@flipdish/authorization 0.0.474-rc.1789049032 → 0.0.475-rc.1789049557

package/api.ts

@@ -1913,6 +1913,25 @@ export interface ListJoinRequestsResponse {
      */
     'items': Array<GetJoinAccessRequest200Response>;
 }
+/**
+ * The named roles held by a user
+ * @export
+ * @interface ListNamedRolesResponse
+ */
+export interface ListNamedRolesResponse {
+    /**
+     * 
+     * @type {string}
+     * @memberof ListNamedRolesResponse
+     */
+    'userId': string;
+    /**
+     * The named roles currently held by this user
+     * @type {Array<RoleNames>}
+     * @memberof ListNamedRolesResponse
+     */
+    'roles': Array<RoleNames>;
+}
 /**
  * 
  * @export
@@ -2226,7 +2245,6 @@ export const Permissions = {
     CreateGlobalApiKey: 'CreateGlobalAPIKey',
     ListGlobalApiKeys: 'ListGlobalAPIKeys',
     BlockPrincipalAccess: 'BlockPrincipalAccess',
-    ListPrincipalOrgs: 'ListPrincipalOrgs',
     CreateMenu: 'CreateMenu',
     UpdateMenu: 'UpdateMenu',
     DeleteMenu: 'DeleteMenu',
@@ -2479,25 +2497,6 @@ export const PrincipalInOrgTypeEnum = {
 
 export type PrincipalInOrgTypeEnum = typeof PrincipalInOrgTypeEnum[keyof typeof PrincipalInOrgTypeEnum];
 
-/**
- * A principal and its org memberships, read straight from the principals store. These are the orgs the principal holds permission assignments in, which is a superset of the orgs any given action is allowed on. No policy evaluation is performed.
- * @export
- * @interface PrincipalOrgsResponse
- */
-export interface PrincipalOrgsResponse {
-    /**
-     * 
-     * @type {AuthorizationRequestPrincipal}
-     * @memberof PrincipalOrgsResponse
-     */
-    'principal': AuthorizationRequestPrincipal;
-    /**
-     * Org ids the principal holds permission assignments in, ascending
-     * @type {Array<string>}
-     * @memberof PrincipalOrgsResponse
-     */
-    'orgIds': Array<string>;
-}
 /**
  * Principals in org
  * @export
@@ -5448,6 +5447,43 @@ export const NamedRolesApiAxiosParamCreator = function (configuration?: Configur
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+         * @summary List named roles for a user
+         * @param {string} principalId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listNamedRoles: async (principalId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'principalId' is not null or undefined
+            assertParamExists('listNamedRoles', 'principalId', principalId)
+            const localVarPath = `/namedRoles/{principalId}`
+                .replace(`{${"principalId"}}`, encodeURIComponent(String(principalId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication ApiKeyAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
          * @summary Remove a named role
@@ -5508,6 +5544,19 @@ export const NamedRolesApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['NamedRolesApi.applyNamedRole']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+         * @summary List named roles for a user
+         * @param {string} principalId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listNamedRoles(principalId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ListNamedRolesResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listNamedRoles(principalId, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['NamedRolesApi.listNamedRoles']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
          * @summary Remove a named role
@@ -5541,6 +5590,16 @@ export const NamedRolesApiFactory = function (configuration?: Configuration, bas
         applyNamedRole(applyNamedRoleRequestBody?: ApplyNamedRoleRequestBody, options?: RawAxiosRequestConfig): AxiosPromise<NamedRoleAssignmentResponse> {
             return localVarFp.applyNamedRole(applyNamedRoleRequestBody, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+         * @summary List named roles for a user
+         * @param {string} principalId 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listNamedRoles(principalId: string, options?: RawAxiosRequestConfig): AxiosPromise<ListNamedRolesResponse> {
+            return localVarFp.listNamedRoles(principalId, options).then((request) => request(axios, basePath));
+        },
         /**
          * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
          * @summary Remove a named role
@@ -5573,6 +5632,18 @@ export class NamedRolesApi extends BaseAPI {
         return NamedRolesApiFp(this.configuration).applyNamedRole(applyNamedRoleRequestBody, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+     * @summary List named roles for a user
+     * @param {string} principalId 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof NamedRolesApi
+     */
+    public listNamedRoles(principalId: string, options?: RawAxiosRequestConfig) {
+        return NamedRolesApiFp(this.configuration).listNamedRoles(principalId, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
      * @summary Remove a named role
@@ -5949,117 +6020,6 @@ export const ListPrincipalAccessBlocksTypeEnum = {
 export type ListPrincipalAccessBlocksTypeEnum = typeof ListPrincipalAccessBlocksTypeEnum[keyof typeof ListPrincipalAccessBlocksTypeEnum];
 
 
-/**
- * PrincipalsApi - axios parameter creator
- * @export
- */
-export const PrincipalsApiAxiosParamCreator = function (configuration?: Configuration) {
-    return {
-        /**
-         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
-         * @summary Get principal org memberships
-         * @param {string} principalId 
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        getPrincipalOrgs: async (principalId: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
-            // verify required parameter 'principalId' is not null or undefined
-            assertParamExists('getPrincipalOrgs', 'principalId', principalId)
-            const localVarPath = `/principals/{principalId}/orgs`
-                .replace(`{${"principalId"}}`, encodeURIComponent(String(principalId)));
-            // use dummy base URL string because the URL constructor only accepts absolute URLs.
-            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
-            let baseOptions;
-            if (configuration) {
-                baseOptions = configuration.baseOptions;
-            }
-
-            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
-            const localVarHeaderParameter = {} as any;
-            const localVarQueryParameter = {} as any;
-
-            // authentication ApiKeyAuth required
-            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
-
-
-    
-            setSearchParams(localVarUrlObj, localVarQueryParameter);
-            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
-
-            return {
-                url: toPathString(localVarUrlObj),
-                options: localVarRequestOptions,
-            };
-        },
-    }
-};
-
-/**
- * PrincipalsApi - functional programming interface
- * @export
- */
-export const PrincipalsApiFp = function(configuration?: Configuration) {
-    const localVarAxiosParamCreator = PrincipalsApiAxiosParamCreator(configuration)
-    return {
-        /**
-         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
-         * @summary Get principal org memberships
-         * @param {string} principalId 
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        async getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<PrincipalOrgsResponse>> {
-            const localVarAxiosArgs = await localVarAxiosParamCreator.getPrincipalOrgs(principalId, options);
-            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
-            const localVarOperationServerBasePath = operationServerMap['PrincipalsApi.getPrincipalOrgs']?.[localVarOperationServerIndex]?.url;
-            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
-        },
-    }
-};
-
-/**
- * PrincipalsApi - factory interface
- * @export
- */
-export const PrincipalsApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
-    const localVarFp = PrincipalsApiFp(configuration)
-    return {
-        /**
-         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
-         * @summary Get principal org memberships
-         * @param {string} principalId 
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig): AxiosPromise<PrincipalOrgsResponse> {
-            return localVarFp.getPrincipalOrgs(principalId, options).then((request) => request(axios, basePath));
-        },
-    };
-};
-
-/**
- * PrincipalsApi - object-oriented interface
- * @export
- * @class PrincipalsApi
- * @extends {BaseAPI}
- */
-export class PrincipalsApi extends BaseAPI {
-    /**
-     * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
-     * @summary Get principal org memberships
-     * @param {string} principalId 
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof PrincipalsApi
-     */
-    public getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig) {
-        return PrincipalsApiFp(this.configuration).getPrincipalOrgs(principalId, options).then((request) => request(this.axios, this.basePath));
-    }
-}
-
-
-
 /**
  * RoleAssignmentApi - axios parameter creator
  * @export

package/configuration.ts

@@ -100,7 +100,7 @@ export class Configuration {
 
         const extraHeaders =  param.useDefaultUserAgent ? {} : { 
             headers: {
-                "user-agent": "Flipdish authorization typescript SDK / 0.0.474-rc.1789049032"
+                "user-agent": "Flipdish authorization typescript SDK / 0.0.475-rc.1789049557"
             }
         };
 

package/dist/api.d.ts

@@ -1830,6 +1830,25 @@ export interface ListJoinRequestsResponse {
      */
     'items': Array<GetJoinAccessRequest200Response>;
 }
+/**
+ * The named roles held by a user
+ * @export
+ * @interface ListNamedRolesResponse
+ */
+export interface ListNamedRolesResponse {
+    /**
+     *
+     * @type {string}
+     * @memberof ListNamedRolesResponse
+     */
+    'userId': string;
+    /**
+     * The named roles currently held by this user
+     * @type {Array<RoleNames>}
+     * @memberof ListNamedRolesResponse
+     */
+    'roles': Array<RoleNames>;
+}
 /**
  *
  * @export
@@ -2134,7 +2153,6 @@ export declare const Permissions: {
     readonly CreateGlobalApiKey: "CreateGlobalAPIKey";
     readonly ListGlobalApiKeys: "ListGlobalAPIKeys";
     readonly BlockPrincipalAccess: "BlockPrincipalAccess";
-    readonly ListPrincipalOrgs: "ListPrincipalOrgs";
     readonly CreateMenu: "CreateMenu";
     readonly UpdateMenu: "UpdateMenu";
     readonly DeleteMenu: "DeleteMenu";
@@ -2381,25 +2399,6 @@ export declare const PrincipalInOrgTypeEnum: {
     readonly Terminal: "Terminal";
 };
 export type PrincipalInOrgTypeEnum = typeof PrincipalInOrgTypeEnum[keyof typeof PrincipalInOrgTypeEnum];
-/**
- * A principal and its org memberships, read straight from the principals store. These are the orgs the principal holds permission assignments in, which is a superset of the orgs any given action is allowed on. No policy evaluation is performed.
- * @export
- * @interface PrincipalOrgsResponse
- */
-export interface PrincipalOrgsResponse {
-    /**
-     *
-     * @type {AuthorizationRequestPrincipal}
-     * @memberof PrincipalOrgsResponse
-     */
-    'principal': AuthorizationRequestPrincipal;
-    /**
-     * Org ids the principal holds permission assignments in, ascending
-     * @type {Array<string>}
-     * @memberof PrincipalOrgsResponse
-     */
-    'orgIds': Array<string>;
-}
 /**
  * Principals in org
  * @export
@@ -4203,6 +4202,14 @@ export declare const NamedRolesApiAxiosParamCreator: (configuration?: Configurat
      * @throws {RequiredError}
      */
     applyNamedRole: (applyNamedRoleRequestBody?: ApplyNamedRoleRequestBody, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+     * @summary List named roles for a user
+     * @param {string} principalId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listNamedRoles: (principalId: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
      * @summary Remove a named role
@@ -4225,6 +4232,14 @@ export declare const NamedRolesApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     applyNamedRole(applyNamedRoleRequestBody?: ApplyNamedRoleRequestBody, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<NamedRoleAssignmentResponse>>;
+    /**
+     * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+     * @summary List named roles for a user
+     * @param {string} principalId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listNamedRoles(principalId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ListNamedRolesResponse>>;
     /**
      * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
      * @summary Remove a named role
@@ -4247,6 +4262,14 @@ export declare const NamedRolesApiFactory: (configuration?: Configuration, baseP
      * @throws {RequiredError}
      */
     applyNamedRole(applyNamedRoleRequestBody?: ApplyNamedRoleRequestBody, options?: RawAxiosRequestConfig): AxiosPromise<NamedRoleAssignmentResponse>;
+    /**
+     * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+     * @summary List named roles for a user
+     * @param {string} principalId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    listNamedRoles(principalId: string, options?: RawAxiosRequestConfig): AxiosPromise<ListNamedRolesResponse>;
     /**
      * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
      * @summary Remove a named role
@@ -4272,6 +4295,15 @@ export declare class NamedRolesApi extends BaseAPI {
      * @memberof NamedRolesApi
      */
     applyNamedRole(applyNamedRoleRequestBody?: ApplyNamedRoleRequestBody, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<NamedRoleAssignmentResponse, any, {}, any>>;
+    /**
+     * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+     * @summary List named roles for a user
+     * @param {string} principalId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof NamedRolesApi
+     */
+    listNamedRoles(principalId: string, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<ListNamedRolesResponse, any, {}, any>>;
     /**
      * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
      * @summary Remove a named role
@@ -4464,65 +4496,6 @@ export declare const ListPrincipalAccessBlocksTypeEnum: {
     readonly Terminal: "Terminal";
 };
 export type ListPrincipalAccessBlocksTypeEnum = typeof ListPrincipalAccessBlocksTypeEnum[keyof typeof ListPrincipalAccessBlocksTypeEnum];
-/**
- * PrincipalsApi - axios parameter creator
- * @export
- */
-export declare const PrincipalsApiAxiosParamCreator: (configuration?: Configuration) => {
-    /**
-     * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
-     * @summary Get principal org memberships
-     * @param {string} principalId
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    getPrincipalOrgs: (principalId: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
-};
-/**
- * PrincipalsApi - functional programming interface
- * @export
- */
-export declare const PrincipalsApiFp: (configuration?: Configuration) => {
-    /**
-     * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
-     * @summary Get principal org memberships
-     * @param {string} principalId
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<PrincipalOrgsResponse>>;
-};
-/**
- * PrincipalsApi - factory interface
- * @export
- */
-export declare const PrincipalsApiFactory: (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) => {
-    /**
-     * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
-     * @summary Get principal org memberships
-     * @param {string} principalId
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig): AxiosPromise<PrincipalOrgsResponse>;
-};
-/**
- * PrincipalsApi - object-oriented interface
- * @export
- * @class PrincipalsApi
- * @extends {BaseAPI}
- */
-export declare class PrincipalsApi extends BaseAPI {
-    /**
-     * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
-     * @summary Get principal org memberships
-     * @param {string} principalId
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof PrincipalsApi
-     */
-    getPrincipalOrgs(principalId: string, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<PrincipalOrgsResponse, any, {}, any>>;
-}
 /**
  * RoleAssignmentApi - axios parameter creator
  * @export

package/dist/api.js

@@ -85,7 +85,7 @@ var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthenticationApi = exports.AuthenticationApiFactory = exports.AuthenticationApiFp = exports.AuthenticationApiAxiosParamCreator = exports.ListGlobalApiKeysStatusEnum = exports.APIKeysApi = exports.APIKeysApiFactory = exports.APIKeysApiFp = exports.APIKeysApiAxiosParamCreator = exports.UnblockPrincipalAccessResponseStatusEnum = exports.TimedAccessGrantResponseStatusEnum = exports.TimedAccessGrantResponsePrincipalTypeEnum = exports.TimedAccessGrantRequestBodyRoleNameEnum = exports.TimedAccessGrantStatusEnum = exports.TimedAccessGrantPrincipalTypeEnum = exports.RoleNames = exports.RoleLevelDefinitionScopeEnum = exports.RoleAssignmentRequestBodyPrincipalTypeEnum = exports.RoleAssignmentRequestBodyActorTypeEnum = exports.RoleAssignmentRequestBodyRoleNameEnum = exports.RemoveTeammateRequestBodyPrincipalTypeEnum = exports.RemoveTeammateRequestBodyActorTypeEnum = exports.PrincipalInOrgTypeEnum = exports.Permissions = exports.ListRoleDefinitionsSuccessResponseRolesInnerNameEnum = exports.ListOrgRolesSuccessResponseValueRolesEnum = exports.JoinAccessErrorResponseCodeEnum = exports.IsInRoleRequestCheckModeEnum = exports.InviteTokenResponseRoleNameEnum = exports.GlobalApiKeyStateResponseUpdatedStatusEnum = exports.GlobalApiKeyStateResponseRevokedStatusEnum = exports.GlobalApiKeyStateResponseStatusEnum = exports.GetUserPermissionsSuccessResponseResourcesValueResourceTypeEnum = exports.GetJoinAccessRequest200ResponseRoleNameEnum = exports.GetJoinAccessRequest200ResponseStateEnum = exports.GetAuthorizedOrgsRequestPrincipalTypeEnum = exports.AuthorizationRequestResourceOneOf3TypeEnum = exports.AuthorizationRequestResourceOneOf2TypeEnum = exports.AuthorizationRequestResourceOneOf1TypeEnum = exports.AuthorizationRequestResourceOneOfTypeEnum = exports.AuthorizationRequestPrincipalTypeEnum = exports.AuthorizationRequestCheckModeEnum = exports.AuthorizationBatchResponseAllowedResourcesInnerPrincipalTypeEnum = exports.AuthenticateApiKey200ResponseOkEnum = exports.AuthenticateAndCheckIsInRoleRequestCheckModeEnum = exports.AuthenticateAndAuthorizeRequestCheckModeEnum = exports.AccessRequestResponseRoleNameEnum = exports.AccessRequestResponseStateEnum = exports.AccessBlockStateResponseBlockedPrincipalTypeEnum = exports.AcceptJoinRequestRoleNameEnum = void 0;
-exports.UserPermissionsApi = exports.UserPermissionsApiFactory = exports.UserPermissionsApiFp = exports.UserPermissionsApiAxiosParamCreator = exports.UserManagementApi = exports.UserManagementApiFactory = exports.UserManagementApiFp = exports.UserManagementApiAxiosParamCreator = exports.ListMyTimedAccessGrantsStatusEnum = exports.TimedAccessApi = exports.TimedAccessApiFactory = exports.TimedAccessApiFp = exports.TimedAccessApiAxiosParamCreator = exports.RoleAssignmentApi = exports.RoleAssignmentApiFactory = exports.RoleAssignmentApiFp = exports.RoleAssignmentApiAxiosParamCreator = exports.PrincipalsApi = exports.PrincipalsApiFactory = exports.PrincipalsApiFp = exports.PrincipalsApiAxiosParamCreator = exports.ListPrincipalAccessBlocksTypeEnum = exports.GetPrincipalAccessBlockTypeEnum = exports.PrincipalAccessBlockApi = exports.PrincipalAccessBlockApiFactory = exports.PrincipalAccessBlockApiFp = exports.PrincipalAccessBlockApiAxiosParamCreator = exports.NamedRolesApi = exports.NamedRolesApiFactory = exports.NamedRolesApiFp = exports.NamedRolesApiAxiosParamCreator = exports.JoinAccessApi = exports.JoinAccessApiFactory = exports.JoinAccessApiFp = exports.JoinAccessApiAxiosParamCreator = exports.ConfigurationDataApi = exports.ConfigurationDataApiFactory = exports.ConfigurationDataApiFp = exports.ConfigurationDataApiAxiosParamCreator = exports.AuthorizedEntitiesApi = exports.AuthorizedEntitiesApiFactory = exports.AuthorizedEntitiesApiFp = exports.AuthorizedEntitiesApiAxiosParamCreator = exports.AuthorizationApi = exports.AuthorizationApiFactory = exports.AuthorizationApiFp = exports.AuthorizationApiAxiosParamCreator = void 0;
+exports.UserPermissionsApi = exports.UserPermissionsApiFactory = exports.UserPermissionsApiFp = exports.UserPermissionsApiAxiosParamCreator = exports.UserManagementApi = exports.UserManagementApiFactory = exports.UserManagementApiFp = exports.UserManagementApiAxiosParamCreator = exports.ListMyTimedAccessGrantsStatusEnum = exports.TimedAccessApi = exports.TimedAccessApiFactory = exports.TimedAccessApiFp = exports.TimedAccessApiAxiosParamCreator = exports.RoleAssignmentApi = exports.RoleAssignmentApiFactory = exports.RoleAssignmentApiFp = exports.RoleAssignmentApiAxiosParamCreator = exports.ListPrincipalAccessBlocksTypeEnum = exports.GetPrincipalAccessBlockTypeEnum = exports.PrincipalAccessBlockApi = exports.PrincipalAccessBlockApiFactory = exports.PrincipalAccessBlockApiFp = exports.PrincipalAccessBlockApiAxiosParamCreator = exports.NamedRolesApi = exports.NamedRolesApiFactory = exports.NamedRolesApiFp = exports.NamedRolesApiAxiosParamCreator = exports.JoinAccessApi = exports.JoinAccessApiFactory = exports.JoinAccessApiFp = exports.JoinAccessApiAxiosParamCreator = exports.ConfigurationDataApi = exports.ConfigurationDataApiFactory = exports.ConfigurationDataApiFp = exports.ConfigurationDataApiAxiosParamCreator = exports.AuthorizedEntitiesApi = exports.AuthorizedEntitiesApiFactory = exports.AuthorizedEntitiesApiFp = exports.AuthorizedEntitiesApiAxiosParamCreator = exports.AuthorizationApi = exports.AuthorizationApiFactory = exports.AuthorizationApiFp = exports.AuthorizationApiAxiosParamCreator = void 0;
 var axios_1 = require("axios");
 // Some imports not used depending on template conditions
 // @ts-ignore
@@ -316,7 +316,6 @@ exports.Permissions = {
     CreateGlobalApiKey: 'CreateGlobalAPIKey',
     ListGlobalApiKeys: 'ListGlobalAPIKeys',
     BlockPrincipalAccess: 'BlockPrincipalAccess',
-    ListPrincipalOrgs: 'ListPrincipalOrgs',
     CreateMenu: 'CreateMenu',
     UpdateMenu: 'UpdateMenu',
     DeleteMenu: 'DeleteMenu',
@@ -3198,6 +3197,51 @@ var NamedRolesApiAxiosParamCreator = function (configuration) {
                 });
             });
         },
+        /**
+         * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+         * @summary List named roles for a user
+         * @param {string} principalId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listNamedRoles: function (principalId_1) {
+            var args_1 = [];
+            for (var _i = 1; _i < arguments.length; _i++) {
+                args_1[_i - 1] = arguments[_i];
+            }
+            return __awaiter(_this, __spreadArray([principalId_1], args_1, true), void 0, function (principalId, options) {
+                var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
+                if (options === void 0) { options = {}; }
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            // verify required parameter 'principalId' is not null or undefined
+                            (0, common_1.assertParamExists)('listNamedRoles', 'principalId', principalId);
+                            localVarPath = "/namedRoles/{principalId}"
+                                .replace("{".concat("principalId", "}"), encodeURIComponent(String(principalId)));
+                            localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+                            if (configuration) {
+                                baseOptions = configuration.baseOptions;
+                            }
+                            localVarRequestOptions = __assign(__assign({ method: 'GET' }, baseOptions), options);
+                            localVarHeaderParameter = {};
+                            localVarQueryParameter = {};
+                            // authentication ApiKeyAuth required
+                            return [4 /*yield*/, (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration)];
+                        case 1:
+                            // authentication ApiKeyAuth required
+                            _a.sent();
+                            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+                            headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+                            localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+                            return [2 /*return*/, {
+                                    url: (0, common_1.toPathString)(localVarUrlObj),
+                                    options: localVarRequestOptions,
+                                }];
+                    }
+                });
+            });
+        },
         /**
          * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
          * @summary Remove a named role
@@ -3275,6 +3319,29 @@ var NamedRolesApiFp = function (configuration) {
                 });
             });
         },
+        /**
+         * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+         * @summary List named roles for a user
+         * @param {string} principalId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listNamedRoles: function (principalId, options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
+                var _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.listNamedRoles(principalId, options)];
+                        case 1:
+                            localVarAxiosArgs = _d.sent();
+                            localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['NamedRolesApi.listNamedRoles']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
+                    }
+                });
+            });
+        },
         /**
          * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
          * @summary Remove a named role
@@ -3318,6 +3385,16 @@ var NamedRolesApiFactory = function (configuration, basePath, axios) {
         applyNamedRole: function (applyNamedRoleRequestBody, options) {
             return localVarFp.applyNamedRole(applyNamedRoleRequestBody, options).then(function (request) { return request(axios, basePath); });
         },
+        /**
+         * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+         * @summary List named roles for a user
+         * @param {string} principalId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listNamedRoles: function (principalId, options) {
+            return localVarFp.listNamedRoles(principalId, options).then(function (request) { return request(axios, basePath); });
+        },
         /**
          * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
          * @summary Remove a named role
@@ -3354,6 +3431,18 @@ var NamedRolesApi = /** @class */ (function (_super) {
         var _this = this;
         return (0, exports.NamedRolesApiFp)(this.configuration).applyNamedRole(applyNamedRoleRequestBody, options).then(function (request) { return request(_this.axios, _this.basePath); });
     };
+    /**
+     * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+     * @summary List named roles for a user
+     * @param {string} principalId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof NamedRolesApi
+     */
+    NamedRolesApi.prototype.listNamedRoles = function (principalId, options) {
+        var _this = this;
+        return (0, exports.NamedRolesApiFp)(this.configuration).listNamedRoles(principalId, options).then(function (request) { return request(_this.axios, _this.basePath); });
+    };
     /**
      * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
      * @summary Remove a named role
@@ -3800,140 +3889,6 @@ exports.ListPrincipalAccessBlocksTypeEnum = {
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 };
-/**
- * PrincipalsApi - axios parameter creator
- * @export
- */
-var PrincipalsApiAxiosParamCreator = function (configuration) {
-    var _this = this;
-    return {
-        /**
-         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
-         * @summary Get principal org memberships
-         * @param {string} principalId
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        getPrincipalOrgs: function (principalId_1) {
-            var args_1 = [];
-            for (var _i = 1; _i < arguments.length; _i++) {
-                args_1[_i - 1] = arguments[_i];
-            }
-            return __awaiter(_this, __spreadArray([principalId_1], args_1, true), void 0, function (principalId, options) {
-                var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
-                if (options === void 0) { options = {}; }
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            // verify required parameter 'principalId' is not null or undefined
-                            (0, common_1.assertParamExists)('getPrincipalOrgs', 'principalId', principalId);
-                            localVarPath = "/principals/{principalId}/orgs"
-                                .replace("{".concat("principalId", "}"), encodeURIComponent(String(principalId)));
-                            localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
-                            if (configuration) {
-                                baseOptions = configuration.baseOptions;
-                            }
-                            localVarRequestOptions = __assign(__assign({ method: 'GET' }, baseOptions), options);
-                            localVarHeaderParameter = {};
-                            localVarQueryParameter = {};
-                            // authentication ApiKeyAuth required
-                            return [4 /*yield*/, (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration)];
-                        case 1:
-                            // authentication ApiKeyAuth required
-                            _a.sent();
-                            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
-                            headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
-                            localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
-                            return [2 /*return*/, {
-                                    url: (0, common_1.toPathString)(localVarUrlObj),
-                                    options: localVarRequestOptions,
-                                }];
-                    }
-                });
-            });
-        },
-    };
-};
-exports.PrincipalsApiAxiosParamCreator = PrincipalsApiAxiosParamCreator;
-/**
- * PrincipalsApi - functional programming interface
- * @export
- */
-var PrincipalsApiFp = function (configuration) {
-    var localVarAxiosParamCreator = (0, exports.PrincipalsApiAxiosParamCreator)(configuration);
-    return {
-        /**
-         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
-         * @summary Get principal org memberships
-         * @param {string} principalId
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        getPrincipalOrgs: function (principalId, options) {
-            return __awaiter(this, void 0, void 0, function () {
-                var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
-                var _a, _b, _c;
-                return __generator(this, function (_d) {
-                    switch (_d.label) {
-                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.getPrincipalOrgs(principalId, options)];
-                        case 1:
-                            localVarAxiosArgs = _d.sent();
-                            localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['PrincipalsApi.getPrincipalOrgs']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
-                            return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
-                    }
-                });
-            });
-        },
-    };
-};
-exports.PrincipalsApiFp = PrincipalsApiFp;
-/**
- * PrincipalsApi - factory interface
- * @export
- */
-var PrincipalsApiFactory = function (configuration, basePath, axios) {
-    var localVarFp = (0, exports.PrincipalsApiFp)(configuration);
-    return {
-        /**
-         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
-         * @summary Get principal org memberships
-         * @param {string} principalId
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        getPrincipalOrgs: function (principalId, options) {
-            return localVarFp.getPrincipalOrgs(principalId, options).then(function (request) { return request(axios, basePath); });
-        },
-    };
-};
-exports.PrincipalsApiFactory = PrincipalsApiFactory;
-/**
- * PrincipalsApi - object-oriented interface
- * @export
- * @class PrincipalsApi
- * @extends {BaseAPI}
- */
-var PrincipalsApi = /** @class */ (function (_super) {
-    __extends(PrincipalsApi, _super);
-    function PrincipalsApi() {
-        return _super !== null && _super.apply(this, arguments) || this;
-    }
-    /**
-     * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
-     * @summary Get principal org memberships
-     * @param {string} principalId
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof PrincipalsApi
-     */
-    PrincipalsApi.prototype.getPrincipalOrgs = function (principalId, options) {
-        var _this = this;
-        return (0, exports.PrincipalsApiFp)(this.configuration).getPrincipalOrgs(principalId, options).then(function (request) { return request(_this.axios, _this.basePath); });
-    };
-    return PrincipalsApi;
-}(base_1.BaseAPI));
-exports.PrincipalsApi = PrincipalsApi;
 /**
  * RoleAssignmentApi - axios parameter creator
  * @export

package/dist/configuration.js

@@ -36,7 +36,7 @@ var Configuration = /** @class */ (function () {
         this.serverIndex = param.serverIndex;
         var extraHeaders = param.useDefaultUserAgent ? {} : {
             headers: {
-                "user-agent": "Flipdish authorization typescript SDK / 0.0.474-rc.1789049032"
+                "user-agent": "Flipdish authorization typescript SDK / 0.0.475-rc.1789049557"
             }
         };
         this.baseOptions = __assign(__assign({}, extraHeaders), param.baseOptions);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flipdish/authorization",
-  "version": "0.0.474-rc.1789049032",
+  "version": "0.0.475-rc.1789049557",
   "description": "OpenAPI client for @flipdish/authorization",
   "author": "OpenAPI-Generator Contributors",
   "repository": {