authlete_ruby_sdk 0.0.3.pre.beta → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/authlete/authorization.rb +24 -563
- data/lib/authlete/authorization_management.rb +15 -7
- data/lib/authlete/ciba.rb +35 -414
- data/lib/authlete/client.rb +3 -3
- data/lib/authlete/client_management.rb +133 -87
- data/lib/authlete/clients.rb +43 -23
- data/lib/authlete/device_flow.rb +24 -147
- data/lib/authlete/dynamic_client_registration.rb +31 -283
- data/lib/authlete/federation.rb +17 -66
- data/lib/authlete/grant_management.rb +10 -5
- data/lib/authlete/hardware_security_keys.rb +24 -10
- data/lib/authlete/introspection.rb +17 -195
- data/lib/authlete/jose_object.rb +10 -5
- data/lib/authlete/jwk_set_endpoint.rb +12 -7
- data/lib/authlete/lifecycle.rb +10 -5
- data/lib/authlete/models/components/access_token.rb +9 -9
- data/lib/authlete/models/components/access_token.rbi +1 -1
- data/lib/authlete/models/components/application_type.rb +1 -1
- data/lib/authlete/models/components/application_type.rbi +1 -1
- data/lib/authlete/models/components/attachment_type.rb +1 -1
- data/lib/authlete/models/components/attachment_type.rbi +1 -1
- data/lib/authlete/models/components/authorization_details_element.rb +16 -16
- data/lib/authlete/models/components/authorization_details_element.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_request.rb +4 -4
- data/lib/authlete/models/components/authorization_fail_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_request_reason.rb +1 -1
- data/lib/authlete/models/components/authorization_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_response.rb +2 -2
- data/lib/authlete/models/components/authorization_fail_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_request.rb +19 -83
- data/lib/authlete/models/components/authorization_issue_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_response.rb +8 -8
- data/lib/authlete/models/components/authorization_issue_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_request.rb +7 -7
- data/lib/authlete/models/components/authorization_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_response.rb +84 -176
- data/lib/authlete/models/components/authorization_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info.rb +1 -1
- data/lib/authlete/models/components/authorization_ticket_info.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_response.rb +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_response.rb +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_response_action.rbi +1 -1
- data/lib/authlete/models/components/authz_details.rb +2 -2
- data/lib/authlete/models/components/authz_details.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_request.rb +23 -23
- data/lib/authlete/models/components/backchannel_authentication_complete_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_request_result.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_request_result.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_response.rb +30 -30
- data/lib/authlete/models/components/backchannel_authentication_complete_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_response_action.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_request.rb +5 -5
- data/lib/authlete/models/components/backchannel_authentication_fail_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_request_reason.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_response.rb +2 -2
- data/lib/authlete/models/components/backchannel_authentication_fail_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_request.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_response.rb +5 -5
- data/lib/authlete/models/components/backchannel_authentication_issue_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_request.rb +12 -12
- data/lib/authlete/models/components/backchannel_authentication_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_response.rb +47 -56
- data/lib/authlete/models/components/backchannel_authentication_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_response_action.rbi +1 -1
- data/lib/authlete/models/components/cimd_options.rb +15 -15
- data/lib/authlete/models/components/cimd_options.rbi +1 -1
- data/lib/authlete/models/components/claim_type.rbi +1 -1
- data/lib/authlete/models/components/client.rb +159 -308
- data/lib/authlete/models/components/client.rbi +1 -1
- data/lib/authlete/models/components/client_auth_method.rb +1 -1
- data/lib/authlete/models/components/client_auth_method.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_delete_response.rb +4 -4
- data/lib/authlete/models/components/client_authorization_delete_response.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_get_list_request.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_get_list_response.rb +6 -6
- data/lib/authlete/models/components/client_authorization_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_update_request.rb +2 -2
- data/lib/authlete/models/components/client_authorization_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_clientsource.rb +1 -1
- data/lib/authlete/models/components/client_clientsource.rbi +1 -1
- data/lib/authlete/models/components/client_extension.rb +9 -19
- data/lib/authlete/models/components/client_extension.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_get_response.rb +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_get_response.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_request.rb +4 -4
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_flag_update_request.rb +1 -1
- data/lib/authlete/models/components/client_flag_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_flag_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_get_list_response.rb +4 -4
- data/lib/authlete/models/components/client_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/client_granted_scopes_delete_response.rbi +1 -1
- data/lib/authlete/models/components/client_input.rb +154 -293
- data/lib/authlete/models/components/client_input.rbi +1 -1
- data/lib/authlete/models/components/client_limited.rb +7 -7
- data/lib/authlete/models/components/client_limited.rbi +1 -1
- data/lib/authlete/models/components/client_limited_authorization.rb +57 -106
- data/lib/authlete/models/components/client_limited_authorization.rbi +1 -1
- data/lib/authlete/models/components/client_limited_authorization_clientsource.rb +1 -1
- data/lib/authlete/models/components/client_limited_authorization_clientsource.rbi +1 -1
- data/lib/authlete/models/components/client_registration_response.rb +3 -3
- data/lib/authlete/models/components/client_registration_response.rbi +1 -1
- data/lib/authlete/models/components/client_registration_response_action.rb +1 -1
- data/lib/authlete/models/components/client_registration_response_action.rbi +1 -1
- data/lib/authlete/models/components/client_registration_type.rb +1 -1
- data/lib/authlete/models/components/client_registration_type.rbi +1 -1
- data/lib/authlete/models/components/client_secret_refresh_response.rb +2 -2
- data/lib/authlete/models/components/client_secret_refresh_response.rbi +1 -1
- data/lib/authlete/models/components/client_secret_update_request.rb +1 -1
- data/lib/authlete/models/components/client_secret_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_secret_update_response.rb +2 -2
- data/lib/authlete/models/components/client_secret_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_type.rb +1 -1
- data/lib/authlete/models/components/client_type.rbi +1 -1
- data/lib/authlete/models/components/credential_issuance_order.rb +1 -1
- data/lib/authlete/models/components/credential_issuance_order.rbi +1 -1
- data/lib/authlete/models/components/credential_issuer_metadata.rb +5 -5
- data/lib/authlete/models/components/credential_issuer_metadata.rbi +1 -1
- data/lib/authlete/models/components/credential_offer_info.rb +12 -20
- data/lib/authlete/models/components/credential_offer_info.rbi +1 -1
- data/lib/authlete/models/components/credential_request_info.rbi +1 -1
- data/lib/authlete/models/components/delivery_mode.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_request.rb +12 -12
- data/lib/authlete/models/components/device_authorization_request.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_response.rb +39 -48
- data/lib/authlete/models/components/device_authorization_response.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/device_complete_request.rb +22 -22
- data/lib/authlete/models/components/device_complete_request.rbi +1 -1
- data/lib/authlete/models/components/device_complete_request_result.rb +1 -1
- data/lib/authlete/models/components/device_complete_request_result.rbi +1 -1
- data/lib/authlete/models/components/device_complete_response.rb +2 -2
- data/lib/authlete/models/components/device_complete_response.rbi +1 -1
- data/lib/authlete/models/components/device_complete_response_action.rb +1 -1
- data/lib/authlete/models/components/device_complete_response_action.rbi +1 -1
- data/lib/authlete/models/components/device_verification_request.rb +1 -1
- data/lib/authlete/models/components/device_verification_request.rbi +1 -1
- data/lib/authlete/models/components/device_verification_response.rb +32 -32
- data/lib/authlete/models/components/device_verification_response.rbi +1 -1
- data/lib/authlete/models/components/device_verification_response_action.rbi +1 -1
- data/lib/authlete/models/components/display.rb +3 -3
- data/lib/authlete/models/components/display.rbi +1 -1
- data/lib/authlete/models/components/dynamic_scope.rbi +1 -1
- data/lib/authlete/models/components/fapi_mode.rbi +1 -1
- data/lib/authlete/models/components/federation_configuration_response.rb +2 -2
- data/lib/authlete/models/components/federation_configuration_response.rbi +1 -1
- data/lib/authlete/models/components/federation_configuration_response_action.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_request.rb +2 -2
- data/lib/authlete/models/components/federation_registration_request.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_response.rb +2 -2
- data/lib/authlete/models/components/federation_registration_response.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_response_action.rbi +1 -1
- data/lib/authlete/models/components/g_m_request.rb +13 -13
- data/lib/authlete/models/components/g_m_request.rbi +1 -1
- data/lib/authlete/models/components/g_m_response.rb +3 -3
- data/lib/authlete/models/components/g_m_response.rbi +1 -1
- data/lib/authlete/models/components/g_m_response_action.rbi +1 -1
- data/lib/authlete/models/components/grant.rb +2 -2
- data/lib/authlete/models/components/grant.rbi +1 -1
- data/lib/authlete/models/components/grant_management_action.rb +2 -2
- data/lib/authlete/models/components/grant_management_action.rbi +1 -1
- data/lib/authlete/models/components/grant_scope.rb +2 -2
- data/lib/authlete/models/components/grant_scope.rbi +1 -1
- data/lib/authlete/models/components/grant_type.rb +1 -1
- data/lib/authlete/models/components/grant_type.rbi +1 -1
- data/lib/authlete/models/components/hsk.rb +8 -8
- data/lib/authlete/models/components/hsk.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_request.rb +6 -6
- data/lib/authlete/models/components/hsk_create_request.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_response.rb +2 -2
- data/lib/authlete/models/components/hsk_create_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_delete_response.rb +2 -2
- data/lib/authlete/models/components/hsk_delete_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_delete_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_list_response.rb +1 -1
- data/lib/authlete/models/components/hsk_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_list_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_response.rb +2 -2
- data/lib/authlete/models/components/hsk_get_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_response_action.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_request.rb +7 -7
- data/lib/authlete/models/components/idtoken_reissue_request.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_response.rb +3 -3
- data/lib/authlete/models/components/idtoken_reissue_response.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_response_action.rbi +1 -1
- data/lib/authlete/models/components/introspection_request.rb +24 -40
- data/lib/authlete/models/components/introspection_request.rbi +1 -1
- data/lib/authlete/models/components/introspection_response.rb +36 -45
- data/lib/authlete/models/components/introspection_response.rbi +1 -1
- data/lib/authlete/models/components/introspection_response_action.rbi +1 -1
- data/lib/authlete/models/components/jose_verify_request.rb +5 -5
- data/lib/authlete/models/components/jose_verify_request.rbi +1 -1
- data/lib/authlete/models/components/jose_verify_response.rb +5 -5
- data/lib/authlete/models/components/jose_verify_response.rbi +1 -1
- data/lib/authlete/models/components/jwe_alg.rb +2 -2
- data/lib/authlete/models/components/jwe_alg.rbi +1 -1
- data/lib/authlete/models/components/jwe_enc.rb +1 -1
- data/lib/authlete/models/components/jwe_enc.rbi +1 -1
- data/lib/authlete/models/components/jws_alg.rb +2 -2
- data/lib/authlete/models/components/jws_alg.rbi +1 -1
- data/lib/authlete/models/components/named_uri.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_request.rb +1 -1
- data/lib/authlete/models/components/native_sso_logout_request.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_response.rb +3 -3
- data/lib/authlete/models/components/native_sso_logout_response.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_response_action.rb +1 -1
- data/lib/authlete/models/components/native_sso_logout_response_action.rbi +1 -1
- data/lib/authlete/models/components/native_sso_request.rb +8 -24
- data/lib/authlete/models/components/native_sso_request.rbi +1 -1
- data/lib/authlete/models/components/native_sso_response.rb +4 -4
- data/lib/authlete/models/components/native_sso_response.rbi +1 -1
- data/lib/authlete/models/components/native_sso_response_action.rb +1 -1
- data/lib/authlete/models/components/native_sso_response_action.rbi +1 -1
- data/lib/authlete/models/components/pair.rbi +1 -1
- data/lib/authlete/models/components/prompt.rb +3 -3
- data/lib/authlete/models/components/prompt.rbi +1 -1
- data/lib/authlete/models/components/property.rb +1 -1
- data/lib/authlete/models/components/property.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_request.rb +11 -11
- data/lib/authlete/models/components/pushed_authorization_request.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response.rb +6 -6
- data/lib/authlete/models/components/pushed_authorization_response.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response_clientauthmethod.rb +1 -1
- data/lib/authlete/models/components/pushed_authorization_response_clientauthmethod.rbi +1 -1
- data/lib/authlete/models/components/response_type.rbi +1 -1
- data/lib/authlete/models/components/responsemode.rbi +1 -1
- data/lib/authlete/models/components/revocation_request.rb +10 -10
- data/lib/authlete/models/components/revocation_request.rbi +1 -1
- data/lib/authlete/models/components/revocation_response.rb +2 -2
- data/lib/authlete/models/components/revocation_response.rbi +1 -1
- data/lib/authlete/models/components/revocation_response_action.rbi +1 -1
- data/lib/authlete/models/components/scope.rbi +1 -1
- data/lib/authlete/models/components/security.rbi +1 -1
- data/lib/authlete/models/components/service.rb +248 -599
- data/lib/authlete/models/components/service.rbi +1 -1
- data/lib/authlete/models/components/service_get_list_response.rb +4 -4
- data/lib/authlete/models/components/service_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/service_input.rb +242 -593
- data/lib/authlete/models/components/service_input.rbi +1 -1
- data/lib/authlete/models/components/service_jwks_get_response.rbi +1 -1
- data/lib/authlete/models/components/service_profile.rbi +1 -1
- data/lib/authlete/models/components/sns_credentials.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_request.rb +22 -22
- data/lib/authlete/models/components/standard_introspection_request.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_response.rb +2 -2
- data/lib/authlete/models/components/standard_introspection_response.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_response_action.rbi +1 -1
- data/lib/authlete/models/components/subject_type.rb +2 -2
- data/lib/authlete/models/components/subject_type.rbi +1 -1
- data/lib/authlete/models/components/supportedsnse.rbi +1 -1
- data/lib/authlete/models/components/tagged_value.rbi +1 -1
- data/lib/authlete/models/components/token_create_request.rb +27 -59
- data/lib/authlete/models/components/token_create_request.rbi +1 -1
- data/lib/authlete/models/components/token_create_response.rb +18 -18
- data/lib/authlete/models/components/token_create_response.rbi +1 -1
- data/lib/authlete/models/components/token_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_fail_request.rb +3 -3
- data/lib/authlete/models/components/token_fail_request.rbi +1 -1
- data/lib/authlete/models/components/token_fail_request_reason.rb +1 -1
- data/lib/authlete/models/components/token_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/token_fail_response.rb +2 -2
- data/lib/authlete/models/components/token_fail_response.rbi +1 -1
- data/lib/authlete/models/components/token_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_get_list_response.rb +5 -5
- data/lib/authlete/models/components/token_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/token_info.rb +6 -6
- data/lib/authlete/models/components/token_info.rbi +1 -1
- data/lib/authlete/models/components/token_issue_request.rb +9 -9
- data/lib/authlete/models/components/token_issue_request.rbi +1 -1
- data/lib/authlete/models/components/token_issue_response.rb +21 -21
- data/lib/authlete/models/components/token_issue_response.rbi +1 -1
- data/lib/authlete/models/components/token_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_request.rb +27 -27
- data/lib/authlete/models/components/token_request.rbi +1 -1
- data/lib/authlete/models/components/token_response.rb +49 -61
- data/lib/authlete/models/components/token_response.rbi +1 -1
- data/lib/authlete/models/components/token_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_revoke_request.rb +7 -7
- data/lib/authlete/models/components/token_revoke_request.rbi +1 -1
- data/lib/authlete/models/components/token_revoke_response.rbi +1 -1
- data/lib/authlete/models/components/token_type.rb +1 -1
- data/lib/authlete/models/components/token_type.rbi +1 -1
- data/lib/authlete/models/components/token_update_request.rb +16 -16
- data/lib/authlete/models/components/token_update_request.rbi +1 -1
- data/lib/authlete/models/components/token_update_response.rb +9 -9
- data/lib/authlete/models/components/token_update_response.rbi +1 -1
- data/lib/authlete/models/components/token_update_response_action.rbi +1 -1
- data/lib/authlete/models/components/trust_anchor.rb +2 -2
- data/lib/authlete/models/components/trust_anchor.rbi +1 -1
- data/lib/authlete/models/components/user_code_charset.rb +1 -1
- data/lib/authlete/models/components/user_code_charset.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_request.rb +7 -67
- data/lib/authlete/models/components/userinfo_issue_request.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_response.rb +5 -5
- data/lib/authlete/models/components/userinfo_issue_response.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/userinfo_request.rb +15 -40
- data/lib/authlete/models/components/userinfo_request.rbi +1 -1
- data/lib/authlete/models/components/userinfo_response.rb +46 -89
- data/lib/authlete/models/components/userinfo_response.rbi +1 -1
- data/lib/authlete/models/components/userinfo_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_response.rb +3 -3
- data/lib/authlete/models/components/vci_batch_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_batch_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_response.rb +2 -2
- data/lib/authlete/models/components/vci_batch_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_response.rb +3 -3
- data/lib/authlete/models/components/vci_deferred_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_response.rb +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_request.rb +1 -1
- data/lib/authlete/models/components/vci_jwks_request.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_response.rb +3 -3
- data/lib/authlete/models/components/vci_jwks_response.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_jwks_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_request.rb +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_request.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_response.rb +3 -3
- data/lib/authlete/models/components/vci_jwtissuer_response.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_request.rb +1 -1
- data/lib/authlete/models/components/vci_metadata_request.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_response.rb +3 -3
- data/lib/authlete/models/components/vci_metadata_response.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_metadata_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_request.rb +10 -79
- data/lib/authlete/models/components/vci_offer_create_request.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_response.rb +1 -1
- data/lib/authlete/models/components/vci_offer_create_response.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_request.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_response.rb +1 -1
- data/lib/authlete/models/components/vci_offer_info_response.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_response.rb +4 -4
- data/lib/authlete/models/components/vci_single_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_single_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_response.rb +1 -1
- data/lib/authlete/models/components/vci_single_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/verified_claims_validation_schema.rb +1 -1
- data/lib/authlete/models/components/verified_claims_validation_schema.rbi +1 -1
- data/lib/authlete/models/components.rb +0 -5
- data/lib/authlete/models/errors/apierror.rbi +2 -1
- data/lib/authlete/models/errors/result_error.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_standard_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_standard_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_revocation_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_revocation_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_delete_api_request.rb +1 -1
- data/lib/authlete/models/operations/auth_token_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_get_list_api_request.rb +3 -3
- data/lib/authlete/models/operations/auth_token_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_revoke_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_revoke_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/authorization_ticket_info_post_api_request.rbi +1 -1
- data/lib/authlete/models/operations/authorization_ticket_info_post_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_complete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_complete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_request.rb +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_authorization_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_request.rb +3 -3
- data/lib/authlete/models/operations/client_authorization_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_request.rb +3 -3
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_update_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_authorization_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_flag_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_flag_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_get_list_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_request.rb +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_delete_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_get_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_update_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_update_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_secret_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_form_request.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_form_response.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_authorization_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_authorization_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_complete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_complete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_verification_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_verification_api_response.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/federation_registration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/federation_registration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_request.rb +1 -1
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_request.rbi +1 -1
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_response.rbi +1 -1
- data/lib/authlete/models/operations/grant_m_api_request.rbi +1 -1
- data/lib/authlete/models/operations/grant_m_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/idtoken_reissue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/idtoken_reissue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/jose_verify_api_request.rbi +1 -1
- data/lib/authlete/models/operations/jose_verify_api_response.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_api_request.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_api_response.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_logout_api_request.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_logout_api_response.rbi +1 -1
- data/lib/authlete/models/operations/pushed_auth_req_api_request.rbi +1 -1
- data/lib/authlete/models/operations/pushed_auth_req_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_configuration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_configuration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_jwks_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_jwks_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/updateauthorizationticket_request.rbi +1 -1
- data/lib/authlete/models/operations/updateauthorizationticket_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwks_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwks_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwtissuer_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwtissuer_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_metadata_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_metadata_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_info_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_info_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations.rb +0 -4
- data/lib/authlete/native_sso.rb +17 -69
- data/lib/authlete/pushed_authorization.rb +10 -5
- data/lib/authlete/revocation.rb +10 -98
- data/lib/authlete/sdkconfiguration.rb +5 -6
- data/lib/authlete/services.rb +47 -27
- data/lib/authlete/token_management.rb +43 -23
- data/lib/authlete/tokens.rb +24 -454
- data/lib/authlete/userinfo.rb +17 -224
- data/lib/authlete/utils/request_bodies.rb +8 -3
- data/lib/authlete/utils/security.rb +32 -11
- data/lib/authlete/utils/url.rb +11 -5
- data/lib/authlete/utils/utils.rb +33 -3
- data/lib/authlete/verifiable_credentials.rb +69 -34
- data/lib/authlete_ruby_sdk.rb +0 -1
- data/lib/crystalline/metadata_fields.rb +66 -9
- data/lib/crystalline/module.rb +3 -3
- data/lib/crystalline/types.rb +11 -3
- metadata +18 -23
- data/lib/authlete/models/components/batchkind.rb +0 -18
- data/lib/authlete/models/components/batchkind.rbi +0 -11
- data/lib/authlete/models/components/token_batch_status.rb +0 -61
- data/lib/authlete/models/components/token_batch_status.rbi +0 -27
- data/lib/authlete/models/components/token_batch_status_result.rb +0 -19
- data/lib/authlete/models/components/token_batch_status_result.rbi +0 -11
- data/lib/authlete/models/components/token_create_batch_response.rb +0 -41
- data/lib/authlete/models/components/token_create_batch_response.rbi +0 -17
- data/lib/authlete/models/components/token_create_batch_status_response.rb +0 -42
- data/lib/authlete/models/components/token_create_batch_status_response.rbi +0 -17
- data/lib/authlete/models/operations/auth_token_create_batch_api_request.rb +0 -41
- data/lib/authlete/models/operations/auth_token_create_batch_api_request.rbi +0 -17
- data/lib/authlete/models/operations/auth_token_create_batch_api_response.rb +0 -44
- data/lib/authlete/models/operations/auth_token_create_batch_api_response.rbi +0 -19
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_request.rb +0 -37
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_request.rbi +0 -15
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_response.rb +0 -44
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_response.rbi +0 -19
- data/lib/authlete/token_operations.rb +0 -344
|
@@ -15,82 +15,82 @@ module Authlete
|
|
|
15
15
|
# Request parameters which comply with the introspection request defined
|
|
16
16
|
# in "[2.1. Introspection Request](https://datatracker.ietf.org/doc/html/rfc7662#section-2.1)" in
|
|
17
17
|
# RFC 7662.
|
|
18
|
-
#
|
|
18
|
+
#
|
|
19
19
|
# The implementation of the introspection endpoint of your authorization server will receive an
|
|
20
20
|
# HTTP POST [[RFC 7231](https://datatracker.ietf.org/doc/html/rfc7231)] request with parameters
|
|
21
21
|
# in the `application/x-www-form-urlencoded` format. It is the entity body of the request that
|
|
22
22
|
# Authlete's `/api/auth/introspection/standard` API expects as the value of `parameters`.
|
|
23
|
-
#
|
|
23
|
+
#
|
|
24
24
|
field :parameters, ::String, { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('parameters'), required: true }, 'form': { 'field_name': 'parameters' } }
|
|
25
25
|
# Flag indicating whether to include hidden properties in the output.
|
|
26
|
-
#
|
|
26
|
+
#
|
|
27
27
|
# Authlete has a mechanism whereby to associate arbitrary key-value pairs with an access token.
|
|
28
28
|
# Each key-value pair has a hidden attribute. By default, key-value pairs whose hidden attribute
|
|
29
29
|
# is set to `true` are not embedded in the standard introspection output.
|
|
30
|
-
#
|
|
30
|
+
#
|
|
31
31
|
# If the `withHiddenProperties` request parameter is given and its value is `true`, `/api/auth/introspection/standard
|
|
32
32
|
# API includes all the associated key-value pairs into the output regardless of the value of the
|
|
33
33
|
# hidden attribute.
|
|
34
|
-
#
|
|
34
|
+
#
|
|
35
35
|
field :with_hidden_properties, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('withHiddenProperties') }, 'form': { 'field_name': 'withHiddenProperties' } }
|
|
36
36
|
# The URI of the resource server making the introspection request.
|
|
37
|
-
#
|
|
37
|
+
#
|
|
38
38
|
# If the `rsUri` request parameter is given and the token has audience values, Authlete checks if
|
|
39
39
|
# the value of the `rsUri` request parameter is contained in the audience values. If not contained,
|
|
40
40
|
# Authlete generates an introspection response with the `active` property set to `false`.
|
|
41
|
-
#
|
|
41
|
+
#
|
|
42
42
|
# The `rsUri` request parameter is required when the resource server requests a JWT introspection
|
|
43
43
|
# response, i.e., when the value of the `httpAcceptHeader` request parameter is set to `"application/token-introspection+jwt"`.
|
|
44
|
-
#
|
|
44
|
+
#
|
|
45
45
|
field :rs_uri, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('rsUri') }, 'form': { 'field_name': 'rsUri' } }
|
|
46
46
|
# The value of the `HTTP Accept` header in the introspection request.
|
|
47
|
-
#
|
|
47
|
+
#
|
|
48
48
|
# If the value of the `httpAcceptHeader` request parameter is `"application/token-introspection+jwt"`,
|
|
49
49
|
# Authlete generates a JWT introspection response. See "[4. Requesting a JWT Response](https://www.rfc-editor.org/rfc/rfc9701.html#section-4)"
|
|
50
50
|
# of "[RFC 9701: JWT Response for OAuth Token Introspection](https://www.rfc-editor.org/rfc/rfc9701.html)"
|
|
51
51
|
# for more details.
|
|
52
|
-
#
|
|
52
|
+
#
|
|
53
53
|
field :http_accept_header, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('httpAcceptHeader') }, 'form': { 'field_name': 'httpAcceptHeader' } }
|
|
54
54
|
# The JWS `alg` algorithm for signing the introspection response. This parameter corresponds to
|
|
55
55
|
# `introspection_signed_response_alg` defined in "[6. Client Metadata](https://www.rfc-editor.org/rfc/rfc9701.html#section-6)"
|
|
56
56
|
# of "[RFC 9701: JWT Response for OAuth Token Introspection](https://www.rfc-editor.org/rfc/rfc9701.html)".
|
|
57
|
-
#
|
|
57
|
+
#
|
|
58
58
|
# The default value is `RS256`.
|
|
59
|
-
#
|
|
59
|
+
#
|
|
60
60
|
field :introspection_sign_alg, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('introspectionSignAlg') }, 'form': { 'field_name': 'introspectionSignAlg' } }
|
|
61
61
|
# The JWE `alg` algorithm for encrypting the introspection response. This parameter corresponds
|
|
62
62
|
# to `introspection_encrypted_response_alg` defined in "[6. Client Metadata](https://www.rfc-editor.org/rfc/rfc9701.html#section-6)"
|
|
63
63
|
# of "[RFC 9701: JWT Response for OAuth Token Introspection](https://www.rfc-editor.org/rfc/rfc9701.html)".
|
|
64
|
-
#
|
|
64
|
+
#
|
|
65
65
|
# If the `introspectionEncryptionAlg` request parameter is specified, Authlete generates a JWT
|
|
66
66
|
# introspection response encrypted with the algorithm by this property and the algorithm specified by
|
|
67
67
|
# the `introspectionEncryptionEnc` request parameter.
|
|
68
|
-
#
|
|
68
|
+
#
|
|
69
69
|
field :introspection_encryption_alg, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('introspectionEncryptionAlg') }, 'form': { 'field_name': 'introspectionEncryptionAlg' } }
|
|
70
70
|
# The JWE `enc` algorithm for encrypting the introspection response. This parameter corresponds
|
|
71
71
|
# to `introspection_encrypted_response_enc` defined in "[6. Client Metadata](https://www.rfc-editor.org/rfc/rfc9701.html#section-6)"
|
|
72
72
|
# of "[RFC 9701: JWT Response for OAuth Token Introspection](https://www.rfc-editor.org/rfc/rfc9701.html)".
|
|
73
|
-
#
|
|
73
|
+
#
|
|
74
74
|
# The default value is `A128CBC_HS256`.
|
|
75
|
-
#
|
|
75
|
+
#
|
|
76
76
|
field :introspection_encryption_enc, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('introspectionEncryptionEnc') }, 'form': { 'field_name': 'introspectionEncryptionEnc' } }
|
|
77
77
|
# The shared key for signing the introspection response with a symmetric algorithm.
|
|
78
|
-
#
|
|
78
|
+
#
|
|
79
79
|
# The `sharedKeyForSign` request parameter is required when the introspection response is requested
|
|
80
80
|
# to be signed with a symmetric algorithm.
|
|
81
|
-
#
|
|
81
|
+
#
|
|
82
82
|
field :shared_key_for_sign, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('sharedKeyForSign') }, 'form': { 'field_name': 'sharedKeyForSign' } }
|
|
83
83
|
# The shared key for encrypting the introspection response with a symmetric algorithm.
|
|
84
|
-
#
|
|
84
|
+
#
|
|
85
85
|
# The `sharedKeyForEncryption` request parameter is required when the introspection response is
|
|
86
86
|
# requested to be encrypted with a symmetric algorithm.
|
|
87
|
-
#
|
|
87
|
+
#
|
|
88
88
|
field :shared_key_for_encryption, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('sharedKeyForEncryption') }, 'form': { 'field_name': 'sharedKeyForEncryption' } }
|
|
89
89
|
# The public key for signing the introspection response with an asymmetric algorithm.
|
|
90
|
-
#
|
|
90
|
+
#
|
|
91
91
|
# The `publicKeyForEncryption` request parameter is required when the introspection response is
|
|
92
92
|
# requested to be encrypted with an asymmetric algorithm.
|
|
93
|
-
#
|
|
93
|
+
#
|
|
94
94
|
field :public_key_for_encryption, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('publicKeyForEncryption') }, 'form': { 'field_name': 'publicKeyForEncryption' } }
|
|
95
95
|
|
|
96
96
|
sig { params(parameters: ::String, with_hidden_properties: T.nilable(T::Boolean), rs_uri: T.nilable(::String), http_accept_header: T.nilable(::String), introspection_sign_alg: T.nilable(::String), introspection_encryption_alg: T.nilable(::String), introspection_encryption_enc: T.nilable(::String), shared_key_for_sign: T.nilable(::String), shared_key_for_encryption: T.nilable(::String), public_key_for_encryption: T.nilable(::String)).void }
|
|
@@ -17,10 +17,10 @@ module Authlete
|
|
|
17
17
|
# A short message which explains the result of the API call.
|
|
18
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
19
19
|
# The next action that the authorization server implementation should take.
|
|
20
|
-
field :action, Crystalline::Nilable.new(Models::Components::StandardIntrospectionResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::StandardIntrospectionResponseAction, true) } }
|
|
20
|
+
field :action, Crystalline::Nilable.new(Models::Components::StandardIntrospectionResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::StandardIntrospectionResponseAction, true) } }
|
|
21
21
|
# The content that the authorization server implementation is to return to the client
|
|
22
22
|
# application.
|
|
23
|
-
#
|
|
23
|
+
#
|
|
24
24
|
field :response_content, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('responseContent') } }
|
|
25
25
|
|
|
26
26
|
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::StandardIntrospectionResponseAction), response_content: T.nilable(::String)).void }
|
|
@@ -9,10 +9,10 @@ module Authlete
|
|
|
9
9
|
module Components
|
|
10
10
|
# SubjectType - The subject type that the client application requests. Details about the subject type are described in
|
|
11
11
|
# [OpenID Connect Core 1.0, 8. Subjct Identifier Types](https://openid.net/specs/openid-connect-core-1_0.html#SubjectIDTypes).
|
|
12
|
-
#
|
|
12
|
+
#
|
|
13
13
|
# This property corresponds to `subject_type` in
|
|
14
14
|
# [OpenID Connect Dynamic Client Registration 1.0, 2. Client Metadata](https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata).
|
|
15
|
-
#
|
|
15
|
+
#
|
|
16
16
|
class SubjectType < T::Enum
|
|
17
17
|
enums do
|
|
18
18
|
PUBLIC = new('PUBLIC')
|
|
@@ -13,135 +13,103 @@ module Authlete
|
|
|
13
13
|
include Crystalline::MetadataFields
|
|
14
14
|
|
|
15
15
|
# The grant type of the access token when the access token was created.
|
|
16
|
-
#
|
|
17
|
-
field :grant_type, Models::Components::GrantType, { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grantType'), required: true, 'decoder': Utils.enum_from_string(Models::Components::GrantType, false) }, 'form': { 'field_name': 'grantType' } }
|
|
16
|
+
#
|
|
17
|
+
field :grant_type, Models::Components::GrantType, { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grantType'), required: true, 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::GrantType, false) }, 'form': { 'field_name': 'grantType' } }
|
|
18
18
|
# The ID of the client application which will be associated with a newly created access token.
|
|
19
|
-
#
|
|
19
|
+
#
|
|
20
20
|
field :client_id, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientId') }, 'form': { 'field_name': 'clientId' } }
|
|
21
21
|
# The subject (= unique identifier) of the user who will be associated with a newly created access
|
|
22
22
|
# token. This parameter is required unless the grant type is `CLIENT_CREDENTIALS`. The value must
|
|
23
23
|
# consist of only ASCII characters and its length must not exceed 100.
|
|
24
|
-
#
|
|
24
|
+
#
|
|
25
25
|
field :subject, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('subject') }, 'form': { 'field_name': 'subject' } }
|
|
26
26
|
# The scopes which will be associated with a newly created access token. Scopes that are not supported
|
|
27
27
|
# by the service cannot be specified and requesting them will cause an error.
|
|
28
|
-
#
|
|
28
|
+
#
|
|
29
29
|
field :scopes, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('scopes') }, 'form': { 'field_name': 'scopes' } }
|
|
30
30
|
# The duration of a newly created access token in seconds. If the value is 0, the duration is determined
|
|
31
31
|
# according to the settings of the service.
|
|
32
|
-
#
|
|
32
|
+
#
|
|
33
33
|
field :access_token_duration, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('accessTokenDuration') }, 'form': { 'field_name': 'accessTokenDuration' } }
|
|
34
34
|
# The duration of a newly created refresh token in seconds. If the value is 0, the duration is
|
|
35
35
|
# determined according to the settings of the service.
|
|
36
|
-
#
|
|
36
|
+
#
|
|
37
37
|
# A refresh token is not created (1) if the service does not support `REFRESH_TOKEN`, or (2) if the
|
|
38
38
|
# specified grant type is either `IMPLICIT`or `CLIENT_CREDENTIALS`.
|
|
39
|
-
#
|
|
39
|
+
#
|
|
40
40
|
field :refresh_token_duration, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('refreshTokenDuration') }, 'form': { 'field_name': 'refreshTokenDuration' } }
|
|
41
41
|
# Extra properties to associate with a newly created access token. Note that properties parameter
|
|
42
42
|
# is accepted only when the HTTP method of the request is POST and Content-Type of the request is
|
|
43
43
|
# `application/json`, so don't use `GET` method or `application/x-www-form-urlencoded` if you want
|
|
44
44
|
# to specify properties.
|
|
45
|
-
#
|
|
45
|
+
#
|
|
46
46
|
field :properties, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Property)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('properties') }, 'form': { 'field_name': 'properties', 'json': true } }
|
|
47
47
|
# A boolean request parameter which indicates whether to emulate that the client ID alias is used
|
|
48
48
|
# instead of the original numeric client ID when a new access token is created.
|
|
49
|
-
#
|
|
50
|
-
# This has an effect only on the value of the aud claim in a response from [UserInfo endpoint](https://openid.net/specs/openid-connect-core-1_0.html#UserInfo).
|
|
51
|
-
# When you access the UserInfo endpoint (which is expected to be implemented using Authlete's
|
|
52
|
-
# `/api/auth/userinfo` API and `/api/auth/userinfo/issue` API) with an access token which has been
|
|
53
|
-
# created using Authlete's `/api/auth/token/create` API with this property (`clientIdAliasUsed`)
|
|
54
|
-
# `true`, the client ID alias is used as the value of the aud claim in a response from the UserInfo
|
|
55
|
-
# endpoint.
|
|
56
|
-
#
|
|
57
|
-
# Note that if a client ID alias is not assigned to the client when Authlete's `/api/auth/token/create`
|
|
58
|
-
# API is called, this property (`clientIdAliasUsed`) has no effect (it is always regarded as `false`).
|
|
59
|
-
#
|
|
49
|
+
#
|
|
60
50
|
field :client_id_alias_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientIdAliasUsed') }, 'form': { 'field_name': 'clientIdAliasUsed' } }
|
|
61
51
|
# The value of the new access token.
|
|
62
|
-
#
|
|
63
|
-
# The `/api/auth/token/create` API generates an access token. Therefore, callers of the API do not
|
|
64
|
-
# have to specify values of newly created access tokens. However, in some cases, for example, if
|
|
65
|
-
# you want to migrate existing access tokens from an old system to Authlete, you may want to specify
|
|
66
|
-
# values of access tokens. In such a case, you can specify the value of a newly created access token
|
|
67
|
-
# by passing a non-null value as the value of accessToken request parameter. The implementation
|
|
68
|
-
# of the `/api/auth/token/create` uses the value of the accessToken request parameter instead of
|
|
69
|
-
# generating a new value when the request parameter holds a non-null value.
|
|
70
|
-
#
|
|
71
|
-
# Note that if the hash value of the specified access token already exists in Authlete's database,
|
|
72
|
-
# the access token cannot be inserted and the `/api/auth/token/create` API will report an error.
|
|
73
|
-
#
|
|
52
|
+
#
|
|
74
53
|
field :access_token, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('accessToken') }, 'form': { 'field_name': 'accessToken' } }
|
|
75
54
|
# The value of the new refresh token.
|
|
76
|
-
#
|
|
77
|
-
# The `/api/auth/token/create` API may generate a refresh token. Therefore, callers of the API do
|
|
78
|
-
# not have to specify values of newly created refresh tokens. However, in some cases, for example,
|
|
79
|
-
# if you want to migrate existing refresh tokens from an old system to Authlete, you may want to
|
|
80
|
-
# specify values of refresh tokens. In such a case, you can specify the value of a newly created
|
|
81
|
-
# refresh token by passing a non-null value as the value of refreshToken request parameter. The
|
|
82
|
-
# implementation of the `/api/auth/token/create` uses the value of the refreshToken request parameter
|
|
83
|
-
# instead of generating a new value when the request parameter holds a non-null value.
|
|
84
|
-
#
|
|
85
|
-
# Note that if the hash value of the specified refresh token already exists in Authlete's database,
|
|
86
|
-
# the refresh token cannot be inserted and the `/api/auth/token/create` API will report an error.
|
|
87
|
-
#
|
|
55
|
+
#
|
|
88
56
|
field :refresh_token, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('refreshToken') }, 'form': { 'field_name': 'refreshToken' } }
|
|
89
57
|
# Get whether the access token expires or not. By default, all access tokens expire after a period
|
|
90
58
|
# of time determined by their service.
|
|
91
|
-
#
|
|
59
|
+
#
|
|
92
60
|
# If this request parameter is `true`, then the access token will not automatically expire and must
|
|
93
61
|
# be revoked or deleted manually at the service. If this request parameter is true, the `accessTokenDuration`
|
|
94
62
|
# request parameter is ignored.
|
|
95
|
-
#
|
|
63
|
+
#
|
|
96
64
|
field :access_token_persistent, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('accessTokenPersistent') }, 'form': { 'field_name': 'accessTokenPersistent' } }
|
|
97
65
|
# The thumbprint of the MTLS certificate bound to this token. If this property is set, a certificate
|
|
98
66
|
# with the corresponding value MUST be presented with the access token when it is used by a client.
|
|
99
67
|
# The value of this property must be a SHA256 certificate thumbprint, base64url encoded.
|
|
100
|
-
#
|
|
68
|
+
#
|
|
101
69
|
field :certificate_thumbprint, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('certificateThumbprint') }, 'form': { 'field_name': 'certificateThumbprint' } }
|
|
102
70
|
# The thumbprint of the public key used for DPoP presentation of this token. If this property is
|
|
103
71
|
# set, a DPoP proof signed with the corresponding private key MUST be presented with the access
|
|
104
72
|
# token when it is used by a client. Additionally, the token's `token_type` will be set to 'DPoP'.
|
|
105
|
-
#
|
|
73
|
+
#
|
|
106
74
|
field :dpop_key_thumbprint, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('dpopKeyThumbprint') }, 'form': { 'field_name': 'dpopKeyThumbprint' } }
|
|
107
75
|
# The authorization details. This represents the value of the `authorization_details`
|
|
108
76
|
# request parameter in the preceding device authorization request which is defined in
|
|
109
77
|
# "OAuth 2.0 Rich Authorization Requests".
|
|
110
|
-
#
|
|
78
|
+
#
|
|
111
79
|
field :authorization_details, Crystalline::Nilable.new(Models::Components::AuthzDetails), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('authorizationDetails') }, 'form': { 'field_name': 'authorizationDetails', 'json': true } }
|
|
112
80
|
# The value of the resources to associate with the token. This property represents the value of
|
|
113
81
|
# one or more `resource` request parameters which is defined in "RFC8707 Resource Indicators for
|
|
114
82
|
# OAuth 2.0".
|
|
115
|
-
#
|
|
83
|
+
#
|
|
116
84
|
field :resources, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resources') }, 'form': { 'field_name': 'resources' } }
|
|
117
85
|
# the flag which indicates whether the access token is for an external
|
|
118
86
|
# attachment.
|
|
119
|
-
#
|
|
87
|
+
#
|
|
120
88
|
field :for_external_attachment, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('forExternalAttachment') }, 'form': { 'field_name': 'forExternalAttachment' } }
|
|
121
89
|
# Additional claims that are added to the payload part of the JWT access token.
|
|
122
|
-
#
|
|
90
|
+
#
|
|
123
91
|
field :jwt_at_claims, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('jwtAtClaims') }, 'form': { 'field_name': 'jwtAtClaims' } }
|
|
124
92
|
# The Authentication Context Class Reference of the user authentication that the authorization server performed
|
|
125
93
|
# during the course of issuing the access token.
|
|
126
|
-
#
|
|
94
|
+
#
|
|
127
95
|
field :acr, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('acr') }, 'form': { 'field_name': 'acr' } }
|
|
128
96
|
# The time when the user authentication was performed during the course of issuing the access token.
|
|
129
|
-
#
|
|
97
|
+
#
|
|
130
98
|
field :auth_time, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('authTime') }, 'form': { 'field_name': 'authTime' } }
|
|
131
99
|
# Flag which indicates whether the entity ID of the client was used when the request for the access token was made.
|
|
132
|
-
#
|
|
100
|
+
#
|
|
133
101
|
field :client_entity_id_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientEntityIdUsed') }, 'form': { 'field_name': 'clientEntityIdUsed' } }
|
|
134
102
|
# The client Identifier associated with the newly issued access token.
|
|
135
|
-
#
|
|
103
|
+
#
|
|
136
104
|
field :client_identifier, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientIdentifier') }, 'form': { 'field_name': 'clientIdentifier' } }
|
|
137
105
|
# The session ID, which is the ID of the user's authentication session, associated with a newly
|
|
138
106
|
# created access token.
|
|
139
|
-
#
|
|
107
|
+
#
|
|
140
108
|
field :session_id, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('sessionId') }, 'form': { 'field_name': 'sessionId' } }
|
|
141
109
|
# Flag indicating whether a metadata document was used to resolve client metadata for this request.
|
|
142
|
-
#
|
|
110
|
+
#
|
|
143
111
|
# When `true`, the client metadata was retrieved via the [OAuth Client ID Metadata Document](https://datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/) (CIMD) mechanism rather than from the Authlete database.
|
|
144
|
-
#
|
|
112
|
+
#
|
|
145
113
|
field :metadata_document_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('metadataDocumentUsed') }, 'form': { 'field_name': 'metadataDocumentUsed' } }
|
|
146
114
|
|
|
147
115
|
sig { params(grant_type: Models::Components::GrantType, client_id: T.nilable(::Integer), subject: T.nilable(::String), scopes: T.nilable(T::Array[::String]), access_token_duration: T.nilable(::Integer), refresh_token_duration: T.nilable(::Integer), properties: T.nilable(T::Array[Models::Components::Property]), client_id_alias_used: T.nilable(T::Boolean), access_token: T.nilable(::String), refresh_token: T.nilable(::String), access_token_persistent: T.nilable(T::Boolean), certificate_thumbprint: T.nilable(::String), dpop_key_thumbprint: T.nilable(::String), authorization_details: T.nilable(Models::Components::AuthzDetails), resources: T.nilable(T::Array[::String]), for_external_attachment: T.nilable(T::Boolean), jwt_at_claims: T.nilable(::String), acr: T.nilable(::String), auth_time: T.nilable(::Integer), client_entity_id_used: T.nilable(T::Boolean), client_identifier: T.nilable(::String), session_id: T.nilable(::String), metadata_document_used: T.nilable(T::Boolean)).void }
|
|
@@ -17,66 +17,66 @@ module Authlete
|
|
|
17
17
|
# A short message which explains the result of the API call.
|
|
18
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
19
19
|
# The next action that the authorization server implementation should take.
|
|
20
|
-
field :action, Crystalline::Nilable.new(Models::Components::TokenCreateResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::TokenCreateResponseAction, true) } }
|
|
20
|
+
field :action, Crystalline::Nilable.new(Models::Components::TokenCreateResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::TokenCreateResponseAction, true) } }
|
|
21
21
|
# The newly issued access token.
|
|
22
22
|
field :access_token, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('accessToken') } }
|
|
23
23
|
# The ID of the client application associated with the access token.
|
|
24
|
-
#
|
|
24
|
+
#
|
|
25
25
|
field :client_id, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientId') } }
|
|
26
26
|
# The time at which the access token expires.
|
|
27
|
-
#
|
|
27
|
+
#
|
|
28
28
|
field :expires_at, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('expiresAt') } }
|
|
29
29
|
# The duration of the newly issued access token in seconds.
|
|
30
|
-
#
|
|
30
|
+
#
|
|
31
31
|
field :expires_in, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('expiresIn') } }
|
|
32
32
|
# The grant type for the newly issued access token.
|
|
33
|
-
#
|
|
33
|
+
#
|
|
34
34
|
field :grant_type, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grantType') } }
|
|
35
35
|
# The extra properties associated with the access token.
|
|
36
|
-
#
|
|
36
|
+
#
|
|
37
37
|
field :properties, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Property)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('properties') } }
|
|
38
38
|
# The newly issued refresh token.
|
|
39
|
-
#
|
|
39
|
+
#
|
|
40
40
|
field :refresh_token, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('refreshToken') } }
|
|
41
41
|
# Scopes which are associated with the access token.
|
|
42
|
-
#
|
|
42
|
+
#
|
|
43
43
|
field :scopes, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('scopes') } }
|
|
44
44
|
# The subject (= unique identifier) of the user associated with the newly issued access
|
|
45
45
|
# token.
|
|
46
|
-
#
|
|
46
|
+
#
|
|
47
47
|
field :subject, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('subject') } }
|
|
48
48
|
# The token type of the access token.
|
|
49
|
-
#
|
|
49
|
+
#
|
|
50
50
|
field :token_type, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('tokenType') } }
|
|
51
51
|
# If the authorization server is configured to issue JWT-based access tokens (= if `Service.accessTokenSignAlg`
|
|
52
52
|
# is set to a `non-null` value), a JWT-based access token is issued along with the original
|
|
53
53
|
# random-string one.
|
|
54
|
-
#
|
|
54
|
+
#
|
|
55
55
|
field :jwt_access_token, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('jwtAccessToken') } }
|
|
56
56
|
# The authorization details. This represents the value of the `authorization_details`
|
|
57
57
|
# request parameter in the preceding device authorization request which is defined in
|
|
58
58
|
# "OAuth 2.0 Rich Authorization Requests".
|
|
59
|
-
#
|
|
59
|
+
#
|
|
60
60
|
field :authorization_details, Crystalline::Nilable.new(Models::Components::AuthzDetails), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('authorizationDetails') } }
|
|
61
61
|
# the flag which indicates whether the access token is for an external
|
|
62
62
|
# attachment.
|
|
63
|
-
#
|
|
63
|
+
#
|
|
64
64
|
field :for_external_attachment, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('forExternalAttachment') } }
|
|
65
65
|
# Set the unique token identifier.
|
|
66
|
-
#
|
|
66
|
+
#
|
|
67
67
|
field :token_id, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('tokenId') } }
|
|
68
68
|
# The scopes associated with the refresh token. May be null.
|
|
69
|
-
#
|
|
69
|
+
#
|
|
70
70
|
field :refresh_token_scopes, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('refreshTokenScopes') } }
|
|
71
71
|
# The client Identifier that will be associated with a newly created access token.
|
|
72
|
-
#
|
|
72
|
+
#
|
|
73
73
|
field :client_identifier, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientIdentifier') } }
|
|
74
74
|
# The session ID associated with a newly created access token.
|
|
75
|
-
#
|
|
75
|
+
#
|
|
76
76
|
# NOTE: A refresh token must be associated with a session ID, which is the ID of the user's authentication
|
|
77
77
|
# session, in order to be used to obtain a [Native SSO](https://openid.net/specs/openid-connect-native-sso-1_0.html)-compliant
|
|
78
78
|
# ID token in the refresh token flow.
|
|
79
|
-
#
|
|
79
|
+
#
|
|
80
80
|
field :session_id, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('sessionId') } }
|
|
81
81
|
|
|
82
82
|
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::TokenCreateResponseAction), access_token: T.nilable(::String), client_id: T.nilable(::Integer), expires_at: T.nilable(::Integer), expires_in: T.nilable(::Integer), grant_type: T.nilable(::String), properties: T.nilable(T::Array[Models::Components::Property]), refresh_token: T.nilable(::String), scopes: T.nilable(T::Array[::String]), subject: T.nilable(::String), token_type: T.nilable(::String), jwt_access_token: T.nilable(::String), authorization_details: T.nilable(Models::Components::AuthzDetails), for_external_attachment: T.nilable(T::Boolean), token_id: T.nilable(::String), refresh_token_scopes: T.nilable(T::Array[::String]), client_identifier: T.nilable(::String), session_id: T.nilable(::String)).void }
|
|
@@ -13,11 +13,11 @@ module Authlete
|
|
|
13
13
|
include Crystalline::MetadataFields
|
|
14
14
|
|
|
15
15
|
# The ticket issued from Authlete `/auth/token` API.
|
|
16
|
-
#
|
|
16
|
+
#
|
|
17
17
|
field :ticket, ::String, { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('ticket'), required: true }, 'form': { 'field_name': 'ticket' } }
|
|
18
18
|
# The reason of the failure of the token request.
|
|
19
|
-
#
|
|
20
|
-
field :reason, Models::Components::TokenFailRequestReason, { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('reason'), required: true, 'decoder': Utils.enum_from_string(Models::Components::TokenFailRequestReason, false) }, 'form': { 'field_name': 'reason' } }
|
|
19
|
+
#
|
|
20
|
+
field :reason, Models::Components::TokenFailRequestReason, { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('reason'), required: true, 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::TokenFailRequestReason, false) }, 'form': { 'field_name': 'reason' } }
|
|
21
21
|
|
|
22
22
|
sig { params(ticket: ::String, reason: Models::Components::TokenFailRequestReason).void }
|
|
23
23
|
def initialize(ticket:, reason:)
|
|
@@ -17,10 +17,10 @@ module Authlete
|
|
|
17
17
|
# A short message which explains the result of the API call.
|
|
18
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
19
19
|
# The next action that the authorization server implementation should take.
|
|
20
|
-
field :action, Crystalline::Nilable.new(Models::Components::TokenFailResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::TokenFailResponseAction, true) } }
|
|
20
|
+
field :action, Crystalline::Nilable.new(Models::Components::TokenFailResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::TokenFailResponseAction, true) } }
|
|
21
21
|
# The content that the authorization server implementation is to return to the client application.
|
|
22
22
|
# Its format varies depending on the value of `action` parameter. See description for details.
|
|
23
|
-
#
|
|
23
|
+
#
|
|
24
24
|
field :response_content, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('responseContent') } }
|
|
25
25
|
|
|
26
26
|
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::TokenFailResponseAction), response_content: T.nilable(::String)).void }
|
|
@@ -13,21 +13,21 @@ module Authlete
|
|
|
13
13
|
include Crystalline::MetadataFields
|
|
14
14
|
|
|
15
15
|
# Start index of search results (inclusive).
|
|
16
|
-
#
|
|
16
|
+
#
|
|
17
17
|
field :start, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('start') } }
|
|
18
18
|
# End index of search results (exclusive).
|
|
19
|
-
#
|
|
19
|
+
#
|
|
20
20
|
field :end_, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('end') } }
|
|
21
21
|
# Unique ID of a client developer.
|
|
22
|
-
#
|
|
22
|
+
#
|
|
23
23
|
field :total_count, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('totalCount') } }
|
|
24
24
|
|
|
25
25
|
field :client, Crystalline::Nilable.new(Models::Components::ClientLimited), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('client') } }
|
|
26
26
|
# Unique user ID of an end-user.
|
|
27
|
-
#
|
|
27
|
+
#
|
|
28
28
|
field :subject, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('subject') } }
|
|
29
29
|
# An array of access tokens.
|
|
30
|
-
#
|
|
30
|
+
#
|
|
31
31
|
field :access_tokens, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::AccessToken)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('accessTokens') } }
|
|
32
32
|
|
|
33
33
|
sig { params(start: T.nilable(::Integer), end_: T.nilable(::Integer), total_count: T.nilable(::Integer), client: T.nilable(Models::Components::ClientLimited), subject: T.nilable(::String), access_tokens: T.nilable(T::Array[Models::Components::AccessToken])).void }
|