ory-hydra-client 0.0.0.alpha63 → 1.2.0.alpha2

data/lib/ory-hydra-client/api/public_api.rb

@@ -3,10 +3,10 @@
 
 #Welcome to the ORY Hydra HTTP API documentation. You will find documentation for all HTTP APIs here.
 
-The version of the OpenAPI document: v0.0.0-alpha.63
+The version of the OpenAPI document: latest
 
 Generated by: https://openapi-generator.tech
-OpenAPI Generator version: 4.3.1
+OpenAPI Generator version: 4.2.2
 
 =end
 
@@ -19,7 +19,7 @@ module OryHydraClient
     def initialize(api_client = ApiClient.default)
       @api_client = api_client
     end
-    # OpenID Connect Front-Backchannel Enabled Logout
+    # OpenID Connect Front-Backchannel enabled Logout
     # This endpoint initiates and completes user logout at ORY Hydra and initiates OpenID Connect Front-/Back-channel logout:  https://openid.net/specs/openid-connect-frontchannel-1_0.html https://openid.net/specs/openid-connect-backchannel-1_0.html
     # @param [Hash] opts the optional parameters
     # @return [nil]
@@ -28,7 +28,7 @@ module OryHydraClient
       nil
     end
 
-    # OpenID Connect Front-Backchannel Enabled Logout
+    # OpenID Connect Front-Backchannel enabled Logout
     # This endpoint initiates and completes user logout at ORY Hydra and initiates OpenID Connect Front-/Back-channel logout:  https://openid.net/specs/openid-connect-frontchannel-1_0.html https://openid.net/specs/openid-connect-backchannel-1_0.html
     # @param [Hash] opts the optional parameters
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
@@ -129,7 +129,7 @@ module OryHydraClient
       return data, status_code, headers
     end
 
-    # Check Readiness Status
+    # Check readiness status
     # This endpoint returns a 200 status code when the HTTP server is up running and the environment dependencies (e.g. the database) are responsive as well.  If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set.  Be aware that if you are running multiple nodes of this service, the health status will never refer to the cluster state, only to a single instance.
     # @param [Hash] opts the optional parameters
     # @return [HealthStatus]
@@ -138,7 +138,7 @@ module OryHydraClient
       data
     end
 
-    # Check Readiness Status
+    # Check readiness status
     # This endpoint returns a 200 status code when the HTTP server is up running and the environment dependencies (e.g. the database) are responsive as well.  If the service supports TLS Edge Termination, this endpoint does not require the &#x60;X-Forwarded-Proto&#x60; header to be set.  Be aware that if you are running multiple nodes of this service, the health status will never refer to the cluster state, only to a single instance.
     # @param [Hash] opts the optional parameters
     # @return [Array<(HealthStatus, Integer, Hash)>] HealthStatus data, response status code and response headers
@@ -185,7 +185,7 @@ module OryHydraClient
       return data, status_code, headers
     end
 
-    # The OAuth 2.0 Token Endpoint
+    # The OAuth 2.0 token endpoint
     # The client makes a request to the token endpoint by sending the following parameters using the \"application/x-www-form-urlencoded\" HTTP request entity-body.  > Do not implement a client for this endpoint yourself. Use a library. There are many libraries > available for any programming language. You can find a list of libraries here: https://oauth.net/code/ > > Do note that Hydra SDK does not implement this endpoint properly. Use one of the libraries listed above!
     # @param grant_type [String] 
     # @param [Hash] opts the optional parameters
@@ -199,7 +199,7 @@ module OryHydraClient
       data
     end
 
-    # The OAuth 2.0 Token Endpoint
+    # The OAuth 2.0 token endpoint
     # The client makes a request to the token endpoint by sending the following parameters using the \&quot;application/x-www-form-urlencoded\&quot; HTTP request entity-body.  &gt; Do not implement a client for this endpoint yourself. Use a library. There are many libraries &gt; available for any programming language. You can find a list of libraries here: https://oauth.net/code/ &gt; &gt; Do note that Hydra SDK does not implement this endpoint properly. Use one of the libraries listed above!
     # @param grant_type [String] 
     # @param [Hash] opts the optional parameters
@@ -262,7 +262,7 @@ module OryHydraClient
       return data, status_code, headers
     end
 
-    # The OAuth 2.0 Authorize Endpoint
+    # The OAuth 2.0 authorize endpoint
     # This endpoint is not documented here because you should never use your own implementation to perform OAuth2 flows. OAuth2 is a very popular protocol and a library for your programming language will exists.  To learn more about this flow please refer to the specification: https://tools.ietf.org/html/rfc6749
     # @param [Hash] opts the optional parameters
     # @return [nil]
@@ -271,7 +271,7 @@ module OryHydraClient
       nil
     end
 
-    # The OAuth 2.0 Authorize Endpoint
+    # The OAuth 2.0 authorize endpoint
     # This endpoint is not documented here because you should never use your own implementation to perform OAuth2 flows. OAuth2 is a very popular protocol and a library for your programming language will exists.  To learn more about this flow please refer to the specification: https://tools.ietf.org/html/rfc6749
     # @param [Hash] opts the optional parameters
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
@@ -318,7 +318,7 @@ module OryHydraClient
       return data, status_code, headers
     end
 
-    # Revoke OAuth2 Tokens
+    # Revoke OAuth2 tokens
     # Revoking a token (both access and refresh) means that the tokens will be invalid. A revoked access token can no longer be used to make access requests, and a revoked refresh token can no longer be used to refresh an access token. Revoking a refresh token also invalidates the access token that was created with it. A token may only be revoked by the client the token was generated for.
     # @param token [String] 
     # @param [Hash] opts the optional parameters
@@ -328,7 +328,7 @@ module OryHydraClient
       nil
     end
 
-    # Revoke OAuth2 Tokens
+    # Revoke OAuth2 tokens
     # Revoking a token (both access and refresh) means that the tokens will be invalid. A revoked access token can no longer be used to make access requests, and a revoked refresh token can no longer be used to refresh an access token. Revoking a refresh token also invalidates the access token that was created with it. A token may only be revoked by the client the token was generated for.
     # @param token [String] 
     # @param [Hash] opts the optional parameters

data/lib/ory-hydra-client/api_client.rb

@@ -3,10 +3,10 @@
 
 #Welcome to the ORY Hydra HTTP API documentation. You will find documentation for all HTTP APIs here.
 
-The version of the OpenAPI document: v0.0.0-alpha.63
+The version of the OpenAPI document: latest
 
 Generated by: https://openapi-generator.tech
-OpenAPI Generator version: 4.3.1
+OpenAPI Generator version: 4.2.2
 
 =end
 
@@ -269,13 +269,11 @@ module OryHydraClient
         tempfile.write(chunk)
       end
       request.on_complete do |response|
-        if tempfile
-          tempfile.close
-          @config.logger.info "Temp file written to #{tempfile.path}, please copy the file to a proper folder "\
-                              "with e.g. `FileUtils.cp(tempfile.path, '/new/file/path')` otherwise the temp file "\
-                              "will be deleted automatically with GC. It's also recommended to delete the temp file "\
-                              "explicitly with `tempfile.delete`"
-        end
+        tempfile.close if tempfile
+        @config.logger.info "Temp file written to #{tempfile.path}, please copy the file to a proper folder "\
+                            "with e.g. `FileUtils.cp(tempfile.path, '/new/file/path')` otherwise the temp file "\
+                            "will be deleted automatically with GC. It's also recommended to delete the temp file "\
+                            "explicitly with `tempfile.delete`"
       end
     end
 

data/lib/ory-hydra-client/api_error.rb

@@ -3,10 +3,10 @@
 
 #Welcome to the ORY Hydra HTTP API documentation. You will find documentation for all HTTP APIs here.
 
-The version of the OpenAPI document: v0.0.0-alpha.63
+The version of the OpenAPI document: latest
 
 Generated by: https://openapi-generator.tech
-OpenAPI Generator version: 4.3.1
+OpenAPI Generator version: 4.2.2
 
 =end
 

data/lib/ory-hydra-client/configuration.rb

@@ -3,10 +3,10 @@
 
 #Welcome to the ORY Hydra HTTP API documentation. You will find documentation for all HTTP APIs here.
 
-The version of the OpenAPI document: v0.0.0-alpha.63
+The version of the OpenAPI document: latest
 
 Generated by: https://openapi-generator.tech
-OpenAPI Generator version: 4.3.1
+OpenAPI Generator version: 4.2.2
 
 =end
 

data/lib/ory-hydra-client/models/accept_consent_request.rb

@@ -3,10 +3,10 @@
 
 #Welcome to the ORY Hydra HTTP API documentation. You will find documentation for all HTTP APIs here.
 
-The version of the OpenAPI document: v0.0.0-alpha.63
+The version of the OpenAPI document: latest
 
 Generated by: https://openapi-generator.tech
-OpenAPI Generator version: 4.3.1
+OpenAPI Generator version: 4.2.2
 
 =end
 
@@ -14,12 +14,12 @@ require 'date'
 
 module OryHydraClient
   class AcceptConsentRequest
+    # GrantedAudience sets the audience the user authorized the client to use. Should be a subset of `requested_access_token_audience`.
     attr_accessor :grant_access_token_audience
 
+    # GrantScope sets the scope the user authorized the client to use. Should be a subset of `requested_scope`.
     attr_accessor :grant_scope
 
-    attr_accessor :handled_at
-
     # Remember, if set to true, tells ORY Hydra to remember this consent authorization and reuse it if the same client asks the same user for the same, or a subset of, scope.
     attr_accessor :remember
 
@@ -33,7 +33,6 @@ module OryHydraClient
       {
         :'grant_access_token_audience' => :'grant_access_token_audience',
         :'grant_scope' => :'grant_scope',
-        :'handled_at' => :'handled_at',
         :'remember' => :'remember',
         :'remember_for' => :'remember_for',
         :'session' => :'session'
@@ -45,7 +44,6 @@ module OryHydraClient
       {
         :'grant_access_token_audience' => :'Array<String>',
         :'grant_scope' => :'Array<String>',
-        :'handled_at' => :'DateTime',
         :'remember' => :'Boolean',
         :'remember_for' => :'Integer',
         :'session' => :'ConsentRequestSession'
@@ -85,10 +83,6 @@ module OryHydraClient
         end
       end
 
-      if attributes.key?(:'handled_at')
-        self.handled_at = attributes[:'handled_at']
-      end
-
       if attributes.key?(:'remember')
         self.remember = attributes[:'remember']
       end
@@ -122,7 +116,6 @@ module OryHydraClient
       self.class == o.class &&
           grant_access_token_audience == o.grant_access_token_audience &&
           grant_scope == o.grant_scope &&
-          handled_at == o.handled_at &&
           remember == o.remember &&
           remember_for == o.remember_for &&
           session == o.session
@@ -137,7 +130,7 @@ module OryHydraClient
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [grant_access_token_audience, grant_scope, handled_at, remember, remember_for, session].hash
+      [grant_access_token_audience, grant_scope, remember, remember_for, session].hash
     end
 
     # Builds the object from hash

data/lib/ory-hydra-client/models/accept_login_request.rb

@@ -3,10 +3,10 @@
 
 #Welcome to the ORY Hydra HTTP API documentation. You will find documentation for all HTTP APIs here.
 
-The version of the OpenAPI document: v0.0.0-alpha.63
+The version of the OpenAPI document: latest
 
 Generated by: https://openapi-generator.tech
-OpenAPI Generator version: 4.3.1
+OpenAPI Generator version: 4.2.2
 
 =end
 
@@ -17,6 +17,7 @@ module OryHydraClient
     # ACR sets the Authentication AuthorizationContext Class Reference value for this authentication session. You can use it to express that, for example, a user authenticated using two factor authentication.
     attr_accessor :acr
 
+    # Context is an optional object which can hold arbitrary data. The data will be made available when fetching the consent request under the \"context\" field. This is useful in scenarios where login and consent endpoints share data.
     attr_accessor :context
 
     # ForceSubjectIdentifier forces the \"pairwise\" user ID of the end-user that authenticated. The \"pairwise\" user ID refers to the (Pairwise Identifier Algorithm)[http://openid.net/specs/openid-connect-core-1_0.html#PairwiseAlg] of the OpenID Connect specification. It allows you to set an obfuscated subject (\"user\") identifier that is unique to the client.  Please note that this changes the user ID on endpoint /userinfo and sub claim of the ID Token. It does not change the sub claim in the OAuth 2.0 Introspection.  Per default, ORY Hydra handles this value with its own algorithm. In case you want to set this yourself you can use this field. Please note that setting this field has no effect if `pairwise` is not configured in ORY Hydra or the OAuth 2.0 Client does not expect a pairwise identifier (set via `subject_type` key in the client's configuration).  Please also be aware that ORY Hydra is unable to properly compute this value during authentication. This implies that you have to compute this value on every authentication process (probably depending on the client ID or some other unique value).  If you fail to compute the proper value, then authentication processes which have id_token_hint set might fail.
@@ -47,7 +48,7 @@ module OryHydraClient
     def self.openapi_types
       {
         :'acr' => :'String',
-        :'context' => :'Object',
+        :'context' => :'Hash<String, Object>',
         :'force_subject_identifier' => :'String',
         :'remember' => :'Boolean',
         :'remember_for' => :'Integer',
@@ -81,7 +82,9 @@ module OryHydraClient
       end
 
       if attributes.key?(:'context')
-        self.context = attributes[:'context']
+        if (value = attributes[:'context']).is_a?(Hash)
+          self.context = value
+        end
       end
 
       if attributes.key?(:'force_subject_identifier')

data/lib/ory-hydra-client/models/{plugin_config_rootfs.rb → attribute_type_and_value.rb}

@@ -3,37 +3,36 @@
 
 #Welcome to the ORY Hydra HTTP API documentation. You will find documentation for all HTTP APIs here.
 
-The version of the OpenAPI document: v0.0.0-alpha.63
+The version of the OpenAPI document: latest
 
 Generated by: https://openapi-generator.tech
-OpenAPI Generator version: 4.3.1
+OpenAPI Generator version: 4.2.2
 
 =end
 
 require 'date'
 
 module OryHydraClient
-  # PluginConfigRootfs plugin config rootfs
-  class PluginConfigRootfs
-    # diff ids
-    attr_accessor :diff_ids
-
-    # type
+  # AttributeTypeAndValue AttributeTypeAndValue AttributeTypeAndValue AttributeTypeAndValue mirrors the ASN.1 structure of the same name in RFC 5280, Section 4.1.2.4.
+  class AttributeTypeAndValue
     attr_accessor :type
 
+    # value
+    attr_accessor :value
+
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
-        :'diff_ids' => :'diff_ids',
-        :'type' => :'type'
+        :'type' => :'Type',
+        :'value' => :'Value'
       }
     end
 
     # Attribute type mapping.
     def self.openapi_types
       {
-        :'diff_ids' => :'Array<String>',
-        :'type' => :'String'
+        :'type' => :'Array<Integer>',
+        :'value' => :'Object'
       }
     end
 
@@ -47,25 +46,25 @@ module OryHydraClient
     # @param [Hash] attributes Model attributes in the form of hash
     def initialize(attributes = {})
       if (!attributes.is_a?(Hash))
-        fail ArgumentError, "The input argument (attributes) must be a hash in `OryHydraClient::PluginConfigRootfs` initialize method"
+        fail ArgumentError, "The input argument (attributes) must be a hash in `OryHydraClient::AttributeTypeAndValue` initialize method"
       end
 
       # check to see if the attribute exists and convert string to symbol for hash key
       attributes = attributes.each_with_object({}) { |(k, v), h|
         if (!self.class.attribute_map.key?(k.to_sym))
-          fail ArgumentError, "`#{k}` is not a valid attribute in `OryHydraClient::PluginConfigRootfs`. Please check the name to make sure it's valid. List of attributes: " + self.class.attribute_map.keys.inspect
+          fail ArgumentError, "`#{k}` is not a valid attribute in `OryHydraClient::AttributeTypeAndValue`. Please check the name to make sure it's valid. List of attributes: " + self.class.attribute_map.keys.inspect
         end
         h[k.to_sym] = v
       }
 
-      if attributes.key?(:'diff_ids')
-        if (value = attributes[:'diff_ids']).is_a?(Array)
-          self.diff_ids = value
+      if attributes.key?(:'type')
+        if (value = attributes[:'type']).is_a?(Array)
+          self.type = value
         end
       end
 
-      if attributes.key?(:'type')
-        self.type = attributes[:'type']
+      if attributes.key?(:'value')
+        self.value = attributes[:'value']
       end
     end
 
@@ -87,8 +86,8 @@ module OryHydraClient
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
-          diff_ids == o.diff_ids &&
-          type == o.type
+          type == o.type &&
+          value == o.value
     end
 
     # @see the `==` method
@@ -100,7 +99,7 @@ module OryHydraClient
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [diff_ids, type].hash
+      [type, value].hash
     end
 
     # Builds the object from hash

data/lib/ory-hydra-client/models/certificate.rb

@@ -0,0 +1,683 @@
+=begin
+#ORY Hydra
+
+#Welcome to the ORY Hydra HTTP API documentation. You will find documentation for all HTTP APIs here.
+
+The version of the OpenAPI document: latest
+
+Generated by: https://openapi-generator.tech
+OpenAPI Generator version: 4.2.2
+
+=end
+
+require 'date'
+
+module OryHydraClient
+  class Certificate
+    # authority key Id
+    attr_accessor :authority_key_id
+
+    # BasicConstraintsValid indicates whether IsCA, MaxPathLen, and MaxPathLenZero are valid.
+    attr_accessor :basic_constraints_valid
+
+    # CRL Distribution Points
+    attr_accessor :crl_distribution_points
+
+    # Subject Alternate Name values. (Note that these values may not be valid if invalid values were contained within a parsed certificate. For example, an element of DNSNames may not be a valid DNS domain name.)
+    attr_accessor :dns_names
+
+    # email addresses
+    attr_accessor :email_addresses
+
+    # excluded DNS domains
+    attr_accessor :excluded_dns_domains
+
+    # excluded email addresses
+    attr_accessor :excluded_email_addresses
+
+    # excluded IP ranges
+    attr_accessor :excluded_ip_ranges
+
+    # excluded URI domains
+    attr_accessor :excluded_uri_domains
+
+    # ext key usage
+    attr_accessor :ext_key_usage
+
+    # Extensions contains raw X.509 extensions. When parsing certificates, this can be used to extract non-critical extensions that are not parsed by this package. When marshaling certificates, the Extensions field is ignored, see ExtraExtensions.
+    attr_accessor :extensions
+
+    # ExtraExtensions contains extensions to be copied, raw, into any marshaled certificates. Values override any extensions that would otherwise be produced based on the other fields. The ExtraExtensions field is not populated when parsing certificates, see Extensions.
+    attr_accessor :extra_extensions
+
+    # IP addresses
+    attr_accessor :ip_addresses
+
+    # is c a
+    attr_accessor :is_ca
+
+    attr_accessor :issuer
+
+    # issuing certificate URL
+    attr_accessor :issuing_certificate_url
+
+    # KeyUsage KeyUsage KeyUsage KeyUsage represents the set of actions that are valid for a given key. It's a bitmap of the KeyUsage* constants.
+    attr_accessor :key_usage
+
+    # MaxPathLen and MaxPathLenZero indicate the presence and value of the BasicConstraints' \"pathLenConstraint\".  When parsing a certificate, a positive non-zero MaxPathLen means that the field was specified, -1 means it was unset, and MaxPathLenZero being true mean that the field was explicitly set to zero. The case of MaxPathLen==0 with MaxPathLenZero==false should be treated equivalent to -1 (unset).  When generating a certificate, an unset pathLenConstraint can be requested with either MaxPathLen == -1 or using the zero value for both MaxPathLen and MaxPathLenZero.
+    attr_accessor :max_path_len
+
+    # MaxPathLenZero indicates that BasicConstraintsValid==true and MaxPathLen==0 should be interpreted as an actual maximum path length of zero. Otherwise, that combination is interpreted as MaxPathLen not being set.
+    attr_accessor :max_path_len_zero
+
+    # not before Format: date-time Format: date-time Format: date-time
+    attr_accessor :not_before
+
+    # RFC 5280, 4.2.2.1 (Authority Information Access)
+    attr_accessor :ocsp_server
+
+    # permitted DNS domains
+    attr_accessor :permitted_dns_domains
+
+    # Name constraints
+    attr_accessor :permitted_dns_domains_critical
+
+    # permitted email addresses
+    attr_accessor :permitted_email_addresses
+
+    # permitted IP ranges
+    attr_accessor :permitted_ip_ranges
+
+    # permitted URI domains
+    attr_accessor :permitted_uri_domains
+
+    # policy identifiers
+    attr_accessor :policy_identifiers
+
+    # public key
+    attr_accessor :public_key
+
+    # PublicKeyAlgorithm PublicKeyAlgorithm PublicKeyAlgorithm public key algorithm
+    attr_accessor :public_key_algorithm
+
+    # raw
+    attr_accessor :raw
+
+    # raw issuer
+    attr_accessor :raw_issuer
+
+    # raw subject
+    attr_accessor :raw_subject
+
+    # raw subject public key info
+    attr_accessor :raw_subject_public_key_info
+
+    # raw t b s certificate
+    attr_accessor :raw_tbs_certificate
+
+    # Operations always take pointer arguments (*Int) rather than Int values, and each unique Int value requires its own unique *Int pointer. To \"copy\" an Int value, an existing (or newly allocated) Int must be set to a new value using the Int.Set method; shallow copies of Ints are not supported and may lead to errors.
+    attr_accessor :serial_number
+
+    # signature
+    attr_accessor :signature
+
+    # SignatureAlgorithm SignatureAlgorithm SignatureAlgorithm signature algorithm
+    attr_accessor :signature_algorithm
+
+    attr_accessor :subject
+
+    # subject key Id
+    attr_accessor :subject_key_id
+
+    # u r is
+    attr_accessor :ur_is
+
+    # UnhandledCriticalExtensions contains a list of extension IDs that were not (fully) processed when parsing. Verify will fail if this slice is non-empty, unless verification is delegated to an OS library which understands all the critical extensions.  Users can access these extensions using Extensions and can remove elements from this slice if they believe that they have been handled.
+    attr_accessor :unhandled_critical_extensions
+
+    # unknown ext key usage
+    attr_accessor :unknown_ext_key_usage
+
+    # version
+    attr_accessor :version
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    def self.attribute_map
+      {
+        :'authority_key_id' => :'AuthorityKeyId',
+        :'basic_constraints_valid' => :'BasicConstraintsValid',
+        :'crl_distribution_points' => :'CRLDistributionPoints',
+        :'dns_names' => :'DNSNames',
+        :'email_addresses' => :'EmailAddresses',
+        :'excluded_dns_domains' => :'ExcludedDNSDomains',
+        :'excluded_email_addresses' => :'ExcludedEmailAddresses',
+        :'excluded_ip_ranges' => :'ExcludedIPRanges',
+        :'excluded_uri_domains' => :'ExcludedURIDomains',
+        :'ext_key_usage' => :'ExtKeyUsage',
+        :'extensions' => :'Extensions',
+        :'extra_extensions' => :'ExtraExtensions',
+        :'ip_addresses' => :'IPAddresses',
+        :'is_ca' => :'IsCA',
+        :'issuer' => :'Issuer',
+        :'issuing_certificate_url' => :'IssuingCertificateURL',
+        :'key_usage' => :'KeyUsage',
+        :'max_path_len' => :'MaxPathLen',
+        :'max_path_len_zero' => :'MaxPathLenZero',
+        :'not_before' => :'NotBefore',
+        :'ocsp_server' => :'OCSPServer',
+        :'permitted_dns_domains' => :'PermittedDNSDomains',
+        :'permitted_dns_domains_critical' => :'PermittedDNSDomainsCritical',
+        :'permitted_email_addresses' => :'PermittedEmailAddresses',
+        :'permitted_ip_ranges' => :'PermittedIPRanges',
+        :'permitted_uri_domains' => :'PermittedURIDomains',
+        :'policy_identifiers' => :'PolicyIdentifiers',
+        :'public_key' => :'PublicKey',
+        :'public_key_algorithm' => :'PublicKeyAlgorithm',
+        :'raw' => :'Raw',
+        :'raw_issuer' => :'RawIssuer',
+        :'raw_subject' => :'RawSubject',
+        :'raw_subject_public_key_info' => :'RawSubjectPublicKeyInfo',
+        :'raw_tbs_certificate' => :'RawTBSCertificate',
+        :'serial_number' => :'SerialNumber',
+        :'signature' => :'Signature',
+        :'signature_algorithm' => :'SignatureAlgorithm',
+        :'subject' => :'Subject',
+        :'subject_key_id' => :'SubjectKeyId',
+        :'ur_is' => :'URIs',
+        :'unhandled_critical_extensions' => :'UnhandledCriticalExtensions',
+        :'unknown_ext_key_usage' => :'UnknownExtKeyUsage',
+        :'version' => :'Version'
+      }
+    end
+
+    # Attribute type mapping.
+    def self.openapi_types
+      {
+        :'authority_key_id' => :'Array<Integer>',
+        :'basic_constraints_valid' => :'Boolean',
+        :'crl_distribution_points' => :'Array<String>',
+        :'dns_names' => :'Array<String>',
+        :'email_addresses' => :'Array<String>',
+        :'excluded_dns_domains' => :'Array<String>',
+        :'excluded_email_addresses' => :'Array<String>',
+        :'excluded_ip_ranges' => :'Array<IPNet>',
+        :'excluded_uri_domains' => :'Array<String>',
+        :'ext_key_usage' => :'Array<Integer>',
+        :'extensions' => :'Array<Extension>',
+        :'extra_extensions' => :'Array<Extension>',
+        :'ip_addresses' => :'Array<Array>',
+        :'is_ca' => :'Boolean',
+        :'issuer' => :'Name',
+        :'issuing_certificate_url' => :'Array<String>',
+        :'key_usage' => :'Integer',
+        :'max_path_len' => :'Integer',
+        :'max_path_len_zero' => :'Boolean',
+        :'not_before' => :'DateTime',
+        :'ocsp_server' => :'Array<String>',
+        :'permitted_dns_domains' => :'Array<String>',
+        :'permitted_dns_domains_critical' => :'Boolean',
+        :'permitted_email_addresses' => :'Array<String>',
+        :'permitted_ip_ranges' => :'Array<IPNet>',
+        :'permitted_uri_domains' => :'Array<String>',
+        :'policy_identifiers' => :'Array<Array>',
+        :'public_key' => :'Object',
+        :'public_key_algorithm' => :'Integer',
+        :'raw' => :'Array<Integer>',
+        :'raw_issuer' => :'Array<Integer>',
+        :'raw_subject' => :'Array<Integer>',
+        :'raw_subject_public_key_info' => :'Array<Integer>',
+        :'raw_tbs_certificate' => :'Array<Integer>',
+        :'serial_number' => :'Object',
+        :'signature' => :'Array<Integer>',
+        :'signature_algorithm' => :'Integer',
+        :'subject' => :'Name',
+        :'subject_key_id' => :'Array<Integer>',
+        :'ur_is' => :'Array<URL>',
+        :'unhandled_critical_extensions' => :'Array<Array>',
+        :'unknown_ext_key_usage' => :'Array<Array>',
+        :'version' => :'Integer'
+      }
+    end
+
+    # List of attributes with nullable: true
+    def self.openapi_nullable
+      Set.new([
+      ])
+    end
+
+    # Initializes the object
+    # @param [Hash] attributes Model attributes in the form of hash
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `OryHydraClient::Certificate` initialize method"
+      end
+
+      # check to see if the attribute exists and convert string to symbol for hash key
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!self.class.attribute_map.key?(k.to_sym))
+          fail ArgumentError, "`#{k}` is not a valid attribute in `OryHydraClient::Certificate`. Please check the name to make sure it's valid. List of attributes: " + self.class.attribute_map.keys.inspect
+        end
+        h[k.to_sym] = v
+      }
+
+      if attributes.key?(:'authority_key_id')
+        if (value = attributes[:'authority_key_id']).is_a?(Array)
+          self.authority_key_id = value
+        end
+      end
+
+      if attributes.key?(:'basic_constraints_valid')
+        self.basic_constraints_valid = attributes[:'basic_constraints_valid']
+      end
+
+      if attributes.key?(:'crl_distribution_points')
+        if (value = attributes[:'crl_distribution_points']).is_a?(Array)
+          self.crl_distribution_points = value
+        end
+      end
+
+      if attributes.key?(:'dns_names')
+        if (value = attributes[:'dns_names']).is_a?(Array)
+          self.dns_names = value
+        end
+      end
+
+      if attributes.key?(:'email_addresses')
+        if (value = attributes[:'email_addresses']).is_a?(Array)
+          self.email_addresses = value
+        end
+      end
+
+      if attributes.key?(:'excluded_dns_domains')
+        if (value = attributes[:'excluded_dns_domains']).is_a?(Array)
+          self.excluded_dns_domains = value
+        end
+      end
+
+      if attributes.key?(:'excluded_email_addresses')
+        if (value = attributes[:'excluded_email_addresses']).is_a?(Array)
+          self.excluded_email_addresses = value
+        end
+      end
+
+      if attributes.key?(:'excluded_ip_ranges')
+        if (value = attributes[:'excluded_ip_ranges']).is_a?(Array)
+          self.excluded_ip_ranges = value
+        end
+      end
+
+      if attributes.key?(:'excluded_uri_domains')
+        if (value = attributes[:'excluded_uri_domains']).is_a?(Array)
+          self.excluded_uri_domains = value
+        end
+      end
+
+      if attributes.key?(:'ext_key_usage')
+        if (value = attributes[:'ext_key_usage']).is_a?(Array)
+          self.ext_key_usage = value
+        end
+      end
+
+      if attributes.key?(:'extensions')
+        if (value = attributes[:'extensions']).is_a?(Array)
+          self.extensions = value
+        end
+      end
+
+      if attributes.key?(:'extra_extensions')
+        if (value = attributes[:'extra_extensions']).is_a?(Array)
+          self.extra_extensions = value
+        end
+      end
+
+      if attributes.key?(:'ip_addresses')
+        if (value = attributes[:'ip_addresses']).is_a?(Array)
+          self.ip_addresses = value
+        end
+      end
+
+      if attributes.key?(:'is_ca')
+        self.is_ca = attributes[:'is_ca']
+      end
+
+      if attributes.key?(:'issuer')
+        self.issuer = attributes[:'issuer']
+      end
+
+      if attributes.key?(:'issuing_certificate_url')
+        if (value = attributes[:'issuing_certificate_url']).is_a?(Array)
+          self.issuing_certificate_url = value
+        end
+      end
+
+      if attributes.key?(:'key_usage')
+        self.key_usage = attributes[:'key_usage']
+      end
+
+      if attributes.key?(:'max_path_len')
+        self.max_path_len = attributes[:'max_path_len']
+      end
+
+      if attributes.key?(:'max_path_len_zero')
+        self.max_path_len_zero = attributes[:'max_path_len_zero']
+      end
+
+      if attributes.key?(:'not_before')
+        self.not_before = attributes[:'not_before']
+      end
+
+      if attributes.key?(:'ocsp_server')
+        if (value = attributes[:'ocsp_server']).is_a?(Array)
+          self.ocsp_server = value
+        end
+      end
+
+      if attributes.key?(:'permitted_dns_domains')
+        if (value = attributes[:'permitted_dns_domains']).is_a?(Array)
+          self.permitted_dns_domains = value
+        end
+      end
+
+      if attributes.key?(:'permitted_dns_domains_critical')
+        self.permitted_dns_domains_critical = attributes[:'permitted_dns_domains_critical']
+      end
+
+      if attributes.key?(:'permitted_email_addresses')
+        if (value = attributes[:'permitted_email_addresses']).is_a?(Array)
+          self.permitted_email_addresses = value
+        end
+      end
+
+      if attributes.key?(:'permitted_ip_ranges')
+        if (value = attributes[:'permitted_ip_ranges']).is_a?(Array)
+          self.permitted_ip_ranges = value
+        end
+      end
+
+      if attributes.key?(:'permitted_uri_domains')
+        if (value = attributes[:'permitted_uri_domains']).is_a?(Array)
+          self.permitted_uri_domains = value
+        end
+      end
+
+      if attributes.key?(:'policy_identifiers')
+        if (value = attributes[:'policy_identifiers']).is_a?(Array)
+          self.policy_identifiers = value
+        end
+      end
+
+      if attributes.key?(:'public_key')
+        self.public_key = attributes[:'public_key']
+      end
+
+      if attributes.key?(:'public_key_algorithm')
+        self.public_key_algorithm = attributes[:'public_key_algorithm']
+      end
+
+      if attributes.key?(:'raw')
+        if (value = attributes[:'raw']).is_a?(Array)
+          self.raw = value
+        end
+      end
+
+      if attributes.key?(:'raw_issuer')
+        if (value = attributes[:'raw_issuer']).is_a?(Array)
+          self.raw_issuer = value
+        end
+      end
+
+      if attributes.key?(:'raw_subject')
+        if (value = attributes[:'raw_subject']).is_a?(Array)
+          self.raw_subject = value
+        end
+      end
+
+      if attributes.key?(:'raw_subject_public_key_info')
+        if (value = attributes[:'raw_subject_public_key_info']).is_a?(Array)
+          self.raw_subject_public_key_info = value
+        end
+      end
+
+      if attributes.key?(:'raw_tbs_certificate')
+        if (value = attributes[:'raw_tbs_certificate']).is_a?(Array)
+          self.raw_tbs_certificate = value
+        end
+      end
+
+      if attributes.key?(:'serial_number')
+        self.serial_number = attributes[:'serial_number']
+      end
+
+      if attributes.key?(:'signature')
+        if (value = attributes[:'signature']).is_a?(Array)
+          self.signature = value
+        end
+      end
+
+      if attributes.key?(:'signature_algorithm')
+        self.signature_algorithm = attributes[:'signature_algorithm']
+      end
+
+      if attributes.key?(:'subject')
+        self.subject = attributes[:'subject']
+      end
+
+      if attributes.key?(:'subject_key_id')
+        if (value = attributes[:'subject_key_id']).is_a?(Array)
+          self.subject_key_id = value
+        end
+      end
+
+      if attributes.key?(:'ur_is')
+        if (value = attributes[:'ur_is']).is_a?(Array)
+          self.ur_is = value
+        end
+      end
+
+      if attributes.key?(:'unhandled_critical_extensions')
+        if (value = attributes[:'unhandled_critical_extensions']).is_a?(Array)
+          self.unhandled_critical_extensions = value
+        end
+      end
+
+      if attributes.key?(:'unknown_ext_key_usage')
+        if (value = attributes[:'unknown_ext_key_usage']).is_a?(Array)
+          self.unknown_ext_key_usage = value
+        end
+      end
+
+      if attributes.key?(:'version')
+        self.version = attributes[:'version']
+      end
+    end
+
+    # Show invalid properties with the reasons. Usually used together with valid?
+    # @return Array for valid properties with the reasons
+    def list_invalid_properties
+      invalid_properties = Array.new
+      invalid_properties
+    end
+
+    # Check to see if the all the properties in the model are valid
+    # @return true if the model is valid
+    def valid?
+      true
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param [Object] Object to be compared
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          authority_key_id == o.authority_key_id &&
+          basic_constraints_valid == o.basic_constraints_valid &&
+          crl_distribution_points == o.crl_distribution_points &&
+          dns_names == o.dns_names &&
+          email_addresses == o.email_addresses &&
+          excluded_dns_domains == o.excluded_dns_domains &&
+          excluded_email_addresses == o.excluded_email_addresses &&
+          excluded_ip_ranges == o.excluded_ip_ranges &&
+          excluded_uri_domains == o.excluded_uri_domains &&
+          ext_key_usage == o.ext_key_usage &&
+          extensions == o.extensions &&
+          extra_extensions == o.extra_extensions &&
+          ip_addresses == o.ip_addresses &&
+          is_ca == o.is_ca &&
+          issuer == o.issuer &&
+          issuing_certificate_url == o.issuing_certificate_url &&
+          key_usage == o.key_usage &&
+          max_path_len == o.max_path_len &&
+          max_path_len_zero == o.max_path_len_zero &&
+          not_before == o.not_before &&
+          ocsp_server == o.ocsp_server &&
+          permitted_dns_domains == o.permitted_dns_domains &&
+          permitted_dns_domains_critical == o.permitted_dns_domains_critical &&
+          permitted_email_addresses == o.permitted_email_addresses &&
+          permitted_ip_ranges == o.permitted_ip_ranges &&
+          permitted_uri_domains == o.permitted_uri_domains &&
+          policy_identifiers == o.policy_identifiers &&
+          public_key == o.public_key &&
+          public_key_algorithm == o.public_key_algorithm &&
+          raw == o.raw &&
+          raw_issuer == o.raw_issuer &&
+          raw_subject == o.raw_subject &&
+          raw_subject_public_key_info == o.raw_subject_public_key_info &&
+          raw_tbs_certificate == o.raw_tbs_certificate &&
+          serial_number == o.serial_number &&
+          signature == o.signature &&
+          signature_algorithm == o.signature_algorithm &&
+          subject == o.subject &&
+          subject_key_id == o.subject_key_id &&
+          ur_is == o.ur_is &&
+          unhandled_critical_extensions == o.unhandled_critical_extensions &&
+          unknown_ext_key_usage == o.unknown_ext_key_usage &&
+          version == o.version
+    end
+
+    # @see the `==` method
+    # @param [Object] Object to be compared
+    def eql?(o)
+      self == o
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    def hash
+      [authority_key_id, basic_constraints_valid, crl_distribution_points, dns_names, email_addresses, excluded_dns_domains, excluded_email_addresses, excluded_ip_ranges, excluded_uri_domains, ext_key_usage, extensions, extra_extensions, ip_addresses, is_ca, issuer, issuing_certificate_url, key_usage, max_path_len, max_path_len_zero, not_before, ocsp_server, permitted_dns_domains, permitted_dns_domains_critical, permitted_email_addresses, permitted_ip_ranges, permitted_uri_domains, policy_identifiers, public_key, public_key_algorithm, raw, raw_issuer, raw_subject, raw_subject_public_key_info, raw_tbs_certificate, serial_number, signature, signature_algorithm, subject, subject_key_id, ur_is, unhandled_critical_extensions, unknown_ext_key_usage, version].hash
+    end
+
+    # Builds the object from hash
+    # @param [Hash] attributes Model attributes in the form of hash
+    # @return [Object] Returns the model itself
+    def self.build_from_hash(attributes)
+      new.build_from_hash(attributes)
+    end
+
+    # Builds the object from hash
+    # @param [Hash] attributes Model attributes in the form of hash
+    # @return [Object] Returns the model itself
+    def build_from_hash(attributes)
+      return nil unless attributes.is_a?(Hash)
+      self.class.openapi_types.each_pair do |key, type|
+        if type =~ /\AArray<(.*)>/i
+          # check to ensure the input is an array given that the attribute
+          # is documented as an array but the input is not
+          if attributes[self.class.attribute_map[key]].is_a?(Array)
+            self.send("#{key}=", attributes[self.class.attribute_map[key]].map { |v| _deserialize($1, v) })
+          end
+        elsif !attributes[self.class.attribute_map[key]].nil?
+          self.send("#{key}=", _deserialize(type, attributes[self.class.attribute_map[key]]))
+        end # or else data not found in attributes(hash), not an issue as the data can be optional
+      end
+
+      self
+    end
+
+    # Deserializes the data based on type
+    # @param string type Data type
+    # @param string value Value to be deserialized
+    # @return [Object] Deserialized data
+    def _deserialize(type, value)
+      case type.to_sym
+      when :DateTime
+        DateTime.parse(value)
+      when :Date
+        Date.parse(value)
+      when :String
+        value.to_s
+      when :Integer
+        value.to_i
+      when :Float
+        value.to_f
+      when :Boolean
+        if value.to_s =~ /\A(true|t|yes|y|1)\z/i
+          true
+        else
+          false
+        end
+      when :Object
+        # generic object (usually a Hash), return directly
+        value
+      when /\AArray<(?<inner_type>.+)>\z/
+        inner_type = Regexp.last_match[:inner_type]
+        value.map { |v| _deserialize(inner_type, v) }
+      when /\AHash<(?<k_type>.+?), (?<v_type>.+)>\z/
+        k_type = Regexp.last_match[:k_type]
+        v_type = Regexp.last_match[:v_type]
+        {}.tap do |hash|
+          value.each do |k, v|
+            hash[_deserialize(k_type, k)] = _deserialize(v_type, v)
+          end
+        end
+      else # model
+        OryHydraClient.const_get(type).build_from_hash(value)
+      end
+    end
+
+    # Returns the string representation of the object
+    # @return [String] String presentation of the object
+    def to_s
+      to_hash.to_s
+    end
+
+    # to_body is an alias to to_hash (backward compatibility)
+    # @return [Hash] Returns the object in the form of hash
+    def to_body
+      to_hash
+    end
+
+    # Returns the object in the form of hash
+    # @return [Hash] Returns the object in the form of hash
+    def to_hash
+      hash = {}
+      self.class.attribute_map.each_pair do |attr, param|
+        value = self.send(attr)
+        if value.nil?
+          is_nullable = self.class.openapi_nullable.include?(attr)
+          next if !is_nullable || (is_nullable && !instance_variable_defined?(:"@#{attr}"))
+        end
+        
+        hash[param] = _to_hash(value)
+      end
+      hash
+    end
+
+    # Outputs non-array value in the form of hash
+    # For object, use to_hash. Otherwise, just return the value
+    # @param [Object] value Any valid value
+    # @return [Hash] Returns the value in the form of hash
+    def _to_hash(value)
+      if value.is_a?(Array)
+        value.compact.map { |v| _to_hash(v) }
+      elsif value.is_a?(Hash)
+        {}.tap do |hash|
+          value.each { |k, v| hash[k] = _to_hash(v) }
+        end
+      elsif value.respond_to? :to_hash
+        value.to_hash
+      else
+        value
+      end
+    end
+  end
+end