@openfilz-sdk/typescript-ee 1.3.5 → 1.4.1

package/api/delegated-browse-grants-end-user-api.ts

@@ -0,0 +1,426 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * openfilz-api
+ * API for Document Management System
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+import type { Configuration } from '../configuration';
+import type { AxiosPromise, AxiosInstance, RawAxiosRequestConfig } from 'axios';
+import globalAxios from 'axios';
+// Some imports not used depending on template conditions
+// @ts-ignore
+import { DUMMY_BASE_URL, assertParamExists, setApiKeyToObject, setBasicAuthToObject, setBearerAuthToObject, setOAuthToObject, setSearchParams, serializeDataIfNeeded, toPathString, createRequestFunction, replaceWithSerializableTypeIfNeeded } from '../common';
+// @ts-ignore
+import { BASE_PATH, COLLECTION_FORMATS, type RequestArgs, BaseAPI, RequiredError, operationServerMap } from '../base';
+// @ts-ignore
+import type { DelegatedGrantDTO } from '../models';
+/**
+ * DelegatedBrowseGrantsEndUserApi - axios parameter creator
+ */
+export const DelegatedBrowseGrantsEndUserApiAxiosParamCreator = function (configuration?: Configuration) {
+    return {
+        /**
+         * Flip PENDING → ACCEPTED. Admin may then browse my folders for the next 2 hours. Client MUST force a step-up (prompt=login) before calling this — a valid session alone is NOT enough security to approve cross-user browsing.
+         * @summary Approve a pending grant
+         * @param {string} id 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        accept: async (id: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'id' is not null or undefined
+            assertParamExists('accept', 'id', id)
+            const localVarPath = `/api/v1/users/me/delegated/grants/{id}/accept`
+                .replace(`{${"id"}}`, encodeURIComponent(String(id)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * 
+         * @summary Refuse a pending grant
+         * @param {string} id 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        decline: async (id: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'id' is not null or undefined
+            assertParamExists('decline', 'id', id)
+            const localVarPath = `/api/v1/users/me/delegated/grants/{id}/decline`
+                .replace(`{${"id"}}`, encodeURIComponent(String(id)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Grantor-only consent withdrawal. Requires status = CONSUMED. Deletes the linked webhook subscription via webhooks-api; the grant row stays CONSUMED with consumedSubscriptionId preserved as an audit pointer. 409 if the grant is not CONSUMED or has no linked subscription id.
+         * @summary Disable the webhook created from this grant
+         * @param {string} id 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        disableLinkedWebhook: async (id: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'id' is not null or undefined
+            assertParamExists('disableLinkedWebhook', 'id', id)
+            const localVarPath = `/api/v1/users/me/delegated/grants/{id}/disable-webhook`
+                .replace(`{${"id"}}`, encodeURIComponent(String(id)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Optionally filter by ?status=PENDING|ACCEPTED|...
+         * @summary List grants addressed to me
+         * @param {ListIncomingStatusEnum} [status] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listIncoming: async (status?: ListIncomingStatusEnum, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            const localVarPath = `/api/v1/users/me/delegated/grants`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            if (status !== undefined) {
+                localVarQueryParameter['status'] = status;
+            }
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Flip ACCEPTED → REVOKED. Immediate — any in-flight admin browse becomes 410 on its next call.
+         * @summary Revoke an accepted grant
+         * @param {string} id 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        revoke: async (id: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'id' is not null or undefined
+            assertParamExists('revoke', 'id', id)
+            const localVarPath = `/api/v1/users/me/delegated/grants/{id}/revoke`
+                .replace(`{${"id"}}`, encodeURIComponent(String(id)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Accept'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+    }
+};
+
+/**
+ * DelegatedBrowseGrantsEndUserApi - functional programming interface
+ */
+export const DelegatedBrowseGrantsEndUserApiFp = function(configuration?: Configuration) {
+    const localVarAxiosParamCreator = DelegatedBrowseGrantsEndUserApiAxiosParamCreator(configuration)
+    return {
+        /**
+         * Flip PENDING → ACCEPTED. Admin may then browse my folders for the next 2 hours. Client MUST force a step-up (prompt=login) before calling this — a valid session alone is NOT enough security to approve cross-user browsing.
+         * @summary Approve a pending grant
+         * @param {string} id 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async accept(id: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<DelegatedGrantDTO>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.accept(id, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['DelegatedBrowseGrantsEndUserApi.accept']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * 
+         * @summary Refuse a pending grant
+         * @param {string} id 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async decline(id: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<DelegatedGrantDTO>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.decline(id, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['DelegatedBrowseGrantsEndUserApi.decline']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Grantor-only consent withdrawal. Requires status = CONSUMED. Deletes the linked webhook subscription via webhooks-api; the grant row stays CONSUMED with consumedSubscriptionId preserved as an audit pointer. 409 if the grant is not CONSUMED or has no linked subscription id.
+         * @summary Disable the webhook created from this grant
+         * @param {string} id 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async disableLinkedWebhook(id: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<DelegatedGrantDTO>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.disableLinkedWebhook(id, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['DelegatedBrowseGrantsEndUserApi.disableLinkedWebhook']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Optionally filter by ?status=PENDING|ACCEPTED|...
+         * @summary List grants addressed to me
+         * @param {ListIncomingStatusEnum} [status] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listIncoming(status?: ListIncomingStatusEnum, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<DelegatedGrantDTO>>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listIncoming(status, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['DelegatedBrowseGrantsEndUserApi.listIncoming']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Flip ACCEPTED → REVOKED. Immediate — any in-flight admin browse becomes 410 on its next call.
+         * @summary Revoke an accepted grant
+         * @param {string} id 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async revoke(id: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<DelegatedGrantDTO>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.revoke(id, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['DelegatedBrowseGrantsEndUserApi.revoke']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+    }
+};
+
+/**
+ * DelegatedBrowseGrantsEndUserApi - factory interface
+ */
+export const DelegatedBrowseGrantsEndUserApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
+    const localVarFp = DelegatedBrowseGrantsEndUserApiFp(configuration)
+    return {
+        /**
+         * Flip PENDING → ACCEPTED. Admin may then browse my folders for the next 2 hours. Client MUST force a step-up (prompt=login) before calling this — a valid session alone is NOT enough security to approve cross-user browsing.
+         * @summary Approve a pending grant
+         * @param {string} id 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        accept(id: string, options?: RawAxiosRequestConfig): AxiosPromise<DelegatedGrantDTO> {
+            return localVarFp.accept(id, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * 
+         * @summary Refuse a pending grant
+         * @param {string} id 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        decline(id: string, options?: RawAxiosRequestConfig): AxiosPromise<DelegatedGrantDTO> {
+            return localVarFp.decline(id, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Grantor-only consent withdrawal. Requires status = CONSUMED. Deletes the linked webhook subscription via webhooks-api; the grant row stays CONSUMED with consumedSubscriptionId preserved as an audit pointer. 409 if the grant is not CONSUMED or has no linked subscription id.
+         * @summary Disable the webhook created from this grant
+         * @param {string} id 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        disableLinkedWebhook(id: string, options?: RawAxiosRequestConfig): AxiosPromise<DelegatedGrantDTO> {
+            return localVarFp.disableLinkedWebhook(id, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Optionally filter by ?status=PENDING|ACCEPTED|...
+         * @summary List grants addressed to me
+         * @param {ListIncomingStatusEnum} [status] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listIncoming(status?: ListIncomingStatusEnum, options?: RawAxiosRequestConfig): AxiosPromise<Array<DelegatedGrantDTO>> {
+            return localVarFp.listIncoming(status, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Flip ACCEPTED → REVOKED. Immediate — any in-flight admin browse becomes 410 on its next call.
+         * @summary Revoke an accepted grant
+         * @param {string} id 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        revoke(id: string, options?: RawAxiosRequestConfig): AxiosPromise<DelegatedGrantDTO> {
+            return localVarFp.revoke(id, options).then((request) => request(axios, basePath));
+        },
+    };
+};
+
+/**
+ * DelegatedBrowseGrantsEndUserApi - object-oriented interface
+ */
+export class DelegatedBrowseGrantsEndUserApi extends BaseAPI {
+    /**
+     * Flip PENDING → ACCEPTED. Admin may then browse my folders for the next 2 hours. Client MUST force a step-up (prompt=login) before calling this — a valid session alone is NOT enough security to approve cross-user browsing.
+     * @summary Approve a pending grant
+     * @param {string} id 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public accept(id: string, options?: RawAxiosRequestConfig) {
+        return DelegatedBrowseGrantsEndUserApiFp(this.configuration).accept(id, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * 
+     * @summary Refuse a pending grant
+     * @param {string} id 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public decline(id: string, options?: RawAxiosRequestConfig) {
+        return DelegatedBrowseGrantsEndUserApiFp(this.configuration).decline(id, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Grantor-only consent withdrawal. Requires status = CONSUMED. Deletes the linked webhook subscription via webhooks-api; the grant row stays CONSUMED with consumedSubscriptionId preserved as an audit pointer. 409 if the grant is not CONSUMED or has no linked subscription id.
+     * @summary Disable the webhook created from this grant
+     * @param {string} id 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public disableLinkedWebhook(id: string, options?: RawAxiosRequestConfig) {
+        return DelegatedBrowseGrantsEndUserApiFp(this.configuration).disableLinkedWebhook(id, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Optionally filter by ?status=PENDING|ACCEPTED|...
+     * @summary List grants addressed to me
+     * @param {ListIncomingStatusEnum} [status] 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public listIncoming(status?: ListIncomingStatusEnum, options?: RawAxiosRequestConfig) {
+        return DelegatedBrowseGrantsEndUserApiFp(this.configuration).listIncoming(status, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Flip ACCEPTED → REVOKED. Immediate — any in-flight admin browse becomes 410 on its next call.
+     * @summary Revoke an accepted grant
+     * @param {string} id 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public revoke(id: string, options?: RawAxiosRequestConfig) {
+        return DelegatedBrowseGrantsEndUserApiFp(this.configuration).revoke(id, options).then((request) => request(this.axios, this.basePath));
+    }
+}
+
+export const ListIncomingStatusEnum = {
+    Pending: 'PENDING',
+    Accepted: 'ACCEPTED',
+    Declined: 'DECLINED',
+    Revoked: 'REVOKED',
+    Expired: 'EXPIRED',
+    Consumed: 'CONSUMED'
+} as const;
+export type ListIncomingStatusEnum = typeof ListIncomingStatusEnum[keyof typeof ListIncomingStatusEnum];

package/api/upload-token-controller-api.ts

@@ -0,0 +1,219 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * openfilz-api
+ * API for Document Management System
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+import type { Configuration } from '../configuration';
+import type { AxiosPromise, AxiosInstance, RawAxiosRequestConfig } from 'axios';
+import globalAxios from 'axios';
+// Some imports not used depending on template conditions
+// @ts-ignore
+import { DUMMY_BASE_URL, assertParamExists, setApiKeyToObject, setBasicAuthToObject, setBearerAuthToObject, setOAuthToObject, setSearchParams, serializeDataIfNeeded, toPathString, createRequestFunction, replaceWithSerializableTypeIfNeeded } from '../common';
+// @ts-ignore
+import { BASE_PATH, COLLECTION_FORMATS, type RequestArgs, BaseAPI, RequiredError, operationServerMap } from '../base';
+// @ts-ignore
+import type { MintUploadTokenRequest } from '../models';
+// @ts-ignore
+import type { UploadResponse } from '../models';
+// @ts-ignore
+import type { UploadTokenResponse } from '../models';
+/**
+ * UploadTokenControllerApi - axios parameter creator
+ */
+export const UploadTokenControllerApiAxiosParamCreator = function (configuration?: Configuration) {
+    return {
+        /**
+         * Issues a one-shot HS256 JWT scoped to a single upload into a single folder. Caller must hold the UPLOAD_TOKEN_ISSUER realm role.
+         * @summary Mint a scoped upload token
+         * @param {MintUploadTokenRequest} mintUploadTokenRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mintUploadToken: async (mintUploadTokenRequest: MintUploadTokenRequest, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'mintUploadTokenRequest' is not null or undefined
+            assertParamExists('mintUploadToken', 'mintUploadTokenRequest', mintUploadTokenRequest)
+            const localVarPath = `/api/v1/upload-tokens`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = '*/*';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(mintUploadTokenRequest, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Anonymous-callable endpoint authenticated by the scoped JWT minted via POST /api/v1/upload-tokens. Forces the target folder to the one baked into the token. One-shot — replays return 401.
+         * @summary Upload a single document with a scoped upload token
+         * @param {File} file 
+         * @param {string} [metadata] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        uploadWithToken: async (file: File, metadata?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'file' is not null or undefined
+            assertParamExists('uploadWithToken', 'file', file)
+            const localVarPath = `/api/v1/upload-tokens/upload`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+            const localVarFormParams = new ((configuration && configuration.formDataCtor) || FormData)();
+
+            // authentication keycloak_auth required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+
+            if (file !== undefined) { 
+                localVarFormParams.append('file', file as any);
+            }
+
+            if (metadata !== undefined) { 
+                localVarFormParams.append('metadata', metadata as any);
+            }
+            localVarHeaderParameter['Content-Type'] = 'multipart/form-data';
+            localVarHeaderParameter['Accept'] = '*/*';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = localVarFormParams;
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+    }
+};
+
+/**
+ * UploadTokenControllerApi - functional programming interface
+ */
+export const UploadTokenControllerApiFp = function(configuration?: Configuration) {
+    const localVarAxiosParamCreator = UploadTokenControllerApiAxiosParamCreator(configuration)
+    return {
+        /**
+         * Issues a one-shot HS256 JWT scoped to a single upload into a single folder. Caller must hold the UPLOAD_TOKEN_ISSUER realm role.
+         * @summary Mint a scoped upload token
+         * @param {MintUploadTokenRequest} mintUploadTokenRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async mintUploadToken(mintUploadTokenRequest: MintUploadTokenRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<UploadTokenResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.mintUploadToken(mintUploadTokenRequest, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['UploadTokenControllerApi.mintUploadToken']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Anonymous-callable endpoint authenticated by the scoped JWT minted via POST /api/v1/upload-tokens. Forces the target folder to the one baked into the token. One-shot — replays return 401.
+         * @summary Upload a single document with a scoped upload token
+         * @param {File} file 
+         * @param {string} [metadata] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async uploadWithToken(file: File, metadata?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<UploadResponse>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.uploadWithToken(file, metadata, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['UploadTokenControllerApi.uploadWithToken']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+    }
+};
+
+/**
+ * UploadTokenControllerApi - factory interface
+ */
+export const UploadTokenControllerApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
+    const localVarFp = UploadTokenControllerApiFp(configuration)
+    return {
+        /**
+         * Issues a one-shot HS256 JWT scoped to a single upload into a single folder. Caller must hold the UPLOAD_TOKEN_ISSUER realm role.
+         * @summary Mint a scoped upload token
+         * @param {MintUploadTokenRequest} mintUploadTokenRequest 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        mintUploadToken(mintUploadTokenRequest: MintUploadTokenRequest, options?: RawAxiosRequestConfig): AxiosPromise<UploadTokenResponse> {
+            return localVarFp.mintUploadToken(mintUploadTokenRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Anonymous-callable endpoint authenticated by the scoped JWT minted via POST /api/v1/upload-tokens. Forces the target folder to the one baked into the token. One-shot — replays return 401.
+         * @summary Upload a single document with a scoped upload token
+         * @param {File} file 
+         * @param {string} [metadata] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        uploadWithToken(file: File, metadata?: string, options?: RawAxiosRequestConfig): AxiosPromise<UploadResponse> {
+            return localVarFp.uploadWithToken(file, metadata, options).then((request) => request(axios, basePath));
+        },
+    };
+};
+
+/**
+ * UploadTokenControllerApi - object-oriented interface
+ */
+export class UploadTokenControllerApi extends BaseAPI {
+    /**
+     * Issues a one-shot HS256 JWT scoped to a single upload into a single folder. Caller must hold the UPLOAD_TOKEN_ISSUER realm role.
+     * @summary Mint a scoped upload token
+     * @param {MintUploadTokenRequest} mintUploadTokenRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public mintUploadToken(mintUploadTokenRequest: MintUploadTokenRequest, options?: RawAxiosRequestConfig) {
+        return UploadTokenControllerApiFp(this.configuration).mintUploadToken(mintUploadTokenRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Anonymous-callable endpoint authenticated by the scoped JWT minted via POST /api/v1/upload-tokens. Forces the target folder to the one baked into the token. One-shot — replays return 401.
+     * @summary Upload a single document with a scoped upload token
+     * @param {File} file 
+     * @param {string} [metadata] 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    public uploadWithToken(file: File, metadata?: string, options?: RawAxiosRequestConfig) {
+        return UploadTokenControllerApiFp(this.configuration).uploadWithToken(file, metadata, options).then((request) => request(this.axios, this.basePath));
+    }
+}
+