@authup/server-core 1.0.0-beta.50 → 1.0.0-beta.52

package/dist/swagger.json

@@ -118,6 +118,17 @@
                             }
                         ]
                     },
+                    "post_logout_redirect_uri": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "Comma-separated allow-list of post-logout redirect patterns (OIDC\nRP-Initiated Logout `post_logout_redirect_uri`). Matched with the same\nwildcard semantics as `redirect_uri`."
+                    },
                     "grant_types": {
                         "anyOf": [
                             {
@@ -185,6 +196,7 @@
                     "secret_hashed",
                     "secret_encrypted",
                     "redirect_uri",
+                    "post_logout_redirect_uri",
                     "grant_types",
                     "scope",
                     "base_url",
@@ -263,6 +275,11 @@
                     "type": "string"
                 }
             },
+            "AbortSignal": {
+                "description": "The **`AbortSignal`** interface represents a signal object that allows you to communicate with an asynchronous operation (such as a fetch request) and abort it if required via an AbortController object.\n\n[MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortSignal)",
+                "properties": {},
+                "type": "object"
+            },
             "SessionState": {
                 "properties": {
                     "effectiveLocalWindowSize": {
@@ -600,11 +617,6 @@
                 "type": "object",
                 "additionalProperties": true
             },
-            "AbortSignal": {
-                "description": "The **`AbortSignal`** interface represents a signal object that allows you to communicate with an asynchronous operation (such as a fetch request) and abort it if required via an AbortController object.\n\n[MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortSignal)",
-                "properties": {},
-                "type": "object"
-            },
             "Response": {
                 "description": "The **`Response`** interface of the Fetch API represents the response to a request.\n\n[MDN Reference](https://developer.mozilla.org/docs/Web/API/Response)",
                 "properties": {},
@@ -781,6 +793,16 @@
                                     }
                                 ]
                             },
+                            "post_logout_redirect_uri": {
+                                "anyOf": [
+                                    {
+                                        "type": "string"
+                                    },
+                                    {
+                                        "type": "null"
+                                    }
+                                ]
+                            },
                             "redirect_uri": {
                                 "anyOf": [
                                     {
@@ -883,6 +905,16 @@
                             }
                         ]
                     },
+                    "post_logout_redirect_uri": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
                     "redirect_uri": {
                         "anyOf": [
                             {
@@ -1070,6 +1102,16 @@
                     }
                 ]
             },
+            "RealmScopeValue": {
+                "type": "string",
+                "enum": [
+                    "none",
+                    "own",
+                    "ownOrNull",
+                    "any"
+                ],
+                "description": "Relative realm reach of a permission grant (the `realm_scope` column). Mirrors the\n`RealmScope` enum in `@authup/access` (the logic source of truth) — the values must\nagree. Kept here as a plain const (no enum) since core-kit cannot depend on access."
+            },
             "Permission": {
                 "properties": {
                     "id": {
@@ -1201,6 +1243,10 @@
                             }
                         ]
                     },
+                    "realm_scope": {
+                        "$ref": "#/components/schemas/RealmScopeValue",
+                        "description": "Relative realm reach of this grant (none/own/ownOrNull/any). Fail-closed\ndefault `own`. See {@link REALM_SCOPE }."
+                    },
                     "permission_id": {
                         "type": "string"
                     },
@@ -1266,6 +1312,7 @@
                 "required": [
                     "policy_id",
                     "policy",
+                    "realm_scope",
                     "permission_id",
                     "permission",
                     "permission_realm_id",
@@ -1334,6 +1381,9 @@
                     },
                     {
                         "properties": {
+                            "realm_scope": {
+                                "$ref": "#/components/schemas/RealmScopeValue"
+                            },
                             "policy_id": {
                                 "anyOf": [
                                     {
@@ -1351,6 +1401,9 @@
             },
             "ClientPermissionUpdatePayload": {
                 "properties": {
+                    "realm_scope": {
+                        "$ref": "#/components/schemas/RealmScopeValue"
+                    },
                     "policy_id": {
                         "anyOf": [
                             {
@@ -2938,6 +2991,14 @@
                     },
                     {
                         "properties": {
+                            "refresh_token_id": {
+                                "type": "string",
+                                "description": "Access tokens: jti of the refresh token this access token was issued\nalongside (drives chain-aware access-token revocation)."
+                            },
+                            "parent_id": {
+                                "type": "string",
+                                "description": "Refresh tokens: jti of the previous refresh token in the rotation chain\n(informational — the auth_session_tokens row is authoritative for lineage)."
+                            },
                             "global_access": {
                                 "$ref": "#/components/schemas/OAuth2AccessGrantClaim",
                                 "description": "Global role claims (roles whose realm_id is null or missing)."
@@ -2992,6 +3053,15 @@
                                 ],
                                 "description": "Token type"
                             },
+                            "auth_time": {
+                                "type": "number",
+                                "format": "double",
+                                "description": "OIDC id_token claim: time of the End-User authentication (epoch seconds),\ni.e. the session's creation time — NOT the token issuance time."
+                            },
+                            "sid": {
+                                "type": "string",
+                                "description": "OIDC session identifier claim (id_token) — mirrors session_id. Enables\nRP-initiated / back-channel logout to target the session."
+                            },
                             "session_id": {
                                 "type": "string",
                                 "description": "Associated session."
@@ -3191,6 +3261,17 @@
                         "type": "string",
                         "description": "The OAuth 2.0 / OpenID Connect URL of the OP's Dynamic Client Registration Endpoint OpenID.Registration."
                     },
+                    "end_session_endpoint": {
+                        "type": "string",
+                        "description": "OIDC RP-Initiated Logout 1.0 — the OP's end-session (logout) endpoint."
+                    },
+                    "prompt_values_supported": {
+                        "type": "array",
+                        "items": {
+                            "type": "string"
+                        },
+                        "description": "OIDC Core §3.1.2.1 `prompt` values supported by the OP."
+                    },
                     "revocation_endpoint": {
                         "type": "string",
                         "description": "The fully qualified URL of the server’s revocation endpoint defined by OAuth 2.0 Authorization Server\nMetadata (and sort of in OAuth 2.0 Token Revocation)"
@@ -3715,6 +3796,10 @@
                             }
                         ]
                     },
+                    "realm_scope": {
+                        "$ref": "#/components/schemas/RealmScopeValue",
+                        "description": "Relative realm reach of this grant (none/own/ownOrNull/any). Fail-closed\ndefault `own`. See {@link REALM_SCOPE }."
+                    },
                     "permission_id": {
                         "type": "string"
                     },
@@ -3780,6 +3865,7 @@
                 "required": [
                     "policy_id",
                     "policy",
+                    "realm_scope",
                     "permission_id",
                     "permission",
                     "permission_realm_id",
@@ -3848,6 +3934,9 @@
                     },
                     {
                         "properties": {
+                            "realm_scope": {
+                                "$ref": "#/components/schemas/RealmScopeValue"
+                            },
                             "policy_id": {
                                 "anyOf": [
                                     {
@@ -3865,6 +3954,9 @@
             },
             "RobotPermissionUpdatePayload": {
                 "properties": {
+                    "realm_scope": {
+                        "$ref": "#/components/schemas/RealmScopeValue"
+                    },
                     "policy_id": {
                         "anyOf": [
                             {
@@ -4335,6 +4427,10 @@
                             }
                         ]
                     },
+                    "realm_scope": {
+                        "$ref": "#/components/schemas/RealmScopeValue",
+                        "description": "Relative realm reach of this grant (none/own/ownOrNull/any). Fail-closed\ndefault `own`. See {@link REALM_SCOPE }."
+                    },
                     "permission_id": {
                         "type": "string"
                     },
@@ -4400,6 +4496,7 @@
                 "required": [
                     "policy_id",
                     "policy",
+                    "realm_scope",
                     "permission_id",
                     "permission",
                     "permission_realm_id",
@@ -4468,6 +4565,9 @@
                     },
                     {
                         "properties": {
+                            "realm_scope": {
+                                "$ref": "#/components/schemas/RealmScopeValue"
+                            },
                             "policy_id": {
                                 "anyOf": [
                                     {
@@ -4485,6 +4585,9 @@
             },
             "RolePermissionUpdatePayload": {
                 "properties": {
+                    "realm_scope": {
+                        "$ref": "#/components/schemas/RealmScopeValue"
+                    },
                     "policy_id": {
                         "anyOf": [
                             {
@@ -4830,6 +4933,198 @@
             "ScopeSavePayload": {
                 "$ref": "#/components/schemas/ScopeCreatePayload"
             },
+            "Session": {
+                "properties": {
+                    "id": {
+                        "type": "string",
+                        "description": "Public ID"
+                    },
+                    "sub": {
+                        "type": "string",
+                        "description": "Subject ID"
+                    },
+                    "sub_kind": {
+                        "type": "string",
+                        "description": "Subject kind (e.g. user, robot, client)"
+                    },
+                    "ip_address": {
+                        "type": "string",
+                        "description": "Last used ip address."
+                    },
+                    "user_agent": {
+                        "type": "string",
+                        "description": "Last used user agent."
+                    },
+                    "expires_at": {
+                        "type": "string",
+                        "description": "Expiration date (iso)"
+                    },
+                    "refreshed_at": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "Time session was renewed."
+                    },
+                    "seen_at": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "Last time subject was seen."
+                    },
+                    "updated_at": {
+                        "type": "string",
+                        "description": "Last time new access-token, refresh-token created for session."
+                    },
+                    "created_at": {
+                        "type": "string",
+                        "description": "Creation date of session"
+                    },
+                    "client_id": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
+                    "client": {
+                        "oneOf": [
+                            {
+                                "$ref": "#/components/schemas/Client"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
+                    "user_id": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
+                    "user": {
+                        "oneOf": [
+                            {
+                                "$ref": "#/components/schemas/User"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
+                    "robot_id": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
+                    "robot": {
+                        "oneOf": [
+                            {
+                                "$ref": "#/components/schemas/Robot"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
+                    "realm_id": {
+                        "type": "string"
+                    },
+                    "realm": {
+                        "$ref": "#/components/schemas/Realm"
+                    }
+                },
+                "required": [
+                    "id",
+                    "sub",
+                    "sub_kind",
+                    "ip_address",
+                    "user_agent",
+                    "expires_at",
+                    "refreshed_at",
+                    "seen_at",
+                    "updated_at",
+                    "created_at",
+                    "client_id",
+                    "client",
+                    "user_id",
+                    "user",
+                    "robot_id",
+                    "robot",
+                    "realm_id",
+                    "realm"
+                ],
+                "type": "object"
+            },
+            "EntityCollectionResponseSession": {
+                "properties": {
+                    "meta": {
+                        "properties": {
+                            "total": {
+                                "type": "number",
+                                "format": "double"
+                            },
+                            "offset": {
+                                "type": "number",
+                                "format": "double"
+                            },
+                            "limit": {
+                                "type": "number",
+                                "format": "double"
+                            }
+                        },
+                        "required": [
+                            "total"
+                        ],
+                        "type": "object"
+                    },
+                    "data": {
+                        "type": "array",
+                        "items": {
+                            "$ref": "#/components/schemas/Session"
+                        }
+                    }
+                },
+                "required": [
+                    "meta",
+                    "data"
+                ],
+                "type": "object"
+            },
+            "SessionDeleteManyResponse": {
+                "properties": {
+                    "count": {
+                        "type": "number",
+                        "format": "double"
+                    }
+                },
+                "required": [
+                    "count"
+                ],
+                "type": "object"
+            },
             "EntityCollectionResponseUser": {
                 "properties": {
                     "meta": {
@@ -5240,6 +5535,10 @@
                             }
                         ]
                     },
+                    "realm_scope": {
+                        "$ref": "#/components/schemas/RealmScopeValue",
+                        "description": "Relative realm reach of this grant (none/own/ownOrNull/any). Fail-closed\ndefault `own`. See {@link REALM_SCOPE }."
+                    },
                     "permission_id": {
                         "type": "string"
                     },
@@ -5305,6 +5604,7 @@
                 "required": [
                     "policy_id",
                     "policy",
+                    "realm_scope",
                     "permission_id",
                     "permission",
                     "permission_realm_id",
@@ -5373,6 +5673,9 @@
                     },
                     {
                         "properties": {
+                            "realm_scope": {
+                                "$ref": "#/components/schemas/RealmScopeValue"
+                            },
                             "policy_id": {
                                 "anyOf": [
                                     {
@@ -5390,6 +5693,9 @@
             },
             "UserPermissionUpdatePayload": {
                 "properties": {
+                    "realm_scope": {
+                        "$ref": "#/components/schemas/RealmScopeValue"
+                    },
                     "policy_id": {
                         "anyOf": [
                             {
@@ -7782,6 +8088,58 @@
                 ]
             }
         },
+        "/logout": {
+            "get": {
+                "operationId": "Serve_3",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "anyOf": [
+                                        {
+                                            "type": "string"
+                                        },
+                                        {
+                                            "$ref": "#/components/schemas/Response"
+                                        }
+                                    ]
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": []
+            },
+            "post": {
+                "operationId": "Execute_2",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "anyOf": [
+                                        {
+                                            "type": "string"
+                                        },
+                                        {
+                                            "$ref": "#/components/schemas/Response"
+                                        }
+                                    ]
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": []
+            }
+        },
         "/.well-known/openid-configuration": {
             "get": {
                 "operationId": "GetOpenIdConfiguration",
@@ -7804,7 +8162,7 @@
         },
         "/password-forgot": {
             "get": {
-                "operationId": "Serve_3",
+                "operationId": "Serve_4",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -7822,7 +8180,7 @@
                 "parameters": []
             },
             "post": {
-                "operationId": "Execute_2",
+                "operationId": "Execute_3",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -7853,7 +8211,7 @@
         },
         "/password-reset": {
             "get": {
-                "operationId": "Serve_4",
+                "operationId": "Serve_5",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -7871,7 +8229,7 @@
                 "parameters": []
             },
             "post": {
-                "operationId": "Execute_3",
+                "operationId": "Execute_4",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -7902,7 +8260,7 @@
         },
         "/register": {
             "get": {
-                "operationId": "Serve_5",
+                "operationId": "Serve_6",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -7920,7 +8278,7 @@
                 "parameters": []
             },
             "post": {
-                "operationId": "Execute_4",
+                "operationId": "Execute_5",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10318,9 +10676,213 @@
                 ]
             }
         },
-        "/users": {
+        "/sessions": {
             "get": {
                 "operationId": "GetMany_21",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityCollectionResponseSession"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": []
+            },
+            "delete": {
+                "operationId": "DropMany",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/SessionDeleteManyResponse"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": []
+            }
+        },
+        "/realms/{realmId}/sessions": {
+            "get": {
+                "operationId": "GetMany_22",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityCollectionResponseSession"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": []
+            },
+            "delete": {
+                "operationId": "DropMany_2",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/SessionDeleteManyResponse"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": []
+            }
+        },
+        "/sessions/{id}": {
+            "get": {
+                "operationId": "GetOne_13",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/Session"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            },
+            "delete": {
+                "operationId": "Drop_21",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/Session"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
+        "/realms/{realmId}/sessions/{id}": {
+            "get": {
+                "operationId": "GetOne_14",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/Session"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            },
+            "delete": {
+                "operationId": "Drop_22",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/Session"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
+        "/users": {
+            "get": {
+                "operationId": "GetMany_23",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10369,7 +10931,7 @@
         },
         "/realms/{realmId}/users": {
             "get": {
-                "operationId": "GetMany_22",
+                "operationId": "GetMany_24",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10533,7 +11095,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_21",
+                "operationId": "Drop_23",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10681,7 +11243,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_22",
+                "operationId": "Drop_24",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10714,7 +11276,7 @@
         },
         "/user-attributes": {
             "get": {
-                "operationId": "GetMany_23",
+                "operationId": "GetMany_25",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10836,7 +11398,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_23",
+                "operationId": "Drop_25",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10869,7 +11431,7 @@
         },
         "/user-permissions": {
             "get": {
-                "operationId": "GetMany_24",
+                "operationId": "GetMany_26",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10960,7 +11522,7 @@
                 }
             },
             "get": {
-                "operationId": "GetOne_13",
+                "operationId": "GetOne_15",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10991,7 +11553,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_24",
+                "operationId": "Drop_26",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11024,7 +11586,7 @@
         },
         "/user-roles": {
             "get": {
-                "operationId": "GetMany_25",
+                "operationId": "GetMany_27",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11073,7 +11635,7 @@
         },
         "/user-roles/{id}": {
             "get": {
-                "operationId": "GetOne_14",
+                "operationId": "GetOne_16",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11104,7 +11666,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_25",
+                "operationId": "Drop_27",
                 "responses": {
                     "200": {
                         "description": "Ok",