@barndoor-ai/sdk 1.2.0 → 2.0.0-dev.g37b8897

package/dist/apis/IdentityApi.js

@@ -0,0 +1,545 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Barndoor.ai Public API
+ * Unified public API specification for Barndoor.ai platform
+ *
+ * The version of the OpenAPI document: 2.0.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdentityApi = void 0;
+const runtime = __importStar(require("../runtime.js"));
+const IdpConnectionConfig_js_1 = require("../models/IdpConnectionConfig.js");
+const IdpConnectionResponse_js_1 = require("../models/IdpConnectionResponse.js");
+const IdpRoleMappingConfig_js_1 = require("../models/IdpRoleMappingConfig.js");
+const IdpRoleMappingResponse_js_1 = require("../models/IdpRoleMappingResponse.js");
+const IdpSettingsResponse_js_1 = require("../models/IdpSettingsResponse.js");
+const IdpTestResult_js_1 = require("../models/IdpTestResult.js");
+const OrganizationRolesGroupsResponse_js_1 = require("../models/OrganizationRolesGroupsResponse.js");
+/**
+ *
+ */
+class IdentityApi extends runtime.BaseAPI {
+    /**
+     * Creates request options for createIdpConnection without sending the request
+     */
+    async createIdpConnectionRequestOpts(requestParameters) {
+        if (requestParameters['idpConnectionConfig'] == null) {
+            throw new runtime.RequiredError('idpConnectionConfig', 'Required parameter "idpConnectionConfig" was null or undefined when calling createIdpConnection().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/identity/public/v1/idp/connection`;
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, IdpConnectionConfig_js_1.IdpConnectionConfigToJSON)(requestParameters['idpConnectionConfig']),
+        };
+    }
+    /**
+     * Create a new IdP connection for the organization.  Creates a new OIDC Identity Provider and links it to the organization. This enables SSO for the organization.  Required fields: - display_name: Human-readable name for the IdP - issuer: OIDC issuer URL - client_id: OAuth client ID from your IdP - client_secret: OAuth client secret from your IdP - authorization_url: OIDC authorization endpoint - token_url: OIDC token endpoint - jwks_url: OIDC JWKS endpoint  Only admins can create an IdP connection. Returns 409 if an IdP already exists for this organization.
+     * Create Idp Connection
+     */
+    async createIdpConnectionRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.createIdpConnectionRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, IdpConnectionResponse_js_1.IdpConnectionResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Create a new IdP connection for the organization.  Creates a new OIDC Identity Provider and links it to the organization. This enables SSO for the organization.  Required fields: - display_name: Human-readable name for the IdP - issuer: OIDC issuer URL - client_id: OAuth client ID from your IdP - client_secret: OAuth client secret from your IdP - authorization_url: OIDC authorization endpoint - token_url: OIDC token endpoint - jwks_url: OIDC JWKS endpoint  Only admins can create an IdP connection. Returns 409 if an IdP already exists for this organization.
+     * Create Idp Connection
+     */
+    async createIdpConnection(requestParameters, initOverrides) {
+        const response = await this.createIdpConnectionRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for deleteIdpConnection without sending the request
+     */
+    async deleteIdpConnectionRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/identity/public/v1/idp/connection`;
+        return {
+            path: urlPath,
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Delete the IdP connection for the organization.  This removes the Identity Provider, disabling SSO for the organization. Users will need to use alternative authentication methods.  WARNING: This action cannot be undone. Existing user sessions may be affected.  Only admins can delete the IdP connection.
+     * Delete Idp Connection
+     */
+    async deleteIdpConnectionRaw(initOverrides) {
+        const requestOptions = await this.deleteIdpConnectionRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Delete the IdP connection for the organization.  This removes the Identity Provider, disabling SSO for the organization. Users will need to use alternative authentication methods.  WARNING: This action cannot be undone. Existing user sessions may be affected.  Only admins can delete the IdP connection.
+     * Delete Idp Connection
+     */
+    async deleteIdpConnection(initOverrides) {
+        await this.deleteIdpConnectionRaw(initOverrides);
+    }
+    /**
+     * Creates request options for getIdpConfig without sending the request
+     */
+    async getIdpConfigRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/identity/public/v1/idp/config`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Get the current IdP role mapping configuration for the organization.  ``admin_group`` is read from the org\'s ``admin``-role ``group_role_mapping`` row (BCP-3486); ``idp_alias``/``idp_display_name`` still come from Keycloak. Requires admin or superadmin role.
+     * Get Idp Config
+     */
+    async getIdpConfigRaw(initOverrides) {
+        const requestOptions = await this.getIdpConfigRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, IdpRoleMappingResponse_js_1.IdpRoleMappingResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Get the current IdP role mapping configuration for the organization.  ``admin_group`` is read from the org\'s ``admin``-role ``group_role_mapping`` row (BCP-3486); ``idp_alias``/``idp_display_name`` still come from Keycloak. Requires admin or superadmin role.
+     * Get Idp Config
+     */
+    async getIdpConfig(initOverrides) {
+        const response = await this.getIdpConfigRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for getIdpConnection without sending the request
+     */
+    async getIdpConnectionRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/identity/public/v1/idp/connection`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Get the current IdP connection configuration for the organization.  Returns the current OIDC configuration including endpoints and whether client credentials are configured (credentials are not exposed).  Only admins can view this configuration.
+     * Get Idp Connection
+     */
+    async getIdpConnectionRaw(initOverrides) {
+        const requestOptions = await this.getIdpConnectionRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, IdpConnectionResponse_js_1.IdpConnectionResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Get the current IdP connection configuration for the organization.  Returns the current OIDC configuration including endpoints and whether client credentials are configured (credentials are not exposed).  Only admins can view this configuration.
+     * Get Idp Connection
+     */
+    async getIdpConnection(initOverrides) {
+        const response = await this.getIdpConnectionRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for getIdpSettings without sending the request
+     */
+    async getIdpSettingsRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/identity/public/v1/idp/settings`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Get IdP-related settings for the organization.  Returns settings including: - enforce_sso: Whether SSO is enforced (password login disabled) - break_glass_email: Dedicated emergency admin alias for SSO bypass  Requires admin or superadmin role.
+     * Get Idp Settings
+     */
+    async getIdpSettingsRaw(initOverrides) {
+        const requestOptions = await this.getIdpSettingsRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, IdpSettingsResponse_js_1.IdpSettingsResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Get IdP-related settings for the organization.  Returns settings including: - enforce_sso: Whether SSO is enforced (password login disabled) - break_glass_email: Dedicated emergency admin alias for SSO bypass  Requires admin or superadmin role.
+     * Get Idp Settings
+     */
+    async getIdpSettings(initOverrides) {
+        const response = await this.getIdpSettingsRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for listRolesAndGroups without sending the request
+     */
+    async listRolesAndGroupsRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/identity/public/v1/users/roles-groups`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Get all unique roles and groups across all users in the organization.  Returns aggregated lists of all roles and groups that are assigned to any user in the authenticated user\'s organization. Only users with permission to list users can access this endpoint.
+     * Get Organization Roles Groups
+     */
+    async listRolesAndGroupsRaw(initOverrides) {
+        const requestOptions = await this.listRolesAndGroupsRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, OrganizationRolesGroupsResponse_js_1.OrganizationRolesGroupsResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Get all unique roles and groups across all users in the organization.  Returns aggregated lists of all roles and groups that are assigned to any user in the authenticated user\'s organization. Only users with permission to list users can access this endpoint.
+     * Get Organization Roles Groups
+     */
+    async listRolesAndGroups(initOverrides) {
+        const response = await this.listRolesAndGroupsRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for testIdpConnection without sending the request
+     */
+    async testIdpConnectionRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/identity/public/v1/idp/test`;
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Test the IdP connection for the organization.  Validates that the current IdP configuration is correct by: 1. Checking required configuration is present 2. Verifying the OIDC discovery endpoint is reachable 3. Validating the JWKS endpoint returns keys  This helps diagnose configuration issues before users try to log in. Only admins can run this test.
+     * Test Idp Connection
+     */
+    async testIdpConnectionRaw(initOverrides) {
+        const requestOptions = await this.testIdpConnectionRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, IdpTestResult_js_1.IdpTestResultFromJSON)(jsonValue));
+    }
+    /**
+     * Test the IdP connection for the organization.  Validates that the current IdP configuration is correct by: 1. Checking required configuration is present 2. Verifying the OIDC discovery endpoint is reachable 3. Validating the JWKS endpoint returns keys  This helps diagnose configuration issues before users try to log in. Only admins can run this test.
+     * Test Idp Connection
+     */
+    async testIdpConnection(initOverrides) {
+        const response = await this.testIdpConnectionRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for updateIdpConfig without sending the request
+     */
+    async updateIdpConfigRequestOpts(requestParameters) {
+        if (requestParameters['idpRoleMappingConfig'] == null) {
+            throw new runtime.RequiredError('idpRoleMappingConfig', 'Required parameter "idpRoleMappingConfig" was null or undefined when calling updateIdpConfig().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/identity/public/v1/idp/config`;
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, IdpRoleMappingConfig_js_1.IdpRoleMappingConfigToJSON)(requestParameters['idpRoleMappingConfig']),
+        };
+    }
+    /**
+     * Update the IdP role mapping configuration for the organization.  Requires an IdP to already be configured for the organization — raises 404 otherwise, matching the legacy Keycloak-mapper-backed behavior (strict backward compatibility). Upserts (or, when ``admin_group`` is empty, deletes) the org\'s ``admin``-role ``group_role_mapping`` row(s) (BCP-3486) and enqueues org-wide re-evaluation. This no longer creates/updates a Keycloak IdP mapper — but does best-effort delete a lingering legacy ``barndoor-role-admin`` mapper if one is still present, so a stale FORCE-sync mapper can\'t keep granting admin at SSO after this call changes the authoritative DB row (see ``GroupRoleMappingService.update_legacy_idp_config``).  Requires admin or superadmin role.
+     * Update Idp Config
+     */
+    async updateIdpConfigRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.updateIdpConfigRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, IdpRoleMappingResponse_js_1.IdpRoleMappingResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Update the IdP role mapping configuration for the organization.  Requires an IdP to already be configured for the organization — raises 404 otherwise, matching the legacy Keycloak-mapper-backed behavior (strict backward compatibility). Upserts (or, when ``admin_group`` is empty, deletes) the org\'s ``admin``-role ``group_role_mapping`` row(s) (BCP-3486) and enqueues org-wide re-evaluation. This no longer creates/updates a Keycloak IdP mapper — but does best-effort delete a lingering legacy ``barndoor-role-admin`` mapper if one is still present, so a stale FORCE-sync mapper can\'t keep granting admin at SSO after this call changes the authoritative DB row (see ``GroupRoleMappingService.update_legacy_idp_config``).  Requires admin or superadmin role.
+     * Update Idp Config
+     */
+    async updateIdpConfig(requestParameters, initOverrides) {
+        const response = await this.updateIdpConfigRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for updateIdpConnection without sending the request
+     */
+    async updateIdpConnectionRequestOpts(requestParameters) {
+        if (requestParameters['idpConnectionConfig'] == null) {
+            throw new runtime.RequiredError('idpConnectionConfig', 'Required parameter "idpConnectionConfig" was null or undefined when calling updateIdpConnection().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            // oauth required
+            const oauthToken = await this.configuration.accessToken("OAuth2", ["openid", "profile", "email"]);
+            if (oauthToken) {
+                headerParameters["Authorization"] = oauthToken.startsWith("Bearer ") ? oauthToken : `Bearer ${oauthToken}`;
+            }
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("ApiKey", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/api/identity/public/v1/idp/connection`;
+        return {
+            path: urlPath,
+            method: 'PUT',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, IdpConnectionConfig_js_1.IdpConnectionConfigToJSON)(requestParameters['idpConnectionConfig']),
+        };
+    }
+    /**
+     * Update the IdP connection configuration for the organization.  Updates the OIDC Identity Provider settings including: - Display name - OIDC endpoints (authorization, token, userinfo, JWKS, logout) - Client credentials - Scopes - The OIDC `prompt` sent on the authorization request  Only admins can update this configuration. Changes take effect immediately for new login attempts.
+     * Update Idp Connection
+     */
+    async updateIdpConnectionRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.updateIdpConnectionRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, IdpConnectionResponse_js_1.IdpConnectionResponseFromJSON)(jsonValue));
+    }
+    /**
+     * Update the IdP connection configuration for the organization.  Updates the OIDC Identity Provider settings including: - Display name - OIDC endpoints (authorization, token, userinfo, JWKS, logout) - Client credentials - Scopes - The OIDC `prompt` sent on the authorization request  Only admins can update this configuration. Changes take effect immediately for new login attempts.
+     * Update Idp Connection
+     */
+    async updateIdpConnection(requestParameters, initOverrides) {
+        const response = await this.updateIdpConnectionRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+}
+exports.IdentityApi = IdentityApi;