@authup/server-core 1.0.0-beta.59 → 1.0.0-beta.61

package/dist/swagger.json

@@ -405,8 +405,29 @@
                 "type": "object",
                 "description": "JSON-serializable snapshot of the fields constraints a schema\ndeclares. The shape is uniform across schemas: a `null` constraint\nwas never declared (fallback semantics apply); an empty array is an\nexplicit \"nothing\"."
             },
+            "IndexedMode": {
+                "type": "string",
+                "enum": [
+                    "anchor",
+                    "cover"
+                ],
+                "description": "How the filters parameter is checked against the declared indexes:\n- `anchor`: every AND group must contain at least one conjunct whose\n  field leads an index (the rest is residual filtering);\n- `cover`: additionally, per relation path, the AND group's field set\n  must equal a leftmost prefix of one index."
+            },
             "FiltersSchemaDescription": {
                 "properties": {
+                    "indexed": {
+                        "anyOf": [
+                            {
+                                "$ref": "#/components/schemas/IndexedMode"
+                            },
+                            {
+                                "type": "boolean",
+                                "enum": [
+                                    false
+                                ]
+                            }
+                        ]
+                    },
                     "allowed": {
                         "anyOf": [
                             {
@@ -422,6 +443,7 @@
                     }
                 },
                 "required": [
+                    "indexed",
                     "allowed"
                 ],
                 "type": "object",
@@ -484,8 +506,11 @@
                 "type": "object",
                 "description": "JSON-serializable snapshot of the relation constraints a schema\ndeclares. `schemas` maps each allowed relation to the name of the\nschema governing it (composed by {@link Schema.describe} via the\nparent `schemaMapping`; an unmapped relation maps to itself,\nmirroring registry resolution) — nested capabilities are looked up\non that schema's own description instead of being expanded inline.\nThe shape is uniform across schemas: a `null` allow-list was never\ndeclared (fallback semantics apply; the targets cannot be\nenumerated then, so `schemas` is `null` alongside it), an empty\narray is an explicit \"nothing\" (with an empty `schemas` record)."
             },
-            "SortSchemaDescription": {
+            "SortsSchemaDescription": {
                 "properties": {
+                    "indexed": {
+                        "type": "boolean"
+                    },
                     "default": {
                         "oneOf": [
                             {
@@ -512,15 +537,6 @@
                                     "type": "string"
                                 }
                             },
-                            {
-                                "type": "array",
-                                "items": {
-                                    "type": "array",
-                                    "items": {
-                                        "type": "string"
-                                    }
-                                }
-                            },
                             {
                                 "type": "null"
                             }
@@ -528,16 +544,17 @@
                     }
                 },
                 "required": [
+                    "indexed",
                     "default",
                     "allowed"
                 ],
                 "type": "object",
-                "description": "JSON-serializable snapshot of the sort constraints a schema\ndeclares. `allowed` may hold tuple groups (keys only usable\ntogether, in order). The shape is uniform across schemas: a `null`\nconstraint was never declared (fallback semantics apply); an empty\narray is an explicit \"nothing\"."
+                "description": "JSON-serializable snapshot of the sort constraints a schema\ndeclares. The shape is uniform across schemas: a `null`\nconstraint was never declared (fallback semantics apply); an empty\narray is an explicit \"nothing\"."
             },
             "SchemaDescription": {
                 "properties": {
-                    "sort": {
-                        "$ref": "#/components/schemas/SortSchemaDescription"
+                    "sorts": {
+                        "$ref": "#/components/schemas/SortsSchemaDescription"
                     },
                     "relations": {
                         "$ref": "#/components/schemas/RelationsSchemaDescription"
@@ -551,6 +568,22 @@
                     "fields": {
                         "$ref": "#/components/schemas/FieldsSchemaDescription"
                     },
+                    "indexes": {
+                        "anyOf": [
+                            {
+                                "type": "array",
+                                "items": {
+                                    "type": "array",
+                                    "items": {
+                                        "type": "string"
+                                    }
+                                }
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
                     "strict": {
                         "type": "boolean"
                     },
@@ -566,6 +599,7 @@
                     }
                 },
                 "required": [
+                    "indexes",
                     "strict",
                     "name"
                 ],
@@ -3012,6 +3046,8 @@
                             "mfaRemoved",
                             "mfaVerified",
                             "mfaChallengeFailed",
+                            "identityProviderLinked",
+                            "identityProviderUnlinked",
                             "created",
                             "updated",
                             "deleted"
@@ -3051,6 +3087,17 @@
                         ],
                         "description": "The OAuth2 client involved, if any."
                     },
+                    "sessionId": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "The auth_sessions row acting or affected. NULL = not attributable to\na session (rows predating the column, session-less flows such as a\nfailed login or registration)."
+                    },
                     "actorType": {
                         "anyOf": [
                             {
@@ -3178,6 +3225,7 @@
                     "refType",
                     "refId",
                     "clientId",
+                    "sessionId",
                     "actorType",
                     "actorId",
                     "actorName",
@@ -3545,6 +3593,175 @@
             "IdentityProviderSavePayload": {
                 "$ref": "#/components/schemas/IdentityProviderCreatePayload"
             },
+            "IdentityProviderLinkRequestResponse": {
+                "properties": {
+                    "url": {
+                        "type": "string"
+                    }
+                },
+                "required": [
+                    "url"
+                ],
+                "type": "object",
+                "description": "Response of `POST /identity-providers/:id/link-request` (plan 091):\nthe external provider's authorize URL the browser navigates to."
+            },
+            "IdentityProviderAccount": {
+                "properties": {
+                    "id": {
+                        "type": "string"
+                    },
+                    "providerUserId": {
+                        "type": "string"
+                    },
+                    "providerUserName": {
+                        "type": "string"
+                    },
+                    "providerUserEmail": {
+                        "type": "string"
+                    },
+                    "createdAt": {
+                        "type": "string"
+                    },
+                    "updatedAt": {
+                        "type": "string"
+                    },
+                    "userId": {
+                        "type": "string"
+                    },
+                    "user": {
+                        "$ref": "#/components/schemas/User"
+                    },
+                    "userRealmId": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
+                    "userRealm": {
+                        "oneOf": [
+                            {
+                                "$ref": "#/components/schemas/Realm"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
+                    "providerId": {
+                        "type": "string"
+                    },
+                    "provider": {
+                        "$ref": "#/components/schemas/IdentityProvider"
+                    },
+                    "providerRealmId": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    },
+                    "providerRealm": {
+                        "oneOf": [
+                            {
+                                "$ref": "#/components/schemas/Realm"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    }
+                },
+                "required": [
+                    "id",
+                    "providerUserId",
+                    "providerUserName",
+                    "providerUserEmail",
+                    "createdAt",
+                    "updatedAt",
+                    "userId",
+                    "user",
+                    "userRealmId",
+                    "userRealm",
+                    "providerId",
+                    "provider",
+                    "providerRealmId",
+                    "providerRealm"
+                ],
+                "type": "object"
+            },
+            "EntityRecordResponseIdentityProviderAccount": {
+                "properties": {
+                    "meta": {
+                        "$ref": "#/components/schemas/EntityRecordMeta"
+                    },
+                    "data": {
+                        "$ref": "#/components/schemas/IdentityProviderAccount"
+                    }
+                },
+                "required": [
+                    "meta",
+                    "data"
+                ],
+                "type": "object",
+                "description": "The wire shape of every entity-record response: the record under\n`data`, response-scoped extras under `meta` (mirroring\n`EntityCollectionResponse`)."
+            },
+            "IdentityProviderLinkConfirmPayload": {
+                "properties": {
+                    "handle": {
+                        "type": "string"
+                    }
+                },
+                "required": [
+                    "handle"
+                ],
+                "type": "object",
+                "description": "Body of `POST /identity-providers/:id/link-confirm` (issue #3439): the\none-time handle the callback returned on the account console URL. The\naccount row is written for the AUTHENTICATED caller, so the handle names\na pending link rather than authorizing one on its own."
+            },
+            "EntityCollectionResponseIdentityProviderAccount": {
+                "properties": {
+                    "meta": {
+                        "properties": {
+                            "schema": {
+                                "$ref": "#/components/schemas/SchemaDescription"
+                            },
+                            "total": {
+                                "type": "number",
+                                "format": "double"
+                            },
+                            "offset": {
+                                "type": "number",
+                                "format": "double"
+                            },
+                            "limit": {
+                                "type": "number",
+                                "format": "double"
+                            }
+                        },
+                        "required": [
+                            "total"
+                        ],
+                        "type": "object"
+                    },
+                    "data": {
+                        "type": "array",
+                        "items": {
+                            "$ref": "#/components/schemas/IdentityProviderAccount"
+                        }
+                    }
+                },
+                "required": [
+                    "meta",
+                    "data"
+                ],
+                "type": "object"
+            },
             "IdentityProviderRoleMapping": {
                 "properties": {
                     "name": {
@@ -4965,8 +5182,8 @@
                             "kind": {
                                 "type": "string",
                                 "enum": [
-                                    "id_token",
                                     "access_token",
+                                    "id_token",
                                     "refresh_token",
                                     "mfa_token"
                                 ],
@@ -5254,9 +5471,9 @@
                             "type": "string",
                             "enum": [
                                 "none",
+                                "id_token",
                                 "code",
-                                "token",
-                                "id_token"
+                                "token"
                             ]
                         },
                         "description": "List of the supported OAuth 2.0 response_type values."
@@ -6460,38 +6677,226 @@
                 ],
                 "type": "object"
             },
-            "TrustAnchor": {
+            "SessionTokenKind": {
+                "type": "string",
+                "enum": [
+                    "access",
+                    "refresh"
+                ]
+            },
+            "SessionToken": {
                 "properties": {
                     "id": {
-                        "type": "string"
-                    },
-                    "name": {
-                        "type": "string"
+                        "type": "string",
+                        "description": "Token jti (application-populated, matches the JWT payload jti)."
                     },
-                    "certificate": {
+                    "sessionId": {
                         "type": "string",
-                        "description": "PEM-encoded CA certificate or CA chain."
+                        "description": "Owning session."
                     },
-                    "enabled": {
-                        "type": "boolean"
+                    "clientId": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "The client the token was issued for. Attribution sits here rather than\non the session, because one browser session may serve several\napplications.\n\nNull when the issuing path does not know the client (an MFA-login\ncompletion rides a client-less session) and on rows created before the\ncolumn existed."
                     },
-                    "createdAt": {
-                        "type": "string"
+                    "kind": {
+                        "$ref": "#/components/schemas/SessionTokenKind",
+                        "description": "Token kind."
                     },
-                    "updatedAt": {
-                        "type": "string"
+                    "parentId": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "Refresh tokens: previous refresh token in the rotation chain.\nInformational — null on the initial refresh token and on access tokens."
                     },
-                    "realmId": {
-                        "type": "string"
+                    "refreshTokenId": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "Access tokens: the refresh token this access token was issued alongside.\nInformational — null on refresh tokens."
                     },
-                    "realm": {
-                        "$ref": "#/components/schemas/Realm"
-                    }
-                },
-                "required": [
-                    "id",
-                    "name",
-                    "certificate",
+                    "ipAddress": {
+                        "type": "string",
+                        "description": "IP address captured from the issuing request."
+                    },
+                    "userAgent": {
+                        "type": "string",
+                        "description": "User agent captured from the issuing request."
+                    },
+                    "consumedAt": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "Refresh tokens: timestamp the token was consumed by a rotation (iso).\nnull on access tokens and on a not-yet-used refresh token."
+                    },
+                    "revokedAt": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ],
+                        "description": "Timestamp the token was revoked (iso) — single-token revoke or family revoke."
+                    },
+                    "expiresAt": {
+                        "type": "string",
+                        "description": "Expiration date (iso) — mirrors the JWT exp. Drives cleanup."
+                    },
+                    "createdAt": {
+                        "type": "string",
+                        "description": "Creation date (iso)."
+                    },
+                    "session": {
+                        "$ref": "#/components/schemas/Session"
+                    },
+                    "client": {
+                        "oneOf": [
+                            {
+                                "$ref": "#/components/schemas/Client"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    }
+                },
+                "required": [
+                    "id",
+                    "sessionId",
+                    "clientId",
+                    "kind",
+                    "parentId",
+                    "refreshTokenId",
+                    "ipAddress",
+                    "userAgent",
+                    "consumedAt",
+                    "revokedAt",
+                    "expiresAt",
+                    "createdAt"
+                ],
+                "type": "object"
+            },
+            "EntityCollectionResponseSessionToken": {
+                "properties": {
+                    "meta": {
+                        "properties": {
+                            "schema": {
+                                "$ref": "#/components/schemas/SchemaDescription"
+                            },
+                            "total": {
+                                "type": "number",
+                                "format": "double"
+                            },
+                            "offset": {
+                                "type": "number",
+                                "format": "double"
+                            },
+                            "limit": {
+                                "type": "number",
+                                "format": "double"
+                            }
+                        },
+                        "required": [
+                            "total"
+                        ],
+                        "type": "object"
+                    },
+                    "data": {
+                        "type": "array",
+                        "items": {
+                            "$ref": "#/components/schemas/SessionToken"
+                        }
+                    }
+                },
+                "required": [
+                    "meta",
+                    "data"
+                ],
+                "type": "object"
+            },
+            "EntityRecordResponseSessionToken": {
+                "properties": {
+                    "meta": {
+                        "$ref": "#/components/schemas/EntityRecordMeta"
+                    },
+                    "data": {
+                        "$ref": "#/components/schemas/SessionToken"
+                    }
+                },
+                "required": [
+                    "meta",
+                    "data"
+                ],
+                "type": "object",
+                "description": "The wire shape of every entity-record response: the record under\n`data`, response-scoped extras under `meta` (mirroring\n`EntityCollectionResponse`)."
+            },
+            "SessionTokenDeleteManyResult": {
+                "properties": {
+                    "count": {
+                        "type": "number",
+                        "format": "double"
+                    }
+                },
+                "required": [
+                    "count"
+                ],
+                "type": "object"
+            },
+            "TrustAnchor": {
+                "properties": {
+                    "id": {
+                        "type": "string"
+                    },
+                    "name": {
+                        "type": "string"
+                    },
+                    "certificate": {
+                        "type": "string",
+                        "description": "PEM-encoded CA certificate or CA chain."
+                    },
+                    "enabled": {
+                        "type": "boolean"
+                    },
+                    "createdAt": {
+                        "type": "string"
+                    },
+                    "updatedAt": {
+                        "type": "string"
+                    },
+                    "realmId": {
+                        "type": "string"
+                    },
+                    "realm": {
+                        "$ref": "#/components/schemas/Realm"
+                    }
+                },
+                "required": [
+                    "id",
+                    "name",
+                    "certificate",
                     "enabled",
                     "createdAt",
                     "updatedAt",
@@ -9097,7 +9502,346 @@
                         "content": {
                             "application/json": {
                                 "schema": {
-                                    "$ref": "#/components/schemas/EntityRecordResponseIdentityProvider"
+                                    "$ref": "#/components/schemas/EntityRecordResponseIdentityProvider"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
+        "/identity-providers/{id}/authorize-out": {
+            "get": {
+                "operationId": "AuthorizeOut",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/Response"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
+        "/realms/{realmId}/identity-providers/{id}/authorize-out": {
+            "get": {
+                "operationId": "AuthorizeOut_2",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/Response"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
+        "/identity-providers/{id}/link-request": {
+            "post": {
+                "operationId": "LinkRequest",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/IdentityProviderLinkRequestResponse"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
+        "/realms/{realmId}/identity-providers/{id}/link-request": {
+            "post": {
+                "operationId": "LinkRequest_2",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/IdentityProviderLinkRequestResponse"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
+        "/identity-providers/{id}/authorize-in": {
+            "get": {
+                "operationId": "AuthorizeIn",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/Response"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
+        "/realms/{realmId}/identity-providers/{id}/authorize-in": {
+            "get": {
+                "operationId": "AuthorizeIn_2",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/Response"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
+        "/identity-providers/{id}/link-confirm": {
+            "post": {
+                "operationId": "ConfirmLink",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityRecordResponseIdentityProviderAccount"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "The bearer-authenticated half of the link (issue #3439): the account\nrow is written here, for the AUTHENTICATED user, never in the callback.",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ],
+                "requestBody": {
+                    "description": "",
+                    "required": true,
+                    "content": {
+                        "application/json": {
+                            "schema": {
+                                "$ref": "#/components/schemas/IdentityProviderLinkConfirmPayload"
+                            }
+                        }
+                    }
+                }
+            }
+        },
+        "/realms/{realmId}/identity-providers/{id}/link-confirm": {
+            "post": {
+                "operationId": "ConfirmLink_2",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityRecordResponseIdentityProviderAccount"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "The bearer-authenticated half of the link (issue #3439): the account\nrow is written here, for the AUTHENTICATED user, never in the callback.",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ],
+                "requestBody": {
+                    "description": "",
+                    "required": true,
+                    "content": {
+                        "application/json": {
+                            "schema": {
+                                "$ref": "#/components/schemas/IdentityProviderLinkConfirmPayload"
+                            }
+                        }
+                    }
+                }
+            }
+        },
+        "/identity-provider-accounts": {
+            "get": {
+                "operationId": "GetMany_10",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityCollectionResponseIdentityProviderAccount"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": []
+            }
+        },
+        "/realms/{realmId}/identity-provider-accounts": {
+            "get": {
+                "operationId": "GetMany_11",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityCollectionResponseIdentityProviderAccount"
                                 }
                             }
                         }
@@ -9105,32 +9849,19 @@
                 },
                 "description": "",
                 "tags": [],
-                "parameters": [
-                    {
-                        "allowEmptyValue": false,
-                        "deprecated": false,
-                        "description": "",
-                        "in": "path",
-                        "name": "id",
-                        "required": true,
-                        "schema": {
-                            "type": "string"
-                        },
-                        "examples": {}
-                    }
-                ]
+                "parameters": []
             }
         },
-        "/identity-providers/{id}/authorize-out": {
+        "/identity-provider-accounts/{id}": {
             "get": {
-                "operationId": "AuthorizeOut",
+                "operationId": "GetOne_8",
                 "responses": {
                     "200": {
                         "description": "Ok",
                         "content": {
                             "application/json": {
                                 "schema": {
-                                    "$ref": "#/components/schemas/Response"
+                                    "$ref": "#/components/schemas/EntityRecordResponseIdentityProviderAccount"
                                 }
                             }
                         }
@@ -9152,18 +9883,16 @@
                         "examples": {}
                     }
                 ]
-            }
-        },
-        "/realms/{realmId}/identity-providers/{id}/authorize-out": {
-            "get": {
-                "operationId": "AuthorizeOut_2",
+            },
+            "delete": {
+                "operationId": "Drop_8",
                 "responses": {
                     "200": {
                         "description": "Ok",
                         "content": {
                             "application/json": {
                                 "schema": {
-                                    "$ref": "#/components/schemas/Response"
+                                    "$ref": "#/components/schemas/EntityRecordResponseIdentityProviderAccount"
                                 }
                             }
                         }
@@ -9187,16 +9916,16 @@
                 ]
             }
         },
-        "/identity-providers/{id}/authorize-in": {
+        "/realms/{realmId}/identity-provider-accounts/{id}": {
             "get": {
-                "operationId": "AuthorizeIn",
+                "operationId": "GetOne_9",
                 "responses": {
                     "200": {
                         "description": "Ok",
                         "content": {
                             "application/json": {
                                 "schema": {
-                                    "$ref": "#/components/schemas/Response"
+                                    "$ref": "#/components/schemas/EntityRecordResponseIdentityProviderAccount"
                                 }
                             }
                         }
@@ -9218,18 +9947,16 @@
                         "examples": {}
                     }
                 ]
-            }
-        },
-        "/realms/{realmId}/identity-providers/{id}/authorize-in": {
-            "get": {
-                "operationId": "AuthorizeIn_2",
+            },
+            "delete": {
+                "operationId": "Drop_9",
                 "responses": {
                     "200": {
                         "description": "Ok",
                         "content": {
                             "application/json": {
                                 "schema": {
-                                    "$ref": "#/components/schemas/Response"
+                                    "$ref": "#/components/schemas/EntityRecordResponseIdentityProviderAccount"
                                 }
                             }
                         }
@@ -9255,7 +9982,7 @@
         },
         "/identity-provider-role-mappings": {
             "get": {
-                "operationId": "GetMany_10",
+                "operationId": "GetMany_12",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9304,7 +10031,7 @@
         },
         "/identity-provider-role-mappings/{id}": {
             "get": {
-                "operationId": "GetOne_8",
+                "operationId": "GetOne_10",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9377,7 +10104,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_8",
+                "operationId": "Drop_10",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9410,7 +10137,7 @@
         },
         "/keys": {
             "get": {
-                "operationId": "GetMany_11",
+                "operationId": "GetMany_13",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9459,7 +10186,7 @@
         },
         "/realms/{realmId}/keys": {
             "get": {
-                "operationId": "GetMany_12",
+                "operationId": "GetMany_14",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9508,7 +10235,7 @@
         },
         "/keys/{id}": {
             "get": {
-                "operationId": "GetOne_9",
+                "operationId": "GetOne_11",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9581,7 +10308,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_9",
+                "operationId": "Drop_11",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9614,7 +10341,7 @@
         },
         "/realms/{realmId}/keys/{id}": {
             "get": {
-                "operationId": "GetOne_10",
+                "operationId": "GetOne_12",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9687,7 +10414,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_10",
+                "operationId": "Drop_12",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9720,7 +10447,7 @@
         },
         "/permissions": {
             "get": {
-                "operationId": "GetMany_13",
+                "operationId": "GetMany_15",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -9769,7 +10496,7 @@
         },
         "/realms/{realmId}/permissions": {
             "get": {
-                "operationId": "GetMany_14",
+                "operationId": "GetMany_16",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10021,7 +10748,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_11",
+                "operationId": "Drop_13",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10169,7 +10896,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_12",
+                "operationId": "Drop_14",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10202,7 +10929,7 @@
         },
         "/permission-policies": {
             "get": {
-                "operationId": "GetMany_15",
+                "operationId": "GetMany_17",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10251,7 +10978,7 @@
         },
         "/permission-policies/{id}": {
             "get": {
-                "operationId": "GetOne_11",
+                "operationId": "GetOne_13",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10282,7 +11009,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_13",
+                "operationId": "Drop_15",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -10954,7 +11681,7 @@
         },
         "/realms": {
             "get": {
-                "operationId": "GetMany_16",
+                "operationId": "GetMany_18",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11118,7 +11845,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_14",
+                "operationId": "Drop_16",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11273,7 +12000,7 @@
         },
         "/roles": {
             "get": {
-                "operationId": "GetMany_17",
+                "operationId": "GetMany_19",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11437,7 +12164,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_15",
+                "operationId": "Drop_17",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11470,7 +12197,7 @@
         },
         "/role-attributes": {
             "get": {
-                "operationId": "GetMany_18",
+                "operationId": "GetMany_20",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11592,7 +12319,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_16",
+                "operationId": "Drop_18",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11625,7 +12352,7 @@
         },
         "/role-permissions": {
             "get": {
-                "operationId": "GetMany_19",
+                "operationId": "GetMany_21",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11716,7 +12443,7 @@
                 }
             },
             "get": {
-                "operationId": "GetOne_12",
+                "operationId": "GetOne_14",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11747,7 +12474,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_17",
+                "operationId": "Drop_19",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11780,7 +12507,7 @@
         },
         "/policies": {
             "get": {
-                "operationId": "GetMany_20",
+                "operationId": "GetMany_22",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11829,7 +12556,7 @@
         },
         "/realms/{realmId}/policies": {
             "get": {
-                "operationId": "GetMany_21",
+                "operationId": "GetMany_23",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -11944,7 +12671,7 @@
         },
         "/policies/{id}": {
             "get": {
-                "operationId": "GetOne_13",
+                "operationId": "GetOne_15",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12075,7 +12802,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_18",
+                "operationId": "Drop_20",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12108,7 +12835,7 @@
         },
         "/realms/{realmId}/policies/{id}": {
             "get": {
-                "operationId": "GetOne_14",
+                "operationId": "GetOne_16",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12239,7 +12966,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_19",
+                "operationId": "Drop_21",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12360,7 +13087,7 @@
         },
         "/scopes": {
             "get": {
-                "operationId": "GetMany_22",
+                "operationId": "GetMany_24",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12524,7 +13251,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_20",
+                "operationId": "Drop_22",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12557,7 +13284,7 @@
         },
         "/sessions": {
             "get": {
-                "operationId": "GetMany_23",
+                "operationId": "GetMany_25",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12595,7 +13322,7 @@
         },
         "/realms/{realmId}/sessions": {
             "get": {
-                "operationId": "GetMany_24",
+                "operationId": "GetMany_26",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12633,7 +13360,7 @@
         },
         "/sessions/{id}": {
             "get": {
-                "operationId": "GetOne_15",
+                "operationId": "GetOne_17",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12664,7 +13391,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_21",
+                "operationId": "Drop_23",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12697,7 +13424,7 @@
         },
         "/realms/{realmId}/sessions/{id}": {
             "get": {
-                "operationId": "GetOne_16",
+                "operationId": "GetOne_18",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12728,7 +13455,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_22",
+                "operationId": "Drop_24",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12759,9 +13486,111 @@
                 ]
             }
         },
+        "/session-tokens": {
+            "get": {
+                "operationId": "GetMany_27",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityCollectionResponseSessionToken"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": []
+            },
+            "delete": {
+                "operationId": "DropMany_3",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/SessionTokenDeleteManyResult"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "Revoke every token matching the query. Requires a target filter, so it\ncannot degenerate into an unscoped mass revoke.\n\nScoped to one client this is \"sign out of this application\": the session\nitself survives, so the other applications riding it stay signed in.",
+                "tags": [],
+                "parameters": []
+            }
+        },
+        "/session-tokens/{id}": {
+            "get": {
+                "operationId": "GetOne_19",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityRecordResponseSessionToken"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            },
+            "delete": {
+                "operationId": "Drop_25",
+                "responses": {
+                    "200": {
+                        "description": "Ok",
+                        "content": {
+                            "application/json": {
+                                "schema": {
+                                    "$ref": "#/components/schemas/EntityRecordResponseSessionToken"
+                                }
+                            }
+                        }
+                    }
+                },
+                "description": "",
+                "tags": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ]
+            }
+        },
         "/trust-anchors": {
             "get": {
-                "operationId": "GetMany_25",
+                "operationId": "GetMany_28",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12810,7 +13639,7 @@
         },
         "/realms/{realmId}/trust-anchors": {
             "get": {
-                "operationId": "GetMany_26",
+                "operationId": "GetMany_29",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12859,7 +13688,7 @@
         },
         "/trust-anchors/{id}": {
             "get": {
-                "operationId": "GetOne_17",
+                "operationId": "GetOne_20",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12932,7 +13761,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_23",
+                "operationId": "Drop_26",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -12965,7 +13794,7 @@
         },
         "/realms/{realmId}/trust-anchors/{id}": {
             "get": {
-                "operationId": "GetOne_18",
+                "operationId": "GetOne_21",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13038,7 +13867,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_24",
+                "operationId": "Drop_27",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13071,7 +13900,7 @@
         },
         "/users": {
             "get": {
-                "operationId": "GetMany_27",
+                "operationId": "GetMany_30",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13120,7 +13949,7 @@
         },
         "/realms/{realmId}/users": {
             "get": {
-                "operationId": "GetMany_28",
+                "operationId": "GetMany_31",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13284,7 +14113,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_25",
+                "operationId": "Drop_28",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13432,7 +14261,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_26",
+                "operationId": "Drop_29",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13465,7 +14294,7 @@
         },
         "/user-attributes": {
             "get": {
-                "operationId": "GetMany_29",
+                "operationId": "GetMany_32",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13587,7 +14416,7 @@
                 }
             },
             "delete": {
-                "operationId": "Drop_27",
+                "operationId": "Drop_30",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13620,7 +14449,7 @@
         },
         "/users/{id}/authenticators": {
             "get": {
-                "operationId": "GetMany_30",
+                "operationId": "GetMany_33",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13695,7 +14524,7 @@
         },
         "/users/{id}/authenticators/{deviceId}": {
             "get": {
-                "operationId": "GetOne_19",
+                "operationId": "GetOne_22",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13738,7 +14567,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_28",
+                "operationId": "Drop_31",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13839,7 +14668,7 @@
         },
         "/user-permissions": {
             "get": {
-                "operationId": "GetMany_31",
+                "operationId": "GetMany_34",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13930,7 +14759,7 @@
                 }
             },
             "get": {
-                "operationId": "GetOne_20",
+                "operationId": "GetOne_23",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13961,7 +14790,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_29",
+                "operationId": "Drop_32",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -13994,7 +14823,7 @@
         },
         "/user-roles": {
             "get": {
-                "operationId": "GetMany_32",
+                "operationId": "GetMany_35",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -14043,7 +14872,7 @@
         },
         "/user-roles/{id}": {
             "get": {
-                "operationId": "GetOne_21",
+                "operationId": "GetOne_24",
                 "responses": {
                     "200": {
                         "description": "Ok",
@@ -14074,7 +14903,7 @@
                 ]
             },
             "delete": {
-                "operationId": "Drop_30",
+                "operationId": "Drop_33",
                 "responses": {
                     "200": {
                         "description": "Ok",