ory-hydra-client 2.1.1 → 2.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8ef591cb5386e76b61410db3ea6ec6ffa0a893321f7d7388ca2b509537ecb3d1
-  data.tar.gz: 0b40cc8fe07cdc1185277e86c385e30a06870113a0279fb54197b818cea956c9
+  metadata.gz: 248c7a706a6b74dd28ff9260599dd13ab6c6a2023a03fd55017a2f724d4a3808
+  data.tar.gz: fc52bcc2cfc5fe1b82536ac15f4f1dceb734b18a43aa6dad9d60500f1f99a07c
 SHA512:
-  metadata.gz: 653827da4809385c1006f2e91406daaacfec1f19c58c86293485c2f69ff188d37ff9fe715b500ebbbd50167a12ce9607877c43721ad5f3c03b421a1726063778
-  data.tar.gz: ba381e370406d8343f520cbdc8efe635ca36418c0f5d1c5cef85e7460c81b550398565b18bf78d45b49a1176267153e273c55e8c92c90a28af7c02d62f719aa8
+  metadata.gz: 208ac6859dd0563536e88718dfdeccdefc785b2314cd3fbe77284d5cd8571dd4a7f1921513faefa1cfe77bd8042abeffeac67b8a0f89d0e123f9c62028707ced
+  data.tar.gz: 3e4ab2224a3924d739ff0bb95d0ed2db848e72347bc2cf55ab06c6739fe8a098b7d856780519add4499e94c93e954966fd493355cd90e65d9e02d4f20a36fcbf

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    ory-hydra-client (2.1.1)
+    ory-hydra-client (2.2.0)
       typhoeus (~> 1.0, >= 1.0.1)
 
 GEM
@@ -10,15 +10,16 @@ GEM
     ast (2.4.2)
     byebug (11.1.3)
     coderay (1.1.3)
-    diff-lcs (1.5.0)
+    diff-lcs (1.5.1)
     ethon (0.16.0)
       ffi (>= 1.15.0)
-    ffi (1.15.5)
-    jaro_winkler (1.5.4)
+    ffi (1.16.3)
+    jaro_winkler (1.5.6)
     method_source (1.0.0)
-    parallel (1.22.1)
-    parser (3.2.2.0)
+    parallel (1.24.0)
+    parser (3.3.0.5)
       ast (~> 2.4.1)
+      racc
     pry (0.13.1)
       coderay (~> 1.1)
       method_source (~> 1.0)
@@ -27,21 +28,22 @@ GEM
       pry (~> 0.13.0)
     psych (4.0.6)
       stringio
+    racc (1.7.3)
     rainbow (3.1.1)
     rake (13.0.6)
-    rspec (3.12.0)
-      rspec-core (~> 3.12.0)
-      rspec-expectations (~> 3.12.0)
-      rspec-mocks (~> 3.12.0)
-    rspec-core (3.12.1)
-      rspec-support (~> 3.12.0)
-    rspec-expectations (3.12.2)
+    rspec (3.13.0)
+      rspec-core (~> 3.13.0)
+      rspec-expectations (~> 3.13.0)
+      rspec-mocks (~> 3.13.0)
+    rspec-core (3.13.0)
+      rspec-support (~> 3.13.0)
+    rspec-expectations (3.13.0)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.12.0)
-    rspec-mocks (3.12.5)
+      rspec-support (~> 3.13.0)
+    rspec-mocks (3.13.0)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.12.0)
-    rspec-support (3.12.0)
+      rspec-support (~> 3.13.0)
+    rspec-support (3.13.0)
     rubocop (0.66.0)
       jaro_winkler (~> 1.5.1)
       parallel (~> 1.10)
@@ -51,8 +53,8 @@ GEM
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 1.4.0, < 1.6)
     ruby-progressbar (1.13.0)
-    stringio (3.0.5)
-    typhoeus (1.4.0)
+    stringio (3.0.6)
+    typhoeus (1.4.1)
       ethon (>= 0.9.0)
     unicode-display_width (1.5.0)
 
@@ -68,4 +70,4 @@ DEPENDENCIES
   rubocop (~> 0.66.0)
 
 BUNDLED WITH
-   2.3.14
+   2.3.26

data/README.md

@@ -7,8 +7,8 @@ Documentation for all of Ory Hydra's APIs.
 
 This SDK is automatically generated by the [OpenAPI Generator](https://openapi-generator.tech) project:
 
-- API version: v2.1.1
-- Package version: v2.1.1
+- API version: v2.2.0
+- Package version: v2.2.0
 - Build package: org.openapitools.codegen.languages.RubyClientCodegen
 
 ## Installation
@@ -24,16 +24,16 @@ gem build ory-hydra-client.gemspec
 Then either install the gem locally:
 
 ```shell
-gem install ./ory-hydra-client-v2.1.1.gem
+gem install ./ory-hydra-client-v2.2.0.gem
 ```
 
-(for development, run `gem install --dev ./ory-hydra-client-v2.1.1.gem` to install the development dependencies)
+(for development, run `gem install --dev ./ory-hydra-client-v2.2.0.gem` to install the development dependencies)
 
 or publish the gem to a gem hosting service, e.g. [RubyGems](https://rubygems.org/).
 
 Finally add this to the Gemfile:
 
-    gem 'ory-hydra-client', '~> v2.1.1'
+    gem 'ory-hydra-client', '~> v2.2.0'
 
 ### Install from Git
 
@@ -116,6 +116,7 @@ Class | Method | HTTP request | Description
 *OryHydraClient::OAuth2Api* | [**set_o_auth2_client_lifespans**](docs/OAuth2Api.md#set_o_auth2_client_lifespans) | **PUT** /admin/clients/{id}/lifespans | Set OAuth2 Client Token Lifespans
 *OryHydraClient::OAuth2Api* | [**trust_o_auth2_jwt_grant_issuer**](docs/OAuth2Api.md#trust_o_auth2_jwt_grant_issuer) | **POST** /admin/trust/grants/jwt-bearer/issuers | Trust OAuth2 JWT Bearer Grant Type Issuer
 *OryHydraClient::OidcApi* | [**create_oidc_dynamic_client**](docs/OidcApi.md#create_oidc_dynamic_client) | **POST** /oauth2/register | Register OAuth2 Client using OpenID Dynamic Client Registration
+*OryHydraClient::OidcApi* | [**create_verifiable_credential**](docs/OidcApi.md#create_verifiable_credential) | **POST** /credentials | Issues a Verifiable Credential
 *OryHydraClient::OidcApi* | [**delete_oidc_dynamic_client**](docs/OidcApi.md#delete_oidc_dynamic_client) | **DELETE** /oauth2/register/{id} | Delete OAuth 2.0 Client using the OpenID Dynamic Client Registration Management Protocol
 *OryHydraClient::OidcApi* | [**discover_oidc_configuration**](docs/OidcApi.md#discover_oidc_configuration) | **GET** /.well-known/openid-configuration | OpenID Connect Discovery
 *OryHydraClient::OidcApi* | [**get_oidc_dynamic_client**](docs/OidcApi.md#get_oidc_dynamic_client) | **GET** /oauth2/register/{id} | Get OAuth2 Client using OpenID Dynamic Client Registration
@@ -131,6 +132,8 @@ Class | Method | HTTP request | Description
  - [OryHydraClient::AcceptOAuth2ConsentRequestSession](docs/AcceptOAuth2ConsentRequestSession.md)
  - [OryHydraClient::AcceptOAuth2LoginRequest](docs/AcceptOAuth2LoginRequest.md)
  - [OryHydraClient::CreateJsonWebKeySet](docs/CreateJsonWebKeySet.md)
+ - [OryHydraClient::CreateVerifiableCredentialRequestBody](docs/CreateVerifiableCredentialRequestBody.md)
+ - [OryHydraClient::CredentialSupportedDraft00](docs/CredentialSupportedDraft00.md)
  - [OryHydraClient::ErrorOAuth2](docs/ErrorOAuth2.md)
  - [OryHydraClient::GenericError](docs/GenericError.md)
  - [OryHydraClient::GetVersion200Response](docs/GetVersion200Response.md)
@@ -156,6 +159,7 @@ Class | Method | HTTP request | Description
  - [OryHydraClient::OidcUserInfo](docs/OidcUserInfo.md)
  - [OryHydraClient::Pagination](docs/Pagination.md)
  - [OryHydraClient::PaginationHeaders](docs/PaginationHeaders.md)
+ - [OryHydraClient::RFC6749ErrorJson](docs/RFC6749ErrorJson.md)
  - [OryHydraClient::RejectOAuth2Request](docs/RejectOAuth2Request.md)
  - [OryHydraClient::TokenPagination](docs/TokenPagination.md)
  - [OryHydraClient::TokenPaginationHeaders](docs/TokenPaginationHeaders.md)
@@ -164,6 +168,9 @@ Class | Method | HTTP request | Description
  - [OryHydraClient::TrustOAuth2JwtGrantIssuer](docs/TrustOAuth2JwtGrantIssuer.md)
  - [OryHydraClient::TrustedOAuth2JwtGrantIssuer](docs/TrustedOAuth2JwtGrantIssuer.md)
  - [OryHydraClient::TrustedOAuth2JwtGrantJsonWebKey](docs/TrustedOAuth2JwtGrantJsonWebKey.md)
+ - [OryHydraClient::VerifiableCredentialPrimingResponse](docs/VerifiableCredentialPrimingResponse.md)
+ - [OryHydraClient::VerifiableCredentialProof](docs/VerifiableCredentialProof.md)
+ - [OryHydraClient::VerifiableCredentialResponse](docs/VerifiableCredentialResponse.md)
  - [OryHydraClient::Version](docs/Version.md)
 
 

data/docs/AcceptOAuth2ConsentRequest.md

@@ -4,6 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **context** | **Object** |  | [optional] |
 | **grant_access_token_audience** | **Array<String>** |  | [optional] |
 | **grant_scope** | **Array<String>** |  | [optional] |
 | **handled_at** | **Time** |  | [optional] |
@@ -17,6 +18,7 @@
 require 'ory-hydra-client'
 
 instance = OryHydraClient::AcceptOAuth2ConsentRequest.new(
+  context: null,
   grant_access_token_audience: null,
   grant_scope: null,
   handled_at: null,

data/docs/AcceptOAuth2LoginRequest.md

@@ -9,6 +9,7 @@
 | **context** | **Object** |  | [optional] |
 | **extend_session_lifespan** | **Boolean** | Extend OAuth2 authentication session lifespan  If set to `true`, the OAuth2 authentication cookie lifespan is extended. This is for example useful if you want the user to be able to use `prompt=none` continuously.  This value can only be set to `true` if the user has an authentication, which is the case if the `skip` value is `true`. | [optional] |
 | **force_subject_identifier** | **String** | ForceSubjectIdentifier forces the \"pairwise\" user ID of the end-user that authenticated. The \"pairwise\" user ID refers to the (Pairwise Identifier Algorithm)[http://openid.net/specs/openid-connect-core-1_0.html#PairwiseAlg] of the OpenID Connect specification. It allows you to set an obfuscated subject (\"user\") identifier that is unique to the client.  Please note that this changes the user ID on endpoint /userinfo and sub claim of the ID Token. It does not change the sub claim in the OAuth 2.0 Introspection.  Per default, ORY Hydra handles this value with its own algorithm. In case you want to set this yourself you can use this field. Please note that setting this field has no effect if `pairwise` is not configured in ORY Hydra or the OAuth 2.0 Client does not expect a pairwise identifier (set via `subject_type` key in the client's configuration).  Please also be aware that ORY Hydra is unable to properly compute this value during authentication. This implies that you have to compute this value on every authentication process (probably depending on the client ID or some other unique value).  If you fail to compute the proper value, then authentication processes which have id_token_hint set might fail. | [optional] |
+| **identity_provider_session_id** | **String** | IdentityProviderSessionID is the session ID of the end-user that authenticated. If specified, we will use this value to propagate the logout. | [optional] |
 | **remember** | **Boolean** | Remember, if set to true, tells ORY Hydra to remember this user by telling the user agent (browser) to store a cookie with authentication data. If the same user performs another OAuth 2.0 Authorization Request, he/she will not be asked to log in again. | [optional] |
 | **remember_for** | **Integer** | RememberFor sets how long the authentication should be remembered for in seconds. If set to `0`, the authorization will be remembered for the duration of the browser session (using a session cookie). | [optional] |
 | **subject** | **String** | Subject is the user ID of the end-user that authenticated. |  |
@@ -24,6 +25,7 @@ instance = OryHydraClient::AcceptOAuth2LoginRequest.new(
   context: null,
   extend_session_lifespan: null,
   force_subject_identifier: null,
+  identity_provider_session_id: null,
   remember: null,
   remember_for: null,
   subject: null

data/docs/CreateVerifiableCredentialRequestBody.md

@@ -0,0 +1,22 @@
+# OryHydraClient::CreateVerifiableCredentialRequestBody
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **format** | **String** |  | [optional] |
+| **proof** | [**VerifiableCredentialProof**](VerifiableCredentialProof.md) |  | [optional] |
+| **types** | **Array<String>** |  | [optional] |
+
+## Example
+
+```ruby
+require 'ory-hydra-client'
+
+instance = OryHydraClient::CreateVerifiableCredentialRequestBody.new(
+  format: null,
+  proof: null,
+  types: null
+)
+```
+

data/docs/CredentialSupportedDraft00.md

@@ -0,0 +1,24 @@
+# OryHydraClient::CredentialSupportedDraft00
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **cryptographic_binding_methods_supported** | **Array<String>** | OpenID Connect Verifiable Credentials Cryptographic Binding Methods Supported  Contains a list of cryptographic binding methods supported for signing the proof. | [optional] |
+| **cryptographic_suites_supported** | **Array<String>** | OpenID Connect Verifiable Credentials Cryptographic Suites Supported  Contains a list of cryptographic suites methods supported for signing the proof. | [optional] |
+| **format** | **String** | OpenID Connect Verifiable Credentials Format  Contains the format that is supported by this authorization server. | [optional] |
+| **types** | **Array<String>** | OpenID Connect Verifiable Credentials Types  Contains the types of verifiable credentials supported. | [optional] |
+
+## Example
+
+```ruby
+require 'ory-hydra-client'
+
+instance = OryHydraClient::CredentialSupportedDraft00.new(
+  cryptographic_binding_methods_supported: null,
+  cryptographic_suites_supported: null,
+  format: null,
+  types: null
+)
+```
+

data/docs/OAuth2Api.md

@@ -1573,7 +1573,7 @@ No authorization required
 
 Revokes OAuth 2.0 Login Sessions by either a Subject or a SessionID
 
-This endpoint invalidates authentication sessions. After revoking the authentication session(s), the subject has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens.  If you send the subject in a query param, all authentication sessions that belong to that subject are revoked. No OpennID Connect Front- or Back-channel logout is performed in this case.  Alternatively, you can send a SessionID via `sid` query param, in which case, only the session that is connected to that SessionID is revoked. OpenID Connect Back-channel logout is performed in this case.
+This endpoint invalidates authentication sessions. After revoking the authentication session(s), the subject has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens.  If you send the subject in a query param, all authentication sessions that belong to that subject are revoked. No OpenID Connect Front- or Back-channel logout is performed in this case.  Alternatively, you can send a SessionID via `sid` query param, in which case, only the session that is connected to that SessionID is revoked. OpenID Connect Back-channel logout is performed in this case.
 
 ### Examples
 

data/docs/OAuth2Client.md

@@ -13,7 +13,7 @@
 | **backchannel_logout_session_required** | **Boolean** | OpenID Connect Back-Channel Logout Session Required  Boolean value specifying whether the RP requires that a sid (session ID) Claim be included in the Logout Token to identify the RP session with the OP when the backchannel_logout_uri is used. If omitted, the default value is false. | [optional] |
 | **backchannel_logout_uri** | **String** | OpenID Connect Back-Channel Logout URI  RP URL that will cause the RP to log itself out when sent a Logout Token by the OP. | [optional] |
 | **client_credentials_grant_access_token_lifespan** | **String** | Specify a time duration in milliseconds, seconds, minutes, hours. | [optional] |
-| **client_id** | **String** | OAuth 2.0 Client ID  The ID is autogenerated and immutable. | [optional] |
+| **client_id** | **String** | OAuth 2.0 Client ID  The ID is immutable. If no ID is provided, a UUID4 will be generated. | [optional] |
 | **client_name** | **String** | OAuth 2.0 Client Name  The human-readable name of the client to be presented to the end-user during authorization. | [optional] |
 | **client_secret** | **String** | OAuth 2.0 Client Secret  The secret will be included in the create request as cleartext, and then never again. The secret is kept in hashed format and is not recoverable once lost. | [optional] |
 | **client_secret_expires_at** | **Integer** | OAuth 2.0 Client Secret Expires At  The field is currently not supported and its value is always 0. | [optional] |
@@ -45,6 +45,7 @@
 | **scope** | **String** | OAuth 2.0 Client Scope  Scope is a string containing a space-separated list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749]) that the client can use when requesting access tokens. | [optional] |
 | **sector_identifier_uri** | **String** | OpenID Connect Sector Identifier URI  URL using the https scheme to be used in calculating Pseudonymous Identifiers by the OP. The URL references a file with a single JSON array of redirect_uri values. | [optional] |
 | **skip_consent** | **Boolean** | SkipConsent skips the consent screen for this client. This field can only be set from the admin API. | [optional] |
+| **skip_logout_consent** | **Boolean** | SkipLogoutConsent skips the logout consent screen for this client. This field can only be set from the admin API. | [optional] |
 | **subject_type** | **String** | OpenID Connect Subject Type  The `subject_types_supported` Discovery parameter contains a list of the supported subject_type values for this server. Valid types include `pairwise` and `public`. | [optional] |
 | **token_endpoint_auth_method** | **String** | OAuth 2.0 Token Endpoint Authentication Method  Requested Client Authentication method for the Token Endpoint. The options are:  `client_secret_basic`: (default) Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` encoded in the HTTP Authorization header. `client_secret_post`: Send `client_id` and `client_secret` as `application/x-www-form-urlencoded` in the HTTP body. `private_key_jwt`: Use JSON Web Tokens to authenticate the client. `none`: Used for public clients (native apps, mobile apps) which can not have secrets. | [optional][default to 'client_secret_basic'] |
 | **token_endpoint_auth_signing_alg** | **String** | OAuth 2.0 Token Endpoint Signing Algorithm  Requested Client Authentication signing algorithm for the Token Endpoint. | [optional] |
@@ -99,6 +100,7 @@ instance = OryHydraClient::OAuth2Client.new(
   scope: scope1 scope-2 scope.3 scope:4,
   sector_identifier_uri: null,
   skip_consent: null,
+  skip_logout_consent: null,
   subject_type: null,
   token_endpoint_auth_method: null,
   token_endpoint_auth_signing_alg: null,

data/docs/OAuth2ConsentSession.md

@@ -5,6 +5,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **consent_request** | [**OAuth2ConsentRequest**](OAuth2ConsentRequest.md) |  | [optional] |
+| **context** | **Object** |  | [optional] |
 | **expires_at** | [**OAuth2ConsentSessionExpiresAt**](OAuth2ConsentSessionExpiresAt.md) |  | [optional] |
 | **grant_access_token_audience** | **Array<String>** |  | [optional] |
 | **grant_scope** | **Array<String>** |  | [optional] |
@@ -20,6 +21,7 @@ require 'ory-hydra-client'
 
 instance = OryHydraClient::OAuth2ConsentSession.new(
   consent_request: null,
+  context: null,
   expires_at: null,
   grant_access_token_audience: null,
   grant_scope: null,

data/docs/OAuth2LoginRequest.md

@@ -8,8 +8,8 @@
 | **client** | [**OAuth2Client**](OAuth2Client.md) |  |  |
 | **oidc_context** | [**OAuth2ConsentRequestOpenIDConnectContext**](OAuth2ConsentRequestOpenIDConnectContext.md) |  | [optional] |
 | **request_url** | **String** | RequestURL is the original OAuth 2.0 Authorization URL requested by the OAuth 2.0 client. It is the URL which initiates the OAuth 2.0 Authorization Code or OAuth 2.0 Implicit flow. This URL is typically not needed, but might come in handy if you want to deal with additional request parameters. |  |
-| **requested_access_token_audience** | **Array<String>** |  |  |
-| **requested_scope** | **Array<String>** |  |  |
+| **requested_access_token_audience** | **Array<String>** |  | [optional] |
+| **requested_scope** | **Array<String>** |  | [optional] |
 | **session_id** | **String** | SessionID is the login session ID. If the user-agent reuses a login session (via cookie / remember flag) this ID will remain the same. If the user-agent did not have an existing authentication session (e.g. remember is false) this will be a new random value. This value is used as the \"sid\" parameter in the ID Token and in OIDC Front-/Back- channel logout. It's value can generally be used to associate consecutive login requests by a certain user. | [optional] |
 | **skip** | **Boolean** | Skip, if true, implies that the client has requested the same scopes from the same user previously. If true, you can skip asking the user to grant the requested scopes, and simply forward the user to the redirect URL.  This feature allows you to update / set session information. |  |
 | **subject** | **String** | Subject is the user ID of the end-user that authenticated. Now, that end user needs to grant or deny the scope requested by the OAuth 2.0 client. If this value is set and `skip` is true, you MUST include this subject type when accepting the login request, or the request will fail. |  |

data/docs/OAuth2TokenExchange.md

@@ -6,7 +6,7 @@
 | ---- | ---- | ----------- | ----- |
 | **access_token** | **String** | The access token issued by the authorization server. | [optional] |
 | **expires_in** | **Integer** | The lifetime in seconds of the access token. For example, the value \"3600\" denotes that the access token will expire in one hour from the time the response was generated. | [optional] |
-| **id_token** | **Integer** | To retrieve a refresh token request the id_token scope. | [optional] |
+| **id_token** | **String** | To retrieve a refresh token request the id_token scope. | [optional] |
 | **refresh_token** | **String** | The refresh token, which can be used to obtain new access tokens. To retrieve it add the scope \"offline\" to your access token request. | [optional] |
 | **scope** | **String** | The scope of the access token | [optional] |
 | **token_type** | **String** | The type of the token issued | [optional] |

data/docs/OidcApi.md

@@ -5,6 +5,7 @@ All URIs are relative to *http://localhost*
 | Method | HTTP request | Description |
 | ------ | ------------ | ----------- |
 | [**create_oidc_dynamic_client**](OidcApi.md#create_oidc_dynamic_client) | **POST** /oauth2/register | Register OAuth2 Client using OpenID Dynamic Client Registration |
+| [**create_verifiable_credential**](OidcApi.md#create_verifiable_credential) | **POST** /credentials | Issues a Verifiable Credential |
 | [**delete_oidc_dynamic_client**](OidcApi.md#delete_oidc_dynamic_client) | **DELETE** /oauth2/register/{id} | Delete OAuth 2.0 Client using the OpenID Dynamic Client Registration Management Protocol |
 | [**discover_oidc_configuration**](OidcApi.md#discover_oidc_configuration) | **GET** /.well-known/openid-configuration | OpenID Connect Discovery |
 | [**get_oidc_dynamic_client**](OidcApi.md#get_oidc_dynamic_client) | **GET** /oauth2/register/{id} | Get OAuth2 Client using OpenID Dynamic Client Registration |
@@ -77,6 +78,72 @@ No authorization required
 - **Accept**: application/json
 
 
+## create_verifiable_credential
+
+> <VerifiableCredentialResponse> create_verifiable_credential(opts)
+
+Issues a Verifiable Credential
+
+This endpoint creates a verifiable credential that attests that the user authenticated with the provided access token owns a certain public/private key pair.  More information can be found at https://openid.net/specs/openid-connect-userinfo-vc-1_0.html.
+
+### Examples
+
+```ruby
+require 'time'
+require 'ory-hydra-client'
+
+api_instance = OryHydraClient::OidcApi.new
+opts = {
+  create_verifiable_credential_request_body: OryHydraClient::CreateVerifiableCredentialRequestBody.new # CreateVerifiableCredentialRequestBody | 
+}
+
+begin
+  # Issues a Verifiable Credential
+  result = api_instance.create_verifiable_credential(opts)
+  p result
+rescue OryHydraClient::ApiError => e
+  puts "Error when calling OidcApi->create_verifiable_credential: #{e}"
+end
+```
+
+#### Using the create_verifiable_credential_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<VerifiableCredentialResponse>, Integer, Hash)> create_verifiable_credential_with_http_info(opts)
+
+```ruby
+begin
+  # Issues a Verifiable Credential
+  data, status_code, headers = api_instance.create_verifiable_credential_with_http_info(opts)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <VerifiableCredentialResponse>
+rescue OryHydraClient::ApiError => e
+  puts "Error when calling OidcApi->create_verifiable_credential_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **create_verifiable_credential_request_body** | [**CreateVerifiableCredentialRequestBody**](CreateVerifiableCredentialRequestBody.md) |  | [optional] |
+
+### Return type
+
+[**VerifiableCredentialResponse**](VerifiableCredentialResponse.md)
+
+### Authorization
+
+No authorization required
+
+### HTTP request headers
+
+- **Content-Type**: application/json
+- **Accept**: application/json
+
+
 ## delete_oidc_dynamic_client
 
 > delete_oidc_dynamic_client(id)

data/docs/OidcConfiguration.md

@@ -10,6 +10,8 @@
 | **claims_parameter_supported** | **Boolean** | OpenID Connect Claims Parameter Parameter Supported  Boolean value specifying whether the OP supports use of the claims parameter, with true indicating support. | [optional] |
 | **claims_supported** | **Array<String>** | OpenID Connect Supported Claims  JSON array containing a list of the Claim Names of the Claims that the OpenID Provider MAY be able to supply values for. Note that for privacy or other reasons, this might not be an exhaustive list. | [optional] |
 | **code_challenge_methods_supported** | **Array<String>** | OAuth 2.0 PKCE Supported Code Challenge Methods  JSON array containing a list of Proof Key for Code Exchange (PKCE) [RFC7636] code challenge methods supported by this authorization server. | [optional] |
+| **credentials_endpoint_draft_00** | **String** | OpenID Connect Verifiable Credentials Endpoint  Contains the URL of the Verifiable Credentials Endpoint. | [optional] |
+| **credentials_supported_draft_00** | [**Array<CredentialSupportedDraft00>**](CredentialSupportedDraft00.md) | OpenID Connect Verifiable Credentials Supported  JSON array containing a list of the Verifiable Credentials supported by this authorization server. | [optional] |
 | **end_session_endpoint** | **String** | OpenID Connect End-Session Endpoint  URL at the OP to which an RP can perform a redirect to request that the End-User be logged out at the OP. | [optional] |
 | **frontchannel_logout_session_supported** | **Boolean** | OpenID Connect Front-Channel Logout Session Required  Boolean value specifying whether the OP can pass iss (issuer) and sid (session ID) query parameters to identify the RP session with the OP when the frontchannel_logout_uri is used. If supported, the sid Claim is also included in ID Tokens issued by the OP. | [optional] |
 | **frontchannel_logout_supported** | **Boolean** | OpenID Connect Front-Channel Logout Supported  Boolean value specifying whether the OP supports HTTP-based logout, with true indicating support. | [optional] |
@@ -46,6 +48,8 @@ instance = OryHydraClient::OidcConfiguration.new(
   claims_parameter_supported: null,
   claims_supported: null,
   code_challenge_methods_supported: null,
+  credentials_endpoint_draft_00: null,
+  credentials_supported_draft_00: null,
   end_session_endpoint: null,
   frontchannel_logout_session_supported: null,
   frontchannel_logout_supported: null,

data/docs/RFC6749ErrorJson.md

@@ -0,0 +1,26 @@
+# OryHydraClient::RFC6749ErrorJson
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **error** | **String** |  | [optional] |
+| **error_debug** | **String** |  | [optional] |
+| **error_description** | **String** |  | [optional] |
+| **error_hint** | **String** |  | [optional] |
+| **status_code** | **Integer** |  | [optional] |
+
+## Example
+
+```ruby
+require 'ory-hydra-client'
+
+instance = OryHydraClient::RFC6749ErrorJson.new(
+  error: null,
+  error_debug: null,
+  error_description: null,
+  error_hint: null,
+  status_code: null
+)
+```
+

data/docs/VerifiableCredentialPrimingResponse.md

@@ -0,0 +1,32 @@
+# OryHydraClient::VerifiableCredentialPrimingResponse
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **c_nonce** | **String** |  | [optional] |
+| **c_nonce_expires_in** | **Integer** |  | [optional] |
+| **error** | **String** |  | [optional] |
+| **error_debug** | **String** |  | [optional] |
+| **error_description** | **String** |  | [optional] |
+| **error_hint** | **String** |  | [optional] |
+| **format** | **String** |  | [optional] |
+| **status_code** | **Integer** |  | [optional] |
+
+## Example
+
+```ruby
+require 'ory-hydra-client'
+
+instance = OryHydraClient::VerifiableCredentialPrimingResponse.new(
+  c_nonce: null,
+  c_nonce_expires_in: null,
+  error: null,
+  error_debug: null,
+  error_description: null,
+  error_hint: null,
+  format: null,
+  status_code: null
+)
+```
+

data/docs/VerifiableCredentialProof.md

@@ -0,0 +1,20 @@
+# OryHydraClient::VerifiableCredentialProof
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **jwt** | **String** |  | [optional] |
+| **proof_type** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'ory-hydra-client'
+
+instance = OryHydraClient::VerifiableCredentialProof.new(
+  jwt: null,
+  proof_type: null
+)
+```
+

data/docs/VerifiableCredentialResponse.md

@@ -0,0 +1,20 @@
+# OryHydraClient::VerifiableCredentialResponse
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **credential_draft_00** | **String** |  | [optional] |
+| **format** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'ory-hydra-client'
+
+instance = OryHydraClient::VerifiableCredentialResponse.new(
+  credential_draft_00: null,
+  format: null
+)
+```
+

data/lib/ory-hydra-client/api/jwk_api.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.1.1
+The version of the OpenAPI document: v2.2.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1

data/lib/ory-hydra-client/api/metadata_api.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.1.1
+The version of the OpenAPI document: v2.2.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1

data/lib/ory-hydra-client/api/o_auth2_api.rb

@@ -3,7 +3,7 @@
 
 #Documentation for all of Ory Hydra's APIs. 
 
-The version of the OpenAPI document: v2.1.1
+The version of the OpenAPI document: v2.2.0
 Contact: hi@ory.sh
 Generated by: https://openapi-generator.tech
 OpenAPI Generator version: 6.0.1
@@ -1586,7 +1586,7 @@ module OryHydraClient
     end
 
     # Revokes OAuth 2.0 Login Sessions by either a Subject or a SessionID
-    # This endpoint invalidates authentication sessions. After revoking the authentication session(s), the subject has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens.  If you send the subject in a query param, all authentication sessions that belong to that subject are revoked. No OpennID Connect Front- or Back-channel logout is performed in this case.  Alternatively, you can send a SessionID via `sid` query param, in which case, only the session that is connected to that SessionID is revoked. OpenID Connect Back-channel logout is performed in this case.
+    # This endpoint invalidates authentication sessions. After revoking the authentication session(s), the subject has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens.  If you send the subject in a query param, all authentication sessions that belong to that subject are revoked. No OpenID Connect Front- or Back-channel logout is performed in this case.  Alternatively, you can send a SessionID via `sid` query param, in which case, only the session that is connected to that SessionID is revoked. OpenID Connect Back-channel logout is performed in this case.
     # @param [Hash] opts the optional parameters
     # @option opts [String] :subject OAuth 2.0 Subject  The subject to revoke authentication sessions for.
     # @option opts [String] :sid OAuth 2.0 Subject  The subject to revoke authentication sessions for.
@@ -1597,7 +1597,7 @@ module OryHydraClient
     end
 
     # Revokes OAuth 2.0 Login Sessions by either a Subject or a SessionID
-    # This endpoint invalidates authentication sessions. After revoking the authentication session(s), the subject has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens.  If you send the subject in a query param, all authentication sessions that belong to that subject are revoked. No OpennID Connect Front- or Back-channel logout is performed in this case.  Alternatively, you can send a SessionID via `sid` query param, in which case, only the session that is connected to that SessionID is revoked. OpenID Connect Back-channel logout is performed in this case.
+    # This endpoint invalidates authentication sessions. After revoking the authentication session(s), the subject has to re-authenticate at the Ory OAuth2 Provider. This endpoint does not invalidate any tokens.  If you send the subject in a query param, all authentication sessions that belong to that subject are revoked. No OpenID Connect Front- or Back-channel logout is performed in this case.  Alternatively, you can send a SessionID via `sid` query param, in which case, only the session that is connected to that SessionID is revoked. OpenID Connect Back-channel logout is performed in this case.
     # @param [Hash] opts the optional parameters
     # @option opts [String] :subject OAuth 2.0 Subject  The subject to revoke authentication sessions for.
     # @option opts [String] :sid OAuth 2.0 Subject  The subject to revoke authentication sessions for.