@nylorun/runtime 0.19.0-beta → 0.20.0-beta
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +32 -0
- package/README.md +12 -7
- package/dist/adapters/streams/s2.js +5 -11
- package/dist/api/components.d.ts +171 -169
- package/dist/api/http/define.d.ts +3 -2
- package/dist/api/http/define.js +10 -11
- package/dist/api/openapi.js +45 -22
- package/dist/execution/types.d.ts +1 -1
- package/dist/host/app.d.ts +3 -0
- package/dist/host/app.js +33 -4
- package/dist/host/create-host.d.ts +6 -0
- package/dist/host/create-host.js +1 -0
- package/dist/host/main.js +11 -4
- package/dist/host/stack-config.js +1 -1
- package/dist/infra/index.d.ts +2 -1
- package/dist/infra/index.js +0 -1
- package/dist/infra/readiness.d.ts +6 -6
- package/dist/infra/readiness.js +2 -5
- package/dist/management-openapi.json +430 -107
- package/dist/openapi.json +761 -630
- package/dist/store/postgres/connect.d.ts +10 -0
- package/dist/store/postgres/connect.js +30 -3
- package/dist/store/postgres/control.d.ts +14 -0
- package/dist/store/postgres/control.js +187 -0
- package/dist/store/postgres/drizzle/0015_control_signals.sql +11 -0
- package/dist/store/postgres/drizzle/meta/_journal.json +7 -0
- package/dist/store/postgres/schema.d.ts +120 -0
- package/dist/store/postgres/schema.js +20 -0
- package/dist/store/postgres/store.js +15 -0
- package/dist/store/types.d.ts +40 -0
- package/dist/streams/types.d.ts +6 -29
- package/dist/streams/types.js +5 -4
- package/dist/tenant/auth.d.ts +16 -6
- package/dist/tenant/auth.js +41 -17
- package/dist/tenant/commands.js +10 -6
- package/dist/tenant/context.d.ts +4 -0
- package/dist/tenant/control.d.ts +26 -0
- package/dist/tenant/control.js +35 -0
- package/dist/tenant/ephemeral.js +1 -0
- package/dist/tenant/http.d.ts +4 -2
- package/dist/tenant/http.js +4 -2
- package/dist/tenant/identity-file.d.ts +16 -12
- package/dist/tenant/identity-file.js +41 -29
- package/dist/tenant/issuers.d.ts +4 -3
- package/dist/tenant/issuers.js +22 -16
- package/dist/tenant/reset.d.ts +2 -2
- package/dist/tenant/reset.js +8 -2
- package/dist/tenant/resource-server.d.ts +56 -0
- package/dist/tenant/resource-server.js +62 -0
- package/dist/tenant/runtime.d.ts +1 -1
- package/dist/tenant/runtime.js +7 -1
- package/dist/tenant/scheduler.d.ts +1 -1
- package/dist/tenant/scheduler.js +1 -1
- package/dist/tenant/streams.d.ts +16 -22
- package/dist/tenant/streams.js +7 -87
- package/dist/tenant/sweep.js +9 -1
- package/dist/version.d.ts +1 -1
- package/dist/version.js +1 -1
- package/package.json +3 -3
- package/dist/streams/control.d.ts +0 -13
- package/dist/streams/control.js +0 -25
package/dist/openapi.json
CHANGED
|
@@ -2,16 +2,17 @@
|
|
|
2
2
|
"openapi": "3.2.0",
|
|
3
3
|
"info": {
|
|
4
4
|
"title": "Nylorun Runtime API",
|
|
5
|
-
"version": "0.
|
|
5
|
+
"version": "0.20.0-beta",
|
|
6
6
|
"x-nylorun-protocol": {
|
|
7
7
|
"min": 4,
|
|
8
|
-
"max":
|
|
8
|
+
"max": 9,
|
|
9
9
|
"features": [
|
|
10
10
|
"runtime-tenants",
|
|
11
11
|
"admin-status",
|
|
12
12
|
"studio-principal",
|
|
13
13
|
"artifacts",
|
|
14
14
|
"management-api",
|
|
15
|
+
"resource-server",
|
|
15
16
|
"tenant-fixture-model",
|
|
16
17
|
"transcript-events",
|
|
17
18
|
"subject-headers",
|
|
@@ -6224,6 +6225,48 @@
|
|
|
6224
6225
|
"checks"
|
|
6225
6226
|
]
|
|
6226
6227
|
},
|
|
6228
|
+
"ProtectedResourceMetadata": {
|
|
6229
|
+
"type": "object",
|
|
6230
|
+
"properties": {
|
|
6231
|
+
"resource": {
|
|
6232
|
+
"type": "string",
|
|
6233
|
+
"description": "The Runtime API: `NYLORUN_PUBLIC_URL`, else the origin the request reached"
|
|
6234
|
+
},
|
|
6235
|
+
"authorization_servers": {
|
|
6236
|
+
"type": "array",
|
|
6237
|
+
"items": {
|
|
6238
|
+
"type": "string"
|
|
6239
|
+
},
|
|
6240
|
+
"description": "The identity file's issuers, in its order: a client usually signs in at the first"
|
|
6241
|
+
},
|
|
6242
|
+
"scopes_supported": {
|
|
6243
|
+
"type": "array",
|
|
6244
|
+
"items": {
|
|
6245
|
+
"type": "string"
|
|
6246
|
+
},
|
|
6247
|
+
"description": "The scopes the issuers' tokens may carry, `studio` aside"
|
|
6248
|
+
},
|
|
6249
|
+
"bearer_methods_supported": {
|
|
6250
|
+
"type": "array",
|
|
6251
|
+
"items": {
|
|
6252
|
+
"type": "string",
|
|
6253
|
+
"enum": [
|
|
6254
|
+
"header"
|
|
6255
|
+
]
|
|
6256
|
+
}
|
|
6257
|
+
},
|
|
6258
|
+
"resource_name": {
|
|
6259
|
+
"type": "string"
|
|
6260
|
+
}
|
|
6261
|
+
},
|
|
6262
|
+
"required": [
|
|
6263
|
+
"resource",
|
|
6264
|
+
"authorization_servers",
|
|
6265
|
+
"scopes_supported",
|
|
6266
|
+
"bearer_methods_supported",
|
|
6267
|
+
"resource_name"
|
|
6268
|
+
]
|
|
6269
|
+
},
|
|
6227
6270
|
"AcceptedResponse": {
|
|
6228
6271
|
"type": "object",
|
|
6229
6272
|
"properties": {
|
|
@@ -6269,6 +6312,8 @@
|
|
|
6269
6312
|
"type": "string",
|
|
6270
6313
|
"enum": [
|
|
6271
6314
|
"not_found",
|
|
6315
|
+
"credential_required",
|
|
6316
|
+
"credential_invalid",
|
|
6272
6317
|
"protocol_unsupported",
|
|
6273
6318
|
"host_rejected",
|
|
6274
6319
|
"origin_rejected",
|
|
@@ -9660,7 +9705,7 @@
|
|
|
9660
9705
|
"model-gate",
|
|
9661
9706
|
"tool-gate",
|
|
9662
9707
|
"egress-gate",
|
|
9663
|
-
"
|
|
9708
|
+
"sandboxes",
|
|
9664
9709
|
"edge",
|
|
9665
9710
|
"init",
|
|
9666
9711
|
"controller",
|
|
@@ -9899,7 +9944,7 @@
|
|
|
9899
9944
|
"model-gate",
|
|
9900
9945
|
"tool-gate",
|
|
9901
9946
|
"egress-gate",
|
|
9902
|
-
"
|
|
9947
|
+
"sandboxes",
|
|
9903
9948
|
"edge",
|
|
9904
9949
|
"init",
|
|
9905
9950
|
"controller",
|
|
@@ -10089,7 +10134,7 @@
|
|
|
10089
10134
|
"model-gate",
|
|
10090
10135
|
"tool-gate",
|
|
10091
10136
|
"egress-gate",
|
|
10092
|
-
"
|
|
10137
|
+
"sandboxes",
|
|
10093
10138
|
"edge",
|
|
10094
10139
|
"init",
|
|
10095
10140
|
"controller",
|
|
@@ -10276,7 +10321,7 @@
|
|
|
10276
10321
|
"model-gate",
|
|
10277
10322
|
"tool-gate",
|
|
10278
10323
|
"egress-gate",
|
|
10279
|
-
"
|
|
10324
|
+
"sandboxes",
|
|
10280
10325
|
"edge",
|
|
10281
10326
|
"init",
|
|
10282
10327
|
"controller",
|
|
@@ -10438,7 +10483,7 @@
|
|
|
10438
10483
|
"model-gate",
|
|
10439
10484
|
"tool-gate",
|
|
10440
10485
|
"egress-gate",
|
|
10441
|
-
"
|
|
10486
|
+
"sandboxes",
|
|
10442
10487
|
"edge",
|
|
10443
10488
|
"init",
|
|
10444
10489
|
"controller",
|
|
@@ -10643,7 +10688,7 @@
|
|
|
10643
10688
|
"model-gate",
|
|
10644
10689
|
"tool-gate",
|
|
10645
10690
|
"egress-gate",
|
|
10646
|
-
"
|
|
10691
|
+
"sandboxes",
|
|
10647
10692
|
"edge",
|
|
10648
10693
|
"init",
|
|
10649
10694
|
"controller",
|
|
@@ -10819,7 +10864,7 @@
|
|
|
10819
10864
|
"model-gate",
|
|
10820
10865
|
"tool-gate",
|
|
10821
10866
|
"egress-gate",
|
|
10822
|
-
"
|
|
10867
|
+
"sandboxes",
|
|
10823
10868
|
"edge",
|
|
10824
10869
|
"init",
|
|
10825
10870
|
"controller",
|
|
@@ -10983,7 +11028,7 @@
|
|
|
10983
11028
|
"model-gate",
|
|
10984
11029
|
"tool-gate",
|
|
10985
11030
|
"egress-gate",
|
|
10986
|
-
"
|
|
11031
|
+
"sandboxes",
|
|
10987
11032
|
"edge",
|
|
10988
11033
|
"init",
|
|
10989
11034
|
"controller",
|
|
@@ -11225,7 +11270,7 @@
|
|
|
11225
11270
|
"model-gate",
|
|
11226
11271
|
"tool-gate",
|
|
11227
11272
|
"egress-gate",
|
|
11228
|
-
"
|
|
11273
|
+
"sandboxes",
|
|
11229
11274
|
"edge",
|
|
11230
11275
|
"init",
|
|
11231
11276
|
"controller",
|
|
@@ -11427,7 +11472,7 @@
|
|
|
11427
11472
|
"model-gate",
|
|
11428
11473
|
"tool-gate",
|
|
11429
11474
|
"egress-gate",
|
|
11430
|
-
"
|
|
11475
|
+
"sandboxes",
|
|
11431
11476
|
"edge",
|
|
11432
11477
|
"init",
|
|
11433
11478
|
"controller",
|
|
@@ -11634,7 +11679,7 @@
|
|
|
11634
11679
|
"model-gate",
|
|
11635
11680
|
"tool-gate",
|
|
11636
11681
|
"egress-gate",
|
|
11637
|
-
"
|
|
11682
|
+
"sandboxes",
|
|
11638
11683
|
"edge",
|
|
11639
11684
|
"init",
|
|
11640
11685
|
"controller",
|
|
@@ -11856,7 +11901,7 @@
|
|
|
11856
11901
|
"model-gate",
|
|
11857
11902
|
"tool-gate",
|
|
11858
11903
|
"egress-gate",
|
|
11859
|
-
"
|
|
11904
|
+
"sandboxes",
|
|
11860
11905
|
"edge",
|
|
11861
11906
|
"init",
|
|
11862
11907
|
"controller",
|
|
@@ -12027,7 +12072,7 @@
|
|
|
12027
12072
|
"model-gate",
|
|
12028
12073
|
"tool-gate",
|
|
12029
12074
|
"egress-gate",
|
|
12030
|
-
"
|
|
12075
|
+
"sandboxes",
|
|
12031
12076
|
"edge",
|
|
12032
12077
|
"init",
|
|
12033
12078
|
"controller",
|
|
@@ -12216,7 +12261,7 @@
|
|
|
12216
12261
|
"model-gate",
|
|
12217
12262
|
"tool-gate",
|
|
12218
12263
|
"egress-gate",
|
|
12219
|
-
"
|
|
12264
|
+
"sandboxes",
|
|
12220
12265
|
"edge",
|
|
12221
12266
|
"init",
|
|
12222
12267
|
"controller",
|
|
@@ -12405,7 +12450,7 @@
|
|
|
12405
12450
|
"model-gate",
|
|
12406
12451
|
"tool-gate",
|
|
12407
12452
|
"egress-gate",
|
|
12408
|
-
"
|
|
12453
|
+
"sandboxes",
|
|
12409
12454
|
"edge",
|
|
12410
12455
|
"init",
|
|
12411
12456
|
"controller",
|
|
@@ -12615,7 +12660,7 @@
|
|
|
12615
12660
|
"model-gate",
|
|
12616
12661
|
"tool-gate",
|
|
12617
12662
|
"egress-gate",
|
|
12618
|
-
"
|
|
12663
|
+
"sandboxes",
|
|
12619
12664
|
"edge",
|
|
12620
12665
|
"init",
|
|
12621
12666
|
"controller",
|
|
@@ -12810,7 +12855,7 @@
|
|
|
12810
12855
|
"model-gate",
|
|
12811
12856
|
"tool-gate",
|
|
12812
12857
|
"egress-gate",
|
|
12813
|
-
"
|
|
12858
|
+
"sandboxes",
|
|
12814
12859
|
"edge",
|
|
12815
12860
|
"init",
|
|
12816
12861
|
"controller",
|
|
@@ -12992,7 +13037,7 @@
|
|
|
12992
13037
|
"model-gate",
|
|
12993
13038
|
"tool-gate",
|
|
12994
13039
|
"egress-gate",
|
|
12995
|
-
"
|
|
13040
|
+
"sandboxes",
|
|
12996
13041
|
"edge",
|
|
12997
13042
|
"init",
|
|
12998
13043
|
"controller",
|
|
@@ -13159,7 +13204,7 @@
|
|
|
13159
13204
|
"model-gate",
|
|
13160
13205
|
"tool-gate",
|
|
13161
13206
|
"egress-gate",
|
|
13162
|
-
"
|
|
13207
|
+
"sandboxes",
|
|
13163
13208
|
"edge",
|
|
13164
13209
|
"init",
|
|
13165
13210
|
"controller",
|
|
@@ -13337,7 +13382,7 @@
|
|
|
13337
13382
|
"model-gate",
|
|
13338
13383
|
"tool-gate",
|
|
13339
13384
|
"egress-gate",
|
|
13340
|
-
"
|
|
13385
|
+
"sandboxes",
|
|
13341
13386
|
"edge",
|
|
13342
13387
|
"init",
|
|
13343
13388
|
"controller",
|
|
@@ -13517,7 +13562,7 @@
|
|
|
13517
13562
|
"model-gate",
|
|
13518
13563
|
"tool-gate",
|
|
13519
13564
|
"egress-gate",
|
|
13520
|
-
"
|
|
13565
|
+
"sandboxes",
|
|
13521
13566
|
"edge",
|
|
13522
13567
|
"init",
|
|
13523
13568
|
"controller",
|
|
@@ -13697,7 +13742,7 @@
|
|
|
13697
13742
|
"model-gate",
|
|
13698
13743
|
"tool-gate",
|
|
13699
13744
|
"egress-gate",
|
|
13700
|
-
"
|
|
13745
|
+
"sandboxes",
|
|
13701
13746
|
"edge",
|
|
13702
13747
|
"init",
|
|
13703
13748
|
"controller",
|
|
@@ -13876,7 +13921,7 @@
|
|
|
13876
13921
|
"model-gate",
|
|
13877
13922
|
"tool-gate",
|
|
13878
13923
|
"egress-gate",
|
|
13879
|
-
"
|
|
13924
|
+
"sandboxes",
|
|
13880
13925
|
"edge",
|
|
13881
13926
|
"init",
|
|
13882
13927
|
"controller",
|
|
@@ -14092,7 +14137,7 @@
|
|
|
14092
14137
|
"model-gate",
|
|
14093
14138
|
"tool-gate",
|
|
14094
14139
|
"egress-gate",
|
|
14095
|
-
"
|
|
14140
|
+
"sandboxes",
|
|
14096
14141
|
"edge",
|
|
14097
14142
|
"init",
|
|
14098
14143
|
"controller",
|
|
@@ -14308,7 +14353,7 @@
|
|
|
14308
14353
|
"model-gate",
|
|
14309
14354
|
"tool-gate",
|
|
14310
14355
|
"egress-gate",
|
|
14311
|
-
"
|
|
14356
|
+
"sandboxes",
|
|
14312
14357
|
"edge",
|
|
14313
14358
|
"init",
|
|
14314
14359
|
"controller",
|
|
@@ -14479,7 +14524,7 @@
|
|
|
14479
14524
|
"model-gate",
|
|
14480
14525
|
"tool-gate",
|
|
14481
14526
|
"egress-gate",
|
|
14482
|
-
"
|
|
14527
|
+
"sandboxes",
|
|
14483
14528
|
"edge",
|
|
14484
14529
|
"init",
|
|
14485
14530
|
"controller",
|
|
@@ -14667,7 +14712,7 @@
|
|
|
14667
14712
|
"model-gate",
|
|
14668
14713
|
"tool-gate",
|
|
14669
14714
|
"egress-gate",
|
|
14670
|
-
"
|
|
14715
|
+
"sandboxes",
|
|
14671
14716
|
"edge",
|
|
14672
14717
|
"init",
|
|
14673
14718
|
"controller",
|
|
@@ -14838,7 +14883,7 @@
|
|
|
14838
14883
|
"model-gate",
|
|
14839
14884
|
"tool-gate",
|
|
14840
14885
|
"egress-gate",
|
|
14841
|
-
"
|
|
14886
|
+
"sandboxes",
|
|
14842
14887
|
"edge",
|
|
14843
14888
|
"init",
|
|
14844
14889
|
"controller",
|
|
@@ -16573,84 +16618,40 @@
|
|
|
16573
16618
|
"parameters": {}
|
|
16574
16619
|
},
|
|
16575
16620
|
"paths": {
|
|
16576
|
-
"/
|
|
16577
|
-
"
|
|
16578
|
-
"tags": [
|
|
16579
|
-
"Runtime"
|
|
16580
|
-
],
|
|
16581
|
-
"summary": "Check the Runtime",
|
|
16582
|
-
"description": "The protocol range and features a client checks first. Refuses an `Origin`.",
|
|
16583
|
-
"responses": {
|
|
16584
|
-
"200": {
|
|
16585
|
-
"description": "The Runtime is up",
|
|
16586
|
-
"content": {
|
|
16587
|
-
"application/json": {
|
|
16588
|
-
"schema": {
|
|
16589
|
-
"$ref": "#/components/schemas/Health"
|
|
16590
|
-
}
|
|
16591
|
-
}
|
|
16592
|
-
}
|
|
16593
|
-
}
|
|
16594
|
-
}
|
|
16595
|
-
}
|
|
16596
|
-
},
|
|
16597
|
-
"/ready": {
|
|
16598
|
-
"get": {
|
|
16599
|
-
"tags": [
|
|
16600
|
-
"Runtime"
|
|
16601
|
-
],
|
|
16602
|
-
"summary": "Check the Runtime is ready",
|
|
16603
|
-
"description": "The listener, the Tenant (open), Postgres, Restate and S2, and the open Tenant's harnesses.",
|
|
16604
|
-
"responses": {
|
|
16605
|
-
"200": {
|
|
16606
|
-
"description": "Ready",
|
|
16607
|
-
"content": {
|
|
16608
|
-
"application/json": {
|
|
16609
|
-
"schema": {
|
|
16610
|
-
"$ref": "#/components/schemas/Ready"
|
|
16611
|
-
}
|
|
16612
|
-
}
|
|
16613
|
-
}
|
|
16614
|
-
},
|
|
16615
|
-
"503": {
|
|
16616
|
-
"description": "Not ready: `checks` says what is not"
|
|
16617
|
-
}
|
|
16618
|
-
}
|
|
16619
|
-
}
|
|
16620
|
-
},
|
|
16621
|
-
"/v1/me": {
|
|
16622
|
-
"get": {
|
|
16621
|
+
"/v1/agents/{agentId}": {
|
|
16622
|
+
"put": {
|
|
16623
16623
|
"tags": [
|
|
16624
|
-
"
|
|
16624
|
+
"Agents"
|
|
16625
16625
|
],
|
|
16626
|
-
"summary": "
|
|
16627
|
-
"description": "The subject, scopes, agents and sandbox grants of the credential that sends it: an application key (alone or acting for a subject), a management key (`via: management:<principalId>`, no scopes, no agents), or a trusted issuer's token (`via: issuer:<name>`).",
|
|
16626
|
+
"summary": "Put an agent's definition",
|
|
16628
16627
|
"security": [
|
|
16629
16628
|
{
|
|
16630
16629
|
"applicationKey": []
|
|
16631
|
-
},
|
|
16632
|
-
{
|
|
16633
|
-
"managementKey": []
|
|
16634
|
-
},
|
|
16635
|
-
{
|
|
16636
|
-
"issuerToken": []
|
|
16637
16630
|
}
|
|
16638
16631
|
],
|
|
16639
16632
|
"x-nylorun-credentials": [
|
|
16640
16633
|
"application",
|
|
16641
|
-
"subject"
|
|
16642
|
-
|
|
16643
|
-
|
|
16634
|
+
"subject"
|
|
16635
|
+
],
|
|
16636
|
+
"x-nylorun-scopes": [
|
|
16637
|
+
"agents:write"
|
|
16644
16638
|
],
|
|
16645
|
-
"x-nylorun-scopes": "any",
|
|
16646
16639
|
"parameters": [
|
|
16640
|
+
{
|
|
16641
|
+
"schema": {
|
|
16642
|
+
"type": "string"
|
|
16643
|
+
},
|
|
16644
|
+
"required": true,
|
|
16645
|
+
"name": "agentId",
|
|
16646
|
+
"in": "path"
|
|
16647
|
+
},
|
|
16647
16648
|
{
|
|
16648
16649
|
"schema": {
|
|
16649
16650
|
"type": "string",
|
|
16650
|
-
"description": "The protocol version, `
|
|
16651
|
+
"description": "The protocol version, `9`"
|
|
16651
16652
|
},
|
|
16652
16653
|
"required": true,
|
|
16653
|
-
"description": "The protocol version, `
|
|
16654
|
+
"description": "The protocol version, `9`",
|
|
16654
16655
|
"name": "Nylorun-Protocol",
|
|
16655
16656
|
"in": "header"
|
|
16656
16657
|
},
|
|
@@ -16675,13 +16676,23 @@
|
|
|
16675
16676
|
"in": "header"
|
|
16676
16677
|
}
|
|
16677
16678
|
],
|
|
16679
|
+
"requestBody": {
|
|
16680
|
+
"required": true,
|
|
16681
|
+
"content": {
|
|
16682
|
+
"application/json": {
|
|
16683
|
+
"schema": {
|
|
16684
|
+
"$ref": "#/components/schemas/PutAgentRequest"
|
|
16685
|
+
}
|
|
16686
|
+
}
|
|
16687
|
+
}
|
|
16688
|
+
},
|
|
16678
16689
|
"responses": {
|
|
16679
16690
|
"200": {
|
|
16680
|
-
"description": "The
|
|
16691
|
+
"description": "The definition, stored",
|
|
16681
16692
|
"content": {
|
|
16682
16693
|
"application/json": {
|
|
16683
16694
|
"schema": {
|
|
16684
|
-
"$ref": "#/components/schemas/
|
|
16695
|
+
"$ref": "#/components/schemas/PutAgentResponse"
|
|
16685
16696
|
}
|
|
16686
16697
|
}
|
|
16687
16698
|
}
|
|
@@ -16697,7 +16708,7 @@
|
|
|
16697
16708
|
}
|
|
16698
16709
|
},
|
|
16699
16710
|
"401": {
|
|
16700
|
-
"description": "
|
|
16711
|
+
"description": "No credential (`credential_required`), or one the Tenant does not accept (`credential_invalid`), with a `WWW-Authenticate: Bearer` challenge",
|
|
16701
16712
|
"content": {
|
|
16702
16713
|
"application/json": {
|
|
16703
16714
|
"schema": {
|
|
@@ -16707,7 +16718,7 @@
|
|
|
16707
16718
|
}
|
|
16708
16719
|
},
|
|
16709
16720
|
"403": {
|
|
16710
|
-
"description": "Not allowed for this credential, a key of the other API (`key_role_mismatch`),
|
|
16721
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
16711
16722
|
"content": {
|
|
16712
16723
|
"application/json": {
|
|
16713
16724
|
"schema": {
|
|
@@ -16717,7 +16728,7 @@
|
|
|
16717
16728
|
}
|
|
16718
16729
|
},
|
|
16719
16730
|
"404": {
|
|
16720
|
-
"description": "Not found
|
|
16731
|
+
"description": "Not found (`not_found`)",
|
|
16721
16732
|
"content": {
|
|
16722
16733
|
"application/json": {
|
|
16723
16734
|
"schema": {
|
|
@@ -16749,40 +16760,38 @@
|
|
|
16749
16760
|
}
|
|
16750
16761
|
}
|
|
16751
16762
|
},
|
|
16752
|
-
"/v1/
|
|
16763
|
+
"/v1/agents": {
|
|
16753
16764
|
"get": {
|
|
16754
16765
|
"tags": [
|
|
16755
|
-
"
|
|
16766
|
+
"Agents"
|
|
16756
16767
|
],
|
|
16757
|
-
"summary": "
|
|
16758
|
-
"description": "
|
|
16768
|
+
"summary": "List agents",
|
|
16769
|
+
"description": "With an application key, every definition, manifest included. With a trusted issuer's token, only the agents it may use, by name.",
|
|
16759
16770
|
"security": [
|
|
16760
16771
|
{
|
|
16761
16772
|
"applicationKey": []
|
|
16762
16773
|
},
|
|
16763
|
-
{
|
|
16764
|
-
"managementKey": []
|
|
16765
|
-
},
|
|
16766
16774
|
{
|
|
16767
16775
|
"issuerToken": []
|
|
16768
|
-
}
|
|
16769
|
-
{}
|
|
16776
|
+
}
|
|
16770
16777
|
],
|
|
16771
16778
|
"x-nylorun-credentials": [
|
|
16772
16779
|
"application",
|
|
16773
16780
|
"subject",
|
|
16774
|
-
"management",
|
|
16775
16781
|
"token"
|
|
16776
16782
|
],
|
|
16777
|
-
"x-nylorun-scopes":
|
|
16783
|
+
"x-nylorun-scopes": [
|
|
16784
|
+
"agents:read",
|
|
16785
|
+
"agents:write"
|
|
16786
|
+
],
|
|
16778
16787
|
"parameters": [
|
|
16779
16788
|
{
|
|
16780
16789
|
"schema": {
|
|
16781
16790
|
"type": "string",
|
|
16782
|
-
"description": "The protocol version, `
|
|
16791
|
+
"description": "The protocol version, `9`"
|
|
16783
16792
|
},
|
|
16784
16793
|
"required": true,
|
|
16785
|
-
"description": "The protocol version, `
|
|
16794
|
+
"description": "The protocol version, `9`",
|
|
16786
16795
|
"name": "Nylorun-Protocol",
|
|
16787
16796
|
"in": "header"
|
|
16788
16797
|
},
|
|
@@ -16809,11 +16818,18 @@
|
|
|
16809
16818
|
],
|
|
16810
16819
|
"responses": {
|
|
16811
16820
|
"200": {
|
|
16812
|
-
"description": "The
|
|
16821
|
+
"description": "The agents",
|
|
16813
16822
|
"content": {
|
|
16814
16823
|
"application/json": {
|
|
16815
16824
|
"schema": {
|
|
16816
|
-
"
|
|
16825
|
+
"anyOf": [
|
|
16826
|
+
{
|
|
16827
|
+
"$ref": "#/components/schemas/ListAgentsResponse"
|
|
16828
|
+
},
|
|
16829
|
+
{
|
|
16830
|
+
"$ref": "#/components/schemas/ListPublicAgentsResponse"
|
|
16831
|
+
}
|
|
16832
|
+
]
|
|
16817
16833
|
}
|
|
16818
16834
|
}
|
|
16819
16835
|
}
|
|
@@ -16829,7 +16845,7 @@
|
|
|
16829
16845
|
}
|
|
16830
16846
|
},
|
|
16831
16847
|
"401": {
|
|
16832
|
-
"description": "
|
|
16848
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
16833
16849
|
"content": {
|
|
16834
16850
|
"application/json": {
|
|
16835
16851
|
"schema": {
|
|
@@ -16839,7 +16855,7 @@
|
|
|
16839
16855
|
}
|
|
16840
16856
|
},
|
|
16841
16857
|
"403": {
|
|
16842
|
-
"description": "Not allowed for this credential, a key of the other API (`key_role_mismatch`),
|
|
16858
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
16843
16859
|
"content": {
|
|
16844
16860
|
"application/json": {
|
|
16845
16861
|
"schema": {
|
|
@@ -16849,7 +16865,7 @@
|
|
|
16849
16865
|
}
|
|
16850
16866
|
},
|
|
16851
16867
|
"404": {
|
|
16852
|
-
"description": "Not found
|
|
16868
|
+
"description": "Not found (`not_found`)",
|
|
16853
16869
|
"content": {
|
|
16854
16870
|
"application/json": {
|
|
16855
16871
|
"schema": {
|
|
@@ -16881,108 +16897,73 @@
|
|
|
16881
16897
|
}
|
|
16882
16898
|
}
|
|
16883
16899
|
},
|
|
16884
|
-
"/
|
|
16885
|
-
"get": {
|
|
16886
|
-
"tags": [
|
|
16887
|
-
"Runtime"
|
|
16888
|
-
],
|
|
16889
|
-
"summary": "Get the Runtime API's document",
|
|
16890
|
-
"description": "This document. `/openapi.json` is the same.",
|
|
16891
|
-
"responses": {
|
|
16892
|
-
"200": {
|
|
16893
|
-
"description": "The Runtime API's OpenAPI document"
|
|
16894
|
-
}
|
|
16895
|
-
}
|
|
16896
|
-
}
|
|
16897
|
-
},
|
|
16898
|
-
"/openapi.json": {
|
|
16899
|
-
"get": {
|
|
16900
|
-
"tags": [
|
|
16901
|
-
"Runtime"
|
|
16902
|
-
],
|
|
16903
|
-
"summary": "Get the Runtime API's document (alias)",
|
|
16904
|
-
"responses": {
|
|
16905
|
-
"200": {
|
|
16906
|
-
"description": "The Runtime API's OpenAPI document"
|
|
16907
|
-
}
|
|
16908
|
-
}
|
|
16909
|
-
}
|
|
16910
|
-
},
|
|
16911
|
-
"/v1/agents/{agentId}": {
|
|
16900
|
+
"/v1/files/{file}": {
|
|
16912
16901
|
"put": {
|
|
16913
16902
|
"tags": [
|
|
16914
|
-
"
|
|
16903
|
+
"Definition files"
|
|
16915
16904
|
],
|
|
16916
|
-
"summary": "
|
|
16905
|
+
"summary": "Upload a definition file",
|
|
16906
|
+
"description": "Stores the body, at most 10485760 bytes, at the SHA-256 the path names; a body with another hash stores nothing (`400`). A file the Tenant holds already is kept as it is (`200`).",
|
|
16917
16907
|
"security": [
|
|
16918
16908
|
{
|
|
16919
16909
|
"applicationKey": []
|
|
16920
16910
|
}
|
|
16921
16911
|
],
|
|
16922
16912
|
"x-nylorun-credentials": [
|
|
16923
|
-
"application"
|
|
16924
|
-
"subject"
|
|
16925
|
-
],
|
|
16926
|
-
"x-nylorun-scopes": [
|
|
16927
|
-
"agents:write"
|
|
16913
|
+
"application"
|
|
16928
16914
|
],
|
|
16915
|
+
"x-nylorun-scopes": "never",
|
|
16929
16916
|
"parameters": [
|
|
16930
16917
|
{
|
|
16931
16918
|
"schema": {
|
|
16932
|
-
"type": "string"
|
|
16919
|
+
"type": "string",
|
|
16920
|
+
"description": "`sha256:` and the SHA-256 of the file's bytes, 64 lowercase hex digits"
|
|
16933
16921
|
},
|
|
16934
16922
|
"required": true,
|
|
16935
|
-
"
|
|
16923
|
+
"description": "`sha256:` and the SHA-256 of the file's bytes, 64 lowercase hex digits",
|
|
16924
|
+
"name": "file",
|
|
16936
16925
|
"in": "path"
|
|
16937
16926
|
},
|
|
16938
16927
|
{
|
|
16939
16928
|
"schema": {
|
|
16940
16929
|
"type": "string",
|
|
16941
|
-
"description": "The protocol version, `
|
|
16930
|
+
"description": "The protocol version, `9`"
|
|
16942
16931
|
},
|
|
16943
16932
|
"required": true,
|
|
16944
|
-
"description": "The protocol version, `
|
|
16933
|
+
"description": "The protocol version, `9`",
|
|
16945
16934
|
"name": "Nylorun-Protocol",
|
|
16946
16935
|
"in": "header"
|
|
16947
|
-
},
|
|
16948
|
-
{
|
|
16949
|
-
"schema": {
|
|
16950
|
-
"type": "string",
|
|
16951
|
-
"description": "The person an application key acts for"
|
|
16952
|
-
},
|
|
16953
|
-
"required": false,
|
|
16954
|
-
"description": "The person an application key acts for",
|
|
16955
|
-
"name": "Nylorun-Subject",
|
|
16956
|
-
"in": "header"
|
|
16957
|
-
},
|
|
16958
|
-
{
|
|
16959
|
-
"schema": {
|
|
16960
|
-
"type": "string",
|
|
16961
|
-
"description": "The subject's space-separated scopes; required with a subject"
|
|
16962
|
-
},
|
|
16963
|
-
"required": false,
|
|
16964
|
-
"description": "The subject's space-separated scopes; required with a subject",
|
|
16965
|
-
"name": "Nylorun-Scopes",
|
|
16966
|
-
"in": "header"
|
|
16967
16936
|
}
|
|
16968
16937
|
],
|
|
16969
16938
|
"requestBody": {
|
|
16970
16939
|
"required": true,
|
|
16940
|
+
"description": "The file's bytes",
|
|
16971
16941
|
"content": {
|
|
16972
|
-
"application/
|
|
16942
|
+
"application/octet-stream": {
|
|
16973
16943
|
"schema": {
|
|
16974
|
-
"
|
|
16944
|
+
"type": "string",
|
|
16945
|
+
"format": "binary"
|
|
16975
16946
|
}
|
|
16976
16947
|
}
|
|
16977
16948
|
}
|
|
16978
16949
|
},
|
|
16979
16950
|
"responses": {
|
|
16980
16951
|
"200": {
|
|
16981
|
-
"description": "The
|
|
16952
|
+
"description": "The Tenant held the file already",
|
|
16982
16953
|
"content": {
|
|
16983
16954
|
"application/json": {
|
|
16984
16955
|
"schema": {
|
|
16985
|
-
"$ref": "#/components/schemas/
|
|
16956
|
+
"$ref": "#/components/schemas/DefinitionFileView"
|
|
16957
|
+
}
|
|
16958
|
+
}
|
|
16959
|
+
}
|
|
16960
|
+
},
|
|
16961
|
+
"201": {
|
|
16962
|
+
"description": "The file, stored",
|
|
16963
|
+
"content": {
|
|
16964
|
+
"application/json": {
|
|
16965
|
+
"schema": {
|
|
16966
|
+
"$ref": "#/components/schemas/DefinitionFileView"
|
|
16986
16967
|
}
|
|
16987
16968
|
}
|
|
16988
16969
|
}
|
|
@@ -16997,8 +16978,18 @@
|
|
|
16997
16978
|
}
|
|
16998
16979
|
}
|
|
16999
16980
|
},
|
|
16981
|
+
"401": {
|
|
16982
|
+
"description": "No credential (`credential_required`), or one the Tenant does not accept (`credential_invalid`), with a `WWW-Authenticate: Bearer` challenge",
|
|
16983
|
+
"content": {
|
|
16984
|
+
"application/json": {
|
|
16985
|
+
"schema": {
|
|
16986
|
+
"$ref": "#/components/schemas/Rejected"
|
|
16987
|
+
}
|
|
16988
|
+
}
|
|
16989
|
+
}
|
|
16990
|
+
},
|
|
17000
16991
|
"403": {
|
|
17001
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
16992
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
17002
16993
|
"content": {
|
|
17003
16994
|
"application/json": {
|
|
17004
16995
|
"schema": {
|
|
@@ -17008,7 +16999,7 @@
|
|
|
17008
16999
|
}
|
|
17009
17000
|
},
|
|
17010
17001
|
"404": {
|
|
17011
|
-
"description": "Not found
|
|
17002
|
+
"description": "Not found (`not_found`)",
|
|
17012
17003
|
"content": {
|
|
17013
17004
|
"application/json": {
|
|
17014
17005
|
"schema": {
|
|
@@ -17017,6 +17008,9 @@
|
|
|
17017
17008
|
}
|
|
17018
17009
|
}
|
|
17019
17010
|
},
|
|
17011
|
+
"413": {
|
|
17012
|
+
"description": "Larger than 10485760 bytes (`limit_exceeded`)"
|
|
17013
|
+
},
|
|
17020
17014
|
"426": {
|
|
17021
17015
|
"description": "`Nylorun-Protocol` missing or unsupported",
|
|
17022
17016
|
"content": {
|
|
@@ -17038,152 +17032,13 @@
|
|
|
17038
17032
|
}
|
|
17039
17033
|
}
|
|
17040
17034
|
}
|
|
17041
|
-
}
|
|
17042
|
-
|
|
17043
|
-
"/v1/agents": {
|
|
17044
|
-
"get": {
|
|
17035
|
+
},
|
|
17036
|
+
"head": {
|
|
17045
17037
|
"tags": [
|
|
17046
|
-
"
|
|
17038
|
+
"Definition files"
|
|
17047
17039
|
],
|
|
17048
|
-
"summary": "
|
|
17049
|
-
"description": "
|
|
17050
|
-
"security": [
|
|
17051
|
-
{
|
|
17052
|
-
"applicationKey": []
|
|
17053
|
-
},
|
|
17054
|
-
{
|
|
17055
|
-
"issuerToken": []
|
|
17056
|
-
}
|
|
17057
|
-
],
|
|
17058
|
-
"x-nylorun-credentials": [
|
|
17059
|
-
"application",
|
|
17060
|
-
"subject",
|
|
17061
|
-
"token"
|
|
17062
|
-
],
|
|
17063
|
-
"x-nylorun-scopes": [
|
|
17064
|
-
"agents:read",
|
|
17065
|
-
"agents:write"
|
|
17066
|
-
],
|
|
17067
|
-
"parameters": [
|
|
17068
|
-
{
|
|
17069
|
-
"schema": {
|
|
17070
|
-
"type": "string",
|
|
17071
|
-
"description": "The protocol version, `8`"
|
|
17072
|
-
},
|
|
17073
|
-
"required": true,
|
|
17074
|
-
"description": "The protocol version, `8`",
|
|
17075
|
-
"name": "Nylorun-Protocol",
|
|
17076
|
-
"in": "header"
|
|
17077
|
-
},
|
|
17078
|
-
{
|
|
17079
|
-
"schema": {
|
|
17080
|
-
"type": "string",
|
|
17081
|
-
"description": "The person an application key acts for"
|
|
17082
|
-
},
|
|
17083
|
-
"required": false,
|
|
17084
|
-
"description": "The person an application key acts for",
|
|
17085
|
-
"name": "Nylorun-Subject",
|
|
17086
|
-
"in": "header"
|
|
17087
|
-
},
|
|
17088
|
-
{
|
|
17089
|
-
"schema": {
|
|
17090
|
-
"type": "string",
|
|
17091
|
-
"description": "The subject's space-separated scopes; required with a subject"
|
|
17092
|
-
},
|
|
17093
|
-
"required": false,
|
|
17094
|
-
"description": "The subject's space-separated scopes; required with a subject",
|
|
17095
|
-
"name": "Nylorun-Scopes",
|
|
17096
|
-
"in": "header"
|
|
17097
|
-
}
|
|
17098
|
-
],
|
|
17099
|
-
"responses": {
|
|
17100
|
-
"200": {
|
|
17101
|
-
"description": "The agents",
|
|
17102
|
-
"content": {
|
|
17103
|
-
"application/json": {
|
|
17104
|
-
"schema": {
|
|
17105
|
-
"anyOf": [
|
|
17106
|
-
{
|
|
17107
|
-
"$ref": "#/components/schemas/ListAgentsResponse"
|
|
17108
|
-
},
|
|
17109
|
-
{
|
|
17110
|
-
"$ref": "#/components/schemas/ListPublicAgentsResponse"
|
|
17111
|
-
}
|
|
17112
|
-
]
|
|
17113
|
-
}
|
|
17114
|
-
}
|
|
17115
|
-
}
|
|
17116
|
-
},
|
|
17117
|
-
"400": {
|
|
17118
|
-
"description": "Invalid headers, path, body or cursor",
|
|
17119
|
-
"content": {
|
|
17120
|
-
"application/json": {
|
|
17121
|
-
"schema": {
|
|
17122
|
-
"$ref": "#/components/schemas/Rejected"
|
|
17123
|
-
}
|
|
17124
|
-
}
|
|
17125
|
-
}
|
|
17126
|
-
},
|
|
17127
|
-
"401": {
|
|
17128
|
-
"description": "The token expired (`token_expired`), or its issuer's keys cannot be fetched now (`issuer_unavailable`)",
|
|
17129
|
-
"content": {
|
|
17130
|
-
"application/json": {
|
|
17131
|
-
"schema": {
|
|
17132
|
-
"$ref": "#/components/schemas/Rejected"
|
|
17133
|
-
}
|
|
17134
|
-
}
|
|
17135
|
-
}
|
|
17136
|
-
},
|
|
17137
|
-
"403": {
|
|
17138
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
17139
|
-
"content": {
|
|
17140
|
-
"application/json": {
|
|
17141
|
-
"schema": {
|
|
17142
|
-
"$ref": "#/components/schemas/Rejected"
|
|
17143
|
-
}
|
|
17144
|
-
}
|
|
17145
|
-
}
|
|
17146
|
-
},
|
|
17147
|
-
"404": {
|
|
17148
|
-
"description": "Not found, or a credential the Tenant does not know (`not_found`)",
|
|
17149
|
-
"content": {
|
|
17150
|
-
"application/json": {
|
|
17151
|
-
"schema": {
|
|
17152
|
-
"$ref": "#/components/schemas/Rejected"
|
|
17153
|
-
}
|
|
17154
|
-
}
|
|
17155
|
-
}
|
|
17156
|
-
},
|
|
17157
|
-
"426": {
|
|
17158
|
-
"description": "`Nylorun-Protocol` missing or unsupported",
|
|
17159
|
-
"content": {
|
|
17160
|
-
"application/json": {
|
|
17161
|
-
"schema": {
|
|
17162
|
-
"$ref": "#/components/schemas/ProtocolRejected"
|
|
17163
|
-
}
|
|
17164
|
-
}
|
|
17165
|
-
}
|
|
17166
|
-
},
|
|
17167
|
-
"503": {
|
|
17168
|
-
"description": "The Tenant's storage or streams are unavailable",
|
|
17169
|
-
"content": {
|
|
17170
|
-
"application/json": {
|
|
17171
|
-
"schema": {
|
|
17172
|
-
"$ref": "#/components/schemas/Rejected"
|
|
17173
|
-
}
|
|
17174
|
-
}
|
|
17175
|
-
}
|
|
17176
|
-
}
|
|
17177
|
-
}
|
|
17178
|
-
}
|
|
17179
|
-
},
|
|
17180
|
-
"/v1/files/{file}": {
|
|
17181
|
-
"put": {
|
|
17182
|
-
"tags": [
|
|
17183
|
-
"Definition files"
|
|
17184
|
-
],
|
|
17185
|
-
"summary": "Upload a definition file",
|
|
17186
|
-
"description": "Stores the body, at most 10485760 bytes, at the SHA-256 the path names; a body with another hash stores nothing (`400`). A file the Tenant holds already is kept as it is (`200`).",
|
|
17040
|
+
"summary": "Whether the Runtime holds a definition file",
|
|
17041
|
+
"description": "`200` when the Tenant holds the file, `404` when it does not: upload it.",
|
|
17187
17042
|
"security": [
|
|
17188
17043
|
{
|
|
17189
17044
|
"applicationKey": []
|
|
@@ -17207,46 +17062,17 @@
|
|
|
17207
17062
|
{
|
|
17208
17063
|
"schema": {
|
|
17209
17064
|
"type": "string",
|
|
17210
|
-
"description": "The protocol version, `
|
|
17065
|
+
"description": "The protocol version, `9`"
|
|
17211
17066
|
},
|
|
17212
17067
|
"required": true,
|
|
17213
|
-
"description": "The protocol version, `
|
|
17068
|
+
"description": "The protocol version, `9`",
|
|
17214
17069
|
"name": "Nylorun-Protocol",
|
|
17215
17070
|
"in": "header"
|
|
17216
17071
|
}
|
|
17217
17072
|
],
|
|
17218
|
-
"requestBody": {
|
|
17219
|
-
"required": true,
|
|
17220
|
-
"description": "The file's bytes",
|
|
17221
|
-
"content": {
|
|
17222
|
-
"application/octet-stream": {
|
|
17223
|
-
"schema": {
|
|
17224
|
-
"type": "string",
|
|
17225
|
-
"format": "binary"
|
|
17226
|
-
}
|
|
17227
|
-
}
|
|
17228
|
-
}
|
|
17229
|
-
},
|
|
17230
17073
|
"responses": {
|
|
17231
17074
|
"200": {
|
|
17232
|
-
"description": "The Tenant
|
|
17233
|
-
"content": {
|
|
17234
|
-
"application/json": {
|
|
17235
|
-
"schema": {
|
|
17236
|
-
"$ref": "#/components/schemas/DefinitionFileView"
|
|
17237
|
-
}
|
|
17238
|
-
}
|
|
17239
|
-
}
|
|
17240
|
-
},
|
|
17241
|
-
"201": {
|
|
17242
|
-
"description": "The file, stored",
|
|
17243
|
-
"content": {
|
|
17244
|
-
"application/json": {
|
|
17245
|
-
"schema": {
|
|
17246
|
-
"$ref": "#/components/schemas/DefinitionFileView"
|
|
17247
|
-
}
|
|
17248
|
-
}
|
|
17249
|
-
}
|
|
17075
|
+
"description": "The Tenant holds the file"
|
|
17250
17076
|
},
|
|
17251
17077
|
"400": {
|
|
17252
17078
|
"description": "Invalid headers, path, body or cursor",
|
|
@@ -17258,94 +17084,8 @@
|
|
|
17258
17084
|
}
|
|
17259
17085
|
}
|
|
17260
17086
|
},
|
|
17261
|
-
"
|
|
17262
|
-
"description": "
|
|
17263
|
-
"content": {
|
|
17264
|
-
"application/json": {
|
|
17265
|
-
"schema": {
|
|
17266
|
-
"$ref": "#/components/schemas/Rejected"
|
|
17267
|
-
}
|
|
17268
|
-
}
|
|
17269
|
-
}
|
|
17270
|
-
},
|
|
17271
|
-
"404": {
|
|
17272
|
-
"description": "Not found, or a credential the Tenant does not know (`not_found`)",
|
|
17273
|
-
"content": {
|
|
17274
|
-
"application/json": {
|
|
17275
|
-
"schema": {
|
|
17276
|
-
"$ref": "#/components/schemas/Rejected"
|
|
17277
|
-
}
|
|
17278
|
-
}
|
|
17279
|
-
}
|
|
17280
|
-
},
|
|
17281
|
-
"413": {
|
|
17282
|
-
"description": "Larger than 10485760 bytes (`limit_exceeded`)"
|
|
17283
|
-
},
|
|
17284
|
-
"426": {
|
|
17285
|
-
"description": "`Nylorun-Protocol` missing or unsupported",
|
|
17286
|
-
"content": {
|
|
17287
|
-
"application/json": {
|
|
17288
|
-
"schema": {
|
|
17289
|
-
"$ref": "#/components/schemas/ProtocolRejected"
|
|
17290
|
-
}
|
|
17291
|
-
}
|
|
17292
|
-
}
|
|
17293
|
-
},
|
|
17294
|
-
"503": {
|
|
17295
|
-
"description": "The Tenant's storage or streams are unavailable",
|
|
17296
|
-
"content": {
|
|
17297
|
-
"application/json": {
|
|
17298
|
-
"schema": {
|
|
17299
|
-
"$ref": "#/components/schemas/Rejected"
|
|
17300
|
-
}
|
|
17301
|
-
}
|
|
17302
|
-
}
|
|
17303
|
-
}
|
|
17304
|
-
}
|
|
17305
|
-
},
|
|
17306
|
-
"head": {
|
|
17307
|
-
"tags": [
|
|
17308
|
-
"Definition files"
|
|
17309
|
-
],
|
|
17310
|
-
"summary": "Whether the Runtime holds a definition file",
|
|
17311
|
-
"description": "`200` when the Tenant holds the file, `404` when it does not: upload it.",
|
|
17312
|
-
"security": [
|
|
17313
|
-
{
|
|
17314
|
-
"applicationKey": []
|
|
17315
|
-
}
|
|
17316
|
-
],
|
|
17317
|
-
"x-nylorun-credentials": [
|
|
17318
|
-
"application"
|
|
17319
|
-
],
|
|
17320
|
-
"x-nylorun-scopes": "never",
|
|
17321
|
-
"parameters": [
|
|
17322
|
-
{
|
|
17323
|
-
"schema": {
|
|
17324
|
-
"type": "string",
|
|
17325
|
-
"description": "`sha256:` and the SHA-256 of the file's bytes, 64 lowercase hex digits"
|
|
17326
|
-
},
|
|
17327
|
-
"required": true,
|
|
17328
|
-
"description": "`sha256:` and the SHA-256 of the file's bytes, 64 lowercase hex digits",
|
|
17329
|
-
"name": "file",
|
|
17330
|
-
"in": "path"
|
|
17331
|
-
},
|
|
17332
|
-
{
|
|
17333
|
-
"schema": {
|
|
17334
|
-
"type": "string",
|
|
17335
|
-
"description": "The protocol version, `8`"
|
|
17336
|
-
},
|
|
17337
|
-
"required": true,
|
|
17338
|
-
"description": "The protocol version, `8`",
|
|
17339
|
-
"name": "Nylorun-Protocol",
|
|
17340
|
-
"in": "header"
|
|
17341
|
-
}
|
|
17342
|
-
],
|
|
17343
|
-
"responses": {
|
|
17344
|
-
"200": {
|
|
17345
|
-
"description": "The Tenant holds the file"
|
|
17346
|
-
},
|
|
17347
|
-
"400": {
|
|
17348
|
-
"description": "Invalid headers, path, body or cursor",
|
|
17087
|
+
"401": {
|
|
17088
|
+
"description": "No credential (`credential_required`), or one the Tenant does not accept (`credential_invalid`), with a `WWW-Authenticate: Bearer` challenge",
|
|
17349
17089
|
"content": {
|
|
17350
17090
|
"application/json": {
|
|
17351
17091
|
"schema": {
|
|
@@ -17355,7 +17095,7 @@
|
|
|
17355
17095
|
}
|
|
17356
17096
|
},
|
|
17357
17097
|
"403": {
|
|
17358
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
17098
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
17359
17099
|
"content": {
|
|
17360
17100
|
"application/json": {
|
|
17361
17101
|
"schema": {
|
|
@@ -17365,7 +17105,7 @@
|
|
|
17365
17105
|
}
|
|
17366
17106
|
},
|
|
17367
17107
|
"404": {
|
|
17368
|
-
"description": "Not found
|
|
17108
|
+
"description": "Not found (`not_found`)",
|
|
17369
17109
|
"content": {
|
|
17370
17110
|
"application/json": {
|
|
17371
17111
|
"schema": {
|
|
@@ -17432,10 +17172,10 @@
|
|
|
17432
17172
|
{
|
|
17433
17173
|
"schema": {
|
|
17434
17174
|
"type": "string",
|
|
17435
|
-
"description": "The protocol version, `
|
|
17175
|
+
"description": "The protocol version, `9`"
|
|
17436
17176
|
},
|
|
17437
17177
|
"required": true,
|
|
17438
|
-
"description": "The protocol version, `
|
|
17178
|
+
"description": "The protocol version, `9`",
|
|
17439
17179
|
"name": "Nylorun-Protocol",
|
|
17440
17180
|
"in": "header"
|
|
17441
17181
|
},
|
|
@@ -17492,7 +17232,7 @@
|
|
|
17492
17232
|
}
|
|
17493
17233
|
},
|
|
17494
17234
|
"401": {
|
|
17495
|
-
"description": "
|
|
17235
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
17496
17236
|
"content": {
|
|
17497
17237
|
"application/json": {
|
|
17498
17238
|
"schema": {
|
|
@@ -17502,7 +17242,7 @@
|
|
|
17502
17242
|
}
|
|
17503
17243
|
},
|
|
17504
17244
|
"403": {
|
|
17505
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
17245
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
17506
17246
|
"content": {
|
|
17507
17247
|
"application/json": {
|
|
17508
17248
|
"schema": {
|
|
@@ -17512,7 +17252,7 @@
|
|
|
17512
17252
|
}
|
|
17513
17253
|
},
|
|
17514
17254
|
"404": {
|
|
17515
|
-
"description": "Not found
|
|
17255
|
+
"description": "Not found (`not_found`)",
|
|
17516
17256
|
"content": {
|
|
17517
17257
|
"application/json": {
|
|
17518
17258
|
"schema": {
|
|
@@ -17579,10 +17319,10 @@
|
|
|
17579
17319
|
{
|
|
17580
17320
|
"schema": {
|
|
17581
17321
|
"type": "string",
|
|
17582
|
-
"description": "The protocol version, `
|
|
17322
|
+
"description": "The protocol version, `9`"
|
|
17583
17323
|
},
|
|
17584
17324
|
"required": true,
|
|
17585
|
-
"description": "The protocol version, `
|
|
17325
|
+
"description": "The protocol version, `9`",
|
|
17586
17326
|
"name": "Nylorun-Protocol",
|
|
17587
17327
|
"in": "header"
|
|
17588
17328
|
},
|
|
@@ -17629,7 +17369,7 @@
|
|
|
17629
17369
|
}
|
|
17630
17370
|
},
|
|
17631
17371
|
"401": {
|
|
17632
|
-
"description": "
|
|
17372
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
17633
17373
|
"content": {
|
|
17634
17374
|
"application/json": {
|
|
17635
17375
|
"schema": {
|
|
@@ -17639,7 +17379,7 @@
|
|
|
17639
17379
|
}
|
|
17640
17380
|
},
|
|
17641
17381
|
"403": {
|
|
17642
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
17382
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
17643
17383
|
"content": {
|
|
17644
17384
|
"application/json": {
|
|
17645
17385
|
"schema": {
|
|
@@ -17649,7 +17389,7 @@
|
|
|
17649
17389
|
}
|
|
17650
17390
|
},
|
|
17651
17391
|
"404": {
|
|
17652
|
-
"description": "Not found
|
|
17392
|
+
"description": "Not found (`not_found`)",
|
|
17653
17393
|
"content": {
|
|
17654
17394
|
"application/json": {
|
|
17655
17395
|
"schema": {
|
|
@@ -17769,10 +17509,10 @@
|
|
|
17769
17509
|
{
|
|
17770
17510
|
"schema": {
|
|
17771
17511
|
"type": "string",
|
|
17772
|
-
"description": "The protocol version, `
|
|
17512
|
+
"description": "The protocol version, `9`"
|
|
17773
17513
|
},
|
|
17774
17514
|
"required": true,
|
|
17775
|
-
"description": "The protocol version, `
|
|
17515
|
+
"description": "The protocol version, `9`",
|
|
17776
17516
|
"name": "Nylorun-Protocol",
|
|
17777
17517
|
"in": "header"
|
|
17778
17518
|
},
|
|
@@ -17826,7 +17566,7 @@
|
|
|
17826
17566
|
}
|
|
17827
17567
|
},
|
|
17828
17568
|
"401": {
|
|
17829
|
-
"description": "
|
|
17569
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
17830
17570
|
"content": {
|
|
17831
17571
|
"application/json": {
|
|
17832
17572
|
"schema": {
|
|
@@ -17836,7 +17576,7 @@
|
|
|
17836
17576
|
}
|
|
17837
17577
|
},
|
|
17838
17578
|
"403": {
|
|
17839
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
17579
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
17840
17580
|
"content": {
|
|
17841
17581
|
"application/json": {
|
|
17842
17582
|
"schema": {
|
|
@@ -17846,7 +17586,7 @@
|
|
|
17846
17586
|
}
|
|
17847
17587
|
},
|
|
17848
17588
|
"404": {
|
|
17849
|
-
"description": "Not found
|
|
17589
|
+
"description": "Not found (`not_found`)",
|
|
17850
17590
|
"content": {
|
|
17851
17591
|
"application/json": {
|
|
17852
17592
|
"schema": {
|
|
@@ -17913,10 +17653,10 @@
|
|
|
17913
17653
|
{
|
|
17914
17654
|
"schema": {
|
|
17915
17655
|
"type": "string",
|
|
17916
|
-
"description": "The protocol version, `
|
|
17656
|
+
"description": "The protocol version, `9`"
|
|
17917
17657
|
},
|
|
17918
17658
|
"required": true,
|
|
17919
|
-
"description": "The protocol version, `
|
|
17659
|
+
"description": "The protocol version, `9`",
|
|
17920
17660
|
"name": "Nylorun-Protocol",
|
|
17921
17661
|
"in": "header"
|
|
17922
17662
|
},
|
|
@@ -17973,7 +17713,7 @@
|
|
|
17973
17713
|
}
|
|
17974
17714
|
},
|
|
17975
17715
|
"401": {
|
|
17976
|
-
"description": "
|
|
17716
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
17977
17717
|
"content": {
|
|
17978
17718
|
"application/json": {
|
|
17979
17719
|
"schema": {
|
|
@@ -17983,7 +17723,7 @@
|
|
|
17983
17723
|
}
|
|
17984
17724
|
},
|
|
17985
17725
|
"403": {
|
|
17986
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
17726
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
17987
17727
|
"content": {
|
|
17988
17728
|
"application/json": {
|
|
17989
17729
|
"schema": {
|
|
@@ -17993,7 +17733,7 @@
|
|
|
17993
17733
|
}
|
|
17994
17734
|
},
|
|
17995
17735
|
"404": {
|
|
17996
|
-
"description": "Not found
|
|
17736
|
+
"description": "Not found (`not_found`)",
|
|
17997
17737
|
"content": {
|
|
17998
17738
|
"application/json": {
|
|
17999
17739
|
"schema": {
|
|
@@ -18073,10 +17813,10 @@
|
|
|
18073
17813
|
{
|
|
18074
17814
|
"schema": {
|
|
18075
17815
|
"type": "string",
|
|
18076
|
-
"description": "The protocol version, `
|
|
17816
|
+
"description": "The protocol version, `9`"
|
|
18077
17817
|
},
|
|
18078
17818
|
"required": true,
|
|
18079
|
-
"description": "The protocol version, `
|
|
17819
|
+
"description": "The protocol version, `9`",
|
|
18080
17820
|
"name": "Nylorun-Protocol",
|
|
18081
17821
|
"in": "header"
|
|
18082
17822
|
},
|
|
@@ -18211,7 +17951,7 @@
|
|
|
18211
17951
|
}
|
|
18212
17952
|
},
|
|
18213
17953
|
"401": {
|
|
18214
|
-
"description": "
|
|
17954
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
18215
17955
|
"content": {
|
|
18216
17956
|
"application/json": {
|
|
18217
17957
|
"schema": {
|
|
@@ -18221,7 +17961,7 @@
|
|
|
18221
17961
|
}
|
|
18222
17962
|
},
|
|
18223
17963
|
"403": {
|
|
18224
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
17964
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
18225
17965
|
"content": {
|
|
18226
17966
|
"application/json": {
|
|
18227
17967
|
"schema": {
|
|
@@ -18231,7 +17971,7 @@
|
|
|
18231
17971
|
}
|
|
18232
17972
|
},
|
|
18233
17973
|
"404": {
|
|
18234
|
-
"description": "Not found
|
|
17974
|
+
"description": "Not found (`not_found`)",
|
|
18235
17975
|
"content": {
|
|
18236
17976
|
"application/json": {
|
|
18237
17977
|
"schema": {
|
|
@@ -18327,10 +18067,10 @@
|
|
|
18327
18067
|
{
|
|
18328
18068
|
"schema": {
|
|
18329
18069
|
"type": "string",
|
|
18330
|
-
"description": "The protocol version, `
|
|
18070
|
+
"description": "The protocol version, `9`"
|
|
18331
18071
|
},
|
|
18332
18072
|
"required": true,
|
|
18333
|
-
"description": "The protocol version, `
|
|
18073
|
+
"description": "The protocol version, `9`",
|
|
18334
18074
|
"name": "Nylorun-Protocol",
|
|
18335
18075
|
"in": "header"
|
|
18336
18076
|
},
|
|
@@ -18384,7 +18124,7 @@
|
|
|
18384
18124
|
}
|
|
18385
18125
|
},
|
|
18386
18126
|
"401": {
|
|
18387
|
-
"description": "
|
|
18127
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
18388
18128
|
"content": {
|
|
18389
18129
|
"application/json": {
|
|
18390
18130
|
"schema": {
|
|
@@ -18394,7 +18134,7 @@
|
|
|
18394
18134
|
}
|
|
18395
18135
|
},
|
|
18396
18136
|
"403": {
|
|
18397
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
18137
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
18398
18138
|
"content": {
|
|
18399
18139
|
"application/json": {
|
|
18400
18140
|
"schema": {
|
|
@@ -18404,7 +18144,7 @@
|
|
|
18404
18144
|
}
|
|
18405
18145
|
},
|
|
18406
18146
|
"404": {
|
|
18407
|
-
"description": "Not found
|
|
18147
|
+
"description": "Not found (`not_found`)",
|
|
18408
18148
|
"content": {
|
|
18409
18149
|
"application/json": {
|
|
18410
18150
|
"schema": {
|
|
@@ -18467,10 +18207,10 @@
|
|
|
18467
18207
|
{
|
|
18468
18208
|
"schema": {
|
|
18469
18209
|
"type": "string",
|
|
18470
|
-
"description": "The protocol version, `
|
|
18210
|
+
"description": "The protocol version, `9`"
|
|
18471
18211
|
},
|
|
18472
18212
|
"required": true,
|
|
18473
|
-
"description": "The protocol version, `
|
|
18213
|
+
"description": "The protocol version, `9`",
|
|
18474
18214
|
"name": "Nylorun-Protocol",
|
|
18475
18215
|
"in": "header"
|
|
18476
18216
|
},
|
|
@@ -18516,8 +18256,18 @@
|
|
|
18516
18256
|
}
|
|
18517
18257
|
}
|
|
18518
18258
|
},
|
|
18259
|
+
"401": {
|
|
18260
|
+
"description": "No credential (`credential_required`), or one the Tenant does not accept (`credential_invalid`), with a `WWW-Authenticate: Bearer` challenge",
|
|
18261
|
+
"content": {
|
|
18262
|
+
"application/json": {
|
|
18263
|
+
"schema": {
|
|
18264
|
+
"$ref": "#/components/schemas/Rejected"
|
|
18265
|
+
}
|
|
18266
|
+
}
|
|
18267
|
+
}
|
|
18268
|
+
},
|
|
18519
18269
|
"403": {
|
|
18520
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
18270
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
18521
18271
|
"content": {
|
|
18522
18272
|
"application/json": {
|
|
18523
18273
|
"schema": {
|
|
@@ -18527,7 +18277,7 @@
|
|
|
18527
18277
|
}
|
|
18528
18278
|
},
|
|
18529
18279
|
"404": {
|
|
18530
|
-
"description": "Not found
|
|
18280
|
+
"description": "Not found (`not_found`)",
|
|
18531
18281
|
"content": {
|
|
18532
18282
|
"application/json": {
|
|
18533
18283
|
"schema": {
|
|
@@ -18594,10 +18344,10 @@
|
|
|
18594
18344
|
{
|
|
18595
18345
|
"schema": {
|
|
18596
18346
|
"type": "string",
|
|
18597
|
-
"description": "The protocol version, `
|
|
18347
|
+
"description": "The protocol version, `9`"
|
|
18598
18348
|
},
|
|
18599
18349
|
"required": true,
|
|
18600
|
-
"description": "The protocol version, `
|
|
18350
|
+
"description": "The protocol version, `9`",
|
|
18601
18351
|
"name": "Nylorun-Protocol",
|
|
18602
18352
|
"in": "header"
|
|
18603
18353
|
}
|
|
@@ -18623,8 +18373,18 @@
|
|
|
18623
18373
|
}
|
|
18624
18374
|
}
|
|
18625
18375
|
},
|
|
18626
|
-
"
|
|
18627
|
-
"description": "
|
|
18376
|
+
"401": {
|
|
18377
|
+
"description": "No credential (`credential_required`), or one the Tenant does not accept (`credential_invalid`), with a `WWW-Authenticate: Bearer` challenge",
|
|
18378
|
+
"content": {
|
|
18379
|
+
"application/json": {
|
|
18380
|
+
"schema": {
|
|
18381
|
+
"$ref": "#/components/schemas/Rejected"
|
|
18382
|
+
}
|
|
18383
|
+
}
|
|
18384
|
+
}
|
|
18385
|
+
},
|
|
18386
|
+
"403": {
|
|
18387
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
18628
18388
|
"content": {
|
|
18629
18389
|
"application/json": {
|
|
18630
18390
|
"schema": {
|
|
@@ -18634,7 +18394,7 @@
|
|
|
18634
18394
|
}
|
|
18635
18395
|
},
|
|
18636
18396
|
"404": {
|
|
18637
|
-
"description": "Not found
|
|
18397
|
+
"description": "Not found (`not_found`)",
|
|
18638
18398
|
"content": {
|
|
18639
18399
|
"application/json": {
|
|
18640
18400
|
"schema": {
|
|
@@ -18720,10 +18480,10 @@
|
|
|
18720
18480
|
{
|
|
18721
18481
|
"schema": {
|
|
18722
18482
|
"type": "string",
|
|
18723
|
-
"description": "The protocol version, `
|
|
18483
|
+
"description": "The protocol version, `9`"
|
|
18724
18484
|
},
|
|
18725
18485
|
"required": true,
|
|
18726
|
-
"description": "The protocol version, `
|
|
18486
|
+
"description": "The protocol version, `9`",
|
|
18727
18487
|
"name": "Nylorun-Protocol",
|
|
18728
18488
|
"in": "header"
|
|
18729
18489
|
}
|
|
@@ -18749,8 +18509,18 @@
|
|
|
18749
18509
|
}
|
|
18750
18510
|
}
|
|
18751
18511
|
},
|
|
18512
|
+
"401": {
|
|
18513
|
+
"description": "No credential (`credential_required`), or one the Tenant does not accept (`credential_invalid`), with a `WWW-Authenticate: Bearer` challenge",
|
|
18514
|
+
"content": {
|
|
18515
|
+
"application/json": {
|
|
18516
|
+
"schema": {
|
|
18517
|
+
"$ref": "#/components/schemas/Rejected"
|
|
18518
|
+
}
|
|
18519
|
+
}
|
|
18520
|
+
}
|
|
18521
|
+
},
|
|
18752
18522
|
"403": {
|
|
18753
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
18523
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
18754
18524
|
"content": {
|
|
18755
18525
|
"application/json": {
|
|
18756
18526
|
"schema": {
|
|
@@ -18760,7 +18530,7 @@
|
|
|
18760
18530
|
}
|
|
18761
18531
|
},
|
|
18762
18532
|
"404": {
|
|
18763
|
-
"description": "Not found
|
|
18533
|
+
"description": "Not found (`not_found`)",
|
|
18764
18534
|
"content": {
|
|
18765
18535
|
"application/json": {
|
|
18766
18536
|
"schema": {
|
|
@@ -18836,10 +18606,10 @@
|
|
|
18836
18606
|
{
|
|
18837
18607
|
"schema": {
|
|
18838
18608
|
"type": "string",
|
|
18839
|
-
"description": "The protocol version, `
|
|
18609
|
+
"description": "The protocol version, `9`"
|
|
18840
18610
|
},
|
|
18841
18611
|
"required": true,
|
|
18842
|
-
"description": "The protocol version, `
|
|
18612
|
+
"description": "The protocol version, `9`",
|
|
18843
18613
|
"name": "Nylorun-Protocol",
|
|
18844
18614
|
"in": "header"
|
|
18845
18615
|
}
|
|
@@ -18878,8 +18648,18 @@
|
|
|
18878
18648
|
}
|
|
18879
18649
|
}
|
|
18880
18650
|
},
|
|
18651
|
+
"401": {
|
|
18652
|
+
"description": "No credential (`credential_required`), or one the Tenant does not accept (`credential_invalid`), with a `WWW-Authenticate: Bearer` challenge",
|
|
18653
|
+
"content": {
|
|
18654
|
+
"application/json": {
|
|
18655
|
+
"schema": {
|
|
18656
|
+
"$ref": "#/components/schemas/Rejected"
|
|
18657
|
+
}
|
|
18658
|
+
}
|
|
18659
|
+
}
|
|
18660
|
+
},
|
|
18881
18661
|
"403": {
|
|
18882
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
18662
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
18883
18663
|
"content": {
|
|
18884
18664
|
"application/json": {
|
|
18885
18665
|
"schema": {
|
|
@@ -18889,7 +18669,7 @@
|
|
|
18889
18669
|
}
|
|
18890
18670
|
},
|
|
18891
18671
|
"404": {
|
|
18892
|
-
"description": "Not found
|
|
18672
|
+
"description": "Not found (`not_found`)",
|
|
18893
18673
|
"content": {
|
|
18894
18674
|
"application/json": {
|
|
18895
18675
|
"schema": {
|
|
@@ -18958,10 +18738,10 @@
|
|
|
18958
18738
|
{
|
|
18959
18739
|
"schema": {
|
|
18960
18740
|
"type": "string",
|
|
18961
|
-
"description": "The protocol version, `
|
|
18741
|
+
"description": "The protocol version, `9`"
|
|
18962
18742
|
},
|
|
18963
18743
|
"required": true,
|
|
18964
|
-
"description": "The protocol version, `
|
|
18744
|
+
"description": "The protocol version, `9`",
|
|
18965
18745
|
"name": "Nylorun-Protocol",
|
|
18966
18746
|
"in": "header"
|
|
18967
18747
|
},
|
|
@@ -19018,7 +18798,7 @@
|
|
|
19018
18798
|
}
|
|
19019
18799
|
},
|
|
19020
18800
|
"401": {
|
|
19021
|
-
"description": "
|
|
18801
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
19022
18802
|
"content": {
|
|
19023
18803
|
"application/json": {
|
|
19024
18804
|
"schema": {
|
|
@@ -19028,7 +18808,7 @@
|
|
|
19028
18808
|
}
|
|
19029
18809
|
},
|
|
19030
18810
|
"403": {
|
|
19031
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
18811
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
19032
18812
|
"content": {
|
|
19033
18813
|
"application/json": {
|
|
19034
18814
|
"schema": {
|
|
@@ -19038,7 +18818,7 @@
|
|
|
19038
18818
|
}
|
|
19039
18819
|
},
|
|
19040
18820
|
"404": {
|
|
19041
|
-
"description": "Not found
|
|
18821
|
+
"description": "Not found (`not_found`)",
|
|
19042
18822
|
"content": {
|
|
19043
18823
|
"application/json": {
|
|
19044
18824
|
"schema": {
|
|
@@ -19130,10 +18910,10 @@
|
|
|
19130
18910
|
{
|
|
19131
18911
|
"schema": {
|
|
19132
18912
|
"type": "string",
|
|
19133
|
-
"description": "The protocol version, `
|
|
18913
|
+
"description": "The protocol version, `9`"
|
|
19134
18914
|
},
|
|
19135
18915
|
"required": true,
|
|
19136
|
-
"description": "The protocol version, `
|
|
18916
|
+
"description": "The protocol version, `9`",
|
|
19137
18917
|
"name": "Nylorun-Protocol",
|
|
19138
18918
|
"in": "header"
|
|
19139
18919
|
},
|
|
@@ -19183,7 +18963,7 @@
|
|
|
19183
18963
|
}
|
|
19184
18964
|
},
|
|
19185
18965
|
"401": {
|
|
19186
|
-
"description": "
|
|
18966
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
19187
18967
|
"content": {
|
|
19188
18968
|
"application/json": {
|
|
19189
18969
|
"schema": {
|
|
@@ -19193,7 +18973,7 @@
|
|
|
19193
18973
|
}
|
|
19194
18974
|
},
|
|
19195
18975
|
"403": {
|
|
19196
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
18976
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
19197
18977
|
"content": {
|
|
19198
18978
|
"application/json": {
|
|
19199
18979
|
"schema": {
|
|
@@ -19203,7 +18983,7 @@
|
|
|
19203
18983
|
}
|
|
19204
18984
|
},
|
|
19205
18985
|
"404": {
|
|
19206
|
-
"description": "Not found
|
|
18986
|
+
"description": "Not found (`not_found`)",
|
|
19207
18987
|
"content": {
|
|
19208
18988
|
"application/json": {
|
|
19209
18989
|
"schema": {
|
|
@@ -19276,10 +19056,10 @@
|
|
|
19276
19056
|
{
|
|
19277
19057
|
"schema": {
|
|
19278
19058
|
"type": "string",
|
|
19279
|
-
"description": "The protocol version, `
|
|
19059
|
+
"description": "The protocol version, `9`"
|
|
19280
19060
|
},
|
|
19281
19061
|
"required": true,
|
|
19282
|
-
"description": "The protocol version, `
|
|
19062
|
+
"description": "The protocol version, `9`",
|
|
19283
19063
|
"name": "Nylorun-Protocol",
|
|
19284
19064
|
"in": "header"
|
|
19285
19065
|
},
|
|
@@ -19329,7 +19109,7 @@
|
|
|
19329
19109
|
}
|
|
19330
19110
|
},
|
|
19331
19111
|
"401": {
|
|
19332
|
-
"description": "
|
|
19112
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
19333
19113
|
"content": {
|
|
19334
19114
|
"application/json": {
|
|
19335
19115
|
"schema": {
|
|
@@ -19339,7 +19119,7 @@
|
|
|
19339
19119
|
}
|
|
19340
19120
|
},
|
|
19341
19121
|
"403": {
|
|
19342
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
19122
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
19343
19123
|
"content": {
|
|
19344
19124
|
"application/json": {
|
|
19345
19125
|
"schema": {
|
|
@@ -19349,7 +19129,7 @@
|
|
|
19349
19129
|
}
|
|
19350
19130
|
},
|
|
19351
19131
|
"404": {
|
|
19352
|
-
"description": "Not found
|
|
19132
|
+
"description": "Not found (`not_found`)",
|
|
19353
19133
|
"content": {
|
|
19354
19134
|
"application/json": {
|
|
19355
19135
|
"schema": {
|
|
@@ -19422,10 +19202,10 @@
|
|
|
19422
19202
|
{
|
|
19423
19203
|
"schema": {
|
|
19424
19204
|
"type": "string",
|
|
19425
|
-
"description": "The protocol version, `
|
|
19205
|
+
"description": "The protocol version, `9`"
|
|
19426
19206
|
},
|
|
19427
19207
|
"required": true,
|
|
19428
|
-
"description": "The protocol version, `
|
|
19208
|
+
"description": "The protocol version, `9`",
|
|
19429
19209
|
"name": "Nylorun-Protocol",
|
|
19430
19210
|
"in": "header"
|
|
19431
19211
|
},
|
|
@@ -19465,7 +19245,7 @@
|
|
|
19465
19245
|
}
|
|
19466
19246
|
},
|
|
19467
19247
|
"401": {
|
|
19468
|
-
"description": "
|
|
19248
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
19469
19249
|
"content": {
|
|
19470
19250
|
"application/json": {
|
|
19471
19251
|
"schema": {
|
|
@@ -19475,7 +19255,7 @@
|
|
|
19475
19255
|
}
|
|
19476
19256
|
},
|
|
19477
19257
|
"403": {
|
|
19478
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
19258
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
19479
19259
|
"content": {
|
|
19480
19260
|
"application/json": {
|
|
19481
19261
|
"schema": {
|
|
@@ -19485,7 +19265,7 @@
|
|
|
19485
19265
|
}
|
|
19486
19266
|
},
|
|
19487
19267
|
"404": {
|
|
19488
|
-
"description": "Not found
|
|
19268
|
+
"description": "Not found (`not_found`)",
|
|
19489
19269
|
"content": {
|
|
19490
19270
|
"application/json": {
|
|
19491
19271
|
"schema": {
|
|
@@ -19556,10 +19336,10 @@
|
|
|
19556
19336
|
{
|
|
19557
19337
|
"schema": {
|
|
19558
19338
|
"type": "string",
|
|
19559
|
-
"description": "The protocol version, `
|
|
19339
|
+
"description": "The protocol version, `9`"
|
|
19560
19340
|
},
|
|
19561
19341
|
"required": true,
|
|
19562
|
-
"description": "The protocol version, `
|
|
19342
|
+
"description": "The protocol version, `9`",
|
|
19563
19343
|
"name": "Nylorun-Protocol",
|
|
19564
19344
|
"in": "header"
|
|
19565
19345
|
},
|
|
@@ -19606,7 +19386,7 @@
|
|
|
19606
19386
|
}
|
|
19607
19387
|
},
|
|
19608
19388
|
"401": {
|
|
19609
|
-
"description": "
|
|
19389
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
19610
19390
|
"content": {
|
|
19611
19391
|
"application/json": {
|
|
19612
19392
|
"schema": {
|
|
@@ -19616,7 +19396,7 @@
|
|
|
19616
19396
|
}
|
|
19617
19397
|
},
|
|
19618
19398
|
"403": {
|
|
19619
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
19399
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
19620
19400
|
"content": {
|
|
19621
19401
|
"application/json": {
|
|
19622
19402
|
"schema": {
|
|
@@ -19626,7 +19406,7 @@
|
|
|
19626
19406
|
}
|
|
19627
19407
|
},
|
|
19628
19408
|
"404": {
|
|
19629
|
-
"description": "Not found
|
|
19409
|
+
"description": "Not found (`not_found`)",
|
|
19630
19410
|
"content": {
|
|
19631
19411
|
"application/json": {
|
|
19632
19412
|
"schema": {
|
|
@@ -19706,10 +19486,10 @@
|
|
|
19706
19486
|
{
|
|
19707
19487
|
"schema": {
|
|
19708
19488
|
"type": "string",
|
|
19709
|
-
"description": "The protocol version, `
|
|
19489
|
+
"description": "The protocol version, `9`"
|
|
19710
19490
|
},
|
|
19711
19491
|
"required": true,
|
|
19712
|
-
"description": "The protocol version, `
|
|
19492
|
+
"description": "The protocol version, `9`",
|
|
19713
19493
|
"name": "Nylorun-Protocol",
|
|
19714
19494
|
"in": "header"
|
|
19715
19495
|
},
|
|
@@ -19766,7 +19546,7 @@
|
|
|
19766
19546
|
}
|
|
19767
19547
|
},
|
|
19768
19548
|
"401": {
|
|
19769
|
-
"description": "
|
|
19549
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
19770
19550
|
"content": {
|
|
19771
19551
|
"application/json": {
|
|
19772
19552
|
"schema": {
|
|
@@ -19776,7 +19556,7 @@
|
|
|
19776
19556
|
}
|
|
19777
19557
|
},
|
|
19778
19558
|
"403": {
|
|
19779
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
19559
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
19780
19560
|
"content": {
|
|
19781
19561
|
"application/json": {
|
|
19782
19562
|
"schema": {
|
|
@@ -19786,7 +19566,7 @@
|
|
|
19786
19566
|
}
|
|
19787
19567
|
},
|
|
19788
19568
|
"404": {
|
|
19789
|
-
"description": "Not found
|
|
19569
|
+
"description": "Not found (`not_found`)",
|
|
19790
19570
|
"content": {
|
|
19791
19571
|
"application/json": {
|
|
19792
19572
|
"schema": {
|
|
@@ -19855,10 +19635,10 @@
|
|
|
19855
19635
|
{
|
|
19856
19636
|
"schema": {
|
|
19857
19637
|
"type": "string",
|
|
19858
|
-
"description": "The protocol version, `
|
|
19638
|
+
"description": "The protocol version, `9`"
|
|
19859
19639
|
},
|
|
19860
19640
|
"required": true,
|
|
19861
|
-
"description": "The protocol version, `
|
|
19641
|
+
"description": "The protocol version, `9`",
|
|
19862
19642
|
"name": "Nylorun-Protocol",
|
|
19863
19643
|
"in": "header"
|
|
19864
19644
|
},
|
|
@@ -19915,7 +19695,7 @@
|
|
|
19915
19695
|
}
|
|
19916
19696
|
},
|
|
19917
19697
|
"401": {
|
|
19918
|
-
"description": "
|
|
19698
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
19919
19699
|
"content": {
|
|
19920
19700
|
"application/json": {
|
|
19921
19701
|
"schema": {
|
|
@@ -19925,7 +19705,7 @@
|
|
|
19925
19705
|
}
|
|
19926
19706
|
},
|
|
19927
19707
|
"403": {
|
|
19928
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
19708
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
19929
19709
|
"content": {
|
|
19930
19710
|
"application/json": {
|
|
19931
19711
|
"schema": {
|
|
@@ -19935,7 +19715,7 @@
|
|
|
19935
19715
|
}
|
|
19936
19716
|
},
|
|
19937
19717
|
"404": {
|
|
19938
|
-
"description": "Not found
|
|
19718
|
+
"description": "Not found (`not_found`)",
|
|
19939
19719
|
"content": {
|
|
19940
19720
|
"application/json": {
|
|
19941
19721
|
"schema": {
|
|
@@ -20006,10 +19786,10 @@
|
|
|
20006
19786
|
{
|
|
20007
19787
|
"schema": {
|
|
20008
19788
|
"type": "string",
|
|
20009
|
-
"description": "The protocol version, `
|
|
19789
|
+
"description": "The protocol version, `9`"
|
|
20010
19790
|
},
|
|
20011
19791
|
"required": true,
|
|
20012
|
-
"description": "The protocol version, `
|
|
19792
|
+
"description": "The protocol version, `9`",
|
|
20013
19793
|
"name": "Nylorun-Protocol",
|
|
20014
19794
|
"in": "header"
|
|
20015
19795
|
},
|
|
@@ -20056,7 +19836,7 @@
|
|
|
20056
19836
|
}
|
|
20057
19837
|
},
|
|
20058
19838
|
"401": {
|
|
20059
|
-
"description": "
|
|
19839
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
20060
19840
|
"content": {
|
|
20061
19841
|
"application/json": {
|
|
20062
19842
|
"schema": {
|
|
@@ -20066,7 +19846,7 @@
|
|
|
20066
19846
|
}
|
|
20067
19847
|
},
|
|
20068
19848
|
"403": {
|
|
20069
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
19849
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
20070
19850
|
"content": {
|
|
20071
19851
|
"application/json": {
|
|
20072
19852
|
"schema": {
|
|
@@ -20076,7 +19856,7 @@
|
|
|
20076
19856
|
}
|
|
20077
19857
|
},
|
|
20078
19858
|
"404": {
|
|
20079
|
-
"description": "Not found
|
|
19859
|
+
"description": "Not found (`not_found`)",
|
|
20080
19860
|
"content": {
|
|
20081
19861
|
"application/json": {
|
|
20082
19862
|
"schema": {
|
|
@@ -20143,10 +19923,10 @@
|
|
|
20143
19923
|
{
|
|
20144
19924
|
"schema": {
|
|
20145
19925
|
"type": "string",
|
|
20146
|
-
"description": "The protocol version, `
|
|
19926
|
+
"description": "The protocol version, `9`"
|
|
20147
19927
|
},
|
|
20148
19928
|
"required": true,
|
|
20149
|
-
"description": "The protocol version, `
|
|
19929
|
+
"description": "The protocol version, `9`",
|
|
20150
19930
|
"name": "Nylorun-Protocol",
|
|
20151
19931
|
"in": "header"
|
|
20152
19932
|
},
|
|
@@ -20193,7 +19973,7 @@
|
|
|
20193
19973
|
}
|
|
20194
19974
|
},
|
|
20195
19975
|
"401": {
|
|
20196
|
-
"description": "
|
|
19976
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
20197
19977
|
"content": {
|
|
20198
19978
|
"application/json": {
|
|
20199
19979
|
"schema": {
|
|
@@ -20203,7 +19983,7 @@
|
|
|
20203
19983
|
}
|
|
20204
19984
|
},
|
|
20205
19985
|
"403": {
|
|
20206
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
19986
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
20207
19987
|
"content": {
|
|
20208
19988
|
"application/json": {
|
|
20209
19989
|
"schema": {
|
|
@@ -20213,7 +19993,7 @@
|
|
|
20213
19993
|
}
|
|
20214
19994
|
},
|
|
20215
19995
|
"404": {
|
|
20216
|
-
"description": "Not found
|
|
19996
|
+
"description": "Not found (`not_found`)",
|
|
20217
19997
|
"content": {
|
|
20218
19998
|
"application/json": {
|
|
20219
19999
|
"schema": {
|
|
@@ -20314,10 +20094,10 @@
|
|
|
20314
20094
|
{
|
|
20315
20095
|
"schema": {
|
|
20316
20096
|
"type": "string",
|
|
20317
|
-
"description": "The protocol version, `
|
|
20097
|
+
"description": "The protocol version, `9`"
|
|
20318
20098
|
},
|
|
20319
20099
|
"required": true,
|
|
20320
|
-
"description": "The protocol version, `
|
|
20100
|
+
"description": "The protocol version, `9`",
|
|
20321
20101
|
"name": "Nylorun-Protocol",
|
|
20322
20102
|
"in": "header"
|
|
20323
20103
|
},
|
|
@@ -20371,7 +20151,7 @@
|
|
|
20371
20151
|
}
|
|
20372
20152
|
},
|
|
20373
20153
|
"401": {
|
|
20374
|
-
"description": "
|
|
20154
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
20375
20155
|
"content": {
|
|
20376
20156
|
"application/json": {
|
|
20377
20157
|
"schema": {
|
|
@@ -20381,7 +20161,7 @@
|
|
|
20381
20161
|
}
|
|
20382
20162
|
},
|
|
20383
20163
|
"403": {
|
|
20384
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
20164
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
20385
20165
|
"content": {
|
|
20386
20166
|
"application/json": {
|
|
20387
20167
|
"schema": {
|
|
@@ -20391,7 +20171,7 @@
|
|
|
20391
20171
|
}
|
|
20392
20172
|
},
|
|
20393
20173
|
"404": {
|
|
20394
|
-
"description": "Not found
|
|
20174
|
+
"description": "Not found (`not_found`)",
|
|
20395
20175
|
"content": {
|
|
20396
20176
|
"application/json": {
|
|
20397
20177
|
"schema": {
|
|
@@ -20471,10 +20251,10 @@
|
|
|
20471
20251
|
{
|
|
20472
20252
|
"schema": {
|
|
20473
20253
|
"type": "string",
|
|
20474
|
-
"description": "The protocol version, `
|
|
20254
|
+
"description": "The protocol version, `9`"
|
|
20475
20255
|
},
|
|
20476
20256
|
"required": true,
|
|
20477
|
-
"description": "The protocol version, `
|
|
20257
|
+
"description": "The protocol version, `9`",
|
|
20478
20258
|
"name": "Nylorun-Protocol",
|
|
20479
20259
|
"in": "header"
|
|
20480
20260
|
},
|
|
@@ -20521,7 +20301,7 @@
|
|
|
20521
20301
|
}
|
|
20522
20302
|
},
|
|
20523
20303
|
"401": {
|
|
20524
|
-
"description": "
|
|
20304
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
20525
20305
|
"content": {
|
|
20526
20306
|
"application/json": {
|
|
20527
20307
|
"schema": {
|
|
@@ -20531,7 +20311,7 @@
|
|
|
20531
20311
|
}
|
|
20532
20312
|
},
|
|
20533
20313
|
"403": {
|
|
20534
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
20314
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
20535
20315
|
"content": {
|
|
20536
20316
|
"application/json": {
|
|
20537
20317
|
"schema": {
|
|
@@ -20541,7 +20321,7 @@
|
|
|
20541
20321
|
}
|
|
20542
20322
|
},
|
|
20543
20323
|
"404": {
|
|
20544
|
-
"description": "Not found
|
|
20324
|
+
"description": "Not found (`not_found`)",
|
|
20545
20325
|
"content": {
|
|
20546
20326
|
"application/json": {
|
|
20547
20327
|
"schema": {
|
|
@@ -20610,10 +20390,10 @@
|
|
|
20610
20390
|
{
|
|
20611
20391
|
"schema": {
|
|
20612
20392
|
"type": "string",
|
|
20613
|
-
"description": "The protocol version, `
|
|
20393
|
+
"description": "The protocol version, `9`"
|
|
20614
20394
|
},
|
|
20615
20395
|
"required": true,
|
|
20616
|
-
"description": "The protocol version, `
|
|
20396
|
+
"description": "The protocol version, `9`",
|
|
20617
20397
|
"name": "Nylorun-Protocol",
|
|
20618
20398
|
"in": "header"
|
|
20619
20399
|
},
|
|
@@ -20653,7 +20433,7 @@
|
|
|
20653
20433
|
"description": "The sandbox is virtual"
|
|
20654
20434
|
},
|
|
20655
20435
|
"401": {
|
|
20656
|
-
"description": "
|
|
20436
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
20657
20437
|
"content": {
|
|
20658
20438
|
"application/json": {
|
|
20659
20439
|
"schema": {
|
|
@@ -20663,7 +20443,7 @@
|
|
|
20663
20443
|
}
|
|
20664
20444
|
},
|
|
20665
20445
|
"403": {
|
|
20666
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
20446
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
20667
20447
|
"content": {
|
|
20668
20448
|
"application/json": {
|
|
20669
20449
|
"schema": {
|
|
@@ -20673,7 +20453,7 @@
|
|
|
20673
20453
|
}
|
|
20674
20454
|
},
|
|
20675
20455
|
"404": {
|
|
20676
|
-
"description": "Not found
|
|
20456
|
+
"description": "Not found (`not_found`)",
|
|
20677
20457
|
"content": {
|
|
20678
20458
|
"application/json": {
|
|
20679
20459
|
"schema": {
|
|
@@ -20745,10 +20525,10 @@
|
|
|
20745
20525
|
{
|
|
20746
20526
|
"schema": {
|
|
20747
20527
|
"type": "string",
|
|
20748
|
-
"description": "The protocol version, `
|
|
20528
|
+
"description": "The protocol version, `9`"
|
|
20749
20529
|
},
|
|
20750
20530
|
"required": true,
|
|
20751
|
-
"description": "The protocol version, `
|
|
20531
|
+
"description": "The protocol version, `9`",
|
|
20752
20532
|
"name": "Nylorun-Protocol",
|
|
20753
20533
|
"in": "header"
|
|
20754
20534
|
},
|
|
@@ -20788,7 +20568,7 @@
|
|
|
20788
20568
|
"description": "The sandbox is virtual"
|
|
20789
20569
|
},
|
|
20790
20570
|
"401": {
|
|
20791
|
-
"description": "
|
|
20571
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
20792
20572
|
"content": {
|
|
20793
20573
|
"application/json": {
|
|
20794
20574
|
"schema": {
|
|
@@ -20798,7 +20578,7 @@
|
|
|
20798
20578
|
}
|
|
20799
20579
|
},
|
|
20800
20580
|
"403": {
|
|
20801
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
20581
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
20802
20582
|
"content": {
|
|
20803
20583
|
"application/json": {
|
|
20804
20584
|
"schema": {
|
|
@@ -20808,7 +20588,7 @@
|
|
|
20808
20588
|
}
|
|
20809
20589
|
},
|
|
20810
20590
|
"404": {
|
|
20811
|
-
"description": "Not found
|
|
20591
|
+
"description": "Not found (`not_found`)",
|
|
20812
20592
|
"content": {
|
|
20813
20593
|
"application/json": {
|
|
20814
20594
|
"schema": {
|
|
@@ -20910,10 +20690,10 @@
|
|
|
20910
20690
|
{
|
|
20911
20691
|
"schema": {
|
|
20912
20692
|
"type": "string",
|
|
20913
|
-
"description": "The protocol version, `
|
|
20693
|
+
"description": "The protocol version, `9`"
|
|
20914
20694
|
},
|
|
20915
20695
|
"required": true,
|
|
20916
|
-
"description": "The protocol version, `
|
|
20696
|
+
"description": "The protocol version, `9`",
|
|
20917
20697
|
"name": "Nylorun-Protocol",
|
|
20918
20698
|
"in": "header"
|
|
20919
20699
|
},
|
|
@@ -20972,7 +20752,7 @@
|
|
|
20972
20752
|
}
|
|
20973
20753
|
},
|
|
20974
20754
|
"401": {
|
|
20975
|
-
"description": "
|
|
20755
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
20976
20756
|
"content": {
|
|
20977
20757
|
"application/json": {
|
|
20978
20758
|
"schema": {
|
|
@@ -20982,7 +20762,7 @@
|
|
|
20982
20762
|
}
|
|
20983
20763
|
},
|
|
20984
20764
|
"403": {
|
|
20985
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
20765
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
20986
20766
|
"content": {
|
|
20987
20767
|
"application/json": {
|
|
20988
20768
|
"schema": {
|
|
@@ -20992,7 +20772,7 @@
|
|
|
20992
20772
|
}
|
|
20993
20773
|
},
|
|
20994
20774
|
"404": {
|
|
20995
|
-
"description": "Not found
|
|
20775
|
+
"description": "Not found (`not_found`)",
|
|
20996
20776
|
"content": {
|
|
20997
20777
|
"application/json": {
|
|
20998
20778
|
"schema": {
|
|
@@ -21062,10 +20842,10 @@
|
|
|
21062
20842
|
{
|
|
21063
20843
|
"schema": {
|
|
21064
20844
|
"type": "string",
|
|
21065
|
-
"description": "The protocol version, `
|
|
20845
|
+
"description": "The protocol version, `9`"
|
|
21066
20846
|
},
|
|
21067
20847
|
"required": true,
|
|
21068
|
-
"description": "The protocol version, `
|
|
20848
|
+
"description": "The protocol version, `9`",
|
|
21069
20849
|
"name": "Nylorun-Protocol",
|
|
21070
20850
|
"in": "header"
|
|
21071
20851
|
},
|
|
@@ -21112,7 +20892,7 @@
|
|
|
21112
20892
|
}
|
|
21113
20893
|
},
|
|
21114
20894
|
"401": {
|
|
21115
|
-
"description": "
|
|
20895
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
21116
20896
|
"content": {
|
|
21117
20897
|
"application/json": {
|
|
21118
20898
|
"schema": {
|
|
@@ -21122,7 +20902,7 @@
|
|
|
21122
20902
|
}
|
|
21123
20903
|
},
|
|
21124
20904
|
"403": {
|
|
21125
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
20905
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
21126
20906
|
"content": {
|
|
21127
20907
|
"application/json": {
|
|
21128
20908
|
"schema": {
|
|
@@ -21132,7 +20912,7 @@
|
|
|
21132
20912
|
}
|
|
21133
20913
|
},
|
|
21134
20914
|
"404": {
|
|
21135
|
-
"description": "Not found
|
|
20915
|
+
"description": "Not found (`not_found`)",
|
|
21136
20916
|
"content": {
|
|
21137
20917
|
"application/json": {
|
|
21138
20918
|
"schema": {
|
|
@@ -21199,10 +20979,10 @@
|
|
|
21199
20979
|
{
|
|
21200
20980
|
"schema": {
|
|
21201
20981
|
"type": "string",
|
|
21202
|
-
"description": "The protocol version, `
|
|
20982
|
+
"description": "The protocol version, `9`"
|
|
21203
20983
|
},
|
|
21204
20984
|
"required": true,
|
|
21205
|
-
"description": "The protocol version, `
|
|
20985
|
+
"description": "The protocol version, `9`",
|
|
21206
20986
|
"name": "Nylorun-Protocol",
|
|
21207
20987
|
"in": "header"
|
|
21208
20988
|
},
|
|
@@ -21249,7 +21029,7 @@
|
|
|
21249
21029
|
}
|
|
21250
21030
|
},
|
|
21251
21031
|
"401": {
|
|
21252
|
-
"description": "
|
|
21032
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
21253
21033
|
"content": {
|
|
21254
21034
|
"application/json": {
|
|
21255
21035
|
"schema": {
|
|
@@ -21259,7 +21039,7 @@
|
|
|
21259
21039
|
}
|
|
21260
21040
|
},
|
|
21261
21041
|
"403": {
|
|
21262
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
21042
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
21263
21043
|
"content": {
|
|
21264
21044
|
"application/json": {
|
|
21265
21045
|
"schema": {
|
|
@@ -21269,7 +21049,7 @@
|
|
|
21269
21049
|
}
|
|
21270
21050
|
},
|
|
21271
21051
|
"404": {
|
|
21272
|
-
"description": "Not found
|
|
21052
|
+
"description": "Not found (`not_found`)",
|
|
21273
21053
|
"content": {
|
|
21274
21054
|
"application/json": {
|
|
21275
21055
|
"schema": {
|
|
@@ -21334,10 +21114,10 @@
|
|
|
21334
21114
|
{
|
|
21335
21115
|
"schema": {
|
|
21336
21116
|
"type": "string",
|
|
21337
|
-
"description": "The protocol version, `
|
|
21117
|
+
"description": "The protocol version, `9`"
|
|
21338
21118
|
},
|
|
21339
21119
|
"required": true,
|
|
21340
|
-
"description": "The protocol version, `
|
|
21120
|
+
"description": "The protocol version, `9`",
|
|
21341
21121
|
"name": "Nylorun-Protocol",
|
|
21342
21122
|
"in": "header"
|
|
21343
21123
|
},
|
|
@@ -21384,7 +21164,7 @@
|
|
|
21384
21164
|
}
|
|
21385
21165
|
},
|
|
21386
21166
|
"401": {
|
|
21387
|
-
"description": "
|
|
21167
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
21388
21168
|
"content": {
|
|
21389
21169
|
"application/json": {
|
|
21390
21170
|
"schema": {
|
|
@@ -21394,7 +21174,7 @@
|
|
|
21394
21174
|
}
|
|
21395
21175
|
},
|
|
21396
21176
|
"403": {
|
|
21397
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
21177
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
21398
21178
|
"content": {
|
|
21399
21179
|
"application/json": {
|
|
21400
21180
|
"schema": {
|
|
@@ -21404,7 +21184,7 @@
|
|
|
21404
21184
|
}
|
|
21405
21185
|
},
|
|
21406
21186
|
"404": {
|
|
21407
|
-
"description": "Not found
|
|
21187
|
+
"description": "Not found (`not_found`)",
|
|
21408
21188
|
"content": {
|
|
21409
21189
|
"application/json": {
|
|
21410
21190
|
"schema": {
|
|
@@ -21471,10 +21251,10 @@
|
|
|
21471
21251
|
{
|
|
21472
21252
|
"schema": {
|
|
21473
21253
|
"type": "string",
|
|
21474
|
-
"description": "The protocol version, `
|
|
21254
|
+
"description": "The protocol version, `9`"
|
|
21475
21255
|
},
|
|
21476
21256
|
"required": true,
|
|
21477
|
-
"description": "The protocol version, `
|
|
21257
|
+
"description": "The protocol version, `9`",
|
|
21478
21258
|
"name": "Nylorun-Protocol",
|
|
21479
21259
|
"in": "header"
|
|
21480
21260
|
},
|
|
@@ -21533,7 +21313,7 @@
|
|
|
21533
21313
|
}
|
|
21534
21314
|
},
|
|
21535
21315
|
"401": {
|
|
21536
|
-
"description": "
|
|
21316
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
21537
21317
|
"content": {
|
|
21538
21318
|
"application/json": {
|
|
21539
21319
|
"schema": {
|
|
@@ -21543,7 +21323,7 @@
|
|
|
21543
21323
|
}
|
|
21544
21324
|
},
|
|
21545
21325
|
"403": {
|
|
21546
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
21326
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
21547
21327
|
"content": {
|
|
21548
21328
|
"application/json": {
|
|
21549
21329
|
"schema": {
|
|
@@ -21553,7 +21333,7 @@
|
|
|
21553
21333
|
}
|
|
21554
21334
|
},
|
|
21555
21335
|
"404": {
|
|
21556
|
-
"description": "Not found
|
|
21336
|
+
"description": "Not found (`not_found`)",
|
|
21557
21337
|
"content": {
|
|
21558
21338
|
"application/json": {
|
|
21559
21339
|
"schema": {
|
|
@@ -21633,10 +21413,10 @@
|
|
|
21633
21413
|
{
|
|
21634
21414
|
"schema": {
|
|
21635
21415
|
"type": "string",
|
|
21636
|
-
"description": "The protocol version, `
|
|
21416
|
+
"description": "The protocol version, `9`"
|
|
21637
21417
|
},
|
|
21638
21418
|
"required": true,
|
|
21639
|
-
"description": "The protocol version, `
|
|
21419
|
+
"description": "The protocol version, `9`",
|
|
21640
21420
|
"name": "Nylorun-Protocol",
|
|
21641
21421
|
"in": "header"
|
|
21642
21422
|
},
|
|
@@ -21747,7 +21527,7 @@
|
|
|
21747
21527
|
}
|
|
21748
21528
|
},
|
|
21749
21529
|
"401": {
|
|
21750
|
-
"description": "
|
|
21530
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
21751
21531
|
"content": {
|
|
21752
21532
|
"application/json": {
|
|
21753
21533
|
"schema": {
|
|
@@ -21757,7 +21537,7 @@
|
|
|
21757
21537
|
}
|
|
21758
21538
|
},
|
|
21759
21539
|
"403": {
|
|
21760
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
21540
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
21761
21541
|
"content": {
|
|
21762
21542
|
"application/json": {
|
|
21763
21543
|
"schema": {
|
|
@@ -21767,7 +21547,7 @@
|
|
|
21767
21547
|
}
|
|
21768
21548
|
},
|
|
21769
21549
|
"404": {
|
|
21770
|
-
"description": "Not found
|
|
21550
|
+
"description": "Not found (`not_found`)",
|
|
21771
21551
|
"content": {
|
|
21772
21552
|
"application/json": {
|
|
21773
21553
|
"schema": {
|
|
@@ -21847,10 +21627,10 @@
|
|
|
21847
21627
|
{
|
|
21848
21628
|
"schema": {
|
|
21849
21629
|
"type": "string",
|
|
21850
|
-
"description": "The protocol version, `
|
|
21630
|
+
"description": "The protocol version, `9`"
|
|
21851
21631
|
},
|
|
21852
21632
|
"required": true,
|
|
21853
|
-
"description": "The protocol version, `
|
|
21633
|
+
"description": "The protocol version, `9`",
|
|
21854
21634
|
"name": "Nylorun-Protocol",
|
|
21855
21635
|
"in": "header"
|
|
21856
21636
|
},
|
|
@@ -21897,7 +21677,7 @@
|
|
|
21897
21677
|
}
|
|
21898
21678
|
},
|
|
21899
21679
|
"401": {
|
|
21900
|
-
"description": "
|
|
21680
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
21901
21681
|
"content": {
|
|
21902
21682
|
"application/json": {
|
|
21903
21683
|
"schema": {
|
|
@@ -21907,7 +21687,7 @@
|
|
|
21907
21687
|
}
|
|
21908
21688
|
},
|
|
21909
21689
|
"403": {
|
|
21910
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
21690
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
21911
21691
|
"content": {
|
|
21912
21692
|
"application/json": {
|
|
21913
21693
|
"schema": {
|
|
@@ -21917,7 +21697,7 @@
|
|
|
21917
21697
|
}
|
|
21918
21698
|
},
|
|
21919
21699
|
"404": {
|
|
21920
|
-
"description": "Not found
|
|
21700
|
+
"description": "Not found (`not_found`)",
|
|
21921
21701
|
"content": {
|
|
21922
21702
|
"application/json": {
|
|
21923
21703
|
"schema": {
|
|
@@ -22004,10 +21784,10 @@
|
|
|
22004
21784
|
{
|
|
22005
21785
|
"schema": {
|
|
22006
21786
|
"type": "string",
|
|
22007
|
-
"description": "The protocol version, `
|
|
21787
|
+
"description": "The protocol version, `9`"
|
|
22008
21788
|
},
|
|
22009
21789
|
"required": true,
|
|
22010
|
-
"description": "The protocol version, `
|
|
21790
|
+
"description": "The protocol version, `9`",
|
|
22011
21791
|
"name": "Nylorun-Protocol",
|
|
22012
21792
|
"in": "header"
|
|
22013
21793
|
},
|
|
@@ -22118,7 +21898,7 @@
|
|
|
22118
21898
|
}
|
|
22119
21899
|
},
|
|
22120
21900
|
"401": {
|
|
22121
|
-
"description": "
|
|
21901
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
22122
21902
|
"content": {
|
|
22123
21903
|
"application/json": {
|
|
22124
21904
|
"schema": {
|
|
@@ -22128,7 +21908,7 @@
|
|
|
22128
21908
|
}
|
|
22129
21909
|
},
|
|
22130
21910
|
"403": {
|
|
22131
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
21911
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
22132
21912
|
"content": {
|
|
22133
21913
|
"application/json": {
|
|
22134
21914
|
"schema": {
|
|
@@ -22138,7 +21918,7 @@
|
|
|
22138
21918
|
}
|
|
22139
21919
|
},
|
|
22140
21920
|
"404": {
|
|
22141
|
-
"description": "Not found
|
|
21921
|
+
"description": "Not found (`not_found`)",
|
|
22142
21922
|
"content": {
|
|
22143
21923
|
"application/json": {
|
|
22144
21924
|
"schema": {
|
|
@@ -22228,10 +22008,10 @@
|
|
|
22228
22008
|
{
|
|
22229
22009
|
"schema": {
|
|
22230
22010
|
"type": "string",
|
|
22231
|
-
"description": "The protocol version, `
|
|
22011
|
+
"description": "The protocol version, `9`"
|
|
22232
22012
|
},
|
|
22233
22013
|
"required": true,
|
|
22234
|
-
"description": "The protocol version, `
|
|
22014
|
+
"description": "The protocol version, `9`",
|
|
22235
22015
|
"name": "Nylorun-Protocol",
|
|
22236
22016
|
"in": "header"
|
|
22237
22017
|
},
|
|
@@ -22278,7 +22058,7 @@
|
|
|
22278
22058
|
}
|
|
22279
22059
|
},
|
|
22280
22060
|
"401": {
|
|
22281
|
-
"description": "
|
|
22061
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
22282
22062
|
"content": {
|
|
22283
22063
|
"application/json": {
|
|
22284
22064
|
"schema": {
|
|
@@ -22288,7 +22068,7 @@
|
|
|
22288
22068
|
}
|
|
22289
22069
|
},
|
|
22290
22070
|
"403": {
|
|
22291
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
22071
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
22292
22072
|
"content": {
|
|
22293
22073
|
"application/json": {
|
|
22294
22074
|
"schema": {
|
|
@@ -22298,7 +22078,7 @@
|
|
|
22298
22078
|
}
|
|
22299
22079
|
},
|
|
22300
22080
|
"404": {
|
|
22301
|
-
"description": "Not found
|
|
22081
|
+
"description": "Not found (`not_found`)",
|
|
22302
22082
|
"content": {
|
|
22303
22083
|
"application/json": {
|
|
22304
22084
|
"schema": {
|
|
@@ -22375,10 +22155,10 @@
|
|
|
22375
22155
|
{
|
|
22376
22156
|
"schema": {
|
|
22377
22157
|
"type": "string",
|
|
22378
|
-
"description": "The protocol version, `
|
|
22158
|
+
"description": "The protocol version, `9`"
|
|
22379
22159
|
},
|
|
22380
22160
|
"required": true,
|
|
22381
|
-
"description": "The protocol version, `
|
|
22161
|
+
"description": "The protocol version, `9`",
|
|
22382
22162
|
"name": "Nylorun-Protocol",
|
|
22383
22163
|
"in": "header"
|
|
22384
22164
|
},
|
|
@@ -22426,7 +22206,7 @@
|
|
|
22426
22206
|
}
|
|
22427
22207
|
},
|
|
22428
22208
|
"401": {
|
|
22429
|
-
"description": "
|
|
22209
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
22430
22210
|
"content": {
|
|
22431
22211
|
"application/json": {
|
|
22432
22212
|
"schema": {
|
|
@@ -22436,7 +22216,7 @@
|
|
|
22436
22216
|
}
|
|
22437
22217
|
},
|
|
22438
22218
|
"403": {
|
|
22439
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
22219
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
22440
22220
|
"content": {
|
|
22441
22221
|
"application/json": {
|
|
22442
22222
|
"schema": {
|
|
@@ -22446,7 +22226,7 @@
|
|
|
22446
22226
|
}
|
|
22447
22227
|
},
|
|
22448
22228
|
"404": {
|
|
22449
|
-
"description": "Not found
|
|
22229
|
+
"description": "Not found (`not_found`)",
|
|
22450
22230
|
"content": {
|
|
22451
22231
|
"application/json": {
|
|
22452
22232
|
"schema": {
|
|
@@ -22513,10 +22293,10 @@
|
|
|
22513
22293
|
{
|
|
22514
22294
|
"schema": {
|
|
22515
22295
|
"type": "string",
|
|
22516
|
-
"description": "The protocol version, `
|
|
22296
|
+
"description": "The protocol version, `9`"
|
|
22517
22297
|
},
|
|
22518
22298
|
"required": true,
|
|
22519
|
-
"description": "The protocol version, `
|
|
22299
|
+
"description": "The protocol version, `9`",
|
|
22520
22300
|
"name": "Nylorun-Protocol",
|
|
22521
22301
|
"in": "header"
|
|
22522
22302
|
},
|
|
@@ -22573,7 +22353,7 @@
|
|
|
22573
22353
|
}
|
|
22574
22354
|
},
|
|
22575
22355
|
"401": {
|
|
22576
|
-
"description": "
|
|
22356
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
22577
22357
|
"content": {
|
|
22578
22358
|
"application/json": {
|
|
22579
22359
|
"schema": {
|
|
@@ -22583,7 +22363,7 @@
|
|
|
22583
22363
|
}
|
|
22584
22364
|
},
|
|
22585
22365
|
"403": {
|
|
22586
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
22366
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
22587
22367
|
"content": {
|
|
22588
22368
|
"application/json": {
|
|
22589
22369
|
"schema": {
|
|
@@ -22593,7 +22373,7 @@
|
|
|
22593
22373
|
}
|
|
22594
22374
|
},
|
|
22595
22375
|
"404": {
|
|
22596
|
-
"description": "Not found
|
|
22376
|
+
"description": "Not found (`not_found`)",
|
|
22597
22377
|
"content": {
|
|
22598
22378
|
"application/json": {
|
|
22599
22379
|
"schema": {
|
|
@@ -22659,10 +22439,10 @@
|
|
|
22659
22439
|
{
|
|
22660
22440
|
"schema": {
|
|
22661
22441
|
"type": "string",
|
|
22662
|
-
"description": "The protocol version, `
|
|
22442
|
+
"description": "The protocol version, `9`"
|
|
22663
22443
|
},
|
|
22664
22444
|
"required": false,
|
|
22665
|
-
"description": "The protocol version, `
|
|
22445
|
+
"description": "The protocol version, `9`",
|
|
22666
22446
|
"name": "Nylorun-Protocol",
|
|
22667
22447
|
"in": "header"
|
|
22668
22448
|
},
|
|
@@ -22773,7 +22553,7 @@
|
|
|
22773
22553
|
}
|
|
22774
22554
|
},
|
|
22775
22555
|
"401": {
|
|
22776
|
-
"description": "
|
|
22556
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
22777
22557
|
"content": {
|
|
22778
22558
|
"application/json": {
|
|
22779
22559
|
"schema": {
|
|
@@ -22783,7 +22563,7 @@
|
|
|
22783
22563
|
}
|
|
22784
22564
|
},
|
|
22785
22565
|
"403": {
|
|
22786
|
-
"description": "Not allowed for this credential or subject scope, a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
22566
|
+
"description": "Not allowed for this credential or subject scope (`scope_required`; a token also gets `WWW-Authenticate: Bearer error=\"insufficient_scope\"` and the scope), a key of the other API (`key_role_mismatch`), or an application key from a browser (`origin_rejected`)",
|
|
22787
22567
|
"content": {
|
|
22788
22568
|
"application/json": {
|
|
22789
22569
|
"schema": {
|
|
@@ -22793,7 +22573,7 @@
|
|
|
22793
22573
|
}
|
|
22794
22574
|
},
|
|
22795
22575
|
"404": {
|
|
22796
|
-
"description": "Not found
|
|
22576
|
+
"description": "Not found (`not_found`)",
|
|
22797
22577
|
"content": {
|
|
22798
22578
|
"application/json": {
|
|
22799
22579
|
"schema": {
|
|
@@ -22827,14 +22607,356 @@
|
|
|
22827
22607
|
}
|
|
22828
22608
|
}
|
|
22829
22609
|
}
|
|
22610
|
+
},
|
|
22611
|
+
"/health": {
|
|
22612
|
+
"get": {
|
|
22613
|
+
"tags": [
|
|
22614
|
+
"Service"
|
|
22615
|
+
],
|
|
22616
|
+
"summary": "Check the Runtime",
|
|
22617
|
+
"description": "The protocol range and features a client checks first. Refuses an `Origin`.",
|
|
22618
|
+
"responses": {
|
|
22619
|
+
"200": {
|
|
22620
|
+
"description": "The Runtime is up",
|
|
22621
|
+
"content": {
|
|
22622
|
+
"application/json": {
|
|
22623
|
+
"schema": {
|
|
22624
|
+
"$ref": "#/components/schemas/Health"
|
|
22625
|
+
}
|
|
22626
|
+
}
|
|
22627
|
+
}
|
|
22628
|
+
}
|
|
22629
|
+
}
|
|
22630
|
+
}
|
|
22631
|
+
},
|
|
22632
|
+
"/ready": {
|
|
22633
|
+
"get": {
|
|
22634
|
+
"tags": [
|
|
22635
|
+
"Service"
|
|
22636
|
+
],
|
|
22637
|
+
"summary": "Check the Runtime is ready",
|
|
22638
|
+
"description": "The listener, the Tenant (open), Postgres, Restate and S2, and the open Tenant's harnesses.",
|
|
22639
|
+
"responses": {
|
|
22640
|
+
"200": {
|
|
22641
|
+
"description": "Ready",
|
|
22642
|
+
"content": {
|
|
22643
|
+
"application/json": {
|
|
22644
|
+
"schema": {
|
|
22645
|
+
"$ref": "#/components/schemas/Ready"
|
|
22646
|
+
}
|
|
22647
|
+
}
|
|
22648
|
+
}
|
|
22649
|
+
},
|
|
22650
|
+
"503": {
|
|
22651
|
+
"description": "Not ready: `checks` says what is not"
|
|
22652
|
+
}
|
|
22653
|
+
}
|
|
22654
|
+
}
|
|
22655
|
+
},
|
|
22656
|
+
"/v1/me": {
|
|
22657
|
+
"get": {
|
|
22658
|
+
"tags": [
|
|
22659
|
+
"Service"
|
|
22660
|
+
],
|
|
22661
|
+
"summary": "Get who the caller is",
|
|
22662
|
+
"description": "The subject, scopes, agents and sandbox grants of the credential that sends it: an application key (alone or acting for a subject), a management key (`via: management:<principalId>`, no scopes, no agents), or a trusted issuer's token (`via: issuer:<name>`).",
|
|
22663
|
+
"security": [
|
|
22664
|
+
{
|
|
22665
|
+
"applicationKey": []
|
|
22666
|
+
},
|
|
22667
|
+
{
|
|
22668
|
+
"managementKey": []
|
|
22669
|
+
},
|
|
22670
|
+
{
|
|
22671
|
+
"issuerToken": []
|
|
22672
|
+
}
|
|
22673
|
+
],
|
|
22674
|
+
"x-nylorun-credentials": [
|
|
22675
|
+
"application",
|
|
22676
|
+
"subject",
|
|
22677
|
+
"management",
|
|
22678
|
+
"token"
|
|
22679
|
+
],
|
|
22680
|
+
"x-nylorun-scopes": "any",
|
|
22681
|
+
"parameters": [
|
|
22682
|
+
{
|
|
22683
|
+
"schema": {
|
|
22684
|
+
"type": "string",
|
|
22685
|
+
"description": "The protocol version, `9`"
|
|
22686
|
+
},
|
|
22687
|
+
"required": true,
|
|
22688
|
+
"description": "The protocol version, `9`",
|
|
22689
|
+
"name": "Nylorun-Protocol",
|
|
22690
|
+
"in": "header"
|
|
22691
|
+
},
|
|
22692
|
+
{
|
|
22693
|
+
"schema": {
|
|
22694
|
+
"type": "string",
|
|
22695
|
+
"description": "The person an application key acts for"
|
|
22696
|
+
},
|
|
22697
|
+
"required": false,
|
|
22698
|
+
"description": "The person an application key acts for",
|
|
22699
|
+
"name": "Nylorun-Subject",
|
|
22700
|
+
"in": "header"
|
|
22701
|
+
},
|
|
22702
|
+
{
|
|
22703
|
+
"schema": {
|
|
22704
|
+
"type": "string",
|
|
22705
|
+
"description": "The subject's space-separated scopes; required with a subject"
|
|
22706
|
+
},
|
|
22707
|
+
"required": false,
|
|
22708
|
+
"description": "The subject's space-separated scopes; required with a subject",
|
|
22709
|
+
"name": "Nylorun-Scopes",
|
|
22710
|
+
"in": "header"
|
|
22711
|
+
}
|
|
22712
|
+
],
|
|
22713
|
+
"responses": {
|
|
22714
|
+
"200": {
|
|
22715
|
+
"description": "The caller",
|
|
22716
|
+
"content": {
|
|
22717
|
+
"application/json": {
|
|
22718
|
+
"schema": {
|
|
22719
|
+
"$ref": "#/components/schemas/MeResponse"
|
|
22720
|
+
}
|
|
22721
|
+
}
|
|
22722
|
+
}
|
|
22723
|
+
},
|
|
22724
|
+
"400": {
|
|
22725
|
+
"description": "Invalid headers, path, body or cursor",
|
|
22726
|
+
"content": {
|
|
22727
|
+
"application/json": {
|
|
22728
|
+
"schema": {
|
|
22729
|
+
"$ref": "#/components/schemas/Rejected"
|
|
22730
|
+
}
|
|
22731
|
+
}
|
|
22732
|
+
}
|
|
22733
|
+
},
|
|
22734
|
+
"401": {
|
|
22735
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
22736
|
+
"content": {
|
|
22737
|
+
"application/json": {
|
|
22738
|
+
"schema": {
|
|
22739
|
+
"$ref": "#/components/schemas/Rejected"
|
|
22740
|
+
}
|
|
22741
|
+
}
|
|
22742
|
+
}
|
|
22743
|
+
},
|
|
22744
|
+
"403": {
|
|
22745
|
+
"description": "Not allowed for this credential, a key of the other API (`key_role_mismatch`), a key from a browser (`origin_rejected`) or a management key acting for a subject",
|
|
22746
|
+
"content": {
|
|
22747
|
+
"application/json": {
|
|
22748
|
+
"schema": {
|
|
22749
|
+
"$ref": "#/components/schemas/Rejected"
|
|
22750
|
+
}
|
|
22751
|
+
}
|
|
22752
|
+
}
|
|
22753
|
+
},
|
|
22754
|
+
"404": {
|
|
22755
|
+
"description": "Not found (`not_found`)",
|
|
22756
|
+
"content": {
|
|
22757
|
+
"application/json": {
|
|
22758
|
+
"schema": {
|
|
22759
|
+
"$ref": "#/components/schemas/Rejected"
|
|
22760
|
+
}
|
|
22761
|
+
}
|
|
22762
|
+
}
|
|
22763
|
+
},
|
|
22764
|
+
"426": {
|
|
22765
|
+
"description": "`Nylorun-Protocol` missing or unsupported",
|
|
22766
|
+
"content": {
|
|
22767
|
+
"application/json": {
|
|
22768
|
+
"schema": {
|
|
22769
|
+
"$ref": "#/components/schemas/ProtocolRejected"
|
|
22770
|
+
}
|
|
22771
|
+
}
|
|
22772
|
+
}
|
|
22773
|
+
},
|
|
22774
|
+
"503": {
|
|
22775
|
+
"description": "The Tenant's storage or streams are unavailable",
|
|
22776
|
+
"content": {
|
|
22777
|
+
"application/json": {
|
|
22778
|
+
"schema": {
|
|
22779
|
+
"$ref": "#/components/schemas/Rejected"
|
|
22780
|
+
}
|
|
22781
|
+
}
|
|
22782
|
+
}
|
|
22783
|
+
}
|
|
22784
|
+
}
|
|
22785
|
+
}
|
|
22786
|
+
},
|
|
22787
|
+
"/.well-known/oauth-protected-resource": {
|
|
22788
|
+
"get": {
|
|
22789
|
+
"tags": [
|
|
22790
|
+
"Service"
|
|
22791
|
+
],
|
|
22792
|
+
"summary": "Get the protected resource metadata",
|
|
22793
|
+
"description": "OAuth 2.0 Protected Resource Metadata (RFC 9728): the identity providers whose access tokens the Runtime API accepts (the identity file's trusted issuers) and their scopes. Nylorun is never the authorization server: a client signs in at one of `authorization_servers` and presents its token as `Authorization: Bearer`. A `401` from the Runtime API names this document in `WWW-Authenticate` (`resource_metadata`). Needs no key or `Nylorun-Protocol`, and accepts an `Origin`.",
|
|
22794
|
+
"responses": {
|
|
22795
|
+
"200": {
|
|
22796
|
+
"description": "The metadata",
|
|
22797
|
+
"content": {
|
|
22798
|
+
"application/json": {
|
|
22799
|
+
"schema": {
|
|
22800
|
+
"$ref": "#/components/schemas/ProtectedResourceMetadata"
|
|
22801
|
+
}
|
|
22802
|
+
}
|
|
22803
|
+
}
|
|
22804
|
+
},
|
|
22805
|
+
"404": {
|
|
22806
|
+
"description": "The Runtime trusts no identity provider (no identity file)"
|
|
22807
|
+
}
|
|
22808
|
+
}
|
|
22809
|
+
}
|
|
22810
|
+
},
|
|
22811
|
+
"/v1/access/jwks": {
|
|
22812
|
+
"get": {
|
|
22813
|
+
"tags": [
|
|
22814
|
+
"Service"
|
|
22815
|
+
],
|
|
22816
|
+
"summary": "Get the public keys the Runtime's tokens are signed with",
|
|
22817
|
+
"description": "A JSON Web Key Set, to verify a token the Runtime signed without calling it. No credential is needed.",
|
|
22818
|
+
"security": [
|
|
22819
|
+
{
|
|
22820
|
+
"applicationKey": []
|
|
22821
|
+
},
|
|
22822
|
+
{
|
|
22823
|
+
"managementKey": []
|
|
22824
|
+
},
|
|
22825
|
+
{
|
|
22826
|
+
"issuerToken": []
|
|
22827
|
+
},
|
|
22828
|
+
{}
|
|
22829
|
+
],
|
|
22830
|
+
"x-nylorun-credentials": [
|
|
22831
|
+
"application",
|
|
22832
|
+
"subject",
|
|
22833
|
+
"management",
|
|
22834
|
+
"token"
|
|
22835
|
+
],
|
|
22836
|
+
"x-nylorun-scopes": "any",
|
|
22837
|
+
"parameters": [
|
|
22838
|
+
{
|
|
22839
|
+
"schema": {
|
|
22840
|
+
"type": "string",
|
|
22841
|
+
"description": "The protocol version, `9`"
|
|
22842
|
+
},
|
|
22843
|
+
"required": true,
|
|
22844
|
+
"description": "The protocol version, `9`",
|
|
22845
|
+
"name": "Nylorun-Protocol",
|
|
22846
|
+
"in": "header"
|
|
22847
|
+
},
|
|
22848
|
+
{
|
|
22849
|
+
"schema": {
|
|
22850
|
+
"type": "string",
|
|
22851
|
+
"description": "The person an application key acts for"
|
|
22852
|
+
},
|
|
22853
|
+
"required": false,
|
|
22854
|
+
"description": "The person an application key acts for",
|
|
22855
|
+
"name": "Nylorun-Subject",
|
|
22856
|
+
"in": "header"
|
|
22857
|
+
},
|
|
22858
|
+
{
|
|
22859
|
+
"schema": {
|
|
22860
|
+
"type": "string",
|
|
22861
|
+
"description": "The subject's space-separated scopes; required with a subject"
|
|
22862
|
+
},
|
|
22863
|
+
"required": false,
|
|
22864
|
+
"description": "The subject's space-separated scopes; required with a subject",
|
|
22865
|
+
"name": "Nylorun-Scopes",
|
|
22866
|
+
"in": "header"
|
|
22867
|
+
}
|
|
22868
|
+
],
|
|
22869
|
+
"responses": {
|
|
22870
|
+
"200": {
|
|
22871
|
+
"description": "The public keys",
|
|
22872
|
+
"content": {
|
|
22873
|
+
"application/json": {
|
|
22874
|
+
"schema": {
|
|
22875
|
+
"$ref": "#/components/schemas/Jwks"
|
|
22876
|
+
}
|
|
22877
|
+
}
|
|
22878
|
+
}
|
|
22879
|
+
},
|
|
22880
|
+
"400": {
|
|
22881
|
+
"description": "Invalid headers, path, body or cursor",
|
|
22882
|
+
"content": {
|
|
22883
|
+
"application/json": {
|
|
22884
|
+
"schema": {
|
|
22885
|
+
"$ref": "#/components/schemas/Rejected"
|
|
22886
|
+
}
|
|
22887
|
+
}
|
|
22888
|
+
}
|
|
22889
|
+
},
|
|
22890
|
+
"401": {
|
|
22891
|
+
"description": "No credential (`credential_required`), one the Tenant does not accept (`credential_invalid`), a token that expired (`token_expired`), or a token whose issuer's keys cannot be fetched now (`issuer_unavailable`). `WWW-Authenticate: Bearer` names the protected resource metadata (`resource_metadata`)",
|
|
22892
|
+
"content": {
|
|
22893
|
+
"application/json": {
|
|
22894
|
+
"schema": {
|
|
22895
|
+
"$ref": "#/components/schemas/Rejected"
|
|
22896
|
+
}
|
|
22897
|
+
}
|
|
22898
|
+
}
|
|
22899
|
+
},
|
|
22900
|
+
"403": {
|
|
22901
|
+
"description": "Not allowed for this credential, a key of the other API (`key_role_mismatch`), a key from a browser (`origin_rejected`) or a management key acting for a subject",
|
|
22902
|
+
"content": {
|
|
22903
|
+
"application/json": {
|
|
22904
|
+
"schema": {
|
|
22905
|
+
"$ref": "#/components/schemas/Rejected"
|
|
22906
|
+
}
|
|
22907
|
+
}
|
|
22908
|
+
}
|
|
22909
|
+
},
|
|
22910
|
+
"404": {
|
|
22911
|
+
"description": "Not found (`not_found`)",
|
|
22912
|
+
"content": {
|
|
22913
|
+
"application/json": {
|
|
22914
|
+
"schema": {
|
|
22915
|
+
"$ref": "#/components/schemas/Rejected"
|
|
22916
|
+
}
|
|
22917
|
+
}
|
|
22918
|
+
}
|
|
22919
|
+
},
|
|
22920
|
+
"426": {
|
|
22921
|
+
"description": "`Nylorun-Protocol` missing or unsupported",
|
|
22922
|
+
"content": {
|
|
22923
|
+
"application/json": {
|
|
22924
|
+
"schema": {
|
|
22925
|
+
"$ref": "#/components/schemas/ProtocolRejected"
|
|
22926
|
+
}
|
|
22927
|
+
}
|
|
22928
|
+
}
|
|
22929
|
+
},
|
|
22930
|
+
"503": {
|
|
22931
|
+
"description": "The Tenant's storage or streams are unavailable",
|
|
22932
|
+
"content": {
|
|
22933
|
+
"application/json": {
|
|
22934
|
+
"schema": {
|
|
22935
|
+
"$ref": "#/components/schemas/Rejected"
|
|
22936
|
+
}
|
|
22937
|
+
}
|
|
22938
|
+
}
|
|
22939
|
+
}
|
|
22940
|
+
}
|
|
22941
|
+
}
|
|
22942
|
+
},
|
|
22943
|
+
"/openapi/runtime.json": {
|
|
22944
|
+
"get": {
|
|
22945
|
+
"tags": [
|
|
22946
|
+
"Service"
|
|
22947
|
+
],
|
|
22948
|
+
"summary": "Get the Runtime API's document",
|
|
22949
|
+
"description": "This document. `/openapi.json` is the same.",
|
|
22950
|
+
"responses": {
|
|
22951
|
+
"200": {
|
|
22952
|
+
"description": "The Runtime API's OpenAPI document"
|
|
22953
|
+
}
|
|
22954
|
+
}
|
|
22955
|
+
}
|
|
22830
22956
|
}
|
|
22831
22957
|
},
|
|
22832
22958
|
"webhooks": {},
|
|
22833
22959
|
"tags": [
|
|
22834
|
-
{
|
|
22835
|
-
"name": "Runtime",
|
|
22836
|
-
"description": "Check a Runtime is up and speaks your protocol, ask who your credential is, and read the public keys of the tokens it signs. `/health`, `/ready`, the JWKS and the documents need no key."
|
|
22837
|
-
},
|
|
22838
22960
|
{
|
|
22839
22961
|
"name": "Agents",
|
|
22840
22962
|
"description": "The agents a Tenant can run: put a definition, list what is there. In `@nylorun/agents`."
|
|
@@ -22862,15 +22984,13 @@
|
|
|
22862
22984
|
{
|
|
22863
22985
|
"name": "Artifacts",
|
|
22864
22986
|
"description": "Files and folders agents and people produce, versioned, with short-lived capability links to share them. In `@nylorun/agents`."
|
|
22987
|
+
},
|
|
22988
|
+
{
|
|
22989
|
+
"name": "Service",
|
|
22990
|
+
"description": "Check a Runtime is up and speaks your protocol, ask who your credential is, find the identity providers it takes tokens from, and read the public keys of the tokens it signs. `/health`, `/ready`, the protected resource metadata, the JWKS and the documents need no key."
|
|
22865
22991
|
}
|
|
22866
22992
|
],
|
|
22867
22993
|
"x-tagGroups": [
|
|
22868
|
-
{
|
|
22869
|
-
"name": "Get started",
|
|
22870
|
-
"tags": [
|
|
22871
|
-
"Runtime"
|
|
22872
|
-
]
|
|
22873
|
-
},
|
|
22874
22994
|
{
|
|
22875
22995
|
"name": "Agents",
|
|
22876
22996
|
"tags": [
|
|
@@ -22887,11 +23007,22 @@
|
|
|
22887
23007
|
]
|
|
22888
23008
|
},
|
|
22889
23009
|
{
|
|
22890
|
-
"name": "Sandboxes
|
|
23010
|
+
"name": "Sandboxes",
|
|
23011
|
+
"tags": [
|
|
23012
|
+
"Sandboxes"
|
|
23013
|
+
]
|
|
23014
|
+
},
|
|
23015
|
+
{
|
|
23016
|
+
"name": "Artifacts",
|
|
22891
23017
|
"tags": [
|
|
22892
|
-
"Sandboxes",
|
|
22893
23018
|
"Artifacts"
|
|
22894
23019
|
]
|
|
23020
|
+
},
|
|
23021
|
+
{
|
|
23022
|
+
"name": "Service",
|
|
23023
|
+
"tags": [
|
|
23024
|
+
"Service"
|
|
23025
|
+
]
|
|
22895
23026
|
}
|
|
22896
23027
|
]
|
|
22897
23028
|
}
|