ory-hydra-client 2.0.1 → 2.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 619455d8b6f1e2ddc5209efa444e60d8d2e0ac6f30f555bf5af40a89586a2f2b
-  data.tar.gz: 71be117ff713d65437e4d958066cc31da5fdadbe763f2b0ad0ba40bd856eb30e
+  metadata.gz: 16481df72b0e8b54d8dfdcd468a895117be3bad7f06f3eca0f5e78391bb1f7a8
+  data.tar.gz: 42a6ff68f1f0b54a2f6dbd8e506610ca82949d07b1290ce7ada19aba437b7357
 SHA512:
-  metadata.gz: 0444d3b04c53b0b32bfdaa9ccab9c7ff83cc6bd974bd05d67dacf2f33affb3f49f410cd196bd1c87be32e51c4d36e8b124a7039db1dcd0a584f8729bb2c15f45
-  data.tar.gz: 070a595480610ccd3b680d1492e7e439d7873305e0e6837e9fc4383a89530482e6c2938d41ccb76b2b993ef6b946c50978ed6dab76a8a716fda97627c093e63b
+  metadata.gz: ed07fc5c4145697e3589a54dac093a1da938b8533b373abc2be655ef35ab165bec6451b763f7cfd8f791462c16c19f6ed1594287bcaa0ff8350dce01a557e098
+  data.tar.gz: 636f020e5bd88dae8608ce064cc0da3d07a914d4311b5af06d1825a50260c411e4bbbbb71c6fcbbe0208e3e1c67e309f09cd96a7ee6bef647ae88c1249fc1697

data/Gemfile

@@ -6,4 +6,5 @@ group :development, :test do
   gem 'rake', '~> 13.0.1'
   gem 'pry-byebug'
   gem 'rubocop', '~> 0.66.0'
+  gem 'psych', '~> 4.0.6'
 end

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    ory-hydra-client (2.0.1)
+    ory-hydra-client (2.1.0)
       typhoeus (~> 1.0, >= 1.0.1)
 
 GEM
@@ -11,13 +11,13 @@ GEM
     byebug (11.1.3)
     coderay (1.1.3)
     diff-lcs (1.5.0)
-    ethon (0.15.0)
+    ethon (0.16.0)
       ffi (>= 1.15.0)
     ffi (1.15.5)
     jaro_winkler (1.5.4)
     method_source (1.0.0)
     parallel (1.22.1)
-    parser (3.1.2.1)
+    parser (3.2.2.0)
       ast (~> 2.4.1)
     pry (0.13.1)
       coderay (~> 1.1)
@@ -33,12 +33,12 @@ GEM
       rspec-core (~> 3.12.0)
       rspec-expectations (~> 3.12.0)
       rspec-mocks (~> 3.12.0)
-    rspec-core (3.12.0)
+    rspec-core (3.12.1)
       rspec-support (~> 3.12.0)
-    rspec-expectations (3.12.0)
+    rspec-expectations (3.12.2)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.12.0)
-    rspec-mocks (3.12.0)
+    rspec-mocks (3.12.5)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.12.0)
     rspec-support (3.12.0)
@@ -50,8 +50,8 @@ GEM
       rainbow (>= 2.2.2, < 4.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 1.4.0, < 1.6)
-    ruby-progressbar (1.11.0)
-    stringio (3.0.2)
+    ruby-progressbar (1.13.0)
+    stringio (3.0.5)
     typhoeus (1.4.0)
       ethon (>= 0.9.0)
     unicode-display_width (1.5.0)
@@ -62,6 +62,7 @@ PLATFORMS
 DEPENDENCIES
   ory-hydra-client!
   pry-byebug
+  psych (~> 4.0.6)
   rake (~> 13.0.1)
   rspec (~> 3.6, >= 3.6.0)
   rubocop (~> 0.66.0)

data/README.md

@@ -7,8 +7,8 @@ Documentation for all of Ory Hydra's APIs.
 
 This SDK is automatically generated by the [OpenAPI Generator](https://openapi-generator.tech) project:
 
-- API version: v2.0.1
-- Package version: v2.0.1
+- API version: v2.1.0
+- Package version: v2.1.0
 - Build package: org.openapitools.codegen.languages.RubyClientCodegen
 
 ## Installation
@@ -24,16 +24,16 @@ gem build ory-hydra-client.gemspec
 Then either install the gem locally:
 
 ```shell
-gem install ./ory-hydra-client-v2.0.1.gem
+gem install ./ory-hydra-client-v2.1.0.gem
 ```
 
-(for development, run `gem install --dev ./ory-hydra-client-v2.0.1.gem` to install the development dependencies)
+(for development, run `gem install --dev ./ory-hydra-client-v2.1.0.gem` to install the development dependencies)
 
 or publish the gem to a gem hosting service, e.g. [RubyGems](https://rubygems.org/).
 
 Finally add this to the Gemfile:
 
-    gem 'ory-hydra-client', '~> v2.0.1'
+    gem 'ory-hydra-client', '~> v2.1.0'
 
 ### Install from Git
 
@@ -110,7 +110,7 @@ Class | Method | HTTP request | Description
 *OryHydraClient::OAuth2Api* | [**reject_o_auth2_login_request**](docs/OAuth2Api.md#reject_o_auth2_login_request) | **PUT** /admin/oauth2/auth/requests/login/reject | Reject OAuth 2.0 Login Request
 *OryHydraClient::OAuth2Api* | [**reject_o_auth2_logout_request**](docs/OAuth2Api.md#reject_o_auth2_logout_request) | **PUT** /admin/oauth2/auth/requests/logout/reject | Reject OAuth 2.0 Session Logout Request
 *OryHydraClient::OAuth2Api* | [**revoke_o_auth2_consent_sessions**](docs/OAuth2Api.md#revoke_o_auth2_consent_sessions) | **DELETE** /admin/oauth2/auth/sessions/consent | Revoke OAuth 2.0 Consent Sessions of a Subject
-*OryHydraClient::OAuth2Api* | [**revoke_o_auth2_login_sessions**](docs/OAuth2Api.md#revoke_o_auth2_login_sessions) | **DELETE** /admin/oauth2/auth/sessions/login | Revokes All OAuth 2.0 Login Sessions of a Subject
+*OryHydraClient::OAuth2Api* | [**revoke_o_auth2_login_sessions**](docs/OAuth2Api.md#revoke_o_auth2_login_sessions) | **DELETE** /admin/oauth2/auth/sessions/login | Revokes OAuth 2.0 Login Sessions by either a Subject or a SessionID
 *OryHydraClient::OAuth2Api* | [**revoke_o_auth2_token**](docs/OAuth2Api.md#revoke_o_auth2_token) | **POST** /oauth2/revoke | Revoke OAuth 2.0 Access or Refresh Token
 *OryHydraClient::OAuth2Api* | [**set_o_auth2_client**](docs/OAuth2Api.md#set_o_auth2_client) | **PUT** /admin/clients/{id} | Set OAuth 2.0 Client
 *OryHydraClient::OAuth2Api* | [**set_o_auth2_client_lifespans**](docs/OAuth2Api.md#set_o_auth2_client_lifespans) | **PUT** /admin/clients/{id}/lifespans | Set OAuth2 Client Token Lifespans

data/docs/AcceptOAuth2LoginRequest.md

@@ -7,6 +7,7 @@
 | **acr** | **String** | ACR sets the Authentication AuthorizationContext Class Reference value for this authentication session. You can use it to express that, for example, a user authenticated using two factor authentication. | [optional] |
 | **amr** | **Array<String>** |  | [optional] |
 | **context** | **Object** |  | [optional] |
+| **extend_session_lifespan** | **Boolean** | Extend OAuth2 authentication session lifespan  If set to `true`, the OAuth2 authentication cookie lifespan is extended. This is for example useful if you want the user to be able to use `prompt=none` continuously.  This value can only be set to `true` if the user has an authentication, which is the case if the `skip` value is `true`. | [optional] |
 | **force_subject_identifier** | **String** | ForceSubjectIdentifier forces the \"pairwise\" user ID of the end-user that authenticated. The \"pairwise\" user ID refers to the (Pairwise Identifier Algorithm)[http://openid.net/specs/openid-connect-core-1_0.html#PairwiseAlg] of the OpenID Connect specification. It allows you to set an obfuscated subject (\"user\") identifier that is unique to the client.  Please note that this changes the user ID on endpoint /userinfo and sub claim of the ID Token. It does not change the sub claim in the OAuth 2.0 Introspection.  Per default, ORY Hydra handles this value with its own algorithm. In case you want to set this yourself you can use this field. Please note that setting this field has no effect if `pairwise` is not configured in ORY Hydra or the OAuth 2.0 Client does not expect a pairwise identifier (set via `subject_type` key in the client's configuration).  Please also be aware that ORY Hydra is unable to properly compute this value during authentication. This implies that you have to compute this value on every authentication process (probably depending on the client ID or some other unique value).  If you fail to compute the proper value, then authentication processes which have id_token_hint set might fail. | [optional] |
 | **remember** | **Boolean** | Remember, if set to true, tells ORY Hydra to remember this user by telling the user agent (browser) to store a cookie with authentication data. If the same user performs another OAuth 2.0 Authorization Request, he/she will not be asked to log in again. | [optional] |
 | **remember_for** | **Integer** | RememberFor sets how long the authentication should be remembered for in seconds. If set to `0`, the authorization will be remembered for the duration of the browser session (using a session cookie). | [optional] |
@@ -21,6 +22,7 @@ instance = OryHydraClient::AcceptOAuth2LoginRequest.new(
   acr: null,
   amr: null,
   context: null,
+  extend_session_lifespan: null,
   force_subject_identifier: null,
   remember: null,
   remember_for: null,

data/docs/OAuth2Api.md

@@ -27,7 +27,7 @@ All URIs are relative to *http://localhost*
 | [**reject_o_auth2_login_request**](OAuth2Api.md#reject_o_auth2_login_request) | **PUT** /admin/oauth2/auth/requests/login/reject | Reject OAuth 2.0 Login Request |
 | [**reject_o_auth2_logout_request**](OAuth2Api.md#reject_o_auth2_logout_request) | **PUT** /admin/oauth2/auth/requests/logout/reject | Reject OAuth 2.0 Session Logout Request |
 | [**revoke_o_auth2_consent_sessions**](OAuth2Api.md#revoke_o_auth2_consent_sessions) | **DELETE** /admin/oauth2/auth/sessions/consent | Revoke OAuth 2.0 Consent Sessions of a Subject |
-| [**revoke_o_auth2_login_sessions**](OAuth2Api.md#revoke_o_auth2_login_sessions) | **DELETE** /admin/oauth2/auth/sessions/login | Revokes All OAuth 2.0 Login Sessions of a Subject |
+| [**revoke_o_auth2_login_sessions**](OAuth2Api.md#revoke_o_auth2_login_sessions) | **DELETE** /admin/oauth2/auth/sessions/login | Revokes OAuth 2.0 Login Sessions by either a Subject or a SessionID |
 | [**revoke_o_auth2_token**](OAuth2Api.md#revoke_o_auth2_token) | **POST** /oauth2/revoke | Revoke OAuth 2.0 Access or Refresh Token |
 | [**set_o_auth2_client**](OAuth2Api.md#set_o_auth2_client) | **PUT** /admin/clients/{id} | Set OAuth 2.0 Client |
 | [**set_o_auth2_client_lifespans**](OAuth2Api.md#set_o_auth2_client_lifespans) | **PUT** /admin/clients/{id}/lifespans | Set OAuth2 Client Token Lifespans |
@@ -965,7 +965,8 @@ api_instance = OryHydraClient::OAuth2Api.new
 subject = 'subject_example' # String | The subject to list the consent sessions for.
 opts = {
   page_size: 789, # Integer | Items per Page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).
-  page_token: 'page_token_example' # String | Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).
+  page_token: 'page_token_example', # String | Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination).
+  login_session_id: 'login_session_id_example' # String | The login session id to list the consent sessions for.
 }
 
 begin
@@ -1002,6 +1003,7 @@ end
 | **subject** | **String** | The subject to list the consent sessions for. |  |
 | **page_size** | **Integer** | Items per Page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). | [optional][default to 250] |
 | **page_token** | **String** | Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). | [optional][default to '1'] |
+| **login_session_id** | **String** | The login session id to list the consent sessions for. | [optional] |
 
 ### Return type
 
@@ -1567,11 +1569,11 @@ No authorization required
 
 ## revoke_o_auth2_login_sessions
 
-> revoke_o_auth2_login_sessions(subject)
+> revoke_o_auth2_login_sessions(opts)
 
-Revokes All OAuth 2.0 Login Sessions of a Subject
+Revokes OAuth 2.0 Login Sessions by either a Subject or a SessionID
 
-This endpoint invalidates a subject's authentication session. After revoking the authentication session, the subject has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens and does not work with OpenID Connect Front- or Back-channel logout.
+This endpoint invalidates authentication sessions. After revoking the authentication session(s), the subject has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens.  If you send the subject in a query param, all authentication sessions that belong to that subject are revoked. No OpennID Connect Front- or Back-channel logout is performed in this case.  Alternatively, you can send a SessionID via `sid` query param, in which case, only the session that is connected to that SessionID is revoked. OpenID Connect Back-channel logout is performed in this case.
 
 ### Examples
 
@@ -1580,11 +1582,14 @@ require 'time'
 require 'ory-hydra-client'
 
 api_instance = OryHydraClient::OAuth2Api.new
-subject = 'subject_example' # String | OAuth 2.0 Subject  The subject to revoke authentication sessions for.
+opts = {
+  subject: 'subject_example', # String | OAuth 2.0 Subject  The subject to revoke authentication sessions for.
+  sid: 'sid_example' # String | OAuth 2.0 Subject  The subject to revoke authentication sessions for.
+}
 
 begin
-  # Revokes All OAuth 2.0 Login Sessions of a Subject
-  api_instance.revoke_o_auth2_login_sessions(subject)
+  # Revokes OAuth 2.0 Login Sessions by either a Subject or a SessionID
+  api_instance.revoke_o_auth2_login_sessions(opts)
 rescue OryHydraClient::ApiError => e
   puts "Error when calling OAuth2Api->revoke_o_auth2_login_sessions: #{e}"
 end
@@ -1594,12 +1599,12 @@ end
 
 This returns an Array which contains the response data (`nil` in this case), status code and headers.
 
-> <Array(nil, Integer, Hash)> revoke_o_auth2_login_sessions_with_http_info(subject)
+> <Array(nil, Integer, Hash)> revoke_o_auth2_login_sessions_with_http_info(opts)
 
 ```ruby
 begin
-  # Revokes All OAuth 2.0 Login Sessions of a Subject
-  data, status_code, headers = api_instance.revoke_o_auth2_login_sessions_with_http_info(subject)
+  # Revokes OAuth 2.0 Login Sessions by either a Subject or a SessionID
+  data, status_code, headers = api_instance.revoke_o_auth2_login_sessions_with_http_info(opts)
   p status_code # => 2xx
   p headers # => { ... }
   p data # => nil
@@ -1612,7 +1617,8 @@ end
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **subject** | **String** | OAuth 2.0 Subject  The subject to revoke authentication sessions for. |  |
+| **subject** | **String** | OAuth 2.0 Subject  The subject to revoke authentication sessions for. | [optional] |
+| **sid** | **String** | OAuth 2.0 Subject  The subject to revoke authentication sessions for. | [optional] |
 
 ### Return type
 
@@ -1630,7 +1636,7 @@ No authorization required
 
 ## revoke_o_auth2_token
 
-> revoke_o_auth2_token(token)
+> revoke_o_auth2_token(token, opts)
 
 Revoke OAuth 2.0 Access or Refresh Token
 
@@ -1653,10 +1659,14 @@ end
 
 api_instance = OryHydraClient::OAuth2Api.new
 token = 'token_example' # String | 
+opts = {
+  client_id: 'client_id_example', # String | 
+  client_secret: 'client_secret_example' # String | 
+}
 
 begin
   # Revoke OAuth 2.0 Access or Refresh Token
-  api_instance.revoke_o_auth2_token(token)
+  api_instance.revoke_o_auth2_token(token, opts)
 rescue OryHydraClient::ApiError => e
   puts "Error when calling OAuth2Api->revoke_o_auth2_token: #{e}"
 end
@@ -1666,12 +1676,12 @@ end
 
 This returns an Array which contains the response data (`nil` in this case), status code and headers.
 
-> <Array(nil, Integer, Hash)> revoke_o_auth2_token_with_http_info(token)
+> <Array(nil, Integer, Hash)> revoke_o_auth2_token_with_http_info(token, opts)
 
 ```ruby
 begin
   # Revoke OAuth 2.0 Access or Refresh Token
-  data, status_code, headers = api_instance.revoke_o_auth2_token_with_http_info(token)
+  data, status_code, headers = api_instance.revoke_o_auth2_token_with_http_info(token, opts)
   p status_code # => 2xx
   p headers # => { ... }
   p data # => nil
@@ -1685,6 +1695,8 @@ end
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **token** | **String** |  |  |
+| **client_id** | **String** |  | [optional] |
+| **client_secret** | **String** |  | [optional] |
 
 ### Return type
 

data/docs/OAuth2Client.md

@@ -4,6 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **access_token_strategy** | **String** | OAuth 2.0 Access Token Strategy  AccessTokenStrategy is the strategy used to generate access tokens. Valid options are `jwt` and `opaque`. `jwt` is a bad idea, see https://www.ory.sh/docs/hydra/advanced#json-web-tokens Setting the stragegy here overrides the global setting in `strategies.access_token`. | [optional] |
 | **allowed_cors_origins** | **Array<String>** |  | [optional] |
 | **audience** | **Array<String>** |  | [optional] |
 | **authorization_code_grant_access_token_lifespan** | **String** | Specify a time duration in milliseconds, seconds, minutes, hours. | [optional] |
@@ -43,8 +44,9 @@
 | **response_types** | **Array<String>** |  | [optional] |
 | **scope** | **String** | OAuth 2.0 Client Scope  Scope is a string containing a space-separated list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749]) that the client can use when requesting access tokens. | [optional] |
 | **sector_identifier_uri** | **String** | OpenID Connect Sector Identifier URI  URL using the https scheme to be used in calculating Pseudonymous Identifiers by the OP. The URL references a file with a single JSON array of redirect_uri values. | [optional] |
+| **skip_consent** | **Boolean** | SkipConsent skips the consent screen for this client. This field can only be set from the admin API. | [optional] |
 | **subject_type** | **String** | OpenID Connect Subject Type  The `subject_types_supported` Discovery parameter contains a list of the supported subject_type values for this server. Valid types include `pairwise` and `public`. | [optional] |
-| **token_endpoint_auth_method** | **String** | OAuth 2.0 Token Endpoint Authentication Method  Requested Client Authentication method for the Token Endpoint. The options are:  `client_secret_post`: (default) Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` in the HTTP body. `client_secret_basic`: Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` encoded in the HTTP Authorization header. `private_key_jwt`: Use JSON Web Tokens to authenticate the client. `none`: Used for public clients (native apps, mobile apps) which can not have secrets. | [optional] |
+| **token_endpoint_auth_method** | **String** | OAuth 2.0 Token Endpoint Authentication Method  Requested Client Authentication method for the Token Endpoint. The options are:  `client_secret_basic`: (default) Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` encoded in the HTTP Authorization header. `client_secret_post`: Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` in the HTTP body. `private_key_jwt`: Use JSON Web Tokens to authenticate the client. `none`: Used for public clients (native apps, mobile apps) which can not have secrets. | [optional][default to 'client_secret_basic'] |
 | **token_endpoint_auth_signing_alg** | **String** | OAuth 2.0 Token Endpoint Signing Algorithm  Requested Client Authentication signing algorithm for the Token Endpoint. | [optional] |
 | **tos_uri** | **String** | OAuth 2.0 Client Terms of Service URI  A URL string pointing to a human-readable terms of service document for the client that describes a contractual relationship between the end-user and the client that the end-user accepts when authorizing the client. | [optional] |
 | **updated_at** | **Time** | OAuth 2.0 Client Last Update Date  UpdatedAt returns the timestamp of the last update. | [optional] |
@@ -56,6 +58,7 @@
 require 'ory-hydra-client'
 
 instance = OryHydraClient::OAuth2Client.new(
+  access_token_strategy: null,
   allowed_cors_origins: null,
   audience: null,
   authorization_code_grant_access_token_lifespan: null,
@@ -95,6 +98,7 @@ instance = OryHydraClient::OAuth2Client.new(
   response_types: null,
   scope: scope1 scope-2 scope.3 scope:4,
   sector_identifier_uri: null,
+  skip_consent: null,
   subject_type: null,
   token_endpoint_auth_method: null,
   token_endpoint_auth_signing_alg: null,

data/docs/OAuth2TokenExchange.md

@@ -8,7 +8,7 @@
 | **expires_in** | **Integer** | The lifetime in seconds of the access token. For example, the value \"3600\" denotes that the access token will expire in one hour from the time the response was generated. | [optional] |
 | **id_token** | **Integer** | To retrieve a refresh token request the id_token scope. | [optional] |
 | **refresh_token** | **String** | The refresh token, which can be used to obtain new access tokens. To retrieve it add the scope \"offline\" to your access token request. | [optional] |
-| **scope** | **Integer** | The scope of the access token | [optional] |
+| **scope** | **String** | The scope of the access token | [optional] |
 | **token_type** | **String** | The type of the token issued | [optional] |
 
 ## Example

data/docs/TokenPaginationResponseHeaders.md

@@ -4,7 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **link** | **String** | The Link HTTP Header  The `Link` header contains a comma-delimited list of links to the following pages:  first: The first page of results. next: The next page of results. prev: The previous page of results. last: The last page of results.  Pages are omitted if they do not exist. For example, if there is no next page, the `next` link is omitted. Examples:  </clients?limit=5&offset=0>; rel=\"first\",</clients?limit=5&offset=15>; rel=\"next\",</clients?limit=5&offset=5>; rel=\"prev\",</clients?limit=5&offset=20>; rel=\"last\" | [optional] |
+| **link** | **String** | The Link HTTP Header  The `Link` header contains a comma-delimited list of links to the following pages:  first: The first page of results. next: The next page of results. prev: The previous page of results. last: The last page of results.  Pages are omitted if they do not exist. For example, if there is no next page, the `next` link is omitted. Examples:  </clients?page_size=5&page_token=0>; rel=\"first\",</clients?page_size=5&page_token=15>; rel=\"next\",</clients?page_size=5&page_token=5>; rel=\"prev\",</clients?page_size=5&page_token=20>; rel=\"last\" | [optional] |
 | **x_total_count** | **Integer** | The X-Total-Count HTTP Header  The `X-Total-Count` header contains the total number of items in the collection. | [optional] |
 
 ## Example

data/lib/ory-hydra-client/api/jwk_api.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.0.1
+The version of the OpenAPI document: v2.1.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1

data/lib/ory-hydra-client/api/metadata_api.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.0.1
+The version of the OpenAPI document: v2.1.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1

data/lib/ory-hydra-client/api/o_auth2_api.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.0.1
+The version of the OpenAPI document: v2.1.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1
@@ -956,6 +956,7 @@ module OryHydraClient
     # @param [Hash] opts the optional parameters
     # @option opts [Integer] :page_size Items per Page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). (default to 250)
     # @option opts [String] :page_token Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). (default to '1')
+    # @option opts [String] :login_session_id The login session id to list the consent sessions for.
     # @return [Array<OAuth2ConsentSession>]
     def list_o_auth2_consent_sessions(subject, opts = {})
       data, _status_code, _headers = list_o_auth2_consent_sessions_with_http_info(subject, opts)
@@ -968,6 +969,7 @@ module OryHydraClient
     # @param [Hash] opts the optional parameters
     # @option opts [Integer] :page_size Items per Page  This is the number of items per page to return. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). (default to 250)
     # @option opts [String] :page_token Next Page Token  The next page token. For details on pagination please head over to the [pagination documentation](https://www.ory.sh/docs/ecosystem/api-design#pagination). (default to '1')
+    # @option opts [String] :login_session_id The login session id to list the consent sessions for.
     # @return [Array<(Array<OAuth2ConsentSession>, Integer, Hash)>] Array<OAuth2ConsentSession> data, response status code and response headers
     def list_o_auth2_consent_sessions_with_http_info(subject, opts = {})
       if @api_client.config.debugging
@@ -993,6 +995,7 @@ module OryHydraClient
       query_params[:'subject'] = subject
       query_params[:'page_size'] = opts[:'page_size'] if !opts[:'page_size'].nil?
       query_params[:'page_token'] = opts[:'page_token'] if !opts[:'page_token'].nil?
+      query_params[:'login_session_id'] = opts[:'login_session_id'] if !opts[:'login_session_id'].nil?
 
       # header parameters
       header_params = opts[:header_params] || {}
@@ -1582,35 +1585,34 @@ module OryHydraClient
       return data, status_code, headers
     end
 
-    # Revokes All OAuth 2.0 Login Sessions of a Subject
-    # This endpoint invalidates a subject's authentication session. After revoking the authentication session, the subject has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens and does not work with OpenID Connect Front- or Back-channel logout.
-    # @param subject [String] OAuth 2.0 Subject  The subject to revoke authentication sessions for.
+    # Revokes OAuth 2.0 Login Sessions by either a Subject or a SessionID
+    # This endpoint invalidates authentication sessions. After revoking the authentication session(s), the subject has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens.  If you send the subject in a query param, all authentication sessions that belong to that subject are revoked. No OpennID Connect Front- or Back-channel logout is performed in this case.  Alternatively, you can send a SessionID via `sid` query param, in which case, only the session that is connected to that SessionID is revoked. OpenID Connect Back-channel logout is performed in this case.
     # @param [Hash] opts the optional parameters
+    # @option opts [String] :subject OAuth 2.0 Subject  The subject to revoke authentication sessions for.
+    # @option opts [String] :sid OAuth 2.0 Subject  The subject to revoke authentication sessions for.
     # @return [nil]
-    def revoke_o_auth2_login_sessions(subject, opts = {})
-      revoke_o_auth2_login_sessions_with_http_info(subject, opts)
+    def revoke_o_auth2_login_sessions(opts = {})
+      revoke_o_auth2_login_sessions_with_http_info(opts)
       nil
     end
 
-    # Revokes All OAuth 2.0 Login Sessions of a Subject
-    # This endpoint invalidates a subject&#39;s authentication session. After revoking the authentication session, the subject has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens and does not work with OpenID Connect Front- or Back-channel logout.
-    # @param subject [String] OAuth 2.0 Subject  The subject to revoke authentication sessions for.
+    # Revokes OAuth 2.0 Login Sessions by either a Subject or a SessionID
+    # This endpoint invalidates authentication sessions. After revoking the authentication session(s), the subject has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens.  If you send the subject in a query param, all authentication sessions that belong to that subject are revoked. No OpennID Connect Front- or Back-channel logout is performed in this case.  Alternatively, you can send a SessionID via &#x60;sid&#x60; query param, in which case, only the session that is connected to that SessionID is revoked. OpenID Connect Back-channel logout is performed in this case.
     # @param [Hash] opts the optional parameters
+    # @option opts [String] :subject OAuth 2.0 Subject  The subject to revoke authentication sessions for.
+    # @option opts [String] :sid OAuth 2.0 Subject  The subject to revoke authentication sessions for.
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
-    def revoke_o_auth2_login_sessions_with_http_info(subject, opts = {})
+    def revoke_o_auth2_login_sessions_with_http_info(opts = {})
       if @api_client.config.debugging
         @api_client.config.logger.debug 'Calling API: OAuth2Api.revoke_o_auth2_login_sessions ...'
       end
-      # verify the required parameter 'subject' is set
-      if @api_client.config.client_side_validation && subject.nil?
-        fail ArgumentError, "Missing the required parameter 'subject' when calling OAuth2Api.revoke_o_auth2_login_sessions"
-      end
       # resource path
       local_var_path = '/admin/oauth2/auth/sessions/login'
 
       # query parameters
       query_params = opts[:query_params] || {}
-      query_params[:'subject'] = subject
+      query_params[:'subject'] = opts[:'subject'] if !opts[:'subject'].nil?
+      query_params[:'sid'] = opts[:'sid'] if !opts[:'sid'].nil?
 
       # header parameters
       header_params = opts[:header_params] || {}
@@ -1650,6 +1652,8 @@ module OryHydraClient
     # Revoking a token (both access and refresh) means that the tokens will be invalid. A revoked access token can no longer be used to make access requests, and a revoked refresh token can no longer be used to refresh an access token. Revoking a refresh token also invalidates the access token that was created with it. A token may only be revoked by the client the token was generated for.
     # @param token [String] 
     # @param [Hash] opts the optional parameters
+    # @option opts [String] :client_id 
+    # @option opts [String] :client_secret 
     # @return [nil]
     def revoke_o_auth2_token(token, opts = {})
       revoke_o_auth2_token_with_http_info(token, opts)
@@ -1660,6 +1664,8 @@ module OryHydraClient
     # Revoking a token (both access and refresh) means that the tokens will be invalid. A revoked access token can no longer be used to make access requests, and a revoked refresh token can no longer be used to refresh an access token. Revoking a refresh token also invalidates the access token that was created with it. A token may only be revoked by the client the token was generated for.
     # @param token [String] 
     # @param [Hash] opts the optional parameters
+    # @option opts [String] :client_id 
+    # @option opts [String] :client_secret 
     # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
     def revoke_o_auth2_token_with_http_info(token, opts = {})
       if @api_client.config.debugging
@@ -1688,6 +1694,8 @@ module OryHydraClient
       # form parameters
       form_params = opts[:form_params] || {}
       form_params['token'] = token
+      form_params['client_id'] = opts[:'client_id'] if !opts[:'client_id'].nil?
+      form_params['client_secret'] = opts[:'client_secret'] if !opts[:'client_secret'].nil?
 
       # http body (model)
       post_body = opts[:debug_body]

data/lib/ory-hydra-client/api/oidc_api.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.0.1
+The version of the OpenAPI document: v2.1.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1

data/lib/ory-hydra-client/api/wellknown_api.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.0.1
+The version of the OpenAPI document: v2.1.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1

data/lib/ory-hydra-client/api_client.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.0.1
+The version of the OpenAPI document: v2.1.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1

data/lib/ory-hydra-client/api_error.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.0.1
+The version of the OpenAPI document: v2.1.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1

data/lib/ory-hydra-client/configuration.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.0.1
+The version of the OpenAPI document: v2.1.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1

data/lib/ory-hydra-client/models/accept_o_auth2_consent_request.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.0.1
+The version of the OpenAPI document: v2.1.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1

data/lib/ory-hydra-client/models/accept_o_auth2_consent_request_session.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.0.1
+The version of the OpenAPI document: v2.1.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1

data/lib/ory-hydra-client/models/accept_o_auth2_login_request.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.0.1
+The version of the OpenAPI document: v2.1.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1
@@ -22,6 +22,9 @@ module OryHydraClient
 
     attr_accessor :context
 
+    # Extend OAuth2 authentication session lifespan  If set to `true`, the OAuth2 authentication cookie lifespan is extended. This is for example useful if you want the user to be able to use `prompt=none` continuously.  This value can only be set to `true` if the user has an authentication, which is the case if the `skip` value is `true`.
+    attr_accessor :extend_session_lifespan
+
     # ForceSubjectIdentifier forces the \"pairwise\" user ID of the end-user that authenticated. The \"pairwise\" user ID refers to the (Pairwise Identifier Algorithm)[http://openid.net/specs/openid-connect-core-1_0.html#PairwiseAlg] of the OpenID Connect specification. It allows you to set an obfuscated subject (\"user\") identifier that is unique to the client.  Please note that this changes the user ID on endpoint /userinfo and sub claim of the ID Token. It does not change the sub claim in the OAuth 2.0 Introspection.  Per default, ORY Hydra handles this value with its own algorithm. In case you want to set this yourself you can use this field. Please note that setting this field has no effect if `pairwise` is not configured in ORY Hydra or the OAuth 2.0 Client does not expect a pairwise identifier (set via `subject_type` key in the client's configuration).  Please also be aware that ORY Hydra is unable to properly compute this value during authentication. This implies that you have to compute this value on every authentication process (probably depending on the client ID or some other unique value).  If you fail to compute the proper value, then authentication processes which have id_token_hint set might fail.
     attr_accessor :force_subject_identifier
 
@@ -40,6 +43,7 @@ module OryHydraClient
         :'acr' => :'acr',
         :'amr' => :'amr',
         :'context' => :'context',
+        :'extend_session_lifespan' => :'extend_session_lifespan',
         :'force_subject_identifier' => :'force_subject_identifier',
         :'remember' => :'remember',
         :'remember_for' => :'remember_for',
@@ -58,6 +62,7 @@ module OryHydraClient
         :'acr' => :'String',
         :'amr' => :'Array<String>',
         :'context' => :'Object',
+        :'extend_session_lifespan' => :'Boolean',
         :'force_subject_identifier' => :'String',
         :'remember' => :'Boolean',
         :'remember_for' => :'Integer',
@@ -101,6 +106,10 @@ module OryHydraClient
         self.context = attributes[:'context']
       end
 
+      if attributes.key?(:'extend_session_lifespan')
+        self.extend_session_lifespan = attributes[:'extend_session_lifespan']
+      end
+
       if attributes.key?(:'force_subject_identifier')
         self.force_subject_identifier = attributes[:'force_subject_identifier']
       end
@@ -144,6 +153,7 @@ module OryHydraClient
           acr == o.acr &&
           amr == o.amr &&
           context == o.context &&
+          extend_session_lifespan == o.extend_session_lifespan &&
           force_subject_identifier == o.force_subject_identifier &&
           remember == o.remember &&
           remember_for == o.remember_for &&
@@ -159,7 +169,7 @@ module OryHydraClient
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [acr, amr, context, force_subject_identifier, remember, remember_for, subject].hash
+      [acr, amr, context, extend_session_lifespan, force_subject_identifier, remember, remember_for, subject].hash
     end
 
     # Builds the object from hash

data/lib/ory-hydra-client/models/create_json_web_key_set.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.0.1
+The version of the OpenAPI document: v2.1.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1

data/lib/ory-hydra-client/models/error_o_auth2.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.0.1
+The version of the OpenAPI document: v2.1.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1

data/lib/ory-hydra-client/models/generic_error.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.0.1
+The version of the OpenAPI document: v2.1.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1