]
591
- @policyUri = hash[:policyUri]
592
- @tosUri = hash[:tosUri]
593
- @authenticationCallbackEndpoint = hash[:authenticationCallbackEndpoint]
594
- @authenticationCallbackApiKey = hash[:authenticationCallbackApiKey]
595
- @authenticationCallbackApiSecret = hash[:authenticationCallbackApiSecret]
596
- @supportedSnses = hash[:supportedSnses]
597
- @snsCredentials = get_parsed_array(hash[:snsCredentials]) { |e| Authlete::Model::SnsCredentials.parse(e) }
598
- @createdAt = hash[:createdAt]
599
- @modifiedAt = hash[:modifiedAt]
600
- @developerAuthenticationCallbackEndpoint = hash[:developerAuthenticationCallbackEndpoint]
601
- @developerAuthenticationCallbackApiKey = hash[:developerAuthenticationCallbackApiKey]
602
- @developerAuthenticationCallbackApiSecret = hash[:developerAuthenticationCallbackApiSecret]
603
- @supportedDeveloperSnses = hash[:supportedDeveloperSnses]
604
- @developerSnsCredentials = get_parsed_array(hash[:developerSnsCredentials]) { |e| Authlete::Model::SnsCredentials.parse(e) }
605
- @clientsPerDeveloper = hash[:clientsPerDeveloper]
606
- @directAuthorizationEndpointEnabled = hash[:directAuthorizationEndpointEnabled]
607
- @directTokenEndpointEnabled = hash[:directTokenEndpointEnabled]
608
- @directRevocationEndpointEnabled = hash[:directRevocationEndpointEnabled]
609
- @directUserInfoEndpointEnabled = hash[:directUserInfoEndpointEnabled]
610
- @directJwksEndpointEnabled = hash[:directJwksEndpointEnabled]
611
- @directIntrospectionEndpointEnabled = hash[:directIntrospectionEndpointEnabled]
612
- @singleAccessTokenPerSubject = hash[:singleAccessTokenPerSubject]
613
- @pkceRequired = hash[:pkceRequired]
614
- @pkceS256Required = hash[:pkceS256Required]
615
- @refreshTokenKept = hash[:refreshTokenKept]
616
- @refreshTokenDurationKept = hash[:refreshTokenDurationKept]
617
- @errorDescriptionOmitted = hash[:errorDescriptionOmitted]
618
- @errorUriOmitted = hash[:errorUriOmitted]
619
- @clientIdAliasEnabled = hash[:clientIdAliasEnabled]
620
- @supportedServiceProfiles = hash[:supportedServiceProfiles]
621
- @tlsClientCertificateBoundAccessTokens = hash[:tlsClientCertificateBoundAccessTokens]
622
- @introspectionEndpoint = hash[:introspectionEndpoint]
623
- @supportedIntrospectionAuthMethods = hash[:supportedIntrospectionAuthMethods]
624
- @mutualTlsValidatePkiCertChain = hash[:mutualTlsValidatePkiCertChain]
625
- @trustedRootCertificates = hash[:trustedRootCertificates]
626
- @dynamicRegistrationSupported = hash[:dynamicRegistrationSupported]
627
- @endSessionEndpoint = hash[:endSessionEndpoint]
628
- @description = hash[:description]
629
- @accessTokenType = hash[:accessTokenType]
630
- @accessTokenSignAlg = hash[:accessTokenSignAlg]
631
- @accessTokenDuration = hash[:accessTokenDuration]
632
- @refreshTokenDuration = hash[:refreshTokenDuration]
633
- @idTokenDuration = hash[:idTokenDuration]
634
- @authorizationResponseDuration = hash[:authorizationResponseDuration]
635
- @pushedAuthReqDuration = hash[:pushedAuthReqDuration]
636
- @metadata = get_parsed_array(hash[:metadata]) { |e| Authlete::Model::Pair.parse(e) }
637
- @accessTokenSignatureKeyId = hash[:accessTokenSignatureKeyId]
638
- @authorizationSignatureKeyId = hash[:authorizationSignatureKeyId]
639
- @idTokenSignatureKeyId = hash[:idTokenSignatureKeyId]
640
- @userInfoSignatureKeyId = hash[:userInfoSignatureKeyId]
641
- @supportedBackchannelTokenDeliveryModes = hash[:supportedBackchannelTokenDeliveryModes]
642
- @backchannelAuthenticationEndpoint = hash[:backchannelAuthenticationEndpoint]
643
- @backchannelUserCodeParameterSupported = hash[:backchannelUserCodeParameterSupported]
644
- @backchannelAuthReqIdDuration = hash[:backchannelAuthReqIdDuration]
645
- @backchannelPollingInterval = hash[:backchannelPollingInterval]
646
- @backchannelBindingMessageRequiredInFapi = hash[:backchannelBindingMessageRequiredInFapi]
647
- @allowableClockSkew = hash[:allowableClockSkew]
648
- @deviceAuthorizationEndpoint = hash[:deviceAuthorizationEndpoint]
649
- @deviceVerificationUri = hash[:deviceVerificationUri]
650
- @deviceVerificationUriComplete = hash[:deviceVerificationUriComplete]
651
- @deviceFlowCodeDuration = hash[:deviceFlowCodeDuration]
652
- @deviceFlowPollingInterval = hash[:deviceFlowPollingInterval]
653
- @userCodeCharset = hash[:userCodeCharset]
654
- @userCodeLength = hash[:userCodeLength]
655
- @pushedAuthReqEndpoint = hash[:pushedAuthReqEndpoint]
656
- @mtlsEndpointAliases = get_parsed_array(hash[:mtlsEndpointAliases]) { |e| Authlete::Model::NamedUri.parse(e) }
657
- @supportedAuthorizationDetailsTypes = hash[:supportedAuthorizationDetailsTypes]
658
- @supportedTrustFrameworks = hash[:supportedTrustFrameworks]
659
- @supportedEvidence = hash[:supportedEvidence]
660
- @supportedIdentityDocuments = hash[:supportedIdentityDocuments]
661
- @supportedVerificationMethods = hash[:supportedVerificationMethods]
662
- @supportedVerifiedClaims = hash[:supportedVerifiedClaims]
663
- @missingClientIdAllowed = hash[:missingClientIdAllowed]
664
- @parRequired = hash[:parRequired]
665
- @requestObjectRequired = hash[:requestObjectRequired]
666
- @traditionalRequestObjectProcessingApplied = hash[:traditionalRequestObjectProcessingApplied]
667
- @claimShortcutRestrictive = hash[:claimShortcutRestrictive]
668
- @scopeRequired = hash[:scopeRequired]
669
- @nbfOptional = hash[:nbfOptional]
670
- @issSuppressed = hash[:issSuppressed]
671
- @attributes = get_parsed_array(hash[:attributes]) { |e| Authlete::Model::Pair.parse(e) }
672
- @supportedCustomClientMetadata = hash[:supportedCustomClientMetadata]
673
- @tokenExpirationLinked = hash[:tokenExpirationLinked]
602
+ @number = hash[:number]
603
+ @serviceOwnerNumber = hash[:serviceOwnerNumber]
604
+ @serviceName = hash[:serviceName]
605
+ @apiKey = hash[:apiKey]
606
+ @apiSecret = hash[:apiSecret]
607
+ @issuer = hash[:issuer]
608
+ @authorizationEndpoint = hash[:authorizationEndpoint]
609
+ @tokenEndpoint = hash[:tokenEndpoint]
610
+ @revocationEndpoint = hash[:revocationEndpoint]
611
+ @supportedRevocationAuthMethods = hash[:supportedRevocationAuthMethods]
612
+ @userInfoEndpoint = hash[:userInfoEndpoint]
613
+ @jwksUri = hash[:jwksUri]
614
+ @jwks = hash[:jwks]
615
+ @registrationEndpoint = hash[:registrationEndpoint]
616
+ @registrationManagementEndpoint = hash[:registrationManagementEndpoint]
617
+ @supportedScopes = get_parsed_array(hash[:supportedScopes]) { |e| Authlete::Model::Scope.parse(e) }
618
+ @supportedResponseTypes = hash[:supportedResponseTypes]
619
+ @supportedGrantTypes = hash[:supportedGrantTypes]
620
+ @supportedAcrs = hash[:supportedAcrs]
621
+ @supportedTokenAuthMethods = hash[:supportedTokenAuthMethods]
622
+ @supportedDisplays = hash[:supportedDisplays]
623
+ @supportedClaimTypes = hash[:supportedClaimTypes]
624
+ @supportedClaims = hash[:supportedClaims]
625
+ @serviceDocumentation = hash[:serviceDocumentation]
626
+ @supportedClaimLocales = hash[:supportedClaimLocales]
627
+ @supportedUiLocales = hash[:supportedUiLocales]
628
+ @policyUri = hash[:policyUri]
629
+ @tosUri = hash[:tosUri]
630
+ @authenticationCallbackEndpoint = hash[:authenticationCallbackEndpoint]
631
+ @authenticationCallbackApiKey = hash[:authenticationCallbackApiKey]
632
+ @authenticationCallbackApiSecret = hash[:authenticationCallbackApiSecret]
633
+ @supportedSnses = hash[:supportedSnses]
634
+ @snsCredentials = get_parsed_array(hash[:snsCredentials]) { |e| Authlete::Model::SnsCredentials.parse(e) }
635
+ @createdAt = hash[:createdAt]
636
+ @modifiedAt = hash[:modifiedAt]
637
+ @developerAuthenticationCallbackEndpoint = hash[:developerAuthenticationCallbackEndpoint]
638
+ @developerAuthenticationCallbackApiKey = hash[:developerAuthenticationCallbackApiKey]
639
+ @developerAuthenticationCallbackApiSecret = hash[:developerAuthenticationCallbackApiSecret]
640
+ @supportedDeveloperSnses = hash[:supportedDeveloperSnses]
641
+ @developerSnsCredentials = get_parsed_array(hash[:developerSnsCredentials]) { |e| Authlete::Model::SnsCredentials.parse(e) }
642
+ @clientsPerDeveloper = hash[:clientsPerDeveloper]
643
+ @directAuthorizationEndpointEnabled = hash[:directAuthorizationEndpointEnabled]
644
+ @directTokenEndpointEnabled = hash[:directTokenEndpointEnabled]
645
+ @directRevocationEndpointEnabled = hash[:directRevocationEndpointEnabled]
646
+ @directUserInfoEndpointEnabled = hash[:directUserInfoEndpointEnabled]
647
+ @directJwksEndpointEnabled = hash[:directJwksEndpointEnabled]
648
+ @directIntrospectionEndpointEnabled = hash[:directIntrospectionEndpointEnabled]
649
+ @singleAccessTokenPerSubject = hash[:singleAccessTokenPerSubject]
650
+ @pkceRequired = hash[:pkceRequired]
651
+ @pkceS256Required = hash[:pkceS256Required]
652
+ @refreshTokenKept = hash[:refreshTokenKept]
653
+ @refreshTokenDurationKept = hash[:refreshTokenDurationKept]
654
+ @errorDescriptionOmitted = hash[:errorDescriptionOmitted]
655
+ @errorUriOmitted = hash[:errorUriOmitted]
656
+ @clientIdAliasEnabled = hash[:clientIdAliasEnabled]
657
+ @supportedServiceProfiles = hash[:supportedServiceProfiles]
658
+ @tlsClientCertificateBoundAccessTokens = hash[:tlsClientCertificateBoundAccessTokens]
659
+ @introspectionEndpoint = hash[:introspectionEndpoint]
660
+ @supportedIntrospectionAuthMethods = hash[:supportedIntrospectionAuthMethods]
661
+ @mutualTlsValidatePkiCertChain = hash[:mutualTlsValidatePkiCertChain]
662
+ @trustedRootCertificates = hash[:trustedRootCertificates]
663
+ @dynamicRegistrationSupported = hash[:dynamicRegistrationSupported]
664
+ @endSessionEndpoint = hash[:endSessionEndpoint]
665
+ @description = hash[:description]
666
+ @accessTokenType = hash[:accessTokenType]
667
+ @accessTokenSignAlg = hash[:accessTokenSignAlg]
668
+ @accessTokenDuration = hash[:accessTokenDuration]
669
+ @refreshTokenDuration = hash[:refreshTokenDuration]
670
+ @idTokenDuration = hash[:idTokenDuration]
671
+ @authorizationResponseDuration = hash[:authorizationResponseDuration]
672
+ @pushedAuthReqDuration = hash[:pushedAuthReqDuration]
673
+ @metadata = get_parsed_array(hash[:metadata]) { |e| Authlete::Model::Pair.parse(e) }
674
+ @accessTokenSignatureKeyId = hash[:accessTokenSignatureKeyId]
675
+ @authorizationSignatureKeyId = hash[:authorizationSignatureKeyId]
676
+ @idTokenSignatureKeyId = hash[:idTokenSignatureKeyId]
677
+ @userInfoSignatureKeyId = hash[:userInfoSignatureKeyId]
678
+ @supportedBackchannelTokenDeliveryModes = hash[:supportedBackchannelTokenDeliveryModes]
679
+ @backchannelAuthenticationEndpoint = hash[:backchannelAuthenticationEndpoint]
680
+ @backchannelUserCodeParameterSupported = hash[:backchannelUserCodeParameterSupported]
681
+ @backchannelAuthReqIdDuration = hash[:backchannelAuthReqIdDuration]
682
+ @backchannelPollingInterval = hash[:backchannelPollingInterval]
683
+ @backchannelBindingMessageRequiredInFapi = hash[:backchannelBindingMessageRequiredInFapi]
684
+ @allowableClockSkew = hash[:allowableClockSkew]
685
+ @deviceAuthorizationEndpoint = hash[:deviceAuthorizationEndpoint]
686
+ @deviceVerificationUri = hash[:deviceVerificationUri]
687
+ @deviceVerificationUriComplete = hash[:deviceVerificationUriComplete]
688
+ @deviceFlowCodeDuration = hash[:deviceFlowCodeDuration]
689
+ @deviceFlowPollingInterval = hash[:deviceFlowPollingInterval]
690
+ @userCodeCharset = hash[:userCodeCharset]
691
+ @userCodeLength = hash[:userCodeLength]
692
+ @pushedAuthReqEndpoint = hash[:pushedAuthReqEndpoint]
693
+ @mtlsEndpointAliases = get_parsed_array(hash[:mtlsEndpointAliases]) { |e| Authlete::Model::NamedUri.parse(e) }
694
+ @supportedAuthorizationDetailsTypes = hash[:supportedAuthorizationDetailsTypes]
695
+ @supportedTrustFrameworks = hash[:supportedTrustFrameworks]
696
+ @supportedEvidence = hash[:supportedEvidence]
697
+ @supportedIdentityDocuments = hash[:supportedIdentityDocuments]
698
+ @supportedVerificationMethods = hash[:supportedVerificationMethods]
699
+ @supportedVerifiedClaims = hash[:supportedVerifiedClaims]
700
+ @missingClientIdAllowed = hash[:missingClientIdAllowed]
701
+ @parRequired = hash[:parRequired]
702
+ @requestObjectRequired = hash[:requestObjectRequired]
703
+ @traditionalRequestObjectProcessingApplied = hash[:traditionalRequestObjectProcessingApplied]
704
+ @claimShortcutRestrictive = hash[:claimShortcutRestrictive]
705
+ @scopeRequired = hash[:scopeRequired]
706
+ @nbfOptional = hash[:nbfOptional]
707
+ @issSuppressed = hash[:issSuppressed]
708
+ @attributes = get_parsed_array(hash[:attributes]) { |e| Authlete::Model::Pair.parse(e) }
709
+ @supportedCustomClientMetadata = hash[:supportedCustomClientMetadata]
710
+ @tokenExpirationLinked = hash[:tokenExpirationLinked]
711
+ @frontChannelRequestObjectEncryptionRequired = hash[:frontChannelRequestObjectEncryptionRequired]
712
+ @requestObjectEncryptionAlgMatchRequired = hash[:requestObjectEncryptionAlgMatchRequired]
713
+ @requestObjectEncryptionEncMatchRequired = hash[:requestObjectEncryptionEncMatchRequired]
714
+ @hsks = get_parsed_array(hash[:hsks]) { |e| Authlete::Model::Hsk.parse(e) }
715
+ @hsmEnabled = hash[:hsmEnabled]
716
+ @refreshTokenDurationReset = hash[:refreshTokenDurationReset]
717
+ @grantManagementEndpoint = hash[:grantManagementEndpoint]
718
+ @grantManagementActionRequired = hash[:grantManagementActionRequired]
674
719
  end
675
720
 
676
721
  def to_hash_value(key, var)
@@ -678,7 +723,7 @@ module Authlete
678
723
 
679
724
  case key
680
725
  when :snsCredentials, :developerSnsCredentials, :supportedScopes,
681
- :metadata, :mtlsEndpointAliases, :attributes
726
+ :metadata, :mtlsEndpointAliases, :attributes, :hsks
682
727
  raw_val&.map { |e| e.to_hash }
683
728
  else
684
729
  raw_val
data/lib/authlete/version.rb CHANGED
@@ -16,5 +16,5 @@
16
16
 
17
17
 
18
18
  module Authlete
19
- VERSION = "1.6.0"
19
+ VERSION = "1.10.0"
20
20
  end
data/lib/authlete.rb CHANGED
@@ -39,6 +39,7 @@ module Authlete
39
39
  autoload :SnsCredentials, 'authlete/model/sns-credentials'
40
40
  autoload :TaggedValue, 'authlete/model/tagged-value'
41
41
  autoload :NamedUri, 'authlete/model/named-uri'
42
+ autoload :Hsk, 'authlete/model/hsk'
42
43
 
43
44
  module Request
44
45
  autoload :AuthenticationCallbackRequest, 'authlete/model/request/authentication-callback-request'