ory-hydra-client 1.10.6 → 1.11.4

data/spec/api/admin_api_spec.rb

@@ -1,12 +1,12 @@
 =begin
-#ORY Hydra
+#Ory Oathkeeper API
 
-#Welcome to the ORY Hydra HTTP API documentation. You will find documentation for all HTTP APIs here.
-
-The version of the OpenAPI document: v0.0.0-alpha.1
+#Documentation for all of Ory Oathkeeper's APIs. 
 
+The version of the OpenAPI document: v1.11.4
+Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
-OpenAPI Generator version: 4.2.2
+OpenAPI Generator version: 5.4.0
 
 =end
 
@@ -33,11 +33,11 @@ describe 'AdminApi' do
   end
 
   # unit tests for accept_consent_request
-  # Accept an consent request
+  # Accept a Consent Request
   # When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the login provider to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated, he/she must now be asked if the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the subject's behalf.  The consent provider which handles this request and is a web app implemented and hosted by you. It shows a subject interface which asks the subject to grant or deny the client access to the requested scope (\"Application my-dropbox-app wants write access to all your private files\").  The consent challenge is appended to the consent provider's URL to which the subject's user-agent (browser) is redirected to. The consent provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if the subject accepted or rejected the request.  This endpoint tells ORY Hydra that the subject has authorized the OAuth 2.0 client to access resources on his/her behalf. The consent provider includes additional information, such as session data for access and ID tokens, and if the consent request should be used as basis for future requests.  The response contains a redirect URL which the consent provider should redirect the user-agent to.
   # @param consent_challenge 
   # @param [Hash] opts the optional parameters
-  # @option opts [AcceptConsentRequest] :body 
+  # @option opts [AcceptConsentRequest] :accept_consent_request 
   # @return [CompletedRequest]
   describe 'accept_consent_request test' do
     it 'should work' do
@@ -46,11 +46,11 @@ describe 'AdminApi' do
   end
 
   # unit tests for accept_login_request
-  # Accept an login request
+  # Accept a Login Request
   # When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the login provider (sometimes called \"identity provider\") to authenticate the subject and then tell ORY Hydra now about it. The login provider is an web-app you write and host, and it must be able to authenticate (\"show the subject a login screen\") a subject (in OAuth2 the proper name for subject is \"resource owner\").  The authentication challenge is appended to the login provider URL to which the subject's user-agent (browser) is redirected to. The login provider uses that challenge to fetch information on the OAuth2 request and then accept or reject the requested authentication process.  This endpoint tells ORY Hydra that the subject has successfully authenticated and includes additional information such as the subject's ID and if ORY Hydra should remember the subject's subject agent for future authentication attempts by setting a cookie.  The response contains a redirect URL which the login provider should redirect the user-agent to.
   # @param login_challenge 
   # @param [Hash] opts the optional parameters
-  # @option opts [AcceptLoginRequest] :body 
+  # @option opts [AcceptLoginRequest] :accept_login_request 
   # @return [CompletedRequest]
   describe 'accept_login_request test' do
     it 'should work' do
@@ -59,7 +59,7 @@ describe 'AdminApi' do
   end
 
   # unit tests for accept_logout_request
-  # Accept a logout request
+  # Accept a Logout Request
   # When a user or an application requests ORY Hydra to log out a user, this endpoint is used to confirm that logout request. No body is required.  The response contains a redirect URL which the consent provider should redirect the user-agent to.
   # @param logout_challenge 
   # @param [Hash] opts the optional parameters
@@ -71,11 +71,11 @@ describe 'AdminApi' do
   end
 
   # unit tests for create_json_web_key_set
-  # Generate a new JSON Web Key
+  # Generate a New JSON Web Key
   # This endpoint is capable of generating JSON Web Key Sets for you. There a different strategies available, such as symmetric cryptographic keys (HS256, HS512) and asymetric cryptographic keys (RS256, ECDSA). If the specified JSON Web Key Set does not exist, it will be created.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.
   # @param set The set
   # @param [Hash] opts the optional parameters
-  # @option opts [JsonWebKeySetGeneratorRequest] :body 
+  # @option opts [JsonWebKeySetGeneratorRequest] :json_web_key_set_generator_request 
   # @return [JSONWebKeySet]
   describe 'create_json_web_key_set test' do
     it 'should work' do
@@ -84,9 +84,9 @@ describe 'AdminApi' do
   end
 
   # unit tests for create_o_auth2_client
-  # Create an OAuth 2.0 client
-  # Create a new OAuth 2.0 client If you pass `client_secret` the secret will be used, otherwise a random secret will be generated. The secret will be returned in the response and you will not be able to retrieve it later on. Write the secret down and keep it somwhere safe.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities. To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well protected and only callable by first-party components.
-  # @param body 
+  # Create an OAuth 2.0 Client
+  # Create a new OAuth 2.0 client If you pass `client_secret` the secret will be used, otherwise a random secret will be generated. The secret will be returned in the response and you will not be able to retrieve it later on. Write the secret down and keep it somwhere safe.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+  # @param o_auth2_client 
   # @param [Hash] opts the optional parameters
   # @return [OAuth2Client]
   describe 'create_o_auth2_client test' do
@@ -122,7 +122,7 @@ describe 'AdminApi' do
 
   # unit tests for delete_o_auth2_client
   # Deletes an OAuth 2.0 Client
-  # Delete an existing OAuth 2.0 Client by its ID.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities. To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well protected and only callable by first-party components.
+  # Delete an existing OAuth 2.0 Client by its ID.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.  Make sure that this endpoint is well protected and only callable by first-party components.
   # @param id The id of the OAuth 2.0 Client.
   # @param [Hash] opts the optional parameters
   # @return [nil]
@@ -132,11 +132,35 @@ describe 'AdminApi' do
     end
   end
 
+  # unit tests for delete_o_auth2_token
+  # Delete OAuth2 Access Tokens from a Client
+  # This endpoint deletes OAuth2 access tokens issued for a client from the database
+  # @param client_id 
+  # @param [Hash] opts the optional parameters
+  # @return [nil]
+  describe 'delete_o_auth2_token test' do
+    it 'should work' do
+      # assertion here. ref: https://www.relishapp.com/rspec/rspec-expectations/docs/built-in-matchers
+    end
+  end
+
+  # unit tests for delete_trusted_jwt_grant_issuer
+  # Delete a Trusted OAuth2 JWT Bearer Grant Type Issuer
+  # Use this endpoint to delete trusted JWT Bearer Grant Type Issuer. The ID is the one returned when you created the trust relationship.  Once deleted, the associated issuer will no longer be able to perform the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grant.
+  # @param id The id of the desired grant
+  # @param [Hash] opts the optional parameters
+  # @return [nil]
+  describe 'delete_trusted_jwt_grant_issuer test' do
+    it 'should work' do
+      # assertion here. ref: https://www.relishapp.com/rspec/rspec-expectations/docs/built-in-matchers
+    end
+  end
+
   # unit tests for flush_inactive_o_auth2_tokens
   # Flush Expired OAuth2 Access Tokens
   # This endpoint flushes expired OAuth2 access tokens from the database. You can set a time after which no tokens will be not be touched, in case you want to keep recent tokens for auditing. Refresh tokens can not be flushed as they are deleted automatically when performing the refresh flow.
   # @param [Hash] opts the optional parameters
-  # @option opts [FlushInactiveOAuth2TokensRequest] :body 
+  # @option opts [FlushInactiveOAuth2TokensRequest] :flush_inactive_o_auth2_tokens_request 
   # @return [nil]
   describe 'flush_inactive_o_auth2_tokens test' do
     it 'should work' do
@@ -145,7 +169,7 @@ describe 'AdminApi' do
   end
 
   # unit tests for get_consent_request
-  # Get consent request information
+  # Get Consent Request Information
   # When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the login provider to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated, he/she must now be asked if the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the subject's behalf.  The consent provider which handles this request and is a web app implemented and hosted by you. It shows a subject interface which asks the subject to grant or deny the client access to the requested scope (\"Application my-dropbox-app wants write access to all your private files\").  The consent challenge is appended to the consent provider's URL to which the subject's user-agent (browser) is redirected to. The consent provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if the subject accepted or rejected the request.
   # @param consent_challenge 
   # @param [Hash] opts the optional parameters
@@ -182,7 +206,7 @@ describe 'AdminApi' do
   end
 
   # unit tests for get_login_request
-  # Get an login request
+  # Get a Login Request
   # When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the login provider (sometimes called \"identity provider\") to authenticate the subject and then tell ORY Hydra now about it. The login provider is an web-app you write and host, and it must be able to authenticate (\"show the subject a login screen\") a subject (in OAuth2 the proper name for subject is \"resource owner\").  The authentication challenge is appended to the login provider URL to which the subject's user-agent (browser) is redirected to. The login provider uses that challenge to fetch information on the OAuth2 request and then accept or reject the requested authentication process.
   # @param login_challenge 
   # @param [Hash] opts the optional parameters
@@ -194,7 +218,7 @@ describe 'AdminApi' do
   end
 
   # unit tests for get_logout_request
-  # Get a logout request
+  # Get a Logout Request
   # Use this endpoint to fetch a logout request.
   # @param logout_challenge 
   # @param [Hash] opts the optional parameters
@@ -206,8 +230,8 @@ describe 'AdminApi' do
   end
 
   # unit tests for get_o_auth2_client
-  # Get an OAuth 2.0 Client.
-  # Get an OAUth 2.0 client by its ID. This endpoint never returns passwords.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities. To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well protected and only callable by first-party components.
+  # Get an OAuth 2.0 Client
+  # Get an OAuth 2.0 client by its ID. This endpoint never returns the client secret.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
   # @param id The id of the OAuth 2.0 Client.
   # @param [Hash] opts the optional parameters
   # @return [OAuth2Client]
@@ -217,19 +241,20 @@ describe 'AdminApi' do
     end
   end
 
-  # unit tests for get_version
-  # Get service version
-  # This endpoint returns the service version typically notated using semantic versioning.  If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set.  Be aware that if you are running multiple nodes of this service, the health status will never refer to the cluster state, only to a single instance.
+  # unit tests for get_trusted_jwt_grant_issuer
+  # Get a Trusted OAuth2 JWT Bearer Grant Type Issuer
+  # Use this endpoint to get a trusted JWT Bearer Grant Type Issuer. The ID is the one returned when you created the trust relationship.
+  # @param id The id of the desired grant
   # @param [Hash] opts the optional parameters
-  # @return [Version]
-  describe 'get_version test' do
+  # @return [TrustedJwtGrantIssuer]
+  describe 'get_trusted_jwt_grant_issuer test' do
     it 'should work' do
       # assertion here. ref: https://www.relishapp.com/rspec/rspec-expectations/docs/built-in-matchers
     end
   end
 
   # unit tests for introspect_o_auth2_token
-  # Introspect OAuth2 tokens
+  # Introspect OAuth2 Tokens
   # The introspection endpoint allows to check if a token (both refresh and access) is active or not. An active token is neither expired nor revoked. If a token is active, additional information on the token will be included. You can set additional data for a token by setting `accessTokenExtra` during the consent flow.  For more information [read this blog post](https://www.oauth.com/oauth2-servers/token-introspection-endpoint/).
   # @param token The string value of the token. For access tokens, this is the \\\"access_token\\\" value returned from the token endpoint defined in OAuth 2.0. For refresh tokens, this is the \\\"refresh_token\\\" value returned.
   # @param [Hash] opts the optional parameters
@@ -241,23 +266,14 @@ describe 'AdminApi' do
     end
   end
 
-  # unit tests for is_instance_alive
-  # Check alive status
-  # This endpoint returns a 200 status code when the HTTP server is up running. This status does currently not include checks whether the database connection is working.  If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set.  Be aware that if you are running multiple nodes of this service, the health status will never refer to the cluster state, only to a single instance.
-  # @param [Hash] opts the optional parameters
-  # @return [HealthStatus]
-  describe 'is_instance_alive test' do
-    it 'should work' do
-      # assertion here. ref: https://www.relishapp.com/rspec/rspec-expectations/docs/built-in-matchers
-    end
-  end
-
   # unit tests for list_o_auth2_clients
   # List OAuth 2.0 Clients
-  # This endpoint lists all clients in the database, and never returns client secrets.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities. To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well protected and only callable by first-party components. The \"Link\" header is also included in successful responses, which contains one or more links for pagination, formatted like so: '<https://hydra-url/admin/clients?limit={limit}&offset={offset}>; rel=\"{page}\"', where page is one of the following applicable pages: 'first', 'next', 'last', and 'previous'. Multiple links can be included in this header, and will be separated by a comma.
+  # This endpoint lists all clients in the database, and never returns client secrets. As a default it lists the first 100 clients. The `limit` parameter can be used to retrieve more clients, but it has an upper bound at 500 objects. Pagination should be used to retrieve more than 500 objects.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.  The \"Link\" header is also included in successful responses, which contains one or more links for pagination, formatted like so: '<https://hydra-url/admin/clients?limit={limit}&offset={offset}>; rel=\"{page}\"', where page is one of the following applicable pages: 'first', 'next', 'last', and 'previous'. Multiple links can be included in this header, and will be separated by a comma.
   # @param [Hash] opts the optional parameters
-  # @option opts [Integer] :limit The maximum amount of policies returned.
+  # @option opts [Integer] :limit The maximum amount of clients to returned, upper bound is 500 clients.
   # @option opts [Integer] :offset The offset from where to start looking.
+  # @option opts [String] :client_name The name of the clients to filter by.
+  # @option opts [String] :owner The owner of the clients to filter by.
   # @return [Array<OAuth2Client>]
   describe 'list_o_auth2_clients test' do
     it 'should work' do
@@ -266,8 +282,8 @@ describe 'AdminApi' do
   end
 
   # unit tests for list_subject_consent_sessions
-  # Lists all consent sessions of a subject
-  # This endpoint lists all subject&#39;s granted consent sessions, including client and granted scope. The \&quot;Link\&quot; header is also included in successful responses, which contains one or more links for pagination, formatted like so: &#39;&lt;https://hydra-url/admin/oauth2/auth/sessions/consent?subject&#x3D;{user}&amp;limit&#x3D;{limit}&amp;offset&#x3D;{offset}&gt;; rel&#x3D;\&quot;{page}\&quot;&#39;, where page is one of the following applicable pages: &#39;first&#39;, &#39;next&#39;, &#39;last&#39;, and &#39;previous&#39;. Multiple links can be included in this header, and will be separated by a comma.
+  # Lists All Consent Sessions of a Subject
+  # This endpoint lists all subject&#39;s granted consent sessions, including client and granted scope. If the subject is unknown or has not granted any consent sessions yet, the endpoint returns an empty JSON array with status code 200 OK.   The \&quot;Link\&quot; header is also included in successful responses, which contains one or more links for pagination, formatted like so: &#39;&lt;https://hydra-url/admin/oauth2/auth/sessions/consent?subject&#x3D;{user}&amp;limit&#x3D;{limit}&amp;offset&#x3D;{offset}&gt;; rel&#x3D;\&quot;{page}\&quot;&#39;, where page is one of the following applicable pages: &#39;first&#39;, &#39;next&#39;, &#39;last&#39;, and &#39;previous&#39;. Multiple links can be included in this header, and will be separated by a comma.
   # @param subject 
   # @param [Hash] opts the optional parameters
   # @return [Array<PreviousConsentSession>]
@@ -277,23 +293,39 @@ describe 'AdminApi' do
     end
   end
 
-  # unit tests for prometheus
-  # Get snapshot metrics from the Hydra service. If you&#39;re using k8s, you can then add annotations to your deployment like so:
-  # &#x60;&#x60;&#x60; metadata: annotations: prometheus.io/port: \&quot;4445\&quot; prometheus.io/path: \&quot;/metrics/prometheus\&quot; &#x60;&#x60;&#x60;
+  # unit tests for list_trusted_jwt_grant_issuers
+  # List Trusted OAuth2 JWT Bearer Grant Type Issuers
+  # Use this endpoint to list all trusted JWT Bearer Grant Type Issuers.
   # @param [Hash] opts the optional parameters
-  # @return [nil]
-  describe 'prometheus test' do
+  # @option opts [String] :issuer If optional \&quot;issuer\&quot; is supplied, only jwt-bearer grants with this issuer will be returned.
+  # @option opts [Integer] :limit The maximum amount of policies returned, upper bound is 500 policies
+  # @option opts [Integer] :offset The offset from where to start looking.
+  # @return [Array<TrustedJwtGrantIssuer>]
+  describe 'list_trusted_jwt_grant_issuers test' do
+    it 'should work' do
+      # assertion here. ref: https://www.relishapp.com/rspec/rspec-expectations/docs/built-in-matchers
+    end
+  end
+
+  # unit tests for patch_o_auth2_client
+  # Patch an OAuth 2.0 Client
+  # Patch an existing OAuth 2.0 Client. If you pass &#x60;client_secret&#x60; the secret will be updated and returned via the API. This is the only time you will be able to retrieve the client secret, so write it down and keep it safe.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+  # @param id The id of the OAuth 2.0 Client.
+  # @param patch_document 
+  # @param [Hash] opts the optional parameters
+  # @return [OAuth2Client]
+  describe 'patch_o_auth2_client test' do
     it 'should work' do
       # assertion here. ref: https://www.relishapp.com/rspec/rspec-expectations/docs/built-in-matchers
     end
   end
 
   # unit tests for reject_consent_request
-  # Reject an consent request
+  # Reject a Consent Request
   # When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the login provider to authenticate the subject and then tell ORY Hydra now about it. If the subject authenticated, he/she must now be asked if the OAuth 2.0 Client which initiated the flow should be allowed to access the resources on the subject&#39;s behalf.  The consent provider which handles this request and is a web app implemented and hosted by you. It shows a subject interface which asks the subject to grant or deny the client access to the requested scope (\&quot;Application my-dropbox-app wants write access to all your private files\&quot;).  The consent challenge is appended to the consent provider&#39;s URL to which the subject&#39;s user-agent (browser) is redirected to. The consent provider uses that challenge to fetch information on the OAuth2 request and then tells ORY Hydra if the subject accepted or rejected the request.  This endpoint tells ORY Hydra that the subject has not authorized the OAuth 2.0 client to access resources on his/her behalf. The consent provider must include a reason why the consent was not granted.  The response contains a redirect URL which the consent provider should redirect the user-agent to.
   # @param consent_challenge 
   # @param [Hash] opts the optional parameters
-  # @option opts [RejectRequest] :body 
+  # @option opts [RejectRequest] :reject_request 
   # @return [CompletedRequest]
   describe 'reject_consent_request test' do
     it 'should work' do
@@ -302,11 +334,11 @@ describe 'AdminApi' do
   end
 
   # unit tests for reject_login_request
-  # Reject a login request
+  # Reject a Login Request
   # When an authorization code, hybrid, or implicit OAuth 2.0 Flow is initiated, ORY Hydra asks the login provider (sometimes called \&quot;identity provider\&quot;) to authenticate the subject and then tell ORY Hydra now about it. The login provider is an web-app you write and host, and it must be able to authenticate (\&quot;show the subject a login screen\&quot;) a subject (in OAuth2 the proper name for subject is \&quot;resource owner\&quot;).  The authentication challenge is appended to the login provider URL to which the subject&#39;s user-agent (browser) is redirected to. The login provider uses that challenge to fetch information on the OAuth2 request and then accept or reject the requested authentication process.  This endpoint tells ORY Hydra that the subject has not authenticated and includes a reason why the authentication was be denied.  The response contains a redirect URL which the login provider should redirect the user-agent to.
   # @param login_challenge 
   # @param [Hash] opts the optional parameters
-  # @option opts [RejectRequest] :body 
+  # @option opts [RejectRequest] :reject_request 
   # @return [CompletedRequest]
   describe 'reject_login_request test' do
     it 'should work' do
@@ -315,11 +347,11 @@ describe 'AdminApi' do
   end
 
   # unit tests for reject_logout_request
-  # Reject a logout request
+  # Reject a Logout Request
   # When a user or an application requests ORY Hydra to log out a user, this endpoint is used to deny that logout request. No body is required.  The response is empty as the logout provider has to chose what action to perform next.
   # @param logout_challenge 
   # @param [Hash] opts the optional parameters
-  # @option opts [RejectRequest] :body 
+  # @option opts [RejectRequest] :reject_request 
   # @return [nil]
   describe 'reject_logout_request test' do
     it 'should work' do
@@ -328,7 +360,7 @@ describe 'AdminApi' do
   end
 
   # unit tests for revoke_authentication_session
-  # Invalidates all login sessions of a certain user Invalidates a subject&#39;s authentication session
+  # Invalidates All Login Sessions of a Certain User Invalidates a Subject&#39;s Authentication Session
   # This endpoint invalidates a subject&#39;s authentication session. After revoking the authentication session, the subject has to re-authenticate at ORY Hydra. This endpoint does not invalidate any tokens and does not work with OpenID Connect Front- or Back-channel logout.
   # @param subject 
   # @param [Hash] opts the optional parameters
@@ -340,11 +372,12 @@ describe 'AdminApi' do
   end
 
   # unit tests for revoke_consent_sessions
-  # Revokes consent sessions of a subject for a specific OAuth 2.0 Client
+  # Revokes Consent Sessions of a Subject for a Specific OAuth 2.0 Client
   # This endpoint revokes a subject&#39;s granted consent sessions for a specific OAuth 2.0 Client and invalidates all associated OAuth 2.0 Access Tokens.
   # @param subject The subject (Subject) who&#39;s consent sessions should be deleted.
   # @param [Hash] opts the optional parameters
   # @option opts [String] :client If set, deletes only those consent sessions by the Subject that have been granted to the specified OAuth 2.0 Client ID
+  # @option opts [Boolean] :all If set to &#x60;?all&#x3D;true&#x60;, deletes all consent sessions by the Subject that have been granted.
   # @return [nil]
   describe 'revoke_consent_sessions test' do
     it 'should work' do
@@ -352,13 +385,25 @@ describe 'AdminApi' do
     end
   end
 
+  # unit tests for trust_jwt_grant_issuer
+  # Trust an OAuth2 JWT Bearer Grant Type Issuer
+  # Use this endpoint to establish a trust relationship for a JWT issuer to perform JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants [RFC7523](https://datatracker.ietf.org/doc/html/rfc7523).
+  # @param [Hash] opts the optional parameters
+  # @option opts [TrustJwtGrantIssuerBody] :trust_jwt_grant_issuer_body 
+  # @return [TrustedJwtGrantIssuer]
+  describe 'trust_jwt_grant_issuer test' do
+    it 'should work' do
+      # assertion here. ref: https://www.relishapp.com/rspec/rspec-expectations/docs/built-in-matchers
+    end
+  end
+
   # unit tests for update_json_web_key
   # Update a JSON Web Key
   # Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your own.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.
   # @param kid The kid of the desired key
   # @param set The set
   # @param [Hash] opts the optional parameters
-  # @option opts [JSONWebKey] :body 
+  # @option opts [JSONWebKey] :json_web_key 
   # @return [JSONWebKey]
   describe 'update_json_web_key test' do
     it 'should work' do
@@ -371,7 +416,7 @@ describe 'AdminApi' do
   # Use this method if you do not want to let Hydra generate the JWKs for you, but instead save your own.  A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. A JWK Set is a JSON data structure that represents a set of JWKs. A JSON Web Key is identified by its set and key id. ORY Hydra uses this functionality to store cryptographic keys used for TLS and JSON Web Tokens (such as OpenID Connect ID tokens), and allows storing user-defined keys as well.
   # @param set The set
   # @param [Hash] opts the optional parameters
-  # @option opts [JSONWebKeySet] :body 
+  # @option opts [JSONWebKeySet] :json_web_key_set 
   # @return [JSONWebKeySet]
   describe 'update_json_web_key_set test' do
     it 'should work' do
@@ -381,9 +426,9 @@ describe 'AdminApi' do
 
   # unit tests for update_o_auth2_client
   # Update an OAuth 2.0 Client
-  # Update an existing OAuth 2.0 Client. If you pass &#x60;client_secret&#x60; the secret will be updated and returned via the API. This is the only time you will be able to retrieve the client secret, so write it down and keep it safe.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities. To manage ORY Hydra, you will need an OAuth 2.0 Client as well. Make sure that this endpoint is well protected and only callable by first-party components.
-  # @param id 
-  # @param body 
+  # Update an existing OAuth 2.0 Client. If you pass &#x60;client_secret&#x60; the secret will be updated and returned via the API. This is the only time you will be able to retrieve the client secret, so write it down and keep it safe.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+  # @param id The id of the OAuth 2.0 Client.
+  # @param o_auth2_client 
   # @param [Hash] opts the optional parameters
   # @return [OAuth2Client]
   describe 'update_o_auth2_client test' do

data/spec/api/metadata_api_spec.rb

@@ -1,12 +1,12 @@
 =begin
-#ORY Hydra
+#Ory Oathkeeper API
 
-#Welcome to the ORY Hydra HTTP API documentation. You will find documentation for all HTTP APIs here.
-
-The version of the OpenAPI document: v1.10.5
+#Documentation for all of Ory Oathkeeper's APIs. 
 
+The version of the OpenAPI document: v1.11.4
+Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
-OpenAPI Generator version: 5.1.1
+OpenAPI Generator version: 5.4.0
 
 =end
 
@@ -32,12 +32,34 @@ describe 'MetadataApi' do
     end
   end
 
-  # unit tests for prometheus
-  # Get snapshot metrics from the service. If you're using k8s, you can then add annotations to your deployment like so:
-  # ``` metadata: annotations: prometheus.io/port: \"4434\" prometheus.io/path: \"/metrics/prometheus\" ```
+  # unit tests for get_version
+  # Return Running Software Version.
+  # This endpoint returns the version of Ory Hydra.  If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set.  Be aware that if you are running multiple nodes of this service, the version will never refer to the cluster state, only to a single instance.
+  # @param [Hash] opts the optional parameters
+  # @return [InlineResponse2001]
+  describe 'get_version test' do
+    it 'should work' do
+      # assertion here. ref: https://www.relishapp.com/rspec/rspec-expectations/docs/built-in-matchers
+    end
+  end
+
+  # unit tests for is_alive
+  # Check HTTP Server Status
+  # This endpoint returns a HTTP 200 status code when Ory Hydra is accepting incoming HTTP requests. This status does currently not include checks whether the database connection is working.  If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set.  Be aware that if you are running multiple nodes of this service, the health status will never refer to the cluster state, only to a single instance.
+  # @param [Hash] opts the optional parameters
+  # @return [InlineResponse200]
+  describe 'is_alive test' do
+    it 'should work' do
+      # assertion here. ref: https://www.relishapp.com/rspec/rspec-expectations/docs/built-in-matchers
+    end
+  end
+
+  # unit tests for is_ready
+  # Check HTTP Server and Database Status
+  # This endpoint returns a HTTP 200 status code when Ory Hydra is up running and the environment dependencies (e.g. the database) are responsive as well.  If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set.  Be aware that if you are running multiple nodes of Ory Hydra, the health status will never refer to the cluster state, only to a single instance.
   # @param [Hash] opts the optional parameters
-  # @return [nil]
-  describe 'prometheus test' do
+  # @return [InlineResponse200]
+  describe 'is_ready test' do
     it 'should work' do
       # assertion here. ref: https://www.relishapp.com/rspec/rspec-expectations/docs/built-in-matchers
     end

data/spec/api/public_api_spec.rb

@@ -1,12 +1,12 @@
 =begin
-#ORY Hydra
+#Ory Oathkeeper API
 
-#Welcome to the ORY Hydra HTTP API documentation. You will find documentation for all HTTP APIs here.
-
-The version of the OpenAPI document: v0.0.0-alpha.1
+#Documentation for all of Ory Oathkeeper's APIs. 
 
+The version of the OpenAPI document: v1.11.4
+Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
-OpenAPI Generator version: 4.2.2
+OpenAPI Generator version: 5.4.0
 
 =end
 
@@ -33,8 +33,8 @@ describe 'PublicApi' do
   end
 
   # unit tests for disconnect_user
-  # OpenID Connect Front-Backchannel enabled Logout
-  # This endpoint initiates and completes user logout at ORY Hydra and initiates OpenID Connect Front-/Back-channel logout:  https://openid.net/specs/openid-connect-frontchannel-1_0.html https://openid.net/specs/openid-connect-backchannel-1_0.html
+  # OpenID Connect Front-Backchannel Enabled Logout
+  # This endpoint initiates and completes user logout at Ory Hydra and initiates OpenID Connect Front-/Back-channel logout:  https://openid.net/specs/openid-connect-frontchannel-1_0.html https://openid.net/specs/openid-connect-backchannel-1_0.html
   # @param [Hash] opts the optional parameters
   # @return [nil]
   describe 'disconnect_user test' do
@@ -54,26 +54,64 @@ describe 'PublicApi' do
     end
   end
 
-  # unit tests for is_instance_ready
-  # Check readiness status
-  # This endpoint returns a 200 status code when the HTTP server is up running and the environment dependencies (e.g. the database) are responsive as well.  If the service supports TLS Edge Termination, this endpoint does not require the `X-Forwarded-Proto` header to be set.  Be aware that if you are running multiple nodes of this service, the health status will never refer to the cluster state, only to a single instance.
+  # unit tests for dynamic_client_registration_create_o_auth2_client
+  # Register an OAuth 2.0 Client using the OpenID / OAuth2 Dynamic Client Registration Management Protocol
+  # This endpoint behaves like the administrative counterpart (`createOAuth2Client`) but is capable of facing the public internet directly and can be used in self-service. It implements the OpenID Connect Dynamic Client Registration Protocol. This feature needs to be enabled in the configuration. This endpoint is disabled by default. It can be enabled by an administrator.  Please note that using this endpoint you are not able to choose the `client_secret` nor the `client_id` as those values will be server generated when specifying `token_endpoint_auth_method` as `client_secret_basic` or `client_secret_post`.  The `client_secret` will be returned in the response and you will not be able to retrieve it later on. Write the secret down and keep it somewhere safe.
+  # @param o_auth2_client 
+  # @param [Hash] opts the optional parameters
+  # @return [OAuth2Client]
+  describe 'dynamic_client_registration_create_o_auth2_client test' do
+    it 'should work' do
+      # assertion here. ref: https://www.relishapp.com/rspec/rspec-expectations/docs/built-in-matchers
+    end
+  end
+
+  # unit tests for dynamic_client_registration_delete_o_auth2_client
+  # Deletes an OAuth 2.0 Client using the OpenID / OAuth2 Dynamic Client Registration Management Protocol
+  # This endpoint behaves like the administrative counterpart (`deleteOAuth2Client`) but is capable of facing the public internet directly and can be used in self-service. It implements the OpenID Connect Dynamic Client Registration Protocol. This feature needs to be enabled in the configuration. This endpoint is disabled by default. It can be enabled by an administrator.  To use this endpoint, you will need to present the client's authentication credentials. If the OAuth2 Client uses the Token Endpoint Authentication Method `client_secret_post`, you need to present the client secret in the URL query. If it uses `client_secret_basic`, present the Client ID and the Client Secret in the Authorization header.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+  # @param id The id of the OAuth 2.0 Client.
+  # @param [Hash] opts the optional parameters
+  # @return [nil]
+  describe 'dynamic_client_registration_delete_o_auth2_client test' do
+    it 'should work' do
+      # assertion here. ref: https://www.relishapp.com/rspec/rspec-expectations/docs/built-in-matchers
+    end
+  end
+
+  # unit tests for dynamic_client_registration_get_o_auth2_client
+  # Get an OAuth 2.0 Client using the OpenID / OAuth2 Dynamic Client Registration Management Protocol
+  # This endpoint behaves like the administrative counterpart (`getOAuth2Client`) but is capable of facing the public internet directly and can be used in self-service. It implements the OpenID Connect Dynamic Client Registration Protocol. This feature needs to be enabled in the configuration. This endpoint is disabled by default. It can be enabled by an administrator.  To use this endpoint, you will need to present the client's authentication credentials. If the OAuth2 Client uses the Token Endpoint Authentication Method `client_secret_post`, you need to present the client secret in the URL query. If it uses `client_secret_basic`, present the Client ID and the Client Secret in the Authorization header.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+  # @param id The id of the OAuth 2.0 Client.
+  # @param [Hash] opts the optional parameters
+  # @return [OAuth2Client]
+  describe 'dynamic_client_registration_get_o_auth2_client test' do
+    it 'should work' do
+      # assertion here. ref: https://www.relishapp.com/rspec/rspec-expectations/docs/built-in-matchers
+    end
+  end
+
+  # unit tests for dynamic_client_registration_update_o_auth2_client
+  # Update an OAuth 2.0 Client using the OpenID / OAuth2 Dynamic Client Registration Management Protocol
+  # This endpoint behaves like the administrative counterpart (`updateOAuth2Client`) but is capable of facing the public internet directly and can be used in self-service. It implements the OpenID Connect Dynamic Client Registration Protocol. This feature needs to be enabled in the configuration. This endpoint is disabled by default. It can be enabled by an administrator.  If you pass `client_secret` the secret will be updated and returned via the API. This is the only time you will be able to retrieve the client secret, so write it down and keep it safe.  To use this endpoint, you will need to present the client's authentication credentials. If the OAuth2 Client uses the Token Endpoint Authentication Method `client_secret_post`, you need to present the client secret in the URL query. If it uses `client_secret_basic`, present the Client ID and the Client Secret in the Authorization header.  OAuth 2.0 clients are used to perform OAuth 2.0 and OpenID Connect flows. Usually, OAuth 2.0 clients are generated for applications which want to consume your OAuth 2.0 or OpenID Connect capabilities.
+  # @param id The id of the OAuth 2.0 Client.
+  # @param o_auth2_client 
   # @param [Hash] opts the optional parameters
-  # @return [HealthStatus]
-  describe 'is_instance_ready test' do
+  # @return [OAuth2Client]
+  describe 'dynamic_client_registration_update_o_auth2_client test' do
     it 'should work' do
       # assertion here. ref: https://www.relishapp.com/rspec/rspec-expectations/docs/built-in-matchers
     end
   end
 
   # unit tests for oauth2_token
-  # The OAuth 2.0 token endpoint
-  # The client makes a request to the token endpoint by sending the following parameters using the \"application/x-www-form-urlencoded\" HTTP request entity-body.  > Do not implement a client for this endpoint yourself. Use a library. There are many libraries > available for any programming language. You can find a list of libraries here: https://oauth.net/code/ > > Do not the the Hydra SDK does not implement this endpoint properly. Use one of the libraries listed above!
+  # The OAuth 2.0 Token Endpoint
+  # The client makes a request to the token endpoint by sending the following parameters using the \"application/x-www-form-urlencoded\" HTTP request entity-body.  > Do not implement a client for this endpoint yourself. Use a library. There are many libraries > available for any programming language. You can find a list of libraries here: https://oauth.net/code/ > > Do note that Hydra SDK does not implement this endpoint properly. Use one of the libraries listed above!
   # @param grant_type 
   # @param [Hash] opts the optional parameters
+  # @option opts [String] :client_id 
   # @option opts [String] :code 
-  # @option opts [String] :refresh_token 
   # @option opts [String] :redirect_uri 
-  # @option opts [String] :client_id 
+  # @option opts [String] :refresh_token 
   # @return [Oauth2TokenResponse]
   describe 'oauth2_token test' do
     it 'should work' do
@@ -82,7 +120,7 @@ describe 'PublicApi' do
   end
 
   # unit tests for oauth_auth
-  # The OAuth 2.0 authorize endpoint
+  # The OAuth 2.0 Authorize Endpoint
   # This endpoint is not documented here because you should never use your own implementation to perform OAuth2 flows. OAuth2 is a very popular protocol and a library for your programming language will exists.  To learn more about this flow please refer to the specification: https://tools.ietf.org/html/rfc6749
   # @param [Hash] opts the optional parameters
   # @return [nil]
@@ -93,7 +131,7 @@ describe 'PublicApi' do
   end
 
   # unit tests for revoke_o_auth2_token
-  # Revoke OAuth2 tokens
+  # Revoke OAuth2 Tokens
   # Revoking a token (both access and refresh) means that the tokens will be invalid. A revoked access token can no longer be used to make access requests, and a revoked refresh token can no longer be used to refresh an access token. Revoking a refresh token also invalidates the access token that was created with it. A token may only be revoked by the client the token was generated for.
   # @param token 
   # @param [Hash] opts the optional parameters
@@ -106,7 +144,7 @@ describe 'PublicApi' do
 
   # unit tests for userinfo
   # OpenID Connect Userinfo
-  # This endpoint returns the payload of the ID Token, including the idTokenExtra values, of the provided OAuth 2.0 Access Token.  For more information please [refer to the spec](http://openid.net/specs/openid-connect-core-1_0.html#UserInfo).
+  # This endpoint returns the payload of the ID Token, including the idTokenExtra values, of the provided OAuth 2.0 Access Token.  For more information please [refer to the spec](http://openid.net/specs/openid-connect-core-1_0.html#UserInfo).  In the case of authentication error, a WWW-Authenticate header might be set in the response with more information about the error. See [the spec](https://datatracker.ietf.org/doc/html/rfc6750#section-3) for more details about header format.
   # @param [Hash] opts the optional parameters
   # @return [UserinfoResponse]
   describe 'userinfo test' do

data/spec/api_client_spec.rb

@@ -1,12 +1,12 @@
 =begin
-#ORY Hydra
+#Ory Oathkeeper API
 
-#Welcome to the ORY Hydra HTTP API documentation. You will find documentation for all HTTP APIs here.
-
-The version of the OpenAPI document: v1.10.6
+#Documentation for all of Ory Oathkeeper's APIs. 
 
+The version of the OpenAPI document: v1.11.4
+Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
-OpenAPI Generator version: 5.2.1
+OpenAPI Generator version: 5.4.0
 
 =end
 
@@ -197,8 +197,8 @@ describe OryHydraClient::ApiClient do
     let(:api_client) { OryHydraClient::ApiClient.new }
 
     it 'works' do
-      expect(api_client.select_header_content_type(nil)).to eq('application/json')
-      expect(api_client.select_header_content_type([])).to eq('application/json')
+      expect(api_client.select_header_content_type(nil)).to be_nil
+      expect(api_client.select_header_content_type([])).to be_nil
 
       expect(api_client.select_header_content_type(['application/json'])).to eq('application/json')
       expect(api_client.select_header_content_type(['application/xml', 'application/json; charset=UTF8'])).to eq('application/json; charset=UTF8')

data/spec/configuration_spec.rb

@@ -1,12 +1,12 @@
 =begin
-#ORY Hydra
+#Ory Oathkeeper API
 
-#Welcome to the ORY Hydra HTTP API documentation. You will find documentation for all HTTP APIs here.
-
-The version of the OpenAPI document: v1.10.6
+#Documentation for all of Ory Oathkeeper's APIs. 
 
+The version of the OpenAPI document: v1.11.4
+Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
-OpenAPI Generator version: 5.2.1
+OpenAPI Generator version: 5.4.0
 
 =end