@flipdish/authorization 0.2.57 → 0.2.58

package/dist/api.js

@@ -84,8 +84,8 @@ var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
     return to.concat(ar || Array.prototype.slice.call(from));
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthenticationApi = exports.AuthenticationApiFactory = exports.AuthenticationApiFp = exports.AuthenticationApiAxiosParamCreator = exports.ListGlobalApiKeysStatusEnum = exports.APIKeysApi = exports.APIKeysApiFactory = exports.APIKeysApiFp = exports.APIKeysApiAxiosParamCreator = exports.UnblockPrincipalAccessResponseStatusEnum = exports.TimedAccessGrantResponseStatusEnum = exports.TimedAccessGrantResponsePrincipalTypeEnum = exports.TimedAccessGrantRequestBodyRoleNameEnum = exports.TimedAccessGrantStatusEnum = exports.TimedAccessGrantPrincipalTypeEnum = exports.RoleNames = exports.RoleLevelDefinitionScopeEnum = exports.RoleAssignmentRequestBodyPrincipalTypeEnum = exports.RoleAssignmentRequestBodyActorTypeEnum = exports.RoleAssignmentRequestBodyRoleNameEnum = exports.RemoveTeammateRequestBodyPrincipalTypeEnum = exports.RemoveTeammateRequestBodyActorTypeEnum = exports.PrincipalInOrgTypeEnum = exports.Permissions = exports.ListRoleDefinitionsSuccessResponseRolesInnerNameEnum = exports.ListOrgRolesSuccessResponseValueRolesEnum = exports.JoinAccessErrorResponseCodeEnum = exports.IsInRoleRequestCheckModeEnum = exports.InviteTokenResponseRoleNameEnum = exports.GlobalApiKeyStateResponseUpdatedStatusEnum = exports.GlobalApiKeyStateResponseRevokedStatusEnum = exports.GlobalApiKeyStateResponseStatusEnum = exports.GetUserPermissionsSuccessResponseResourcesValueResourceTypeEnum = exports.GetJoinAccessRequest200ResponseRoleNameEnum = exports.GetJoinAccessRequest200ResponseStateEnum = exports.GetAuthorizedOrgsRequestPrincipalTypeEnum = exports.AuthorizationRequestResourceOneOf3TypeEnum = exports.AuthorizationRequestResourceOneOf2TypeEnum = exports.AuthorizationRequestResourceOneOf1TypeEnum = exports.AuthorizationRequestResourceOneOfTypeEnum = exports.AuthorizationRequestPrincipalTypeEnum = exports.AuthorizationRequestCheckModeEnum = exports.AuthorizationBatchResponseAllowedResourcesInnerPrincipalTypeEnum = exports.AuthenticateApiKey200ResponseOkEnum = exports.AuthenticateAndCheckIsInRoleRequestCheckModeEnum = exports.AuthenticateAndAuthorizeRequestCheckModeEnum = exports.AccessRequestResponseRoleNameEnum = exports.AccessRequestResponseStateEnum = exports.AccessBlockStateResponseBlockedPrincipalTypeEnum = exports.AcceptJoinRequestRoleNameEnum = void 0;
-exports.UserPermissionsApi = exports.UserPermissionsApiFactory = exports.UserPermissionsApiFp = exports.UserPermissionsApiAxiosParamCreator = exports.UserManagementApi = exports.UserManagementApiFactory = exports.UserManagementApiFp = exports.UserManagementApiAxiosParamCreator = exports.ListMyTimedAccessGrantsStatusEnum = exports.TimedAccessApi = exports.TimedAccessApiFactory = exports.TimedAccessApiFp = exports.TimedAccessApiAxiosParamCreator = exports.RoleAssignmentApi = exports.RoleAssignmentApiFactory = exports.RoleAssignmentApiFp = exports.RoleAssignmentApiAxiosParamCreator = exports.ListPrincipalAccessBlocksTypeEnum = exports.GetPrincipalAccessBlockTypeEnum = exports.PrincipalAccessBlockApi = exports.PrincipalAccessBlockApiFactory = exports.PrincipalAccessBlockApiFp = exports.PrincipalAccessBlockApiAxiosParamCreator = exports.NamedRolesApi = exports.NamedRolesApiFactory = exports.NamedRolesApiFp = exports.NamedRolesApiAxiosParamCreator = exports.JoinAccessApi = exports.JoinAccessApiFactory = exports.JoinAccessApiFp = exports.JoinAccessApiAxiosParamCreator = exports.ConfigurationDataApi = exports.ConfigurationDataApiFactory = exports.ConfigurationDataApiFp = exports.ConfigurationDataApiAxiosParamCreator = exports.AuthorizedEntitiesApi = exports.AuthorizedEntitiesApiFactory = exports.AuthorizedEntitiesApiFp = exports.AuthorizedEntitiesApiAxiosParamCreator = exports.AuthorizationApi = exports.AuthorizationApiFactory = exports.AuthorizationApiFp = exports.AuthorizationApiAxiosParamCreator = void 0;
+exports.AuthenticationApiFactory = exports.AuthenticationApiFp = exports.AuthenticationApiAxiosParamCreator = exports.ListGlobalApiKeysStatusEnum = exports.APIKeysApi = exports.APIKeysApiFactory = exports.APIKeysApiFp = exports.APIKeysApiAxiosParamCreator = exports.UnblockPrincipalAccessResponseStatusEnum = exports.TimedAccessGrantResponseStatusEnum = exports.TimedAccessGrantResponsePrincipalTypeEnum = exports.TimedAccessGrantRequestBodyRoleNameEnum = exports.TimedAccessGrantStatusEnum = exports.TimedAccessGrantPrincipalTypeEnum = exports.RoleNames = exports.RoleLevelDefinitionScopeEnum = exports.RoleAssignmentRequestBodyPrincipalTypeEnum = exports.RoleAssignmentRequestBodyActorTypeEnum = exports.RoleAssignmentRequestBodyRoleNameEnum = exports.RemoveTeammateRequestBodyPrincipalTypeEnum = exports.RemoveTeammateRequestBodyActorTypeEnum = exports.PrincipalInOrgTypeEnum = exports.Permissions = exports.ListRoleDefinitionsSuccessResponseRolesInnerNameEnum = exports.ListOrgRolesSuccessResponseValueRolesEnum = exports.JoinAccessErrorResponseCodeEnum = exports.IsInRoleRequestCheckModeEnum = exports.InviteTokenResponseRoleNameEnum = exports.GlobalApiKeyStateResponseUpdatedStatusEnum = exports.GlobalApiKeyStateResponseRevokedStatusEnum = exports.GlobalApiKeyStateResponseStatusEnum = exports.GetUserRolesSuccessResponseRolesEnum = exports.GetUserPermissionsSuccessResponseResourcesValueResourceTypeEnum = exports.GetJoinAccessRequest200ResponseRoleNameEnum = exports.GetJoinAccessRequest200ResponseStateEnum = exports.GetAuthorizedOrgsRequestPrincipalTypeEnum = exports.AuthorizationRequestResourceOneOf3TypeEnum = exports.AuthorizationRequestResourceOneOf2TypeEnum = exports.AuthorizationRequestResourceOneOf1TypeEnum = exports.AuthorizationRequestResourceOneOfTypeEnum = exports.AuthorizationRequestPrincipalTypeEnum = exports.AuthorizationRequestCheckModeEnum = exports.AuthorizationBatchResponseAllowedResourcesInnerPrincipalTypeEnum = exports.AuthenticateApiKey200ResponseOkEnum = exports.AuthenticateAndCheckIsInRoleRequestCheckModeEnum = exports.AuthenticateAndAuthorizeRequestCheckModeEnum = exports.AccessRequestResponseRoleNameEnum = exports.AccessRequestResponseStateEnum = exports.AccessBlockStateResponseBlockedPrincipalTypeEnum = exports.AcceptJoinRequestRoleNameEnum = void 0;
+exports.UserPermissionsApi = exports.UserPermissionsApiFactory = exports.UserPermissionsApiFp = exports.UserPermissionsApiAxiosParamCreator = exports.UserManagementApi = exports.UserManagementApiFactory = exports.UserManagementApiFp = exports.UserManagementApiAxiosParamCreator = exports.ListMyTimedAccessGrantsStatusEnum = exports.TimedAccessApi = exports.TimedAccessApiFactory = exports.TimedAccessApiFp = exports.TimedAccessApiAxiosParamCreator = exports.RoleAssignmentApi = exports.RoleAssignmentApiFactory = exports.RoleAssignmentApiFp = exports.RoleAssignmentApiAxiosParamCreator = exports.PrincipalsApi = exports.PrincipalsApiFactory = exports.PrincipalsApiFp = exports.PrincipalsApiAxiosParamCreator = exports.ListPrincipalAccessBlocksTypeEnum = exports.GetPrincipalAccessBlockTypeEnum = exports.PrincipalAccessBlockApi = exports.PrincipalAccessBlockApiFactory = exports.PrincipalAccessBlockApiFp = exports.PrincipalAccessBlockApiAxiosParamCreator = exports.NamedRolesApi = exports.NamedRolesApiFactory = exports.NamedRolesApiFp = exports.NamedRolesApiAxiosParamCreator = exports.JoinAccessApi = exports.JoinAccessApiFactory = exports.JoinAccessApiFp = exports.JoinAccessApiAxiosParamCreator = exports.ConfigurationDataApi = exports.ConfigurationDataApiFactory = exports.ConfigurationDataApiFp = exports.ConfigurationDataApiAxiosParamCreator = exports.AuthorizedEntitiesApi = exports.AuthorizedEntitiesApiFactory = exports.AuthorizedEntitiesApiFp = exports.AuthorizedEntitiesApiAxiosParamCreator = exports.AuthorizationApi = exports.AuthorizationApiFactory = exports.AuthorizationApiFp = exports.AuthorizationApiAxiosParamCreator = exports.AuthenticationApi = void 0;
 var axios_1 = require("axios");
 // Some imports not used depending on template conditions
 // @ts-ignore
@@ -100,6 +100,7 @@ exports.AcceptJoinRequestRoleNameEnum = {
     PropertyManager: 'PropertyManager',
     FinanceManager: 'FinanceManager',
     StaffMember: 'StaffMember',
+    Courier: 'Courier',
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 };
@@ -123,6 +124,7 @@ exports.AccessRequestResponseRoleNameEnum = {
     PropertyManager: 'PropertyManager',
     FinanceManager: 'FinanceManager',
     StaffMember: 'StaffMember',
+    Courier: 'Courier',
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 };
@@ -185,6 +187,7 @@ exports.GetJoinAccessRequest200ResponseRoleNameEnum = {
     PropertyManager: 'PropertyManager',
     FinanceManager: 'FinanceManager',
     StaffMember: 'StaffMember',
+    Courier: 'Courier',
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 };
@@ -194,6 +197,18 @@ exports.GetUserPermissionsSuccessResponseResourcesValueResourceTypeEnum = {
     Brand: 'Brand',
     SalesChannel: 'SalesChannel'
 };
+exports.GetUserRolesSuccessResponseRolesEnum = {
+    Owner: 'Owner',
+    PropertyOwner: 'PropertyOwner',
+    ManagedOwner: 'ManagedOwner',
+    Integrator: 'Integrator',
+    PropertyManager: 'PropertyManager',
+    FinanceManager: 'FinanceManager',
+    StaffMember: 'StaffMember',
+    Courier: 'Courier',
+    Kiosk: 'Kiosk',
+    Terminal: 'Terminal'
+};
 exports.GlobalApiKeyStateResponseStatusEnum = {
     Active: 'active',
     Revoked: 'revoked'
@@ -214,6 +229,7 @@ exports.InviteTokenResponseRoleNameEnum = {
     PropertyManager: 'PropertyManager',
     FinanceManager: 'FinanceManager',
     StaffMember: 'StaffMember',
+    Courier: 'Courier',
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 };
@@ -232,6 +248,7 @@ exports.ListOrgRolesSuccessResponseValueRolesEnum = {
     PropertyManager: 'PropertyManager',
     FinanceManager: 'FinanceManager',
     StaffMember: 'StaffMember',
+    Courier: 'Courier',
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 };
@@ -243,6 +260,7 @@ exports.ListRoleDefinitionsSuccessResponseRolesInnerNameEnum = {
     PropertyManager: 'PropertyManager',
     FinanceManager: 'FinanceManager',
     StaffMember: 'StaffMember',
+    Courier: 'Courier',
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 };
@@ -273,6 +291,7 @@ exports.Permissions = {
     CreateTeammatePropertyManager: 'CreateTeammatePropertyManager',
     CreateTeammatePropertyOwner: 'CreateTeammatePropertyOwner',
     CreateTeammateStaffMember: 'CreateTeammateStaffMember',
+    CreateTeammateCourier: 'CreateTeammateCourier',
     ViewApmConfigurations: 'ViewApmConfigurations',
     EditApmConfigurations: 'EditApmConfigurations',
     ViewCampaignsConfigurations: 'ViewCampaignsConfigurations',
@@ -316,6 +335,7 @@ exports.Permissions = {
     CreateGlobalApiKey: 'CreateGlobalAPIKey',
     ListGlobalApiKeys: 'ListGlobalAPIKeys',
     BlockPrincipalAccess: 'BlockPrincipalAccess',
+    ListPrincipalOrgs: 'ListPrincipalOrgs',
     CreateMenu: 'CreateMenu',
     UpdateMenu: 'UpdateMenu',
     DeleteMenu: 'DeleteMenu',
@@ -486,6 +506,7 @@ exports.Permissions = {
     ViewWebhooks: 'ViewWebhooks',
     EditWebhooks: 'EditWebhooks',
     ViewOwnPermissions: 'ViewOwnPermissions',
+    LeaveOrg: 'LeaveOrg',
     CreatePosSale: 'CreatePosSale',
     ComplimentPosItems: 'ComplimentPosItems',
     ApplyPosDiscounts: 'ApplyPosDiscounts',
@@ -506,6 +527,7 @@ exports.Permissions = {
     SnoozePosItem: 'SnoozePosItem',
     SnoozePosItemIndefinitely: 'SnoozePosItemIndefinitely',
     SnoozePosProperty: 'SnoozePosProperty',
+    SendSmsToCustomers: 'SendSmsToCustomers',
     RoleAdmin: 'RoleAdmin',
     RoleFactory: 'RoleFactory',
     RoleAuthDeveloper: 'RoleAuthDeveloper',
@@ -537,6 +559,7 @@ exports.RoleAssignmentRequestBodyRoleNameEnum = {
     PropertyManager: 'PropertyManager',
     FinanceManager: 'FinanceManager',
     StaffMember: 'StaffMember',
+    Courier: 'Courier',
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 };
@@ -3197,6 +3220,51 @@ var NamedRolesApiAxiosParamCreator = function (configuration) {
                 });
             });
         },
+        /**
+         * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+         * @summary List named roles for a user
+         * @param {string} principalId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listNamedRoles: function (principalId_1) {
+            var args_1 = [];
+            for (var _i = 1; _i < arguments.length; _i++) {
+                args_1[_i - 1] = arguments[_i];
+            }
+            return __awaiter(_this, __spreadArray([principalId_1], args_1, true), void 0, function (principalId, options) {
+                var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
+                if (options === void 0) { options = {}; }
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            // verify required parameter 'principalId' is not null or undefined
+                            (0, common_1.assertParamExists)('listNamedRoles', 'principalId', principalId);
+                            localVarPath = "/namedRoles/{principalId}"
+                                .replace("{".concat("principalId", "}"), encodeURIComponent(String(principalId)));
+                            localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+                            if (configuration) {
+                                baseOptions = configuration.baseOptions;
+                            }
+                            localVarRequestOptions = __assign(__assign({ method: 'GET' }, baseOptions), options);
+                            localVarHeaderParameter = {};
+                            localVarQueryParameter = {};
+                            // authentication ApiKeyAuth required
+                            return [4 /*yield*/, (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration)];
+                        case 1:
+                            // authentication ApiKeyAuth required
+                            _a.sent();
+                            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+                            headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+                            localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+                            return [2 /*return*/, {
+                                    url: (0, common_1.toPathString)(localVarUrlObj),
+                                    options: localVarRequestOptions,
+                                }];
+                    }
+                });
+            });
+        },
         /**
          * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
          * @summary Remove a named role
@@ -3274,6 +3342,29 @@ var NamedRolesApiFp = function (configuration) {
                 });
             });
         },
+        /**
+         * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+         * @summary List named roles for a user
+         * @param {string} principalId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listNamedRoles: function (principalId, options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
+                var _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.listNamedRoles(principalId, options)];
+                        case 1:
+                            localVarAxiosArgs = _d.sent();
+                            localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['NamedRolesApi.listNamedRoles']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
+                    }
+                });
+            });
+        },
         /**
          * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
          * @summary Remove a named role
@@ -3317,6 +3408,16 @@ var NamedRolesApiFactory = function (configuration, basePath, axios) {
         applyNamedRole: function (applyNamedRoleRequestBody, options) {
             return localVarFp.applyNamedRole(applyNamedRoleRequestBody, options).then(function (request) { return request(axios, basePath); });
         },
+        /**
+         * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+         * @summary List named roles for a user
+         * @param {string} principalId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listNamedRoles: function (principalId, options) {
+            return localVarFp.listNamedRoles(principalId, options).then(function (request) { return request(axios, basePath); });
+        },
         /**
          * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
          * @summary Remove a named role
@@ -3353,6 +3454,18 @@ var NamedRolesApi = /** @class */ (function (_super) {
         var _this = this;
         return (0, exports.NamedRolesApiFp)(this.configuration).applyNamedRole(applyNamedRoleRequestBody, options).then(function (request) { return request(_this.axios, _this.basePath); });
     };
+    /**
+     * Lists the named roles currently held by the given user. No org context needed, since named roles are global. Caller must hold Admin, Factory, or AuthDeveloper.
+     * @summary List named roles for a user
+     * @param {string} principalId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof NamedRolesApi
+     */
+    NamedRolesApi.prototype.listNamedRoles = function (principalId, options) {
+        var _this = this;
+        return (0, exports.NamedRolesApiFp)(this.configuration).listNamedRoles(principalId, options).then(function (request) { return request(_this.axios, _this.basePath); });
+    };
     /**
      * Removes the named role given in the body so the user can no longer act as it. Does not end passes already held; those run to their own expiry. Subject to the same privilege-level gate and AuthDeveloper block as assignment. Mirrors /orgs/{orgId}/roleAssignments/remove.
      * @summary Remove a named role
@@ -3799,6 +3912,140 @@ exports.ListPrincipalAccessBlocksTypeEnum = {
     Kiosk: 'Kiosk',
     Terminal: 'Terminal'
 };
+/**
+ * PrincipalsApi - axios parameter creator
+ * @export
+ */
+var PrincipalsApiAxiosParamCreator = function (configuration) {
+    var _this = this;
+    return {
+        /**
+         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+         * @summary Get principal org memberships
+         * @param {string} principalId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getPrincipalOrgs: function (principalId_1) {
+            var args_1 = [];
+            for (var _i = 1; _i < arguments.length; _i++) {
+                args_1[_i - 1] = arguments[_i];
+            }
+            return __awaiter(_this, __spreadArray([principalId_1], args_1, true), void 0, function (principalId, options) {
+                var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
+                if (options === void 0) { options = {}; }
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            // verify required parameter 'principalId' is not null or undefined
+                            (0, common_1.assertParamExists)('getPrincipalOrgs', 'principalId', principalId);
+                            localVarPath = "/principals/{principalId}/orgs"
+                                .replace("{".concat("principalId", "}"), encodeURIComponent(String(principalId)));
+                            localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+                            if (configuration) {
+                                baseOptions = configuration.baseOptions;
+                            }
+                            localVarRequestOptions = __assign(__assign({ method: 'GET' }, baseOptions), options);
+                            localVarHeaderParameter = {};
+                            localVarQueryParameter = {};
+                            // authentication ApiKeyAuth required
+                            return [4 /*yield*/, (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration)];
+                        case 1:
+                            // authentication ApiKeyAuth required
+                            _a.sent();
+                            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+                            headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+                            localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+                            return [2 /*return*/, {
+                                    url: (0, common_1.toPathString)(localVarUrlObj),
+                                    options: localVarRequestOptions,
+                                }];
+                    }
+                });
+            });
+        },
+    };
+};
+exports.PrincipalsApiAxiosParamCreator = PrincipalsApiAxiosParamCreator;
+/**
+ * PrincipalsApi - functional programming interface
+ * @export
+ */
+var PrincipalsApiFp = function (configuration) {
+    var localVarAxiosParamCreator = (0, exports.PrincipalsApiAxiosParamCreator)(configuration);
+    return {
+        /**
+         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+         * @summary Get principal org memberships
+         * @param {string} principalId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getPrincipalOrgs: function (principalId, options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
+                var _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.getPrincipalOrgs(principalId, options)];
+                        case 1:
+                            localVarAxiosArgs = _d.sent();
+                            localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['PrincipalsApi.getPrincipalOrgs']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
+                    }
+                });
+            });
+        },
+    };
+};
+exports.PrincipalsApiFp = PrincipalsApiFp;
+/**
+ * PrincipalsApi - factory interface
+ * @export
+ */
+var PrincipalsApiFactory = function (configuration, basePath, axios) {
+    var localVarFp = (0, exports.PrincipalsApiFp)(configuration);
+    return {
+        /**
+         * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+         * @summary Get principal org memberships
+         * @param {string} principalId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getPrincipalOrgs: function (principalId, options) {
+            return localVarFp.getPrincipalOrgs(principalId, options).then(function (request) { return request(axios, basePath); });
+        },
+    };
+};
+exports.PrincipalsApiFactory = PrincipalsApiFactory;
+/**
+ * PrincipalsApi - object-oriented interface
+ * @export
+ * @class PrincipalsApi
+ * @extends {BaseAPI}
+ */
+var PrincipalsApi = /** @class */ (function (_super) {
+    __extends(PrincipalsApi, _super);
+    function PrincipalsApi() {
+        return _super !== null && _super.apply(this, arguments) || this;
+    }
+    /**
+     * Returns the principal and the orgs it holds permission assignments in, read from the principals store with no policy evaluation. This is a superset of the orgs any single action is allowed on, so it is a sound negative filter (no membership means no permission) but not an authoritative allow. Intended as a cheap prefilter ahead of /authorize/batch/checks; use /getAuthorizedOrgs when you need a per-action answer. Requires ListPrincipalOrgs.
+     * @summary Get principal org memberships
+     * @param {string} principalId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof PrincipalsApi
+     */
+    PrincipalsApi.prototype.getPrincipalOrgs = function (principalId, options) {
+        var _this = this;
+        return (0, exports.PrincipalsApiFp)(this.configuration).getPrincipalOrgs(principalId, options).then(function (request) { return request(_this.axios, _this.basePath); });
+    };
+    return PrincipalsApi;
+}(base_1.BaseAPI));
+exports.PrincipalsApi = PrincipalsApi;
 /**
  * RoleAssignmentApi - axios parameter creator
  * @export
@@ -3854,6 +4101,51 @@ var RoleAssignmentApiAxiosParamCreator = function (configuration) {
                 });
             });
         },
+        /**
+         * Removes the caller from the org: revokes all of their V2 role assignments, reconciles away their policies, and removes them from the org user list. Does not change their Zeus teammate record.
+         * @summary Leave org
+         * @param {string} orgId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        leaveOrg: function (orgId_1) {
+            var args_1 = [];
+            for (var _i = 1; _i < arguments.length; _i++) {
+                args_1[_i - 1] = arguments[_i];
+            }
+            return __awaiter(_this, __spreadArray([orgId_1], args_1, true), void 0, function (orgId, options) {
+                var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
+                if (options === void 0) { options = {}; }
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            // verify required parameter 'orgId' is not null or undefined
+                            (0, common_1.assertParamExists)('leaveOrg', 'orgId', orgId);
+                            localVarPath = "/orgs/{orgId}/leave"
+                                .replace("{".concat("orgId", "}"), encodeURIComponent(String(orgId)));
+                            localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+                            if (configuration) {
+                                baseOptions = configuration.baseOptions;
+                            }
+                            localVarRequestOptions = __assign(__assign({ method: 'POST' }, baseOptions), options);
+                            localVarHeaderParameter = {};
+                            localVarQueryParameter = {};
+                            // authentication ApiKeyAuth required
+                            return [4 /*yield*/, (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration)];
+                        case 1:
+                            // authentication ApiKeyAuth required
+                            _a.sent();
+                            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+                            headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+                            localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+                            return [2 /*return*/, {
+                                    url: (0, common_1.toPathString)(localVarUrlObj),
+                                    options: localVarRequestOptions,
+                                }];
+                    }
+                });
+            });
+        },
         /**
          * Reconciles policy assignments for the role assignment principal: creates missing policies and revokes leftovers that materialize no longer emits
          * @summary Rematerialize Role Assignment
@@ -3984,6 +4276,29 @@ var RoleAssignmentApiFp = function (configuration) {
                 });
             });
         },
+        /**
+         * Removes the caller from the org: revokes all of their V2 role assignments, reconciles away their policies, and removes them from the org user list. Does not change their Zeus teammate record.
+         * @summary Leave org
+         * @param {string} orgId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        leaveOrg: function (orgId, options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
+                var _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.leaveOrg(orgId, options)];
+                        case 1:
+                            localVarAxiosArgs = _d.sent();
+                            localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['RoleAssignmentApi.leaveOrg']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
+                    }
+                });
+            });
+        },
         /**
          * Reconciles policy assignments for the role assignment principal: creates missing policies and revokes leftovers that materialize no longer emits
          * @summary Rematerialize Role Assignment
@@ -4053,6 +4368,16 @@ var RoleAssignmentApiFactory = function (configuration, basePath, axios) {
         applyRoleAssignment: function (orgId, roleAssignmentRequestBody, options) {
             return localVarFp.applyRoleAssignment(orgId, roleAssignmentRequestBody, options).then(function (request) { return request(axios, basePath); });
         },
+        /**
+         * Removes the caller from the org: revokes all of their V2 role assignments, reconciles away their policies, and removes them from the org user list. Does not change their Zeus teammate record.
+         * @summary Leave org
+         * @param {string} orgId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        leaveOrg: function (orgId, options) {
+            return localVarFp.leaveOrg(orgId, options).then(function (request) { return request(axios, basePath); });
+        },
         /**
          * Reconciles policy assignments for the role assignment principal: creates missing policies and revokes leftovers that materialize no longer emits
          * @summary Rematerialize Role Assignment
@@ -4102,6 +4427,18 @@ var RoleAssignmentApi = /** @class */ (function (_super) {
         var _this = this;
         return (0, exports.RoleAssignmentApiFp)(this.configuration).applyRoleAssignment(orgId, roleAssignmentRequestBody, options).then(function (request) { return request(_this.axios, _this.basePath); });
     };
+    /**
+     * Removes the caller from the org: revokes all of their V2 role assignments, reconciles away their policies, and removes them from the org user list. Does not change their Zeus teammate record.
+     * @summary Leave org
+     * @param {string} orgId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RoleAssignmentApi
+     */
+    RoleAssignmentApi.prototype.leaveOrg = function (orgId, options) {
+        var _this = this;
+        return (0, exports.RoleAssignmentApiFp)(this.configuration).leaveOrg(orgId, options).then(function (request) { return request(_this.axios, _this.basePath); });
+    };
     /**
      * Reconciles policy assignments for the role assignment principal: creates missing policies and revokes leftovers that materialize no longer emits
      * @summary Rematerialize Role Assignment
@@ -4754,6 +5091,51 @@ var UserPermissionsApiAxiosParamCreator = function (configuration) {
                 });
             });
         },
+        /**
+         * List the role assignments for the current user in the org
+         * @summary List Own Roles
+         * @param {string} orgId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listOwnRoles: function (orgId_1) {
+            var args_1 = [];
+            for (var _i = 1; _i < arguments.length; _i++) {
+                args_1[_i - 1] = arguments[_i];
+            }
+            return __awaiter(_this, __spreadArray([orgId_1], args_1, true), void 0, function (orgId, options) {
+                var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
+                if (options === void 0) { options = {}; }
+                return __generator(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            // verify required parameter 'orgId' is not null or undefined
+                            (0, common_1.assertParamExists)('listOwnRoles', 'orgId', orgId);
+                            localVarPath = "/orgs/{orgId}/user/roles"
+                                .replace("{".concat("orgId", "}"), encodeURIComponent(String(orgId)));
+                            localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+                            if (configuration) {
+                                baseOptions = configuration.baseOptions;
+                            }
+                            localVarRequestOptions = __assign(__assign({ method: 'GET' }, baseOptions), options);
+                            localVarHeaderParameter = {};
+                            localVarQueryParameter = {};
+                            // authentication ApiKeyAuth required
+                            return [4 /*yield*/, (0, common_1.setApiKeyToObject)(localVarHeaderParameter, "Authorization", configuration)];
+                        case 1:
+                            // authentication ApiKeyAuth required
+                            _a.sent();
+                            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+                            headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+                            localVarRequestOptions.headers = __assign(__assign(__assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+                            return [2 /*return*/, {
+                                    url: (0, common_1.toPathString)(localVarUrlObj),
+                                    options: localVarRequestOptions,
+                                }];
+                    }
+                });
+            });
+        },
         /**
          * List the available permissions for a given user
          * @summary List User Permissions
@@ -4882,6 +5264,29 @@ var UserPermissionsApiFp = function (configuration) {
                 });
             });
         },
+        /**
+         * List the role assignments for the current user in the org
+         * @summary List Own Roles
+         * @param {string} orgId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listOwnRoles: function (orgId, options) {
+            return __awaiter(this, void 0, void 0, function () {
+                var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
+                var _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.listOwnRoles(orgId, options)];
+                        case 1:
+                            localVarAxiosArgs = _d.sent();
+                            localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                            localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['UserPermissionsApi.listOwnRoles']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                            return [2 /*return*/, function (axios, basePath) { return (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath); }];
+                    }
+                });
+            });
+        },
         /**
          * List the available permissions for a given user
          * @summary List User Permissions
@@ -4946,6 +5351,16 @@ var UserPermissionsApiFactory = function (configuration, basePath, axios) {
         listOwnPermissions: function (orgId, options) {
             return localVarFp.listOwnPermissions(orgId, options).then(function (request) { return request(axios, basePath); });
         },
+        /**
+         * List the role assignments for the current user in the org
+         * @summary List Own Roles
+         * @param {string} orgId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listOwnRoles: function (orgId, options) {
+            return localVarFp.listOwnRoles(orgId, options).then(function (request) { return request(axios, basePath); });
+        },
         /**
          * List the available permissions for a given user
          * @summary List User Permissions
@@ -5007,6 +5422,18 @@ var UserPermissionsApi = /** @class */ (function (_super) {
         var _this = this;
         return (0, exports.UserPermissionsApiFp)(this.configuration).listOwnPermissions(orgId, options).then(function (request) { return request(_this.axios, _this.basePath); });
     };
+    /**
+     * List the role assignments for the current user in the org
+     * @summary List Own Roles
+     * @param {string} orgId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof UserPermissionsApi
+     */
+    UserPermissionsApi.prototype.listOwnRoles = function (orgId, options) {
+        var _this = this;
+        return (0, exports.UserPermissionsApiFp)(this.configuration).listOwnRoles(orgId, options).then(function (request) { return request(_this.axios, _this.basePath); });
+    };
     /**
      * List the available permissions for a given user
      * @summary List User Permissions

package/dist/configuration.js

@@ -36,7 +36,7 @@ var Configuration = /** @class */ (function () {
         this.serverIndex = param.serverIndex;
         var extraHeaders = param.useDefaultUserAgent ? {} : {
             headers: {
-                "user-agent": "Flipdish authorization typescript SDK / 0.2.57"
+                "user-agent": "Flipdish authorization typescript SDK / 0.2.58"
             }
         };
         this.baseOptions = __assign(__assign({}, extraHeaders), param.baseOptions);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flipdish/authorization",
-  "version": "0.2.57",
+  "version": "0.2.58",
   "description": "OpenAPI client for @flipdish/authorization",
   "author": "OpenAPI-Generator Contributors",
   "repository": {