@djangocfg/api 2.1.360 → 2.1.361

package/src/_api/generated/_cfg_accounts/openapi.json

@@ -0,0 +1,1811 @@
+{
+  "openapi": "3.1.0",
+  "info": {
+    "title": "Django CFG API",
+    "version": "1.0.0",
+    "description": "RESTful API with modern architecture"
+  },
+  "paths": {
+    "/cfg/accounts/api-key/": {
+      "get": {
+        "operationId": "cfg_accounts_api_key_retrieve",
+        "description": "Retrieve the current user's API key (masked) and metadata.",
+        "summary": "Get API key details",
+        "tags": [
+          "cfg_accounts_api_key"
+        ],
+        "security": [
+          {
+            "jwtAuth": []
+          },
+          {
+            "cookieAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/APIKey"
+                }
+              }
+            },
+            "description": ""
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Authentication credentials were not provided."
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/api-key/regenerate/": {
+      "post": {
+        "operationId": "cfg_accounts_api_key_regenerate_create",
+        "description": "Generate a new API key. The full key is returned only once.",
+        "summary": "Regenerate API key",
+        "tags": [
+          "cfg_accounts_api_key"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/APIKeyRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "security": [
+          {
+            "jwtAuth": []
+          },
+          {
+            "cookieAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/APIKeyRegenerate"
+                },
+                "examples": {
+                  "RegenerateResponse": {
+                    "value": {
+                      "key": "d0b45e78-1234-5678-9abc-def012345678",
+                      "reissued_at": "2024-01-15T10:30:00Z"
+                    },
+                    "summary": "Regenerate Response"
+                  }
+                }
+              }
+            },
+            "description": ""
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Authentication credentials were not provided."
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/api-key/test/": {
+      "post": {
+        "operationId": "cfg_accounts_api_key_test_create",
+        "description": "Test whether an API key is valid without consuming it.",
+        "summary": "Test API key",
+        "tags": [
+          "cfg_accounts_api_key"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/APIKeyTestRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "security": [
+          {
+            "jwtAuth": []
+          },
+          {
+            "cookieAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/APIKeyTestResult"
+                },
+                "examples": {
+                  "ValidKey": {
+                    "value": {
+                      "valid": true,
+                      "user_id": "42"
+                    },
+                    "summary": "Valid Key"
+                  },
+                  "InvalidKey": {
+                    "value": {
+                      "valid": false,
+                      "user_id": null
+                    },
+                    "summary": "Invalid Key"
+                  }
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/oauth/connections/": {
+      "get": {
+        "operationId": "cfg_accounts_oauth_connections_list",
+        "description": "Get all OAuth connections for the current user.",
+        "summary": "List OAuth connections",
+        "tags": [
+          "cfg_accounts_oauth"
+        ],
+        "security": [
+          {
+            "apiKeyAuth": []
+          },
+          {
+            "jwtAuthWithLastLogin": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "array",
+                  "items": {
+                    "$ref": "#/components/schemas/OAuthConnection"
+                  }
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/oauth/disconnect/": {
+      "post": {
+        "operationId": "cfg_accounts_oauth_disconnect_create",
+        "description": "Remove OAuth connection for the specified provider.",
+        "summary": "Disconnect OAuth provider",
+        "tags": [
+          "cfg_accounts_oauth"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/OAuthDisconnectRequestRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "security": [
+          {
+            "apiKeyAuth": []
+          },
+          {
+            "jwtAuthWithLastLogin": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "message": {
+                      "type": "string"
+                    }
+                  }
+                }
+              }
+            },
+            "description": ""
+          },
+          "400": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OAuthError"
+                }
+              }
+            },
+            "description": ""
+          },
+          "404": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OAuthError"
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/oauth/github/authorize/": {
+      "post": {
+        "operationId": "cfg_accounts_oauth_github_authorize_create",
+        "description": "Generate GitHub OAuth authorization URL. Redirect user to this URL to start authentication.",
+        "summary": "Start GitHub OAuth",
+        "tags": [
+          "cfg_accounts_oauth"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/OAuthAuthorizeRequestRequest"
+              }
+            }
+          }
+        },
+        "security": [
+          {}
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OAuthAuthorizeResponse"
+                }
+              }
+            },
+            "description": ""
+          },
+          "503": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OAuthError"
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/oauth/github/callback/": {
+      "post": {
+        "operationId": "cfg_accounts_oauth_github_callback_create",
+        "description": "Exchange authorization code for JWT tokens. Call this after GitHub redirects back with code.",
+        "summary": "Complete GitHub OAuth",
+        "tags": [
+          "cfg_accounts_oauth"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/OAuthCallbackRequestRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "security": [
+          {}
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OAuthTokenResponse"
+                }
+              }
+            },
+            "description": ""
+          },
+          "400": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OAuthError"
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/oauth/providers/": {
+      "get": {
+        "operationId": "cfg_accounts_oauth_providers_retrieve",
+        "description": "Get list of available OAuth providers for authentication.",
+        "summary": "List OAuth providers",
+        "tags": [
+          "cfg_accounts_oauth"
+        ],
+        "security": [
+          {}
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OAuthProvidersResponse"
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/otp/request/": {
+      "post": {
+        "operationId": "cfg_accounts_otp_request_create",
+        "description": "Request OTP code to email.",
+        "tags": [
+          "cfg_accounts"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/OTPRequestRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "security": [
+          {
+            "apiKeyAuth": []
+          },
+          {
+            "jwtAuthWithLastLogin": []
+          },
+          {}
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OTPRequestResponse"
+                }
+              }
+            },
+            "description": ""
+          },
+          "400": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OTPErrorResponse"
+                }
+              }
+            },
+            "description": ""
+          },
+          "429": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OTPErrorResponse"
+                }
+              }
+            },
+            "description": ""
+          },
+          "500": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OTPErrorResponse"
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/otp/verify/": {
+      "post": {
+        "operationId": "cfg_accounts_otp_verify_create",
+        "description": "Verify OTP code and return JWT tokens or 2FA session.\n\nIf user has 2FA enabled:\n- Returns requires_2fa=True with session_id\n- Client must complete 2FA verification at /cfg/totp/verify/\n\nIf user has no 2FA:\n- Returns JWT tokens and user data directly",
+        "tags": [
+          "cfg_accounts"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/OTPVerifyRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "security": [
+          {
+            "apiKeyAuth": []
+          },
+          {
+            "jwtAuthWithLastLogin": []
+          },
+          {}
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OTPVerifyResponse"
+                }
+              }
+            },
+            "description": ""
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OTPErrorResponse"
+                }
+              }
+            },
+            "description": ""
+          },
+          "429": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/OTPErrorResponse"
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/profile/": {
+      "get": {
+        "operationId": "cfg_accounts_profile_retrieve",
+        "description": "Retrieve the current authenticated user's profile information.",
+        "summary": "Get current user profile",
+        "tags": [
+          "cfg_accounts_profile"
+        ],
+        "security": [
+          {
+            "jwtAuth": []
+          },
+          {
+            "cookieAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            },
+            "description": ""
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Authentication credentials were not provided."
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/profile/avatar/": {
+      "post": {
+        "operationId": "cfg_accounts_profile_avatar_create",
+        "description": "Upload avatar image for the current authenticated user. Accepts multipart/form-data with 'avatar' field.",
+        "summary": "Upload user avatar",
+        "tags": [
+          "cfg_accounts_profile"
+        ],
+        "requestBody": {
+          "content": {
+            "multipart/form-data": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "avatar": {
+                    "type": "string",
+                    "format": "binary",
+                    "description": "Avatar image file (JPEG, PNG, GIF, WebP, max 5MB)"
+                  }
+                },
+                "required": [
+                  "avatar"
+                ]
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "apiKeyAuth": []
+          },
+          {
+            "jwtAuthWithLastLogin": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            },
+            "description": ""
+          },
+          "400": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Invalid file or validation error."
+                }
+              }
+            },
+            "description": ""
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Authentication credentials were not provided."
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/profile/delete/": {
+      "post": {
+        "operationId": "cfg_accounts_profile_delete_create",
+        "description": "\n    Permanently delete the current user's account.\n\n    This operation:\n    - Deactivates the account (user cannot log in)\n    - Anonymizes personal data (GDPR compliance)\n    - Frees up the email address for re-registration\n    - Preserves audit trail\n\n    The account can be restored by an administrator if needed.\n    ",
+        "summary": "Delete user account",
+        "tags": [
+          "cfg_accounts_profile"
+        ],
+        "security": [
+          {
+            "jwtAuth": []
+          },
+          {
+            "cookieAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/AccountDeleteResponse"
+                }
+              }
+            },
+            "description": ""
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Authentication credentials were not provided."
+                }
+              }
+            },
+            "description": ""
+          },
+          "400": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Account is already deleted."
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/profile/partial/": {
+      "put": {
+        "operationId": "cfg_accounts_profile_partial_update",
+        "description": "Partially update the current authenticated user's profile information. Supports avatar upload.",
+        "summary": "Partial update user profile",
+        "tags": [
+          "cfg_accounts_profile"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CfgUserUpdateRequest"
+              },
+              "examples": {
+                "ProfileUpdateWithAvatar": {
+                  "value": {
+                    "first_name": "John",
+                    "last_name": "Doe",
+                    "company": "Tech Corp",
+                    "phone": "+1 (555) 123-4567",
+                    "position": "Software Engineer"
+                  },
+                  "summary": "Profile Update with Avatar"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "jwtAuth": []
+          },
+          {
+            "cookieAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            },
+            "description": ""
+          },
+          "400": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Invalid data provided."
+                }
+              }
+            },
+            "description": ""
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Authentication credentials were not provided."
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      },
+      "patch": {
+        "operationId": "cfg_accounts_profile_partial_partial_update",
+        "description": "Partially update the current authenticated user's profile information. Supports avatar upload.",
+        "summary": "Partial update user profile",
+        "tags": [
+          "cfg_accounts_profile"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchedCfgUserUpdateRequest"
+              },
+              "examples": {
+                "ProfileUpdateWithAvatar": {
+                  "value": {
+                    "first_name": "John",
+                    "last_name": "Doe",
+                    "company": "Tech Corp",
+                    "phone": "+1 (555) 123-4567",
+                    "position": "Software Engineer"
+                  },
+                  "summary": "Profile Update with Avatar"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "jwtAuth": []
+          },
+          {
+            "cookieAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            },
+            "description": ""
+          },
+          "400": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Invalid data provided."
+                }
+              }
+            },
+            "description": ""
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Authentication credentials were not provided."
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/profile/update/": {
+      "put": {
+        "operationId": "cfg_accounts_profile_update_update",
+        "description": "Update the current authenticated user's profile information.",
+        "summary": "Update user profile",
+        "tags": [
+          "cfg_accounts_profile"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/CfgUserUpdateRequest"
+              },
+              "examples": {
+                "ValidProfileUpdate": {
+                  "value": {
+                    "first_name": "John",
+                    "last_name": "Doe",
+                    "company": "Tech Corp",
+                    "phone": "+1 (555) 123-4567",
+                    "position": "Software Engineer"
+                  },
+                  "summary": "Valid Profile Update"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "jwtAuth": []
+          },
+          {
+            "cookieAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            },
+            "description": ""
+          },
+          "400": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Invalid data provided."
+                }
+              }
+            },
+            "description": ""
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Authentication credentials were not provided."
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      },
+      "patch": {
+        "operationId": "cfg_accounts_profile_update_partial_update",
+        "description": "Update the current authenticated user's profile information.",
+        "summary": "Update user profile",
+        "tags": [
+          "cfg_accounts_profile"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchedCfgUserUpdateRequest"
+              },
+              "examples": {
+                "ValidProfileUpdate": {
+                  "value": {
+                    "first_name": "John",
+                    "last_name": "Doe",
+                    "company": "Tech Corp",
+                    "phone": "+1 (555) 123-4567",
+                    "position": "Software Engineer"
+                  },
+                  "summary": "Valid Profile Update"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "jwtAuth": []
+          },
+          {
+            "cookieAuth": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/User"
+                }
+              }
+            },
+            "description": ""
+          },
+          "400": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Invalid data provided."
+                }
+              }
+            },
+            "description": ""
+          },
+          "401": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "description": "Authentication credentials were not provided."
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
+    "/cfg/accounts/token/refresh/": {
+      "post": {
+        "operationId": "cfg_accounts_token_refresh_create",
+        "description": "Refresh JWT token.",
+        "tags": [
+          "cfg_accounts_auth"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/TokenRefreshRequest"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/TokenRefresh"
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    }
+  },
+  "components": {
+    "schemas": {
+      "APIKey": {
+        "type": "object",
+        "description": "Serializer for API key response (masked).",
+        "properties": {
+          "key": {
+            "type": "string",
+            "description": "Masked API key"
+          },
+          "reissued_at": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "format": "date-time",
+            "description": "When the key was last regenerated"
+          },
+          "created_at": {
+            "type": "string",
+            "format": "date-time",
+            "description": "When the key was created"
+          }
+        },
+        "required": [
+          "created_at",
+          "key",
+          "reissued_at"
+        ]
+      },
+      "APIKeyRegenerate": {
+        "type": "object",
+        "description": "Serializer for API key regeneration response (full key shown once).",
+        "properties": {
+          "key": {
+            "type": "string",
+            "description": "New API key (shown only once)"
+          },
+          "reissued_at": {
+            "type": "string",
+            "format": "date-time",
+            "description": "When the key was regenerated"
+          }
+        },
+        "required": [
+          "key",
+          "reissued_at"
+        ]
+      },
+      "APIKeyRequest": {
+        "type": "object",
+        "description": "Serializer for API key response (masked).",
+        "properties": {
+          "key": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Masked API key"
+          },
+          "reissued_at": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "format": "date-time",
+            "description": "When the key was last regenerated"
+          },
+          "created_at": {
+            "type": "string",
+            "format": "date-time",
+            "description": "When the key was created"
+          }
+        },
+        "required": [
+          "created_at",
+          "key",
+          "reissued_at"
+        ]
+      },
+      "APIKeyTestRequest": {
+        "type": "object",
+        "description": "Serializer for testing an API key.",
+        "properties": {
+          "key": {
+            "type": "string",
+            "minLength": 1,
+            "description": "API key to test"
+          }
+        },
+        "required": [
+          "key"
+        ]
+      },
+      "APIKeyTestResult": {
+        "type": "object",
+        "description": "Serializer for API key test result.",
+        "properties": {
+          "valid": {
+            "type": "boolean",
+            "description": "Whether the key is valid"
+          },
+          "user_id": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "description": "User ID if valid, null otherwise"
+          }
+        },
+        "required": [
+          "user_id",
+          "valid"
+        ]
+      },
+      "AccountDeleteResponse": {
+        "type": "object",
+        "description": "Response serializer for account deletion.",
+        "properties": {
+          "success": {
+            "type": "boolean",
+            "description": "Whether the account was successfully deleted"
+          },
+          "message": {
+            "type": "string",
+            "description": "Human-readable message about the deletion"
+          }
+        },
+        "required": [
+          "message",
+          "success"
+        ]
+      },
+      "CentrifugoToken": {
+        "type": "object",
+        "description": "Nested serializer for Centrifugo WebSocket connection token.",
+        "properties": {
+          "token": {
+            "type": "string",
+            "description": "JWT token for Centrifugo WebSocket connection"
+          },
+          "centrifugo_url": {
+            "type": "string",
+            "format": "uri",
+            "description": "Centrifugo WebSocket URL"
+          },
+          "expires_at": {
+            "type": "string",
+            "format": "date-time",
+            "description": "Token expiration time (ISO 8601)"
+          },
+          "channels": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "List of allowed channels for this user"
+          }
+        },
+        "required": [
+          "centrifugo_url",
+          "channels",
+          "expires_at",
+          "token"
+        ]
+      },
+      "CfgUserUpdateRequest": {
+        "type": "object",
+        "description": "Serializer for updating user profile.",
+        "properties": {
+          "first_name": {
+            "type": "string",
+            "maxLength": 50
+          },
+          "last_name": {
+            "type": "string",
+            "maxLength": 50
+          },
+          "company": {
+            "type": "string",
+            "maxLength": 100
+          },
+          "phone": {
+            "type": "string",
+            "maxLength": 20
+          },
+          "position": {
+            "type": "string",
+            "maxLength": 100
+          },
+          "language": {
+            "type": "string",
+            "maxLength": 10
+          },
+          "timezone": {
+            "type": "string",
+            "description": "IANA timezone name (e.g. 'Asia/Seoul'). Auto-detected from browser via X-Timezone header.",
+            "maxLength": 64
+          }
+        }
+      },
+      "OAuthAuthorizeRequestRequest": {
+        "type": "object",
+        "description": "Request to start OAuth flow.",
+        "properties": {
+          "redirect_uri": {
+            "type": "string",
+            "format": "uri",
+            "description": "URL to redirect after OAuth authorization. If not provided, uses config's site_url + callback_path"
+          },
+          "source_url": {
+            "type": "string",
+            "format": "uri",
+            "description": "Optional source URL for registration tracking"
+          }
+        }
+      },
+      "OAuthAuthorizeResponse": {
+        "type": "object",
+        "description": "Response with OAuth authorization URL.",
+        "properties": {
+          "authorization_url": {
+            "type": "string",
+            "format": "uri",
+            "description": "Full URL to redirect user to OAuth provider"
+          },
+          "state": {
+            "type": "string",
+            "description": "State token for CSRF protection. Store this and verify on callback."
+          }
+        },
+        "required": [
+          "authorization_url",
+          "state"
+        ]
+      },
+      "OAuthCallbackRequestRequest": {
+        "type": "object",
+        "description": "Request to complete OAuth flow (callback handler).",
+        "properties": {
+          "code": {
+            "type": "string",
+            "minLength": 10,
+            "description": "Authorization code from OAuth provider callback",
+            "maxLength": 500
+          },
+          "state": {
+            "type": "string",
+            "minLength": 20,
+            "description": "State token for CSRF verification (from authorize response)",
+            "maxLength": 100
+          },
+          "redirect_uri": {
+            "type": "string",
+            "format": "uri",
+            "description": "Same redirect_uri used in authorize request. If not provided, uses config's site_url + callback_path"
+          }
+        },
+        "required": [
+          "code",
+          "state"
+        ]
+      },
+      "OAuthConnection": {
+        "type": "object",
+        "description": "Serializer for OAuth connection info (user-facing).",
+        "properties": {
+          "id": {
+            "type": "integer",
+            "readOnly": true
+          },
+          "provider": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/OAuthProviderEnum"
+              }
+            ],
+            "readOnly": true,
+            "description": "OAuth provider name (github, google, etc.)\n\n* `github` - GitHub"
+          },
+          "provider_display": {
+            "type": "string",
+            "readOnly": true
+          },
+          "provider_username": {
+            "type": "string",
+            "readOnly": true,
+            "description": "Username on the OAuth provider platform"
+          },
+          "provider_email": {
+            "type": "string",
+            "format": "email",
+            "readOnly": true,
+            "description": "Email from OAuth provider (may differ from user.email)"
+          },
+          "provider_avatar_url": {
+            "type": "string",
+            "format": "uri",
+            "readOnly": true,
+            "description": "Avatar URL from OAuth provider"
+          },
+          "connected_at": {
+            "type": "string",
+            "format": "date-time",
+            "readOnly": true,
+            "description": "When this OAuth connection was created"
+          },
+          "last_login_at": {
+            "type": "string",
+            "format": "date-time",
+            "readOnly": true,
+            "description": "Last time this OAuth connection was used for login"
+          }
+        },
+        "required": [
+          "connected_at",
+          "id",
+          "last_login_at",
+          "provider",
+          "provider_avatar_url",
+          "provider_display",
+          "provider_email",
+          "provider_username"
+        ]
+      },
+      "OAuthDisconnectRequestRequest": {
+        "type": "object",
+        "description": "Request to disconnect OAuth provider.",
+        "properties": {
+          "provider": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/OAuthProviderEnum"
+              }
+            ],
+            "description": "OAuth provider to disconnect\n\n* `github` - GitHub"
+          }
+        },
+        "required": [
+          "provider"
+        ]
+      },
+      "OAuthError": {
+        "type": "object",
+        "description": "Error response for OAuth endpoints.",
+        "properties": {
+          "error": {
+            "type": "string",
+            "description": "Error code"
+          },
+          "error_description": {
+            "type": "string",
+            "description": "Human-readable error description"
+          }
+        },
+        "required": [
+          "error"
+        ]
+      },
+      "OAuthProviderEnum": {
+        "enum": [
+          "github"
+        ],
+        "type": "string",
+        "description": "* `github` - GitHub"
+      },
+      "OAuthProvidersResponse": {
+        "type": "object",
+        "description": "Response with available OAuth providers.",
+        "properties": {
+          "providers": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "additionalProperties": {}
+            },
+            "description": "List of available OAuth providers"
+          }
+        },
+        "required": [
+          "providers"
+        ]
+      },
+      "OAuthTokenResponse": {
+        "type": "object",
+        "description": "Response with JWT tokens after OAuth authentication.\n\nWhen 2FA is required:\n- requires_2fa: True\n- session_id: UUID of 2FA verification session\n- access/refresh/user: null\n\nWhen 2FA is not required:\n- requires_2fa: False\n- session_id: null\n- access/refresh/user: populated",
+        "properties": {
+          "requires_2fa": {
+            "type": "boolean",
+            "default": false,
+            "description": "True if 2FA verification is required"
+          },
+          "session_id": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "format": "uuid",
+            "description": "2FA session ID (only when requires_2fa=True)"
+          },
+          "access": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "description": "JWT access token (null when requires_2fa=True)"
+          },
+          "refresh": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "description": "JWT refresh token (null when requires_2fa=True)"
+          },
+          "user": {
+            "type": [
+              "object",
+              "null"
+            ],
+            "additionalProperties": {},
+            "description": "Authenticated user info (null when requires_2fa=True)"
+          },
+          "is_new_user": {
+            "type": "boolean",
+            "description": "True if a new user was created during this OAuth flow"
+          },
+          "is_new_connection": {
+            "type": "boolean",
+            "description": "True if a new OAuth connection was created"
+          },
+          "should_prompt_2fa": {
+            "type": "boolean",
+            "description": "True if user should be prompted to enable 2FA"
+          }
+        },
+        "required": [
+          "is_new_connection",
+          "is_new_user"
+        ]
+      },
+      "OTPErrorResponse": {
+        "type": "object",
+        "description": "Typed error response for OTP operations.\n\nerror_code values:\n  - invalid_identifier   — malformed email\n  - cooldown             — too soon after last request (retry_after = seconds)\n  - hourly_limit         — hourly quota exceeded   (retry_after = seconds until reset)\n  - daily_limit          — daily quota exceeded    (retry_after = seconds until reset)\n  - rate_limited         — IP-level rate limit hit (no retry_after)\n  - user_creation_failed — internal error creating account\n  - send_failed          — transport error (email / SMS)\n  - internal_error       — unexpected server error",
+        "properties": {
+          "error": {
+            "type": "string",
+            "description": "Human-readable error message"
+          },
+          "error_code": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "description": "Machine-readable error code"
+          },
+          "retry_after": {
+            "type": [
+              "integer",
+              "null"
+            ],
+            "description": "Seconds until the client may retry (present only for rate-limit errors)"
+          }
+        },
+        "required": [
+          "error"
+        ]
+      },
+      "OTPRequestRequest": {
+        "type": "object",
+        "description": "Serializer for OTP request.",
+        "properties": {
+          "identifier": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Email address for OTP delivery"
+          },
+          "source_url": {
+            "type": "string",
+            "format": "uri",
+            "description": "Source URL for tracking registration (e.g., https://my.djangocfg.com)"
+          }
+        },
+        "required": [
+          "identifier"
+        ]
+      },
+      "OTPRequestResponse": {
+        "type": "object",
+        "description": "OTP request response.",
+        "properties": {
+          "message": {
+            "type": "string",
+            "description": "Success message"
+          }
+        },
+        "required": [
+          "message"
+        ]
+      },
+      "OTPVerifyRequest": {
+        "type": "object",
+        "description": "Serializer for OTP verification.",
+        "properties": {
+          "identifier": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Email address used for OTP request"
+          },
+          "otp": {
+            "type": "string",
+            "minLength": 4,
+            "maxLength": 4
+          },
+          "source_url": {
+            "type": "string",
+            "format": "uri",
+            "description": "Source URL for tracking login (e.g., https://my.djangocfg.com)"
+          }
+        },
+        "required": [
+          "identifier",
+          "otp"
+        ]
+      },
+      "OTPVerifyResponse": {
+        "type": "object",
+        "description": "OTP verification response.\n\nWhen 2FA is required:\n- requires_2fa: True\n- session_id: UUID of 2FA verification session\n- refresh/access/user: null\n\nWhen 2FA is not required:\n- requires_2fa: False\n- session_id: null\n- refresh/access/user: populated",
+        "properties": {
+          "requires_2fa": {
+            "type": "boolean",
+            "default": false,
+            "description": "Whether 2FA verification is required"
+          },
+          "session_id": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "format": "uuid",
+            "description": "2FA session ID (if requires_2fa is True)"
+          },
+          "refresh": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "description": "JWT refresh token (if requires_2fa is False)"
+          },
+          "access": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "description": "JWT access token (if requires_2fa is False)"
+          },
+          "user": {
+            "oneOf": [
+              {
+                "$ref": "#/components/schemas/User"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "User information (if requires_2fa is False)"
+          },
+          "should_prompt_2fa": {
+            "type": "boolean",
+            "description": "Whether user should be prompted to enable 2FA"
+          }
+        }
+      },
+      "PatchedCfgUserUpdateRequest": {
+        "type": "object",
+        "description": "Serializer for updating user profile.",
+        "properties": {
+          "first_name": {
+            "type": "string",
+            "maxLength": 50
+          },
+          "last_name": {
+            "type": "string",
+            "maxLength": 50
+          },
+          "company": {
+            "type": "string",
+            "maxLength": 100
+          },
+          "phone": {
+            "type": "string",
+            "maxLength": 20
+          },
+          "position": {
+            "type": "string",
+            "maxLength": 100
+          },
+          "language": {
+            "type": "string",
+            "maxLength": 10
+          },
+          "timezone": {
+            "type": "string",
+            "description": "IANA timezone name (e.g. 'Asia/Seoul'). Auto-detected from browser via X-Timezone header.",
+            "maxLength": 64
+          }
+        }
+      },
+      "TokenRefresh": {
+        "type": "object",
+        "properties": {
+          "access": {
+            "type": "string",
+            "readOnly": true
+          },
+          "refresh": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "access",
+          "refresh"
+        ]
+      },
+      "TokenRefreshRequest": {
+        "type": "object",
+        "properties": {
+          "refresh": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "required": [
+          "refresh"
+        ]
+      },
+      "User": {
+        "type": "object",
+        "description": "Serializer for user details.",
+        "properties": {
+          "id": {
+            "type": "integer",
+            "readOnly": true
+          },
+          "email": {
+            "type": "string",
+            "format": "email",
+            "readOnly": true
+          },
+          "first_name": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "maxLength": 50
+          },
+          "last_name": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "maxLength": 50
+          },
+          "full_name": {
+            "type": "string",
+            "description": "Get user's full name.",
+            "readOnly": true
+          },
+          "initials": {
+            "type": "string",
+            "description": "Get user's initials for avatar fallback.",
+            "readOnly": true
+          },
+          "display_username": {
+            "type": "string",
+            "description": "Get formatted username for display.",
+            "readOnly": true
+          },
+          "company": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "maxLength": 100
+          },
+          "phone": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "maxLength": 20
+          },
+          "position": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "maxLength": 100
+          },
+          "language": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "maxLength": 10
+          },
+          "timezone": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "maxLength": 64
+          },
+          "avatar": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "format": "uri",
+            "readOnly": true
+          },
+          "is_staff": {
+            "type": "boolean",
+            "readOnly": true,
+            "title": "Staff status",
+            "description": "Designates whether the user can log into this admin site."
+          },
+          "is_superuser": {
+            "type": "boolean",
+            "readOnly": true,
+            "title": "Superuser status",
+            "description": "Designates that this user has all permissions without explicitly assigning them."
+          },
+          "date_joined": {
+            "type": "string",
+            "format": "date-time",
+            "readOnly": true
+          },
+          "last_login": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "format": "date-time",
+            "readOnly": true
+          },
+          "unanswered_messages_count": {
+            "type": "integer",
+            "readOnly": true,
+            "default": 0
+          },
+          "centrifugo": {
+            "oneOf": [
+              {
+                "$ref": "#/components/schemas/CentrifugoToken"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "readOnly": true
+          },
+          "api_key": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "readOnly": true
+          }
+        },
+        "required": [
+          "api_key",
+          "avatar",
+          "centrifugo",
+          "date_joined",
+          "display_username",
+          "email",
+          "full_name",
+          "id",
+          "initials",
+          "is_staff",
+          "is_superuser",
+          "last_login",
+          "unanswered_messages_count"
+        ]
+      }
+    },
+    "securitySchemes": {
+      "apiKeyAuth": {
+        "type": "apiKey",
+        "in": "header",
+        "name": "X-API-Key"
+      },
+      "basicAuth": {
+        "type": "http",
+        "scheme": "basic"
+      },
+      "cookieAuth": {
+        "type": "apiKey",
+        "in": "cookie",
+        "name": "sessionid"
+      },
+      "jwtAuth": {
+        "type": "http",
+        "scheme": "bearer",
+        "bearerFormat": "JWT"
+      },
+      "jwtAuthWithLastLogin": {
+        "type": "http",
+        "scheme": "bearer",
+        "bearerFormat": "JWT"
+      }
+    }
+  },
+  "servers": [
+    {
+      "url": "http://localhost:8000"
+    }
+  ]
+}