authlete_ruby_sdk 0.0.3.pre.beta → 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (617) hide show
  1. checksums.yaml +4 -4
  2. data/lib/authlete/authorization.rb +24 -563
  3. data/lib/authlete/authorization_management.rb +15 -7
  4. data/lib/authlete/ciba.rb +35 -414
  5. data/lib/authlete/client.rb +3 -3
  6. data/lib/authlete/client_management.rb +133 -87
  7. data/lib/authlete/clients.rb +43 -23
  8. data/lib/authlete/device_flow.rb +24 -147
  9. data/lib/authlete/dynamic_client_registration.rb +31 -283
  10. data/lib/authlete/federation.rb +17 -66
  11. data/lib/authlete/grant_management.rb +10 -5
  12. data/lib/authlete/hardware_security_keys.rb +24 -10
  13. data/lib/authlete/introspection.rb +17 -195
  14. data/lib/authlete/jose_object.rb +10 -5
  15. data/lib/authlete/jwk_set_endpoint.rb +12 -7
  16. data/lib/authlete/lifecycle.rb +10 -5
  17. data/lib/authlete/models/components/access_token.rb +9 -9
  18. data/lib/authlete/models/components/access_token.rbi +1 -1
  19. data/lib/authlete/models/components/application_type.rb +1 -1
  20. data/lib/authlete/models/components/application_type.rbi +1 -1
  21. data/lib/authlete/models/components/attachment_type.rb +1 -1
  22. data/lib/authlete/models/components/attachment_type.rbi +1 -1
  23. data/lib/authlete/models/components/authorization_details_element.rb +16 -16
  24. data/lib/authlete/models/components/authorization_details_element.rbi +1 -1
  25. data/lib/authlete/models/components/authorization_fail_request.rb +4 -4
  26. data/lib/authlete/models/components/authorization_fail_request.rbi +1 -1
  27. data/lib/authlete/models/components/authorization_fail_request_reason.rb +1 -1
  28. data/lib/authlete/models/components/authorization_fail_request_reason.rbi +1 -1
  29. data/lib/authlete/models/components/authorization_fail_response.rb +2 -2
  30. data/lib/authlete/models/components/authorization_fail_response.rbi +1 -1
  31. data/lib/authlete/models/components/authorization_fail_response_action.rbi +1 -1
  32. data/lib/authlete/models/components/authorization_issue_request.rb +19 -83
  33. data/lib/authlete/models/components/authorization_issue_request.rbi +1 -1
  34. data/lib/authlete/models/components/authorization_issue_response.rb +8 -8
  35. data/lib/authlete/models/components/authorization_issue_response.rbi +1 -1
  36. data/lib/authlete/models/components/authorization_issue_response_action.rbi +1 -1
  37. data/lib/authlete/models/components/authorization_request.rb +7 -7
  38. data/lib/authlete/models/components/authorization_request.rbi +1 -1
  39. data/lib/authlete/models/components/authorization_response.rb +84 -176
  40. data/lib/authlete/models/components/authorization_response.rbi +1 -1
  41. data/lib/authlete/models/components/authorization_response_action.rbi +1 -1
  42. data/lib/authlete/models/components/authorization_ticket_info.rb +1 -1
  43. data/lib/authlete/models/components/authorization_ticket_info.rbi +1 -1
  44. data/lib/authlete/models/components/authorization_ticket_info_request.rbi +1 -1
  45. data/lib/authlete/models/components/authorization_ticket_info_response.rb +1 -1
  46. data/lib/authlete/models/components/authorization_ticket_info_response.rbi +1 -1
  47. data/lib/authlete/models/components/authorization_ticket_info_response_action.rbi +1 -1
  48. data/lib/authlete/models/components/authorization_ticket_update_request.rbi +1 -1
  49. data/lib/authlete/models/components/authorization_ticket_update_response.rb +1 -1
  50. data/lib/authlete/models/components/authorization_ticket_update_response.rbi +1 -1
  51. data/lib/authlete/models/components/authorization_ticket_update_response_action.rbi +1 -1
  52. data/lib/authlete/models/components/authz_details.rb +2 -2
  53. data/lib/authlete/models/components/authz_details.rbi +1 -1
  54. data/lib/authlete/models/components/backchannel_authentication_complete_request.rb +23 -23
  55. data/lib/authlete/models/components/backchannel_authentication_complete_request.rbi +1 -1
  56. data/lib/authlete/models/components/backchannel_authentication_complete_request_result.rb +1 -1
  57. data/lib/authlete/models/components/backchannel_authentication_complete_request_result.rbi +1 -1
  58. data/lib/authlete/models/components/backchannel_authentication_complete_response.rb +30 -30
  59. data/lib/authlete/models/components/backchannel_authentication_complete_response.rbi +1 -1
  60. data/lib/authlete/models/components/backchannel_authentication_complete_response_action.rb +1 -1
  61. data/lib/authlete/models/components/backchannel_authentication_complete_response_action.rbi +1 -1
  62. data/lib/authlete/models/components/backchannel_authentication_fail_request.rb +5 -5
  63. data/lib/authlete/models/components/backchannel_authentication_fail_request.rbi +1 -1
  64. data/lib/authlete/models/components/backchannel_authentication_fail_request_reason.rb +1 -1
  65. data/lib/authlete/models/components/backchannel_authentication_fail_request_reason.rbi +1 -1
  66. data/lib/authlete/models/components/backchannel_authentication_fail_response.rb +2 -2
  67. data/lib/authlete/models/components/backchannel_authentication_fail_response.rbi +1 -1
  68. data/lib/authlete/models/components/backchannel_authentication_fail_response_action.rbi +1 -1
  69. data/lib/authlete/models/components/backchannel_authentication_issue_request.rb +1 -1
  70. data/lib/authlete/models/components/backchannel_authentication_issue_request.rbi +1 -1
  71. data/lib/authlete/models/components/backchannel_authentication_issue_response.rb +5 -5
  72. data/lib/authlete/models/components/backchannel_authentication_issue_response.rbi +1 -1
  73. data/lib/authlete/models/components/backchannel_authentication_issue_response_action.rbi +1 -1
  74. data/lib/authlete/models/components/backchannel_authentication_request.rb +12 -12
  75. data/lib/authlete/models/components/backchannel_authentication_request.rbi +1 -1
  76. data/lib/authlete/models/components/backchannel_authentication_response.rb +47 -56
  77. data/lib/authlete/models/components/backchannel_authentication_response.rbi +1 -1
  78. data/lib/authlete/models/components/backchannel_authentication_response_action.rbi +1 -1
  79. data/lib/authlete/models/components/cimd_options.rb +15 -15
  80. data/lib/authlete/models/components/cimd_options.rbi +1 -1
  81. data/lib/authlete/models/components/claim_type.rbi +1 -1
  82. data/lib/authlete/models/components/client.rb +159 -308
  83. data/lib/authlete/models/components/client.rbi +1 -1
  84. data/lib/authlete/models/components/client_auth_method.rb +1 -1
  85. data/lib/authlete/models/components/client_auth_method.rbi +1 -1
  86. data/lib/authlete/models/components/client_authorization_delete_response.rb +4 -4
  87. data/lib/authlete/models/components/client_authorization_delete_response.rbi +1 -1
  88. data/lib/authlete/models/components/client_authorization_get_list_request.rbi +1 -1
  89. data/lib/authlete/models/components/client_authorization_get_list_response.rb +6 -6
  90. data/lib/authlete/models/components/client_authorization_get_list_response.rbi +1 -1
  91. data/lib/authlete/models/components/client_authorization_update_request.rb +2 -2
  92. data/lib/authlete/models/components/client_authorization_update_request.rbi +1 -1
  93. data/lib/authlete/models/components/client_authorization_update_response.rbi +1 -1
  94. data/lib/authlete/models/components/client_clientsource.rb +1 -1
  95. data/lib/authlete/models/components/client_clientsource.rbi +1 -1
  96. data/lib/authlete/models/components/client_extension.rb +9 -19
  97. data/lib/authlete/models/components/client_extension.rbi +1 -1
  98. data/lib/authlete/models/components/client_extension_requestable_scopes_get_response.rb +1 -1
  99. data/lib/authlete/models/components/client_extension_requestable_scopes_get_response.rbi +1 -1
  100. data/lib/authlete/models/components/client_extension_requestable_scopes_update_request.rb +4 -4
  101. data/lib/authlete/models/components/client_extension_requestable_scopes_update_request.rbi +1 -1
  102. data/lib/authlete/models/components/client_extension_requestable_scopes_update_response.rbi +1 -1
  103. data/lib/authlete/models/components/client_flag_update_request.rb +1 -1
  104. data/lib/authlete/models/components/client_flag_update_request.rbi +1 -1
  105. data/lib/authlete/models/components/client_flag_update_response.rbi +1 -1
  106. data/lib/authlete/models/components/client_get_list_response.rb +4 -4
  107. data/lib/authlete/models/components/client_get_list_response.rbi +1 -1
  108. data/lib/authlete/models/components/client_granted_scopes_delete_response.rbi +1 -1
  109. data/lib/authlete/models/components/client_input.rb +154 -293
  110. data/lib/authlete/models/components/client_input.rbi +1 -1
  111. data/lib/authlete/models/components/client_limited.rb +7 -7
  112. data/lib/authlete/models/components/client_limited.rbi +1 -1
  113. data/lib/authlete/models/components/client_limited_authorization.rb +57 -106
  114. data/lib/authlete/models/components/client_limited_authorization.rbi +1 -1
  115. data/lib/authlete/models/components/client_limited_authorization_clientsource.rb +1 -1
  116. data/lib/authlete/models/components/client_limited_authorization_clientsource.rbi +1 -1
  117. data/lib/authlete/models/components/client_registration_response.rb +3 -3
  118. data/lib/authlete/models/components/client_registration_response.rbi +1 -1
  119. data/lib/authlete/models/components/client_registration_response_action.rb +1 -1
  120. data/lib/authlete/models/components/client_registration_response_action.rbi +1 -1
  121. data/lib/authlete/models/components/client_registration_type.rb +1 -1
  122. data/lib/authlete/models/components/client_registration_type.rbi +1 -1
  123. data/lib/authlete/models/components/client_secret_refresh_response.rb +2 -2
  124. data/lib/authlete/models/components/client_secret_refresh_response.rbi +1 -1
  125. data/lib/authlete/models/components/client_secret_update_request.rb +1 -1
  126. data/lib/authlete/models/components/client_secret_update_request.rbi +1 -1
  127. data/lib/authlete/models/components/client_secret_update_response.rb +2 -2
  128. data/lib/authlete/models/components/client_secret_update_response.rbi +1 -1
  129. data/lib/authlete/models/components/client_type.rb +1 -1
  130. data/lib/authlete/models/components/client_type.rbi +1 -1
  131. data/lib/authlete/models/components/credential_issuance_order.rb +1 -1
  132. data/lib/authlete/models/components/credential_issuance_order.rbi +1 -1
  133. data/lib/authlete/models/components/credential_issuer_metadata.rb +5 -5
  134. data/lib/authlete/models/components/credential_issuer_metadata.rbi +1 -1
  135. data/lib/authlete/models/components/credential_offer_info.rb +12 -20
  136. data/lib/authlete/models/components/credential_offer_info.rbi +1 -1
  137. data/lib/authlete/models/components/credential_request_info.rbi +1 -1
  138. data/lib/authlete/models/components/delivery_mode.rbi +1 -1
  139. data/lib/authlete/models/components/device_authorization_request.rb +12 -12
  140. data/lib/authlete/models/components/device_authorization_request.rbi +1 -1
  141. data/lib/authlete/models/components/device_authorization_response.rb +39 -48
  142. data/lib/authlete/models/components/device_authorization_response.rbi +1 -1
  143. data/lib/authlete/models/components/device_authorization_response_action.rbi +1 -1
  144. data/lib/authlete/models/components/device_complete_request.rb +22 -22
  145. data/lib/authlete/models/components/device_complete_request.rbi +1 -1
  146. data/lib/authlete/models/components/device_complete_request_result.rb +1 -1
  147. data/lib/authlete/models/components/device_complete_request_result.rbi +1 -1
  148. data/lib/authlete/models/components/device_complete_response.rb +2 -2
  149. data/lib/authlete/models/components/device_complete_response.rbi +1 -1
  150. data/lib/authlete/models/components/device_complete_response_action.rb +1 -1
  151. data/lib/authlete/models/components/device_complete_response_action.rbi +1 -1
  152. data/lib/authlete/models/components/device_verification_request.rb +1 -1
  153. data/lib/authlete/models/components/device_verification_request.rbi +1 -1
  154. data/lib/authlete/models/components/device_verification_response.rb +32 -32
  155. data/lib/authlete/models/components/device_verification_response.rbi +1 -1
  156. data/lib/authlete/models/components/device_verification_response_action.rbi +1 -1
  157. data/lib/authlete/models/components/display.rb +3 -3
  158. data/lib/authlete/models/components/display.rbi +1 -1
  159. data/lib/authlete/models/components/dynamic_scope.rbi +1 -1
  160. data/lib/authlete/models/components/fapi_mode.rbi +1 -1
  161. data/lib/authlete/models/components/federation_configuration_response.rb +2 -2
  162. data/lib/authlete/models/components/federation_configuration_response.rbi +1 -1
  163. data/lib/authlete/models/components/federation_configuration_response_action.rbi +1 -1
  164. data/lib/authlete/models/components/federation_registration_request.rb +2 -2
  165. data/lib/authlete/models/components/federation_registration_request.rbi +1 -1
  166. data/lib/authlete/models/components/federation_registration_response.rb +2 -2
  167. data/lib/authlete/models/components/federation_registration_response.rbi +1 -1
  168. data/lib/authlete/models/components/federation_registration_response_action.rbi +1 -1
  169. data/lib/authlete/models/components/g_m_request.rb +13 -13
  170. data/lib/authlete/models/components/g_m_request.rbi +1 -1
  171. data/lib/authlete/models/components/g_m_response.rb +3 -3
  172. data/lib/authlete/models/components/g_m_response.rbi +1 -1
  173. data/lib/authlete/models/components/g_m_response_action.rbi +1 -1
  174. data/lib/authlete/models/components/grant.rb +2 -2
  175. data/lib/authlete/models/components/grant.rbi +1 -1
  176. data/lib/authlete/models/components/grant_management_action.rb +2 -2
  177. data/lib/authlete/models/components/grant_management_action.rbi +1 -1
  178. data/lib/authlete/models/components/grant_scope.rb +2 -2
  179. data/lib/authlete/models/components/grant_scope.rbi +1 -1
  180. data/lib/authlete/models/components/grant_type.rb +1 -1
  181. data/lib/authlete/models/components/grant_type.rbi +1 -1
  182. data/lib/authlete/models/components/hsk.rb +8 -8
  183. data/lib/authlete/models/components/hsk.rbi +1 -1
  184. data/lib/authlete/models/components/hsk_create_request.rb +6 -6
  185. data/lib/authlete/models/components/hsk_create_request.rbi +1 -1
  186. data/lib/authlete/models/components/hsk_create_response.rb +2 -2
  187. data/lib/authlete/models/components/hsk_create_response.rbi +1 -1
  188. data/lib/authlete/models/components/hsk_create_response_action.rbi +1 -1
  189. data/lib/authlete/models/components/hsk_delete_response.rb +2 -2
  190. data/lib/authlete/models/components/hsk_delete_response.rbi +1 -1
  191. data/lib/authlete/models/components/hsk_delete_response_action.rbi +1 -1
  192. data/lib/authlete/models/components/hsk_get_list_response.rb +1 -1
  193. data/lib/authlete/models/components/hsk_get_list_response.rbi +1 -1
  194. data/lib/authlete/models/components/hsk_get_list_response_action.rbi +1 -1
  195. data/lib/authlete/models/components/hsk_get_response.rb +2 -2
  196. data/lib/authlete/models/components/hsk_get_response.rbi +1 -1
  197. data/lib/authlete/models/components/hsk_get_response_action.rbi +1 -1
  198. data/lib/authlete/models/components/idtoken_reissue_request.rb +7 -7
  199. data/lib/authlete/models/components/idtoken_reissue_request.rbi +1 -1
  200. data/lib/authlete/models/components/idtoken_reissue_response.rb +3 -3
  201. data/lib/authlete/models/components/idtoken_reissue_response.rbi +1 -1
  202. data/lib/authlete/models/components/idtoken_reissue_response_action.rbi +1 -1
  203. data/lib/authlete/models/components/introspection_request.rb +24 -40
  204. data/lib/authlete/models/components/introspection_request.rbi +1 -1
  205. data/lib/authlete/models/components/introspection_response.rb +36 -45
  206. data/lib/authlete/models/components/introspection_response.rbi +1 -1
  207. data/lib/authlete/models/components/introspection_response_action.rbi +1 -1
  208. data/lib/authlete/models/components/jose_verify_request.rb +5 -5
  209. data/lib/authlete/models/components/jose_verify_request.rbi +1 -1
  210. data/lib/authlete/models/components/jose_verify_response.rb +5 -5
  211. data/lib/authlete/models/components/jose_verify_response.rbi +1 -1
  212. data/lib/authlete/models/components/jwe_alg.rb +2 -2
  213. data/lib/authlete/models/components/jwe_alg.rbi +1 -1
  214. data/lib/authlete/models/components/jwe_enc.rb +1 -1
  215. data/lib/authlete/models/components/jwe_enc.rbi +1 -1
  216. data/lib/authlete/models/components/jws_alg.rb +2 -2
  217. data/lib/authlete/models/components/jws_alg.rbi +1 -1
  218. data/lib/authlete/models/components/named_uri.rbi +1 -1
  219. data/lib/authlete/models/components/native_sso_logout_request.rb +1 -1
  220. data/lib/authlete/models/components/native_sso_logout_request.rbi +1 -1
  221. data/lib/authlete/models/components/native_sso_logout_response.rb +3 -3
  222. data/lib/authlete/models/components/native_sso_logout_response.rbi +1 -1
  223. data/lib/authlete/models/components/native_sso_logout_response_action.rb +1 -1
  224. data/lib/authlete/models/components/native_sso_logout_response_action.rbi +1 -1
  225. data/lib/authlete/models/components/native_sso_request.rb +8 -24
  226. data/lib/authlete/models/components/native_sso_request.rbi +1 -1
  227. data/lib/authlete/models/components/native_sso_response.rb +4 -4
  228. data/lib/authlete/models/components/native_sso_response.rbi +1 -1
  229. data/lib/authlete/models/components/native_sso_response_action.rb +1 -1
  230. data/lib/authlete/models/components/native_sso_response_action.rbi +1 -1
  231. data/lib/authlete/models/components/pair.rbi +1 -1
  232. data/lib/authlete/models/components/prompt.rb +3 -3
  233. data/lib/authlete/models/components/prompt.rbi +1 -1
  234. data/lib/authlete/models/components/property.rb +1 -1
  235. data/lib/authlete/models/components/property.rbi +1 -1
  236. data/lib/authlete/models/components/pushed_authorization_request.rb +11 -11
  237. data/lib/authlete/models/components/pushed_authorization_request.rbi +1 -1
  238. data/lib/authlete/models/components/pushed_authorization_response.rb +6 -6
  239. data/lib/authlete/models/components/pushed_authorization_response.rbi +1 -1
  240. data/lib/authlete/models/components/pushed_authorization_response_action.rbi +1 -1
  241. data/lib/authlete/models/components/pushed_authorization_response_clientauthmethod.rb +1 -1
  242. data/lib/authlete/models/components/pushed_authorization_response_clientauthmethod.rbi +1 -1
  243. data/lib/authlete/models/components/response_type.rbi +1 -1
  244. data/lib/authlete/models/components/responsemode.rbi +1 -1
  245. data/lib/authlete/models/components/revocation_request.rb +10 -10
  246. data/lib/authlete/models/components/revocation_request.rbi +1 -1
  247. data/lib/authlete/models/components/revocation_response.rb +2 -2
  248. data/lib/authlete/models/components/revocation_response.rbi +1 -1
  249. data/lib/authlete/models/components/revocation_response_action.rbi +1 -1
  250. data/lib/authlete/models/components/scope.rbi +1 -1
  251. data/lib/authlete/models/components/security.rbi +1 -1
  252. data/lib/authlete/models/components/service.rb +248 -599
  253. data/lib/authlete/models/components/service.rbi +1 -1
  254. data/lib/authlete/models/components/service_get_list_response.rb +4 -4
  255. data/lib/authlete/models/components/service_get_list_response.rbi +1 -1
  256. data/lib/authlete/models/components/service_input.rb +242 -593
  257. data/lib/authlete/models/components/service_input.rbi +1 -1
  258. data/lib/authlete/models/components/service_jwks_get_response.rbi +1 -1
  259. data/lib/authlete/models/components/service_profile.rbi +1 -1
  260. data/lib/authlete/models/components/sns_credentials.rbi +1 -1
  261. data/lib/authlete/models/components/standard_introspection_request.rb +22 -22
  262. data/lib/authlete/models/components/standard_introspection_request.rbi +1 -1
  263. data/lib/authlete/models/components/standard_introspection_response.rb +2 -2
  264. data/lib/authlete/models/components/standard_introspection_response.rbi +1 -1
  265. data/lib/authlete/models/components/standard_introspection_response_action.rbi +1 -1
  266. data/lib/authlete/models/components/subject_type.rb +2 -2
  267. data/lib/authlete/models/components/subject_type.rbi +1 -1
  268. data/lib/authlete/models/components/supportedsnse.rbi +1 -1
  269. data/lib/authlete/models/components/tagged_value.rbi +1 -1
  270. data/lib/authlete/models/components/token_create_request.rb +27 -59
  271. data/lib/authlete/models/components/token_create_request.rbi +1 -1
  272. data/lib/authlete/models/components/token_create_response.rb +18 -18
  273. data/lib/authlete/models/components/token_create_response.rbi +1 -1
  274. data/lib/authlete/models/components/token_create_response_action.rbi +1 -1
  275. data/lib/authlete/models/components/token_fail_request.rb +3 -3
  276. data/lib/authlete/models/components/token_fail_request.rbi +1 -1
  277. data/lib/authlete/models/components/token_fail_request_reason.rb +1 -1
  278. data/lib/authlete/models/components/token_fail_request_reason.rbi +1 -1
  279. data/lib/authlete/models/components/token_fail_response.rb +2 -2
  280. data/lib/authlete/models/components/token_fail_response.rbi +1 -1
  281. data/lib/authlete/models/components/token_fail_response_action.rbi +1 -1
  282. data/lib/authlete/models/components/token_get_list_response.rb +5 -5
  283. data/lib/authlete/models/components/token_get_list_response.rbi +1 -1
  284. data/lib/authlete/models/components/token_info.rb +6 -6
  285. data/lib/authlete/models/components/token_info.rbi +1 -1
  286. data/lib/authlete/models/components/token_issue_request.rb +9 -9
  287. data/lib/authlete/models/components/token_issue_request.rbi +1 -1
  288. data/lib/authlete/models/components/token_issue_response.rb +21 -21
  289. data/lib/authlete/models/components/token_issue_response.rbi +1 -1
  290. data/lib/authlete/models/components/token_issue_response_action.rbi +1 -1
  291. data/lib/authlete/models/components/token_request.rb +27 -27
  292. data/lib/authlete/models/components/token_request.rbi +1 -1
  293. data/lib/authlete/models/components/token_response.rb +49 -61
  294. data/lib/authlete/models/components/token_response.rbi +1 -1
  295. data/lib/authlete/models/components/token_response_action.rbi +1 -1
  296. data/lib/authlete/models/components/token_revoke_request.rb +7 -7
  297. data/lib/authlete/models/components/token_revoke_request.rbi +1 -1
  298. data/lib/authlete/models/components/token_revoke_response.rbi +1 -1
  299. data/lib/authlete/models/components/token_type.rb +1 -1
  300. data/lib/authlete/models/components/token_type.rbi +1 -1
  301. data/lib/authlete/models/components/token_update_request.rb +16 -16
  302. data/lib/authlete/models/components/token_update_request.rbi +1 -1
  303. data/lib/authlete/models/components/token_update_response.rb +9 -9
  304. data/lib/authlete/models/components/token_update_response.rbi +1 -1
  305. data/lib/authlete/models/components/token_update_response_action.rbi +1 -1
  306. data/lib/authlete/models/components/trust_anchor.rb +2 -2
  307. data/lib/authlete/models/components/trust_anchor.rbi +1 -1
  308. data/lib/authlete/models/components/user_code_charset.rb +1 -1
  309. data/lib/authlete/models/components/user_code_charset.rbi +1 -1
  310. data/lib/authlete/models/components/userinfo_issue_request.rb +7 -67
  311. data/lib/authlete/models/components/userinfo_issue_request.rbi +1 -1
  312. data/lib/authlete/models/components/userinfo_issue_response.rb +5 -5
  313. data/lib/authlete/models/components/userinfo_issue_response.rbi +1 -1
  314. data/lib/authlete/models/components/userinfo_issue_response_action.rbi +1 -1
  315. data/lib/authlete/models/components/userinfo_request.rb +15 -40
  316. data/lib/authlete/models/components/userinfo_request.rbi +1 -1
  317. data/lib/authlete/models/components/userinfo_response.rb +46 -89
  318. data/lib/authlete/models/components/userinfo_response.rbi +1 -1
  319. data/lib/authlete/models/components/userinfo_response_action.rbi +1 -1
  320. data/lib/authlete/models/components/vci_batch_issue_request.rbi +1 -1
  321. data/lib/authlete/models/components/vci_batch_issue_response.rb +3 -3
  322. data/lib/authlete/models/components/vci_batch_issue_response.rbi +1 -1
  323. data/lib/authlete/models/components/vci_batch_issue_response_action.rb +1 -1
  324. data/lib/authlete/models/components/vci_batch_issue_response_action.rbi +1 -1
  325. data/lib/authlete/models/components/vci_batch_parse_request.rbi +1 -1
  326. data/lib/authlete/models/components/vci_batch_parse_response.rb +2 -2
  327. data/lib/authlete/models/components/vci_batch_parse_response.rbi +1 -1
  328. data/lib/authlete/models/components/vci_batch_parse_response_action.rbi +1 -1
  329. data/lib/authlete/models/components/vci_deferred_issue_request.rbi +1 -1
  330. data/lib/authlete/models/components/vci_deferred_issue_response.rb +3 -3
  331. data/lib/authlete/models/components/vci_deferred_issue_response.rbi +1 -1
  332. data/lib/authlete/models/components/vci_deferred_issue_response_action.rb +1 -1
  333. data/lib/authlete/models/components/vci_deferred_issue_response_action.rbi +1 -1
  334. data/lib/authlete/models/components/vci_deferred_parse_request.rbi +1 -1
  335. data/lib/authlete/models/components/vci_deferred_parse_response.rb +1 -1
  336. data/lib/authlete/models/components/vci_deferred_parse_response.rbi +1 -1
  337. data/lib/authlete/models/components/vci_deferred_parse_response_action.rbi +1 -1
  338. data/lib/authlete/models/components/vci_jwks_request.rb +1 -1
  339. data/lib/authlete/models/components/vci_jwks_request.rbi +1 -1
  340. data/lib/authlete/models/components/vci_jwks_response.rb +3 -3
  341. data/lib/authlete/models/components/vci_jwks_response.rbi +1 -1
  342. data/lib/authlete/models/components/vci_jwks_response_action.rb +1 -1
  343. data/lib/authlete/models/components/vci_jwks_response_action.rbi +1 -1
  344. data/lib/authlete/models/components/vci_jwtissuer_request.rb +1 -1
  345. data/lib/authlete/models/components/vci_jwtissuer_request.rbi +1 -1
  346. data/lib/authlete/models/components/vci_jwtissuer_response.rb +3 -3
  347. data/lib/authlete/models/components/vci_jwtissuer_response.rbi +1 -1
  348. data/lib/authlete/models/components/vci_jwtissuer_response_action.rb +1 -1
  349. data/lib/authlete/models/components/vci_jwtissuer_response_action.rbi +1 -1
  350. data/lib/authlete/models/components/vci_metadata_request.rb +1 -1
  351. data/lib/authlete/models/components/vci_metadata_request.rbi +1 -1
  352. data/lib/authlete/models/components/vci_metadata_response.rb +3 -3
  353. data/lib/authlete/models/components/vci_metadata_response.rbi +1 -1
  354. data/lib/authlete/models/components/vci_metadata_response_action.rb +1 -1
  355. data/lib/authlete/models/components/vci_metadata_response_action.rbi +1 -1
  356. data/lib/authlete/models/components/vci_offer_create_request.rb +10 -79
  357. data/lib/authlete/models/components/vci_offer_create_request.rbi +1 -1
  358. data/lib/authlete/models/components/vci_offer_create_response.rb +1 -1
  359. data/lib/authlete/models/components/vci_offer_create_response.rbi +1 -1
  360. data/lib/authlete/models/components/vci_offer_create_response_action.rbi +1 -1
  361. data/lib/authlete/models/components/vci_offer_info_request.rbi +1 -1
  362. data/lib/authlete/models/components/vci_offer_info_response.rb +1 -1
  363. data/lib/authlete/models/components/vci_offer_info_response.rbi +1 -1
  364. data/lib/authlete/models/components/vci_offer_info_response_action.rbi +1 -1
  365. data/lib/authlete/models/components/vci_single_issue_request.rbi +1 -1
  366. data/lib/authlete/models/components/vci_single_issue_response.rb +4 -4
  367. data/lib/authlete/models/components/vci_single_issue_response.rbi +1 -1
  368. data/lib/authlete/models/components/vci_single_issue_response_action.rb +1 -1
  369. data/lib/authlete/models/components/vci_single_issue_response_action.rbi +1 -1
  370. data/lib/authlete/models/components/vci_single_parse_request.rbi +1 -1
  371. data/lib/authlete/models/components/vci_single_parse_response.rb +1 -1
  372. data/lib/authlete/models/components/vci_single_parse_response.rbi +1 -1
  373. data/lib/authlete/models/components/vci_single_parse_response_action.rbi +1 -1
  374. data/lib/authlete/models/components/verified_claims_validation_schema.rb +1 -1
  375. data/lib/authlete/models/components/verified_claims_validation_schema.rbi +1 -1
  376. data/lib/authlete/models/components.rb +0 -5
  377. data/lib/authlete/models/errors/apierror.rbi +2 -1
  378. data/lib/authlete/models/errors/result_error.rbi +1 -1
  379. data/lib/authlete/models/operations/auth_authorization_api_request.rbi +1 -1
  380. data/lib/authlete/models/operations/auth_authorization_api_response.rbi +1 -1
  381. data/lib/authlete/models/operations/auth_authorization_fail_api_request.rbi +1 -1
  382. data/lib/authlete/models/operations/auth_authorization_fail_api_response.rbi +1 -1
  383. data/lib/authlete/models/operations/auth_authorization_issue_api_request.rbi +1 -1
  384. data/lib/authlete/models/operations/auth_authorization_issue_api_response.rbi +1 -1
  385. data/lib/authlete/models/operations/auth_introspection_api_request.rbi +1 -1
  386. data/lib/authlete/models/operations/auth_introspection_api_response.rbi +1 -1
  387. data/lib/authlete/models/operations/auth_introspection_standard_api_request.rbi +1 -1
  388. data/lib/authlete/models/operations/auth_introspection_standard_api_response.rbi +1 -1
  389. data/lib/authlete/models/operations/auth_revocation_api_request.rbi +1 -1
  390. data/lib/authlete/models/operations/auth_revocation_api_response.rbi +1 -1
  391. data/lib/authlete/models/operations/auth_token_api_request.rbi +1 -1
  392. data/lib/authlete/models/operations/auth_token_api_response.rbi +1 -1
  393. data/lib/authlete/models/operations/auth_token_create_api_request.rbi +1 -1
  394. data/lib/authlete/models/operations/auth_token_create_api_response.rbi +1 -1
  395. data/lib/authlete/models/operations/auth_token_delete_api_request.rb +1 -1
  396. data/lib/authlete/models/operations/auth_token_delete_api_request.rbi +1 -1
  397. data/lib/authlete/models/operations/auth_token_delete_api_response.rbi +1 -1
  398. data/lib/authlete/models/operations/auth_token_fail_api_request.rbi +1 -1
  399. data/lib/authlete/models/operations/auth_token_fail_api_response.rbi +1 -1
  400. data/lib/authlete/models/operations/auth_token_get_list_api_request.rb +3 -3
  401. data/lib/authlete/models/operations/auth_token_get_list_api_request.rbi +1 -1
  402. data/lib/authlete/models/operations/auth_token_get_list_api_response.rbi +1 -1
  403. data/lib/authlete/models/operations/auth_token_issue_api_request.rbi +1 -1
  404. data/lib/authlete/models/operations/auth_token_issue_api_response.rbi +1 -1
  405. data/lib/authlete/models/operations/auth_token_revoke_api_request.rbi +1 -1
  406. data/lib/authlete/models/operations/auth_token_revoke_api_response.rbi +1 -1
  407. data/lib/authlete/models/operations/auth_token_update_api_request.rbi +1 -1
  408. data/lib/authlete/models/operations/auth_token_update_api_response.rbi +1 -1
  409. data/lib/authlete/models/operations/auth_userinfo_api_request.rbi +1 -1
  410. data/lib/authlete/models/operations/auth_userinfo_api_response.rbi +1 -1
  411. data/lib/authlete/models/operations/auth_userinfo_issue_api_request.rbi +1 -1
  412. data/lib/authlete/models/operations/auth_userinfo_issue_api_response.rbi +1 -1
  413. data/lib/authlete/models/operations/authorization_ticket_info_post_api_request.rbi +1 -1
  414. data/lib/authlete/models/operations/authorization_ticket_info_post_api_response.rbi +1 -1
  415. data/lib/authlete/models/operations/backchannel_authentication_api_request.rbi +1 -1
  416. data/lib/authlete/models/operations/backchannel_authentication_api_response.rbi +1 -1
  417. data/lib/authlete/models/operations/backchannel_authentication_complete_api_request.rbi +1 -1
  418. data/lib/authlete/models/operations/backchannel_authentication_complete_api_response.rbi +1 -1
  419. data/lib/authlete/models/operations/backchannel_authentication_fail_api_request.rbi +1 -1
  420. data/lib/authlete/models/operations/backchannel_authentication_fail_api_response.rbi +1 -1
  421. data/lib/authlete/models/operations/backchannel_authentication_issue_api_request.rbi +1 -1
  422. data/lib/authlete/models/operations/backchannel_authentication_issue_api_response.rbi +1 -1
  423. data/lib/authlete/models/operations/client_authorization_delete_api_post_request.rb +1 -1
  424. data/lib/authlete/models/operations/client_authorization_delete_api_post_request.rbi +1 -1
  425. data/lib/authlete/models/operations/client_authorization_delete_api_post_requestbody.rbi +1 -1
  426. data/lib/authlete/models/operations/client_authorization_delete_api_post_response.rbi +1 -1
  427. data/lib/authlete/models/operations/client_authorization_delete_api_request.rb +2 -2
  428. data/lib/authlete/models/operations/client_authorization_delete_api_request.rbi +1 -1
  429. data/lib/authlete/models/operations/client_authorization_delete_api_response.rbi +1 -1
  430. data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_request.rb +2 -2
  431. data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_request.rbi +1 -1
  432. data/lib/authlete/models/operations/client_authorization_delete_by_subject_api_response.rbi +1 -1
  433. data/lib/authlete/models/operations/client_authorization_get_list_api_post_request.rbi +1 -1
  434. data/lib/authlete/models/operations/client_authorization_get_list_api_post_response.rbi +1 -1
  435. data/lib/authlete/models/operations/client_authorization_get_list_api_request.rb +3 -3
  436. data/lib/authlete/models/operations/client_authorization_get_list_api_request.rbi +1 -1
  437. data/lib/authlete/models/operations/client_authorization_get_list_api_response.rbi +1 -1
  438. data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_request.rb +3 -3
  439. data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_request.rbi +1 -1
  440. data/lib/authlete/models/operations/client_authorization_get_list_by_subject_api_response.rbi +1 -1
  441. data/lib/authlete/models/operations/client_authorization_update_api_request.rb +1 -1
  442. data/lib/authlete/models/operations/client_authorization_update_api_request.rbi +1 -1
  443. data/lib/authlete/models/operations/client_authorization_update_api_response.rbi +1 -1
  444. data/lib/authlete/models/operations/client_create_api_request.rbi +1 -1
  445. data/lib/authlete/models/operations/client_create_api_response.rbi +1 -1
  446. data/lib/authlete/models/operations/client_delete_api_request.rbi +1 -1
  447. data/lib/authlete/models/operations/client_delete_api_response.rbi +1 -1
  448. data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_request.rb +1 -1
  449. data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_request.rbi +1 -1
  450. data/lib/authlete/models/operations/client_extension_requestables_scopes_delete_api_response.rbi +1 -1
  451. data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_request.rb +1 -1
  452. data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_request.rbi +1 -1
  453. data/lib/authlete/models/operations/client_extension_requestables_scopes_get_api_response.rbi +1 -1
  454. data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_request.rb +1 -1
  455. data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_request.rbi +1 -1
  456. data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_post_response.rbi +1 -1
  457. data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_request.rb +1 -1
  458. data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_request.rbi +1 -1
  459. data/lib/authlete/models/operations/client_extension_requestables_scopes_update_api_response.rbi +1 -1
  460. data/lib/authlete/models/operations/client_flag_update_api_request.rbi +1 -1
  461. data/lib/authlete/models/operations/client_flag_update_api_response.rbi +1 -1
  462. data/lib/authlete/models/operations/client_get_api_request.rbi +1 -1
  463. data/lib/authlete/models/operations/client_get_api_response.rbi +1 -1
  464. data/lib/authlete/models/operations/client_get_list_api_request.rb +1 -1
  465. data/lib/authlete/models/operations/client_get_list_api_request.rbi +1 -1
  466. data/lib/authlete/models/operations/client_get_list_api_response.rbi +1 -1
  467. data/lib/authlete/models/operations/client_granted_scopes_delete_api_request.rb +2 -2
  468. data/lib/authlete/models/operations/client_granted_scopes_delete_api_request.rbi +1 -1
  469. data/lib/authlete/models/operations/client_granted_scopes_delete_api_response.rbi +1 -1
  470. data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_request.rb +2 -2
  471. data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_request.rbi +1 -1
  472. data/lib/authlete/models/operations/client_granted_scopes_delete_by_subject_api_response.rbi +1 -1
  473. data/lib/authlete/models/operations/client_granted_scopes_get_api_post_request.rb +1 -1
  474. data/lib/authlete/models/operations/client_granted_scopes_get_api_post_request.rbi +1 -1
  475. data/lib/authlete/models/operations/client_granted_scopes_get_api_post_requestbody.rbi +1 -1
  476. data/lib/authlete/models/operations/client_granted_scopes_get_api_post_response.rbi +1 -1
  477. data/lib/authlete/models/operations/client_granted_scopes_get_api_request.rb +2 -2
  478. data/lib/authlete/models/operations/client_granted_scopes_get_api_request.rbi +1 -1
  479. data/lib/authlete/models/operations/client_granted_scopes_get_api_response.rbi +1 -1
  480. data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_request.rb +2 -2
  481. data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_request.rbi +1 -1
  482. data/lib/authlete/models/operations/client_granted_scopes_get_by_subject_api_response.rbi +1 -1
  483. data/lib/authlete/models/operations/client_registration_api_request.rbi +1 -1
  484. data/lib/authlete/models/operations/client_registration_api_requestbody.rb +3 -3
  485. data/lib/authlete/models/operations/client_registration_api_requestbody.rbi +1 -1
  486. data/lib/authlete/models/operations/client_registration_api_response.rbi +1 -1
  487. data/lib/authlete/models/operations/client_registration_delete_api_request.rbi +1 -1
  488. data/lib/authlete/models/operations/client_registration_delete_api_requestbody.rb +3 -3
  489. data/lib/authlete/models/operations/client_registration_delete_api_requestbody.rbi +1 -1
  490. data/lib/authlete/models/operations/client_registration_delete_api_response.rbi +1 -1
  491. data/lib/authlete/models/operations/client_registration_get_api_request.rbi +1 -1
  492. data/lib/authlete/models/operations/client_registration_get_api_requestbody.rb +3 -3
  493. data/lib/authlete/models/operations/client_registration_get_api_requestbody.rbi +1 -1
  494. data/lib/authlete/models/operations/client_registration_get_api_response.rbi +1 -1
  495. data/lib/authlete/models/operations/client_registration_update_api_request.rbi +1 -1
  496. data/lib/authlete/models/operations/client_registration_update_api_requestbody.rb +3 -3
  497. data/lib/authlete/models/operations/client_registration_update_api_requestbody.rbi +1 -1
  498. data/lib/authlete/models/operations/client_registration_update_api_response.rbi +1 -1
  499. data/lib/authlete/models/operations/client_secret_refresh_api_request.rb +1 -1
  500. data/lib/authlete/models/operations/client_secret_refresh_api_request.rbi +1 -1
  501. data/lib/authlete/models/operations/client_secret_refresh_api_response.rbi +1 -1
  502. data/lib/authlete/models/operations/client_secret_update_api_request.rb +1 -1
  503. data/lib/authlete/models/operations/client_secret_update_api_request.rbi +1 -1
  504. data/lib/authlete/models/operations/client_secret_update_api_response.rbi +1 -1
  505. data/lib/authlete/models/operations/client_update_api_form_request.rbi +1 -1
  506. data/lib/authlete/models/operations/client_update_api_form_response.rbi +1 -1
  507. data/lib/authlete/models/operations/client_update_api_request.rbi +1 -1
  508. data/lib/authlete/models/operations/client_update_api_response.rbi +1 -1
  509. data/lib/authlete/models/operations/device_authorization_api_request.rbi +1 -1
  510. data/lib/authlete/models/operations/device_authorization_api_response.rbi +1 -1
  511. data/lib/authlete/models/operations/device_complete_api_request.rbi +1 -1
  512. data/lib/authlete/models/operations/device_complete_api_response.rbi +1 -1
  513. data/lib/authlete/models/operations/device_verification_api_request.rbi +1 -1
  514. data/lib/authlete/models/operations/device_verification_api_response.rbi +1 -1
  515. data/lib/authlete/models/operations/federation_configuration_api_request.rbi +1 -1
  516. data/lib/authlete/models/operations/federation_configuration_api_requestbody.rbi +1 -1
  517. data/lib/authlete/models/operations/federation_configuration_api_response.rbi +1 -1
  518. data/lib/authlete/models/operations/federation_registration_api_request.rbi +1 -1
  519. data/lib/authlete/models/operations/federation_registration_api_response.rbi +1 -1
  520. data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_request.rb +1 -1
  521. data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_request.rbi +1 -1
  522. data/lib/authlete/models/operations/get_api_lifecycle_healthcheck_response.rbi +1 -1
  523. data/lib/authlete/models/operations/grant_m_api_request.rbi +1 -1
  524. data/lib/authlete/models/operations/grant_m_api_response.rbi +1 -1
  525. data/lib/authlete/models/operations/hsk_create_api_request.rbi +1 -1
  526. data/lib/authlete/models/operations/hsk_create_api_response.rbi +1 -1
  527. data/lib/authlete/models/operations/hsk_delete_api_request.rbi +1 -1
  528. data/lib/authlete/models/operations/hsk_delete_api_response.rbi +1 -1
  529. data/lib/authlete/models/operations/hsk_get_api_request.rbi +1 -1
  530. data/lib/authlete/models/operations/hsk_get_api_response.rbi +1 -1
  531. data/lib/authlete/models/operations/hsk_get_list_api_request.rbi +1 -1
  532. data/lib/authlete/models/operations/hsk_get_list_api_response.rbi +1 -1
  533. data/lib/authlete/models/operations/idtoken_reissue_api_request.rbi +1 -1
  534. data/lib/authlete/models/operations/idtoken_reissue_api_response.rbi +1 -1
  535. data/lib/authlete/models/operations/jose_verify_api_request.rbi +1 -1
  536. data/lib/authlete/models/operations/jose_verify_api_response.rbi +1 -1
  537. data/lib/authlete/models/operations/native_sso_api_request.rbi +1 -1
  538. data/lib/authlete/models/operations/native_sso_api_response.rbi +1 -1
  539. data/lib/authlete/models/operations/native_sso_logout_api_request.rbi +1 -1
  540. data/lib/authlete/models/operations/native_sso_logout_api_response.rbi +1 -1
  541. data/lib/authlete/models/operations/pushed_auth_req_api_request.rbi +1 -1
  542. data/lib/authlete/models/operations/pushed_auth_req_api_response.rbi +1 -1
  543. data/lib/authlete/models/operations/service_configuration_api_request.rbi +1 -1
  544. data/lib/authlete/models/operations/service_configuration_api_response.rbi +1 -1
  545. data/lib/authlete/models/operations/service_create_api_response.rbi +1 -1
  546. data/lib/authlete/models/operations/service_delete_api_request.rbi +1 -1
  547. data/lib/authlete/models/operations/service_delete_api_response.rbi +1 -1
  548. data/lib/authlete/models/operations/service_get_api_request.rbi +1 -1
  549. data/lib/authlete/models/operations/service_get_api_response.rbi +1 -1
  550. data/lib/authlete/models/operations/service_get_list_api_request.rbi +1 -1
  551. data/lib/authlete/models/operations/service_get_list_api_response.rbi +1 -1
  552. data/lib/authlete/models/operations/service_jwks_get_api_request.rbi +1 -1
  553. data/lib/authlete/models/operations/service_jwks_get_api_response.rbi +1 -1
  554. data/lib/authlete/models/operations/service_update_api_request.rbi +1 -1
  555. data/lib/authlete/models/operations/service_update_api_response.rbi +1 -1
  556. data/lib/authlete/models/operations/updateauthorizationticket_request.rbi +1 -1
  557. data/lib/authlete/models/operations/updateauthorizationticket_response.rbi +1 -1
  558. data/lib/authlete/models/operations/vci_batch_issue_api_request.rbi +1 -1
  559. data/lib/authlete/models/operations/vci_batch_issue_api_response.rbi +1 -1
  560. data/lib/authlete/models/operations/vci_batch_parse_api_request.rbi +1 -1
  561. data/lib/authlete/models/operations/vci_batch_parse_api_response.rbi +1 -1
  562. data/lib/authlete/models/operations/vci_deferred_issue_api_request.rbi +1 -1
  563. data/lib/authlete/models/operations/vci_deferred_issue_api_response.rbi +1 -1
  564. data/lib/authlete/models/operations/vci_deferred_parse_api_request.rbi +1 -1
  565. data/lib/authlete/models/operations/vci_deferred_parse_api_response.rbi +1 -1
  566. data/lib/authlete/models/operations/vci_jwks_api_request.rbi +1 -1
  567. data/lib/authlete/models/operations/vci_jwks_api_response.rbi +1 -1
  568. data/lib/authlete/models/operations/vci_jwtissuer_api_request.rbi +1 -1
  569. data/lib/authlete/models/operations/vci_jwtissuer_api_response.rbi +1 -1
  570. data/lib/authlete/models/operations/vci_metadata_api_request.rbi +1 -1
  571. data/lib/authlete/models/operations/vci_metadata_api_response.rbi +1 -1
  572. data/lib/authlete/models/operations/vci_offer_create_api_request.rbi +1 -1
  573. data/lib/authlete/models/operations/vci_offer_create_api_response.rbi +1 -1
  574. data/lib/authlete/models/operations/vci_offer_info_api_request.rbi +1 -1
  575. data/lib/authlete/models/operations/vci_offer_info_api_response.rbi +1 -1
  576. data/lib/authlete/models/operations/vci_single_issue_api_request.rbi +1 -1
  577. data/lib/authlete/models/operations/vci_single_issue_api_response.rbi +1 -1
  578. data/lib/authlete/models/operations/vci_single_parse_api_request.rbi +1 -1
  579. data/lib/authlete/models/operations/vci_single_parse_api_response.rbi +1 -1
  580. data/lib/authlete/models/operations.rb +0 -4
  581. data/lib/authlete/native_sso.rb +17 -69
  582. data/lib/authlete/pushed_authorization.rb +10 -5
  583. data/lib/authlete/revocation.rb +10 -98
  584. data/lib/authlete/sdkconfiguration.rb +5 -6
  585. data/lib/authlete/services.rb +47 -27
  586. data/lib/authlete/token_management.rb +43 -23
  587. data/lib/authlete/tokens.rb +24 -454
  588. data/lib/authlete/userinfo.rb +17 -224
  589. data/lib/authlete/utils/request_bodies.rb +8 -3
  590. data/lib/authlete/utils/security.rb +32 -11
  591. data/lib/authlete/utils/url.rb +11 -5
  592. data/lib/authlete/utils/utils.rb +33 -3
  593. data/lib/authlete/verifiable_credentials.rb +69 -34
  594. data/lib/authlete_ruby_sdk.rb +0 -1
  595. data/lib/crystalline/metadata_fields.rb +66 -9
  596. data/lib/crystalline/module.rb +3 -3
  597. data/lib/crystalline/types.rb +11 -3
  598. metadata +18 -23
  599. data/lib/authlete/models/components/batchkind.rb +0 -18
  600. data/lib/authlete/models/components/batchkind.rbi +0 -11
  601. data/lib/authlete/models/components/token_batch_status.rb +0 -61
  602. data/lib/authlete/models/components/token_batch_status.rbi +0 -27
  603. data/lib/authlete/models/components/token_batch_status_result.rb +0 -19
  604. data/lib/authlete/models/components/token_batch_status_result.rbi +0 -11
  605. data/lib/authlete/models/components/token_create_batch_response.rb +0 -41
  606. data/lib/authlete/models/components/token_create_batch_response.rbi +0 -17
  607. data/lib/authlete/models/components/token_create_batch_status_response.rb +0 -42
  608. data/lib/authlete/models/components/token_create_batch_status_response.rbi +0 -17
  609. data/lib/authlete/models/operations/auth_token_create_batch_api_request.rb +0 -41
  610. data/lib/authlete/models/operations/auth_token_create_batch_api_request.rbi +0 -17
  611. data/lib/authlete/models/operations/auth_token_create_batch_api_response.rb +0 -44
  612. data/lib/authlete/models/operations/auth_token_create_batch_api_response.rbi +0 -19
  613. data/lib/authlete/models/operations/auth_token_create_batch_status_api_request.rb +0 -37
  614. data/lib/authlete/models/operations/auth_token_create_batch_status_api_request.rbi +0 -15
  615. data/lib/authlete/models/operations/auth_token_create_batch_status_api_response.rb +0 -44
  616. data/lib/authlete/models/operations/auth_token_create_batch_status_api_response.rbi +0 -19
  617. data/lib/authlete/token_operations.rb +0 -344
@@ -17,27 +17,27 @@ module Authlete
17
17
  # A short message which explains the result of the API call.
18
18
  field :result_message, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultMessage') } }
19
19
  # The next action that the authorization server implementation should take.
20
- field :action, Crystalline::Nilable.new(Models::Components::AuthorizationResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::AuthorizationResponseAction, true) } }
20
+ field :action, Crystalline::Nilable.new(Models::Components::AuthorizationResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::AuthorizationResponseAction, true) } }
21
21
 
22
22
  field :client, Crystalline::Nilable.new(Models::Components::ClientLimitedAuthorization), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('client') } }
23
23
  # The display mode which the client application requests by `display` request parameter.
24
24
  # When the authorization request does not have `display` request parameter, `PAGE` is set as the default value.
25
- #
25
+ #
26
26
  # It is ensured that the value of `display` is one of the supported display modes which are specified
27
27
  # by `supportedDisplays` configuration parameter of the service. If the display mode specified by the
28
28
  # authorization request is not supported, an error is raised.
29
- #
29
+ #
30
30
  # Values for this property correspond to the values listed in
31
31
  # "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), display".
32
- #
33
- field :display, Crystalline::Nilable.new(Models::Components::Display), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('display'), 'decoder': Utils.enum_from_string(Models::Components::Display, true) } }
32
+ #
33
+ field :display, Crystalline::Nilable.new(Models::Components::Display), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('display'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::Display, true) } }
34
34
  # The maximum authentication age. This value comes from `max_age` request parameter, or `defaultMaxAge` configuration parameter
35
35
  # of the client application when the authorization request does not contain `max_age` request parameter.
36
- #
36
+ #
37
37
  # See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), max_age"
38
38
  # for `max_age` request parameter, and see "[OpenID Connect Dynamic Client Registration 1.0, 2. Client Metadata](https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata), default_max_age"
39
39
  # for `defaultMaxAge` configuration parameter.
40
- #
40
+ #
41
41
  field :max_age, Crystalline::Nilable.new(::Integer), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('maxAge') } }
42
42
 
43
43
  field :service, Crystalline::Nilable.new(Models::Components::Service), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('service') } }
@@ -51,225 +51,142 @@ module Authlete
51
51
  # OpenID Connect defines some scope names which need to be treated specially. The table below lists the special scope names.
52
52
  # | Name | Description |
53
53
  # | --- | --- |
54
- # | `openid` | This scope must be contained in `scope` request parameter to promote an OAuth 2.0 authorization request to an OpenID Connect request. It is described in "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1\_0.html#AuthRequest), scope". |
55
- # | `profile` | This scope is used to request some claims to be embedded in the ID token. The claims are `name`, `family\_name`, `given\_name`, `middle\_name`, `nickname`, `preferred\_username`, `profile`, `picture`, `website`, `gender`, `birthdate`, `zoneinfo`, `locale`, and `updated\_at`. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1\_0.html#ScopeClaims). |
56
- # | `email` | This scope is used to request some claims to be embedded in the ID token. The claims are `email` and `email\_verified`. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1\_0.html#ScopeClaims). |
57
- # | `address` | This scope is used to request `address` claim to be embedded in the ID token. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1\_0.html#ScopeClaims).
58
- # The format of `address` claim is not a simple string. It is described in [OpenID Connect Core 1.0, 5.1.1. Address Claim](https://openid.net/specs/openid-connect-core-1\_0.html#AddressClaim). |
59
- # | `phone` | This scope is used to request some claims to be embedded in the ID token. The claims are `phone\_number` and `phone\_number\_verified`. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1\_0.html#ScopeClaims). |
60
- # | `offline\_access` | The following is an excerpt about this scope from [OpenID Connect Core 1.0, 11. Offline Access](https://openid.net/specs/openid-connect-core-1\_0.html#OfflineAccess).
54
+ # | `openid` | This scope must be contained in `scope` request parameter to promote an OAuth 2.0 authorization request to an OpenID Connect request. It is described in "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), scope". |
55
+ # | `profile` | This scope is used to request some claims to be embedded in the ID token. The claims are `name`, `family_name`, `given_name`, `middle_name`, `nickname`, `preferred_username`, `profile`, `picture`, `website`, `gender`, `birthdate`, `zoneinfo`, `locale`, and `updated_at`. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims). |
56
+ # | `email` | This scope is used to request some claims to be embedded in the ID token. The claims are `email` and `email_verified`. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims). |
57
+ # | `address` | This scope is used to request `address` claim to be embedded in the ID token. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims).
58
+ # The format of `address` claim is not a simple string. It is described in [OpenID Connect Core 1.0, 5.1.1. Address Claim](https://openid.net/specs/openid-connect-core-1_0.html#AddressClaim). |
59
+ # | `phone` | This scope is used to request some claims to be embedded in the ID token. The claims are `phone_number` and `phone_number_verified`. It is described in [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims). |
60
+ # | `offline_access` | The following is an excerpt about this scope from [OpenID Connect Core 1.0, 11. Offline Access](https://openid.net/specs/openid-connect-core-1_0.html#OfflineAccess).
61
61
  # > This scope value requests that an OAuth 2.0 Refresh Token be issued that can be used to obtain an Access Token that grants access to the end-user's userinfo endpoint even when the end-user is not present (not logged in).
62
62
  # |
63
- # Note that, if `response\_type` request parameter does not contain code, `offline\_acccess` scope is removed from this list even
64
- # when scope request parameter contains `offline\_access`. This behavior is a requirement written in
65
- # [OpenID Connect Core 1.0, 11. Offline Access](https://openid.net/specs/openid-connect-core-1\_0.html#OfflineAccess).
66
- #
63
+ # Note that, if `response_type` request parameter does not contain code, `offline_acccess` scope is removed from this list even
64
+ # when scope request parameter contains `offline_access`. This behavior is a requirement written in
65
+ # [OpenID Connect Core 1.0, 11. Offline Access](https://openid.net/specs/openid-connect-core-1_0.html#OfflineAccess).
66
+ #
67
67
  field :scopes, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Scope)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('scopes') } }
68
68
  # The locales that the client application presented as candidates to be used for UI.
69
69
  # This value comes from `ui_locales` request parameter. The format of `ui_locales` is a space-separated list of language tag values
70
70
  # defined in [RFC5646](https://datatracker.ietf.org/doc/html/rfc5646).
71
71
  # See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), ui_locales" for details.
72
- #
72
+ #
73
73
  # It is ensured that locales listed by this parameters are contained in the list of supported UI locales which are specified
74
74
  # by `supportedUiLocales` configuration parameter of the service. Unsupported UI locales in the authorization request do not
75
75
  # cause an error and are just ignored.
76
- #
76
+ #
77
77
  field :ui_locales, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('uiLocales') } }
78
78
  # End-user's preferred languages and scripts for claims. This value comes from `claims_locales` request parameter.
79
79
  # The format of `claims_locales` is a space-separated list of language tag values defined in [RFC5646](https://datatracker.ietf.org/doc/html/rfc5646).
80
80
  # See "[OpenID Connect Core 1.0, 5.2. Claims Languages and Scripts](https://openid.net/specs/openid-connect-core-1_0.html#ClaimsLanguagesAndScripts)" for details.
81
- #
81
+ #
82
82
  # It is ensured that locales listed by this parameters are contained in the list of supported claim locales
83
83
  # which are specified by `supportedClaimsLocales` configuration parameter of the service.
84
84
  # Unsupported claim locales in the authorization request do not cause an error and are just ignored.
85
- #
85
+ #
86
86
  field :claims_locales, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('claimsLocales') } }
87
87
  # The list of claims that the client application requests to be embedded in the ID token.
88
88
  # The value comes from (1) `id_token` in `claims` request parameter [1] and/or (2) special scopes (`profile`, `email`, `address` and `phone`)
89
89
  # which are expanded to claims.
90
- #
90
+ #
91
91
  # See [OpenID Connect Core 1.0, 5.5. Requesting Claims using the "claims" Request Parameter](https://openid.net/specs/openid-connect-core-1_0.html#ClaimsParameter)
92
92
  # for `claims` request parameter, and see [OpenID Connect Core 1.0, 5.4. Requesting Claims using Scope Values](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims)
93
93
  # for the special scopes.
94
- #
94
+ #
95
95
  field :claims, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('claims') } }
96
96
  # This boolean value indicates whether the authentication of the end-user must be one of the ACRs (Authentication Context Class References) listed in `acrs` parameter.
97
97
  # This parameter becomes `true` only when (1) the authorization request contains `claims` request parameter and (2) `acr` claim is in it, and (3) `essential` property of
98
98
  # the `acr` claim is `true`. See [OpenID Connect Core 1.0, 5.5.1.1. Requesting the "acr" Claim](https://openid.net/specs/openid-connect-core-1_0.html#acrSemantics) for details.
99
- #
99
+ #
100
100
  field :acr_essential, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('acrEssential') } }
101
101
  # `true` if the value of the `client_id` request parameter included in the authorization request is the client ID alias.
102
102
  # `false` if the value is the original numeric client ID.
103
- #
103
+ #
104
104
  field :client_id_alias_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientIdAliasUsed') } }
105
105
  # The list of ACRs (Authentication Context Class References) one of which the client application requests to be satisfied for the authentication of the end-user.
106
106
  # This value comes from `acr_values` request parameter or `defaultAcrs` configuration parameter of the client application.
107
- #
107
+ #
108
108
  # See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), acr_values" for `acr_values`
109
109
  # request parameter, and see "[OpenID Connect Dynamic Client Registration 1.0, 2. Client Metadata](https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata),
110
110
  # default_acr_values" for `defaultAcrs` configuration parameter.
111
- #
111
+ #
112
112
  field :acrs, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('acrs') } }
113
113
  # The subject (= unique user ID managed by the authorization server implementation) that the client application expects to grant authorization.
114
114
  # The value comes from `sub` claim in `claims` request parameter.
115
- #
115
+ #
116
116
  field :subject, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('subject') } }
117
117
  # A hint about the login identifier of the end-user. The value comes from `login_hint` request parameter.
118
118
  field :login_hint, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('loginHint') } }
119
119
  # The list of values of prompt request parameter. See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), prompt" for prompt request parameter.
120
120
  field :prompts, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::Prompt)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('prompts') } }
121
121
  # The prompt that the UI displayed to the end-user must satisfy as the minimum level. This value comes from `prompt` request parameter.
122
- #
122
+ #
123
123
  # When the authorization request does not contain `prompt` request parameter, `CONSENT` is used as the default value.
124
- #
124
+ #
125
125
  # See "[OpenID Connect Core 1.0, 3.1.2.1. Authentication Request](https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest), prompt" for `prompt` request parameter.
126
- #
127
- field :lowest_prompt, Crystalline::Nilable.new(Models::Components::Prompt), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('lowestPrompt'), 'decoder': Utils.enum_from_string(Models::Components::Prompt, true) } }
126
+ #
127
+ field :lowest_prompt, Crystalline::Nilable.new(Models::Components::Prompt), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('lowestPrompt'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::Prompt, true) } }
128
128
  # The payload part of the request object. The value of this proprty is `null` if the authorization request does not include a request object.
129
- #
129
+ #
130
130
  field :request_object_payload, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requestObjectPayload') } }
131
131
  # The value of the `id_token` property in the claims request parameter or in the claims property in a request object.
132
- #
133
- # A client application may request certain claims be embedded in an ID token or in a response from the userInfo endpoint.
134
- # There are several ways. Including the `claims` request parameter and including the `claims` property in a request object are such examples.
135
- # In both the cases, the value of the `claims` parameter/property is JSON. Its format is described in [5.5. Requesting Claims using the "claims"
136
- # Request Parameter](https://openid.net/specs/openid-connect-core-1_0.html#ClaimsParameter).
137
- #
138
- # The following is an excerpt from the specification.
139
- # You can find `userinfo` and `id_token` are top-level properties.
140
- #
141
- # ```json
142
- # {
143
- # "userinfo":
144
- # {
145
- # "given_name": { "essential": true },
146
- # "nickname": null,
147
- # "email": { "essential": true },
148
- # "email_verified": { "essential": true },
149
- # "picture": null,
150
- # "http://example.info/claims/groups": null
151
- # },
152
- # "id_token":
153
- # {
154
- # "auth_time": { "essential": true },
155
- # "acr": { "values": [ "urn:mace:incommon:iap:silver" ] }
156
- # }
157
- # }
158
- # ```
159
- #
160
- # This value of this property is the value of the `id_token` property in JSON format.
161
- # For example, if the JSON above is included in an authorization request, this property holds JSON equivalent to the following.
162
- #
163
- # ```json
164
- # {
165
- # "auth_time": { "essential": true },
166
- # "acr": { "values": [ "urn:mace:incommon:iap:silver" ] }
167
- # }
168
- # ```
169
- #
170
- # Note that if a request object is given and it contains the `claims` property and if the `claims` request parameter is also given,
171
- # this property holds the former value.
172
- #
132
+ #
173
133
  field :id_token_claims, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('idTokenClaims') } }
174
134
  # The value of the `userinfo` property in the `claims` request parameter or in the `claims` property in a request object.
175
- #
176
- # A client application may request certain claims be embedded in an ID token or in a response from the userInfo endpoint.
177
- # There are several ways. Including the `claims` request parameter and including the `claims` property in a request object are such examples.
178
- # In both the cases, the value of the `claims` parameter/property is JSON. Its format is described in [5.5. Requesting Claims using the "claims"
179
- # Request Parameter](https://openid.net/specs/openid-connect-core-1_0.html#ClaimsParameter).
180
- #
181
- # The following is an excerpt from the specification. You can find `userinfo` and `id_token` are top-level properties.
182
- #
183
- # ```json
184
- # {
185
- # "userinfo":
186
- # {
187
- # "given_name": { "essential": true },
188
- # "nickname": null,
189
- # "email": { "essential": true },
190
- # "email_verified": { "essential": true },
191
- # "picture": null,
192
- # "http://example.info/claims/groups": null
193
- # },
194
- # "id_token":
195
- # {
196
- # "auth_time": { "essential": true },
197
- # "acr": { "values": [ "urn:mace:incommon:iap:silver" ] }
198
- # }
199
- # }
200
- # ````
201
- #
202
- # The value of this property is the value of the `userinfo` property in JSON format.
203
- # For example, if the JSON above is included in an authorization request, this property holds JSON equivalent to the following.
204
- #
205
- # ```json
206
- # {
207
- # "given_name": { "essential": true },
208
- # "nickname": null,
209
- # "email": { "essential": true },
210
- # "email_verified": { "essential": true },
211
- # "picture": null,
212
- # "http://example.info/claims/groups": null
213
- # }
214
- # ```
215
- #
216
- # Note that if a request object is given and it contains the `claims` property and if the `claims` request parameter is also given,
217
- # the value of this property holds the former value.
218
- #
135
+ #
219
136
  field :user_info_claims, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('userInfoClaims') } }
220
137
  # The resources specified by the `resource` request parameters or by the `resource` property in the request object.
221
138
  # If both are given, the values in the request object should be set. See "Resource Indicators for OAuth 2.0" for details.
222
- #
139
+ #
223
140
  field :resources, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resources') } }
224
141
  # The authorization details. This represents the value of the `authorization_details`
225
142
  # request parameter in the preceding device authorization request which is defined in
226
143
  # "OAuth 2.0 Rich Authorization Requests".
227
- #
144
+ #
228
145
  field :authorization_details, Crystalline::Nilable.new(Models::Components::AuthzDetails), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('authorizationDetails') } }
229
146
  # The `purpose` request parameter is defined in [9. Transaction-specific Purpose](https://openid.net/specs/openid-connect-4-identity-assurance-1_0.html#name-transaction-specific-purpos)
230
147
  # of [OpenID Connect for Identity Assurance 1.0](https://openid.net/specs/openid-connect-4-identity-assurance-1_0.html) as follows:
231
- #
148
+ #
232
149
  # > purpose: OPTIONAL. String describing the purpose for obtaining certain user data from the OP. The purpose MUST NOT be shorter than 3 characters and MUST NOT be longer than 300 characters.
233
150
  # If these rules are violated, the authentication request MUST fail and the OP returns an error invalid_request to the RP.
234
- #
151
+ #
235
152
  field :purpose, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('purpose') } }
236
153
  # The content that the authorization server implementation is to return to the client application.
237
154
  # Its format varies depending on the value of `action` parameter.
238
- #
155
+ #
239
156
  field :response_content, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('responseContent') } }
240
157
  # A ticket issued by Authlete to the service implementation. This is needed when the service
241
158
  # implementation calls either `/auth/authorization/fail` API or `/auth/authorization/issue`
242
159
  # API.
243
- #
160
+ #
244
161
  field :ticket, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('ticket') } }
245
162
  # The dynamic scopes which the client application requested by the scope request parameter.
246
- #
163
+ #
247
164
  field :dynamic_scopes, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::DynamicScope)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('dynamicScopes') } }
248
165
  # The grant management action of the device authorization request.
249
- #
166
+ #
250
167
  # The `grant_management_action` request parameter is defined in
251
168
  # [Grant Management for OAuth 2.0](https://openid.net/specs/fapi-grant-management.html).
252
- #
253
- field :gm_action, Crystalline::Nilable.new(Models::Components::GrantManagementAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('gmAction'), 'decoder': Utils.enum_from_string(Models::Components::GrantManagementAction, true) } }
169
+ #
170
+ field :gm_action, Crystalline::Nilable.new(Models::Components::GrantManagementAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('gmAction'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::GrantManagementAction, true) } }
254
171
  # the value of the `grant_id` request parameter of the device authorization request.
255
- #
172
+ #
256
173
  # The `grant_id` request parameter is defined in
257
174
  # [Grant Management for OAuth 2.0](https://openid.net/specs/fapi-grant-management.html)
258
175
  # , which is supported by Authlete 2.3 and newer versions.
259
- #
176
+ #
260
177
  field :grant_id, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grantId') } }
261
178
 
262
179
  field :grant, Crystalline::Nilable.new(Models::Components::Grant), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grant') } }
263
180
  # The subject identifying the user who has given the grant identified
264
- # by the `grant\_id` request parameter of the device authorization
181
+ # by the `grant_id` request parameter of the device authorization
265
182
  # request.
266
183
  # Authlete 2.3 and newer versions support [Grant Management
267
- # for OAuth 2.0](https://openid.net/specs/fapi-grant-management.html). An authorization request may contain a `grant\_id`
184
+ # for OAuth 2.0](https://openid.net/specs/fapi-grant-management.html). An authorization request may contain a `grant_id`
268
185
  # request parameter which is defined in the specification. If the value of
269
- # the request parameter is valid, {@link #getGrantSubject()} will return
186
+ # the request parameter is valid, {@link #getGrantSubject()} will return
270
187
  # the subject of the user who has given the grant to the client application.
271
188
  # Authorization server implementations may use the value returned from
272
- # {@link #getGrantSubject()} in order to determine the user to authenticate.
189
+ # {@link #getGrantSubject()} in order to determine the user to authenticate.
273
190
  # The user your system will authenticate during the authorization process
274
191
  # (or has already authenticated) may be different from the user of the
275
192
  # grant. The first implementer's draft of "Grant Management for OAuth 2.0"
@@ -277,49 +194,49 @@ module Authlete
277
194
  # left to implementations. Authlete will not perform the grant management
278
195
  # action when the `subject` passed to Authlete does not match the
279
196
  # user of the grant.
280
- #
197
+ #
281
198
  field :grant_subject, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('grantSubject') } }
282
199
  # Names of claims that are requested indirectly by *"transformed
283
200
  # claims"*.
284
201
  # A client application can request *"transformed claims"* by adding
285
202
  # names of transformed claims in the `claims` request parameter.
286
203
  # The following is an example of the `claims` request parameter
287
- # that requests a predefined transformed claim named `18\_or\_over`
288
- # and a transformed claim named `nationality\_usa` to be embedded
204
+ # that requests a predefined transformed claim named `18_or_over`
205
+ # and a transformed claim named `nationality_usa` to be embedded
289
206
  # in the response from the userinfo endpoint.
290
207
  # ```json
291
- # {
292
- # "transformed\_claims": {
293
- # "nationality\_usa": {
208
+ # {
209
+ # "transformed_claims": {
210
+ # "nationality_usa": {
294
211
  # "claim": "nationalities",
295
212
  # "fn": [
296
213
  # [ "eq", "USA" ],
297
214
  # "any"
298
215
  # ]
299
- # }
300
- # },
301
- # "userinfo": {
302
- # "::18\_or\_over": null,
303
- # ":nationality\_usa": null
304
- # }
305
- # }
216
+ # }
217
+ # },
218
+ # "userinfo": {
219
+ # "::18_or_over": null,
220
+ # ":nationality_usa": null
221
+ # }
222
+ # }
306
223
  # ```
307
- # The example above assumes that a transformed claim named `18\_or\_over`
224
+ # The example above assumes that a transformed claim named `18_or_over`
308
225
  # is predefined by the authorization server like below.
309
226
  # ```json
310
- # {
311
- # "18\_or\_over": {
227
+ # {
228
+ # "18_or_over": {
312
229
  # "claim": "birthdate",
313
230
  # "fn": [
314
- # "years\_ago",
231
+ # "years_ago",
315
232
  # [ "gte", 18 ]
316
233
  # ]
317
- # }
318
- # }
234
+ # }
235
+ # }
319
236
  # ```
320
237
  # In the example, the `nationalities` claim is requested indirectly
321
- # by the `nationality\_usa` transformed claim. Likewise, the
322
- # `birthdate` claim is requested indirectly by the `18\_or\_over`
238
+ # by the `nationality_usa` transformed claim. Likewise, the
239
+ # `birthdate` claim is requested indirectly by the `18_or_over`
323
240
  # transformed claim.
324
241
  # When the `claims` request parameter of an authorization request is
325
242
  # like the example above, this `requestedClaimsForTx` property will
@@ -332,54 +249,45 @@ module Authlete
332
249
  # request parameter when it calls the `/api/auth/userinfo/issue` API. The following
333
250
  # is an example of the value of the `claimsForTx` request parameter.
334
251
  # ```json
335
- # {
252
+ # {
336
253
  # "birthdate": "1970-01-23",
337
254
  # "nationalities": [ "DEU", "USA" ]
338
- # }
255
+ # }
339
256
  # ```
340
- #
257
+ #
341
258
  field :requested_claims_for_tx, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requestedClaimsForTx') } }
342
259
  # Names of verified claims that will be referenced when transformed claims are computed.
343
- #
260
+ #
344
261
  field :requested_verified_claims_for_tx, Crystalline::Nilable.new(Crystalline::Array.new(Crystalline::Array.new(::String))), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('requestedVerifiedClaimsForTx') } }
345
262
  # the value of the `transformed_claims` property in the `claims` request
346
263
  # parameter of an authorization request or in the `claims` property in a
347
264
  # request object.
348
- #
265
+ #
349
266
  field :transformed_claims, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('transformedClaims') } }
350
267
  # Flag which indicates whether the entity ID of the client was used when the request for the access token was made.
351
- #
268
+ #
352
269
  field :client_entity_id_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('clientEntityIdUsed') } }
353
270
  # The list of claims that the client application requests to be
354
271
  # embedded in userinfo responses. The value comes from the `"scope"`
355
272
  # and `"claims"` request parameters of the original authorization
356
273
  # request.
357
- #
274
+ #
358
275
  field :claims_at_user_info, Crystalline::Nilable.new(Crystalline::Array.new(::String)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('claimsAtUserInfo') } }
359
276
 
360
277
  field :credential_offer_info, Crystalline::Nilable.new(Models::Components::CredentialOfferInfo), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('credentialOfferInfo') } }
361
278
  # The information about the **issuable credentials** that can
362
279
  # be obtained by presenting the access token that will be issued as a
363
280
  # result of the authorization request.
364
- #
281
+ #
365
282
  field :issuable_credentials, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('issuableCredentials') } }
366
283
  # Flag which indicates whether [Native SSO](https://openid.net/specs/openid-connect-native-sso-1_0.html)
367
284
  # is requested. This property should be set to `true` when all the following conditions are satisfied:
368
- #
369
- # - The service supports Native SSO (see `nativeSsoSupported` property of Service).
370
- # - The service supports the `openid` and `device_sso` scopes.
371
- # - The client is allowed to request the `openid` and `device_sso` scopes.
372
- # - The authorization request includes the `openid` and `device_sso` scopes.
373
- # - The authorization request's `response_type` includes `code`.
374
- #
375
- # NOTE: If this property is set to `true`, the `sessionId` request parameter must be provided
376
- # to the `/auth/authorization/issue` API.
377
- #
285
+ #
378
286
  field :native_sso_requested, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('nativeSsoRequested') } }
379
287
  # Flag indicating whether a metadata document was used to resolve client metadata for this request.
380
- #
288
+ #
381
289
  # When `true`, the client metadata was retrieved via the CIMD mechanism rather than from the Authlete database.
382
- #
290
+ #
383
291
  field :metadata_document_used, Crystalline::Nilable.new(Crystalline::Boolean.new), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('metadataDocumentUsed') } }
384
292
 
385
293
  sig { params(result_code: T.nilable(::String), result_message: T.nilable(::String), action: T.nilable(Models::Components::AuthorizationResponseAction), client: T.nilable(Models::Components::ClientLimitedAuthorization), display: T.nilable(Models::Components::Display), max_age: T.nilable(::Integer), service: T.nilable(Models::Components::Service), scopes: T.nilable(T::Array[Models::Components::Scope]), ui_locales: T.nilable(T::Array[::String]), claims_locales: T.nilable(T::Array[::String]), claims: T.nilable(T::Array[::String]), acr_essential: T.nilable(T::Boolean), client_id_alias_used: T.nilable(T::Boolean), acrs: T.nilable(T::Array[::String]), subject: T.nilable(::String), login_hint: T.nilable(::String), prompts: T.nilable(T::Array[Models::Components::Prompt]), lowest_prompt: T.nilable(Models::Components::Prompt), request_object_payload: T.nilable(::String), id_token_claims: T.nilable(::String), user_info_claims: T.nilable(::String), resources: T.nilable(T::Array[::String]), authorization_details: T.nilable(Models::Components::AuthzDetails), purpose: T.nilable(::String), response_content: T.nilable(::String), ticket: T.nilable(::String), dynamic_scopes: T.nilable(T::Array[Models::Components::DynamicScope]), gm_action: T.nilable(Models::Components::GrantManagementAction), grant_id: T.nilable(::String), grant: T.nilable(Models::Components::Grant), grant_subject: T.nilable(::String), requested_claims_for_tx: T.nilable(T::Array[::String]), requested_verified_claims_for_tx: T.nilable(T::Array[T::Array[::String]]), transformed_claims: T.nilable(::String), client_entity_id_used: T.nilable(T::Boolean), claims_at_user_info: T.nilable(T::Array[::String]), credential_offer_info: T.nilable(Models::Components::CredentialOfferInfo), issuable_credentials: T.nilable(::String), native_sso_requested: T.nilable(T::Boolean), metadata_document_used: T.nilable(T::Boolean)).void }
@@ -88,4 +88,4 @@ class Authlete::Models::Components::AuthorizationResponse
88
88
  def native_sso_requested=(str_); end
89
89
  def metadata_document_used(); end
90
90
  def metadata_document_used=(str_); end
91
- end
91
+ end
@@ -8,4 +8,4 @@ end
8
8
 
9
9
 
10
10
  class Authlete::Models::Components::AuthorizationResponseAction
11
- end
11
+ end
@@ -13,7 +13,7 @@ module Authlete
13
13
  include Crystalline::MetadataFields
14
14
 
15
15
  # The arbitrary text attached to the ticket.
16
- #
16
+ #
17
17
  field :context, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('context') } }
18
18
 
19
19
  sig { params(context: T.nilable(::String)).void }
@@ -10,4 +10,4 @@ end
10
10
  class Authlete::Models::Components::AuthorizationTicketInfo
11
11
  def context(); end
12
12
  def context=(str_); end
13
- end
13
+ end
@@ -10,4 +10,4 @@ end
10
10
  class Authlete::Models::Components::AuthorizationTicketInfoRequest
11
11
  def ticket(); end
12
12
  def ticket=(str_); end
13
- end
13
+ end
@@ -15,7 +15,7 @@ module Authlete
15
15
 
16
16
  field :info, Crystalline::Nilable.new(Models::Components::AuthorizationTicketInfo), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('info') } }
17
17
  # The result of the `/auth/authorization/ticket/info` API call.
18
- field :action, Crystalline::Nilable.new(Models::Components::AuthorizationTicketInfoResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::AuthorizationTicketInfoResponseAction, true) } }
18
+ field :action, Crystalline::Nilable.new(Models::Components::AuthorizationTicketInfoResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::AuthorizationTicketInfoResponseAction, true) } }
19
19
  # The code which represents the result of the API call.
20
20
  field :result_code, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultCode') } }
21
21
  # A short message which explains the result of the API call.
@@ -16,4 +16,4 @@ class Authlete::Models::Components::AuthorizationTicketInfoResponse
16
16
  def result_code=(str_); end
17
17
  def result_message(); end
18
18
  def result_message=(str_); end
19
- end
19
+ end
@@ -8,4 +8,4 @@ end
8
8
 
9
9
 
10
10
  class Authlete::Models::Components::AuthorizationTicketInfoResponseAction
11
- end
11
+ end
@@ -12,4 +12,4 @@ class Authlete::Models::Components::AuthorizationTicketUpdateRequest
12
12
  def ticket=(str_); end
13
13
  def info(); end
14
14
  def info=(str_); end
15
- end
15
+ end
@@ -15,7 +15,7 @@ module Authlete
15
15
 
16
16
  field :info, Crystalline::Nilable.new(Models::Components::AuthorizationTicketInfo), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('info') } }
17
17
  # The result of the /auth/authorization/ticket/info API call.
18
- field :action, Crystalline::Nilable.new(Models::Components::AuthorizationTicketUpdateResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': Utils.enum_from_string(Models::Components::AuthorizationTicketUpdateResponseAction, true) } }
18
+ field :action, Crystalline::Nilable.new(Models::Components::AuthorizationTicketUpdateResponseAction), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('action'), 'decoder': ::Authlete::Utils.enum_from_string(Models::Components::AuthorizationTicketUpdateResponseAction, true) } }
19
19
  # The code which represents the result of the API call.
20
20
  field :result_code, Crystalline::Nilable.new(::String), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('resultCode') } }
21
21
  # A short message which explains the result of the API call.
@@ -16,4 +16,4 @@ class Authlete::Models::Components::AuthorizationTicketUpdateResponse
16
16
  def result_code=(str_); end
17
17
  def result_message(); end
18
18
  def result_message=(str_); end
19
- end
19
+ end
@@ -8,4 +8,4 @@ end
8
8
 
9
9
 
10
10
  class Authlete::Models::Components::AuthorizationTicketUpdateResponseAction
11
- end
11
+ end
@@ -10,13 +10,13 @@ module Authlete
10
10
  # The authorization details. This represents the value of the `authorization_details`
11
11
  # request parameter in the preceding device authorization request which is defined in
12
12
  # "OAuth 2.0 Rich Authorization Requests".
13
- #
13
+ #
14
14
  class AuthzDetails
15
15
  extend T::Sig
16
16
  include Crystalline::MetadataFields
17
17
 
18
18
  # Elements of this authorization details.
19
- #
19
+ #
20
20
  field :elements, Crystalline::Nilable.new(Crystalline::Array.new(Models::Components::AuthorizationDetailsElement)), { 'format_json': { 'letter_case': ::Authlete::Utils.field_name('elements') } }
21
21
 
22
22
  sig { params(elements: T.nilable(T::Array[Models::Components::AuthorizationDetailsElement])).void }
@@ -10,4 +10,4 @@ end
10
10
  class Authlete::Models::Components::AuthzDetails
11
11
  def elements(); end
12
12
  def elements=(str_); end
13
- end
13
+ end