@emilgroup/tenant-sdk 1.42.1-beta.104 → 1.42.1-beta.106

package/README.md

@@ -17,11 +17,11 @@ Although this package can be used in both TypeScript and JavaScript, it is inten
 Navigate to the folder of your consuming project and run one of the following commands:
 
 ```
-npm install @emilgroup/tenant-sdk@1.42.1-beta.104 --save
+npm install @emilgroup/tenant-sdk@1.42.1-beta.106 --save
 ```
 or 
 ```
-yarn add @emilgroup/tenant-sdk@1.42.1-beta.104
+yarn add @emilgroup/tenant-sdk@1.42.1-beta.106
 ```
 
 And then you can import `UsersApi`.

package/api/user-controller-rest-api.ts

@@ -566,7 +566,7 @@ export const UserControllerRestApiAxiosParamCreator = function (configuration?:
             };
         },
         /**
-         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
          * @summary List users
          * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
          * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -776,7 +776,7 @@ export const UserControllerRestApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
          * @summary List users
          * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
          * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -918,7 +918,7 @@ export const UserControllerRestApiFactory = function (configuration?: Configurat
             return localVarFp.listInvites(authorization, pageSize, pageToken, filter, search, order, expand, filters, options).then((request) => request(axios, basePath));
         },
         /**
-         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
          * @summary List users
          * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
          * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -1396,7 +1396,7 @@ export class UserControllerRestApi extends BaseAPI {
     }
 
     /**
-     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
      * @summary List users
      * @param {UserControllerRestApiListUsersRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.

package/api/users-api.ts

@@ -339,7 +339,7 @@ export const UsersApiAxiosParamCreator = function (configuration?: Configuration
             };
         },
         /**
-         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
          * @summary List users
          * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
          * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -495,7 +495,7 @@ export const UsersApiFp = function(configuration?: Configuration) {
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
         /**
-         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
          * @summary List users
          * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
          * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -587,7 +587,7 @@ export const UsersApiFactory = function (configuration?: Configuration, basePath
             return localVarFp.linkUserWithPartner(code, linkUserWithPartnerRequestDtoRest, authorization, options).then((request) => request(axios, basePath));
         },
         /**
-         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
          * @summary List users
          * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
          * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -891,7 +891,7 @@ export class UsersApi extends BaseAPI {
     }
 
     /**
-     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
      * @summary List users
      * @param {UsersApiListUsersRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.

package/base.ts

@@ -102,10 +102,14 @@ export class BaseAPI {
             this.configuration = configuration;
             this.basePath = configuration.basePath || this.basePath;
 
-            // Use config token if provided, otherwise use tokenData token
-            const configToken = this.configuration.accessToken;
-            const storedToken = accessToken ? `Bearer ${accessToken}` : '';
-            this.configuration.accessToken = configToken || storedToken;
+            if (configuration.cookieAuth) {
+                this.useCookieAuth();
+            } else {
+                // Use config token if provided, otherwise use tokenData token
+                const configToken = this.configuration.accessToken;
+                const storedToken = accessToken ? `Bearer ${accessToken}` : '';
+                this.configuration.accessToken = configToken || storedToken;
+            }
         } else {
             const { accessToken, username } = this.tokenData;
 
@@ -119,6 +123,12 @@ export class BaseAPI {
         this.attachInterceptor(axios);
     }
 
+    // Cookie mode: the browser sends the HttpOnly access cookie, so no token is read from storage.
+    private useCookieAuth() {
+        this.configuration.username = this.configuration.username || this.tokenData.username;
+        this.configuration.baseOptions = { ...this.configuration.baseOptions, withCredentials: true };
+    }
+
     selectEnvironment(env: Environment) {
         this.selectBasePath(env);
     }
@@ -152,10 +162,12 @@ export class BaseAPI {
         const { data: { accessToken, permissions } } = response;
 
         this.configuration.username = username;
-        this.configuration.accessToken = `Bearer ${accessToken}`;
         this.tokenData.username = username;
-        this.tokenData.accessToken = accessToken;
         this.tokenData.permissions = permissions;
+        if (!this.configuration.cookieAuth) {
+            this.configuration.accessToken = `Bearer ${accessToken}`;
+            this.tokenData.accessToken = accessToken;
+        }
 
         // Switch workspace if provided
         if (targetWorkspace) {
@@ -178,7 +190,7 @@ export class BaseAPI {
             url: `${this.configuration.basePath}/authservice/v1/workspaces/switch`,
             headers: {
                 'Content-Type': 'application/json',
-                'Authorization': `Bearer ${this.configuration.accessToken}`,
+                ...(this.configuration.cookieAuth ? {} : { 'Authorization': `Bearer ${this.configuration.accessToken}` }),
             },
             data: {
                 username: this.configuration.username,
@@ -190,10 +202,12 @@ export class BaseAPI {
         const response = await globalAxios.request<SwitchWorkspaceResponseClass>(options);
 
         const { data: { accessToken, permissions } } = response;
-        
-        this.configuration.accessToken = `Bearer ${accessToken}`;
-        this.tokenData.accessToken = accessToken;
+
         this.tokenData.permissions = permissions;
+        if (!this.configuration.cookieAuth) {
+            this.configuration.accessToken = `Bearer ${accessToken}`;
+            this.tokenData.accessToken = accessToken;
+        }
 
         this.storeTokenData({
             ...this.tokenData
@@ -233,6 +247,11 @@ export class BaseAPI {
 
     private storeTokenData(tokenData?: TokenData) {
         if (typeof window !== 'undefined') {
+            if (tokenData && this.configuration?.cookieAuth) {
+                // Cookie mode saves who is logged in, never the token; a token saved by apps not yet migrated stays.
+                const { username, permissions } = tokenData;
+                tokenData = { ...(defaultStorage().get<TokenData>(TOKEN_DATA) || {}), username, permissions };
+            }
             defaultStorage().set<TokenData>(TOKEN_DATA, tokenData);
         }
     }
@@ -263,15 +282,17 @@ export class BaseAPI {
                         originalConfig._retry = true;
                         try {
                             const { accessToken: tokenString, permissions } = await this.refreshTokenInternal();
-                            const accessToken = `Bearer ${tokenString}`;
                             this.tokenData.permissions = permissions;
 
                             delete originalConfig.headers['Authorization']
 
-                            originalConfig.headers['Authorization'] = accessToken;
-
-                            this.configuration.accessToken = accessToken;
-                            this.tokenData.accessToken = tokenString;
+                            // In cookie mode the refresh reply renewed the access cookie, so retry without a header.
+                            if (!this.configuration.cookieAuth) {
+                                const accessToken = `Bearer ${tokenString}`;
+                                originalConfig.headers['Authorization'] = accessToken;
+                                this.configuration.accessToken = accessToken;
+                                this.tokenData.accessToken = tokenString;
+                            }
 
                             this.storeTokenData(this.tokenData);
 

package/configuration.ts

@@ -21,6 +21,7 @@ export interface ConfigurationParameters {
     basePath?: string;
     baseOptions?: any;
     formDataCtor?: new () => any;
+    cookieAuth?: boolean;
 }
 
 export class Configuration {
@@ -74,6 +75,15 @@ export class Configuration {
      */
     formDataCtor?: new () => any;
 
+    /**
+     * Authenticate with the HttpOnly access cookie instead of a stored token: every call sends credentials.
+     * The browser holds one cookie, so use it with one logged-in account; log out through the auth service.
+     *
+     * @type {boolean}
+     * @memberof Configuration
+     */
+    cookieAuth?: boolean;
+
     constructor(param: ConfigurationParameters = {}) {
         this.apiKey = param.apiKey;
         this.username = param.username;
@@ -82,6 +92,7 @@ export class Configuration {
         this.basePath = param.basePath;
         this.baseOptions = param.baseOptions;
         this.formDataCtor = param.formDataCtor;
+        this.cookieAuth = param.cookieAuth;
     }
 
     /**

package/dist/api/user-controller-rest-api.d.ts

@@ -129,7 +129,7 @@ export declare const UserControllerRestApiAxiosParamCreator: (configuration?: Co
      */
     listInvites: (authorization?: string, pageSize?: number, pageToken?: string, filter?: string, search?: string, order?: string, expand?: string, filters?: string, options?: AxiosRequestConfig) => Promise<RequestArgs>;
     /**
-     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
      * @summary List users
      * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
      * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -244,7 +244,7 @@ export declare const UserControllerRestApiFp: (configuration?: Configuration) =>
      */
     listInvites(authorization?: string, pageSize?: number, pageToken?: string, filter?: string, search?: string, order?: string, expand?: string, filters?: string, options?: AxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ListInvitesResponseClass>>;
     /**
-     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
      * @summary List users
      * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
      * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -359,7 +359,7 @@ export declare const UserControllerRestApiFactory: (configuration?: Configuratio
      */
     listInvites(authorization?: string, pageSize?: number, pageToken?: string, filter?: string, search?: string, order?: string, expand?: string, filters?: string, options?: any): AxiosPromise<ListInvitesResponseClass>;
     /**
-     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
      * @summary List users
      * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
      * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -766,7 +766,7 @@ export declare class UserControllerRestApi extends BaseAPI {
      */
     listInvites(requestParameters?: UserControllerRestApiListInvitesRequest, options?: AxiosRequestConfig): Promise<import("axios").AxiosResponse<ListInvitesResponseClass, any, {}>>;
     /**
-     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
      * @summary List users
      * @param {UserControllerRestApiListUsersRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.

package/dist/api/user-controller-rest-api.js

@@ -612,7 +612,7 @@ var UserControllerRestApiAxiosParamCreator = function (configuration) {
             });
         },
         /**
-         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
          * @summary List users
          * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
          * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -908,7 +908,7 @@ var UserControllerRestApiFp = function (configuration) {
             });
         },
         /**
-         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
          * @summary List users
          * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
          * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -1059,7 +1059,7 @@ var UserControllerRestApiFactory = function (configuration, basePath, axios) {
             return localVarFp.listInvites(authorization, pageSize, pageToken, filter, search, order, expand, filters, options).then(function (request) { return request(axios, basePath); });
         },
         /**
-         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
          * @summary List users
          * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
          * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -1206,7 +1206,7 @@ var UserControllerRestApi = /** @class */ (function (_super) {
         return (0, exports.UserControllerRestApiFp)(this.configuration).listInvites(requestParameters.authorization, requestParameters.pageSize, requestParameters.pageToken, requestParameters.filter, requestParameters.search, requestParameters.order, requestParameters.expand, requestParameters.filters, options).then(function (request) { return request(_this.axios, _this.basePath); });
     };
     /**
-     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
      * @summary List users
      * @param {UserControllerRestApiListUsersRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.

package/dist/api/users-api.d.ts

@@ -82,7 +82,7 @@ export declare const UsersApiAxiosParamCreator: (configuration?: Configuration)
      */
     linkUserWithPartner: (code: string, linkUserWithPartnerRequestDtoRest: LinkUserWithPartnerRequestDtoRest, authorization?: string, options?: AxiosRequestConfig) => Promise<RequestArgs>;
     /**
-     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
      * @summary List users
      * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
      * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -155,7 +155,7 @@ export declare const UsersApiFp: (configuration?: Configuration) => {
      */
     linkUserWithPartner(code: string, linkUserWithPartnerRequestDtoRest: LinkUserWithPartnerRequestDtoRest, authorization?: string, options?: AxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<LinkUserWithPartnerResponseClass>>;
     /**
-     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
      * @summary List users
      * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
      * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -228,7 +228,7 @@ export declare const UsersApiFactory: (configuration?: Configuration, basePath?:
      */
     linkUserWithPartner(code: string, linkUserWithPartnerRequestDtoRest: LinkUserWithPartnerRequestDtoRest, authorization?: string, options?: any): AxiosPromise<LinkUserWithPartnerResponseClass>;
     /**
-     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
      * @summary List users
      * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
      * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -487,7 +487,7 @@ export declare class UsersApi extends BaseAPI {
      */
     linkUserWithPartner(requestParameters: UsersApiLinkUserWithPartnerRequest, options?: AxiosRequestConfig): Promise<import("axios").AxiosResponse<LinkUserWithPartnerResponseClass, any, {}>>;
     /**
-     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
      * @summary List users
      * @param {UsersApiListUsersRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.

package/dist/api/users-api.js

@@ -393,7 +393,7 @@ var UsersApiAxiosParamCreator = function (configuration) {
             });
         },
         /**
-         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
          * @summary List users
          * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
          * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -599,7 +599,7 @@ var UsersApiFp = function (configuration) {
             });
         },
         /**
-         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
          * @summary List users
          * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
          * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -700,7 +700,7 @@ var UsersApiFactory = function (configuration, basePath, axios) {
             return localVarFp.linkUserWithPartner(code, linkUserWithPartnerRequestDtoRest, authorization, options).then(function (request) { return request(axios, basePath); });
         },
         /**
-         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+         * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
          * @summary List users
          * @param {string} [authorization] Bearer Token: provided by the login endpoint under the name accessToken.
          * @param {number} [pageSize] A limit on the number of objects to be returned.     Limit ranges between 1 and 50. Default: 10.
@@ -798,7 +798,7 @@ var UsersApi = /** @class */ (function (_super) {
         return (0, exports.UsersApiFp)(this.configuration).linkUserWithPartner(requestParameters.code, requestParameters.linkUserWithPartnerRequestDtoRest, requestParameters.authorization, options).then(function (request) { return request(_this.axios, _this.basePath); });
     };
     /**
-     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.view\"
+     * Returns a list of users you have previously created.         The users are returned in sorted order, with the oldest one appearing first.         For more information about pagination, read the Pagination documentation.  **Required Permissions**  \"tenant-management.users.list\"
      * @summary List users
      * @param {UsersApiListUsersRequest} requestParameters Request parameters.
      * @param {*} [options] Override http request option.

package/dist/base.d.ts

@@ -63,6 +63,7 @@ export declare class BaseAPI {
     protected configuration: Configuration | undefined;
     private tokenData?;
     constructor(configuration?: Configuration, basePath?: string, axios?: AxiosInstance);
+    private useCookieAuth;
     selectEnvironment(env: Environment): void;
     selectBasePath(path: string): void;
     getPermissions(): Array<string>;

package/dist/base.js

@@ -128,10 +128,15 @@ var BaseAPI = /** @class */ (function () {
             var accessToken = this.tokenData.accessToken;
             this.configuration = configuration;
             this.basePath = configuration.basePath || this.basePath;
-            // Use config token if provided, otherwise use tokenData token
-            var configToken = this.configuration.accessToken;
-            var storedToken = accessToken ? "Bearer ".concat(accessToken) : '';
-            this.configuration.accessToken = configToken || storedToken;
+            if (configuration.cookieAuth) {
+                this.useCookieAuth();
+            }
+            else {
+                // Use config token if provided, otherwise use tokenData token
+                var configToken = this.configuration.accessToken;
+                var storedToken = accessToken ? "Bearer ".concat(accessToken) : '';
+                this.configuration.accessToken = configToken || storedToken;
+            }
         }
         else {
             var _a = this.tokenData, accessToken = _a.accessToken, username = _a.username;
@@ -143,6 +148,11 @@ var BaseAPI = /** @class */ (function () {
         }
         this.attachInterceptor(axios);
     }
+    // Cookie mode: the browser sends the HttpOnly access cookie, so no token is read from storage.
+    BaseAPI.prototype.useCookieAuth = function () {
+        this.configuration.username = this.configuration.username || this.tokenData.username;
+        this.configuration.baseOptions = __assign(__assign({}, this.configuration.baseOptions), { withCredentials: true });
+    };
     BaseAPI.prototype.selectEnvironment = function (env) {
         this.selectBasePath(env);
     };
@@ -177,10 +187,12 @@ var BaseAPI = /** @class */ (function () {
                         response = _b.sent();
                         _a = response.data, accessToken = _a.accessToken, permissions = _a.permissions;
                         this.configuration.username = username;
-                        this.configuration.accessToken = "Bearer ".concat(accessToken);
                         this.tokenData.username = username;
-                        this.tokenData.accessToken = accessToken;
                         this.tokenData.permissions = permissions;
+                        if (!this.configuration.cookieAuth) {
+                            this.configuration.accessToken = "Bearer ".concat(accessToken);
+                            this.tokenData.accessToken = accessToken;
+                        }
                         if (!targetWorkspace) return [3 /*break*/, 3];
                         return [4 /*yield*/, this.switchWorkspace(targetWorkspace)];
                     case 2:
@@ -206,10 +218,7 @@ var BaseAPI = /** @class */ (function () {
                         options = {
                             method: 'POST',
                             url: "".concat(this.configuration.basePath, "/authservice/v1/workspaces/switch"),
-                            headers: {
-                                'Content-Type': 'application/json',
-                                'Authorization': "Bearer ".concat(this.configuration.accessToken),
-                            },
+                            headers: __assign({ 'Content-Type': 'application/json' }, (this.configuration.cookieAuth ? {} : { 'Authorization': "Bearer ".concat(this.configuration.accessToken) })),
                             data: {
                                 username: this.configuration.username,
                                 targetWorkspace: targetWorkspace,
@@ -220,9 +229,11 @@ var BaseAPI = /** @class */ (function () {
                     case 1:
                         response = _b.sent();
                         _a = response.data, accessToken = _a.accessToken, permissions = _a.permissions;
-                        this.configuration.accessToken = "Bearer ".concat(accessToken);
-                        this.tokenData.accessToken = accessToken;
                         this.tokenData.permissions = permissions;
+                        if (!this.configuration.cookieAuth) {
+                            this.configuration.accessToken = "Bearer ".concat(accessToken);
+                            this.tokenData.accessToken = accessToken;
+                        }
                         this.storeTokenData(__assign({}, this.tokenData));
                         return [2 /*return*/];
                 }
@@ -265,7 +276,13 @@ var BaseAPI = /** @class */ (function () {
         });
     };
     BaseAPI.prototype.storeTokenData = function (tokenData) {
+        var _a;
         if (typeof window !== 'undefined') {
+            if (tokenData && ((_a = this.configuration) === null || _a === void 0 ? void 0 : _a.cookieAuth)) {
+                // Cookie mode saves who is logged in, never the token; a token saved by apps not yet migrated stays.
+                var username = tokenData.username, permissions = tokenData.permissions;
+                tokenData = __assign(__assign({}, ((0, common_1.defaultStorage)().get(TOKEN_DATA) || {})), { username: username, permissions: permissions });
+            }
             (0, common_1.defaultStorage)().set(TOKEN_DATA, tokenData);
         }
     };
@@ -300,12 +317,15 @@ var BaseAPI = /** @class */ (function () {
                         return [4 /*yield*/, this.refreshTokenInternal()];
                     case 2:
                         _a = _c.sent(), tokenString = _a.accessToken, permissions = _a.permissions;
-                        accessToken = "Bearer ".concat(tokenString);
                         this.tokenData.permissions = permissions;
                         delete originalConfig.headers['Authorization'];
-                        originalConfig.headers['Authorization'] = accessToken;
-                        this.configuration.accessToken = accessToken;
-                        this.tokenData.accessToken = tokenString;
+                        // In cookie mode the refresh reply renewed the access cookie, so retry without a header.
+                        if (!this.configuration.cookieAuth) {
+                            accessToken = "Bearer ".concat(tokenString);
+                            originalConfig.headers['Authorization'] = accessToken;
+                            this.configuration.accessToken = accessToken;
+                            this.tokenData.accessToken = tokenString;
+                        }
                         this.storeTokenData(this.tokenData);
                         return [2 /*return*/, axios(originalConfig)];
                     case 3:

package/dist/configuration.d.ts

@@ -17,6 +17,7 @@ export interface ConfigurationParameters {
     basePath?: string;
     baseOptions?: any;
     formDataCtor?: new () => any;
+    cookieAuth?: boolean;
 }
 export declare class Configuration {
     /**
@@ -68,6 +69,14 @@ export declare class Configuration {
      * @type {new () => FormData}
      */
     formDataCtor?: new () => any;
+    /**
+     * Authenticate with the HttpOnly access cookie instead of a stored token: every call sends credentials.
+     * The browser holds one cookie, so use it with one logged-in account; log out through the auth service.
+     *
+     * @type {boolean}
+     * @memberof Configuration
+     */
+    cookieAuth?: boolean;
     constructor(param?: ConfigurationParameters);
     /**
      * Check if the given MIME is a JSON MIME.

package/dist/configuration.js

@@ -24,6 +24,7 @@ var Configuration = /** @class */ (function () {
         this.basePath = param.basePath;
         this.baseOptions = param.baseOptions;
         this.formDataCtor = param.formDataCtor;
+        this.cookieAuth = param.cookieAuth;
     }
     /**
      * Check if the given MIME is a JSON MIME.

package/dist/models/oidc-sso-details-input-dto.d.ts

@@ -33,4 +33,10 @@ export interface OidcSsoDetailsInputDto {
      * @memberof OidcSsoDetailsInputDto
      */
     'clientSecret': string;
+    /**
+     * OAuth scopes the user pool asks the identity provider for, `openid`, `email` and `profile` among them. Leave empty for `openid`, `email` and `profile`.
+     * @type {Array<string>}
+     * @memberof OidcSsoDetailsInputDto
+     */
+    'authorizeScopes'?: Array<string>;
 }

package/dist/models/oidc-sso-details-update-dto.d.ts

@@ -33,4 +33,10 @@ export interface OidcSsoDetailsUpdateDto {
      * @memberof OidcSsoDetailsUpdateDto
      */
     'clientSecret'?: string;
+    /**
+     * OAuth scopes the user pool asks the identity provider for, `openid`, `email` and `profile` among them. Leave empty to keep the current ones.
+     * @type {Array<string>}
+     * @memberof OidcSsoDetailsUpdateDto
+     */
+    'authorizeScopes'?: Array<string>;
 }

package/dist/models/oidc-sso-setup-class.d.ts

@@ -28,4 +28,10 @@ export interface OidcSsoSetupClass {
      * @memberof OidcSsoSetupClass
      */
     'attributeMapping': Array<SsoAttributeMappingTemplateClass>;
+    /**
+     * OAuth scopes a new connection asks the identity provider for.
+     * @type {Array<string>}
+     * @memberof OidcSsoSetupClass
+     */
+    'authorizeScopes': Array<string>;
 }

package/dist/models/shared-oidc-sso-details-class.d.ts

@@ -33,4 +33,10 @@ export interface SharedOidcSsoDetailsClass {
      * @memberof SharedOidcSsoDetailsClass
      */
     'hasClientSecret': boolean;
+    /**
+     * OAuth scopes the user pool asks the identity provider for.
+     * @type {Array<string>}
+     * @memberof SharedOidcSsoDetailsClass
+     */
+    'authorizeScopes': Array<string>;
 }

package/models/oidc-sso-details-input-dto.ts

@@ -38,5 +38,11 @@ export interface OidcSsoDetailsInputDto {
      * @memberof OidcSsoDetailsInputDto
      */
     'clientSecret': string;
+    /**
+     * OAuth scopes the user pool asks the identity provider for, `openid`, `email` and `profile` among them. Leave empty for `openid`, `email` and `profile`.
+     * @type {Array<string>}
+     * @memberof OidcSsoDetailsInputDto
+     */
+    'authorizeScopes'?: Array<string>;
 }
 

package/models/oidc-sso-details-update-dto.ts

@@ -38,5 +38,11 @@ export interface OidcSsoDetailsUpdateDto {
      * @memberof OidcSsoDetailsUpdateDto
      */
     'clientSecret'?: string;
+    /**
+     * OAuth scopes the user pool asks the identity provider for, `openid`, `email` and `profile` among them. Leave empty to keep the current ones.
+     * @type {Array<string>}
+     * @memberof OidcSsoDetailsUpdateDto
+     */
+    'authorizeScopes'?: Array<string>;
 }
 

package/models/oidc-sso-setup-class.ts

@@ -33,5 +33,11 @@ export interface OidcSsoSetupClass {
      * @memberof OidcSsoSetupClass
      */
     'attributeMapping': Array<SsoAttributeMappingTemplateClass>;
+    /**
+     * OAuth scopes a new connection asks the identity provider for.
+     * @type {Array<string>}
+     * @memberof OidcSsoSetupClass
+     */
+    'authorizeScopes': Array<string>;
 }
 

package/models/shared-oidc-sso-details-class.ts

@@ -38,5 +38,11 @@ export interface SharedOidcSsoDetailsClass {
      * @memberof SharedOidcSsoDetailsClass
      */
     'hasClientSecret': boolean;
+    /**
+     * OAuth scopes the user pool asks the identity provider for.
+     * @type {Array<string>}
+     * @memberof SharedOidcSsoDetailsClass
+     */
+    'authorizeScopes': Array<string>;
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@emilgroup/tenant-sdk",
-  "version": "1.42.1-beta.104",
+  "version": "1.42.1-beta.106",
   "description": "OpenAPI client for @emilgroup/tenant-sdk",
   "author": "OpenAPI-Generator Contributors",
   "keywords": [