@flipdish/authorization 0.0.473-rc.1789047202 → 0.0.474-rc.1789049032

package/api.ts

@@ -2226,6 +2226,7 @@ export const Permissions = {
     CreateGlobalApiKey: 'CreateGlobalAPIKey',
     ListGlobalApiKeys: 'ListGlobalAPIKeys',
     BlockPrincipalAccess: 'BlockPrincipalAccess',
+    ListPrincipalOrgs: 'ListPrincipalOrgs',
     CreateMenu: 'CreateMenu',
     UpdateMenu: 'UpdateMenu',
     DeleteMenu: 'DeleteMenu',
@@ -2478,6 +2479,25 @@ export const PrincipalInOrgTypeEnum = {
 
 export type PrincipalInOrgTypeEnum = typeof PrincipalInOrgTypeEnum[keyof typeof PrincipalInOrgTypeEnum];
 
+/**
+ * A principal and its org memberships, read straight from the principals store. These are the orgs the principal holds permission assignments in, which is a superset of the orgs any given action is allowed on. No policy evaluation is performed.
+ * @export
+ * @interface PrincipalOrgsResponse
+ */
+export interface PrincipalOrgsResponse {
+    /**
+     * 
+     * @type {AuthorizationRequestPrincipal}
+     * @memberof PrincipalOrgsResponse
+     */
+    'principal': AuthorizationRequestPrincipal;
+    /**
+     * Org ids the principal holds permission assignments in, ascending
+     * @type {Array<string>}
+     * @memberof PrincipalOrgsResponse
+     */
+    'orgIds': Array<string>;
+}
 /**
  * Principals in org
  * @export
@@ -5929,6 +5949,117 @@ export const ListPrincipalAccessBlocksTypeEnum = {
 export type ListPrincipalAccessBlocksTypeEnum = typeof ListPrincipalAccessBlocksTypeEnum[keyof typeof ListPrincipalAccessBlocksTypeEnum];
 
 
+/**
+ * PrincipalsApi - axios parameter creator
+ * @export
+ */
+export const PrincipalsApiAxiosParamCreator = function (configuration?: Configuration) {
+    return {
+        /**
+         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+         * @summary Get principal org memberships
+         * @param {string} principalId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getPrincipalOrgs: async (principalId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'principalId' is not null or undefined
+            assertParamExists('getPrincipalOrgs', 'principalId', principalId)
+            const localVarPath = `/principals/{principalId}/orgs`
+                .replace(`{${"principalId"}}`, encodeURIComponent(String(principalId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication ApiKeyAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+    }
+};
+
+/**
+ * PrincipalsApi - functional programming interface
+ * @export
+ */
+export const PrincipalsApiFp = function(configuration?: Configuration) {
+    const localVarAxiosParamCreator = PrincipalsApiAxiosParamCreator(configuration)
+    return {
+        /**
+         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+         * @summary Get principal org memberships
+         * @param {string} principalId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<PrincipalOrgsResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getPrincipalOrgs(principalId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['PrincipalsApi.getPrincipalOrgs']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+    }
+};
+
+/**
+ * PrincipalsApi - factory interface
+ * @export
+ */
+export const PrincipalsApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
+    const localVarFp = PrincipalsApiFp(configuration)
+    return {
+        /**
+         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+         * @summary Get principal org memberships
+         * @param {string} principalId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig): AxiosPromise<PrincipalOrgsResponse> {
+            return localVarFp.getPrincipalOrgs(principalId, options).then((request) => request(axios, basePath));
+        },
+    };
+};
+
+/**
+ * PrincipalsApi - object-oriented interface
+ * @export
+ * @class PrincipalsApi
+ * @extends {BaseAPI}
+ */
+export class PrincipalsApi extends BaseAPI {
+    /**
+     * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+     * @summary Get principal org memberships
+     * @param {string} principalId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof PrincipalsApi
+     */
+    public getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig) {
+        return PrincipalsApiFp(this.configuration).getPrincipalOrgs(principalId, options).then((request) => request(this.axios, this.basePath));
+    }
+}
+
+
+
 /**
  * RoleAssignmentApi - axios parameter creator
  * @export

package/configuration.ts

@@ -100,7 +100,7 @@ export class Configuration {
 
         const extraHeaders =  param.useDefaultUserAgent ? {} : { 
             headers: {
-                "user-agent": "Flipdish authorization typescript SDK / 0.0.473-rc.1789047202"
+                "user-agent": "Flipdish authorization typescript SDK / 0.0.474-rc.1789049032"
             }
         };
 

package/dist/api.d.ts

@@ -2134,6 +2134,7 @@ export declare const Permissions: {
     readonly CreateGlobalApiKey: "CreateGlobalAPIKey";
     readonly ListGlobalApiKeys: "ListGlobalAPIKeys";
     readonly BlockPrincipalAccess: "BlockPrincipalAccess";
+    readonly ListPrincipalOrgs: "ListPrincipalOrgs";
     readonly CreateMenu: "CreateMenu";
     readonly UpdateMenu: "UpdateMenu";
     readonly DeleteMenu: "DeleteMenu";
@@ -2380,6 +2381,25 @@ export declare const PrincipalInOrgTypeEnum: {
     readonly Terminal: "Terminal";
 };
 export type PrincipalInOrgTypeEnum = typeof PrincipalInOrgTypeEnum[keyof typeof PrincipalInOrgTypeEnum];
+/**
+ * A principal and its org memberships, read straight from the principals store. These are the orgs the principal holds permission assignments in, which is a superset of the orgs any given action is allowed on. No policy evaluation is performed.
+ * @export
+ * @interface PrincipalOrgsResponse
+ */
+export interface PrincipalOrgsResponse {
+    /**
+     *
+     * @type {AuthorizationRequestPrincipal}
+     * @memberof PrincipalOrgsResponse
+     */
+    'principal': AuthorizationRequestPrincipal;
+    /**
+     * Org ids the principal holds permission assignments in, ascending
+     * @type {Array<string>}
+     * @memberof PrincipalOrgsResponse
+     */
+    'orgIds': Array<string>;
+}
 /**
  * Principals in org
  * @export
@@ -4444,6 +4464,65 @@ export declare const ListPrincipalAccessBlocksTypeEnum: {
     readonly Terminal: "Terminal";
 };
 export type ListPrincipalAccessBlocksTypeEnum = typeof ListPrincipalAccessBlocksTypeEnum[keyof typeof ListPrincipalAccessBlocksTypeEnum];
+/**
+ * PrincipalsApi - axios parameter creator
+ * @export
+ */
+export declare const PrincipalsApiAxiosParamCreator: (configuration?: Configuration) => {
+    /**
+     * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+     * @summary Get principal org memberships
+     * @param {string} principalId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getPrincipalOrgs: (principalId: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+};
+/**
+ * PrincipalsApi - functional programming interface
+ * @export
+ */
+export declare const PrincipalsApiFp: (configuration?: Configuration) => {
+    /**
+     * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+     * @summary Get principal org memberships
+     * @param {string} principalId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<PrincipalOrgsResponse>>;
+};
+/**
+ * PrincipalsApi - factory interface
+ * @export
+ */
+export declare const PrincipalsApiFactory: (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) => {
+    /**
+     * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+     * @summary Get principal org memberships
+     * @param {string} principalId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig): AxiosPromise<PrincipalOrgsResponse>;
+};
+/**
+ * PrincipalsApi - object-oriented interface
+ * @export
+ * @class PrincipalsApi
+ * @extends {BaseAPI}
+ */
+export declare class PrincipalsApi extends BaseAPI {
+    /**
+     * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+     * @summary Get principal org memberships
+     * @param {string} principalId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof PrincipalsApi
+     */
+    getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<PrincipalOrgsResponse, any, {}, any>>;
+}
 /**
  * RoleAssignmentApi - axios parameter creator
  * @export

package/dist/api.js

@@ -85,7 +85,7 @@ var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthenticationApi = exports.AuthenticationApiFactory = exports.AuthenticationApiFp = exports.AuthenticationApiAxiosParamCreator = exports.ListGlobalApiKeysStatusEnum = exports.APIKeysApi = exports.APIKeysApiFactory = exports.APIKeysApiFp = exports.APIKeysApiAxiosParamCreator = exports.UnblockPrincipalAccessResponseStatusEnum = exports.TimedAccessGrantResponseStatusEnum = exports.TimedAccessGrantResponsePrincipalTypeEnum = exports.TimedAccessGrantRequestBodyRoleNameEnum = exports.TimedAccessGrantStatusEnum = exports.TimedAccessGrantPrincipalTypeEnum = exports.RoleNames = exports.RoleLevelDefinitionScopeEnum = exports.RoleAssignmentRequestBodyPrincipalTypeEnum = exports.RoleAssignmentRequestBodyActorTypeEnum = exports.RoleAssignmentRequestBodyRoleNameEnum = exports.RemoveTeammateRequestBodyPrincipalTypeEnum = exports.RemoveTeammateRequestBodyActorTypeEnum = exports.PrincipalInOrgTypeEnum = exports.Permissions = exports.ListRoleDefinitionsSuccessResponseRolesInnerNameEnum = exports.ListOrgRolesSuccessResponseValueRolesEnum = exports.JoinAccessErrorResponseCodeEnum = exports.IsInRoleRequestCheckModeEnum = exports.InviteTokenResponseRoleNameEnum = exports.GlobalApiKeyStateResponseUpdatedStatusEnum = exports.GlobalApiKeyStateResponseRevokedStatusEnum = exports.GlobalApiKeyStateResponseStatusEnum = exports.GetUserPermissionsSuccessResponseResourcesValueResourceTypeEnum = exports.GetJoinAccessRequest200ResponseRoleNameEnum = exports.GetJoinAccessRequest200ResponseStateEnum = exports.GetAuthorizedOrgsRequestPrincipalTypeEnum = exports.AuthorizationRequestResourceOneOf3TypeEnum = exports.AuthorizationRequestResourceOneOf2TypeEnum = exports.AuthorizationRequestResourceOneOf1TypeEnum = exports.AuthorizationRequestResourceOneOfTypeEnum = exports.AuthorizationRequestPrincipalTypeEnum = exports.AuthorizationRequestCheckModeEnum = exports.AuthorizationBatchResponseAllowedResourcesInnerPrincipalTypeEnum = exports.AuthenticateApiKey200ResponseOkEnum = exports.AuthenticateAndCheckIsInRoleRequestCheckModeEnum = exports.AuthenticateAndAuthorizeRequestCheckModeEnum = exports.AccessRequestResponseRoleNameEnum = exports.AccessRequestResponseStateEnum = exports.AccessBlockStateResponseBlockedPrincipalTypeEnum = exports.AcceptJoinRequestRoleNameEnum = void 0;
-exports.UserPermissionsApi = exports.UserPermissionsApiFactory = exports.UserPermissionsApiFp = exports.UserPermissionsApiAxiosParamCreator = exports.UserManagementApi = exports.UserManagementApiFactory = exports.UserManagementApiFp = exports.UserManagementApiAxiosParamCreator = exports.ListMyTimedAccessGrantsStatusEnum = exports.TimedAccessApi = exports.TimedAccessApiFactory = exports.TimedAccessApiFp = exports.TimedAccessApiAxiosParamCreator = exports.RoleAssignmentApi = exports.RoleAssignmentApiFactory = exports.RoleAssignmentApiFp = exports.RoleAssignmentApiAxiosParamCreator = exports.ListPrincipalAccessBlocksTypeEnum = exports.GetPrincipalAccessBlockTypeEnum = exports.PrincipalAccessBlockApi = exports.PrincipalAccessBlockApiFactory = exports.PrincipalAccessBlockApiFp = exports.PrincipalAccessBlockApiAxiosParamCreator = exports.NamedRolesApi = exports.NamedRolesApiFactory = exports.NamedRolesApiFp = exports.NamedRolesApiAxiosParamCreator = exports.JoinAccessApi = exports.JoinAccessApiFactory = exports.JoinAccessApiFp = exports.JoinAccessApiAxiosParamCreator = exports.ConfigurationDataApi = exports.ConfigurationDataApiFactory = exports.ConfigurationDataApiFp = exports.ConfigurationDataApiAxiosParamCreator = exports.AuthorizedEntitiesApi = exports.AuthorizedEntitiesApiFactory = exports.AuthorizedEntitiesApiFp = exports.AuthorizedEntitiesApiAxiosParamCreator = exports.AuthorizationApi = exports.AuthorizationApiFactory = exports.AuthorizationApiFp = exports.AuthorizationApiAxiosParamCreator = void 0;
+exports.UserPermissionsApi = exports.UserPermissionsApiFactory = exports.UserPermissionsApiFp = exports.UserPermissionsApiAxiosParamCreator = exports.UserManagementApi = exports.UserManagementApiFactory = exports.UserManagementApiFp = exports.UserManagementApiAxiosParamCreator = exports.ListMyTimedAccessGrantsStatusEnum = exports.TimedAccessApi = exports.TimedAccessApiFactory = exports.TimedAccessApiFp = exports.TimedAccessApiAxiosParamCreator = exports.RoleAssignmentApi = exports.RoleAssignmentApiFactory = exports.RoleAssignmentApiFp = exports.RoleAssignmentApiAxiosParamCreator = exports.PrincipalsApi = exports.PrincipalsApiFactory = exports.PrincipalsApiFp = exports.PrincipalsApiAxiosParamCreator = exports.ListPrincipalAccessBlocksTypeEnum = exports.GetPrincipalAccessBlockTypeEnum = exports.PrincipalAccessBlockApi = exports.PrincipalAccessBlockApiFactory = exports.PrincipalAccessBlockApiFp = exports.PrincipalAccessBlockApiAxiosParamCreator = exports.NamedRolesApi = exports.NamedRolesApiFactory = exports.NamedRolesApiFp = exports.NamedRolesApiAxiosParamCreator = exports.JoinAccessApi = exports.JoinAccessApiFactory = exports.JoinAccessApiFp = exports.JoinAccessApiAxiosParamCreator = exports.ConfigurationDataApi = exports.ConfigurationDataApiFactory = exports.ConfigurationDataApiFp = exports.ConfigurationDataApiAxiosParamCreator = exports.AuthorizedEntitiesApi = exports.AuthorizedEntitiesApiFactory = exports.AuthorizedEntitiesApiFp = exports.AuthorizedEntitiesApiAxiosParamCreator = exports.AuthorizationApi = exports.AuthorizationApiFactory = exports.AuthorizationApiFp = exports.AuthorizationApiAxiosParamCreator = void 0;
 var axios_1 = require("axios");
 // Some imports not used depending on template conditions
 // @ts-ignore
@@ -316,6 +316,7 @@ exports.Permissions = {
     CreateGlobalApiKey: 'CreateGlobalAPIKey',
     ListGlobalApiKeys: 'ListGlobalAPIKeys',
     BlockPrincipalAccess: 'BlockPrincipalAccess',
+    ListPrincipalOrgs: 'ListPrincipalOrgs',
     CreateMenu: 'CreateMenu',
     UpdateMenu: 'UpdateMenu',
     DeleteMenu: 'DeleteMenu',
@@ -3799,6 +3800,140 @@ exports.ListPrincipalAccessBlocksTypeEnum = {
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 };
+/**
+ * PrincipalsApi - axios parameter creator
+ * @export
+ */
+var PrincipalsApiAxiosParamCreator = function (configuration) {
+    var _this = this;
+    return {
+        /**
+         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+         * @summary Get principal org memberships
+         * @param {string} principalId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getPrincipalOrgs: function (principalId_1) {
+            var args_1 = [];
+            for (var _i = 1; _i < arguments.length; _i++) {
+                args_1[_i - 1] = arguments[_i];
+            }
+            return __awaiter(_this, __spreadArray([principalId_1], args_1, true), void 0, function (principalId, options) {
+                var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
+                if (options === void 0) { options = {}; }
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            // verify required parameter 'principalId' is not null or undefined
+                            (0, common_1.assertParamExists)('getPrincipalOrgs', 'principalId', principalId);
+                            localVarPath = "/principals/{principalId}/orgs"
+                                .replace("{".concat("principalId", "}"), encodeURIComponent(String(principalId)));
+                            localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+                            if (configuration) {
+                                baseOptions = configuration.baseOptions;
+                            }
+                            localVarRequestOptions = __assign(__assign({ method: 'GET' }, baseOptions), options);
+                            localVarHeaderParameter = {};
+                            localVarQueryParameter = {};
+                            // authentication ApiKeyAuth required
+                            return [4 /*yield*/, (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration)];
+                        case 1:
+                            // authentication ApiKeyAuth required
+                            _a.sent();
+                            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+                            headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+                            localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+                            return [2 /*return*/, {
+                                    url: (0, common_1.toPathString)(localVarUrlObj),
+                                    options: localVarRequestOptions,
+                                }];
+                    }
+                });
+            });
+        },
+    };
+};
+exports.PrincipalsApiAxiosParamCreator = PrincipalsApiAxiosParamCreator;
+/**
+ * PrincipalsApi - functional programming interface
+ * @export
+ */
+var PrincipalsApiFp = function (configuration) {
+    var localVarAxiosParamCreator = (0, exports.PrincipalsApiAxiosParamCreator)(configuration);
+    return {
+        /**
+         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+         * @summary Get principal org memberships
+         * @param {string} principalId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getPrincipalOrgs: function (principalId, options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
+                var _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.getPrincipalOrgs(principalId, options)];
+                        case 1:
+                            localVarAxiosArgs = _d.sent();
+                            localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['PrincipalsApi.getPrincipalOrgs']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
+                    }
+                });
+            });
+        },
+    };
+};
+exports.PrincipalsApiFp = PrincipalsApiFp;
+/**
+ * PrincipalsApi - factory interface
+ * @export
+ */
+var PrincipalsApiFactory = function (configuration, basePath, axios) {
+    var localVarFp = (0, exports.PrincipalsApiFp)(configuration);
+    return {
+        /**
+         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+         * @summary Get principal org memberships
+         * @param {string} principalId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getPrincipalOrgs: function (principalId, options) {
+            return localVarFp.getPrincipalOrgs(principalId, options).then(function (request) { return request(axios, basePath); });
+        },
+    };
+};
+exports.PrincipalsApiFactory = PrincipalsApiFactory;
+/**
+ * PrincipalsApi - object-oriented interface
+ * @export
+ * @class PrincipalsApi
+ * @extends {BaseAPI}
+ */
+var PrincipalsApi = /** @class */ (function (_super) {
+    __extends(PrincipalsApi, _super);
+    function PrincipalsApi() {
+        return _super !== null && _super.apply(this, arguments) || this;
+    }
+    /**
+     * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+     * @summary Get principal org memberships
+     * @param {string} principalId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof PrincipalsApi
+     */
+    PrincipalsApi.prototype.getPrincipalOrgs = function (principalId, options) {
+        var _this = this;
+        return (0, exports.PrincipalsApiFp)(this.configuration).getPrincipalOrgs(principalId, options).then(function (request) { return request(_this.axios, _this.basePath); });
+    };
+    return PrincipalsApi;
+}(base_1.BaseAPI));
+exports.PrincipalsApi = PrincipalsApi;
 /**
  * RoleAssignmentApi - axios parameter creator
  * @export

package/dist/configuration.js

@@ -36,7 +36,7 @@ var Configuration = /** @class */ (function () {
         this.serverIndex = param.serverIndex;
         var extraHeaders = param.useDefaultUserAgent ? {} : {
             headers: {
-                "user-agent": "Flipdish authorization typescript SDK / 0.0.473-rc.1789047202"
+                "user-agent": "Flipdish authorization typescript SDK / 0.0.474-rc.1789049032"
             }
         };
         this.baseOptions = __assign(__assign({}, extraHeaders), param.baseOptions);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flipdish/authorization",
-  "version": "0.0.473-rc.1789047202",
+  "version": "0.0.474-rc.1789049032",
   "description": "OpenAPI client for @flipdish/authorization",
   "author": "OpenAPI-Generator Contributors",
   "repository": {