authlete_ruby_sdk 0.0.3.pre.beta → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/authlete/authorization.rb +24 -563
- data/lib/authlete/authorization_management.rb +15 -7
- data/lib/authlete/ciba.rb +35 -414
- data/lib/authlete/client.rb +3 -3
- data/lib/authlete/client_management.rb +133 -87
- data/lib/authlete/clients.rb +43 -23
- data/lib/authlete/device_flow.rb +24 -147
- data/lib/authlete/dynamic_client_registration.rb +31 -283
- data/lib/authlete/federation.rb +17 -66
- data/lib/authlete/grant_management.rb +10 -5
- data/lib/authlete/hardware_security_keys.rb +24 -10
- data/lib/authlete/introspection.rb +17 -195
- data/lib/authlete/jose_object.rb +10 -5
- data/lib/authlete/jwk_set_endpoint.rb +12 -7
- data/lib/authlete/lifecycle.rb +10 -5
- data/lib/authlete/models/components/access_token.rb +9 -9
- data/lib/authlete/models/components/access_token.rbi +1 -1
- data/lib/authlete/models/components/application_type.rb +1 -1
- data/lib/authlete/models/components/application_type.rbi +1 -1
- data/lib/authlete/models/components/attachment_type.rb +1 -1
- data/lib/authlete/models/components/attachment_type.rbi +1 -1
- data/lib/authlete/models/components/authorization_details_element.rb +16 -16
- data/lib/authlete/models/components/authorization_details_element.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_request.rb +4 -4
- data/lib/authlete/models/components/authorization_fail_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_request_reason.rb +1 -1
- data/lib/authlete/models/components/authorization_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_response.rb +2 -2
- data/lib/authlete/models/components/authorization_fail_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_request.rb +19 -83
- data/lib/authlete/models/components/authorization_issue_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_response.rb +8 -8
- data/lib/authlete/models/components/authorization_issue_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_request.rb +7 -7
- data/lib/authlete/models/components/authorization_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_response.rb +84 -176
- data/lib/authlete/models/components/authorization_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info.rb +1 -1
- data/lib/authlete/models/components/authorization_ticket_info.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_response.rb +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_response.rb +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_response_action.rbi +1 -1
- data/lib/authlete/models/components/authz_details.rb +2 -2
- data/lib/authlete/models/components/authz_details.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_request.rb +23 -23
- data/lib/authlete/models/components/backchannel_authentication_complete_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_request_result.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_request_result.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_response.rb +30 -30
- data/lib/authlete/models/components/backchannel_authentication_complete_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_response_action.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_request.rb +5 -5
- data/lib/authlete/models/components/backchannel_authentication_fail_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_request_reason.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_response.rb +2 -2
- data/lib/authlete/models/components/backchannel_authentication_fail_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_request.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_response.rb +5 -5
- data/lib/authlete/models/components/backchannel_authentication_issue_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_request.rb +12 -12
- data/lib/authlete/models/components/backchannel_authentication_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_response.rb +47 -56
- data/lib/authlete/models/components/backchannel_authentication_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_response_action.rbi +1 -1
- data/lib/authlete/models/components/cimd_options.rb +15 -15
- data/lib/authlete/models/components/cimd_options.rbi +1 -1
- data/lib/authlete/models/components/claim_type.rbi +1 -1
- data/lib/authlete/models/components/client.rb +159 -308
- data/lib/authlete/models/components/client.rbi +1 -1
- data/lib/authlete/models/components/client_auth_method.rb +1 -1
- data/lib/authlete/models/components/client_auth_method.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_delete_response.rb +4 -4
- data/lib/authlete/models/components/client_authorization_delete_response.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_get_list_request.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_get_list_response.rb +6 -6
- data/lib/authlete/models/components/client_authorization_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_update_request.rb +2 -2
- data/lib/authlete/models/components/client_authorization_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_clientsource.rb +1 -1
- data/lib/authlete/models/components/client_clientsource.rbi +1 -1
- data/lib/authlete/models/components/client_extension.rb +9 -19
- data/lib/authlete/models/components/client_extension.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_get_response.rb +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_get_response.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_request.rb +4 -4
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_flag_update_request.rb +1 -1
- data/lib/authlete/models/components/client_flag_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_flag_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_get_list_response.rb +4 -4
- data/lib/authlete/models/components/client_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/client_granted_scopes_delete_response.rbi +1 -1
- data/lib/authlete/models/components/client_input.rb +154 -293
- data/lib/authlete/models/components/client_input.rbi +1 -1
- data/lib/authlete/models/components/client_limited.rb +7 -7
- data/lib/authlete/models/components/client_limited.rbi +1 -1
- data/lib/authlete/models/components/client_limited_authorization.rb +57 -106
- data/lib/authlete/models/components/client_limited_authorization.rbi +1 -1
- data/lib/authlete/models/components/client_limited_authorization_clientsource.rb +1 -1
- data/lib/authlete/models/components/client_limited_authorization_clientsource.rbi +1 -1
- data/lib/authlete/models/components/client_registration_response.rb +3 -3
- data/lib/authlete/models/components/client_registration_response.rbi +1 -1
- data/lib/authlete/models/components/client_registration_response_action.rb +1 -1
- data/lib/authlete/models/components/client_registration_response_action.rbi +1 -1
- data/lib/authlete/models/components/client_registration_type.rb +1 -1
- data/lib/authlete/models/components/client_registration_type.rbi +1 -1
- data/lib/authlete/models/components/client_secret_refresh_response.rb +2 -2
- data/lib/authlete/models/components/client_secret_refresh_response.rbi +1 -1
- data/lib/authlete/models/components/client_secret_update_request.rb +1 -1
- data/lib/authlete/models/components/client_secret_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_secret_update_response.rb +2 -2
- data/lib/authlete/models/components/client_secret_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_type.rb +1 -1
- data/lib/authlete/models/components/client_type.rbi +1 -1
- data/lib/authlete/models/components/credential_issuance_order.rb +1 -1
- data/lib/authlete/models/components/credential_issuance_order.rbi +1 -1
- data/lib/authlete/models/components/credential_issuer_metadata.rb +5 -5
- data/lib/authlete/models/components/credential_issuer_metadata.rbi +1 -1
- data/lib/authlete/models/components/credential_offer_info.rb +12 -20
- data/lib/authlete/models/components/credential_offer_info.rbi +1 -1
- data/lib/authlete/models/components/credential_request_info.rbi +1 -1
- data/lib/authlete/models/components/delivery_mode.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_request.rb +12 -12
- data/lib/authlete/models/components/device_authorization_request.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_response.rb +39 -48
- data/lib/authlete/models/components/device_authorization_response.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/device_complete_request.rb +22 -22
- data/lib/authlete/models/components/device_complete_request.rbi +1 -1
- data/lib/authlete/models/components/device_complete_request_result.rb +1 -1
- data/lib/authlete/models/components/device_complete_request_result.rbi +1 -1
- data/lib/authlete/models/components/device_complete_response.rb +2 -2
- data/lib/authlete/models/components/device_complete_response.rbi +1 -1
- data/lib/authlete/models/components/device_complete_response_action.rb +1 -1
- data/lib/authlete/models/components/device_complete_response_action.rbi +1 -1
- data/lib/authlete/models/components/device_verification_request.rb +1 -1
- data/lib/authlete/models/components/device_verification_request.rbi +1 -1
- data/lib/authlete/models/components/device_verification_response.rb +32 -32
- data/lib/authlete/models/components/device_verification_response.rbi +1 -1
- data/lib/authlete/models/components/device_verification_response_action.rbi +1 -1
- data/lib/authlete/models/components/display.rb +3 -3
- data/lib/authlete/models/components/display.rbi +1 -1
- data/lib/authlete/models/components/dynamic_scope.rbi +1 -1
- data/lib/authlete/models/components/fapi_mode.rbi +1 -1
- data/lib/authlete/models/components/federation_configuration_response.rb +2 -2
- data/lib/authlete/models/components/federation_configuration_response.rbi +1 -1
- data/lib/authlete/models/components/federation_configuration_response_action.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_request.rb +2 -2
- data/lib/authlete/models/components/federation_registration_request.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_response.rb +2 -2
- data/lib/authlete/models/components/federation_registration_response.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_response_action.rbi +1 -1
- data/lib/authlete/models/components/g_m_request.rb +13 -13
- data/lib/authlete/models/components/g_m_request.rbi +1 -1
- data/lib/authlete/models/components/g_m_response.rb +3 -3
- data/lib/authlete/models/components/g_m_response.rbi +1 -1
- data/lib/authlete/models/components/g_m_response_action.rbi +1 -1
- data/lib/authlete/models/components/grant.rb +2 -2
- data/lib/authlete/models/components/grant.rbi +1 -1
- data/lib/authlete/models/components/grant_management_action.rb +2 -2
- data/lib/authlete/models/components/grant_management_action.rbi +1 -1
- data/lib/authlete/models/components/grant_scope.rb +2 -2
- data/lib/authlete/models/components/grant_scope.rbi +1 -1
- data/lib/authlete/models/components/grant_type.rb +1 -1
- data/lib/authlete/models/components/grant_type.rbi +1 -1
- data/lib/authlete/models/components/hsk.rb +8 -8
- data/lib/authlete/models/components/hsk.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_request.rb +6 -6
- data/lib/authlete/models/components/hsk_create_request.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_response.rb +2 -2
- data/lib/authlete/models/components/hsk_create_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_delete_response.rb +2 -2
- data/lib/authlete/models/components/hsk_delete_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_delete_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_list_response.rb +1 -1
- data/lib/authlete/models/components/hsk_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_list_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_response.rb +2 -2
- data/lib/authlete/models/components/hsk_get_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_response_action.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_request.rb +7 -7
- data/lib/authlete/models/components/idtoken_reissue_request.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_response.rb +3 -3
- data/lib/authlete/models/components/idtoken_reissue_response.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_response_action.rbi +1 -1
- data/lib/authlete/models/components/introspection_request.rb +24 -40
- data/lib/authlete/models/components/introspection_request.rbi +1 -1
- data/lib/authlete/models/components/introspection_response.rb +36 -45
- data/lib/authlete/models/components/introspection_response.rbi +1 -1
- data/lib/authlete/models/components/introspection_response_action.rbi +1 -1
- data/lib/authlete/models/components/jose_verify_request.rb +5 -5
- data/lib/authlete/models/components/jose_verify_request.rbi +1 -1
- data/lib/authlete/models/components/jose_verify_response.rb +5 -5
- data/lib/authlete/models/components/jose_verify_response.rbi +1 -1
- data/lib/authlete/models/components/jwe_alg.rb +2 -2
- data/lib/authlete/models/components/jwe_alg.rbi +1 -1
- data/lib/authlete/models/components/jwe_enc.rb +1 -1
- data/lib/authlete/models/components/jwe_enc.rbi +1 -1
- data/lib/authlete/models/components/jws_alg.rb +2 -2
- data/lib/authlete/models/components/jws_alg.rbi +1 -1
- data/lib/authlete/models/components/named_uri.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_request.rb +1 -1
- data/lib/authlete/models/components/native_sso_logout_request.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_response.rb +3 -3
- data/lib/authlete/models/components/native_sso_logout_response.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_response_action.rb +1 -1
- data/lib/authlete/models/components/native_sso_logout_response_action.rbi +1 -1
- data/lib/authlete/models/components/native_sso_request.rb +8 -24
- data/lib/authlete/models/components/native_sso_request.rbi +1 -1
- data/lib/authlete/models/components/native_sso_response.rb +4 -4
- data/lib/authlete/models/components/native_sso_response.rbi +1 -1
- data/lib/authlete/models/components/native_sso_response_action.rb +1 -1
- data/lib/authlete/models/components/native_sso_response_action.rbi +1 -1
- data/lib/authlete/models/components/pair.rbi +1 -1
- data/lib/authlete/models/components/prompt.rb +3 -3
- data/lib/authlete/models/components/prompt.rbi +1 -1
- data/lib/authlete/models/components/property.rb +1 -1
- data/lib/authlete/models/components/property.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_request.rb +11 -11
- data/lib/authlete/models/components/pushed_authorization_request.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response.rb +6 -6
- data/lib/authlete/models/components/pushed_authorization_response.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response_clientauthmethod.rb +1 -1
- data/lib/authlete/models/components/pushed_authorization_response_clientauthmethod.rbi +1 -1
- data/lib/authlete/models/components/response_type.rbi +1 -1
- data/lib/authlete/models/components/responsemode.rbi +1 -1
- data/lib/authlete/models/components/revocation_request.rb +10 -10
- data/lib/authlete/models/components/revocation_request.rbi +1 -1
- data/lib/authlete/models/components/revocation_response.rb +2 -2
- data/lib/authlete/models/components/revocation_response.rbi +1 -1
- data/lib/authlete/models/components/revocation_response_action.rbi +1 -1
- data/lib/authlete/models/components/scope.rbi +1 -1
- data/lib/authlete/models/components/security.rbi +1 -1
- data/lib/authlete/models/components/service.rb +248 -599
- data/lib/authlete/models/components/service.rbi +1 -1
- data/lib/authlete/models/components/service_get_list_response.rb +4 -4
- data/lib/authlete/models/components/service_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/service_input.rb +242 -593
- data/lib/authlete/models/components/service_input.rbi +1 -1
- data/lib/authlete/models/components/service_jwks_get_response.rbi +1 -1
- data/lib/authlete/models/components/service_profile.rbi +1 -1
- data/lib/authlete/models/components/sns_credentials.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_request.rb +22 -22
- data/lib/authlete/models/components/standard_introspection_request.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_response.rb +2 -2
- data/lib/authlete/models/components/standard_introspection_response.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_response_action.rbi +1 -1
- data/lib/authlete/models/components/subject_type.rb +2 -2
- data/lib/authlete/models/components/subject_type.rbi +1 -1
- data/lib/authlete/models/components/supportedsnse.rbi +1 -1
- data/lib/authlete/models/components/tagged_value.rbi +1 -1
- data/lib/authlete/models/components/token_create_request.rb +27 -59
- data/lib/authlete/models/components/token_create_request.rbi +1 -1
- data/lib/authlete/models/components/token_create_response.rb +18 -18
- data/lib/authlete/models/components/token_create_response.rbi +1 -1
- data/lib/authlete/models/components/token_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_fail_request.rb +3 -3
- data/lib/authlete/models/components/token_fail_request.rbi +1 -1
- data/lib/authlete/models/components/token_fail_request_reason.rb +1 -1
- data/lib/authlete/models/components/token_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/token_fail_response.rb +2 -2
- data/lib/authlete/models/components/token_fail_response.rbi +1 -1
- data/lib/authlete/models/components/token_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_get_list_response.rb +5 -5
- data/lib/authlete/models/components/token_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/token_info.rb +6 -6
- data/lib/authlete/models/components/token_info.rbi +1 -1
- data/lib/authlete/models/components/token_issue_request.rb +9 -9
- data/lib/authlete/models/components/token_issue_request.rbi +1 -1
- data/lib/authlete/models/components/token_issue_response.rb +21 -21
- data/lib/authlete/models/components/token_issue_response.rbi +1 -1
- data/lib/authlete/models/components/token_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_request.rb +27 -27
- data/lib/authlete/models/components/token_request.rbi +1 -1
- data/lib/authlete/models/components/token_response.rb +49 -61
- data/lib/authlete/models/components/token_response.rbi +1 -1
- data/lib/authlete/models/components/token_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_revoke_request.rb +7 -7
- data/lib/authlete/models/components/token_revoke_request.rbi +1 -1
- data/lib/authlete/models/components/token_revoke_response.rbi +1 -1
- data/lib/authlete/models/components/token_type.rb +1 -1
- data/lib/authlete/models/components/token_type.rbi +1 -1
- data/lib/authlete/models/components/token_update_request.rb +16 -16
- data/lib/authlete/models/components/token_update_request.rbi +1 -1
- data/lib/authlete/models/components/token_update_response.rb +9 -9
- data/lib/authlete/models/components/token_update_response.rbi +1 -1
- data/lib/authlete/models/components/token_update_response_action.rbi +1 -1
- data/lib/authlete/models/components/trust_anchor.rb +2 -2
- data/lib/authlete/models/components/trust_anchor.rbi +1 -1
- data/lib/authlete/models/components/user_code_charset.rb +1 -1
- data/lib/authlete/models/components/user_code_charset.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_request.rb +7 -67
- data/lib/authlete/models/components/userinfo_issue_request.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_response.rb +5 -5
- data/lib/authlete/models/components/userinfo_issue_response.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/userinfo_request.rb +15 -40
- data/lib/authlete/models/components/userinfo_request.rbi +1 -1
- data/lib/authlete/models/components/userinfo_response.rb +46 -89
- data/lib/authlete/models/components/userinfo_response.rbi +1 -1
- data/lib/authlete/models/components/userinfo_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_response.rb +3 -3
- data/lib/authlete/models/components/vci_batch_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_batch_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_response.rb +2 -2
- data/lib/authlete/models/components/vci_batch_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_response.rb +3 -3
- data/lib/authlete/models/components/vci_deferred_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_response.rb +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_request.rb +1 -1
- data/lib/authlete/models/components/vci_jwks_request.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_response.rb +3 -3
- data/lib/authlete/models/components/vci_jwks_response.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_jwks_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_request.rb +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_request.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_response.rb +3 -3
- data/lib/authlete/models/components/vci_jwtissuer_response.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_request.rb +1 -1
- data/lib/authlete/models/components/vci_metadata_request.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_response.rb +3 -3
- data/lib/authlete/models/components/vci_metadata_response.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_metadata_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_request.rb +10 -79
- data/lib/authlete/models/components/vci_offer_create_request.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_response.rb +1 -1
- data/lib/authlete/models/components/vci_offer_create_response.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_request.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_response.rb +1 -1
- data/lib/authlete/models/components/vci_offer_info_response.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_response.rb +4 -4
- data/lib/authlete/models/components/vci_single_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_single_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_response.rb +1 -1
- data/lib/authlete/models/components/vci_single_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/verified_claims_validation_schema.rb +1 -1
- data/lib/authlete/models/components/verified_claims_validation_schema.rbi +1 -1
- data/lib/authlete/models/components.rb +0 -5
- data/lib/authlete/models/errors/apierror.rbi +2 -1
- data/lib/authlete/models/errors/result_error.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_standard_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_standard_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_revocation_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_revocation_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_delete_api_request.rb +1 -1
- data/lib/authlete/models/operations/auth_token_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_get_list_api_request.rb +3 -3
- data/lib/authlete/models/operations/auth_token_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_revoke_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_revoke_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/authorization_ticket_info_post_api_request.rbi +1 -1
- data/lib/authlete/models/operations/authorization_ticket_info_post_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_complete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_complete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_request.rb +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_authorization_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_request.rb +3 -3
- data/lib/authlete/models/operations/client_authorization_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_request.rb +3 -3
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_update_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_authorization_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_flag_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_flag_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_get_list_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_request.rb +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_delete_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_get_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_update_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_update_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_secret_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_form_request.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_form_response.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_authorization_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_authorization_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_complete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_complete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_verification_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_verification_api_response.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/federation_registration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/federation_registration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_request.rb +1 -1
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_request.rbi +1 -1
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_response.rbi +1 -1
- data/lib/authlete/models/operations/grant_m_api_request.rbi +1 -1
- data/lib/authlete/models/operations/grant_m_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/idtoken_reissue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/idtoken_reissue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/jose_verify_api_request.rbi +1 -1
- data/lib/authlete/models/operations/jose_verify_api_response.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_api_request.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_api_response.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_logout_api_request.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_logout_api_response.rbi +1 -1
- data/lib/authlete/models/operations/pushed_auth_req_api_request.rbi +1 -1
- data/lib/authlete/models/operations/pushed_auth_req_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_configuration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_configuration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_jwks_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_jwks_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/updateauthorizationticket_request.rbi +1 -1
- data/lib/authlete/models/operations/updateauthorizationticket_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwks_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwks_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwtissuer_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwtissuer_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_metadata_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_metadata_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_info_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_info_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations.rb +0 -4
- data/lib/authlete/native_sso.rb +17 -69
- data/lib/authlete/pushed_authorization.rb +10 -5
- data/lib/authlete/revocation.rb +10 -98
- data/lib/authlete/sdkconfiguration.rb +5 -6
- data/lib/authlete/services.rb +47 -27
- data/lib/authlete/token_management.rb +43 -23
- data/lib/authlete/tokens.rb +24 -454
- data/lib/authlete/userinfo.rb +17 -224
- data/lib/authlete/utils/request_bodies.rb +8 -3
- data/lib/authlete/utils/security.rb +32 -11
- data/lib/authlete/utils/url.rb +11 -5
- data/lib/authlete/utils/utils.rb +33 -3
- data/lib/authlete/verifiable_credentials.rb +69 -34
- data/lib/authlete_ruby_sdk.rb +0 -1
- data/lib/crystalline/metadata_fields.rb +66 -9
- data/lib/crystalline/module.rb +3 -3
- data/lib/crystalline/types.rb +11 -3
- metadata +18 -23
- data/lib/authlete/models/components/batchkind.rb +0 -18
- data/lib/authlete/models/components/batchkind.rbi +0 -11
- data/lib/authlete/models/components/token_batch_status.rb +0 -61
- data/lib/authlete/models/components/token_batch_status.rbi +0 -27
- data/lib/authlete/models/components/token_batch_status_result.rb +0 -19
- data/lib/authlete/models/components/token_batch_status_result.rbi +0 -11
- data/lib/authlete/models/components/token_create_batch_response.rb +0 -41
- data/lib/authlete/models/components/token_create_batch_response.rbi +0 -17
- data/lib/authlete/models/components/token_create_batch_status_response.rb +0 -42
- data/lib/authlete/models/components/token_create_batch_status_response.rbi +0 -17
- data/lib/authlete/models/operations/auth_token_create_batch_api_request.rb +0 -41
- data/lib/authlete/models/operations/auth_token_create_batch_api_request.rbi +0 -17
- data/lib/authlete/models/operations/auth_token_create_batch_api_response.rb +0 -44
- data/lib/authlete/models/operations/auth_token_create_batch_api_response.rbi +0 -19
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_request.rb +0 -37
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_request.rbi +0 -15
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_response.rb +0 -44
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_response.rbi +0 -19
- data/lib/authlete/token_operations.rb +0 -344
|
@@ -14,87 +14,27 @@ module Authlete
|
|
|
14
14
|
|
|
15
15
|
# The access token that has been passed to the userinfo endpoint by the client application. In other words,
|
|
16
16
|
# the access token which was contained in the userinfo request.
|
|
17
|
-
#
|
|
17
|
+
#
|
|
18
18
|
field :token, ::String, { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('token'), required: true }, 'form': { 'field_name': 'token' } }
|
|
19
19
|
# Claims in JSON format. As for the format, see [OpenID Connect Core 1.0, 5.1. Standard Claims](https://openid.net/specs/openid-connect-core-1_0.html#StandardClaims).
|
|
20
|
-
#
|
|
20
|
+
#
|
|
21
21
|
field :claims, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('claims') }, 'form': { 'field_name': 'claims' } }
|
|
22
22
|
# The value of the `sub` claim. If the value of this request parameter is not empty, it is used as the value of
|
|
23
23
|
# the `sub` claim. Otherwise, the value of the subject associated with the access token is used.
|
|
24
|
-
#
|
|
24
|
+
#
|
|
25
25
|
field :sub, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('sub') }, 'form': { 'field_name': 'sub' } }
|
|
26
26
|
# Claim key-value pairs that are used to compute transformed claims.
|
|
27
|
-
#
|
|
27
|
+
#
|
|
28
28
|
field :claims_for_tx, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('claimsForTx') }, 'form': { 'field_name': 'claimsForTx' } }
|
|
29
29
|
# The Signature header value from the request.
|
|
30
|
-
#
|
|
30
|
+
#
|
|
31
31
|
field :request_signature, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requestSignature') }, 'form': { 'field_name': 'requestSignature' } }
|
|
32
32
|
# HTTP headers to be included in processing the signature. If this is a signed request, this must include the
|
|
33
33
|
# Signature and Signature-Input headers, as well as any additional headers covered by the signature.
|
|
34
|
-
#
|
|
34
|
+
#
|
|
35
35
|
field :headers, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Pair)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('headers') }, 'form': { 'field_name': 'headers', 'json': true } }
|
|
36
36
|
# Values of verified claims requested indirectly by "transformed claims".
|
|
37
|
-
#
|
|
38
|
-
# A client application may request "transformed claims". Each of transformed claims uses an existing
|
|
39
|
-
# claim as input. As a result, to compute the value of a transformed claim, the value of the referenced
|
|
40
|
-
# existing claim is needed. This `verifiedClaimsForTx` request parameter has to be used to provide
|
|
41
|
-
# values of existing claims for computation of transformed claims.
|
|
42
|
-
#
|
|
43
|
-
# A response from the `/auth/userinfo` API may include the `requestedVerifiedClaimsForTx` response
|
|
44
|
-
# parameter which is a list of verified claims that are referenced indirectly by transformed claims
|
|
45
|
-
# (cf. `requestedVerifiedClaimsForTx` in `/auth/userinfo` API response). The authorization server
|
|
46
|
-
# implementation should prepare values of the verified claims listed in `requestedVerifiedClaimsForTx`
|
|
47
|
-
# and pass them as the value of this `verifiedClaimsForTx` request parameter.
|
|
48
|
-
#
|
|
49
|
-
# The following is an example of the value of this request parameter.
|
|
50
|
-
#
|
|
51
|
-
# ```
|
|
52
|
-
# [
|
|
53
|
-
# "{\"birthdate\":\"1970-01-23\",\"nationalities\":[\"DEU\",\"USA\"]}"
|
|
54
|
-
# ]
|
|
55
|
-
# ```
|
|
56
|
-
#
|
|
57
|
-
# The reason that this `verifiedClaimsForTx` property is an array is that the `"verified_claims"`
|
|
58
|
-
# property in the claims request parameter of an authorization request can be an array like below.
|
|
59
|
-
#
|
|
60
|
-
# ```
|
|
61
|
-
# {
|
|
62
|
-
# "transformed_claims": {
|
|
63
|
-
# "nationality_usa": {
|
|
64
|
-
# "claim": "nationalities",
|
|
65
|
-
# "fn": [
|
|
66
|
-
# [ "eq", "USA" ],
|
|
67
|
-
# "any"
|
|
68
|
-
# ]
|
|
69
|
-
# }
|
|
70
|
-
# },
|
|
71
|
-
# "userinfo": {
|
|
72
|
-
# "verified_claims": [
|
|
73
|
-
# {
|
|
74
|
-
# "verification": { "trust_framework": { "value": "gold" } },
|
|
75
|
-
# "claims": { "::18_or_above": null }
|
|
76
|
-
# },
|
|
77
|
-
# {
|
|
78
|
-
# "verification": { "trust_framework": { "value": "silver" } },
|
|
79
|
-
# "claims": { ":nationality_usa": null }
|
|
80
|
-
# }
|
|
81
|
-
# ]
|
|
82
|
-
# }
|
|
83
|
-
# }
|
|
84
|
-
# ```
|
|
85
|
-
#
|
|
86
|
-
# For the example above, the value of this `verifiedClaimsForTx` property should be an array of
|
|
87
|
-
# size 2 and look like below. The first element is JSON including claims which have been verified
|
|
88
|
-
# under the trust framework `"gold"`, and the second element is JSON including claims which have
|
|
89
|
-
# been verified under the trust framework `"silver"`.
|
|
90
|
-
#
|
|
91
|
-
# ```
|
|
92
|
-
# [
|
|
93
|
-
# "{\"birthdate\":\"1970-01-23\"}",
|
|
94
|
-
# "{\"nationalities\":[\"DEU\",\"USA\"]}"
|
|
95
|
-
# ]
|
|
96
|
-
# ```
|
|
97
|
-
#
|
|
37
|
+
#
|
|
98
38
|
field :verified_claims_for_tx, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('verifiedClaimsForTx') }, 'form': { 'field_name': 'verifiedClaimsForTx' } }
|
|
99
39
|
|
|
100
40
|
sig { params(token: ::String, claims: T.nilable(::String), sub: T.nilable(::String), claims_for_tx: T.nilable(::String), request_signature: T.nilable(::String), headers: T.nilable(T::Array[Models::Components::Pair]), verified_claims_for_tx: T.nilable(T::Array[::String])).void }
|
|
@@ -17,19 +17,19 @@ module Authlete
|
|
|
17
17
|
# A short message which explains the result of the API call.
|
|
18
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
19
19
|
# The next action that the authorization server implementation should take.
|
|
20
|
-
field :action, Crystalline::Nilable.new(Models::Components::UserinfoIssueResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::UserinfoIssueResponseAction, true) } }
|
|
20
|
+
field :action, Crystalline::Nilable.new(Models::Components::UserinfoIssueResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::UserinfoIssueResponseAction, true) } }
|
|
21
21
|
# The content that the authorization server implementation can use as the value of `WWW-Authenticate`
|
|
22
22
|
# header on errors.
|
|
23
|
-
#
|
|
23
|
+
#
|
|
24
24
|
field :response_content, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('responseContent') } }
|
|
25
25
|
# The signature header of the response message.
|
|
26
|
-
#
|
|
26
|
+
#
|
|
27
27
|
field :signature, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('signature') } }
|
|
28
28
|
# The signature-input header of the response message
|
|
29
|
-
#
|
|
29
|
+
#
|
|
30
30
|
field :signature_input, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('signatureInput') } }
|
|
31
31
|
# The content-digest header of the response message
|
|
32
|
-
#
|
|
32
|
+
#
|
|
33
33
|
field :content_digest, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('contentDigest') } }
|
|
34
34
|
|
|
35
35
|
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::UserinfoIssueResponseAction), response_content: T.nilable(::String), signature: T.nilable(::String), signature_input: T.nilable(::String), content_digest: T.nilable(::String)).void }
|
|
@@ -13,81 +13,56 @@ module Authlete
|
|
|
13
13
|
include Crystalline::MetadataFields
|
|
14
14
|
|
|
15
15
|
# An access token.
|
|
16
|
-
#
|
|
16
|
+
#
|
|
17
17
|
field :token, ::String, { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('token'), required: true }, 'form': { 'field_name': 'token' } }
|
|
18
18
|
# Client certificate used in the TLS connection established between the client application and the userinfo endpoint.
|
|
19
|
-
#
|
|
19
|
+
#
|
|
20
20
|
# The value of this request parameter is referred to when the access token given to the userinfo endpoint was bound to
|
|
21
21
|
# a client certificate when it was issued. See [OAuth 2.0 Mutual TLS Client Authentication and Certificate-Bound Access Tokens]
|
|
22
22
|
# (https://datatracker.ietf.org/doc/rfc8705/) for details about the specification of certificate-bound access tokens.
|
|
23
|
-
#
|
|
23
|
+
#
|
|
24
24
|
field :client_certificate, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientCertificate') }, 'form': { 'field_name': 'clientCertificate' } }
|
|
25
25
|
# `DPoP` header presented by the client during the request to the user info endpoint.
|
|
26
|
-
#
|
|
26
|
+
#
|
|
27
27
|
# The header contains a signed JWT which includes the public key that is paired with the private key used to sign the JWT.
|
|
28
28
|
# See [OAuth 2.0 Demonstration of Proof-of-Possession at the Application Layer (DPoP)](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-dpop)
|
|
29
29
|
# for details.
|
|
30
|
-
#
|
|
30
|
+
#
|
|
31
31
|
field :dpop, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('dpop') }, 'form': { 'field_name': 'dpop' } }
|
|
32
32
|
# HTTP method of the user info request. This field is used to validate the DPoP header.
|
|
33
33
|
# In normal cases, the value is either `GET` or `POST`.
|
|
34
|
-
#
|
|
34
|
+
#
|
|
35
35
|
field :htm, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('htm') }, 'form': { 'field_name': 'htm' } }
|
|
36
36
|
# URL of the user info endpoint. This field is used to validate the DPoP header.
|
|
37
|
-
#
|
|
37
|
+
#
|
|
38
38
|
# If this parameter is omitted, the `userInfoEndpoint` property of the service is used as the default value.
|
|
39
39
|
# See [OAuth 2.0 Demonstration of Proof-of-Possession at the Application Layer (DPoP)](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-dpop)
|
|
40
40
|
# for details.
|
|
41
|
-
#
|
|
41
|
+
#
|
|
42
42
|
field :htu, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('htu') }, 'form': { 'field_name': 'htu' } }
|
|
43
43
|
# The full URL of the userinfo endpoint.
|
|
44
|
-
#
|
|
44
|
+
#
|
|
45
45
|
field :uri, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('uri') }, 'form': { 'field_name': 'uri' } }
|
|
46
46
|
# The HTTP message body of the request, if present.
|
|
47
|
-
#
|
|
47
|
+
#
|
|
48
48
|
field :message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('message') }, 'form': { 'field_name': 'message' } }
|
|
49
49
|
# HTTP headers to be included in processing the signature. If this is a signed request, this must include the
|
|
50
50
|
# Signature and Signature-Input headers, as well as any additional headers covered by the signature.
|
|
51
|
-
#
|
|
51
|
+
#
|
|
52
52
|
field :headers, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Pair)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('headers') }, 'form': { 'field_name': 'headers', 'json': true } }
|
|
53
53
|
# The target URI of the userinfo request, including the query part, if any.
|
|
54
|
-
#
|
|
55
|
-
# This parameter is used as the value of the `@target-uri` derived component for HTTP message signatures
|
|
56
|
-
# ([RFC 9421 HTTP Message Signatures, Section 2.2.2. Target URI](https://www.rfc-editor.org/rfc/rfc9421.html#section-2.2.2)).
|
|
57
|
-
# Additionally, other derived components such as `@authority`, `@scheme`, `@path`, `@query` and
|
|
58
|
-
# `@query-param` are computed from this parameter.
|
|
59
|
-
#
|
|
60
|
-
# When this parameter is omitted, the value of the `htu` parameter is used. The `htu` parameter
|
|
61
|
-
# represents the URL of the userinfo endpoint, which usually serves as the target URI of the userinfo request.
|
|
62
|
-
# The only exception is when the access token is specified as a query parameter, as defined in
|
|
63
|
-
# [RFC 6750 Section 2.3](https://www.rfc-editor.org/rfc/rfc6750.html#section-2.3). However, RFC 6750
|
|
64
|
-
# states that this method "SHOULD NOT be used" unless other methods are not viable.
|
|
65
|
-
#
|
|
66
|
-
# If neither this `targetUri` parameter nor the `htu` parameter is specified, the `userInfoEndpoint`
|
|
67
|
-
# property of the service is used as a fallback.
|
|
68
|
-
#
|
|
54
|
+
#
|
|
69
55
|
field :target_uri, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('targetUri') }, 'form': { 'field_name': 'targetUri' } }
|
|
70
56
|
# The flag indicating whether to check if the DPoP proof JWT includes the expected `nonce` value.
|
|
71
|
-
#
|
|
57
|
+
#
|
|
72
58
|
# If this request parameter is set to `true` or if the service's `dpopNonceRequired` property is
|
|
73
59
|
# set to `true`, the `/auth/userinfo` API checks if the DPoP proof JWT includes the expected `nonce`
|
|
74
60
|
# value. In this case, the response from the `/auth/userinfo` API will include the `dpopNonce` response
|
|
75
61
|
# parameter, which should be used as the value of the DPoP-Nonce HTTP header.
|
|
76
|
-
#
|
|
62
|
+
#
|
|
77
63
|
field :dpop_nonce_required, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('dpopNonceRequired') }, 'form': { 'field_name': 'dpopNonceRequired' } }
|
|
78
64
|
# The flag indicating whether the userinfo request contains a request body.
|
|
79
|
-
#
|
|
80
|
-
# When the userinfo request must comply with the HTTP message signing requirements defined in the
|
|
81
|
-
# FAPI 2.0 Message Signing specification, the `"content-digest"` component identifier must be included
|
|
82
|
-
# in the signature base of the HTTP message signature (see [RFC 9421 HTTP Message Signatures](https://www.rfc-editor.org/rfc/rfc9421.html))
|
|
83
|
-
# if the userinfo request contains a request body.
|
|
84
|
-
#
|
|
85
|
-
# When this `requestBodyContained` parameter is set to `true`, Authlete checks whether `"content-digest"`
|
|
86
|
-
# is included in the signature base, if the FAPI profile applies to the userinfo request.
|
|
87
|
-
#
|
|
88
|
-
# NOTE: The FAPI 2.0 Message Signing specification is not applied to the userinfo endpoint until
|
|
89
|
-
# its necessity is agreed upon by the industry (cf. [FAPI Issue 723](https://bitbucket.org/openid/fapi/issues/723)).
|
|
90
|
-
#
|
|
65
|
+
#
|
|
91
66
|
field :request_body_contained, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requestBodyContained') }, 'form': { 'field_name': 'requestBodyContained' } }
|
|
92
67
|
|
|
93
68
|
sig { params(token: ::String, client_certificate: T.nilable(::String), dpop: T.nilable(::String), htm: T.nilable(::String), htu: T.nilable(::String), uri: T.nilable(::String), message: T.nilable(::String), headers: T.nilable(T::Array[Models::Components::Pair]), target_uri: T.nilable(::String), dpop_nonce_required: T.nilable(T::Boolean), request_body_contained: T.nilable(T::Boolean)).void }
|
|
@@ -17,133 +17,90 @@ module Authlete
|
|
|
17
17
|
# A short message which explains the result of the API call.
|
|
18
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
19
19
|
# The next action that the authorization server implementation should take.
|
|
20
|
-
field :action, Crystalline::Nilable.new(Models::Components::UserinfoResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::UserinfoResponseAction, true) } }
|
|
20
|
+
field :action, Crystalline::Nilable.new(Models::Components::UserinfoResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::UserinfoResponseAction, true) } }
|
|
21
21
|
# The list of claims that the client application requests to be embedded in the ID token.
|
|
22
|
-
#
|
|
22
|
+
#
|
|
23
23
|
field :claims, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('claims') } }
|
|
24
24
|
# The ID of the client application which is associated with the access token.
|
|
25
|
-
#
|
|
25
|
+
#
|
|
26
26
|
field :client_id, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientId') } }
|
|
27
27
|
# The client ID alias when the authorization request for the access token was made.
|
|
28
|
-
#
|
|
28
|
+
#
|
|
29
29
|
field :client_id_alias, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientIdAlias') } }
|
|
30
30
|
# The flag which indicates whether the client ID alias was used when the authorization
|
|
31
31
|
# request for the access token was made.
|
|
32
|
-
#
|
|
32
|
+
#
|
|
33
33
|
field :client_id_alias_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientIdAliasUsed') } }
|
|
34
34
|
# The content that the authorization server implementation can use as the value of `WWW-Authenticate`
|
|
35
35
|
# header on errors.
|
|
36
|
-
#
|
|
36
|
+
#
|
|
37
37
|
field :response_content, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('responseContent') } }
|
|
38
38
|
# The scopes covered by the access token.
|
|
39
|
-
#
|
|
39
|
+
#
|
|
40
40
|
field :scopes, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('scopes') } }
|
|
41
41
|
# The subject (= resource owner's ID).
|
|
42
|
-
#
|
|
42
|
+
#
|
|
43
43
|
field :subject, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('subject') } }
|
|
44
44
|
# The access token that came along with the userinfo request.
|
|
45
|
-
#
|
|
45
|
+
#
|
|
46
46
|
field :token, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('token') } }
|
|
47
47
|
# The extra properties associated with the access token.
|
|
48
|
-
#
|
|
48
|
+
#
|
|
49
49
|
field :properties, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Property)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('properties') } }
|
|
50
50
|
# The value of the `userinfo` property in the `claims` request parameter or in the `claims` property in an authorization request object.
|
|
51
|
-
#
|
|
52
|
-
# A client application may request certain claims be embedded in an ID token or in a response from the userInfo endpoint.
|
|
53
|
-
# There are several ways. Including the `claims` request parameter and including the `claims` property in a request object are such examples.
|
|
54
|
-
# In both cases, the value of the `claims` parameter/property is JSON. Its format is described in [5.5. Requesting Claims using the "claims"
|
|
55
|
-
# Request Parameter](https://openid.net/specs/openid-connect-core-1_0.html#ClaimsParameter).
|
|
56
|
-
#
|
|
57
|
-
# The following is an excerpt from the specification. You can find `userinfo` and `id_token` are top-level properties.
|
|
58
|
-
#
|
|
59
|
-
# ```json
|
|
60
|
-
# {
|
|
61
|
-
# "userinfo":
|
|
62
|
-
# {
|
|
63
|
-
# "given_name": { "essential": true },
|
|
64
|
-
# "nickname": null,
|
|
65
|
-
# "email": { "essential": true },
|
|
66
|
-
# "email_verified": { "essential": true },
|
|
67
|
-
# "picture": null,
|
|
68
|
-
# "http://example.info/claims/groups": null
|
|
69
|
-
# },
|
|
70
|
-
# "id_token":
|
|
71
|
-
# {
|
|
72
|
-
# "auth_time": { "essential": true },
|
|
73
|
-
# "acr": { "values": [ "urn:mace:incommon:iap:silver" ] }
|
|
74
|
-
# }
|
|
75
|
-
# }
|
|
76
|
-
# ````
|
|
77
|
-
#
|
|
78
|
-
# The value of this property is the value of the `userinfo` property in JSON format.
|
|
79
|
-
# For example, if the JSON above is included in an authorization request, this property holds JSON equivalent to the following.
|
|
80
|
-
#
|
|
81
|
-
# ```json
|
|
82
|
-
# {
|
|
83
|
-
# "given_name": { "essential": true },
|
|
84
|
-
# "nickname": null,
|
|
85
|
-
# "email": { "essential": true },
|
|
86
|
-
# "email_verified": { "essential": true },
|
|
87
|
-
# "picture": null,
|
|
88
|
-
# "http://example.info/claims/groups": null
|
|
89
|
-
# }
|
|
90
|
-
# ```
|
|
91
|
-
#
|
|
92
|
-
# Note that if a request object is given and it contains the `claims` property and if the `claims` request parameter is also given,
|
|
93
|
-
# the value of this property holds the former value.
|
|
94
|
-
#
|
|
51
|
+
#
|
|
95
52
|
field :user_info_claims, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('userInfoClaims') } }
|
|
96
53
|
# The attributes of this service that the client application belongs to.
|
|
97
|
-
#
|
|
54
|
+
#
|
|
98
55
|
field :service_attributes, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Pair)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('serviceAttributes') } }
|
|
99
56
|
# The attributes of the client.
|
|
100
|
-
#
|
|
57
|
+
#
|
|
101
58
|
field :client_attributes, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Pair)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientAttributes') } }
|
|
102
59
|
# the claims that the user has consented for the client application
|
|
103
60
|
# to know.
|
|
104
|
-
#
|
|
61
|
+
#
|
|
105
62
|
field :consented_claims, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('consentedClaims') } }
|
|
106
63
|
# Get names of claims that are requested indirectly by *"transformed
|
|
107
64
|
# claims"*.
|
|
108
65
|
# A client application can request *"transformed claims"* by adding
|
|
109
66
|
# names of transformed claims in the `claims` request parameter.
|
|
110
67
|
# The following is an example of the `claims` request parameter
|
|
111
|
-
# that requests a predefined transformed claim named `
|
|
112
|
-
# and a transformed claim named `
|
|
68
|
+
# that requests a predefined transformed claim named `18_or_over`
|
|
69
|
+
# and a transformed claim named `nationality_usa` to be embedded
|
|
113
70
|
# in the response from the userinfo endpoint.
|
|
114
71
|
# ```json
|
|
115
|
-
#
|
|
116
|
-
# "
|
|
117
|
-
# "
|
|
72
|
+
# {
|
|
73
|
+
# "transformed_claims": {
|
|
74
|
+
# "nationality_usa": {
|
|
118
75
|
# "claim": "nationalities",
|
|
119
76
|
# "fn": [
|
|
120
77
|
# [ "eq", "USA" ],
|
|
121
78
|
# "any"
|
|
122
79
|
# ]
|
|
123
|
-
#
|
|
124
|
-
#
|
|
125
|
-
# "userinfo":
|
|
126
|
-
# "::
|
|
127
|
-
# ":
|
|
128
|
-
#
|
|
129
|
-
#
|
|
80
|
+
# }
|
|
81
|
+
# },
|
|
82
|
+
# "userinfo": {
|
|
83
|
+
# "::18_or_over": null,
|
|
84
|
+
# ":nationality_usa": null
|
|
85
|
+
# }
|
|
86
|
+
# }
|
|
130
87
|
# ```
|
|
131
|
-
# The example above assumes that a transformed claim named `
|
|
88
|
+
# The example above assumes that a transformed claim named `18_or_over`
|
|
132
89
|
# is predefined by the authorization server like below.
|
|
133
90
|
# ```json
|
|
134
|
-
#
|
|
135
|
-
# "
|
|
91
|
+
# {
|
|
92
|
+
# "18_or_over": {
|
|
136
93
|
# "claim": "birthdate",
|
|
137
94
|
# "fn": [
|
|
138
|
-
# "
|
|
95
|
+
# "years_ago",
|
|
139
96
|
# [ "gte", 18 ]
|
|
140
97
|
# ]
|
|
141
|
-
#
|
|
142
|
-
#
|
|
98
|
+
# }
|
|
99
|
+
# }
|
|
143
100
|
# ```
|
|
144
101
|
# In the example, the `nationalities` claim is requested indirectly
|
|
145
|
-
# by the `
|
|
146
|
-
# `birthdate` claim is requested indirectly by the `
|
|
102
|
+
# by the `nationality_usa` transformed claim. Likewise, the
|
|
103
|
+
# `birthdate` claim is requested indirectly by the `18_or_over`
|
|
147
104
|
# transformed claim.
|
|
148
105
|
# When the `claims` request parameter of an authorization request is
|
|
149
106
|
# like the example above, this `requestedClaimsForTx` property will
|
|
@@ -156,40 +113,40 @@ module Authlete
|
|
|
156
113
|
# request parameter when it calls the `/api/auth/userinfo/issue` API. The following
|
|
157
114
|
# is an example of the value of the `claimsForTx` request parameter.
|
|
158
115
|
# ```json
|
|
159
|
-
#
|
|
116
|
+
# {
|
|
160
117
|
# "birthdate": "1970-01-23",
|
|
161
118
|
# "nationalities": [ "DEU", "USA" ]
|
|
162
|
-
#
|
|
119
|
+
# }
|
|
163
120
|
# ```
|
|
164
|
-
#
|
|
121
|
+
#
|
|
165
122
|
field :requested_claims_for_tx, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requestedClaimsForTx') } }
|
|
166
123
|
# Names of verified claims that will be referenced when transformed claims are computed.
|
|
167
|
-
#
|
|
124
|
+
#
|
|
168
125
|
field :requested_verified_claims_for_tx, Crystalline::Nilable.new(Crystalline::Array.new(Crystalline::Array.new(::String))), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requestedVerifiedClaimsForTx') } }
|
|
169
126
|
# the value of the `transformed_claims` property in the `claims` request
|
|
170
127
|
# parameter of an authorization request or in the `claims` property in a
|
|
171
128
|
# request object.
|
|
172
|
-
#
|
|
129
|
+
#
|
|
173
130
|
field :transformed_claims, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('transformedClaims') } }
|
|
174
131
|
# The entity ID of the client.
|
|
175
|
-
#
|
|
132
|
+
#
|
|
176
133
|
field :client_entity_id, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientEntityId') } }
|
|
177
134
|
# Flag which indicates whether the entity ID of the client was used when the request for the access token was made.
|
|
178
|
-
#
|
|
135
|
+
#
|
|
179
136
|
field :client_entity_id_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientEntityIdUsed') } }
|
|
180
137
|
# The expected nonce value for DPoP proof JWT, which should be used
|
|
181
138
|
# as the value of the `DPoP-Nonce` HTTP header.
|
|
182
|
-
#
|
|
139
|
+
#
|
|
183
140
|
field :dpop_nonce, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('dpopNonce') } }
|
|
184
141
|
# The location of the client's metadata document that was used to resolve client metadata.
|
|
185
|
-
#
|
|
142
|
+
#
|
|
186
143
|
# This property is set when client metadata was retrieved via the [OAuth Client ID Metadata Document](https://datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/) (CIMD) mechanism.
|
|
187
|
-
#
|
|
144
|
+
#
|
|
188
145
|
field :metadata_document_location, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('metadataDocumentLocation') } }
|
|
189
146
|
# Flag indicating whether a metadata document was used to resolve client metadata for this request.
|
|
190
|
-
#
|
|
147
|
+
#
|
|
191
148
|
# When `true`, the client metadata was retrieved via the CIMD mechanism rather than from the Authlete database.
|
|
192
|
-
#
|
|
149
|
+
#
|
|
193
150
|
field :metadata_document_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('metadataDocumentUsed') } }
|
|
194
151
|
|
|
195
152
|
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::UserinfoResponseAction), claims: T.nilable(T::Array[::String]), client_id: T.nilable(::Integer), client_id_alias: T.nilable(::String), client_id_alias_used: T.nilable(T::Boolean), response_content: T.nilable(::String), scopes: T.nilable(T::Array[::String]), subject: T.nilable(::String), token: T.nilable(::String), properties: T.nilable(T::Array[Models::Components::Property]), user_info_claims: T.nilable(::String), service_attributes: T.nilable(T::Array[Models::Components::Pair]), client_attributes: T.nilable(T::Array[Models::Components::Pair]), consented_claims: T.nilable(T::Array[::String]), requested_claims_for_tx: T.nilable(T::Array[::String]), requested_verified_claims_for_tx: T.nilable(T::Array[T::Array[::String]]), transformed_claims: T.nilable(::String), client_entity_id: T.nilable(::String), client_entity_id_used: T.nilable(T::Boolean), dpop_nonce: T.nilable(::String), metadata_document_location: T.nilable(::String), metadata_document_used: T.nilable(T::Boolean)).void }
|
|
@@ -18,11 +18,11 @@ module Authlete
|
|
|
18
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
19
19
|
# The next action that the implementation of the batch credential
|
|
20
20
|
# endpoint should take.
|
|
21
|
-
#
|
|
22
|
-
field :action, Crystalline::Nilable.new(Models::Components::VciBatchIssueResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::VciBatchIssueResponseAction, true) } }
|
|
21
|
+
#
|
|
22
|
+
field :action, Crystalline::Nilable.new(Models::Components::VciBatchIssueResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::VciBatchIssueResponseAction, true) } }
|
|
23
23
|
# The content of the response that the implementation of the batch
|
|
24
24
|
# credential endpoint should return.
|
|
25
|
-
#
|
|
25
|
+
#
|
|
26
26
|
field :response_content, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('responseContent') } }
|
|
27
27
|
|
|
28
28
|
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::VciBatchIssueResponseAction), response_content: T.nilable(::String)).void }
|
|
@@ -17,12 +17,12 @@ module Authlete
|
|
|
17
17
|
# A short message which explains the result of the API call.
|
|
18
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
19
19
|
# The next action that the batch credential endpoint should take.
|
|
20
|
-
field :action, Crystalline::Nilable.new(Models::Components::VciBatchParseResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::VciBatchParseResponseAction, true) } }
|
|
20
|
+
field :action, Crystalline::Nilable.new(Models::Components::VciBatchParseResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::VciBatchParseResponseAction, true) } }
|
|
21
21
|
# The content of the response to the request sender.
|
|
22
22
|
field :response_content, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('responseContent') } }
|
|
23
23
|
# Information about the credential requests in the batch credential
|
|
24
24
|
# request.
|
|
25
|
-
#
|
|
25
|
+
#
|
|
26
26
|
field :info, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::CredentialRequestInfo)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('info') } }
|
|
27
27
|
|
|
28
28
|
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::VciBatchParseResponseAction), response_content: T.nilable(::String), info: T.nilable(T::Array[Models::Components::CredentialRequestInfo])).void }
|
|
@@ -18,11 +18,11 @@ module Authlete
|
|
|
18
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
19
19
|
# The next action that the implementation of the deferred credential
|
|
20
20
|
# endpoint should take.
|
|
21
|
-
#
|
|
22
|
-
field :action, Crystalline::Nilable.new(Models::Components::VciDeferredIssueResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::VciDeferredIssueResponseAction, true) } }
|
|
21
|
+
#
|
|
22
|
+
field :action, Crystalline::Nilable.new(Models::Components::VciDeferredIssueResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::VciDeferredIssueResponseAction, true) } }
|
|
23
23
|
# The content of the response that the implementation of the deferred
|
|
24
24
|
# credential endpoint should return.
|
|
25
|
-
#
|
|
25
|
+
#
|
|
26
26
|
field :response_content, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('responseContent') } }
|
|
27
27
|
|
|
28
28
|
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::VciDeferredIssueResponseAction), response_content: T.nilable(::String)).void }
|