@homeflare/distilled-openbao 0.2.0

package/dist/services/jwt.js

@@ -0,0 +1,801 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-openbao, generated — see fetch-specs.ts). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as T from "../traits.js";
+import { OpenBaoProtocol, } from "../protocol.js";
+import * as Retry from "../retry.js";
+export const JwtConfigureRequestJwtSupportedAlgsList = /*@__PURE__*/ S.Array(S.String);
+export const JwtConfigureRequestJwtValidationPubkeysList = 
+/*@__PURE__*/ S.Array(S.String);
+export const JwtConfigureRequestOidcResponseTypesList = /*@__PURE__*/ S.Array(S.String);
+export const JwtConfigureRequestOverrideAllowedServerNamesList = 
+/*@__PURE__*/ S.Array(S.String);
+export const JwtConfigureRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    bound_issuer: S.optional(S.String),
+    default_role: S.optional(S.String),
+    jwks_ca_pem: S.optional(S.String),
+    jwks_url: S.optional(S.String),
+    jwt_supported_algs: S.optional(JwtConfigureRequestJwtSupportedAlgsList),
+    jwt_validation_pubkeys: S.optional(JwtConfigureRequestJwtValidationPubkeysList),
+    namespace_in_state: S.optional(S.Boolean),
+    oidc_client_id: S.optional(S.String),
+    oidc_client_secret: S.optional(S.String),
+    oidc_discovery_ca_pem: S.optional(S.String),
+    oidc_discovery_url: S.optional(S.String),
+    oidc_response_mode: S.optional(S.String),
+    oidc_response_types: S.optional(JwtConfigureRequestOidcResponseTypesList),
+    override_allowed_server_names: S.optional(JwtConfigureRequestOverrideAllowedServerNamesList),
+    provider_config: S.optional(S.Unknown),
+    skip_jwks_validation: S.optional(S.Boolean),
+}).pipe(T.Http({ method: "POST", uri: "/auth/{jwt_mount_path}/config", code: 200 }))).annotate({
+    identifier: "JwtConfigureRequest",
+});
+export const JwtConfigureResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtConfigureResponse",
+});
+export const JwtConfigureRequestJwtSupportedAlgsList2 = /*@__PURE__*/ S.Array(S.String);
+export const JwtConfigureRequestJwtValidationPubkeysList2 = 
+/*@__PURE__*/ S.Array(S.String);
+export const JwtConfigureRequestOidcResponseTypesList2 = /*@__PURE__*/ S.Array(S.String);
+export const JwtConfigureRequestOverrideAllowedServerNamesList2 = 
+/*@__PURE__*/ S.Array(S.String);
+export const JwtConfigureRequest2 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    bound_issuer: S.optional(S.String),
+    default_role: S.optional(S.String),
+    jwks_ca_pem: S.optional(S.String),
+    jwks_url: S.optional(S.String),
+    jwt_supported_algs: S.optional(JwtConfigureRequestJwtSupportedAlgsList2),
+    jwt_validation_pubkeys: S.optional(JwtConfigureRequestJwtValidationPubkeysList2),
+    namespace_in_state: S.optional(S.Boolean),
+    oidc_client_id: S.optional(S.String),
+    oidc_client_secret: S.optional(S.String),
+    oidc_discovery_ca_pem: S.optional(S.String),
+    oidc_discovery_url: S.optional(S.String),
+    oidc_response_mode: S.optional(S.String),
+    oidc_response_types: S.optional(JwtConfigureRequestOidcResponseTypesList2),
+    override_allowed_server_names: S.optional(JwtConfigureRequestOverrideAllowedServerNamesList2),
+    provider_config: S.optional(S.Unknown),
+    skip_jwks_validation: S.optional(S.Boolean),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/auth/{oidc_mount_path}/config",
+    code: 200,
+}))).annotate({
+    identifier: "JwtConfigureRequest2",
+});
+export const JwtConfigure2Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtConfigure2Response",
+});
+export const JwtDeleteRoleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "DELETE",
+    uri: "/auth/{jwt_mount_path}/cel/role/{name}",
+    code: 200,
+}))).annotate({
+    identifier: "JwtDeleteRoleRequest",
+});
+export const JwtDeleteRoleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtDeleteRoleResponse",
+});
+export const JwtDeleteRoleRequest2 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "DELETE",
+    uri: "/auth/{jwt_mount_path}/role/{name}",
+    code: 200,
+}))).annotate({
+    identifier: "JwtDeleteRoleRequest2",
+});
+export const JwtDeleteRole2Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtDeleteRole2Response",
+});
+export const JwtDeleteRoleRequest3 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "DELETE",
+    uri: "/auth/{oidc_mount_path}/cel/role/{name}",
+    code: 200,
+}))).annotate({
+    identifier: "JwtDeleteRoleRequest3",
+});
+export const JwtDeleteRole3Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtDeleteRole3Response",
+});
+export const JwtDeleteRoleRequest4 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "DELETE",
+    uri: "/auth/{oidc_mount_path}/role/{name}",
+    code: 200,
+}))).annotate({
+    identifier: "JwtDeleteRoleRequest4",
+});
+export const JwtDeleteRole4Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtDeleteRole4Response",
+});
+export const JwtListCelRequestList = S.String;
+export const JwtListCelRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    list: JwtListCelRequestList.pipe(T.Query()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/auth/{jwt_mount_path}/cel/role",
+    code: 200,
+}))).annotate({
+    identifier: "JwtListCelRequest",
+});
+export const JwtListCelResponseKeysList = /*@__PURE__*/ S.Array(S.String);
+export const JwtListCelResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    keys: S.optional(JwtListCelResponseKeysList),
+})).annotate({
+    identifier: "JwtListCelResponse",
+});
+export const JwtListCelRequestList2 = S.String;
+export const JwtListCelRequest2 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    list: JwtListCelRequestList2.pipe(T.Query()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/auth/{oidc_mount_path}/cel/role",
+    code: 200,
+}))).annotate({
+    identifier: "JwtListCelRequest2",
+});
+export const JwtListRolesRequestList = S.String;
+export const JwtListRolesRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    list: JwtListRolesRequestList.pipe(T.Query()),
+}).pipe(T.Http({ method: "GET", uri: "/auth/{jwt_mount_path}/role", code: 200 }))).annotate({
+    identifier: "JwtListRolesRequest",
+});
+export const JwtListRolesResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtListRolesResponse",
+});
+export const JwtListRolesRequestList2 = S.String;
+export const JwtListRolesRequest2 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    list: JwtListRolesRequestList2.pipe(T.Query()),
+}).pipe(T.Http({ method: "GET", uri: "/auth/{oidc_mount_path}/role", code: 200 }))).annotate({
+    identifier: "JwtListRolesRequest2",
+});
+export const JwtListRoles2Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtListRoles2Response",
+});
+export const JwtOidcCallbackRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    client_nonce: S.optional(S.String.pipe(T.Query())),
+    code: S.optional(S.String.pipe(T.Query())),
+    confirmation: S.optional(S.String.pipe(T.Query())),
+    error: S.optional(S.String.pipe(T.Query())),
+    error_description: S.optional(S.String.pipe(T.Query())),
+    error_uri: S.optional(S.String.pipe(T.Query())),
+    state: S.optional(S.String.pipe(T.Query())),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/auth/{jwt_mount_path}/oidc/callback",
+    code: 200,
+}))).annotate({
+    identifier: "JwtOidcCallbackRequest",
+});
+export const JwtOidcCallbackResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtOidcCallbackResponse",
+});
+export const JwtOidcCallbackRequest2 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    client_nonce: S.optional(S.String.pipe(T.Query())),
+    code: S.optional(S.String.pipe(T.Query())),
+    confirmation: S.optional(S.String.pipe(T.Query())),
+    error: S.optional(S.String.pipe(T.Query())),
+    error_description: S.optional(S.String.pipe(T.Query())),
+    error_uri: S.optional(S.String.pipe(T.Query())),
+    state: S.optional(S.String.pipe(T.Query())),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/auth/{oidc_mount_path}/oidc/callback",
+    code: 200,
+}))).annotate({
+    identifier: "JwtOidcCallbackRequest2",
+});
+export const JwtOidcCallback2Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtOidcCallback2Response",
+});
+export const JwtOidcRequestAuthorizationUrlRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    client_nonce: S.optional(S.String),
+    redirect_uri: S.optional(S.String),
+    role: S.optional(S.String),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/auth/{jwt_mount_path}/oidc/auth_url",
+    code: 200,
+}))).annotate({
+    identifier: "JwtOidcRequestAuthorizationUrlRequest",
+});
+export const JwtOidcRequestAuthorizationUrlResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtOidcRequestAuthorizationUrlResponse",
+});
+export const JwtOidcRequestAuthorizationUrlRequest2 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    client_nonce: S.optional(S.String),
+    redirect_uri: S.optional(S.String),
+    role: S.optional(S.String),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/auth/{oidc_mount_path}/oidc/auth_url",
+    code: 200,
+}))).annotate({
+    identifier: "JwtOidcRequestAuthorizationUrlRequest2",
+});
+export const JwtOidcRequestAuthorizationUrl2Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtOidcRequestAuthorizationUrl2Response",
+});
+export const JwtPatchRoleRequestBoundAudiencesList = /*@__PURE__*/ S.Array(S.String);
+export const JwtPatchRoleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+    bound_audiences: S.optional(JwtPatchRoleRequestBoundAudiencesList),
+    cel_program: S.optional(S.Unknown),
+    clock_skew_leeway: S.optional(S.Number),
+    expiration_leeway: S.optional(S.Number),
+    message: S.optional(S.String),
+    not_before_leeway: S.optional(S.Number),
+}).pipe(T.Http({
+    method: "PATCH",
+    uri: "/auth/{jwt_mount_path}/cel/role/{name}",
+    code: 200,
+}))).annotate({
+    identifier: "JwtPatchRoleRequest",
+});
+export const JwtPatchRoleResponseBoundAudiencesList = /*@__PURE__*/ S.Array(S.String);
+export const JwtPatchRoleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    bound_audiences: S.optional(JwtPatchRoleResponseBoundAudiencesList),
+    cel_program: S.optional(S.Unknown),
+    clock_skew_leeway: S.optional(S.Number),
+    expiration_leeway: S.optional(S.Number),
+    message: S.optional(S.String),
+    name: S.optional(S.String),
+    not_before_leeway: S.optional(S.Number),
+})).annotate({
+    identifier: "JwtPatchRoleResponse",
+});
+export const JwtPatchRoleRequestBoundAudiencesList2 = /*@__PURE__*/ S.Array(S.String);
+export const JwtPatchRoleRequest2 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+    bound_audiences: S.optional(JwtPatchRoleRequestBoundAudiencesList2),
+    cel_program: S.optional(S.Unknown),
+    clock_skew_leeway: S.optional(S.Number),
+    expiration_leeway: S.optional(S.Number),
+    message: S.optional(S.String),
+    not_before_leeway: S.optional(S.Number),
+}).pipe(T.Http({
+    method: "PATCH",
+    uri: "/auth/{oidc_mount_path}/cel/role/{name}",
+    code: 200,
+}))).annotate({
+    identifier: "JwtPatchRoleRequest2",
+});
+export const JwtReadConfigurationRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "GET", uri: "/auth/{jwt_mount_path}/config", code: 200 }))).annotate({
+    identifier: "JwtReadConfigurationRequest",
+});
+export const JwtReadConfigurationResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtReadConfigurationResponse",
+});
+export const JwtReadConfigurationRequest2 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+}).pipe(T.Http({ method: "GET", uri: "/auth/{oidc_mount_path}/config", code: 200 }))).annotate({
+    identifier: "JwtReadConfigurationRequest2",
+});
+export const JwtReadConfiguration2Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtReadConfiguration2Response",
+});
+export const JwtReadRoleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/auth/{jwt_mount_path}/cel/role/{name}",
+    code: 200,
+}))).annotate({
+    identifier: "JwtReadRoleRequest",
+});
+export const JwtReadRoleResponseBoundAudiencesList = /*@__PURE__*/ S.Array(S.String);
+export const JwtReadRoleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    bound_audiences: S.optional(JwtReadRoleResponseBoundAudiencesList),
+    cel_program: S.optional(S.Unknown),
+    clock_skew_leeway: S.optional(S.Number),
+    expiration_leeway: S.optional(S.Number),
+    message: S.optional(S.String),
+    name: S.optional(S.String),
+    not_before_leeway: S.optional(S.Number),
+})).annotate({
+    identifier: "JwtReadRoleResponse",
+});
+export const JwtReadRoleRequest2 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/auth/{jwt_mount_path}/role/{name}",
+    code: 200,
+}))).annotate({
+    identifier: "JwtReadRoleRequest2",
+});
+export const JwtReadRole2Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtReadRole2Response",
+});
+export const JwtReadRoleRequest3 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/auth/{oidc_mount_path}/cel/role/{name}",
+    code: 200,
+}))).annotate({
+    identifier: "JwtReadRoleRequest3",
+});
+export const JwtReadRoleRequest4 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+}).pipe(T.Http({
+    method: "GET",
+    uri: "/auth/{oidc_mount_path}/role/{name}",
+    code: 200,
+}))).annotate({
+    identifier: "JwtReadRoleRequest4",
+});
+export const JwtReadRole4Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtReadRole4Response",
+});
+export const JwtWriteRoleRequestBoundAudiencesList = /*@__PURE__*/ S.Array(S.String);
+export const JwtWriteRoleRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+    bound_audiences: S.optional(JwtWriteRoleRequestBoundAudiencesList),
+    cel_program: S.optional(S.Unknown),
+    clock_skew_leeway: S.optional(S.Number),
+    expiration_leeway: S.optional(S.Number),
+    message: S.optional(S.String),
+    not_before_leeway: S.optional(S.Number),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/auth/{jwt_mount_path}/cel/role/{name}",
+    code: 200,
+}))).annotate({
+    identifier: "JwtWriteRoleRequest",
+});
+export const JwtWriteRoleResponseBoundAudiencesList = /*@__PURE__*/ S.Array(S.String);
+export const JwtWriteRoleResponse = /*@__PURE__*/ S.suspend(() => S.Struct({
+    bound_audiences: S.optional(JwtWriteRoleResponseBoundAudiencesList),
+    cel_program: S.optional(S.Unknown),
+    clock_skew_leeway: S.optional(S.Number),
+    expiration_leeway: S.optional(S.Number),
+    message: S.optional(S.String),
+    name: S.optional(S.String),
+    not_before_leeway: S.optional(S.Number),
+})).annotate({
+    identifier: "JwtWriteRoleResponse",
+});
+export const JwtWriteRoleRequestBoundAudiencesList2 = /*@__PURE__*/ S.Array(S.String);
+export const JwtWriteRoleRequest2 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+    bound_audiences: S.optional(JwtWriteRoleRequestBoundAudiencesList2),
+    cel_program: S.optional(S.Unknown),
+    clock_skew_leeway: S.optional(S.Number),
+    expiration_leeway: S.optional(S.Number),
+    message: S.optional(S.String),
+    not_before_leeway: S.optional(S.Number),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/auth/{jwt_mount_path}/role/{name}",
+    code: 200,
+}))).annotate({
+    identifier: "JwtWriteRoleRequest2",
+});
+export const JwtWriteRole2Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtWriteRole2Response",
+});
+export const JwtWriteRoleRequestBoundAudiencesList3 = /*@__PURE__*/ S.Array(S.String);
+export const JwtWriteRoleRequest3 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+    bound_audiences: S.optional(JwtWriteRoleRequestBoundAudiencesList3),
+    cel_program: S.optional(S.Unknown),
+    clock_skew_leeway: S.optional(S.Number),
+    expiration_leeway: S.optional(S.Number),
+    message: S.optional(S.String),
+    not_before_leeway: S.optional(S.Number),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/auth/{oidc_mount_path}/cel/role/{name}",
+    code: 200,
+}))).annotate({
+    identifier: "JwtWriteRoleRequest3",
+});
+export const JwtWriteRoleRequestBoundAudiencesList4 = /*@__PURE__*/ S.Array(S.String);
+export const JwtWriteRoleRequest4 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+    bound_audiences: S.optional(JwtWriteRoleRequestBoundAudiencesList4),
+    cel_program: S.optional(S.Unknown),
+    clock_skew_leeway: S.optional(S.Number),
+    expiration_leeway: S.optional(S.Number),
+    message: S.optional(S.String),
+    not_before_leeway: S.optional(S.Number),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/auth/{oidc_mount_path}/role/{name}",
+    code: 200,
+}))).annotate({
+    identifier: "JwtWriteRoleRequest4",
+});
+export const JwtWriteRole4Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "JwtWriteRole4Response",
+});
+export const LoginJwtRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    jwt: S.optional(S.String),
+    role: S.optional(S.String),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/auth/{jwt_mount_path}/cel/login",
+    code: 200,
+}))).annotate({
+    identifier: "LoginJwtRequest",
+});
+export const LoginJwtResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "LoginJwtResponse",
+});
+export const LoginJwtRequest2 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    jwt: S.optional(S.String),
+    role: S.optional(S.String),
+}).pipe(T.Http({ method: "POST", uri: "/auth/{jwt_mount_path}/login", code: 200 }))).annotate({
+    identifier: "LoginJwtRequest2",
+});
+export const LoginJwt2Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "LoginJwt2Response",
+});
+export const LoginJwtRequest3 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    jwt: S.optional(S.String),
+    role: S.optional(S.String),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/auth/{oidc_mount_path}/cel/login",
+    code: 200,
+}))).annotate({
+    identifier: "LoginJwtRequest3",
+});
+export const LoginJwt3Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "LoginJwt3Response",
+});
+export const LoginJwtRequest4 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    jwt: S.optional(S.String),
+    role: S.optional(S.String),
+}).pipe(T.Http({ method: "POST", uri: "/auth/{oidc_mount_path}/login", code: 200 }))).annotate({
+    identifier: "LoginJwtRequest4",
+});
+export const LoginJwt4Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "LoginJwt4Response",
+});
+export const PollJwtWriteOidcRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    client_nonce: S.optional(S.String),
+    state: S.optional(S.String),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/auth/{jwt_mount_path}/oidc/poll",
+    code: 200,
+}))).annotate({
+    identifier: "PollJwtWriteOidcRequest",
+});
+export const PollJwtWriteOidcResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "PollJwtWriteOidcResponse",
+});
+export const PostJwtOidcCallbackFormRequest = /*@__PURE__*/ S.suspend(() => S.Struct({
+    jwt_mount_path: S.String.pipe(T.Label()),
+    client_nonce: S.optional(S.String.pipe(T.Query())),
+    code: S.optional(S.String.pipe(T.Query())),
+    confirmation: S.optional(S.String.pipe(T.Query())),
+    error: S.optional(S.String.pipe(T.Query())),
+    error_description: S.optional(S.String.pipe(T.Query())),
+    error_uri: S.optional(S.String.pipe(T.Query())),
+    state: S.optional(S.String.pipe(T.Query())),
+    id_token: S.optional(S.String),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/auth/{jwt_mount_path}/oidc/callback",
+    code: 200,
+}))).annotate({
+    identifier: "PostJwtOidcCallbackFormRequest",
+});
+export const PostJwtOidcCallbackFormResponse = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "PostJwtOidcCallbackFormResponse",
+});
+export const PostJwtOidcCallbackFormRequest2 = /*@__PURE__*/ S.suspend(() => S.Struct({
+    oidc_mount_path: S.String.pipe(T.Label()),
+    client_nonce: S.optional(S.String.pipe(T.Query())),
+    code: S.optional(S.String.pipe(T.Query())),
+    confirmation: S.optional(S.String.pipe(T.Query())),
+    error: S.optional(S.String.pipe(T.Query())),
+    error_description: S.optional(S.String.pipe(T.Query())),
+    error_uri: S.optional(S.String.pipe(T.Query())),
+    state: S.optional(S.String.pipe(T.Query())),
+    id_token: S.optional(S.String),
+}).pipe(T.Http({
+    method: "POST",
+    uri: "/auth/{oidc_mount_path}/oidc/callback",
+    code: 200,
+}))).annotate({
+    identifier: "PostJwtOidcCallbackFormRequest2",
+});
+export const PostJwtOidcCallbackForm2Response = /*@__PURE__*/ S.suspend(() => S.Struct({})).annotate({
+    identifier: "PostJwtOidcCallbackForm2Response",
+});
+/** Configure the JWT authentication backend. The JWT authentication backend validates JWTs (or OIDC) using the configured credentials. If using OIDC Discovery, the URL must be provided, along with (optionally) the CA cert to use for the connection. If performing JWT validation locally, a set of public keys must be provided. */
+export const jwtConfigure = /*@__PURE__*/ API.make(() => ({
+    input: JwtConfigureRequest,
+    output: JwtConfigureResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Configure the JWT authentication backend. The JWT authentication backend validates JWTs (or OIDC) using the configured credentials. If using OIDC Discovery, the URL must be provided, along with (optionally) the CA cert to use for the connection. If performing JWT validation locally, a set of public keys must be provided. */
+export const jwtConfigure2 = /*@__PURE__*/ API.make(() => ({
+    input: JwtConfigureRequest2,
+    output: JwtConfigure2Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+export const jwtDeleteRole = /*@__PURE__*/ API.make(() => ({
+    input: JwtDeleteRoleRequest,
+    output: JwtDeleteRoleResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Delete an existing role. */
+export const jwtDeleteRole2 = /*@__PURE__*/ API.make(() => ({
+    input: JwtDeleteRoleRequest2,
+    output: JwtDeleteRole2Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+export const jwtDeleteRole3 = /*@__PURE__*/ API.make(() => ({
+    input: JwtDeleteRoleRequest3,
+    output: JwtDeleteRole3Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Delete an existing role. */
+export const jwtDeleteRole4 = /*@__PURE__*/ API.make(() => ({
+    input: JwtDeleteRoleRequest4,
+    output: JwtDeleteRole4Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+export const jwtListCel = /*@__PURE__*/ API.make(() => ({
+    input: JwtListCelRequest,
+    output: JwtListCelResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+export const jwtListCel2 = /*@__PURE__*/ API.make(() => ({
+    input: JwtListCelRequest2,
+    output: JwtListCelResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Lists all the roles registered with the backend. The list will contain the names of the roles. */
+export const jwtListRoles = /*@__PURE__*/ API.make(() => ({
+    input: JwtListRolesRequest,
+    output: JwtListRolesResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Lists all the roles registered with the backend. The list will contain the names of the roles. */
+export const jwtListRoles2 = /*@__PURE__*/ API.make(() => ({
+    input: JwtListRolesRequest2,
+    output: JwtListRoles2Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Callback endpoint to complete an OIDC login. */
+export const jwtOidcCallback = /*@__PURE__*/ API.make(() => ({
+    input: JwtOidcCallbackRequest,
+    output: JwtOidcCallbackResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Callback endpoint to complete an OIDC login. */
+export const jwtOidcCallback2 = /*@__PURE__*/ API.make(() => ({
+    input: JwtOidcCallbackRequest2,
+    output: JwtOidcCallback2Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Request an authorization URL to start an OIDC login flow. */
+export const jwtOidcRequestAuthorizationUrl = /*@__PURE__*/ API.make(() => ({
+    input: JwtOidcRequestAuthorizationUrlRequest,
+    output: JwtOidcRequestAuthorizationUrlResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Request an authorization URL to start an OIDC login flow. */
+export const jwtOidcRequestAuthorizationUrl2 = /*@__PURE__*/ API.make(() => ({
+    input: JwtOidcRequestAuthorizationUrlRequest2,
+    output: JwtOidcRequestAuthorizationUrl2Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+export const jwtPatchRole = /*@__PURE__*/ API.make(() => ({
+    input: JwtPatchRoleRequest,
+    output: JwtPatchRoleResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+export const jwtPatchRole2 = /*@__PURE__*/ API.make(() => ({
+    input: JwtPatchRoleRequest2,
+    output: JwtPatchRoleResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Read the current JWT authentication backend configuration. */
+export const jwtReadConfiguration = /*@__PURE__*/ API.make(() => ({
+    input: JwtReadConfigurationRequest,
+    output: JwtReadConfigurationResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Read the current JWT authentication backend configuration. */
+export const jwtReadConfiguration2 = /*@__PURE__*/ API.make(() => ({
+    input: JwtReadConfigurationRequest2,
+    output: JwtReadConfiguration2Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+export const jwtReadRole = /*@__PURE__*/ API.make(() => ({
+    input: JwtReadRoleRequest,
+    output: JwtReadRoleResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Read an existing role. */
+export const jwtReadRole2 = /*@__PURE__*/ API.make(() => ({
+    input: JwtReadRoleRequest2,
+    output: JwtReadRole2Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+export const jwtReadRole3 = /*@__PURE__*/ API.make(() => ({
+    input: JwtReadRoleRequest3,
+    output: JwtReadRoleResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Read an existing role. */
+export const jwtReadRole4 = /*@__PURE__*/ API.make(() => ({
+    input: JwtReadRoleRequest4,
+    output: JwtReadRole4Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+export const jwtWriteRole = /*@__PURE__*/ API.make(() => ({
+    input: JwtWriteRoleRequest,
+    output: JwtWriteRoleResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Register an role with the backend. A role is required to authenticate with this backend. The role binds JWT token information with token policies and settings. The bindings, token polices and token settings can all be configured using this endpoint */
+export const jwtWriteRole2 = /*@__PURE__*/ API.make(() => ({
+    input: JwtWriteRoleRequest2,
+    output: JwtWriteRole2Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+export const jwtWriteRole3 = /*@__PURE__*/ API.make(() => ({
+    input: JwtWriteRoleRequest3,
+    output: JwtWriteRoleResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Register an role with the backend. A role is required to authenticate with this backend. The role binds JWT token information with token policies and settings. The bindings, token polices and token settings can all be configured using this endpoint */
+export const jwtWriteRole4 = /*@__PURE__*/ API.make(() => ({
+    input: JwtWriteRoleRequest4,
+    output: JwtWriteRole4Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Authenticates to OpenBao using a JWT (or OIDC) token against a CEL role. */
+export const loginJwt = /*@__PURE__*/ API.make(() => ({
+    input: LoginJwtRequest,
+    output: LoginJwtResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Authenticates to OpenBao using a JWT (or OIDC) token. */
+export const loginJwt2 = /*@__PURE__*/ API.make(() => ({
+    input: LoginJwtRequest2,
+    output: LoginJwt2Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Authenticates to OpenBao using a JWT (or OIDC) token against a CEL role. */
+export const loginJwt3 = /*@__PURE__*/ API.make(() => ({
+    input: LoginJwtRequest3,
+    output: LoginJwt3Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Authenticates to OpenBao using a JWT (or OIDC) token. */
+export const loginJwt4 = /*@__PURE__*/ API.make(() => ({
+    input: LoginJwtRequest4,
+    output: LoginJwt4Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Poll endpoint to complete an OIDC login. */
+export const pollJwtWriteOidc = /*@__PURE__*/ API.make(() => ({
+    input: PollJwtWriteOidcRequest,
+    output: PollJwtWriteOidcResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Callback endpoint to handle form_posts. */
+export const postJwtOidcCallbackForm = /*@__PURE__*/ API.make(() => ({
+    input: PostJwtOidcCallbackFormRequest,
+    output: PostJwtOidcCallbackFormResponse,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+/** Callback endpoint to handle form_posts. */
+export const postJwtOidcCallbackForm2 = /*@__PURE__*/ API.make(() => ({
+    input: PostJwtOidcCallbackFormRequest2,
+    output: PostJwtOidcCallbackForm2Response,
+    errors: [],
+    protocol: OpenBaoProtocol,
+    retry: Retry.Retry,
+}));
+//# sourceMappingURL=jwt.js.map