authlete_ruby_sdk 0.0.2.beta → 0.0.5.pre.beta
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/authlete/authorization.rb +24 -563
- data/lib/authlete/authorization_management.rb +15 -7
- data/lib/authlete/ciba.rb +35 -414
- data/lib/authlete/client.rb +4 -2
- data/lib/authlete/client_management.rb +1292 -95
- data/lib/authlete/clients.rb +47 -27
- data/lib/authlete/device_flow.rb +24 -147
- data/lib/authlete/dynamic_client_registration.rb +31 -283
- data/lib/authlete/federation.rb +17 -66
- data/lib/authlete/grant_management.rb +10 -5
- data/lib/authlete/hardware_security_keys.rb +24 -10
- data/lib/authlete/introspection.rb +17 -195
- data/lib/authlete/jose_object.rb +10 -5
- data/lib/authlete/jwk_set_endpoint.rb +24 -7
- data/lib/authlete/lifecycle.rb +151 -0
- data/lib/authlete/models/components/access_token.rb +9 -10
- data/lib/authlete/models/components/access_token.rbi +1 -1
- data/lib/authlete/models/components/application_type.rb +1 -4
- data/lib/authlete/models/components/application_type.rbi +1 -1
- data/lib/authlete/models/components/attachment_type.rb +1 -4
- data/lib/authlete/models/components/attachment_type.rbi +1 -1
- data/lib/authlete/models/components/authorization_details_element.rb +16 -17
- data/lib/authlete/models/components/authorization_details_element.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_request.rb +4 -5
- data/lib/authlete/models/components/authorization_fail_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_request_reason.rb +1 -4
- data/lib/authlete/models/components/authorization_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_response.rb +2 -3
- data/lib/authlete/models/components/authorization_fail_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_response_action.rb +0 -3
- data/lib/authlete/models/components/authorization_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_request.rb +19 -84
- data/lib/authlete/models/components/authorization_issue_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_response.rb +8 -9
- data/lib/authlete/models/components/authorization_issue_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_response_action.rb +0 -3
- data/lib/authlete/models/components/authorization_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_request.rb +7 -8
- data/lib/authlete/models/components/authorization_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_response.rb +86 -186
- data/lib/authlete/models/components/authorization_response.rbi +1 -3
- data/lib/authlete/models/components/authorization_response_action.rb +0 -3
- data/lib/authlete/models/components/authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info.rb +1 -2
- data/lib/authlete/models/components/authorization_ticket_info.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_request.rb +0 -1
- data/lib/authlete/models/components/authorization_ticket_info_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_response.rb +1 -2
- data/lib/authlete/models/components/authorization_ticket_info_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_response_action.rb +0 -3
- data/lib/authlete/models/components/authorization_ticket_info_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_request.rb +0 -1
- data/lib/authlete/models/components/authorization_ticket_update_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_response.rb +4 -5
- data/lib/authlete/models/components/authorization_ticket_update_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_response_action.rb +0 -3
- data/lib/authlete/models/components/authorization_ticket_update_response_action.rbi +1 -1
- data/lib/authlete/models/components/authz_details.rb +2 -3
- data/lib/authlete/models/components/authz_details.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_request.rb +23 -24
- data/lib/authlete/models/components/backchannel_authentication_complete_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_request_result.rb +1 -4
- data/lib/authlete/models/components/backchannel_authentication_complete_request_result.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_response.rb +30 -31
- data/lib/authlete/models/components/backchannel_authentication_complete_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_response_action.rb +1 -4
- data/lib/authlete/models/components/backchannel_authentication_complete_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_request.rb +5 -6
- data/lib/authlete/models/components/backchannel_authentication_fail_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_request_reason.rb +1 -4
- data/lib/authlete/models/components/backchannel_authentication_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_response.rb +2 -3
- data/lib/authlete/models/components/backchannel_authentication_fail_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_response_action.rb +0 -3
- data/lib/authlete/models/components/backchannel_authentication_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_request.rb +1 -2
- data/lib/authlete/models/components/backchannel_authentication_issue_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_response.rb +5 -6
- data/lib/authlete/models/components/backchannel_authentication_issue_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_response_action.rb +0 -3
- data/lib/authlete/models/components/backchannel_authentication_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_request.rb +12 -13
- data/lib/authlete/models/components/backchannel_authentication_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_response.rb +47 -57
- data/lib/authlete/models/components/backchannel_authentication_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_response_action.rb +0 -3
- data/lib/authlete/models/components/backchannel_authentication_response_action.rbi +1 -1
- data/lib/authlete/models/components/cimd_options.rb +15 -16
- data/lib/authlete/models/components/cimd_options.rbi +1 -1
- data/lib/authlete/models/components/claim_type.rb +0 -3
- data/lib/authlete/models/components/claim_type.rbi +1 -1
- data/lib/authlete/models/components/client.rb +160 -310
- data/lib/authlete/models/components/client.rbi +1 -1
- data/lib/authlete/models/components/client_auth_method.rb +1 -4
- data/lib/authlete/models/components/client_auth_method.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_delete_response.rb +4 -5
- data/lib/authlete/models/components/client_authorization_delete_response.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_get_list_request.rb +44 -0
- data/lib/authlete/models/components/client_authorization_get_list_request.rbi +19 -0
- data/lib/authlete/models/components/client_authorization_get_list_response.rb +6 -7
- data/lib/authlete/models/components/client_authorization_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_update_request.rb +2 -3
- data/lib/authlete/models/components/client_authorization_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_update_response.rb +0 -1
- data/lib/authlete/models/components/client_authorization_update_response.rbi +1 -1
- data/lib/authlete/models/components/{clientsource.rb → client_clientsource.rb} +3 -6
- data/lib/authlete/models/components/client_clientsource.rbi +11 -0
- data/lib/authlete/models/components/client_extension.rb +9 -20
- data/lib/authlete/models/components/client_extension.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_get_response.rb +2 -2
- data/lib/authlete/models/components/client_extension_requestable_scopes_get_response.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_request.rb +4 -5
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_response.rb +0 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_flag_update_request.rb +1 -2
- data/lib/authlete/models/components/client_flag_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_flag_update_response.rb +0 -1
- data/lib/authlete/models/components/client_flag_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_get_list_response.rb +4 -5
- data/lib/authlete/models/components/client_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/client_granted_scopes_delete_response.rb +0 -1
- data/lib/authlete/models/components/client_granted_scopes_delete_response.rbi +1 -1
- data/lib/authlete/models/components/client_input.rb +155 -295
- data/lib/authlete/models/components/client_input.rbi +1 -1
- data/lib/authlete/models/components/client_limited.rb +7 -8
- data/lib/authlete/models/components/client_limited.rbi +1 -1
- data/lib/authlete/models/components/client_limited_authorization.rb +217 -20
- data/lib/authlete/models/components/client_limited_authorization.rbi +65 -1
- data/lib/authlete/models/components/client_limited_authorization_clientsource.rb +23 -0
- data/lib/authlete/models/components/client_limited_authorization_clientsource.rbi +11 -0
- data/lib/authlete/models/components/client_registration_response.rb +3 -4
- data/lib/authlete/models/components/client_registration_response.rbi +1 -1
- data/lib/authlete/models/components/client_registration_response_action.rb +1 -4
- data/lib/authlete/models/components/client_registration_response_action.rbi +1 -1
- data/lib/authlete/models/components/client_registration_type.rb +1 -4
- data/lib/authlete/models/components/client_registration_type.rbi +1 -1
- data/lib/authlete/models/components/client_secret_refresh_response.rb +2 -3
- data/lib/authlete/models/components/client_secret_refresh_response.rbi +1 -1
- data/lib/authlete/models/components/client_secret_update_request.rb +1 -2
- data/lib/authlete/models/components/client_secret_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_secret_update_response.rb +2 -3
- data/lib/authlete/models/components/client_secret_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_type.rb +1 -4
- data/lib/authlete/models/components/client_type.rbi +1 -1
- data/lib/authlete/models/components/credential_issuance_order.rb +1 -2
- data/lib/authlete/models/components/credential_issuance_order.rbi +1 -1
- data/lib/authlete/models/components/credential_issuer_metadata.rb +5 -6
- data/lib/authlete/models/components/credential_issuer_metadata.rbi +1 -1
- data/lib/authlete/models/components/credential_offer_info.rb +12 -21
- data/lib/authlete/models/components/credential_offer_info.rbi +1 -1
- data/lib/authlete/models/components/credential_request_info.rb +0 -1
- data/lib/authlete/models/components/credential_request_info.rbi +1 -1
- data/lib/authlete/models/components/delivery_mode.rb +0 -3
- data/lib/authlete/models/components/delivery_mode.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_request.rb +12 -13
- data/lib/authlete/models/components/device_authorization_request.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_response.rb +39 -49
- data/lib/authlete/models/components/device_authorization_response.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_response_action.rb +0 -3
- data/lib/authlete/models/components/device_authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/device_complete_request.rb +22 -23
- data/lib/authlete/models/components/device_complete_request.rbi +1 -1
- data/lib/authlete/models/components/device_complete_request_result.rb +1 -4
- data/lib/authlete/models/components/device_complete_request_result.rbi +1 -1
- data/lib/authlete/models/components/device_complete_response.rb +2 -3
- data/lib/authlete/models/components/device_complete_response.rbi +1 -1
- data/lib/authlete/models/components/device_complete_response_action.rb +1 -4
- data/lib/authlete/models/components/device_complete_response_action.rbi +1 -1
- data/lib/authlete/models/components/device_verification_request.rb +1 -2
- data/lib/authlete/models/components/device_verification_request.rbi +1 -1
- data/lib/authlete/models/components/device_verification_response.rb +32 -33
- data/lib/authlete/models/components/device_verification_response.rbi +1 -1
- data/lib/authlete/models/components/device_verification_response_action.rb +0 -3
- data/lib/authlete/models/components/device_verification_response_action.rbi +1 -1
- data/lib/authlete/models/components/display.rb +3 -6
- data/lib/authlete/models/components/display.rbi +1 -1
- data/lib/authlete/models/components/dynamic_scope.rb +0 -1
- data/lib/authlete/models/components/dynamic_scope.rbi +1 -1
- data/lib/authlete/models/components/fapi_mode.rb +0 -3
- data/lib/authlete/models/components/fapi_mode.rbi +1 -1
- data/lib/authlete/models/components/federation_configuration_response.rb +2 -3
- data/lib/authlete/models/components/federation_configuration_response.rbi +1 -1
- data/lib/authlete/models/components/federation_configuration_response_action.rb +0 -3
- data/lib/authlete/models/components/federation_configuration_response_action.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_request.rb +2 -3
- data/lib/authlete/models/components/federation_registration_request.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_response.rb +2 -3
- data/lib/authlete/models/components/federation_registration_response.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_response_action.rb +0 -3
- data/lib/authlete/models/components/federation_registration_response_action.rbi +1 -1
- data/lib/authlete/models/components/g_m_request.rb +13 -14
- data/lib/authlete/models/components/g_m_request.rbi +1 -1
- data/lib/authlete/models/components/g_m_response.rb +3 -4
- data/lib/authlete/models/components/g_m_response.rbi +1 -1
- data/lib/authlete/models/components/g_m_response_action.rb +0 -3
- data/lib/authlete/models/components/g_m_response_action.rbi +1 -1
- data/lib/authlete/models/components/grant.rb +2 -3
- data/lib/authlete/models/components/grant.rbi +1 -1
- data/lib/authlete/models/components/grant_management_action.rb +2 -5
- data/lib/authlete/models/components/grant_management_action.rbi +1 -1
- data/lib/authlete/models/components/grant_scope.rb +2 -3
- data/lib/authlete/models/components/grant_scope.rbi +1 -1
- data/lib/authlete/models/components/grant_type.rb +1 -4
- data/lib/authlete/models/components/grant_type.rbi +1 -1
- data/lib/authlete/models/components/hsk.rb +8 -9
- data/lib/authlete/models/components/hsk.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_request.rb +6 -7
- data/lib/authlete/models/components/hsk_create_request.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_response.rb +2 -3
- data/lib/authlete/models/components/hsk_create_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_response_action.rb +0 -3
- data/lib/authlete/models/components/hsk_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_delete_response.rb +2 -3
- data/lib/authlete/models/components/hsk_delete_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_delete_response_action.rb +0 -3
- data/lib/authlete/models/components/hsk_delete_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_list_response.rb +1 -2
- data/lib/authlete/models/components/hsk_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_list_response_action.rb +0 -3
- data/lib/authlete/models/components/hsk_get_list_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_response.rb +2 -3
- data/lib/authlete/models/components/hsk_get_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_response_action.rb +0 -3
- data/lib/authlete/models/components/hsk_get_response_action.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_request.rb +7 -8
- data/lib/authlete/models/components/idtoken_reissue_request.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_response.rb +3 -4
- data/lib/authlete/models/components/idtoken_reissue_response.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_response_action.rb +0 -3
- data/lib/authlete/models/components/idtoken_reissue_response_action.rbi +1 -1
- data/lib/authlete/models/components/introspection_request.rb +24 -41
- data/lib/authlete/models/components/introspection_request.rbi +1 -1
- data/lib/authlete/models/components/introspection_response.rb +36 -46
- data/lib/authlete/models/components/introspection_response.rbi +1 -1
- data/lib/authlete/models/components/introspection_response_action.rb +0 -3
- data/lib/authlete/models/components/introspection_response_action.rbi +1 -1
- data/lib/authlete/models/components/jose_verify_request.rb +5 -6
- data/lib/authlete/models/components/jose_verify_request.rbi +1 -1
- data/lib/authlete/models/components/jose_verify_response.rb +5 -6
- data/lib/authlete/models/components/jose_verify_response.rbi +1 -1
- data/lib/authlete/models/components/jwe_alg.rb +2 -5
- data/lib/authlete/models/components/jwe_alg.rbi +1 -1
- data/lib/authlete/models/components/jwe_enc.rb +1 -4
- data/lib/authlete/models/components/jwe_enc.rbi +1 -1
- data/lib/authlete/models/components/jws_alg.rb +2 -5
- data/lib/authlete/models/components/jws_alg.rbi +1 -1
- data/lib/authlete/models/components/named_uri.rb +0 -1
- data/lib/authlete/models/components/named_uri.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_request.rb +1 -2
- data/lib/authlete/models/components/native_sso_logout_request.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_response.rb +3 -4
- data/lib/authlete/models/components/native_sso_logout_response.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_response_action.rb +1 -4
- data/lib/authlete/models/components/native_sso_logout_response_action.rbi +1 -1
- data/lib/authlete/models/components/native_sso_request.rb +8 -25
- data/lib/authlete/models/components/native_sso_request.rbi +1 -1
- data/lib/authlete/models/components/native_sso_response.rb +4 -5
- data/lib/authlete/models/components/native_sso_response.rbi +1 -1
- data/lib/authlete/models/components/native_sso_response_action.rb +1 -4
- data/lib/authlete/models/components/native_sso_response_action.rbi +1 -1
- data/lib/authlete/models/components/pair.rb +0 -1
- data/lib/authlete/models/components/pair.rbi +1 -1
- data/lib/authlete/models/components/prompt.rb +3 -6
- data/lib/authlete/models/components/prompt.rbi +1 -1
- data/lib/authlete/models/components/property.rb +1 -2
- data/lib/authlete/models/components/property.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_request.rb +11 -12
- data/lib/authlete/models/components/pushed_authorization_request.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response.rb +6 -7
- data/lib/authlete/models/components/pushed_authorization_response.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response_action.rb +0 -3
- data/lib/authlete/models/components/pushed_authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response_clientauthmethod.rb +2 -4
- data/lib/authlete/models/components/pushed_authorization_response_clientauthmethod.rbi +1 -1
- data/lib/authlete/models/components/response_type.rb +0 -3
- data/lib/authlete/models/components/response_type.rbi +1 -1
- data/lib/authlete/models/components/responsemode.rb +0 -3
- data/lib/authlete/models/components/responsemode.rbi +1 -1
- data/lib/authlete/models/components/revocation_request.rb +10 -11
- data/lib/authlete/models/components/revocation_request.rbi +1 -1
- data/lib/authlete/models/components/revocation_response.rb +2 -3
- data/lib/authlete/models/components/revocation_response.rbi +1 -1
- data/lib/authlete/models/components/revocation_response_action.rb +0 -3
- data/lib/authlete/models/components/revocation_response_action.rbi +1 -1
- data/lib/authlete/models/components/scope.rb +0 -1
- data/lib/authlete/models/components/scope.rbi +1 -1
- data/lib/authlete/models/components/security.rb +3 -4
- data/lib/authlete/models/components/security.rbi +1 -1
- data/lib/authlete/models/components/service.rb +248 -600
- data/lib/authlete/models/components/service.rbi +1 -1
- data/lib/authlete/models/components/service_get_list_response.rb +4 -5
- data/lib/authlete/models/components/service_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/service_input.rb +242 -594
- data/lib/authlete/models/components/service_input.rbi +1 -1
- data/lib/authlete/models/components/service_jwks_get_response.rb +0 -1
- data/lib/authlete/models/components/service_jwks_get_response.rbi +1 -1
- data/lib/authlete/models/components/service_profile.rb +0 -3
- data/lib/authlete/models/components/service_profile.rbi +1 -1
- data/lib/authlete/models/components/sns_credentials.rb +0 -1
- data/lib/authlete/models/components/sns_credentials.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_request.rb +22 -23
- data/lib/authlete/models/components/standard_introspection_request.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_response.rb +2 -3
- data/lib/authlete/models/components/standard_introspection_response.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_response_action.rb +1 -3
- data/lib/authlete/models/components/standard_introspection_response_action.rbi +1 -1
- data/lib/authlete/models/components/subject_type.rb +2 -5
- data/lib/authlete/models/components/subject_type.rbi +1 -1
- data/lib/authlete/models/components/supportedsnse.rb +0 -3
- data/lib/authlete/models/components/supportedsnse.rbi +1 -1
- data/lib/authlete/models/components/tagged_value.rb +0 -1
- data/lib/authlete/models/components/tagged_value.rbi +1 -1
- data/lib/authlete/models/components/token_create_request.rb +30 -63
- data/lib/authlete/models/components/token_create_request.rbi +1 -1
- data/lib/authlete/models/components/token_create_response.rb +18 -19
- data/lib/authlete/models/components/token_create_response.rbi +1 -1
- data/lib/authlete/models/components/token_create_response_action.rb +0 -3
- data/lib/authlete/models/components/token_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_fail_request.rb +3 -4
- data/lib/authlete/models/components/token_fail_request.rbi +1 -1
- data/lib/authlete/models/components/token_fail_request_reason.rb +1 -4
- data/lib/authlete/models/components/token_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/token_fail_response.rb +2 -3
- data/lib/authlete/models/components/token_fail_response.rbi +1 -1
- data/lib/authlete/models/components/token_fail_response_action.rb +0 -3
- data/lib/authlete/models/components/token_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_get_list_response.rb +5 -6
- data/lib/authlete/models/components/token_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/token_info.rb +8 -9
- data/lib/authlete/models/components/token_info.rbi +1 -1
- data/lib/authlete/models/components/token_issue_request.rb +9 -10
- data/lib/authlete/models/components/token_issue_request.rbi +1 -1
- data/lib/authlete/models/components/token_issue_response.rb +21 -22
- data/lib/authlete/models/components/token_issue_response.rbi +1 -1
- data/lib/authlete/models/components/token_issue_response_action.rb +0 -3
- data/lib/authlete/models/components/token_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_request.rb +27 -28
- data/lib/authlete/models/components/token_request.rbi +1 -1
- data/lib/authlete/models/components/token_response.rb +55 -63
- data/lib/authlete/models/components/token_response.rbi +3 -1
- data/lib/authlete/models/components/token_response_action.rb +2 -3
- data/lib/authlete/models/components/token_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_revoke_request.rb +7 -8
- data/lib/authlete/models/components/token_revoke_request.rbi +1 -1
- data/lib/authlete/models/components/token_revoke_response.rb +0 -1
- data/lib/authlete/models/components/token_revoke_response.rbi +1 -1
- data/lib/authlete/models/components/token_type.rb +1 -4
- data/lib/authlete/models/components/token_type.rbi +1 -1
- data/lib/authlete/models/components/token_update_request.rb +19 -20
- data/lib/authlete/models/components/token_update_request.rbi +1 -1
- data/lib/authlete/models/components/token_update_response.rb +9 -10
- data/lib/authlete/models/components/token_update_response.rbi +1 -1
- data/lib/authlete/models/components/token_update_response_action.rb +0 -3
- data/lib/authlete/models/components/token_update_response_action.rbi +1 -1
- data/lib/authlete/models/components/trust_anchor.rb +2 -3
- data/lib/authlete/models/components/trust_anchor.rbi +1 -1
- data/lib/authlete/models/components/user_code_charset.rb +1 -4
- data/lib/authlete/models/components/user_code_charset.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_request.rb +7 -68
- data/lib/authlete/models/components/userinfo_issue_request.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_response.rb +5 -6
- data/lib/authlete/models/components/userinfo_issue_response.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_response_action.rb +0 -3
- data/lib/authlete/models/components/userinfo_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/userinfo_request.rb +15 -41
- data/lib/authlete/models/components/userinfo_request.rbi +1 -1
- data/lib/authlete/models/components/userinfo_response.rb +46 -90
- data/lib/authlete/models/components/userinfo_response.rbi +1 -1
- data/lib/authlete/models/components/userinfo_response_action.rb +0 -3
- data/lib/authlete/models/components/userinfo_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_request.rb +0 -1
- data/lib/authlete/models/components/vci_batch_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_response.rb +3 -4
- data/lib/authlete/models/components/vci_batch_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_response_action.rb +1 -4
- data/lib/authlete/models/components/vci_batch_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_request.rb +0 -1
- data/lib/authlete/models/components/vci_batch_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_response.rb +2 -3
- data/lib/authlete/models/components/vci_batch_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_response_action.rb +0 -3
- data/lib/authlete/models/components/vci_batch_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_request.rb +0 -1
- data/lib/authlete/models/components/vci_deferred_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_response.rb +3 -4
- data/lib/authlete/models/components/vci_deferred_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_response_action.rb +1 -4
- data/lib/authlete/models/components/vci_deferred_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_request.rb +0 -1
- data/lib/authlete/models/components/vci_deferred_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_response.rb +1 -2
- data/lib/authlete/models/components/vci_deferred_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_response_action.rb +0 -3
- data/lib/authlete/models/components/vci_deferred_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_request.rb +1 -2
- data/lib/authlete/models/components/vci_jwks_request.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_response.rb +3 -4
- data/lib/authlete/models/components/vci_jwks_response.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_response_action.rb +1 -4
- data/lib/authlete/models/components/vci_jwks_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_request.rb +1 -2
- data/lib/authlete/models/components/vci_jwtissuer_request.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_response.rb +3 -4
- data/lib/authlete/models/components/vci_jwtissuer_response.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_response_action.rb +1 -4
- data/lib/authlete/models/components/vci_jwtissuer_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_request.rb +1 -2
- data/lib/authlete/models/components/vci_metadata_request.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_response.rb +3 -4
- data/lib/authlete/models/components/vci_metadata_response.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_response_action.rb +1 -4
- data/lib/authlete/models/components/vci_metadata_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_request.rb +10 -80
- data/lib/authlete/models/components/vci_offer_create_request.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_response.rb +1 -2
- data/lib/authlete/models/components/vci_offer_create_response.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_response_action.rb +0 -3
- data/lib/authlete/models/components/vci_offer_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_request.rb +0 -1
- data/lib/authlete/models/components/vci_offer_info_request.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_response.rb +1 -2
- data/lib/authlete/models/components/vci_offer_info_response.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_response_action.rb +0 -3
- data/lib/authlete/models/components/vci_offer_info_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_request.rb +0 -1
- data/lib/authlete/models/components/vci_single_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_response.rb +4 -5
- data/lib/authlete/models/components/vci_single_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_response_action.rb +1 -4
- data/lib/authlete/models/components/vci_single_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_request.rb +0 -1
- data/lib/authlete/models/components/vci_single_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_response.rb +1 -2
- data/lib/authlete/models/components/vci_single_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_response_action.rb +0 -3
- data/lib/authlete/models/components/vci_single_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/verified_claims_validation_schema.rb +1 -4
- data/lib/authlete/models/components/verified_claims_validation_schema.rbi +1 -1
- data/lib/authlete/models/components.rb +3 -1
- data/lib/authlete/models/errors/apierror.rbi +2 -1
- data/lib/authlete/models/errors/result_error.rb +0 -1
- data/lib/authlete/models/errors/result_error.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_api_request.rb +0 -1
- data/lib/authlete/models/operations/auth_authorization_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_authorization_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_fail_api_request.rb +0 -1
- data/lib/authlete/models/operations/auth_authorization_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_fail_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_authorization_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_issue_api_request.rb +0 -1
- data/lib/authlete/models/operations/auth_authorization_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_issue_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_authorization_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_api_request.rb +0 -1
- data/lib/authlete/models/operations/auth_introspection_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_introspection_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_standard_api_request.rb +0 -1
- data/lib/authlete/models/operations/auth_introspection_standard_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_standard_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_introspection_standard_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_revocation_api_request.rb +0 -1
- data/lib/authlete/models/operations/auth_revocation_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_revocation_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_revocation_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_api_request.rb +0 -1
- data/lib/authlete/models/operations/auth_token_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_token_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_create_api_request.rb +0 -1
- data/lib/authlete/models/operations/auth_token_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_create_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_token_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_delete_api_request.rb +1 -2
- data/lib/authlete/models/operations/auth_token_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_delete_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_token_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_fail_api_request.rb +0 -1
- data/lib/authlete/models/operations/auth_token_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_fail_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_token_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_get_list_api_request.rb +3 -4
- data/lib/authlete/models/operations/auth_token_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_get_list_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_token_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_issue_api_request.rb +0 -1
- data/lib/authlete/models/operations/auth_token_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_issue_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_token_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_revoke_api_request.rb +0 -1
- data/lib/authlete/models/operations/auth_token_revoke_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_revoke_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_token_revoke_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_update_api_request.rb +0 -1
- data/lib/authlete/models/operations/auth_token_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_update_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_token_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_api_request.rb +0 -1
- data/lib/authlete/models/operations/auth_userinfo_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_userinfo_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_issue_api_request.rb +0 -1
- data/lib/authlete/models/operations/auth_userinfo_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_issue_api_response.rb +0 -1
- data/lib/authlete/models/operations/auth_userinfo_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/authorization_ticket_info_post_api_request.rb +0 -1
- data/lib/authlete/models/operations/authorization_ticket_info_post_api_request.rbi +1 -1
- data/lib/authlete/models/operations/authorization_ticket_info_post_api_response.rb +0 -1
- data/lib/authlete/models/operations/authorization_ticket_info_post_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_api_request.rb +0 -1
- data/lib/authlete/models/operations/backchannel_authentication_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_api_response.rb +0 -1
- data/lib/authlete/models/operations/backchannel_authentication_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_complete_api_request.rb +0 -1
- data/lib/authlete/models/operations/backchannel_authentication_complete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_complete_api_response.rb +0 -1
- data/lib/authlete/models/operations/backchannel_authentication_complete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_fail_api_request.rb +0 -1
- data/lib/authlete/models/operations/backchannel_authentication_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_fail_api_response.rb +0 -1
- data/lib/authlete/models/operations/backchannel_authentication_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_issue_api_request.rb +0 -1
- data/lib/authlete/models/operations/backchannel_authentication_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_issue_api_response.rb +0 -1
- data/lib/authlete/models/operations/backchannel_authentication_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_request.rb +41 -0
- data/lib/authlete/models/operations/client_authorization_delete_api_post_request.rbi +17 -0
- data/lib/authlete/models/operations/client_authorization_delete_api_post_requestbody.rb +32 -0
- data/lib/authlete/models/operations/client_authorization_delete_api_post_requestbody.rbi +13 -0
- data/lib/authlete/models/operations/client_authorization_delete_api_post_response.rb +44 -0
- data/lib/authlete/models/operations/client_authorization_delete_api_post_response.rbi +19 -0
- data/lib/authlete/models/operations/client_authorization_delete_api_request.rb +7 -13
- data/lib/authlete/models/operations/client_authorization_delete_api_request.rbi +3 -5
- data/lib/authlete/models/operations/client_authorization_delete_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_request.rb +42 -0
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_request.rbi +17 -0
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_response.rb +44 -0
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_response.rbi +19 -0
- data/lib/authlete/models/operations/client_authorization_get_list_api_post_request.rb +36 -0
- data/lib/authlete/models/operations/client_authorization_get_list_api_post_request.rbi +15 -0
- data/lib/authlete/models/operations/client_authorization_get_list_api_post_response.rb +44 -0
- data/lib/authlete/models/operations/client_authorization_get_list_api_post_response.rbi +19 -0
- data/lib/authlete/models/operations/client_authorization_get_list_api_request.rb +8 -14
- data/lib/authlete/models/operations/client_authorization_get_list_api_request.rbi +3 -5
- data/lib/authlete/models/operations/client_authorization_get_list_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_request.rb +51 -0
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_request.rbi +21 -0
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_response.rb +44 -0
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_response.rbi +19 -0
- data/lib/authlete/models/operations/client_authorization_update_api_request.rb +1 -2
- data/lib/authlete/models/operations/client_authorization_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_update_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_authorization_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_create_api_request.rb +0 -1
- data/lib/authlete/models/operations/client_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_create_api_response.rb +1 -2
- data/lib/authlete/models/operations/client_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_delete_api_request.rb +0 -1
- data/lib/authlete/models/operations/client_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_delete_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_request.rb +1 -2
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_request.rb +1 -2
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_request.rb +41 -0
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_request.rbi +17 -0
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_response.rb +44 -0
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_response.rbi +19 -0
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_request.rb +1 -2
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_flag_update_api_request.rb +0 -1
- data/lib/authlete/models/operations/client_flag_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_flag_update_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_flag_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_get_api_request.rb +0 -1
- data/lib/authlete/models/operations/client_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_get_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_get_list_api_request.rb +1 -2
- data/lib/authlete/models/operations/client_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_get_list_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_request.rb +7 -13
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_request.rbi +3 -5
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_request.rb +42 -0
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_request.rbi +17 -0
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_response.rb +44 -0
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_response.rbi +19 -0
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_request.rb +41 -0
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_request.rbi +17 -0
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_requestbody.rb +32 -0
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_requestbody.rbi +13 -0
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_response.rb +44 -0
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_response.rbi +19 -0
- data/lib/authlete/models/operations/client_granted_scopes_get_api_request.rb +7 -13
- data/lib/authlete/models/operations/client_granted_scopes_get_api_request.rbi +3 -5
- data/lib/authlete/models/operations/client_granted_scopes_get_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_request.rb +42 -0
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_request.rbi +17 -0
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_response.rb +44 -0
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_response.rbi +19 -0
- data/lib/authlete/models/operations/client_registration_api_request.rb +0 -1
- data/lib/authlete/models/operations/client_registration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_api_requestbody.rb +3 -4
- data/lib/authlete/models/operations/client_registration_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_registration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_request.rb +0 -1
- data/lib/authlete/models/operations/client_registration_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_requestbody.rb +3 -4
- data/lib/authlete/models/operations/client_registration_delete_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_registration_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_request.rb +0 -1
- data/lib/authlete/models/operations/client_registration_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_requestbody.rb +3 -4
- data/lib/authlete/models/operations/client_registration_get_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_registration_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_request.rb +0 -1
- data/lib/authlete/models/operations/client_registration_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_requestbody.rb +3 -4
- data/lib/authlete/models/operations/client_registration_update_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_registration_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_request.rb +1 -2
- data/lib/authlete/models/operations/client_secret_refresh_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_update_api_request.rb +1 -2
- data/lib/authlete/models/operations/client_secret_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_update_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_secret_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_form_request.rb +0 -1
- data/lib/authlete/models/operations/client_update_api_form_request.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_form_response.rb +0 -1
- data/lib/authlete/models/operations/client_update_api_form_response.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_request.rb +0 -1
- data/lib/authlete/models/operations/client_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_response.rb +0 -1
- data/lib/authlete/models/operations/client_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_authorization_api_request.rb +0 -1
- data/lib/authlete/models/operations/device_authorization_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_authorization_api_response.rb +0 -1
- data/lib/authlete/models/operations/device_authorization_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_complete_api_request.rb +0 -1
- data/lib/authlete/models/operations/device_complete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_complete_api_response.rb +0 -1
- data/lib/authlete/models/operations/device_complete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_verification_api_request.rb +0 -1
- data/lib/authlete/models/operations/device_verification_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_verification_api_response.rb +0 -1
- data/lib/authlete/models/operations/device_verification_api_response.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_request.rb +0 -1
- data/lib/authlete/models/operations/federation_configuration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_requestbody.rb +0 -1
- data/lib/authlete/models/operations/federation_configuration_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_response.rb +0 -1
- data/lib/authlete/models/operations/federation_configuration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/federation_registration_api_request.rb +0 -1
- data/lib/authlete/models/operations/federation_registration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/federation_registration_api_response.rb +0 -1
- data/lib/authlete/models/operations/federation_registration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_request.rb +33 -0
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_request.rbi +13 -0
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_response.rb +44 -0
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_response.rbi +19 -0
- data/lib/authlete/models/operations/grant_m_api_request.rb +0 -1
- data/lib/authlete/models/operations/grant_m_api_request.rbi +1 -1
- data/lib/authlete/models/operations/grant_m_api_response.rb +0 -1
- data/lib/authlete/models/operations/grant_m_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_create_api_request.rb +0 -1
- data/lib/authlete/models/operations/hsk_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_create_api_response.rb +0 -1
- data/lib/authlete/models/operations/hsk_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_delete_api_request.rb +0 -1
- data/lib/authlete/models/operations/hsk_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_delete_api_response.rb +0 -1
- data/lib/authlete/models/operations/hsk_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_api_request.rb +0 -1
- data/lib/authlete/models/operations/hsk_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_api_response.rb +0 -1
- data/lib/authlete/models/operations/hsk_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_list_api_request.rb +0 -1
- data/lib/authlete/models/operations/hsk_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_list_api_response.rb +0 -1
- data/lib/authlete/models/operations/hsk_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/idtoken_reissue_api_request.rb +0 -1
- data/lib/authlete/models/operations/idtoken_reissue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/idtoken_reissue_api_response.rb +0 -1
- data/lib/authlete/models/operations/idtoken_reissue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/jose_verify_api_request.rb +0 -1
- data/lib/authlete/models/operations/jose_verify_api_request.rbi +1 -1
- data/lib/authlete/models/operations/jose_verify_api_response.rb +0 -1
- data/lib/authlete/models/operations/jose_verify_api_response.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_api_request.rb +0 -1
- data/lib/authlete/models/operations/native_sso_api_request.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_api_response.rb +0 -1
- data/lib/authlete/models/operations/native_sso_api_response.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_logout_api_request.rb +0 -1
- data/lib/authlete/models/operations/native_sso_logout_api_request.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_logout_api_response.rb +0 -1
- data/lib/authlete/models/operations/native_sso_logout_api_response.rbi +1 -1
- data/lib/authlete/models/operations/pushed_auth_req_api_request.rb +0 -1
- data/lib/authlete/models/operations/pushed_auth_req_api_request.rbi +1 -1
- data/lib/authlete/models/operations/pushed_auth_req_api_response.rb +0 -1
- data/lib/authlete/models/operations/pushed_auth_req_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_configuration_api_request.rb +0 -1
- data/lib/authlete/models/operations/service_configuration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_configuration_api_response.rb +0 -1
- data/lib/authlete/models/operations/service_configuration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_create_api_response.rb +1 -2
- data/lib/authlete/models/operations/service_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_delete_api_request.rb +0 -1
- data/lib/authlete/models/operations/service_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_delete_api_response.rb +0 -1
- data/lib/authlete/models/operations/service_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_get_api_request.rb +0 -1
- data/lib/authlete/models/operations/service_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_get_api_response.rb +0 -1
- data/lib/authlete/models/operations/service_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_get_list_api_request.rb +0 -1
- data/lib/authlete/models/operations/service_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_get_list_api_response.rb +0 -1
- data/lib/authlete/models/operations/service_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_jwks_get_api_request.rb +0 -1
- data/lib/authlete/models/operations/service_jwks_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_jwks_get_api_response.rb +0 -1
- data/lib/authlete/models/operations/service_jwks_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_update_api_request.rb +0 -1
- data/lib/authlete/models/operations/service_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_update_api_response.rb +0 -1
- data/lib/authlete/models/operations/service_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/updateauthorizationticket_request.rb +0 -1
- data/lib/authlete/models/operations/updateauthorizationticket_request.rbi +1 -1
- data/lib/authlete/models/operations/updateauthorizationticket_response.rb +0 -1
- data/lib/authlete/models/operations/updateauthorizationticket_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_issue_api_request.rb +0 -1
- data/lib/authlete/models/operations/vci_batch_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_issue_api_response.rb +0 -1
- data/lib/authlete/models/operations/vci_batch_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_parse_api_request.rb +0 -1
- data/lib/authlete/models/operations/vci_batch_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_parse_api_response.rb +0 -1
- data/lib/authlete/models/operations/vci_batch_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_issue_api_request.rb +0 -1
- data/lib/authlete/models/operations/vci_deferred_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_issue_api_response.rb +0 -1
- data/lib/authlete/models/operations/vci_deferred_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_parse_api_request.rb +0 -1
- data/lib/authlete/models/operations/vci_deferred_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_parse_api_response.rb +0 -1
- data/lib/authlete/models/operations/vci_deferred_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwks_api_request.rb +0 -1
- data/lib/authlete/models/operations/vci_jwks_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwks_api_response.rb +0 -1
- data/lib/authlete/models/operations/vci_jwks_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwtissuer_api_request.rb +0 -1
- data/lib/authlete/models/operations/vci_jwtissuer_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwtissuer_api_response.rb +0 -1
- data/lib/authlete/models/operations/vci_jwtissuer_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_metadata_api_request.rb +0 -1
- data/lib/authlete/models/operations/vci_metadata_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_metadata_api_response.rb +0 -1
- data/lib/authlete/models/operations/vci_metadata_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_create_api_request.rb +0 -1
- data/lib/authlete/models/operations/vci_offer_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_create_api_response.rb +0 -1
- data/lib/authlete/models/operations/vci_offer_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_info_api_request.rb +0 -1
- data/lib/authlete/models/operations/vci_offer_info_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_info_api_response.rb +0 -1
- data/lib/authlete/models/operations/vci_offer_info_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_issue_api_request.rb +0 -1
- data/lib/authlete/models/operations/vci_single_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_issue_api_response.rb +0 -1
- data/lib/authlete/models/operations/vci_single_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_parse_api_request.rb +0 -1
- data/lib/authlete/models/operations/vci_single_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_parse_api_response.rb +0 -1
- data/lib/authlete/models/operations/vci_single_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations.rb +20 -0
- data/lib/authlete/native_sso.rb +17 -69
- data/lib/authlete/pushed_authorization.rb +10 -5
- data/lib/authlete/revocation.rb +10 -98
- data/lib/authlete/sdkconfiguration.rb +3 -3
- data/lib/authlete/services.rb +48 -28
- data/lib/authlete/token_management.rb +44 -24
- data/lib/authlete/tokens.rb +24 -454
- data/lib/authlete/userinfo.rb +17 -224
- data/lib/authlete/utils/request_bodies.rb +8 -3
- data/lib/authlete/utils/security.rb +10 -0
- data/lib/authlete/utils/url.rb +11 -5
- data/lib/authlete/utils/utils.rb +45 -3
- data/lib/authlete/verifiable_credentials.rb +69 -34
- data/lib/authlete_ruby_sdk.rb +1 -0
- data/lib/crystalline/enum.rbi +17 -0
- data/lib/crystalline/metadata_fields.rb +85 -22
- data/lib/crystalline/module.rb +99 -13
- data/lib/crystalline/types.rb +90 -3
- metadata +66 -6
- data/lib/authlete/models/components/clientsource.rbi +0 -11
|
@@ -7,7 +7,6 @@
|
|
|
7
7
|
module Authlete
|
|
8
8
|
module Models
|
|
9
9
|
module Components
|
|
10
|
-
|
|
11
10
|
|
|
12
11
|
class AuthorizationResponse
|
|
13
12
|
extend T::Sig
|
|
@@ -18,27 +17,27 @@ module Authlete
|
|
|
18
17
|
# A short message which explains the result of the API call.
|
|
19
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
20
19
|
# The next action that the authorization server implementation should take.
|
|
21
|
-
field :action, Crystalline::Nilable.new(Models::Components::AuthorizationResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::AuthorizationResponseAction, true) } }
|
|
20
|
+
field :action, Crystalline::Nilable.new(Models::Components::AuthorizationResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::AuthorizationResponseAction, true) } }
|
|
22
21
|
|
|
23
22
|
field :client, Crystalline::Nilable.new(Models::Components::ClientLimitedAuthorization), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('client') } }
|
|
24
23
|
# The display mode which the client application requests by `display` request parameter.
|
|
25
24
|
# When the authorization request does not have `display` request parameter, `PAGE` is set as the default value.
|
|
26
|
-
#
|
|
25
|
+
#
|
|
27
26
|
# It is ensured that the value of `display` is one of the supported display modes which are specified
|
|
28
27
|
# by `supportedDisplays` configuration parameter of the service. If the display mode specified by the
|
|
29
28
|
# authorization request is not supported, an error is raised.
|
|
30
|
-
#
|
|
29
|
+
#
|
|
31
30
|
# Values for this property correspond to the values listed in
|
|
32
31
|
# "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), display".
|
|
33
|
-
#
|
|
34
|
-
field :display, Crystalline::Nilable.new(Models::Components::Display), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('display'), 'decoder': Utils.enum_from_string(Models::Components::Display, true) } }
|
|
32
|
+
#
|
|
33
|
+
field :display, Crystalline::Nilable.new(Models::Components::Display), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('display'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::Display, true) } }
|
|
35
34
|
# The maximum authentication age. This value comes from `max_age` request parameter, or `defaultMaxAge` configuration parameter
|
|
36
35
|
# of the client application when the authorization request does not contain `max_age` request parameter.
|
|
37
|
-
#
|
|
36
|
+
#
|
|
38
37
|
# See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), max_age"
|
|
39
38
|
# for `max_age` request parameter, and see "[OpenID Connect Dynamic Client Registration 1.0, 2. Client Metadata](https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata), default_max_age"
|
|
40
39
|
# for `defaultMaxAge` configuration parameter.
|
|
41
|
-
#
|
|
40
|
+
#
|
|
42
41
|
field :max_age, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('maxAge') } }
|
|
43
42
|
|
|
44
43
|
field :service, Crystalline::Nilable.new(Models::Components::Service), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('service') } }
|
|
@@ -52,225 +51,142 @@ module Authlete
|
|
|
52
51
|
# OpenID Connect defines some scope names which need to be treated specially. The table below lists the special scope names.
|
|
53
52
|
# | Name | Description |
|
|
54
53
|
# | --- | --- |
|
|
55
|
-
# | `openid` | This scope must be contained in `scope` request parameter to promote an OAuth 2.0 authorization request to an OpenID Connect request. It is described in "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-
|
|
56
|
-
# | `profile` | This scope is used to request some claims to be embedded in the ID token. The claims are `name`, `
|
|
57
|
-
# | `email` | This scope is used to request some claims to be embedded in the ID token. The claims are `email` and `
|
|
58
|
-
# | `address` | This scope is used to request `address` claim to be embedded in the ID token. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-
|
|
59
|
-
# The format of `address` claim is not a simple string. It is described in [OpenID Connect Core 1.0, 5.1.1. Address Claim](https://openid.net/specs/openid-connect-core-
|
|
60
|
-
# | `phone` | This scope is used to request some claims to be embedded in the ID token. The claims are `
|
|
61
|
-
# | `
|
|
54
|
+
# | `openid` | This scope must be contained in `scope` request parameter to promote an OAuth 2.0 authorization request to an OpenID Connect request. It is described in "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), scope". |
|
|
55
|
+
# | `profile` | This scope is used to request some claims to be embedded in the ID token. The claims are `name`, `family_name`, `given_name`, `middle_name`, `nickname`, `preferred_username`, `profile`, `picture`, `website`, `gender`, `birthdate`, `zoneinfo`, `locale`, and `updated_at`. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims). |
|
|
56
|
+
# | `email` | This scope is used to request some claims to be embedded in the ID token. The claims are `email` and `email_verified`. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims). |
|
|
57
|
+
# | `address` | This scope is used to request `address` claim to be embedded in the ID token. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims).
|
|
58
|
+
# The format of `address` claim is not a simple string. It is described in [OpenID Connect Core 1.0, 5.1.1. Address Claim](https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim). |
|
|
59
|
+
# | `phone` | This scope is used to request some claims to be embedded in the ID token. The claims are `phone_number` and `phone_number_verified`. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims). |
|
|
60
|
+
# | `offline_access` | The following is an excerpt about this scope from [OpenID Connect Core 1.0, 11. Offline Access](https://openid.net/specs/openid-connect-core-1_0.html#OfflineAccess).
|
|
62
61
|
# > This scope value requests that an OAuth 2.0 Refresh Token be issued that can be used to obtain an Access Token that grants access to the end-user's userinfo endpoint even when the end-user is not present (not logged in).
|
|
63
62
|
# |
|
|
64
|
-
# Note that, if `
|
|
65
|
-
# when scope request parameter contains `
|
|
66
|
-
# [OpenID Connect Core 1.0, 11. Offline Access](https://openid.net/specs/openid-connect-core-
|
|
67
|
-
#
|
|
63
|
+
# Note that, if `response_type` request parameter does not contain code, `offline_acccess` scope is removed from this list even
|
|
64
|
+
# when scope request parameter contains `offline_access`. This behavior is a requirement written in
|
|
65
|
+
# [OpenID Connect Core 1.0, 11. Offline Access](https://openid.net/specs/openid-connect-core-1_0.html#OfflineAccess).
|
|
66
|
+
#
|
|
68
67
|
field :scopes, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Scope)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('scopes') } }
|
|
69
68
|
# The locales that the client application presented as candidates to be used for UI.
|
|
70
69
|
# This value comes from `ui_locales` request parameter. The format of `ui_locales` is a space-separated list of language tag values
|
|
71
70
|
# defined in [RFC5646](https://datatracker.ietf.org/doc/html/rfc5646).
|
|
72
71
|
# See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), ui_locales" for details.
|
|
73
|
-
#
|
|
72
|
+
#
|
|
74
73
|
# It is ensured that locales listed by this parameters are contained in the list of supported UI locales which are specified
|
|
75
74
|
# by `supportedUiLocales` configuration parameter of the service. Unsupported UI locales in the authorization request do not
|
|
76
75
|
# cause an error and are just ignored.
|
|
77
|
-
#
|
|
76
|
+
#
|
|
78
77
|
field :ui_locales, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('uiLocales') } }
|
|
79
78
|
# End-user's preferred languages and scripts for claims. This value comes from `claims_locales` request parameter.
|
|
80
79
|
# The format of `claims_locales` is a space-separated list of language tag values defined in [RFC5646](https://datatracker.ietf.org/doc/html/rfc5646).
|
|
81
80
|
# See "[OpenID Connect Core 1.0, 5.2. Claims Languages and Scripts](https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts)" for details.
|
|
82
|
-
#
|
|
81
|
+
#
|
|
83
82
|
# It is ensured that locales listed by this parameters are contained in the list of supported claim locales
|
|
84
83
|
# which are specified by `supportedClaimsLocales` configuration parameter of the service.
|
|
85
84
|
# Unsupported claim locales in the authorization request do not cause an error and are just ignored.
|
|
86
|
-
#
|
|
85
|
+
#
|
|
87
86
|
field :claims_locales, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('claimsLocales') } }
|
|
88
87
|
# The list of claims that the client application requests to be embedded in the ID token.
|
|
89
88
|
# The value comes from (1) `id_token` in `claims` request parameter [1] and/or (2) special scopes (`profile`, `email`, `address` and `phone`)
|
|
90
89
|
# which are expanded to claims.
|
|
91
|
-
#
|
|
90
|
+
#
|
|
92
91
|
# See [OpenID Connect Core 1.0, 5.5. Requesting Claims using the "claims" Request Parameter](https://openid.net/specs/openid-connect-core-1_0.html#ClaimsParameter)
|
|
93
92
|
# for `claims` request parameter, and see [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims)
|
|
94
93
|
# for the special scopes.
|
|
95
|
-
#
|
|
94
|
+
#
|
|
96
95
|
field :claims, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('claims') } }
|
|
97
96
|
# This boolean value indicates whether the authentication of the end-user must be one of the ACRs (Authentication Context Class References) listed in `acrs` parameter.
|
|
98
97
|
# This parameter becomes `true` only when (1) the authorization request contains `claims` request parameter and (2) `acr` claim is in it, and (3) `essential` property of
|
|
99
98
|
# the `acr` claim is `true`. See [OpenID Connect Core 1.0, 5.5.1.1. Requesting the "acr" Claim](https://openid.net/specs/openid-connect-core-1_0.html#acrSemantics) for details.
|
|
100
|
-
#
|
|
99
|
+
#
|
|
101
100
|
field :acr_essential, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('acrEssential') } }
|
|
102
101
|
# `true` if the value of the `client_id` request parameter included in the authorization request is the client ID alias.
|
|
103
102
|
# `false` if the value is the original numeric client ID.
|
|
104
|
-
#
|
|
103
|
+
#
|
|
105
104
|
field :client_id_alias_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientIdAliasUsed') } }
|
|
106
105
|
# The list of ACRs (Authentication Context Class References) one of which the client application requests to be satisfied for the authentication of the end-user.
|
|
107
106
|
# This value comes from `acr_values` request parameter or `defaultAcrs` configuration parameter of the client application.
|
|
108
|
-
#
|
|
107
|
+
#
|
|
109
108
|
# See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), acr_values" for `acr_values`
|
|
110
109
|
# request parameter, and see "[OpenID Connect Dynamic Client Registration 1.0, 2. Client Metadata](https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata),
|
|
111
110
|
# default_acr_values" for `defaultAcrs` configuration parameter.
|
|
112
|
-
#
|
|
111
|
+
#
|
|
113
112
|
field :acrs, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('acrs') } }
|
|
114
113
|
# The subject (= unique user ID managed by the authorization server implementation) that the client application expects to grant authorization.
|
|
115
114
|
# The value comes from `sub` claim in `claims` request parameter.
|
|
116
|
-
#
|
|
115
|
+
#
|
|
117
116
|
field :subject, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('subject') } }
|
|
118
117
|
# A hint about the login identifier of the end-user. The value comes from `login_hint` request parameter.
|
|
119
118
|
field :login_hint, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('loginHint') } }
|
|
120
119
|
# The list of values of prompt request parameter. See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), prompt" for prompt request parameter.
|
|
121
120
|
field :prompts, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Prompt)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('prompts') } }
|
|
122
121
|
# The prompt that the UI displayed to the end-user must satisfy as the minimum level. This value comes from `prompt` request parameter.
|
|
123
|
-
#
|
|
122
|
+
#
|
|
124
123
|
# When the authorization request does not contain `prompt` request parameter, `CONSENT` is used as the default value.
|
|
125
|
-
#
|
|
124
|
+
#
|
|
126
125
|
# See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), prompt" for `prompt` request parameter.
|
|
127
|
-
#
|
|
128
|
-
field :lowest_prompt, Crystalline::Nilable.new(Models::Components::Prompt), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('lowestPrompt'), 'decoder': Utils.enum_from_string(Models::Components::Prompt, true) } }
|
|
126
|
+
#
|
|
127
|
+
field :lowest_prompt, Crystalline::Nilable.new(Models::Components::Prompt), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('lowestPrompt'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::Prompt, true) } }
|
|
129
128
|
# The payload part of the request object. The value of this proprty is `null` if the authorization request does not include a request object.
|
|
130
|
-
#
|
|
129
|
+
#
|
|
131
130
|
field :request_object_payload, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requestObjectPayload') } }
|
|
132
131
|
# The value of the `id_token` property in the claims request parameter or in the claims property in a request object.
|
|
133
|
-
#
|
|
134
|
-
# A client application may request certain claims be embedded in an ID token or in a response from the userInfo endpoint.
|
|
135
|
-
# There are several ways. Including the `claims` request parameter and including the `claims` property in a request object are such examples.
|
|
136
|
-
# In both the cases, the value of the `claims` parameter/property is JSON. Its format is described in [5.5. Requesting Claims using the "claims"
|
|
137
|
-
# Request Parameter](https://openid.net/specs/openid-connect-core-1_0.html#ClaimsParameter).
|
|
138
|
-
#
|
|
139
|
-
# The following is an excerpt from the specification.
|
|
140
|
-
# You can find `userinfo` and `id_token` are top-level properties.
|
|
141
|
-
#
|
|
142
|
-
# ```json
|
|
143
|
-
# {
|
|
144
|
-
# "userinfo":
|
|
145
|
-
# {
|
|
146
|
-
# "given_name": { "essential": true },
|
|
147
|
-
# "nickname": null,
|
|
148
|
-
# "email": { "essential": true },
|
|
149
|
-
# "email_verified": { "essential": true },
|
|
150
|
-
# "picture": null,
|
|
151
|
-
# "http://example.info/claims/groups": null
|
|
152
|
-
# },
|
|
153
|
-
# "id_token":
|
|
154
|
-
# {
|
|
155
|
-
# "auth_time": { "essential": true },
|
|
156
|
-
# "acr": { "values": [ "urn:mace:incommon:iap:silver" ] }
|
|
157
|
-
# }
|
|
158
|
-
# }
|
|
159
|
-
# ```
|
|
160
|
-
#
|
|
161
|
-
# This value of this property is the value of the `id_token` property in JSON format.
|
|
162
|
-
# For example, if the JSON above is included in an authorization request, this property holds JSON equivalent to the following.
|
|
163
|
-
#
|
|
164
|
-
# ```json
|
|
165
|
-
# {
|
|
166
|
-
# "auth_time": { "essential": true },
|
|
167
|
-
# "acr": { "values": [ "urn:mace:incommon:iap:silver" ] }
|
|
168
|
-
# }
|
|
169
|
-
# ```
|
|
170
|
-
#
|
|
171
|
-
# Note that if a request object is given and it contains the `claims` property and if the `claims` request parameter is also given,
|
|
172
|
-
# this property holds the former value.
|
|
173
|
-
#
|
|
132
|
+
#
|
|
174
133
|
field :id_token_claims, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('idTokenClaims') } }
|
|
175
134
|
# The value of the `userinfo` property in the `claims` request parameter or in the `claims` property in a request object.
|
|
176
|
-
#
|
|
177
|
-
# A client application may request certain claims be embedded in an ID token or in a response from the userInfo endpoint.
|
|
178
|
-
# There are several ways. Including the `claims` request parameter and including the `claims` property in a request object are such examples.
|
|
179
|
-
# In both the cases, the value of the `claims` parameter/property is JSON. Its format is described in [5.5. Requesting Claims using the "claims"
|
|
180
|
-
# Request Parameter](https://openid.net/specs/openid-connect-core-1_0.html#ClaimsParameter).
|
|
181
|
-
#
|
|
182
|
-
# The following is an excerpt from the specification. You can find `userinfo` and `id_token` are top-level properties.
|
|
183
|
-
#
|
|
184
|
-
# ```json
|
|
185
|
-
# {
|
|
186
|
-
# "userinfo":
|
|
187
|
-
# {
|
|
188
|
-
# "given_name": { "essential": true },
|
|
189
|
-
# "nickname": null,
|
|
190
|
-
# "email": { "essential": true },
|
|
191
|
-
# "email_verified": { "essential": true },
|
|
192
|
-
# "picture": null,
|
|
193
|
-
# "http://example.info/claims/groups": null
|
|
194
|
-
# },
|
|
195
|
-
# "id_token":
|
|
196
|
-
# {
|
|
197
|
-
# "auth_time": { "essential": true },
|
|
198
|
-
# "acr": { "values": [ "urn:mace:incommon:iap:silver" ] }
|
|
199
|
-
# }
|
|
200
|
-
# }
|
|
201
|
-
# ````
|
|
202
|
-
#
|
|
203
|
-
# The value of this property is the value of the `userinfo` property in JSON format.
|
|
204
|
-
# For example, if the JSON above is included in an authorization request, this property holds JSON equivalent to the following.
|
|
205
|
-
#
|
|
206
|
-
# ```json
|
|
207
|
-
# {
|
|
208
|
-
# "given_name": { "essential": true },
|
|
209
|
-
# "nickname": null,
|
|
210
|
-
# "email": { "essential": true },
|
|
211
|
-
# "email_verified": { "essential": true },
|
|
212
|
-
# "picture": null,
|
|
213
|
-
# "http://example.info/claims/groups": null
|
|
214
|
-
# }
|
|
215
|
-
# ```
|
|
216
|
-
#
|
|
217
|
-
# Note that if a request object is given and it contains the `claims` property and if the `claims` request parameter is also given,
|
|
218
|
-
# the value of this property holds the former value.
|
|
219
|
-
#
|
|
135
|
+
#
|
|
220
136
|
field :user_info_claims, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('userInfoClaims') } }
|
|
221
137
|
# The resources specified by the `resource` request parameters or by the `resource` property in the request object.
|
|
222
138
|
# If both are given, the values in the request object should be set. See "Resource Indicators for OAuth 2.0" for details.
|
|
223
|
-
#
|
|
139
|
+
#
|
|
224
140
|
field :resources, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resources') } }
|
|
225
141
|
# The authorization details. This represents the value of the `authorization_details`
|
|
226
142
|
# request parameter in the preceding device authorization request which is defined in
|
|
227
143
|
# "OAuth 2.0 Rich Authorization Requests".
|
|
228
|
-
#
|
|
144
|
+
#
|
|
229
145
|
field :authorization_details, Crystalline::Nilable.new(Models::Components::AuthzDetails), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('authorizationDetails') } }
|
|
230
146
|
# The `purpose` request parameter is defined in [9. Transaction-specific Purpose](https://openid.net/specs/openid-connect-4-identity-assurance-1_0.html#name-transaction-specific-purpos)
|
|
231
147
|
# of [OpenID Connect for Identity Assurance 1.0](https://openid.net/specs/openid-connect-4-identity-assurance-1_0.html) as follows:
|
|
232
|
-
#
|
|
148
|
+
#
|
|
233
149
|
# > purpose: OPTIONAL. String describing the purpose for obtaining certain user data from the OP. The purpose MUST NOT be shorter than 3 characters and MUST NOT be longer than 300 characters.
|
|
234
150
|
# If these rules are violated, the authentication request MUST fail and the OP returns an error invalid_request to the RP.
|
|
235
|
-
#
|
|
151
|
+
#
|
|
236
152
|
field :purpose, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('purpose') } }
|
|
237
153
|
# The content that the authorization server implementation is to return to the client application.
|
|
238
154
|
# Its format varies depending on the value of `action` parameter.
|
|
239
|
-
#
|
|
155
|
+
#
|
|
240
156
|
field :response_content, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('responseContent') } }
|
|
241
157
|
# A ticket issued by Authlete to the service implementation. This is needed when the service
|
|
242
158
|
# implementation calls either `/auth/authorization/fail` API or `/auth/authorization/issue`
|
|
243
159
|
# API.
|
|
244
|
-
#
|
|
160
|
+
#
|
|
245
161
|
field :ticket, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('ticket') } }
|
|
246
162
|
# The dynamic scopes which the client application requested by the scope request parameter.
|
|
247
|
-
#
|
|
163
|
+
#
|
|
248
164
|
field :dynamic_scopes, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::DynamicScope)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('dynamicScopes') } }
|
|
249
165
|
# The grant management action of the device authorization request.
|
|
250
|
-
#
|
|
166
|
+
#
|
|
251
167
|
# The `grant_management_action` request parameter is defined in
|
|
252
168
|
# [Grant Management for OAuth 2.0](https://openid.net/specs/fapi-grant-management.html).
|
|
253
|
-
#
|
|
254
|
-
field :gm_action, Crystalline::Nilable.new(Models::Components::GrantManagementAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('gmAction'), 'decoder': Utils.enum_from_string(Models::Components::GrantManagementAction, true) } }
|
|
169
|
+
#
|
|
170
|
+
field :gm_action, Crystalline::Nilable.new(Models::Components::GrantManagementAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('gmAction'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::GrantManagementAction, true) } }
|
|
255
171
|
# the value of the `grant_id` request parameter of the device authorization request.
|
|
256
|
-
#
|
|
172
|
+
#
|
|
257
173
|
# The `grant_id` request parameter is defined in
|
|
258
174
|
# [Grant Management for OAuth 2.0](https://openid.net/specs/fapi-grant-management.html)
|
|
259
175
|
# , which is supported by Authlete 2.3 and newer versions.
|
|
260
|
-
#
|
|
176
|
+
#
|
|
261
177
|
field :grant_id, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grantId') } }
|
|
262
178
|
|
|
263
179
|
field :grant, Crystalline::Nilable.new(Models::Components::Grant), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grant') } }
|
|
264
180
|
# The subject identifying the user who has given the grant identified
|
|
265
|
-
# by the `
|
|
181
|
+
# by the `grant_id` request parameter of the device authorization
|
|
266
182
|
# request.
|
|
267
183
|
# Authlete 2.3 and newer versions support [Grant Management
|
|
268
|
-
# for OAuth 2.0](https://openid.net/specs/fapi-grant-management.html). An authorization request may contain a `
|
|
184
|
+
# for OAuth 2.0](https://openid.net/specs/fapi-grant-management.html). An authorization request may contain a `grant_id`
|
|
269
185
|
# request parameter which is defined in the specification. If the value of
|
|
270
|
-
# the request parameter is valid,
|
|
186
|
+
# the request parameter is valid, {@link #getGrantSubject()} will return
|
|
271
187
|
# the subject of the user who has given the grant to the client application.
|
|
272
188
|
# Authorization server implementations may use the value returned from
|
|
273
|
-
#
|
|
189
|
+
# {@link #getGrantSubject()} in order to determine the user to authenticate.
|
|
274
190
|
# The user your system will authenticate during the authorization process
|
|
275
191
|
# (or has already authenticated) may be different from the user of the
|
|
276
192
|
# grant. The first implementer's draft of "Grant Management for OAuth 2.0"
|
|
@@ -278,49 +194,49 @@ module Authlete
|
|
|
278
194
|
# left to implementations. Authlete will not perform the grant management
|
|
279
195
|
# action when the `subject` passed to Authlete does not match the
|
|
280
196
|
# user of the grant.
|
|
281
|
-
#
|
|
197
|
+
#
|
|
282
198
|
field :grant_subject, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grantSubject') } }
|
|
283
199
|
# Names of claims that are requested indirectly by *"transformed
|
|
284
200
|
# claims"*.
|
|
285
201
|
# A client application can request *"transformed claims"* by adding
|
|
286
202
|
# names of transformed claims in the `claims` request parameter.
|
|
287
203
|
# The following is an example of the `claims` request parameter
|
|
288
|
-
# that requests a predefined transformed claim named `
|
|
289
|
-
# and a transformed claim named `
|
|
204
|
+
# that requests a predefined transformed claim named `18_or_over`
|
|
205
|
+
# and a transformed claim named `nationality_usa` to be embedded
|
|
290
206
|
# in the response from the userinfo endpoint.
|
|
291
207
|
# ```json
|
|
292
|
-
#
|
|
293
|
-
# "
|
|
294
|
-
# "
|
|
208
|
+
# {
|
|
209
|
+
# "transformed_claims": {
|
|
210
|
+
# "nationality_usa": {
|
|
295
211
|
# "claim": "nationalities",
|
|
296
212
|
# "fn": [
|
|
297
213
|
# [ "eq", "USA" ],
|
|
298
214
|
# "any"
|
|
299
215
|
# ]
|
|
300
|
-
#
|
|
301
|
-
#
|
|
302
|
-
# "userinfo":
|
|
303
|
-
# "::
|
|
304
|
-
# ":
|
|
305
|
-
#
|
|
306
|
-
#
|
|
216
|
+
# }
|
|
217
|
+
# },
|
|
218
|
+
# "userinfo": {
|
|
219
|
+
# "::18_or_over": null,
|
|
220
|
+
# ":nationality_usa": null
|
|
221
|
+
# }
|
|
222
|
+
# }
|
|
307
223
|
# ```
|
|
308
|
-
# The example above assumes that a transformed claim named `
|
|
224
|
+
# The example above assumes that a transformed claim named `18_or_over`
|
|
309
225
|
# is predefined by the authorization server like below.
|
|
310
226
|
# ```json
|
|
311
|
-
#
|
|
312
|
-
# "
|
|
227
|
+
# {
|
|
228
|
+
# "18_or_over": {
|
|
313
229
|
# "claim": "birthdate",
|
|
314
230
|
# "fn": [
|
|
315
|
-
# "
|
|
231
|
+
# "years_ago",
|
|
316
232
|
# [ "gte", 18 ]
|
|
317
233
|
# ]
|
|
318
|
-
#
|
|
319
|
-
#
|
|
234
|
+
# }
|
|
235
|
+
# }
|
|
320
236
|
# ```
|
|
321
237
|
# In the example, the `nationalities` claim is requested indirectly
|
|
322
|
-
# by the `
|
|
323
|
-
# `birthdate` claim is requested indirectly by the `
|
|
238
|
+
# by the `nationality_usa` transformed claim. Likewise, the
|
|
239
|
+
# `birthdate` claim is requested indirectly by the `18_or_over`
|
|
324
240
|
# transformed claim.
|
|
325
241
|
# When the `claims` request parameter of an authorization request is
|
|
326
242
|
# like the example above, this `requestedClaimsForTx` property will
|
|
@@ -333,63 +249,49 @@ module Authlete
|
|
|
333
249
|
# request parameter when it calls the `/api/auth/userinfo/issue` API. The following
|
|
334
250
|
# is an example of the value of the `claimsForTx` request parameter.
|
|
335
251
|
# ```json
|
|
336
|
-
#
|
|
252
|
+
# {
|
|
337
253
|
# "birthdate": "1970-01-23",
|
|
338
254
|
# "nationalities": [ "DEU", "USA" ]
|
|
339
|
-
#
|
|
255
|
+
# }
|
|
340
256
|
# ```
|
|
341
|
-
#
|
|
257
|
+
#
|
|
342
258
|
field :requested_claims_for_tx, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requestedClaimsForTx') } }
|
|
343
259
|
# Names of verified claims that will be referenced when transformed claims are computed.
|
|
344
|
-
#
|
|
260
|
+
#
|
|
345
261
|
field :requested_verified_claims_for_tx, Crystalline::Nilable.new(Crystalline::Array.new(Crystalline::Array.new(::String))), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requestedVerifiedClaimsForTx') } }
|
|
346
262
|
# the value of the `transformed_claims` property in the `claims` request
|
|
347
263
|
# parameter of an authorization request or in the `claims` property in a
|
|
348
264
|
# request object.
|
|
349
|
-
#
|
|
265
|
+
#
|
|
350
266
|
field :transformed_claims, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('transformedClaims') } }
|
|
351
267
|
# Flag which indicates whether the entity ID of the client was used when the request for the access token was made.
|
|
352
|
-
#
|
|
268
|
+
#
|
|
353
269
|
field :client_entity_id_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientEntityIdUsed') } }
|
|
354
270
|
# The list of claims that the client application requests to be
|
|
355
271
|
# embedded in userinfo responses. The value comes from the `"scope"`
|
|
356
272
|
# and `"claims"` request parameters of the original authorization
|
|
357
273
|
# request.
|
|
358
|
-
#
|
|
274
|
+
#
|
|
359
275
|
field :claims_at_user_info, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('claimsAtUserInfo') } }
|
|
360
276
|
|
|
361
277
|
field :credential_offer_info, Crystalline::Nilable.new(Models::Components::CredentialOfferInfo), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('credentialOfferInfo') } }
|
|
362
278
|
# The information about the **issuable credentials** that can
|
|
363
279
|
# be obtained by presenting the access token that will be issued as a
|
|
364
280
|
# result of the authorization request.
|
|
365
|
-
#
|
|
281
|
+
#
|
|
366
282
|
field :issuable_credentials, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('issuableCredentials') } }
|
|
367
283
|
# Flag which indicates whether [Native SSO](https://openid.net/specs/openid-connect-native-sso-1_0.html)
|
|
368
284
|
# is requested. This property should be set to `true` when all the following conditions are satisfied:
|
|
369
|
-
#
|
|
370
|
-
# - The service supports Native SSO (see `nativeSsoSupported` property of Service).
|
|
371
|
-
# - The service supports the `openid` and `device_sso` scopes.
|
|
372
|
-
# - The client is allowed to request the `openid` and `device_sso` scopes.
|
|
373
|
-
# - The authorization request includes the `openid` and `device_sso` scopes.
|
|
374
|
-
# - The authorization request's `response_type` includes `code`.
|
|
375
|
-
#
|
|
376
|
-
# NOTE: If this property is set to `true`, the `sessionId` request parameter must be provided
|
|
377
|
-
# to the `/auth/authorization/issue` API.
|
|
378
|
-
#
|
|
285
|
+
#
|
|
379
286
|
field :native_sso_requested, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('nativeSsoRequested') } }
|
|
380
|
-
# The location of the client's metadata document that was used to resolve client metadata.
|
|
381
|
-
#
|
|
382
|
-
# This property is set when client metadata was retrieved via the [OAuth Client ID Metadata Document](https://datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/) (CIMD) mechanism.
|
|
383
|
-
#
|
|
384
|
-
field :metadata_document_location, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('metadataDocumentLocation') } }
|
|
385
287
|
# Flag indicating whether a metadata document was used to resolve client metadata for this request.
|
|
386
|
-
#
|
|
288
|
+
#
|
|
387
289
|
# When `true`, the client metadata was retrieved via the CIMD mechanism rather than from the Authlete database.
|
|
388
|
-
#
|
|
290
|
+
#
|
|
389
291
|
field :metadata_document_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('metadataDocumentUsed') } }
|
|
390
292
|
|
|
391
|
-
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::AuthorizationResponseAction), client: T.nilable(Models::Components::ClientLimitedAuthorization), display: T.nilable(Models::Components::Display), max_age: T.nilable(::Integer), service: T.nilable(Models::Components::Service), scopes: T.nilable(T::Array[Models::Components::Scope]), ui_locales: T.nilable(T::Array[::String]), claims_locales: T.nilable(T::Array[::String]), claims: T.nilable(T::Array[::String]), acr_essential: T.nilable(T::Boolean), client_id_alias_used: T.nilable(T::Boolean), acrs: T.nilable(T::Array[::String]), subject: T.nilable(::String), login_hint: T.nilable(::String), prompts: T.nilable(T::Array[Models::Components::Prompt]), lowest_prompt: T.nilable(Models::Components::Prompt), request_object_payload: T.nilable(::String), id_token_claims: T.nilable(::String), user_info_claims: T.nilable(::String), resources: T.nilable(T::Array[::String]), authorization_details: T.nilable(Models::Components::AuthzDetails), purpose: T.nilable(::String), response_content: T.nilable(::String), ticket: T.nilable(::String), dynamic_scopes: T.nilable(T::Array[Models::Components::DynamicScope]), gm_action: T.nilable(Models::Components::GrantManagementAction), grant_id: T.nilable(::String), grant: T.nilable(Models::Components::Grant), grant_subject: T.nilable(::String), requested_claims_for_tx: T.nilable(T::Array[::String]), requested_verified_claims_for_tx: T.nilable(T::Array[T::Array[::String]]), transformed_claims: T.nilable(::String), client_entity_id_used: T.nilable(T::Boolean), claims_at_user_info: T.nilable(T::Array[::String]), credential_offer_info: T.nilable(Models::Components::CredentialOfferInfo), issuable_credentials: T.nilable(::String), native_sso_requested: T.nilable(T::Boolean),
|
|
392
|
-
def initialize(result_code: nil, result_message: nil, action: nil, client: nil, display: nil, max_age: nil, service: nil, scopes: nil, ui_locales: nil, claims_locales: nil, claims: nil, acr_essential: nil, client_id_alias_used: nil, acrs: nil, subject: nil, login_hint: nil, prompts: nil, lowest_prompt: nil, request_object_payload: nil, id_token_claims: nil, user_info_claims: nil, resources: nil, authorization_details: nil, purpose: nil, response_content: nil, ticket: nil, dynamic_scopes: nil, gm_action: nil, grant_id: nil, grant: nil, grant_subject: nil, requested_claims_for_tx: nil, requested_verified_claims_for_tx: nil, transformed_claims: nil, client_entity_id_used: nil, claims_at_user_info: nil, credential_offer_info: nil, issuable_credentials: nil, native_sso_requested: nil,
|
|
293
|
+
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::AuthorizationResponseAction), client: T.nilable(Models::Components::ClientLimitedAuthorization), display: T.nilable(Models::Components::Display), max_age: T.nilable(::Integer), service: T.nilable(Models::Components::Service), scopes: T.nilable(T::Array[Models::Components::Scope]), ui_locales: T.nilable(T::Array[::String]), claims_locales: T.nilable(T::Array[::String]), claims: T.nilable(T::Array[::String]), acr_essential: T.nilable(T::Boolean), client_id_alias_used: T.nilable(T::Boolean), acrs: T.nilable(T::Array[::String]), subject: T.nilable(::String), login_hint: T.nilable(::String), prompts: T.nilable(T::Array[Models::Components::Prompt]), lowest_prompt: T.nilable(Models::Components::Prompt), request_object_payload: T.nilable(::String), id_token_claims: T.nilable(::String), user_info_claims: T.nilable(::String), resources: T.nilable(T::Array[::String]), authorization_details: T.nilable(Models::Components::AuthzDetails), purpose: T.nilable(::String), response_content: T.nilable(::String), ticket: T.nilable(::String), dynamic_scopes: T.nilable(T::Array[Models::Components::DynamicScope]), gm_action: T.nilable(Models::Components::GrantManagementAction), grant_id: T.nilable(::String), grant: T.nilable(Models::Components::Grant), grant_subject: T.nilable(::String), requested_claims_for_tx: T.nilable(T::Array[::String]), requested_verified_claims_for_tx: T.nilable(T::Array[T::Array[::String]]), transformed_claims: T.nilable(::String), client_entity_id_used: T.nilable(T::Boolean), claims_at_user_info: T.nilable(T::Array[::String]), credential_offer_info: T.nilable(Models::Components::CredentialOfferInfo), issuable_credentials: T.nilable(::String), native_sso_requested: T.nilable(T::Boolean), metadata_document_used: T.nilable(T::Boolean)).void }
|
|
294
|
+
def initialize(result_code: nil, result_message: nil, action: nil, client: nil, display: nil, max_age: nil, service: nil, scopes: nil, ui_locales: nil, claims_locales: nil, claims: nil, acr_essential: nil, client_id_alias_used: nil, acrs: nil, subject: nil, login_hint: nil, prompts: nil, lowest_prompt: nil, request_object_payload: nil, id_token_claims: nil, user_info_claims: nil, resources: nil, authorization_details: nil, purpose: nil, response_content: nil, ticket: nil, dynamic_scopes: nil, gm_action: nil, grant_id: nil, grant: nil, grant_subject: nil, requested_claims_for_tx: nil, requested_verified_claims_for_tx: nil, transformed_claims: nil, client_entity_id_used: nil, claims_at_user_info: nil, credential_offer_info: nil, issuable_credentials: nil, native_sso_requested: nil, metadata_document_used: nil)
|
|
393
295
|
@result_code = result_code
|
|
394
296
|
@result_message = result_message
|
|
395
297
|
@action = action
|
|
@@ -429,7 +331,6 @@ module Authlete
|
|
|
429
331
|
@credential_offer_info = credential_offer_info
|
|
430
332
|
@issuable_credentials = issuable_credentials
|
|
431
333
|
@native_sso_requested = native_sso_requested
|
|
432
|
-
@metadata_document_location = metadata_document_location
|
|
433
334
|
@metadata_document_used = metadata_document_used
|
|
434
335
|
end
|
|
435
336
|
|
|
@@ -475,7 +376,6 @@ module Authlete
|
|
|
475
376
|
return false unless @credential_offer_info == other.credential_offer_info
|
|
476
377
|
return false unless @issuable_credentials == other.issuable_credentials
|
|
477
378
|
return false unless @native_sso_requested == other.native_sso_requested
|
|
478
|
-
return false unless @metadata_document_location == other.metadata_document_location
|
|
479
379
|
return false unless @metadata_document_used == other.metadata_document_used
|
|
480
380
|
true
|
|
481
381
|
end
|
|
@@ -86,8 +86,6 @@ class Authlete::Models::Components::AuthorizationResponse
|
|
|
86
86
|
def issuable_credentials=(str_); end
|
|
87
87
|
def native_sso_requested(); end
|
|
88
88
|
def native_sso_requested=(str_); end
|
|
89
|
-
def metadata_document_location(); end
|
|
90
|
-
def metadata_document_location=(str_); end
|
|
91
89
|
def metadata_document_used(); end
|
|
92
90
|
def metadata_document_used=(str_); end
|
|
93
|
-
end
|
|
91
|
+
end
|
|
@@ -7,11 +7,8 @@
|
|
|
7
7
|
module Authlete
|
|
8
8
|
module Models
|
|
9
9
|
module Components
|
|
10
|
-
|
|
11
10
|
# AuthorizationResponseAction - The next action that the authorization server implementation should take.
|
|
12
11
|
class AuthorizationResponseAction < T::Enum
|
|
13
|
-
|
|
14
|
-
|
|
15
12
|
enums do
|
|
16
13
|
INTERNAL_SERVER_ERROR = new('INTERNAL_SERVER_ERROR')
|
|
17
14
|
BAD_REQUEST = new('BAD_REQUEST')
|
|
@@ -7,14 +7,13 @@
|
|
|
7
7
|
module Authlete
|
|
8
8
|
module Models
|
|
9
9
|
module Components
|
|
10
|
-
|
|
11
10
|
|
|
12
11
|
class AuthorizationTicketInfo
|
|
13
12
|
extend T::Sig
|
|
14
13
|
include Crystalline::MetadataFields
|
|
15
14
|
|
|
16
15
|
# The arbitrary text attached to the ticket.
|
|
17
|
-
#
|
|
16
|
+
#
|
|
18
17
|
field :context, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('context') } }
|
|
19
18
|
|
|
20
19
|
sig { params(context: T.nilable(::String)).void }
|
|
@@ -7,7 +7,6 @@
|
|
|
7
7
|
module Authlete
|
|
8
8
|
module Models
|
|
9
9
|
module Components
|
|
10
|
-
|
|
11
10
|
|
|
12
11
|
class AuthorizationTicketInfoResponse
|
|
13
12
|
extend T::Sig
|
|
@@ -16,7 +15,7 @@ module Authlete
|
|
|
16
15
|
|
|
17
16
|
field :info, Crystalline::Nilable.new(Models::Components::AuthorizationTicketInfo), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('info') } }
|
|
18
17
|
# The result of the `/auth/authorization/ticket/info` API call.
|
|
19
|
-
field :action, Crystalline::Nilable.new(Models::Components::AuthorizationTicketInfoResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::AuthorizationTicketInfoResponseAction, true) } }
|
|
18
|
+
field :action, Crystalline::Nilable.new(Models::Components::AuthorizationTicketInfoResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::AuthorizationTicketInfoResponseAction, true) } }
|
|
20
19
|
# The code which represents the result of the API call.
|
|
21
20
|
field :result_code, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultCode') } }
|
|
22
21
|
# A short message which explains the result of the API call.
|
|
@@ -7,11 +7,8 @@
|
|
|
7
7
|
module Authlete
|
|
8
8
|
module Models
|
|
9
9
|
module Components
|
|
10
|
-
|
|
11
10
|
# AuthorizationTicketInfoResponseAction - The result of the `/auth/authorization/ticket/info` API call.
|
|
12
11
|
class AuthorizationTicketInfoResponseAction < T::Enum
|
|
13
|
-
|
|
14
|
-
|
|
15
12
|
enums do
|
|
16
13
|
OK = new('OK')
|
|
17
14
|
NOT_FOUND = new('NOT_FOUND')
|