authlete_ruby_sdk 0.0.3.pre.beta → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/authlete/authorization.rb +24 -563
- data/lib/authlete/authorization_management.rb +15 -7
- data/lib/authlete/ciba.rb +35 -414
- data/lib/authlete/client.rb +3 -3
- data/lib/authlete/client_management.rb +133 -87
- data/lib/authlete/clients.rb +43 -23
- data/lib/authlete/device_flow.rb +24 -147
- data/lib/authlete/dynamic_client_registration.rb +31 -283
- data/lib/authlete/federation.rb +17 -66
- data/lib/authlete/grant_management.rb +10 -5
- data/lib/authlete/hardware_security_keys.rb +24 -10
- data/lib/authlete/introspection.rb +17 -195
- data/lib/authlete/jose_object.rb +10 -5
- data/lib/authlete/jwk_set_endpoint.rb +12 -7
- data/lib/authlete/lifecycle.rb +10 -5
- data/lib/authlete/models/components/access_token.rb +9 -9
- data/lib/authlete/models/components/access_token.rbi +1 -1
- data/lib/authlete/models/components/application_type.rb +1 -1
- data/lib/authlete/models/components/application_type.rbi +1 -1
- data/lib/authlete/models/components/attachment_type.rb +1 -1
- data/lib/authlete/models/components/attachment_type.rbi +1 -1
- data/lib/authlete/models/components/authorization_details_element.rb +16 -16
- data/lib/authlete/models/components/authorization_details_element.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_request.rb +4 -4
- data/lib/authlete/models/components/authorization_fail_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_request_reason.rb +1 -1
- data/lib/authlete/models/components/authorization_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_response.rb +2 -2
- data/lib/authlete/models/components/authorization_fail_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_request.rb +19 -83
- data/lib/authlete/models/components/authorization_issue_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_response.rb +8 -8
- data/lib/authlete/models/components/authorization_issue_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_request.rb +7 -7
- data/lib/authlete/models/components/authorization_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_response.rb +84 -176
- data/lib/authlete/models/components/authorization_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info.rb +1 -1
- data/lib/authlete/models/components/authorization_ticket_info.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_response.rb +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_info_response_action.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_request.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_response.rb +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_response.rbi +1 -1
- data/lib/authlete/models/components/authorization_ticket_update_response_action.rbi +1 -1
- data/lib/authlete/models/components/authz_details.rb +2 -2
- data/lib/authlete/models/components/authz_details.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_request.rb +23 -23
- data/lib/authlete/models/components/backchannel_authentication_complete_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_request_result.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_request_result.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_response.rb +30 -30
- data/lib/authlete/models/components/backchannel_authentication_complete_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_response_action.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_complete_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_request.rb +5 -5
- data/lib/authlete/models/components/backchannel_authentication_fail_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_request_reason.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_response.rb +2 -2
- data/lib/authlete/models/components/backchannel_authentication_fail_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_request.rb +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_response.rb +5 -5
- data/lib/authlete/models/components/backchannel_authentication_issue_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_request.rb +12 -12
- data/lib/authlete/models/components/backchannel_authentication_request.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_response.rb +47 -56
- data/lib/authlete/models/components/backchannel_authentication_response.rbi +1 -1
- data/lib/authlete/models/components/backchannel_authentication_response_action.rbi +1 -1
- data/lib/authlete/models/components/cimd_options.rb +15 -15
- data/lib/authlete/models/components/cimd_options.rbi +1 -1
- data/lib/authlete/models/components/claim_type.rbi +1 -1
- data/lib/authlete/models/components/client.rb +159 -308
- data/lib/authlete/models/components/client.rbi +1 -1
- data/lib/authlete/models/components/client_auth_method.rb +1 -1
- data/lib/authlete/models/components/client_auth_method.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_delete_response.rb +4 -4
- data/lib/authlete/models/components/client_authorization_delete_response.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_get_list_request.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_get_list_response.rb +6 -6
- data/lib/authlete/models/components/client_authorization_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_update_request.rb +2 -2
- data/lib/authlete/models/components/client_authorization_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_authorization_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_clientsource.rb +1 -1
- data/lib/authlete/models/components/client_clientsource.rbi +1 -1
- data/lib/authlete/models/components/client_extension.rb +9 -19
- data/lib/authlete/models/components/client_extension.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_get_response.rb +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_get_response.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_request.rb +4 -4
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_extension_requestable_scopes_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_flag_update_request.rb +1 -1
- data/lib/authlete/models/components/client_flag_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_flag_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_get_list_response.rb +4 -4
- data/lib/authlete/models/components/client_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/client_granted_scopes_delete_response.rbi +1 -1
- data/lib/authlete/models/components/client_input.rb +154 -293
- data/lib/authlete/models/components/client_input.rbi +1 -1
- data/lib/authlete/models/components/client_limited.rb +7 -7
- data/lib/authlete/models/components/client_limited.rbi +1 -1
- data/lib/authlete/models/components/client_limited_authorization.rb +57 -106
- data/lib/authlete/models/components/client_limited_authorization.rbi +1 -1
- data/lib/authlete/models/components/client_limited_authorization_clientsource.rb +1 -1
- data/lib/authlete/models/components/client_limited_authorization_clientsource.rbi +1 -1
- data/lib/authlete/models/components/client_registration_response.rb +3 -3
- data/lib/authlete/models/components/client_registration_response.rbi +1 -1
- data/lib/authlete/models/components/client_registration_response_action.rb +1 -1
- data/lib/authlete/models/components/client_registration_response_action.rbi +1 -1
- data/lib/authlete/models/components/client_registration_type.rb +1 -1
- data/lib/authlete/models/components/client_registration_type.rbi +1 -1
- data/lib/authlete/models/components/client_secret_refresh_response.rb +2 -2
- data/lib/authlete/models/components/client_secret_refresh_response.rbi +1 -1
- data/lib/authlete/models/components/client_secret_update_request.rb +1 -1
- data/lib/authlete/models/components/client_secret_update_request.rbi +1 -1
- data/lib/authlete/models/components/client_secret_update_response.rb +2 -2
- data/lib/authlete/models/components/client_secret_update_response.rbi +1 -1
- data/lib/authlete/models/components/client_type.rb +1 -1
- data/lib/authlete/models/components/client_type.rbi +1 -1
- data/lib/authlete/models/components/credential_issuance_order.rb +1 -1
- data/lib/authlete/models/components/credential_issuance_order.rbi +1 -1
- data/lib/authlete/models/components/credential_issuer_metadata.rb +5 -5
- data/lib/authlete/models/components/credential_issuer_metadata.rbi +1 -1
- data/lib/authlete/models/components/credential_offer_info.rb +12 -20
- data/lib/authlete/models/components/credential_offer_info.rbi +1 -1
- data/lib/authlete/models/components/credential_request_info.rbi +1 -1
- data/lib/authlete/models/components/delivery_mode.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_request.rb +12 -12
- data/lib/authlete/models/components/device_authorization_request.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_response.rb +39 -48
- data/lib/authlete/models/components/device_authorization_response.rbi +1 -1
- data/lib/authlete/models/components/device_authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/device_complete_request.rb +22 -22
- data/lib/authlete/models/components/device_complete_request.rbi +1 -1
- data/lib/authlete/models/components/device_complete_request_result.rb +1 -1
- data/lib/authlete/models/components/device_complete_request_result.rbi +1 -1
- data/lib/authlete/models/components/device_complete_response.rb +2 -2
- data/lib/authlete/models/components/device_complete_response.rbi +1 -1
- data/lib/authlete/models/components/device_complete_response_action.rb +1 -1
- data/lib/authlete/models/components/device_complete_response_action.rbi +1 -1
- data/lib/authlete/models/components/device_verification_request.rb +1 -1
- data/lib/authlete/models/components/device_verification_request.rbi +1 -1
- data/lib/authlete/models/components/device_verification_response.rb +32 -32
- data/lib/authlete/models/components/device_verification_response.rbi +1 -1
- data/lib/authlete/models/components/device_verification_response_action.rbi +1 -1
- data/lib/authlete/models/components/display.rb +3 -3
- data/lib/authlete/models/components/display.rbi +1 -1
- data/lib/authlete/models/components/dynamic_scope.rbi +1 -1
- data/lib/authlete/models/components/fapi_mode.rbi +1 -1
- data/lib/authlete/models/components/federation_configuration_response.rb +2 -2
- data/lib/authlete/models/components/federation_configuration_response.rbi +1 -1
- data/lib/authlete/models/components/federation_configuration_response_action.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_request.rb +2 -2
- data/lib/authlete/models/components/federation_registration_request.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_response.rb +2 -2
- data/lib/authlete/models/components/federation_registration_response.rbi +1 -1
- data/lib/authlete/models/components/federation_registration_response_action.rbi +1 -1
- data/lib/authlete/models/components/g_m_request.rb +13 -13
- data/lib/authlete/models/components/g_m_request.rbi +1 -1
- data/lib/authlete/models/components/g_m_response.rb +3 -3
- data/lib/authlete/models/components/g_m_response.rbi +1 -1
- data/lib/authlete/models/components/g_m_response_action.rbi +1 -1
- data/lib/authlete/models/components/grant.rb +2 -2
- data/lib/authlete/models/components/grant.rbi +1 -1
- data/lib/authlete/models/components/grant_management_action.rb +2 -2
- data/lib/authlete/models/components/grant_management_action.rbi +1 -1
- data/lib/authlete/models/components/grant_scope.rb +2 -2
- data/lib/authlete/models/components/grant_scope.rbi +1 -1
- data/lib/authlete/models/components/grant_type.rb +1 -1
- data/lib/authlete/models/components/grant_type.rbi +1 -1
- data/lib/authlete/models/components/hsk.rb +8 -8
- data/lib/authlete/models/components/hsk.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_request.rb +6 -6
- data/lib/authlete/models/components/hsk_create_request.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_response.rb +2 -2
- data/lib/authlete/models/components/hsk_create_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_delete_response.rb +2 -2
- data/lib/authlete/models/components/hsk_delete_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_delete_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_list_response.rb +1 -1
- data/lib/authlete/models/components/hsk_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_list_response_action.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_response.rb +2 -2
- data/lib/authlete/models/components/hsk_get_response.rbi +1 -1
- data/lib/authlete/models/components/hsk_get_response_action.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_request.rb +7 -7
- data/lib/authlete/models/components/idtoken_reissue_request.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_response.rb +3 -3
- data/lib/authlete/models/components/idtoken_reissue_response.rbi +1 -1
- data/lib/authlete/models/components/idtoken_reissue_response_action.rbi +1 -1
- data/lib/authlete/models/components/introspection_request.rb +24 -40
- data/lib/authlete/models/components/introspection_request.rbi +1 -1
- data/lib/authlete/models/components/introspection_response.rb +36 -45
- data/lib/authlete/models/components/introspection_response.rbi +1 -1
- data/lib/authlete/models/components/introspection_response_action.rbi +1 -1
- data/lib/authlete/models/components/jose_verify_request.rb +5 -5
- data/lib/authlete/models/components/jose_verify_request.rbi +1 -1
- data/lib/authlete/models/components/jose_verify_response.rb +5 -5
- data/lib/authlete/models/components/jose_verify_response.rbi +1 -1
- data/lib/authlete/models/components/jwe_alg.rb +2 -2
- data/lib/authlete/models/components/jwe_alg.rbi +1 -1
- data/lib/authlete/models/components/jwe_enc.rb +1 -1
- data/lib/authlete/models/components/jwe_enc.rbi +1 -1
- data/lib/authlete/models/components/jws_alg.rb +2 -2
- data/lib/authlete/models/components/jws_alg.rbi +1 -1
- data/lib/authlete/models/components/named_uri.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_request.rb +1 -1
- data/lib/authlete/models/components/native_sso_logout_request.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_response.rb +3 -3
- data/lib/authlete/models/components/native_sso_logout_response.rbi +1 -1
- data/lib/authlete/models/components/native_sso_logout_response_action.rb +1 -1
- data/lib/authlete/models/components/native_sso_logout_response_action.rbi +1 -1
- data/lib/authlete/models/components/native_sso_request.rb +8 -24
- data/lib/authlete/models/components/native_sso_request.rbi +1 -1
- data/lib/authlete/models/components/native_sso_response.rb +4 -4
- data/lib/authlete/models/components/native_sso_response.rbi +1 -1
- data/lib/authlete/models/components/native_sso_response_action.rb +1 -1
- data/lib/authlete/models/components/native_sso_response_action.rbi +1 -1
- data/lib/authlete/models/components/pair.rbi +1 -1
- data/lib/authlete/models/components/prompt.rb +3 -3
- data/lib/authlete/models/components/prompt.rbi +1 -1
- data/lib/authlete/models/components/property.rb +1 -1
- data/lib/authlete/models/components/property.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_request.rb +11 -11
- data/lib/authlete/models/components/pushed_authorization_request.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response.rb +6 -6
- data/lib/authlete/models/components/pushed_authorization_response.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response_action.rbi +1 -1
- data/lib/authlete/models/components/pushed_authorization_response_clientauthmethod.rb +1 -1
- data/lib/authlete/models/components/pushed_authorization_response_clientauthmethod.rbi +1 -1
- data/lib/authlete/models/components/response_type.rbi +1 -1
- data/lib/authlete/models/components/responsemode.rbi +1 -1
- data/lib/authlete/models/components/revocation_request.rb +10 -10
- data/lib/authlete/models/components/revocation_request.rbi +1 -1
- data/lib/authlete/models/components/revocation_response.rb +2 -2
- data/lib/authlete/models/components/revocation_response.rbi +1 -1
- data/lib/authlete/models/components/revocation_response_action.rbi +1 -1
- data/lib/authlete/models/components/scope.rbi +1 -1
- data/lib/authlete/models/components/security.rbi +1 -1
- data/lib/authlete/models/components/service.rb +248 -599
- data/lib/authlete/models/components/service.rbi +1 -1
- data/lib/authlete/models/components/service_get_list_response.rb +4 -4
- data/lib/authlete/models/components/service_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/service_input.rb +242 -593
- data/lib/authlete/models/components/service_input.rbi +1 -1
- data/lib/authlete/models/components/service_jwks_get_response.rbi +1 -1
- data/lib/authlete/models/components/service_profile.rbi +1 -1
- data/lib/authlete/models/components/sns_credentials.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_request.rb +22 -22
- data/lib/authlete/models/components/standard_introspection_request.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_response.rb +2 -2
- data/lib/authlete/models/components/standard_introspection_response.rbi +1 -1
- data/lib/authlete/models/components/standard_introspection_response_action.rbi +1 -1
- data/lib/authlete/models/components/subject_type.rb +2 -2
- data/lib/authlete/models/components/subject_type.rbi +1 -1
- data/lib/authlete/models/components/supportedsnse.rbi +1 -1
- data/lib/authlete/models/components/tagged_value.rbi +1 -1
- data/lib/authlete/models/components/token_create_request.rb +27 -59
- data/lib/authlete/models/components/token_create_request.rbi +1 -1
- data/lib/authlete/models/components/token_create_response.rb +18 -18
- data/lib/authlete/models/components/token_create_response.rbi +1 -1
- data/lib/authlete/models/components/token_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_fail_request.rb +3 -3
- data/lib/authlete/models/components/token_fail_request.rbi +1 -1
- data/lib/authlete/models/components/token_fail_request_reason.rb +1 -1
- data/lib/authlete/models/components/token_fail_request_reason.rbi +1 -1
- data/lib/authlete/models/components/token_fail_response.rb +2 -2
- data/lib/authlete/models/components/token_fail_response.rbi +1 -1
- data/lib/authlete/models/components/token_fail_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_get_list_response.rb +5 -5
- data/lib/authlete/models/components/token_get_list_response.rbi +1 -1
- data/lib/authlete/models/components/token_info.rb +6 -6
- data/lib/authlete/models/components/token_info.rbi +1 -1
- data/lib/authlete/models/components/token_issue_request.rb +9 -9
- data/lib/authlete/models/components/token_issue_request.rbi +1 -1
- data/lib/authlete/models/components/token_issue_response.rb +21 -21
- data/lib/authlete/models/components/token_issue_response.rbi +1 -1
- data/lib/authlete/models/components/token_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_request.rb +27 -27
- data/lib/authlete/models/components/token_request.rbi +1 -1
- data/lib/authlete/models/components/token_response.rb +49 -61
- data/lib/authlete/models/components/token_response.rbi +1 -1
- data/lib/authlete/models/components/token_response_action.rbi +1 -1
- data/lib/authlete/models/components/token_revoke_request.rb +7 -7
- data/lib/authlete/models/components/token_revoke_request.rbi +1 -1
- data/lib/authlete/models/components/token_revoke_response.rbi +1 -1
- data/lib/authlete/models/components/token_type.rb +1 -1
- data/lib/authlete/models/components/token_type.rbi +1 -1
- data/lib/authlete/models/components/token_update_request.rb +16 -16
- data/lib/authlete/models/components/token_update_request.rbi +1 -1
- data/lib/authlete/models/components/token_update_response.rb +9 -9
- data/lib/authlete/models/components/token_update_response.rbi +1 -1
- data/lib/authlete/models/components/token_update_response_action.rbi +1 -1
- data/lib/authlete/models/components/trust_anchor.rb +2 -2
- data/lib/authlete/models/components/trust_anchor.rbi +1 -1
- data/lib/authlete/models/components/user_code_charset.rb +1 -1
- data/lib/authlete/models/components/user_code_charset.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_request.rb +7 -67
- data/lib/authlete/models/components/userinfo_issue_request.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_response.rb +5 -5
- data/lib/authlete/models/components/userinfo_issue_response.rbi +1 -1
- data/lib/authlete/models/components/userinfo_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/userinfo_request.rb +15 -40
- data/lib/authlete/models/components/userinfo_request.rbi +1 -1
- data/lib/authlete/models/components/userinfo_response.rb +46 -89
- data/lib/authlete/models/components/userinfo_response.rbi +1 -1
- data/lib/authlete/models/components/userinfo_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_response.rb +3 -3
- data/lib/authlete/models/components/vci_batch_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_issue_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_batch_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_response.rb +2 -2
- data/lib/authlete/models/components/vci_batch_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_batch_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_response.rb +3 -3
- data/lib/authlete/models/components/vci_deferred_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_deferred_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_response.rb +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_deferred_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_request.rb +1 -1
- data/lib/authlete/models/components/vci_jwks_request.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_response.rb +3 -3
- data/lib/authlete/models/components/vci_jwks_response.rbi +1 -1
- data/lib/authlete/models/components/vci_jwks_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_jwks_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_request.rb +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_request.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_response.rb +3 -3
- data/lib/authlete/models/components/vci_jwtissuer_response.rbi +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_jwtissuer_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_request.rb +1 -1
- data/lib/authlete/models/components/vci_metadata_request.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_response.rb +3 -3
- data/lib/authlete/models/components/vci_metadata_response.rbi +1 -1
- data/lib/authlete/models/components/vci_metadata_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_metadata_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_request.rb +10 -79
- data/lib/authlete/models/components/vci_offer_create_request.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_response.rb +1 -1
- data/lib/authlete/models/components/vci_offer_create_response.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_create_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_request.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_response.rb +1 -1
- data/lib/authlete/models/components/vci_offer_info_response.rbi +1 -1
- data/lib/authlete/models/components/vci_offer_info_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_request.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_response.rb +4 -4
- data/lib/authlete/models/components/vci_single_issue_response.rbi +1 -1
- data/lib/authlete/models/components/vci_single_issue_response_action.rb +1 -1
- data/lib/authlete/models/components/vci_single_issue_response_action.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_request.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_response.rb +1 -1
- data/lib/authlete/models/components/vci_single_parse_response.rbi +1 -1
- data/lib/authlete/models/components/vci_single_parse_response_action.rbi +1 -1
- data/lib/authlete/models/components/verified_claims_validation_schema.rb +1 -1
- data/lib/authlete/models/components/verified_claims_validation_schema.rbi +1 -1
- data/lib/authlete/models/components.rb +0 -5
- data/lib/authlete/models/errors/apierror.rbi +2 -1
- data/lib/authlete/models/errors/result_error.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_authorization_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_standard_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_introspection_standard_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_revocation_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_revocation_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_delete_api_request.rb +1 -1
- data/lib/authlete/models/operations/auth_token_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_get_list_api_request.rb +3 -3
- data/lib/authlete/models/operations/auth_token_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_revoke_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_revoke_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_token_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_api_response.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/auth_userinfo_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/authorization_ticket_info_post_api_request.rbi +1 -1
- data/lib/authlete/models/operations/authorization_ticket_info_post_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_complete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_complete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_fail_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_fail_api_response.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/backchannel_authentication_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_request.rb +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_authorization_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_request.rb +3 -3
- data/lib/authlete/models/operations/client_authorization_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_request.rb +3 -3
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_update_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_authorization_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_authorization_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_flag_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_flag_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_get_list_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_request.rb +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_post_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_request.rb +2 -2
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_delete_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_get_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_requestbody.rb +3 -3
- data/lib/authlete/models/operations/client_registration_update_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/client_registration_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_refresh_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_update_api_request.rb +1 -1
- data/lib/authlete/models/operations/client_secret_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_secret_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_form_request.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_form_response.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/client_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_authorization_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_authorization_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_complete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_complete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/device_verification_api_request.rbi +1 -1
- data/lib/authlete/models/operations/device_verification_api_response.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_requestbody.rbi +1 -1
- data/lib/authlete/models/operations/federation_configuration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/federation_registration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/federation_registration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_request.rb +1 -1
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_request.rbi +1 -1
- data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_response.rbi +1 -1
- data/lib/authlete/models/operations/grant_m_api_request.rbi +1 -1
- data/lib/authlete/models/operations/grant_m_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/hsk_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/idtoken_reissue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/idtoken_reissue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/jose_verify_api_request.rbi +1 -1
- data/lib/authlete/models/operations/jose_verify_api_response.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_api_request.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_api_response.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_logout_api_request.rbi +1 -1
- data/lib/authlete/models/operations/native_sso_logout_api_response.rbi +1 -1
- data/lib/authlete/models/operations/pushed_auth_req_api_request.rbi +1 -1
- data/lib/authlete/models/operations/pushed_auth_req_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_configuration_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_configuration_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_delete_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_delete_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_get_list_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_get_list_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_jwks_get_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_jwks_get_api_response.rbi +1 -1
- data/lib/authlete/models/operations/service_update_api_request.rbi +1 -1
- data/lib/authlete/models/operations/service_update_api_response.rbi +1 -1
- data/lib/authlete/models/operations/updateauthorizationticket_request.rbi +1 -1
- data/lib/authlete/models/operations/updateauthorizationticket_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_batch_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_deferred_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwks_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwks_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwtissuer_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_jwtissuer_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_metadata_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_metadata_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_create_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_create_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_info_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_offer_info_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_issue_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_issue_api_response.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_parse_api_request.rbi +1 -1
- data/lib/authlete/models/operations/vci_single_parse_api_response.rbi +1 -1
- data/lib/authlete/models/operations.rb +0 -4
- data/lib/authlete/native_sso.rb +17 -69
- data/lib/authlete/pushed_authorization.rb +10 -5
- data/lib/authlete/revocation.rb +10 -98
- data/lib/authlete/sdkconfiguration.rb +5 -6
- data/lib/authlete/services.rb +47 -27
- data/lib/authlete/token_management.rb +43 -23
- data/lib/authlete/tokens.rb +24 -454
- data/lib/authlete/userinfo.rb +17 -224
- data/lib/authlete/utils/request_bodies.rb +8 -3
- data/lib/authlete/utils/security.rb +32 -11
- data/lib/authlete/utils/url.rb +11 -5
- data/lib/authlete/utils/utils.rb +33 -3
- data/lib/authlete/verifiable_credentials.rb +69 -34
- data/lib/authlete_ruby_sdk.rb +0 -1
- data/lib/crystalline/metadata_fields.rb +66 -9
- data/lib/crystalline/module.rb +3 -3
- data/lib/crystalline/types.rb +11 -3
- metadata +18 -23
- data/lib/authlete/models/components/batchkind.rb +0 -18
- data/lib/authlete/models/components/batchkind.rbi +0 -11
- data/lib/authlete/models/components/token_batch_status.rb +0 -61
- data/lib/authlete/models/components/token_batch_status.rbi +0 -27
- data/lib/authlete/models/components/token_batch_status_result.rb +0 -19
- data/lib/authlete/models/components/token_batch_status_result.rbi +0 -11
- data/lib/authlete/models/components/token_create_batch_response.rb +0 -41
- data/lib/authlete/models/components/token_create_batch_response.rbi +0 -17
- data/lib/authlete/models/components/token_create_batch_status_response.rb +0 -42
- data/lib/authlete/models/components/token_create_batch_status_response.rbi +0 -17
- data/lib/authlete/models/operations/auth_token_create_batch_api_request.rb +0 -41
- data/lib/authlete/models/operations/auth_token_create_batch_api_request.rbi +0 -17
- data/lib/authlete/models/operations/auth_token_create_batch_api_response.rb +0 -44
- data/lib/authlete/models/operations/auth_token_create_batch_api_response.rbi +0 -19
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_request.rb +0 -37
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_request.rbi +0 -15
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_response.rb +0 -44
- data/lib/authlete/models/operations/auth_token_create_batch_status_api_response.rbi +0 -19
- data/lib/authlete/token_operations.rb +0 -344
|
@@ -17,27 +17,27 @@ module Authlete
|
|
|
17
17
|
# A short message which explains the result of the API call.
|
|
18
18
|
field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
|
|
19
19
|
# The next action that the authorization server implementation should take.
|
|
20
|
-
field :action, Crystalline::Nilable.new(Models::Components::AuthorizationResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::AuthorizationResponseAction, true) } }
|
|
20
|
+
field :action, Crystalline::Nilable.new(Models::Components::AuthorizationResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::AuthorizationResponseAction, true) } }
|
|
21
21
|
|
|
22
22
|
field :client, Crystalline::Nilable.new(Models::Components::ClientLimitedAuthorization), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('client') } }
|
|
23
23
|
# The display mode which the client application requests by `display` request parameter.
|
|
24
24
|
# When the authorization request does not have `display` request parameter, `PAGE` is set as the default value.
|
|
25
|
-
#
|
|
25
|
+
#
|
|
26
26
|
# It is ensured that the value of `display` is one of the supported display modes which are specified
|
|
27
27
|
# by `supportedDisplays` configuration parameter of the service. If the display mode specified by the
|
|
28
28
|
# authorization request is not supported, an error is raised.
|
|
29
|
-
#
|
|
29
|
+
#
|
|
30
30
|
# Values for this property correspond to the values listed in
|
|
31
31
|
# "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), display".
|
|
32
|
-
#
|
|
33
|
-
field :display, Crystalline::Nilable.new(Models::Components::Display), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('display'), 'decoder': Utils.enum_from_string(Models::Components::Display, true) } }
|
|
32
|
+
#
|
|
33
|
+
field :display, Crystalline::Nilable.new(Models::Components::Display), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('display'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::Display, true) } }
|
|
34
34
|
# The maximum authentication age. This value comes from `max_age` request parameter, or `defaultMaxAge` configuration parameter
|
|
35
35
|
# of the client application when the authorization request does not contain `max_age` request parameter.
|
|
36
|
-
#
|
|
36
|
+
#
|
|
37
37
|
# See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), max_age"
|
|
38
38
|
# for `max_age` request parameter, and see "[OpenID Connect Dynamic Client Registration 1.0, 2. Client Metadata](https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata), default_max_age"
|
|
39
39
|
# for `defaultMaxAge` configuration parameter.
|
|
40
|
-
#
|
|
40
|
+
#
|
|
41
41
|
field :max_age, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('maxAge') } }
|
|
42
42
|
|
|
43
43
|
field :service, Crystalline::Nilable.new(Models::Components::Service), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('service') } }
|
|
@@ -51,225 +51,142 @@ module Authlete
|
|
|
51
51
|
# OpenID Connect defines some scope names which need to be treated specially. The table below lists the special scope names.
|
|
52
52
|
# | Name | Description |
|
|
53
53
|
# | --- | --- |
|
|
54
|
-
# | `openid` | This scope must be contained in `scope` request parameter to promote an OAuth 2.0 authorization request to an OpenID Connect request. It is described in "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-
|
|
55
|
-
# | `profile` | This scope is used to request some claims to be embedded in the ID token. The claims are `name`, `
|
|
56
|
-
# | `email` | This scope is used to request some claims to be embedded in the ID token. The claims are `email` and `
|
|
57
|
-
# | `address` | This scope is used to request `address` claim to be embedded in the ID token. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-
|
|
58
|
-
# The format of `address` claim is not a simple string. It is described in [OpenID Connect Core 1.0, 5.1.1. Address Claim](https://openid.net/specs/openid-connect-core-
|
|
59
|
-
# | `phone` | This scope is used to request some claims to be embedded in the ID token. The claims are `
|
|
60
|
-
# | `
|
|
54
|
+
# | `openid` | This scope must be contained in `scope` request parameter to promote an OAuth 2.0 authorization request to an OpenID Connect request. It is described in "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), scope". |
|
|
55
|
+
# | `profile` | This scope is used to request some claims to be embedded in the ID token. The claims are `name`, `family_name`, `given_name`, `middle_name`, `nickname`, `preferred_username`, `profile`, `picture`, `website`, `gender`, `birthdate`, `zoneinfo`, `locale`, and `updated_at`. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims). |
|
|
56
|
+
# | `email` | This scope is used to request some claims to be embedded in the ID token. The claims are `email` and `email_verified`. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims). |
|
|
57
|
+
# | `address` | This scope is used to request `address` claim to be embedded in the ID token. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims).
|
|
58
|
+
# The format of `address` claim is not a simple string. It is described in [OpenID Connect Core 1.0, 5.1.1. Address Claim](https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim). |
|
|
59
|
+
# | `phone` | This scope is used to request some claims to be embedded in the ID token. The claims are `phone_number` and `phone_number_verified`. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims). |
|
|
60
|
+
# | `offline_access` | The following is an excerpt about this scope from [OpenID Connect Core 1.0, 11. Offline Access](https://openid.net/specs/openid-connect-core-1_0.html#OfflineAccess).
|
|
61
61
|
# > This scope value requests that an OAuth 2.0 Refresh Token be issued that can be used to obtain an Access Token that grants access to the end-user's userinfo endpoint even when the end-user is not present (not logged in).
|
|
62
62
|
# |
|
|
63
|
-
# Note that, if `
|
|
64
|
-
# when scope request parameter contains `
|
|
65
|
-
# [OpenID Connect Core 1.0, 11. Offline Access](https://openid.net/specs/openid-connect-core-
|
|
66
|
-
#
|
|
63
|
+
# Note that, if `response_type` request parameter does not contain code, `offline_acccess` scope is removed from this list even
|
|
64
|
+
# when scope request parameter contains `offline_access`. This behavior is a requirement written in
|
|
65
|
+
# [OpenID Connect Core 1.0, 11. Offline Access](https://openid.net/specs/openid-connect-core-1_0.html#OfflineAccess).
|
|
66
|
+
#
|
|
67
67
|
field :scopes, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Scope)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('scopes') } }
|
|
68
68
|
# The locales that the client application presented as candidates to be used for UI.
|
|
69
69
|
# This value comes from `ui_locales` request parameter. The format of `ui_locales` is a space-separated list of language tag values
|
|
70
70
|
# defined in [RFC5646](https://datatracker.ietf.org/doc/html/rfc5646).
|
|
71
71
|
# See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), ui_locales" for details.
|
|
72
|
-
#
|
|
72
|
+
#
|
|
73
73
|
# It is ensured that locales listed by this parameters are contained in the list of supported UI locales which are specified
|
|
74
74
|
# by `supportedUiLocales` configuration parameter of the service. Unsupported UI locales in the authorization request do not
|
|
75
75
|
# cause an error and are just ignored.
|
|
76
|
-
#
|
|
76
|
+
#
|
|
77
77
|
field :ui_locales, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('uiLocales') } }
|
|
78
78
|
# End-user's preferred languages and scripts for claims. This value comes from `claims_locales` request parameter.
|
|
79
79
|
# The format of `claims_locales` is a space-separated list of language tag values defined in [RFC5646](https://datatracker.ietf.org/doc/html/rfc5646).
|
|
80
80
|
# See "[OpenID Connect Core 1.0, 5.2. Claims Languages and Scripts](https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts)" for details.
|
|
81
|
-
#
|
|
81
|
+
#
|
|
82
82
|
# It is ensured that locales listed by this parameters are contained in the list of supported claim locales
|
|
83
83
|
# which are specified by `supportedClaimsLocales` configuration parameter of the service.
|
|
84
84
|
# Unsupported claim locales in the authorization request do not cause an error and are just ignored.
|
|
85
|
-
#
|
|
85
|
+
#
|
|
86
86
|
field :claims_locales, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('claimsLocales') } }
|
|
87
87
|
# The list of claims that the client application requests to be embedded in the ID token.
|
|
88
88
|
# The value comes from (1) `id_token` in `claims` request parameter [1] and/or (2) special scopes (`profile`, `email`, `address` and `phone`)
|
|
89
89
|
# which are expanded to claims.
|
|
90
|
-
#
|
|
90
|
+
#
|
|
91
91
|
# See [OpenID Connect Core 1.0, 5.5. Requesting Claims using the "claims" Request Parameter](https://openid.net/specs/openid-connect-core-1_0.html#ClaimsParameter)
|
|
92
92
|
# for `claims` request parameter, and see [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims)
|
|
93
93
|
# for the special scopes.
|
|
94
|
-
#
|
|
94
|
+
#
|
|
95
95
|
field :claims, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('claims') } }
|
|
96
96
|
# This boolean value indicates whether the authentication of the end-user must be one of the ACRs (Authentication Context Class References) listed in `acrs` parameter.
|
|
97
97
|
# This parameter becomes `true` only when (1) the authorization request contains `claims` request parameter and (2) `acr` claim is in it, and (3) `essential` property of
|
|
98
98
|
# the `acr` claim is `true`. See [OpenID Connect Core 1.0, 5.5.1.1. Requesting the "acr" Claim](https://openid.net/specs/openid-connect-core-1_0.html#acrSemantics) for details.
|
|
99
|
-
#
|
|
99
|
+
#
|
|
100
100
|
field :acr_essential, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('acrEssential') } }
|
|
101
101
|
# `true` if the value of the `client_id` request parameter included in the authorization request is the client ID alias.
|
|
102
102
|
# `false` if the value is the original numeric client ID.
|
|
103
|
-
#
|
|
103
|
+
#
|
|
104
104
|
field :client_id_alias_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientIdAliasUsed') } }
|
|
105
105
|
# The list of ACRs (Authentication Context Class References) one of which the client application requests to be satisfied for the authentication of the end-user.
|
|
106
106
|
# This value comes from `acr_values` request parameter or `defaultAcrs` configuration parameter of the client application.
|
|
107
|
-
#
|
|
107
|
+
#
|
|
108
108
|
# See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), acr_values" for `acr_values`
|
|
109
109
|
# request parameter, and see "[OpenID Connect Dynamic Client Registration 1.0, 2. Client Metadata](https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata),
|
|
110
110
|
# default_acr_values" for `defaultAcrs` configuration parameter.
|
|
111
|
-
#
|
|
111
|
+
#
|
|
112
112
|
field :acrs, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('acrs') } }
|
|
113
113
|
# The subject (= unique user ID managed by the authorization server implementation) that the client application expects to grant authorization.
|
|
114
114
|
# The value comes from `sub` claim in `claims` request parameter.
|
|
115
|
-
#
|
|
115
|
+
#
|
|
116
116
|
field :subject, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('subject') } }
|
|
117
117
|
# A hint about the login identifier of the end-user. The value comes from `login_hint` request parameter.
|
|
118
118
|
field :login_hint, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('loginHint') } }
|
|
119
119
|
# The list of values of prompt request parameter. See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), prompt" for prompt request parameter.
|
|
120
120
|
field :prompts, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Prompt)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('prompts') } }
|
|
121
121
|
# The prompt that the UI displayed to the end-user must satisfy as the minimum level. This value comes from `prompt` request parameter.
|
|
122
|
-
#
|
|
122
|
+
#
|
|
123
123
|
# When the authorization request does not contain `prompt` request parameter, `CONSENT` is used as the default value.
|
|
124
|
-
#
|
|
124
|
+
#
|
|
125
125
|
# See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), prompt" for `prompt` request parameter.
|
|
126
|
-
#
|
|
127
|
-
field :lowest_prompt, Crystalline::Nilable.new(Models::Components::Prompt), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('lowestPrompt'), 'decoder': Utils.enum_from_string(Models::Components::Prompt, true) } }
|
|
126
|
+
#
|
|
127
|
+
field :lowest_prompt, Crystalline::Nilable.new(Models::Components::Prompt), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('lowestPrompt'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::Prompt, true) } }
|
|
128
128
|
# The payload part of the request object. The value of this proprty is `null` if the authorization request does not include a request object.
|
|
129
|
-
#
|
|
129
|
+
#
|
|
130
130
|
field :request_object_payload, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requestObjectPayload') } }
|
|
131
131
|
# The value of the `id_token` property in the claims request parameter or in the claims property in a request object.
|
|
132
|
-
#
|
|
133
|
-
# A client application may request certain claims be embedded in an ID token or in a response from the userInfo endpoint.
|
|
134
|
-
# There are several ways. Including the `claims` request parameter and including the `claims` property in a request object are such examples.
|
|
135
|
-
# In both the cases, the value of the `claims` parameter/property is JSON. Its format is described in [5.5. Requesting Claims using the "claims"
|
|
136
|
-
# Request Parameter](https://openid.net/specs/openid-connect-core-1_0.html#ClaimsParameter).
|
|
137
|
-
#
|
|
138
|
-
# The following is an excerpt from the specification.
|
|
139
|
-
# You can find `userinfo` and `id_token` are top-level properties.
|
|
140
|
-
#
|
|
141
|
-
# ```json
|
|
142
|
-
# {
|
|
143
|
-
# "userinfo":
|
|
144
|
-
# {
|
|
145
|
-
# "given_name": { "essential": true },
|
|
146
|
-
# "nickname": null,
|
|
147
|
-
# "email": { "essential": true },
|
|
148
|
-
# "email_verified": { "essential": true },
|
|
149
|
-
# "picture": null,
|
|
150
|
-
# "http://example.info/claims/groups": null
|
|
151
|
-
# },
|
|
152
|
-
# "id_token":
|
|
153
|
-
# {
|
|
154
|
-
# "auth_time": { "essential": true },
|
|
155
|
-
# "acr": { "values": [ "urn:mace:incommon:iap:silver" ] }
|
|
156
|
-
# }
|
|
157
|
-
# }
|
|
158
|
-
# ```
|
|
159
|
-
#
|
|
160
|
-
# This value of this property is the value of the `id_token` property in JSON format.
|
|
161
|
-
# For example, if the JSON above is included in an authorization request, this property holds JSON equivalent to the following.
|
|
162
|
-
#
|
|
163
|
-
# ```json
|
|
164
|
-
# {
|
|
165
|
-
# "auth_time": { "essential": true },
|
|
166
|
-
# "acr": { "values": [ "urn:mace:incommon:iap:silver" ] }
|
|
167
|
-
# }
|
|
168
|
-
# ```
|
|
169
|
-
#
|
|
170
|
-
# Note that if a request object is given and it contains the `claims` property and if the `claims` request parameter is also given,
|
|
171
|
-
# this property holds the former value.
|
|
172
|
-
#
|
|
132
|
+
#
|
|
173
133
|
field :id_token_claims, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('idTokenClaims') } }
|
|
174
134
|
# The value of the `userinfo` property in the `claims` request parameter or in the `claims` property in a request object.
|
|
175
|
-
#
|
|
176
|
-
# A client application may request certain claims be embedded in an ID token or in a response from the userInfo endpoint.
|
|
177
|
-
# There are several ways. Including the `claims` request parameter and including the `claims` property in a request object are such examples.
|
|
178
|
-
# In both the cases, the value of the `claims` parameter/property is JSON. Its format is described in [5.5. Requesting Claims using the "claims"
|
|
179
|
-
# Request Parameter](https://openid.net/specs/openid-connect-core-1_0.html#ClaimsParameter).
|
|
180
|
-
#
|
|
181
|
-
# The following is an excerpt from the specification. You can find `userinfo` and `id_token` are top-level properties.
|
|
182
|
-
#
|
|
183
|
-
# ```json
|
|
184
|
-
# {
|
|
185
|
-
# "userinfo":
|
|
186
|
-
# {
|
|
187
|
-
# "given_name": { "essential": true },
|
|
188
|
-
# "nickname": null,
|
|
189
|
-
# "email": { "essential": true },
|
|
190
|
-
# "email_verified": { "essential": true },
|
|
191
|
-
# "picture": null,
|
|
192
|
-
# "http://example.info/claims/groups": null
|
|
193
|
-
# },
|
|
194
|
-
# "id_token":
|
|
195
|
-
# {
|
|
196
|
-
# "auth_time": { "essential": true },
|
|
197
|
-
# "acr": { "values": [ "urn:mace:incommon:iap:silver" ] }
|
|
198
|
-
# }
|
|
199
|
-
# }
|
|
200
|
-
# ````
|
|
201
|
-
#
|
|
202
|
-
# The value of this property is the value of the `userinfo` property in JSON format.
|
|
203
|
-
# For example, if the JSON above is included in an authorization request, this property holds JSON equivalent to the following.
|
|
204
|
-
#
|
|
205
|
-
# ```json
|
|
206
|
-
# {
|
|
207
|
-
# "given_name": { "essential": true },
|
|
208
|
-
# "nickname": null,
|
|
209
|
-
# "email": { "essential": true },
|
|
210
|
-
# "email_verified": { "essential": true },
|
|
211
|
-
# "picture": null,
|
|
212
|
-
# "http://example.info/claims/groups": null
|
|
213
|
-
# }
|
|
214
|
-
# ```
|
|
215
|
-
#
|
|
216
|
-
# Note that if a request object is given and it contains the `claims` property and if the `claims` request parameter is also given,
|
|
217
|
-
# the value of this property holds the former value.
|
|
218
|
-
#
|
|
135
|
+
#
|
|
219
136
|
field :user_info_claims, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('userInfoClaims') } }
|
|
220
137
|
# The resources specified by the `resource` request parameters or by the `resource` property in the request object.
|
|
221
138
|
# If both are given, the values in the request object should be set. See "Resource Indicators for OAuth 2.0" for details.
|
|
222
|
-
#
|
|
139
|
+
#
|
|
223
140
|
field :resources, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resources') } }
|
|
224
141
|
# The authorization details. This represents the value of the `authorization_details`
|
|
225
142
|
# request parameter in the preceding device authorization request which is defined in
|
|
226
143
|
# "OAuth 2.0 Rich Authorization Requests".
|
|
227
|
-
#
|
|
144
|
+
#
|
|
228
145
|
field :authorization_details, Crystalline::Nilable.new(Models::Components::AuthzDetails), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('authorizationDetails') } }
|
|
229
146
|
# The `purpose` request parameter is defined in [9. Transaction-specific Purpose](https://openid.net/specs/openid-connect-4-identity-assurance-1_0.html#name-transaction-specific-purpos)
|
|
230
147
|
# of [OpenID Connect for Identity Assurance 1.0](https://openid.net/specs/openid-connect-4-identity-assurance-1_0.html) as follows:
|
|
231
|
-
#
|
|
148
|
+
#
|
|
232
149
|
# > purpose: OPTIONAL. String describing the purpose for obtaining certain user data from the OP. The purpose MUST NOT be shorter than 3 characters and MUST NOT be longer than 300 characters.
|
|
233
150
|
# If these rules are violated, the authentication request MUST fail and the OP returns an error invalid_request to the RP.
|
|
234
|
-
#
|
|
151
|
+
#
|
|
235
152
|
field :purpose, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('purpose') } }
|
|
236
153
|
# The content that the authorization server implementation is to return to the client application.
|
|
237
154
|
# Its format varies depending on the value of `action` parameter.
|
|
238
|
-
#
|
|
155
|
+
#
|
|
239
156
|
field :response_content, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('responseContent') } }
|
|
240
157
|
# A ticket issued by Authlete to the service implementation. This is needed when the service
|
|
241
158
|
# implementation calls either `/auth/authorization/fail` API or `/auth/authorization/issue`
|
|
242
159
|
# API.
|
|
243
|
-
#
|
|
160
|
+
#
|
|
244
161
|
field :ticket, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('ticket') } }
|
|
245
162
|
# The dynamic scopes which the client application requested by the scope request parameter.
|
|
246
|
-
#
|
|
163
|
+
#
|
|
247
164
|
field :dynamic_scopes, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::DynamicScope)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('dynamicScopes') } }
|
|
248
165
|
# The grant management action of the device authorization request.
|
|
249
|
-
#
|
|
166
|
+
#
|
|
250
167
|
# The `grant_management_action` request parameter is defined in
|
|
251
168
|
# [Grant Management for OAuth 2.0](https://openid.net/specs/fapi-grant-management.html).
|
|
252
|
-
#
|
|
253
|
-
field :gm_action, Crystalline::Nilable.new(Models::Components::GrantManagementAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('gmAction'), 'decoder': Utils.enum_from_string(Models::Components::GrantManagementAction, true) } }
|
|
169
|
+
#
|
|
170
|
+
field :gm_action, Crystalline::Nilable.new(Models::Components::GrantManagementAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('gmAction'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::GrantManagementAction, true) } }
|
|
254
171
|
# the value of the `grant_id` request parameter of the device authorization request.
|
|
255
|
-
#
|
|
172
|
+
#
|
|
256
173
|
# The `grant_id` request parameter is defined in
|
|
257
174
|
# [Grant Management for OAuth 2.0](https://openid.net/specs/fapi-grant-management.html)
|
|
258
175
|
# , which is supported by Authlete 2.3 and newer versions.
|
|
259
|
-
#
|
|
176
|
+
#
|
|
260
177
|
field :grant_id, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grantId') } }
|
|
261
178
|
|
|
262
179
|
field :grant, Crystalline::Nilable.new(Models::Components::Grant), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grant') } }
|
|
263
180
|
# The subject identifying the user who has given the grant identified
|
|
264
|
-
# by the `
|
|
181
|
+
# by the `grant_id` request parameter of the device authorization
|
|
265
182
|
# request.
|
|
266
183
|
# Authlete 2.3 and newer versions support [Grant Management
|
|
267
|
-
# for OAuth 2.0](https://openid.net/specs/fapi-grant-management.html). An authorization request may contain a `
|
|
184
|
+
# for OAuth 2.0](https://openid.net/specs/fapi-grant-management.html). An authorization request may contain a `grant_id`
|
|
268
185
|
# request parameter which is defined in the specification. If the value of
|
|
269
|
-
# the request parameter is valid,
|
|
186
|
+
# the request parameter is valid, {@link #getGrantSubject()} will return
|
|
270
187
|
# the subject of the user who has given the grant to the client application.
|
|
271
188
|
# Authorization server implementations may use the value returned from
|
|
272
|
-
#
|
|
189
|
+
# {@link #getGrantSubject()} in order to determine the user to authenticate.
|
|
273
190
|
# The user your system will authenticate during the authorization process
|
|
274
191
|
# (or has already authenticated) may be different from the user of the
|
|
275
192
|
# grant. The first implementer's draft of "Grant Management for OAuth 2.0"
|
|
@@ -277,49 +194,49 @@ module Authlete
|
|
|
277
194
|
# left to implementations. Authlete will not perform the grant management
|
|
278
195
|
# action when the `subject` passed to Authlete does not match the
|
|
279
196
|
# user of the grant.
|
|
280
|
-
#
|
|
197
|
+
#
|
|
281
198
|
field :grant_subject, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grantSubject') } }
|
|
282
199
|
# Names of claims that are requested indirectly by *"transformed
|
|
283
200
|
# claims"*.
|
|
284
201
|
# A client application can request *"transformed claims"* by adding
|
|
285
202
|
# names of transformed claims in the `claims` request parameter.
|
|
286
203
|
# The following is an example of the `claims` request parameter
|
|
287
|
-
# that requests a predefined transformed claim named `
|
|
288
|
-
# and a transformed claim named `
|
|
204
|
+
# that requests a predefined transformed claim named `18_or_over`
|
|
205
|
+
# and a transformed claim named `nationality_usa` to be embedded
|
|
289
206
|
# in the response from the userinfo endpoint.
|
|
290
207
|
# ```json
|
|
291
|
-
#
|
|
292
|
-
# "
|
|
293
|
-
# "
|
|
208
|
+
# {
|
|
209
|
+
# "transformed_claims": {
|
|
210
|
+
# "nationality_usa": {
|
|
294
211
|
# "claim": "nationalities",
|
|
295
212
|
# "fn": [
|
|
296
213
|
# [ "eq", "USA" ],
|
|
297
214
|
# "any"
|
|
298
215
|
# ]
|
|
299
|
-
#
|
|
300
|
-
#
|
|
301
|
-
# "userinfo":
|
|
302
|
-
# "::
|
|
303
|
-
# ":
|
|
304
|
-
#
|
|
305
|
-
#
|
|
216
|
+
# }
|
|
217
|
+
# },
|
|
218
|
+
# "userinfo": {
|
|
219
|
+
# "::18_or_over": null,
|
|
220
|
+
# ":nationality_usa": null
|
|
221
|
+
# }
|
|
222
|
+
# }
|
|
306
223
|
# ```
|
|
307
|
-
# The example above assumes that a transformed claim named `
|
|
224
|
+
# The example above assumes that a transformed claim named `18_or_over`
|
|
308
225
|
# is predefined by the authorization server like below.
|
|
309
226
|
# ```json
|
|
310
|
-
#
|
|
311
|
-
# "
|
|
227
|
+
# {
|
|
228
|
+
# "18_or_over": {
|
|
312
229
|
# "claim": "birthdate",
|
|
313
230
|
# "fn": [
|
|
314
|
-
# "
|
|
231
|
+
# "years_ago",
|
|
315
232
|
# [ "gte", 18 ]
|
|
316
233
|
# ]
|
|
317
|
-
#
|
|
318
|
-
#
|
|
234
|
+
# }
|
|
235
|
+
# }
|
|
319
236
|
# ```
|
|
320
237
|
# In the example, the `nationalities` claim is requested indirectly
|
|
321
|
-
# by the `
|
|
322
|
-
# `birthdate` claim is requested indirectly by the `
|
|
238
|
+
# by the `nationality_usa` transformed claim. Likewise, the
|
|
239
|
+
# `birthdate` claim is requested indirectly by the `18_or_over`
|
|
323
240
|
# transformed claim.
|
|
324
241
|
# When the `claims` request parameter of an authorization request is
|
|
325
242
|
# like the example above, this `requestedClaimsForTx` property will
|
|
@@ -332,54 +249,45 @@ module Authlete
|
|
|
332
249
|
# request parameter when it calls the `/api/auth/userinfo/issue` API. The following
|
|
333
250
|
# is an example of the value of the `claimsForTx` request parameter.
|
|
334
251
|
# ```json
|
|
335
|
-
#
|
|
252
|
+
# {
|
|
336
253
|
# "birthdate": "1970-01-23",
|
|
337
254
|
# "nationalities": [ "DEU", "USA" ]
|
|
338
|
-
#
|
|
255
|
+
# }
|
|
339
256
|
# ```
|
|
340
|
-
#
|
|
257
|
+
#
|
|
341
258
|
field :requested_claims_for_tx, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requestedClaimsForTx') } }
|
|
342
259
|
# Names of verified claims that will be referenced when transformed claims are computed.
|
|
343
|
-
#
|
|
260
|
+
#
|
|
344
261
|
field :requested_verified_claims_for_tx, Crystalline::Nilable.new(Crystalline::Array.new(Crystalline::Array.new(::String))), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requestedVerifiedClaimsForTx') } }
|
|
345
262
|
# the value of the `transformed_claims` property in the `claims` request
|
|
346
263
|
# parameter of an authorization request or in the `claims` property in a
|
|
347
264
|
# request object.
|
|
348
|
-
#
|
|
265
|
+
#
|
|
349
266
|
field :transformed_claims, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('transformedClaims') } }
|
|
350
267
|
# Flag which indicates whether the entity ID of the client was used when the request for the access token was made.
|
|
351
|
-
#
|
|
268
|
+
#
|
|
352
269
|
field :client_entity_id_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientEntityIdUsed') } }
|
|
353
270
|
# The list of claims that the client application requests to be
|
|
354
271
|
# embedded in userinfo responses. The value comes from the `"scope"`
|
|
355
272
|
# and `"claims"` request parameters of the original authorization
|
|
356
273
|
# request.
|
|
357
|
-
#
|
|
274
|
+
#
|
|
358
275
|
field :claims_at_user_info, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('claimsAtUserInfo') } }
|
|
359
276
|
|
|
360
277
|
field :credential_offer_info, Crystalline::Nilable.new(Models::Components::CredentialOfferInfo), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('credentialOfferInfo') } }
|
|
361
278
|
# The information about the **issuable credentials** that can
|
|
362
279
|
# be obtained by presenting the access token that will be issued as a
|
|
363
280
|
# result of the authorization request.
|
|
364
|
-
#
|
|
281
|
+
#
|
|
365
282
|
field :issuable_credentials, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('issuableCredentials') } }
|
|
366
283
|
# Flag which indicates whether [Native SSO](https://openid.net/specs/openid-connect-native-sso-1_0.html)
|
|
367
284
|
# is requested. This property should be set to `true` when all the following conditions are satisfied:
|
|
368
|
-
#
|
|
369
|
-
# - The service supports Native SSO (see `nativeSsoSupported` property of Service).
|
|
370
|
-
# - The service supports the `openid` and `device_sso` scopes.
|
|
371
|
-
# - The client is allowed to request the `openid` and `device_sso` scopes.
|
|
372
|
-
# - The authorization request includes the `openid` and `device_sso` scopes.
|
|
373
|
-
# - The authorization request's `response_type` includes `code`.
|
|
374
|
-
#
|
|
375
|
-
# NOTE: If this property is set to `true`, the `sessionId` request parameter must be provided
|
|
376
|
-
# to the `/auth/authorization/issue` API.
|
|
377
|
-
#
|
|
285
|
+
#
|
|
378
286
|
field :native_sso_requested, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('nativeSsoRequested') } }
|
|
379
287
|
# Flag indicating whether a metadata document was used to resolve client metadata for this request.
|
|
380
|
-
#
|
|
288
|
+
#
|
|
381
289
|
# When `true`, the client metadata was retrieved via the CIMD mechanism rather than from the Authlete database.
|
|
382
|
-
#
|
|
290
|
+
#
|
|
383
291
|
field :metadata_document_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('metadataDocumentUsed') } }
|
|
384
292
|
|
|
385
293
|
sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::AuthorizationResponseAction), client: T.nilable(Models::Components::ClientLimitedAuthorization), display: T.nilable(Models::Components::Display), max_age: T.nilable(::Integer), service: T.nilable(Models::Components::Service), scopes: T.nilable(T::Array[Models::Components::Scope]), ui_locales: T.nilable(T::Array[::String]), claims_locales: T.nilable(T::Array[::String]), claims: T.nilable(T::Array[::String]), acr_essential: T.nilable(T::Boolean), client_id_alias_used: T.nilable(T::Boolean), acrs: T.nilable(T::Array[::String]), subject: T.nilable(::String), login_hint: T.nilable(::String), prompts: T.nilable(T::Array[Models::Components::Prompt]), lowest_prompt: T.nilable(Models::Components::Prompt), request_object_payload: T.nilable(::String), id_token_claims: T.nilable(::String), user_info_claims: T.nilable(::String), resources: T.nilable(T::Array[::String]), authorization_details: T.nilable(Models::Components::AuthzDetails), purpose: T.nilable(::String), response_content: T.nilable(::String), ticket: T.nilable(::String), dynamic_scopes: T.nilable(T::Array[Models::Components::DynamicScope]), gm_action: T.nilable(Models::Components::GrantManagementAction), grant_id: T.nilable(::String), grant: T.nilable(Models::Components::Grant), grant_subject: T.nilable(::String), requested_claims_for_tx: T.nilable(T::Array[::String]), requested_verified_claims_for_tx: T.nilable(T::Array[T::Array[::String]]), transformed_claims: T.nilable(::String), client_entity_id_used: T.nilable(T::Boolean), claims_at_user_info: T.nilable(T::Array[::String]), credential_offer_info: T.nilable(Models::Components::CredentialOfferInfo), issuable_credentials: T.nilable(::String), native_sso_requested: T.nilable(T::Boolean), metadata_document_used: T.nilable(T::Boolean)).void }
|
|
@@ -13,7 +13,7 @@ module Authlete
|
|
|
13
13
|
include Crystalline::MetadataFields
|
|
14
14
|
|
|
15
15
|
# The arbitrary text attached to the ticket.
|
|
16
|
-
#
|
|
16
|
+
#
|
|
17
17
|
field :context, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('context') } }
|
|
18
18
|
|
|
19
19
|
sig { params(context: T.nilable(::String)).void }
|
|
@@ -15,7 +15,7 @@ module Authlete
|
|
|
15
15
|
|
|
16
16
|
field :info, Crystalline::Nilable.new(Models::Components::AuthorizationTicketInfo), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('info') } }
|
|
17
17
|
# The result of the `/auth/authorization/ticket/info` API call.
|
|
18
|
-
field :action, Crystalline::Nilable.new(Models::Components::AuthorizationTicketInfoResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::AuthorizationTicketInfoResponseAction, true) } }
|
|
18
|
+
field :action, Crystalline::Nilable.new(Models::Components::AuthorizationTicketInfoResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::AuthorizationTicketInfoResponseAction, true) } }
|
|
19
19
|
# The code which represents the result of the API call.
|
|
20
20
|
field :result_code, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultCode') } }
|
|
21
21
|
# A short message which explains the result of the API call.
|
|
@@ -15,7 +15,7 @@ module Authlete
|
|
|
15
15
|
|
|
16
16
|
field :info, Crystalline::Nilable.new(Models::Components::AuthorizationTicketInfo), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('info') } }
|
|
17
17
|
# The result of the /auth/authorization/ticket/info API call.
|
|
18
|
-
field :action, Crystalline::Nilable.new(Models::Components::AuthorizationTicketUpdateResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::AuthorizationTicketUpdateResponseAction, true) } }
|
|
18
|
+
field :action, Crystalline::Nilable.new(Models::Components::AuthorizationTicketUpdateResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::AuthorizationTicketUpdateResponseAction, true) } }
|
|
19
19
|
# The code which represents the result of the API call.
|
|
20
20
|
field :result_code, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultCode') } }
|
|
21
21
|
# A short message which explains the result of the API call.
|
|
@@ -10,13 +10,13 @@ module Authlete
|
|
|
10
10
|
# The authorization details. This represents the value of the `authorization_details`
|
|
11
11
|
# request parameter in the preceding device authorization request which is defined in
|
|
12
12
|
# "OAuth 2.0 Rich Authorization Requests".
|
|
13
|
-
#
|
|
13
|
+
#
|
|
14
14
|
class AuthzDetails
|
|
15
15
|
extend T::Sig
|
|
16
16
|
include Crystalline::MetadataFields
|
|
17
17
|
|
|
18
18
|
# Elements of this authorization details.
|
|
19
|
-
#
|
|
19
|
+
#
|
|
20
20
|
field :elements, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::AuthorizationDetailsElement)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('elements') } }
|
|
21
21
|
|
|
22
22
|
sig { params(elements: T.nilable(T::Array[Models::Components::AuthorizationDetailsElement])).void }
|