authlete_ruby_sdk 0.0.3.pre.beta → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/authlete/authorization.rb +24 -563
- data/lib/authlete/authorization_management.rb +15 -7
- data/lib/authlete/ciba.rb +35 -414
- data/lib/authlete/client.rb +3 -3
- data/lib/authlete/client_management.rb +133 -87
- data/lib/authlete/clients.rb +43 -23
- data/lib/authlete/device_flow.rb +24 -147
- data/lib/authlete/dynamic_client_registration.rb +31 -283
- data/lib/authlete/federation.rb +17 -66
- data/lib/authlete/grant_management.rb +10 -5
- data/lib/authlete/hardware_security_keys.rb +24 -10
- data/lib/authlete/introspection.rb +17 -195
- data/lib/authlete/jose_object.rb +10 -5
- data/lib/authlete/jwk_set_endpoint.rb +12 -7
- data/lib/authlete/lifecycle.rb +10 -5
- data/lib/authlete/models/components/access_token.rb +9 -9
- data/lib/authlete/models/components/access_token.rbi +1 -1
- data/lib/authlete/models/components/application_type.rb +1 -1
- data/lib/authlete/models/components/application_type.rbi +1 -1
- data/lib/authlete/models/components/attachment_type.rb +1 -1
- data/lib/authlete/models/components/attachment_type.rbi +1 -1
- data/lib/authlete/models/components/authorization_details_element.rb +16 -16
- data/lib/authlete/models/components/authorization_details_element.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_request.rb +4 -4
- data/lib/authlete/models/components/authorization_fail_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_request_reason.rb +1 -1
- data/lib/authlete/models/components/authorization_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_response.rb +2 -2
- data/lib/authlete/models/components/authorization_fail_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_request.rb +19 -83
- data/lib/authlete/models/components/authorization_issue_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_response.rb +8 -8
- data/lib/authlete/models/components/authorization_issue_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_request.rb +7 -7
- data/lib/authlete/models/components/authorization_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_response.rb +84 -176
- data/lib/authlete/models/components/authorization_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info.rb +1 -1
- data/lib/authlete/models/components/authorization_ticket_info.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_response.rb +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_response.rb +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_response_action.rbi +1 -1
- data/lib/authlete/models/components/authz_details.rb +2 -2
- data/lib/authlete/models/components/authz_details.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_request.rb +23 -23
- data/lib/authlete/models/components/backchannel_authentication_complete_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_request_result.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_request_result.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_response.rb +30 -30
- data/lib/authlete/models/components/backchannel_authentication_complete_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_response_action.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_request.rb +5 -5
- data/lib/authlete/models/components/backchannel_authentication_fail_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_request_reason.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_response.rb +2 -2
- data/lib/authlete/models/components/backchannel_authentication_fail_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_request.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_response.rb +5 -5
- data/lib/authlete/models/components/backchannel_authentication_issue_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_request.rb +12 -12
- data/lib/authlete/models/components/backchannel_authentication_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_response.rb +47 -56
- data/lib/authlete/models/components/backchannel_authentication_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_response_action.rbi +1 -1
- data/lib/authlete/models/components/cimd_options.rb +15 -15
- data/lib/authlete/models/components/cimd_options.rbi +1 -1
- data/lib/authlete/models/components/claim_type.rbi +1 -1
- data/lib/authlete/models/components/client.rb +159 -308
- data/lib/authlete/models/components/client.rbi +1 -1
- data/lib/authlete/models/components/client_auth_method.rb +1 -1
- data/lib/authlete/models/components/client_auth_method.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_delete_response.rb +4 -4
- data/lib/authlete/models/components/client_authorization_delete_response.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_get_list_request.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_get_list_response.rb +6 -6
- data/lib/authlete/models/components/client_authorization_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_update_request.rb +2 -2
- data/lib/authlete/models/components/client_authorization_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_clientsource.rb +1 -1
- data/lib/authlete/models/components/client_clientsource.rbi +1 -1
- data/lib/authlete/models/components/client_extension.rb +9 -19
- data/lib/authlete/models/components/client_extension.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_get_response.rb +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_get_response.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_request.rb +4 -4
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_flag_update_request.rb +1 -1
- data/lib/authlete/models/components/client_flag_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_flag_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_get_list_response.rb +4 -4
- data/lib/authlete/models/components/client_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/client_granted_scopes_delete_response.rbi +1 -1
- data/lib/authlete/models/components/client_input.rb +154 -293
- data/lib/authlete/models/components/client_input.rbi +1 -1
- data/lib/authlete/models/components/client_limited.rb +7 -7
- data/lib/authlete/models/components/client_limited.rbi +1 -1
- data/lib/authlete/models/components/client_limited_authorization.rb +57 -106
- data/lib/authlete/models/components/client_limited_authorization.rbi +1 -1
- data/lib/authlete/models/components/client_limited_authorization_clientsource.rb +1 -1
- data/lib/authlete/models/components/client_limited_authorization_clientsource.rbi +1 -1
- data/lib/authlete/models/components/client_registration_response.rb +3 -3
- data/lib/authlete/models/components/client_registration_response.rbi +1 -1
- data/lib/authlete/models/components/client_registration_response_action.rb +1 -1
- data/lib/authlete/models/components/client_registration_response_action.rbi +1 -1
- data/lib/authlete/models/components/client_registration_type.rb +1 -1
- data/lib/authlete/models/components/client_registration_type.rbi +1 -1
- data/lib/authlete/models/components/client_secret_refresh_response.rb +2 -2
- data/lib/authlete/models/components/client_secret_refresh_response.rbi +1 -1
- data/lib/authlete/models/components/client_secret_update_request.rb +1 -1
- data/lib/authlete/models/components/client_secret_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_secret_update_response.rb +2 -2
- data/lib/authlete/models/components/client_secret_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_type.rb +1 -1
- data/lib/authlete/models/components/client_type.rbi +1 -1
- data/lib/authlete/models/components/credential_issuance_order.rb +1 -1
- data/lib/authlete/models/components/credential_issuance_order.rbi +1 -1
- data/lib/authlete/models/components/credential_issuer_metadata.rb +5 -5
- data/lib/authlete/models/components/credential_issuer_metadata.rbi +1 -1
- data/lib/authlete/models/components/credential_offer_info.rb +12 -20
- data/lib/authlete/models/components/credential_offer_info.rbi +1 -1
- data/lib/authlete/models/components/credential_request_info.rbi +1 -1
- data/lib/authlete/models/components/delivery_mode.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_request.rb +12 -12
- data/lib/authlete/models/components/device_authorization_request.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_response.rb +39 -48
- data/lib/authlete/models/components/device_authorization_response.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/device_complete_request.rb +22 -22
- data/lib/authlete/models/components/device_complete_request.rbi +1 -1
- data/lib/authlete/models/components/device_complete_request_result.rb +1 -1
- data/lib/authlete/models/components/device_complete_request_result.rbi +1 -1
- data/lib/authlete/models/components/device_complete_response.rb +2 -2
- data/lib/authlete/models/components/device_complete_response.rbi +1 -1
- data/lib/authlete/models/components/device_complete_response_action.rb +1 -1
- data/lib/authlete/models/components/device_complete_response_action.rbi +1 -1
- data/lib/authlete/models/components/device_verification_request.rb +1 -1
- data/lib/authlete/models/components/device_verification_request.rbi +1 -1
- data/lib/authlete/models/components/device_verification_response.rb +32 -32
- data/lib/authlete/models/components/device_verification_response.rbi +1 -1
- data/lib/authlete/models/components/device_verification_response_action.rbi +1 -1
- data/lib/authlete/models/components/display.rb +3 -3
- data/lib/authlete/models/components/display.rbi +1 -1
- data/lib/authlete/models/components/dynamic_scope.rbi +1 -1
- data/lib/authlete/models/components/fapi_mode.rbi +1 -1
- data/lib/authlete/models/components/federation_configuration_response.rb +2 -2
- data/lib/authlete/models/components/federation_configuration_response.rbi +1 -1
- data/lib/authlete/models/components/federation_configuration_response_action.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_request.rb +2 -2
- data/lib/authlete/models/components/federation_registration_request.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_response.rb +2 -2
- data/lib/authlete/models/components/federation_registration_response.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_response_action.rbi +1 -1
- data/lib/authlete/models/components/g_m_request.rb +13 -13
- data/lib/authlete/models/components/g_m_request.rbi +1 -1
- data/lib/authlete/models/components/g_m_response.rb +3 -3
- data/lib/authlete/models/components/g_m_response.rbi +1 -1
- data/lib/authlete/models/components/g_m_response_action.rbi +1 -1
- data/lib/authlete/models/components/grant.rb +2 -2
- data/lib/authlete/models/components/grant.rbi +1 -1
- data/lib/authlete/models/components/grant_management_action.rb +2 -2
- data/lib/authlete/models/components/grant_management_action.rbi +1 -1
- data/lib/authlete/models/components/grant_scope.rb +2 -2
- data/lib/authlete/models/components/grant_scope.rbi +1 -1
- data/lib/authlete/models/components/grant_type.rb +1 -1
- data/lib/authlete/models/components/grant_type.rbi +1 -1
- data/lib/authlete/models/components/hsk.rb +8 -8
- data/lib/authlete/models/components/hsk.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_request.rb +6 -6
- data/lib/authlete/models/components/hsk_create_request.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_response.rb +2 -2
- data/lib/authlete/models/components/hsk_create_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_delete_response.rb +2 -2
- data/lib/authlete/models/components/hsk_delete_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_delete_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_list_response.rb +1 -1
- data/lib/authlete/models/components/hsk_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_list_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_response.rb +2 -2
- data/lib/authlete/models/components/hsk_get_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_response_action.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_request.rb +7 -7
- data/lib/authlete/models/components/idtoken_reissue_request.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_response.rb +3 -3
- data/lib/authlete/models/components/idtoken_reissue_response.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_response_action.rbi +1 -1
- data/lib/authlete/models/components/introspection_request.rb +24 -40
- data/lib/authlete/models/components/introspection_request.rbi +1 -1
- data/lib/authlete/models/components/introspection_response.rb +36 -45
- data/lib/authlete/models/components/introspection_response.rbi +1 -1
- data/lib/authlete/models/components/introspection_response_action.rbi +1 -1
- data/lib/authlete/models/components/jose_verify_request.rb +5 -5
- data/lib/authlete/models/components/jose_verify_request.rbi +1 -1
- data/lib/authlete/models/components/jose_verify_response.rb +5 -5
- data/lib/authlete/models/components/jose_verify_response.rbi +1 -1
- data/lib/authlete/models/components/jwe_alg.rb +2 -2
- data/lib/authlete/models/components/jwe_alg.rbi +1 -1
- data/lib/authlete/models/components/jwe_enc.rb +1 -1
- data/lib/authlete/models/components/jwe_enc.rbi +1 -1
- data/lib/authlete/models/components/jws_alg.rb +2 -2
- data/lib/authlete/models/components/jws_alg.rbi +1 -1
- data/lib/authlete/models/components/named_uri.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_request.rb +1 -1
- data/lib/authlete/models/components/native_sso_logout_request.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_response.rb +3 -3
- data/lib/authlete/models/components/native_sso_logout_response.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_response_action.rb +1 -1
- data/lib/authlete/models/components/native_sso_logout_response_action.rbi +1 -1
- data/lib/authlete/models/components/native_sso_request.rb +8 -24
- data/lib/authlete/models/components/native_sso_request.rbi +1 -1
- data/lib/authlete/models/components/native_sso_response.rb +4 -4
- data/lib/authlete/models/components/native_sso_response.rbi +1 -1
- data/lib/authlete/models/components/native_sso_response_action.rb +1 -1
- data/lib/authlete/models/components/native_sso_response_action.rbi +1 -1
- data/lib/authlete/models/components/pair.rbi +1 -1
- data/lib/authlete/models/components/prompt.rb +3 -3
- data/lib/authlete/models/components/prompt.rbi +1 -1
- data/lib/authlete/models/components/property.rb +1 -1
- data/lib/authlete/models/components/property.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_request.rb +11 -11
- data/lib/authlete/models/components/pushed_authorization_request.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response.rb +6 -6
- data/lib/authlete/models/components/pushed_authorization_response.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response_clientauthmethod.rb +1 -1
- data/lib/authlete/models/components/pushed_authorization_response_clientauthmethod.rbi +1 -1
- data/lib/authlete/models/components/response_type.rbi +1 -1
- data/lib/authlete/models/components/responsemode.rbi +1 -1
- data/lib/authlete/models/components/revocation_request.rb +10 -10
- data/lib/authlete/models/components/revocation_request.rbi +1 -1
- data/lib/authlete/models/components/revocation_response.rb +2 -2
- data/lib/authlete/models/components/revocation_response.rbi +1 -1
- data/lib/authlete/models/components/revocation_response_action.rbi +1 -1
- data/lib/authlete/models/components/scope.rbi +1 -1
- data/lib/authlete/models/components/security.rbi +1 -1
- data/lib/authlete/models/components/service.rb +248 -599
- data/lib/authlete/models/components/service.rbi +1 -1
- data/lib/authlete/models/components/service_get_list_response.rb +4 -4
- data/lib/authlete/models/components/service_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/service_input.rb +242 -593
- data/lib/authlete/models/components/service_input.rbi +1 -1
- data/lib/authlete/models/components/service_jwks_get_response.rbi +1 -1
- data/lib/authlete/models/components/service_profile.rbi +1 -1
- data/lib/authlete/models/components/sns_credentials.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_request.rb +22 -22
- data/lib/authlete/models/components/standard_introspection_request.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_response.rb +2 -2
- data/lib/authlete/models/components/standard_introspection_response.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_response_action.rbi +1 -1
- data/lib/authlete/models/components/subject_type.rb +2 -2
- data/lib/authlete/models/components/subject_type.rbi +1 -1
- data/lib/authlete/models/components/supportedsnse.rbi +1 -1
- data/lib/authlete/models/components/tagged_value.rbi +1 -1
- data/lib/authlete/models/components/token_create_request.rb +27 -59
- data/lib/authlete/models/components/token_create_request.rbi +1 -1
- data/lib/authlete/models/components/token_create_response.rb +18 -18
- data/lib/authlete/models/components/token_create_response.rbi +1 -1
- data/lib/authlete/models/components/token_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_fail_request.rb +3 -3
- data/lib/authlete/models/components/token_fail_request.rbi +1 -1
- data/lib/authlete/models/components/token_fail_request_reason.rb +1 -1
- data/lib/authlete/models/components/token_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/token_fail_response.rb +2 -2
- data/lib/authlete/models/components/token_fail_response.rbi +1 -1
- data/lib/authlete/models/components/token_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_get_list_response.rb +5 -5
- data/lib/authlete/models/components/token_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/token_info.rb +6 -6
- data/lib/authlete/models/components/token_info.rbi +1 -1
- data/lib/authlete/models/components/token_issue_request.rb +9 -9
- data/lib/authlete/models/components/token_issue_request.rbi +1 -1
- data/lib/authlete/models/components/token_issue_response.rb +21 -21
- data/lib/authlete/models/components/token_issue_response.rbi +1 -1
- data/lib/authlete/models/components/token_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_request.rb +27 -27
- data/lib/authlete/models/components/token_request.rbi +1 -1
- data/lib/authlete/models/components/token_response.rb +49 -61
- data/lib/authlete/models/components/token_response.rbi +1 -1
- data/lib/authlete/models/components/token_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_revoke_request.rb +7 -7
- data/lib/authlete/models/components/token_revoke_request.rbi +1 -1
- data/lib/authlete/models/components/token_revoke_response.rbi +1 -1
- data/lib/authlete/models/components/token_type.rb +1 -1
- data/lib/authlete/models/components/token_type.rbi +1 -1
- data/lib/authlete/models/components/token_update_request.rb +16 -16
- data/lib/authlete/models/components/token_update_request.rbi +1 -1
- data/lib/authlete/models/components/token_update_response.rb +9 -9
- data/lib/authlete/models/components/token_update_response.rbi +1 -1
- data/lib/authlete/models/components/token_update_response_action.rbi +1 -1
- data/lib/authlete/models/components/trust_anchor.rb +2 -2
- data/lib/authlete/models/components/trust_anchor.rbi +1 -1
- data/lib/authlete/models/components/user_code_charset.rb +1 -1
- data/lib/authlete/models/components/user_code_charset.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_request.rb +7 -67
- data/lib/authlete/models/components/userinfo_issue_request.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_response.rb +5 -5
- data/lib/authlete/models/components/userinfo_issue_response.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/userinfo_request.rb +15 -40
- data/lib/authlete/models/components/userinfo_request.rbi +1 -1
- data/lib/authlete/models/components/userinfo_response.rb +46 -89
- data/lib/authlete/models/components/userinfo_response.rbi +1 -1
- data/lib/authlete/models/components/userinfo_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_response.rb +3 -3
- data/lib/authlete/models/components/vci_batch_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_batch_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_response.rb +2 -2
- data/lib/authlete/models/components/vci_batch_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_response.rb +3 -3
- data/lib/authlete/models/components/vci_deferred_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_response.rb +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_request.rb +1 -1
- data/lib/authlete/models/components/vci_jwks_request.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_response.rb +3 -3
- data/lib/authlete/models/components/vci_jwks_response.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_jwks_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_request.rb +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_request.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_response.rb +3 -3
- data/lib/authlete/models/components/vci_jwtissuer_response.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_request.rb +1 -1
- data/lib/authlete/models/components/vci_metadata_request.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_response.rb +3 -3
- data/lib/authlete/models/components/vci_metadata_response.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_metadata_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_request.rb +10 -79
- data/lib/authlete/models/components/vci_offer_create_request.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_response.rb +1 -1
- data/lib/authlete/models/components/vci_offer_create_response.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_request.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_response.rb +1 -1
- data/lib/authlete/models/components/vci_offer_info_response.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_response.rb +4 -4
- data/lib/authlete/models/components/vci_single_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_single_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_response.rb +1 -1
- data/lib/authlete/models/components/vci_single_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/verified_claims_validation_schema.rb +1 -1
- data/lib/authlete/models/components/verified_claims_validation_schema.rbi +1 -1
- data/lib/authlete/models/components.rb +0 -5
- data/lib/authlete/models/errors/apierror.rbi +2 -1
- data/lib/authlete/models/errors/result_error.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_standard_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_standard_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_revocation_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_revocation_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_delete_api_request.rb +1 -1
- data/lib/authlete/models/operations/auth_token_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_get_list_api_request.rb +3 -3
- data/lib/authlete/models/operations/auth_token_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_revoke_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_revoke_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/authorization_ticket_info_post_api_request.rbi +1 -1
- data/lib/authlete/models/operations/authorization_ticket_info_post_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_complete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_complete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_request.rb +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_authorization_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_request.rb +3 -3
- data/lib/authlete/models/operations/client_authorization_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_request.rb +3 -3
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_update_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_authorization_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_flag_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_flag_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_get_list_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_request.rb +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_delete_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_get_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_update_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_update_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_secret_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_form_request.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_form_response.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_authorization_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_authorization_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_complete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_complete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_verification_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_verification_api_response.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/federation_registration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/federation_registration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_request.rb +1 -1
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_request.rbi +1 -1
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_response.rbi +1 -1
- data/lib/authlete/models/operations/grant_m_api_request.rbi +1 -1
- data/lib/authlete/models/operations/grant_m_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/idtoken_reissue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/idtoken_reissue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/jose_verify_api_request.rbi +1 -1
- data/lib/authlete/models/operations/jose_verify_api_response.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_api_request.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_api_response.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_logout_api_request.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_logout_api_response.rbi +1 -1
- data/lib/authlete/models/operations/pushed_auth_req_api_request.rbi +1 -1
- data/lib/authlete/models/operations/pushed_auth_req_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_configuration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_configuration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_jwks_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_jwks_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/updateauthorizationticket_request.rbi +1 -1
- data/lib/authlete/models/operations/updateauthorizationticket_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwks_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwks_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwtissuer_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwtissuer_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_metadata_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_metadata_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_info_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_info_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations.rb +0 -4
- data/lib/authlete/native_sso.rb +17 -69
- data/lib/authlete/pushed_authorization.rb +10 -5
- data/lib/authlete/revocation.rb +10 -98
- data/lib/authlete/sdkconfiguration.rb +5 -6
- data/lib/authlete/services.rb +47 -27
- data/lib/authlete/token_management.rb +43 -23
- data/lib/authlete/tokens.rb +24 -454
- data/lib/authlete/userinfo.rb +17 -224
- data/lib/authlete/utils/request_bodies.rb +8 -3
- data/lib/authlete/utils/security.rb +32 -11
- data/lib/authlete/utils/url.rb +11 -5
- data/lib/authlete/utils/utils.rb +33 -3
- data/lib/authlete/verifiable_credentials.rb +69 -34
- data/lib/authlete_ruby_sdk.rb +0 -1
- data/lib/crystalline/metadata_fields.rb +66 -9
- data/lib/crystalline/module.rb +3 -3
- data/lib/crystalline/types.rb +11 -3
- metadata +18 -23
- data/lib/authlete/models/components/batchkind.rb +0 -18
- data/lib/authlete/models/components/batchkind.rbi +0 -11
- data/lib/authlete/models/components/token_batch_status.rb +0 -61
- data/lib/authlete/models/components/token_batch_status.rbi +0 -27
- data/lib/authlete/models/components/token_batch_status_result.rb +0 -19
- data/lib/authlete/models/components/token_batch_status_result.rbi +0 -11
- data/lib/authlete/models/components/token_create_batch_response.rb +0 -41
- data/lib/authlete/models/components/token_create_batch_response.rbi +0 -17
- data/lib/authlete/models/components/token_create_batch_status_response.rb +0 -42
- data/lib/authlete/models/components/token_create_batch_status_response.rbi +0 -17
- data/lib/authlete/models/operations/auth_token_create_batch_api_request.rb +0 -41
- data/lib/authlete/models/operations/auth_token_create_batch_api_request.rbi +0 -17
- data/lib/authlete/models/operations/auth_token_create_batch_api_response.rb +0 -44
- data/lib/authlete/models/operations/auth_token_create_batch_api_response.rbi +0 -19
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_request.rb +0 -37
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_request.rbi +0 -15
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_response.rb +0 -44
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_response.rbi +0 -19
- data/lib/authlete/token_operations.rb +0 -344
|
@@ -17,7 +17,7 @@ module Authlete
|
|
|
17
17
|
# A short message which explains the result of the API call.
|
|
18
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
19
19
|
# Result of the API call
|
|
20
|
-
field :action, Crystalline::Nilable.new(Models::Components::HskGetListResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::HskGetListResponseAction, true) } }
|
|
20
|
+
field :action, Crystalline::Nilable.new(Models::Components::HskGetListResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::HskGetListResponseAction, true) } }
|
|
21
21
|
# List of HSK
|
|
22
22
|
field :hsks, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Hsk)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('hsks') } }
|
|
23
23
|
|
|
@@ -17,9 +17,9 @@ module Authlete
|
|
|
17
17
|
# A short message which explains the result of the API call.
|
|
18
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
19
19
|
# Result of the API call
|
|
20
|
-
field :action, Crystalline::Nilable.new(Models::Components::HskGetResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::HskGetResponseAction, true) } }
|
|
20
|
+
field :action, Crystalline::Nilable.new(Models::Components::HskGetResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::HskGetResponseAction, true) } }
|
|
21
21
|
# Holds information about a key managed in an HSM (Hardware Security Module)
|
|
22
|
-
#
|
|
22
|
+
#
|
|
23
23
|
field :hsk, Crystalline::Nilable.new(Models::Components::Hsk), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('hsk') } }
|
|
24
24
|
|
|
25
25
|
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::HskGetResponseAction), hsk: T.nilable(Models::Components::Hsk)).void }
|
|
@@ -18,28 +18,28 @@ module Authlete
|
|
|
18
18
|
# the value of the "`accessToken`" parameter in the
|
|
19
19
|
# response from the `/auth/token` API when the value of
|
|
20
20
|
# the "`jwtAccessToken`" parameter is not available.
|
|
21
|
-
#
|
|
21
|
+
#
|
|
22
22
|
field :access_token, ::String, { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('accessToken'), required: true } }
|
|
23
23
|
# The value of this parameter should be the value of the
|
|
24
24
|
# "`refreshToken`" parameter in a response from the
|
|
25
25
|
# `/auth/token` API.
|
|
26
|
-
#
|
|
26
|
+
#
|
|
27
27
|
field :refresh_token, ::String, { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('refreshToken'), required: true } }
|
|
28
28
|
# The value that should be used as the value of the "`sub`"
|
|
29
29
|
# claim of the ID token.
|
|
30
30
|
# This parameter is optional. When omitted, the value of the subject
|
|
31
31
|
# associated with the access token is used.
|
|
32
|
-
#
|
|
32
|
+
#
|
|
33
33
|
field :sub, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('sub') } }
|
|
34
34
|
# Additional claims that should be embedded in the payload part of
|
|
35
35
|
# the ID token. The format is a JSON object.
|
|
36
36
|
# This parameter is optional.
|
|
37
|
-
#
|
|
37
|
+
#
|
|
38
38
|
field :claims, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('claims') } }
|
|
39
39
|
# Additional parameters that should be embedded in the JWS header of
|
|
40
40
|
# the ID token. The format is a JSON object.
|
|
41
41
|
# This parameter is optional.
|
|
42
|
-
#
|
|
42
|
+
#
|
|
43
43
|
field :idt_header_params, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('idtHeaderParams') } }
|
|
44
44
|
# The type of the "`aud`" claim of the ID token being issued.
|
|
45
45
|
# Valid values of this parameter are as follows.
|
|
@@ -50,8 +50,8 @@ module Authlete
|
|
|
50
50
|
# This parameter is optional, and the default value on omission is
|
|
51
51
|
# "`array`".
|
|
52
52
|
# This parameter takes precedence over the `idTokenAudType` property
|
|
53
|
-
# of
|
|
54
|
-
#
|
|
53
|
+
# of {@link Service} (cf. {@link Service#getIdTokenAudType()}).
|
|
54
|
+
#
|
|
55
55
|
field :id_token_aud_type, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('idTokenAudType') } }
|
|
56
56
|
|
|
57
57
|
sig { params(access_token: ::String, refresh_token: ::String, sub: T.nilable(::String), claims: T.nilable(::String), idt_header_params: T.nilable(::String), id_token_aud_type: T.nilable(::String)).void }
|
|
@@ -17,13 +17,13 @@ module Authlete
|
|
|
17
17
|
# A short message which explains the result of the API call.
|
|
18
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
19
19
|
# The next action that the implementation of the token endpoint should take.
|
|
20
|
-
field :action, Crystalline::Nilable.new(Models::Components::IdtokenReissueResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::IdtokenReissueResponseAction, true) } }
|
|
20
|
+
field :action, Crystalline::Nilable.new(Models::Components::IdtokenReissueResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::IdtokenReissueResponseAction, true) } }
|
|
21
21
|
# The response content that can be used as the message body of the token response that should
|
|
22
22
|
# be returned from the token endpoint.
|
|
23
|
-
#
|
|
23
|
+
#
|
|
24
24
|
field :response_content, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('responseContent') } }
|
|
25
25
|
# The reissued ID token
|
|
26
|
-
#
|
|
26
|
+
#
|
|
27
27
|
field :id_token, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('idToken') } }
|
|
28
28
|
|
|
29
29
|
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::IdtokenReissueResponseAction), response_content: T.nilable(::String), id_token: T.nilable(::String)).void }
|
|
@@ -17,103 +17,87 @@ module Authlete
|
|
|
17
17
|
# A string array listing names of scopes which the caller (= a protected resource endpoint of the
|
|
18
18
|
# service) requires. When the content type of the request from the service is `application/x-www-form-urlencoded`,
|
|
19
19
|
# the format of `scopes` is a space-separated list of scope names.
|
|
20
|
-
#
|
|
20
|
+
#
|
|
21
21
|
# If this parameter is a non-empty array and if it contains a scope which is not covered by the
|
|
22
22
|
# access token,`action=FORBIDDEN` with `error=insufficient_scope` is returned from Authlete.
|
|
23
|
-
#
|
|
23
|
+
#
|
|
24
24
|
field :scopes, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('scopes') }, 'form': { 'field_name': 'scopes' } }
|
|
25
25
|
# A subject (= a user account managed by the service) whom the caller (= a protected resource
|
|
26
26
|
# endpoint of the service) requires.
|
|
27
|
-
#
|
|
27
|
+
#
|
|
28
28
|
# If this parameter is not `null` and if the value does not match the subject who is associated
|
|
29
29
|
# with the access token, `action=FORBIDDEN` with `error=invalid_request` is returned from Authlete.
|
|
30
|
-
#
|
|
30
|
+
#
|
|
31
31
|
field :subject, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('subject') }, 'form': { 'field_name': 'subject' } }
|
|
32
32
|
# Client certificate in PEM format, used to validate binding against access tokens using the TLS
|
|
33
33
|
# client certificate confirmation method.
|
|
34
|
-
#
|
|
34
|
+
#
|
|
35
35
|
field :client_certificate, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientCertificate') }, 'form': { 'field_name': 'clientCertificate' } }
|
|
36
36
|
# `DPoP` header presented by the client during the request to the resource server.
|
|
37
|
-
#
|
|
37
|
+
#
|
|
38
38
|
# The header contains a signed JWT which includes the public key that is paired with the private
|
|
39
39
|
# key used to sign the JWT. See [OAuth 2.0 Demonstration of Proof-of-Possession at the Application
|
|
40
40
|
# Layer (DPoP)](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-dpop) for details.
|
|
41
|
-
#
|
|
41
|
+
#
|
|
42
42
|
field :dpop, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('dpop') }, 'form': { 'field_name': 'dpop' } }
|
|
43
43
|
# HTTP method of the request from the client to the protected resource endpoint. This field is
|
|
44
44
|
# used to validate the `DPoP` header.
|
|
45
|
-
#
|
|
45
|
+
#
|
|
46
46
|
# See [OAuth 2.0 Demonstration of Proof-of-Possession at the Application Layer (DPoP)](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-dpop)
|
|
47
47
|
# for details.
|
|
48
|
-
#
|
|
48
|
+
#
|
|
49
49
|
field :htm, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('htm') }, 'form': { 'field_name': 'htm' } }
|
|
50
50
|
# URL of the protected resource endpoint. This field is used to validate the `DPoP` header.
|
|
51
|
-
#
|
|
51
|
+
#
|
|
52
52
|
# See [OAuth 2.0 Demonstration of Proof-of-Possession at the Application Layer (DPoP)](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-dpop)
|
|
53
53
|
# for details.
|
|
54
|
-
#
|
|
54
|
+
#
|
|
55
55
|
field :htu, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('htu') }, 'form': { 'field_name': 'htu' } }
|
|
56
56
|
# The resources specified by the `resource` request parameters in the token request. See "Resource Indicators for OAuth 2.0" for details.
|
|
57
|
-
#
|
|
57
|
+
#
|
|
58
58
|
field :resources, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resources') }, 'form': { 'field_name': 'resources' } }
|
|
59
59
|
# Authentication Context Class Reference values one of which the user authentication performed during the course
|
|
60
60
|
# of issuing the access token must satisfy.
|
|
61
|
-
#
|
|
61
|
+
#
|
|
62
62
|
field :acr_values, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('acrValues') }, 'form': { 'field_name': 'acrValues' } }
|
|
63
63
|
# The maximum authentication age which is the maximum allowable elapsed time since the user authentication
|
|
64
64
|
# was performed during the course of issuing the access token.
|
|
65
|
-
#
|
|
65
|
+
#
|
|
66
66
|
field :max_age, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('maxAge') }, 'form': { 'field_name': 'maxAge' } }
|
|
67
67
|
# HTTP Message Components required to be in the signature. If absent, defaults to [ "@method", "@target-uri", "authorization" ].
|
|
68
|
-
#
|
|
68
|
+
#
|
|
69
69
|
field :required_components, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requiredComponents') }, 'form': { 'field_name': 'requiredComponents' } }
|
|
70
70
|
# The full URL of the userinfo endpoint.
|
|
71
|
-
#
|
|
71
|
+
#
|
|
72
72
|
field :uri, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('uri') }, 'form': { 'field_name': 'uri' } }
|
|
73
73
|
# The HTTP message body of the request, if present.
|
|
74
|
-
#
|
|
74
|
+
#
|
|
75
75
|
field :message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('message') }, 'form': { 'field_name': 'message' } }
|
|
76
76
|
# HTTP headers to be included in processing the signature. If this is a signed request, this must include the
|
|
77
77
|
# Signature and Signature-Input headers, as well as any additional headers covered by the signature.
|
|
78
|
-
#
|
|
78
|
+
#
|
|
79
79
|
field :headers, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Pair)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('headers') }, 'form': { 'field_name': 'headers', 'json': true } }
|
|
80
80
|
# The target URI of the resource request, including the query part, if any.
|
|
81
|
-
#
|
|
82
|
-
# This parameter is used as the value of the @target-uri derived component for HTTP message signatures
|
|
83
|
-
# [RFC 9421 HTTP Message Signatures, Section 2.2.2. Target URI](https://www.rfc-editor.org/rfc/rfc9421.html#section-2.2.2)).
|
|
84
|
-
# Additionally, other derived components such as `@authority`, `@scheme`, `@path`, `@query` and
|
|
85
|
-
# `@query-param` are computed from this parameter.
|
|
86
|
-
#
|
|
87
|
-
# When this parameter is omitted, the value of the `htu` parameter is used. The `htu` parameter
|
|
88
|
-
# represents the URL of the resource endpoint, which is identical to the target URI of the resource
|
|
89
|
-
# request as long as the request does not include a query component. Conversely, if the resource
|
|
90
|
-
# request includes a query component, the value of the `htu` parameter will not match the target
|
|
91
|
-
# URI, and in that case, the HTTP message signature verification will fail.
|
|
92
|
-
#
|
|
93
|
-
# If neither this `targetUri` parameter nor the `htu` parameter is specified, the target URI is
|
|
94
|
-
# considered unavailable. If HTTP message signing requires the target-uri derived component or
|
|
95
|
-
# other derived components computed based on the target URI, the HTTP message signature verification
|
|
96
|
-
# will fail.
|
|
97
|
-
#
|
|
81
|
+
#
|
|
98
82
|
field :target_uri, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('targetUri') }, 'form': { 'field_name': 'targetUri' } }
|
|
99
83
|
# The flag indicating whether to check if the DPoP proof JWT includes the expected `nonce` value.
|
|
100
|
-
#
|
|
84
|
+
#
|
|
101
85
|
# If this request parameter is set to `true` or if the service's `dpopNonceRequired` property is
|
|
102
86
|
# set to `true`, the `/auth/introspection` API checks if the DPoP proof JWT includes the expected
|
|
103
87
|
# `nonce` value. In this case, the response from the `/auth/introspection` API will include the
|
|
104
88
|
# `dpopNonce` response parameter, which should be used as the value of the DPoP-Nonce HTTP header.
|
|
105
|
-
#
|
|
89
|
+
#
|
|
106
90
|
field :dpop_nonce_required, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('dpopNonceRequired') }, 'form': { 'field_name': 'dpopNonceRequired' } }
|
|
107
91
|
# The flag indicating whether the resource request contains a request body.
|
|
108
|
-
#
|
|
92
|
+
#
|
|
109
93
|
# When the resource request must comply with the HTTP message signing requirements defined in the
|
|
110
94
|
# FAPI 2.0 Message Signing specification, the `"content-digest"` component identifier must be included
|
|
111
95
|
# in the signature base of the HTTP message signature (see [RFC 9421 HTTP Message Signatures](https://www.rfc-editor.org/rfc/rfc9421.html))
|
|
112
96
|
# if the resource request contains a request body.
|
|
113
|
-
#
|
|
97
|
+
#
|
|
114
98
|
# When this `requestBodyContained` parameter is set to `true`, Authlete checks whether `"content-digest"`
|
|
115
99
|
# is included in the signature base, if the FAPI profile applies to the resource request.
|
|
116
|
-
#
|
|
100
|
+
#
|
|
117
101
|
field :request_body_contained, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requestBodyContained') }, 'form': { 'field_name': 'requestBodyContained' } }
|
|
118
102
|
|
|
119
103
|
sig { params(token: ::String, scopes: T.nilable(T::Array[::String]), subject: T.nilable(::String), client_certificate: T.nilable(::String), dpop: T.nilable(::String), htm: T.nilable(::String), htu: T.nilable(::String), resources: T.nilable(T::Array[::String]), acr_values: T.nilable(T::Array[::String]), max_age: T.nilable(::Integer), required_components: T.nilable(T::Array[::String]), uri: T.nilable(::String), message: T.nilable(::String), headers: T.nilable(T::Array[Models::Components::Pair]), target_uri: T.nilable(::String), dpop_nonce_required: T.nilable(T::Boolean), request_body_contained: T.nilable(T::Boolean)).void }
|
|
@@ -17,116 +17,107 @@ module Authlete
|
|
|
17
17
|
# A short message which explains the result of the API call.
|
|
18
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
19
19
|
# The next action that the authorization server implementation should take.
|
|
20
|
-
field :action, Crystalline::Nilable.new(Models::Components::IntrospectionResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::IntrospectionResponseAction, true) } }
|
|
20
|
+
field :action, Crystalline::Nilable.new(Models::Components::IntrospectionResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::IntrospectionResponseAction, true) } }
|
|
21
21
|
# The content that the authorization server implementation can use as the value of `WWW-Authenticate` header on errors.
|
|
22
|
-
#
|
|
22
|
+
#
|
|
23
23
|
field :response_content, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('responseContent') } }
|
|
24
24
|
# The client ID.
|
|
25
25
|
field :client_id, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientId') } }
|
|
26
26
|
# The client ID alias when the token request was made. If the client did not have an alias, this parameter is `null`.
|
|
27
27
|
# Also, if the token request was invalid and it failed to identify a client, this parameter is `null`.
|
|
28
|
-
#
|
|
28
|
+
#
|
|
29
29
|
field :client_id_alias, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientIdAlias') } }
|
|
30
30
|
# The flag which indicates whether the client ID alias was used when the token request was made.
|
|
31
31
|
# `true` if the client ID alias was used when the token request was made.
|
|
32
|
-
#
|
|
32
|
+
#
|
|
33
33
|
field :client_id_alias_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientIdAliasUsed') } }
|
|
34
34
|
# The time at which the access token expires.
|
|
35
35
|
# The value is represented in milliseconds since the Unix epoch (1970-01-01).
|
|
36
|
-
#
|
|
36
|
+
#
|
|
37
37
|
field :expires_at, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('expiresAt') } }
|
|
38
38
|
# The subject who is associated with the access token.
|
|
39
39
|
# The value of this property is `null` if the access token was issued using the flow of [Client Credentials Grant](tools.ietf.org/html/rfc6749#section-4.4).
|
|
40
|
-
#
|
|
40
|
+
#
|
|
41
41
|
field :subject, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('subject') } }
|
|
42
42
|
# The scopes covered by the access token.
|
|
43
|
-
#
|
|
43
|
+
#
|
|
44
44
|
field :scopes, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('scopes') } }
|
|
45
45
|
# `true` if the access token exists.
|
|
46
|
-
#
|
|
46
|
+
#
|
|
47
47
|
field :existent, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('existent') } }
|
|
48
48
|
# true` if the access token is usable (= exists and has not expired).
|
|
49
|
-
#
|
|
49
|
+
#
|
|
50
50
|
field :usable, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('usable') } }
|
|
51
51
|
# `true` if the access token exists.
|
|
52
|
-
#
|
|
52
|
+
#
|
|
53
53
|
field :sufficient, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('sufficient') } }
|
|
54
54
|
# `true` if the access token can be refreshed using the associated refresh token which had been issued
|
|
55
55
|
# along with the access token. `false` if the refresh token for the access token has expired or the access
|
|
56
56
|
# token has no associated refresh token.
|
|
57
|
-
#
|
|
57
|
+
#
|
|
58
58
|
field :refreshable, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('refreshable') } }
|
|
59
59
|
# The extra properties associated with the access token.
|
|
60
60
|
field :properties, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Property)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('properties') } }
|
|
61
61
|
# The client certificate thumbprint used to validate the access token.
|
|
62
|
-
#
|
|
62
|
+
#
|
|
63
63
|
field :certificate_thumbprint, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('certificateThumbprint') } }
|
|
64
64
|
# The target resources. This represents the resources specified by the `resource` request parameters
|
|
65
65
|
# or by the `resource` property in the request object.
|
|
66
|
-
#
|
|
66
|
+
#
|
|
67
67
|
# See "Resource Indicators for OAuth 2.0" for details.
|
|
68
|
-
#
|
|
68
|
+
#
|
|
69
69
|
field :resources, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resources') } }
|
|
70
70
|
# The target resources this proeprty holds may be the same as or different from the ones `resource` property holds.
|
|
71
|
-
#
|
|
72
|
-
# In some flows, the initial request and the subsequent token request are sent to different endpoints.
|
|
73
|
-
# Example flows are the Authorization Code Flow, the Refresh Token Flow, the CIBA Ping Mode, the CIBA Poll Mode and the Device Flow.
|
|
74
|
-
# In these flows, not only the initial request but also the subsequent token request can include the `resource` request parameters.
|
|
75
|
-
# The purpose of the `resource` request parameters in the token request is to narrow the range of the target resources from the original
|
|
76
|
-
# set of target resources requested by the preceding initial request. If narrowing down is performed, the target resources holded by the
|
|
77
|
-
# `resource` proeprty and the ones holded by this property are different. This property holds the narrowed set of target resources.
|
|
78
|
-
#
|
|
79
|
-
# See "Resource Indicators for OAuth 2.0" for details.
|
|
80
|
-
#
|
|
71
|
+
#
|
|
81
72
|
field :access_token_resources, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('accessTokenResources') } }
|
|
82
73
|
# The authorization details. This represents the value of the `authorization_details`
|
|
83
74
|
# request parameter in the preceding device authorization request which is defined in
|
|
84
75
|
# "OAuth 2.0 Rich Authorization Requests".
|
|
85
|
-
#
|
|
76
|
+
#
|
|
86
77
|
field :authorization_details, Crystalline::Nilable.new(Models::Components::AuthzDetails), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('authorizationDetails') } }
|
|
87
78
|
# The attributes of this service that the client application belongs to.
|
|
88
|
-
#
|
|
79
|
+
#
|
|
89
80
|
field :service_attributes, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Pair)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('serviceAttributes') } }
|
|
90
81
|
# The attributes of the client.
|
|
91
|
-
#
|
|
82
|
+
#
|
|
92
83
|
field :client_attributes, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Pair)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientAttributes') } }
|
|
93
84
|
# The scopes property of this class is a list of scope names. The property does not hold information
|
|
94
85
|
# about scope attributes. This scopeDetails property was newly created to convey information about
|
|
95
86
|
# scope attributes.
|
|
96
|
-
#
|
|
87
|
+
#
|
|
97
88
|
field :scope_details, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Scope)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('scopeDetails') } }
|
|
98
89
|
# The value of the `grant_id` request parameter of the device authorization request.
|
|
99
|
-
#
|
|
90
|
+
#
|
|
100
91
|
# The `grant_id` request parameter is defined in
|
|
101
92
|
# [Grant Management for OAuth 2.0](https://openid.net/specs/fapi-grant-management.html)
|
|
102
93
|
# , which is supported by Authlete 2.3 and newer versions.
|
|
103
|
-
#
|
|
94
|
+
#
|
|
104
95
|
field :grant_id, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grantId') } }
|
|
105
96
|
|
|
106
97
|
field :grant, Crystalline::Nilable.new(Models::Components::Grant), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grant') } }
|
|
107
98
|
# the flag which indicates whether the access token is for an external
|
|
108
99
|
# attachment.
|
|
109
|
-
#
|
|
100
|
+
#
|
|
110
101
|
field :for_external_attachment, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('forExternalAttachment') } }
|
|
111
102
|
# the claims that the user has consented for the client application
|
|
112
103
|
# to know.
|
|
113
|
-
#
|
|
104
|
+
#
|
|
114
105
|
field :consented_claims, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('consentedClaims') } }
|
|
115
106
|
# The grant type of the access token when the access token was created.
|
|
116
|
-
#
|
|
117
|
-
field :grant_type, Crystalline::Nilable.new(Models::Components::GrantType), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grantType'), 'decoder': Utils.enum_from_string(Models::Components::GrantType, true) } }
|
|
107
|
+
#
|
|
108
|
+
field :grant_type, Crystalline::Nilable.new(Models::Components::GrantType), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grantType'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::GrantType, true) } }
|
|
118
109
|
# The Authentication Context Class Reference of the user authentication that the authorization server performed
|
|
119
110
|
# during the course of issuing the access token.
|
|
120
|
-
#
|
|
111
|
+
#
|
|
121
112
|
field :acr, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('acr') } }
|
|
122
113
|
# The time when the user authentication was performed during the course of issuing the access token.
|
|
123
|
-
#
|
|
114
|
+
#
|
|
124
115
|
field :auth_time, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('authTime') } }
|
|
125
116
|
# The entity ID of the client.
|
|
126
|
-
#
|
|
117
|
+
#
|
|
127
118
|
field :client_entity_id, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientEntityId') } }
|
|
128
119
|
# Flag which indicates whether the entity ID of the client was used when the request for the access token was made.
|
|
129
|
-
#
|
|
120
|
+
#
|
|
130
121
|
field :client_entity_id_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientEntityIdUsed') } }
|
|
131
122
|
# The flag indicating whether the token is for credential issuance.
|
|
132
123
|
field :for_credential_issuance, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('forCredentialIssuance') } }
|
|
@@ -138,25 +129,25 @@ module Authlete
|
|
|
138
129
|
field :issuable_credentials, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('issuableCredentials') } }
|
|
139
130
|
# The expected nonce value for DPoP proof JWT, which should be used
|
|
140
131
|
# as the value of the `DPoP-Nonce` HTTP header.
|
|
141
|
-
#
|
|
132
|
+
#
|
|
142
133
|
field :dpop_nonce, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('dpopNonce') } }
|
|
143
134
|
# The flag indicating whether the HTTP response from the protected resource endpoint must include
|
|
144
135
|
# an HTTP message signature ([RFC 9421 HTTP Message Signatures](https://www.rfc-editor.org/rfc/rfc9421.html))
|
|
145
136
|
# in compliance with [FAPI 2.0 Message Signing](https://openid.bitbucket.io/fapi/fapi-2_0-message-signing.html).
|
|
146
|
-
#
|
|
137
|
+
#
|
|
147
138
|
# When this response parameter is `true`, the HTTP response from the protected resource endpoint
|
|
148
139
|
# must include the `Signature` and `Signature-Input` HTTP fields.
|
|
149
|
-
#
|
|
140
|
+
#
|
|
150
141
|
field :response_signing_required, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('responseSigningRequired') } }
|
|
151
142
|
# The location of the client's metadata document that was used to resolve client metadata.
|
|
152
|
-
#
|
|
143
|
+
#
|
|
153
144
|
# This property is set when client metadata was retrieved via the [OAuth Client ID Metadata Document](https://datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/) (CIMD) mechanism.
|
|
154
|
-
#
|
|
145
|
+
#
|
|
155
146
|
field :metadata_document_location, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('metadataDocumentLocation') } }
|
|
156
147
|
# Flag indicating whether a metadata document was used to resolve client metadata for this request.
|
|
157
|
-
#
|
|
148
|
+
#
|
|
158
149
|
# When `true`, the client metadata was retrieved via the CIMD mechanism rather than from the Authlete database.
|
|
159
|
-
#
|
|
150
|
+
#
|
|
160
151
|
field :metadata_document_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('metadataDocumentUsed') } }
|
|
161
152
|
|
|
162
153
|
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::IntrospectionResponseAction), response_content: T.nilable(::String), client_id: T.nilable(::Integer), client_id_alias: T.nilable(::String), client_id_alias_used: T.nilable(T::Boolean), expires_at: T.nilable(::Integer), subject: T.nilable(::String), scopes: T.nilable(T::Array[::String]), existent: T.nilable(T::Boolean), usable: T.nilable(T::Boolean), sufficient: T.nilable(T::Boolean), refreshable: T.nilable(T::Boolean), properties: T.nilable(T::Array[Models::Components::Property]), certificate_thumbprint: T.nilable(::String), resources: T.nilable(T::Array[::String]), access_token_resources: T.nilable(T::Array[::String]), authorization_details: T.nilable(Models::Components::AuthzDetails), service_attributes: T.nilable(T::Array[Models::Components::Pair]), client_attributes: T.nilable(T::Array[Models::Components::Pair]), scope_details: T.nilable(T::Array[Models::Components::Scope]), grant_id: T.nilable(::String), grant: T.nilable(Models::Components::Grant), for_external_attachment: T.nilable(T::Boolean), consented_claims: T.nilable(T::Array[::String]), grant_type: T.nilable(Models::Components::GrantType), acr: T.nilable(::String), auth_time: T.nilable(::Integer), client_entity_id: T.nilable(::String), client_entity_id_used: T.nilable(T::Boolean), for_credential_issuance: T.nilable(T::Boolean), cnonce: T.nilable(::String), cnonce_expires_at: T.nilable(::Integer), issuable_credentials: T.nilable(::String), dpop_nonce: T.nilable(::String), response_signing_required: T.nilable(T::Boolean), metadata_document_location: T.nilable(::String), metadata_document_used: T.nilable(T::Boolean)).void }
|
|
@@ -13,21 +13,21 @@ module Authlete
|
|
|
13
13
|
include Crystalline::MetadataFields
|
|
14
14
|
|
|
15
15
|
# A JOSE object.
|
|
16
|
-
#
|
|
16
|
+
#
|
|
17
17
|
field :jose, ::String, { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('jose'), required: true }, 'form': { 'field_name': 'jose' } }
|
|
18
18
|
# Mandatory claims that are required to be included in the JOSE object.
|
|
19
|
-
#
|
|
19
|
+
#
|
|
20
20
|
field :mandatory_claims, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('mandatoryClaims') }, 'form': { 'field_name': 'mandatoryClaims' } }
|
|
21
21
|
# Allowable clock skew in seconds.
|
|
22
|
-
#
|
|
22
|
+
#
|
|
23
23
|
field :clock_skew, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clockSkew') }, 'form': { 'field_name': 'clockSkew' } }
|
|
24
24
|
# The identifier of the client application whose keys are required for verification of the JOSE
|
|
25
25
|
# object.
|
|
26
|
-
#
|
|
26
|
+
#
|
|
27
27
|
field :client_identifier, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientIdentifier') }, 'form': { 'field_name': 'clientIdentifier' } }
|
|
28
28
|
# The flag which indicates whether the signature of the JOSE object has been signed by a client
|
|
29
29
|
# application with the client's private key or a shared symmetric key.
|
|
30
|
-
#
|
|
30
|
+
#
|
|
31
31
|
field :signed_by_client, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('signedByClient') }, 'form': { 'field_name': 'signedByClient' } }
|
|
32
32
|
|
|
33
33
|
sig { params(jose: ::String, mandatory_claims: T.nilable(T::Array[::String]), clock_skew: T.nilable(::Integer), client_identifier: T.nilable(::String), signed_by_client: T.nilable(T::Boolean)).void }
|
|
@@ -17,19 +17,19 @@ module Authlete
|
|
|
17
17
|
# A short message which explains the result of the API call.
|
|
18
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
19
19
|
# The result of the verification on the JOSE object.
|
|
20
|
-
#
|
|
20
|
+
#
|
|
21
21
|
field :valid, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('valid') } }
|
|
22
22
|
# The result of the signature verification.
|
|
23
|
-
#
|
|
23
|
+
#
|
|
24
24
|
field :signature_valid, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('signatureValid') } }
|
|
25
25
|
# The list of missing claims.
|
|
26
|
-
#
|
|
26
|
+
#
|
|
27
27
|
field :missing_claims, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('missingClaims') } }
|
|
28
28
|
# The list of invalid claims.
|
|
29
|
-
#
|
|
29
|
+
#
|
|
30
30
|
field :invalid_claims, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('invalidClaims') } }
|
|
31
31
|
# The list of error messages.
|
|
32
|
-
#
|
|
32
|
+
#
|
|
33
33
|
field :error_descriptions, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('errorDescriptions') } }
|
|
34
34
|
|
|
35
35
|
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), valid: T.nilable(T::Boolean), signature_valid: T.nilable(T::Boolean), missing_claims: T.nilable(T::Array[::String]), invalid_claims: T.nilable(T::Array[::String]), error_descriptions: T.nilable(T::Array[::String])).void }
|
|
@@ -12,9 +12,9 @@ module Authlete
|
|
|
12
12
|
# - as `authorizationEncryptionAlg` value, it refers to the encoding algorithm used by server for transporting they keys on JARM objects
|
|
13
13
|
# - as `requestEncryptionAlg` value, it refers to the expected key transport encoding algorithm that server expect from client when encrypting a Request Object
|
|
14
14
|
# - as `idTokenEncryptionAlg` value, it refers to the algorithm used by the server to key transport of id_tokens
|
|
15
|
-
#
|
|
15
|
+
#
|
|
16
16
|
# **Please note that some of the algorithms are more secure than others, some are not supported very well cross platforms and some (like RSA1_5) is known to be weak**.
|
|
17
|
-
#
|
|
17
|
+
#
|
|
18
18
|
class JweAlg < T::Enum
|
|
19
19
|
enums do
|
|
20
20
|
RSA1_5 = new('RSA1_5')
|
|
@@ -12,7 +12,7 @@ module Authlete
|
|
|
12
12
|
# - as `authorizationEncryptionEnc` value, it refers to the encryption algorithm used by server when creating a JARM response
|
|
13
13
|
# - as `requestEncryptionEnc` value, it refers to the expected encryption algorithm used by the client when encrypting a Request Object
|
|
14
14
|
# - as `idTokenEncryptionEnc` value, it refers to the algorithm used by the server to encrypt id_tokens
|
|
15
|
-
#
|
|
15
|
+
#
|
|
16
16
|
class JweEnc < T::Enum
|
|
17
17
|
enums do
|
|
18
18
|
A128_CBC_HS256 = new('A128CBC_HS256')
|
|
@@ -9,12 +9,12 @@ module Authlete
|
|
|
9
9
|
module Components
|
|
10
10
|
# JwsAlg - The signature algorithm for JWT. This value is represented on 'alg' attribute
|
|
11
11
|
# of the header of JWT.
|
|
12
|
-
#
|
|
12
|
+
#
|
|
13
13
|
# it's semantics depends upon where is this defined, for instance:
|
|
14
14
|
# - as service accessTokenSignAlg value, it defines that access token are JWT and the algorithm used to sign it. Check your [KB article](https://kb.authlete.com/en/s/oauth-and-openid-connect/a/jwt-based-access-token).
|
|
15
15
|
# - as client authorizationSignAlg value, it represents the signature algorithm used when [creating a JARM response](https://kb.authlete.com/en/s/oauth-and-openid-connect/a/enabling-jarm).
|
|
16
16
|
# - or as client requestSignAlg value, it specifies which is the expected signature used by [client on a Request Object](https://kb.authlete.com/en/s/oauth-and-openid-connect/a/request-objects).
|
|
17
|
-
#
|
|
17
|
+
#
|
|
18
18
|
class JwsAlg < T::Enum
|
|
19
19
|
enums do
|
|
20
20
|
NONE = new('NONE')
|