@opensoha/contracts 0.1.15 → 0.1.17

package/fixtures/json-schema/network-runtime-protocol/valid/internal-ztna-connect.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-internal-ztna-connect",
+  "messageType": "vpn.connect.request",
+  "producerId": "endpoint-1",
+  "runtimeId": "endpoint-1",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-09-03T08:00:00Z",
+  "expiresAt": "2026-09-03T08:01:00Z",
+  "payload": {
+    "requestId": "request-internal-ztna",
+    "siteId": "site-hq",
+    "networkSpaceId": "space-corp",
+    "mode": "internal_ztna",
+    "resourceIds": ["resource-payroll"],
+    "accessGrantId": "grant-payroll",
+    "accessGrantToken": "YIaq5kG3s-x3KpzJc7E3u2lDscGxdxyup08ngBRWm2Y"
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/mihomo-app-subscription-configuration.json

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-config-mihomo-app-0001",
+  "messageType": "configuration.desired",
+  "producerId": "network-control",
+  "runtimeId": "endpoint-bob",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-09-03T08:00:00Z",
+  "expiresAt": "2026-09-03T08:05:00Z",
+  "payload": {
+    "configurationVersion": 3,
+    "policyVersion": 7,
+    "validUntil": "2026-09-03T08:05:00Z",
+    "accessProfile": "full",
+    "protectedResourceIds": [],
+    "networkLeases": [],
+    "resourceLeases": [],
+    "mihomo": {
+      "mode": "app_subscription",
+      "profileId": "profile-personal",
+      "profileRevision": 1,
+      "mixedPort": 7890,
+      "controllerPort": 9090,
+      "dnsMode": "fake_ip",
+      "fakeIpRange": "198.18.0.0/15",
+      "selectorGroup": "SOHA",
+      "bypassCidrs": [],
+      "bypassHosts": ["network-control.example.com"],
+      "failClosed": false
+    }
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/mihomo-manual-node-configuration.json

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-config-mihomo-manual-0001",
+  "messageType": "configuration.desired",
+  "producerId": "network-control",
+  "runtimeId": "endpoint-alice",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-09-03T08:00:00Z",
+  "expiresAt": "2026-09-03T08:05:00Z",
+  "payload": {
+    "configurationVersion": 14,
+    "policyVersion": 7,
+    "validUntil": "2026-09-03T08:05:00Z",
+    "accessProfile": "full",
+    "protectedResourceIds": [],
+    "networkLeases": [],
+    "resourceLeases": [],
+    "mihomo": {
+      "mode": "managed_follow",
+      "sourceType": "manual_node",
+      "profileId": "profile-branch-egress",
+      "profileRevision": 1,
+      "mixedPort": 7890,
+      "controllerPort": 9090,
+      "dnsMode": "disabled",
+      "selectorGroup": "SOHA",
+      "bypassCidrs": [],
+      "bypassHosts": ["network-control.example.com"],
+      "failClosed": true
+    }
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/mihomo-wireguard-configuration.json

@@ -0,0 +1,70 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-config-mihomo-0001",
+  "messageType": "configuration.desired",
+  "producerId": "network-control",
+  "runtimeId": "endpoint-alice",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-09-03T08:00:00Z",
+  "expiresAt": "2026-09-03T08:05:00Z",
+  "payload": {
+    "configurationVersion": 13,
+    "policyVersion": 7,
+    "validUntil": "2026-09-03T08:05:00Z",
+    "accessProfile": "full",
+    "protectedResourceIds": ["resource-payroll"],
+    "networkLeases": [{
+      "id": "network-lease-0001",
+      "sessionId": "session-0001",
+      "subjectId": "user-alice",
+      "deviceId": "device-alice-laptop",
+      "networkSpaceId": "space-site-a",
+      "cidrs": ["10.20.0.0/16"],
+      "policyVersion": 7,
+      "issuedAt": "2026-09-03T08:00:00Z",
+      "expiresAt": "2026-09-03T08:05:00Z"
+    }],
+    "resourceLeases": [],
+    "wireguard": {
+      "role": "endpoint",
+      "interfaceName": "soha0",
+      "publicKey": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=",
+      "addresses": ["100.96.10.2/32"],
+      "mtu": 1380,
+      "routingMode": "routed",
+      "firewallDefault": "deny",
+      "peers": [{
+        "runtimeId": "gateway-site-a",
+        "publicKey": "BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=",
+        "endpointHost": "vpn.example.com",
+        "endpointPort": 51820,
+        "allowedIPs": ["10.20.0.0/16"],
+        "persistentKeepaliveSeconds": 25
+      }],
+      "routes": ["10.20.0.0/16"],
+      "dnsServers": ["10.20.0.53"],
+      "firewallRules": [{
+        "id": "allow-network-lease-0001",
+        "effect": "allow",
+        "leaseId": "network-lease-0001",
+        "sourceCidr": "100.96.10.2/32",
+        "destinationCidr": "10.20.0.0/16",
+        "protocol": "any",
+        "expiresAt": "2026-09-03T08:05:00Z"
+      }]
+    },
+    "mihomo": {
+      "mode": "managed_follow",
+      "profileId": "profile-corporate-egress",
+      "profileRevision": 4,
+      "mixedPort": 7890,
+      "controllerPort": 9090,
+      "dnsMode": "disabled",
+      "selectorGroup": "SOHA",
+      "selectedProxy": "corporate-hk",
+      "bypassCidrs": ["10.20.0.0/16"],
+      "bypassHosts": ["network-control.example.com", "vpn.example.com"],
+      "failClosed": true
+    }
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/nas-authorization-request.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-nas-authorize-0001",
+  "messageType": "nas.authorization.request",
+  "producerId": "freeradius-site-a",
+  "runtimeId": "freeradius-site-a",
+  "runtimeKind": "nas",
+  "occurredAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T08:00:05Z",
+  "payload": {
+    "requestId": "radius-request-0001",
+    "nasId": "nas-site-a-wifi",
+    "subjectId": "user-alice",
+    "stationId": "AA-BB-CC-DD-EE-FF",
+    "authenticationMethod": "eap-tls",
+    "clientCertificateSerial": "753484ff6e444ae9d86814989e85cb2fdd462193",
+    "clientCertificateAuthorityKeyId": "E9:00:0C:AE:78:0F:99:45:07:FF:4D:B0:49:E4:20:84:C7:5A:7A:BA"
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/nas-authorization-result.json

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-nas-authorize-result-0001",
+  "messageType": "nas.authorization.result",
+  "producerId": "network-control",
+  "runtimeId": "freeradius-site-a",
+  "runtimeKind": "nas",
+  "occurredAt": "2026-09-02T08:00:01Z",
+  "expiresAt": "2026-09-02T08:00:06Z",
+  "payload": {
+    "requestId": "radius-request-0001",
+    "sessionId": "session-0001",
+    "decision": "allow",
+    "accessProfile": "full",
+    "policyVersion": 7,
+    "validUntil": "2026-09-02T09:00:00Z",
+    "reasonCode": "policy_allowed",
+    "radiusAttributes": {
+      "vlanId": 20,
+      "filterId": "soha-full",
+      "sessionTimeoutSeconds": 3600
+    }
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/nas-session-command-result.json

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-nas-command-result-0001",
+  "messageType": "nas.session.command.result",
+  "producerId": "freeradius-site-a",
+  "runtimeId": "freeradius-site-a",
+  "runtimeKind": "nas",
+  "occurredAt": "2026-09-02T08:10:02Z",
+  "expiresAt": "2026-09-02T08:10:07Z",
+  "payload": {
+    "commandId": "coa-command-0001",
+    "sessionId": "session-0001",
+    "status": "applied",
+    "reasonCode": "coa_ack",
+    "completedAt": "2026-09-02T08:10:02Z"
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/nas-session-command.json

@@ -0,0 +1,27 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-nas-command-0001",
+  "messageType": "nas.session.command",
+  "producerId": "network-control",
+  "runtimeId": "freeradius-site-a",
+  "runtimeKind": "nas",
+  "occurredAt": "2026-09-02T08:10:00Z",
+  "expiresAt": "2026-09-02T08:10:30Z",
+  "payload": {
+    "commandId": "coa-command-0001",
+    "sessionId": "session-0001",
+    "nasId": "nas-site-a-wifi",
+    "subjectId": "user-0001",
+    "deviceId": "device-0001",
+    "action": "coa",
+    "targetAccessProfile": "quarantine",
+    "policyVersion": 8,
+    "effectiveAt": "2026-09-02T08:10:00Z",
+    "reasonCode": "device_non_compliant",
+    "radiusAttributes": {
+      "vlanId": 90,
+      "filterId": "soha-quarantine",
+      "sessionTimeoutSeconds": 300
+    }
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/vpn-connect-request.json

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-vpn-connect-0001",
+  "messageType": "vpn.connect.request",
+  "producerId": "endpoint-alice",
+  "runtimeId": "endpoint-alice",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T08:05:00Z",
+  "payload": {
+    "requestId": "vpn-request-0001",
+    "siteId": "site-shanghai",
+    "networkSpaceId": "space-site-a",
+    "gatewayId": "gateway-site-b",
+    "mode": "external_vpn"
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/vpn-connect-result.json

@@ -0,0 +1,34 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-vpn-connect-result-0001",
+  "messageType": "vpn.connect.result",
+  "producerId": "network-control",
+  "runtimeId": "endpoint-alice",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T08:05:00Z",
+  "payload": {
+    "requestId": "vpn-request-0001",
+    "decision": "allow",
+    "reasonCode": "policy_allowed",
+    "sessionId": "session-vpn-0001",
+    "gatewayId": "gateway-site-a",
+    "configurationVersion": 13,
+    "policyVersion": 7,
+    "validUntil": "2026-09-02T08:05:00Z",
+    "networkLeases": [
+      {
+        "id": "network-lease-0001",
+        "sessionId": "session-vpn-0001",
+        "subjectId": "user-alice",
+        "deviceId": "device-alice-laptop",
+        "networkSpaceId": "space-site-a",
+        "cidrs": ["10.20.0.0/16"],
+        "policyVersion": 7,
+        "issuedAt": "2026-09-02T08:00:00Z",
+        "expiresAt": "2026-09-02T08:05:00Z"
+      }
+    ],
+    "resourceLeases": []
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/wireguard-enrollment.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-enroll-wireguard-0001",
+  "messageType": "runtime.enroll.request",
+  "producerId": "endpoint-alice",
+  "runtimeId": "endpoint-alice",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T08:05:00Z",
+  "payload": {
+    "enrollmentId": "enrollment-alice",
+    "challengeId": "challenge-alice",
+    "deviceId": "device-alice-laptop",
+    "devicePublicKey": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA7qY8R9gAwRQmJau0p7uB8mVJwA6m3i3zYvRrV7lIl1E=\n-----END PUBLIC KEY-----",
+    "wireguardPublicKey": "BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=",
+    "platform": "windows",
+    "clientVersion": "0.2.0",
+    "capabilities": ["wireguard", "route-coordinator", "dns-coordinator"]
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/wireguard-site-link.json

@@ -0,0 +1,48 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-config-site-link-0001",
+  "messageType": "configuration.desired",
+  "producerId": "network-control-default",
+  "runtimeId": "gateway-site-b",
+  "runtimeKind": "gateway",
+  "occurredAt": "2026-09-03T08:00:00Z",
+  "expiresAt": "2026-09-03T08:05:00Z",
+  "payload": {
+    "configurationVersion": 13,
+    "policyVersion": 7,
+    "validUntil": "2026-09-03T08:05:00Z",
+    "accessProfile": "full",
+    "protectedResourceIds": [],
+    "networkLeases": [],
+    "resourceLeases": [],
+    "wireguard": {
+      "role": "gateway",
+      "interfaceName": "soha0",
+      "publicKey": "BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=",
+      "addresses": ["100.97.0.1/32"],
+      "listenPort": 51821,
+      "mtu": 1380,
+      "routingMode": "routed",
+      "firewallDefault": "deny",
+      "peers": [{
+        "runtimeId": "gateway-site-a",
+        "publicKey": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=",
+        "endpointHost": "vpn-a.example.com",
+        "endpointPort": 51820,
+        "allowedIPs": ["100.96.0.0/24", "10.20.0.0/16", "10.30.0.0/16"],
+        "persistentKeepaliveSeconds": 25
+      }],
+      "routes": ["100.96.0.0/24", "10.20.0.0/16", "10.30.0.0/16"],
+      "firewallRules": [{
+        "id": "site-a-to-b",
+        "effect": "allow",
+        "siteLinkRuntimeId": "gateway-site-a",
+        "direction": "from_wireguard",
+        "sourceCidr": "10.20.0.0/16",
+        "destinationCidr": "10.40.0.0/16",
+        "protocol": "any",
+        "expiresAt": "2026-09-03T08:05:00Z"
+      }]
+    }
+  }
+}

package/fixtures/openapi/AlertRuleEnvelope/invalid/missing-data.json

@@ -0,0 +1 @@
+{}

package/fixtures/openapi/AlertRuleEnvelope/valid/metrics.json

@@ -0,0 +1,11 @@
+{
+  "data": {
+    "id": "rule-checkout-errors",
+    "name": "Checkout error rate",
+    "ruleType": "metrics",
+    "forSeconds": 120,
+    "enabled": true,
+    "createdAt": "2026-08-31T00:00:00Z",
+    "updatedAt": "2026-08-31T00:05:00Z"
+  }
+}

package/fixtures/openapi/AlertRuleInput/invalid/missing-name.json

@@ -0,0 +1,3 @@
+{
+  "ruleType": "metrics"
+}

package/fixtures/openapi/AlertRuleInput/valid/metrics.json

@@ -0,0 +1,25 @@
+{
+  "name": "Checkout error rate",
+  "ruleType": "metrics",
+  "datasourceSelector": {
+    "id": "prometheus-main"
+  },
+  "querySpec": {
+    "metricKey": "http.server.errors"
+  },
+  "thresholdSpec": {
+    "operator": "gte",
+    "value": 5
+  },
+  "forSeconds": 120,
+  "groupBy": ["service"],
+  "labels": {
+    "severity": "critical"
+  },
+  "annotations": {
+    "summary": "Checkout error rate is elevated"
+  },
+  "notificationPolicyId": "policy-primary",
+  "healingPolicyIds": ["healing-checkout"],
+  "enabled": true
+}

package/fixtures/openapi/AlertRuleRunListEnvelope/invalid/missing-rule-id.json

@@ -0,0 +1,12 @@
+{
+  "items": [
+    {
+      "id": "run-1",
+      "status": "completed",
+      "matched": false,
+      "durationMs": 42,
+      "createdAt": "2026-08-31T00:06:00Z",
+      "updatedAt": "2026-08-31T00:06:00Z"
+    }
+  ]
+}

package/fixtures/openapi/AlertRuleRunListEnvelope/valid/items.json

@@ -0,0 +1,13 @@
+{
+  "items": [
+    {
+      "id": "run-1",
+      "ruleId": "rule-checkout-errors",
+      "status": "completed",
+      "matched": false,
+      "durationMs": 42,
+      "createdAt": "2026-08-31T00:06:00Z",
+      "updatedAt": "2026-08-31T00:06:00Z"
+    }
+  ]
+}

package/fixtures/openapi/AlertRuleTestResultEnvelope/invalid/missing-executed-at.json

@@ -0,0 +1,5 @@
+{
+  "data": {
+    "matched": false
+  }
+}

package/fixtures/openapi/AlertRuleTestResultEnvelope/valid/clear.json

@@ -0,0 +1,10 @@
+{
+  "data": {
+    "ruleId": "rule-checkout-errors",
+    "ruleType": "metrics",
+    "state": "clear",
+    "summary": "metrics threshold is clear",
+    "matched": false,
+    "executedAt": "2026-08-31T00:06:00Z"
+  }
+}

package/fixtures/openapi/AnnouncementReceiptPageEnvelope/invalid/missing-read-count.json

@@ -0,0 +1,9 @@
+{
+  "data": {
+    "items": [],
+    "total": 0,
+    "page": 1,
+    "pageSize": 15,
+    "unreadCount": 0
+  }
+}

package/fixtures/openapi/AnnouncementReceiptPageEnvelope/valid/read-and-unread.json

@@ -0,0 +1,28 @@
+{
+  "data": {
+    "items": [
+      {
+        "userId": "3f4b8782-566f-4b55-9b86-791bf24ca5e8",
+        "username": "ada",
+        "displayName": "Ada",
+        "email": "ada@example.test",
+        "teamNames": ["研发中心"],
+        "isRead": true,
+        "readAt": "2026-09-04T08:00:00Z"
+      },
+      {
+        "userId": "5b550b5a-f8c8-47a7-ab42-57c030d30c3e",
+        "username": "lin",
+        "displayName": "Lin",
+        "email": "lin@example.test",
+        "teamNames": [],
+        "isRead": false
+      }
+    ],
+    "total": 2,
+    "page": 1,
+    "pageSize": 15,
+    "readCount": 1,
+    "unreadCount": 1
+  }
+}

package/fixtures/openapi/ApplicationRuntimeEnvironment/invalid/unknown-status.json

@@ -0,0 +1,7 @@
+{
+  "applicationEnvironmentId": "binding-1",
+  "environmentId": "production",
+  "requiresApproval": true,
+  "status": "offline",
+  "workloads": []
+}

package/fixtures/openapi/ApplicationRuntimeEnvironment/valid/unavailable.json

@@ -0,0 +1,7 @@
+{
+  "applicationEnvironmentId": "binding-1",
+  "environmentId": "production",
+  "requiresApproval": true,
+  "status": "unavailable",
+  "workloads": []
+}

package/fixtures/openapi/ApplicationWorkflowInput/invalid/owner-fields.json

@@ -0,0 +1,7 @@
+{
+  "key": "application-app-2",
+  "name": "Production release",
+  "category": "application:app-2",
+  "definition": {},
+  "enabled": true
+}

package/fixtures/openapi/ApplicationWorkflowInput/valid/minimal.json

@@ -0,0 +1,9 @@
+{
+  "name": "Production release",
+  "definition": {
+    "mode": "release_dag",
+    "nodes": [],
+    "edges": []
+  },
+  "enabled": true
+}

package/fixtures/openapi/BrandingAssetUploadEnvelope/valid/svg-data-url.json

@@ -0,0 +1,5 @@
+{
+  "data": {
+    "url": "data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg=="
+  }
+}

package/fixtures/openapi/BrowserHandoffCompletionEnvelope/invalid/token-leak.json

@@ -0,0 +1,7 @@
+{
+  "data": {
+    "status": "completed",
+    "destinationUrl": "/oauth2/authorize?client_id=console",
+    "accessToken": "must-not-be-returned"
+  }
+}

package/fixtures/openapi/BrowserHandoffCompletionEnvelope/valid/completed.json

@@ -0,0 +1,6 @@
+{
+  "data": {
+    "status": "completed",
+    "destinationUrl": "/oauth2/authorize?client_id=console"
+  }
+}

package/fixtures/openapi/BrowserHandoffEnvelope/invalid/missing-principal.json

@@ -0,0 +1,12 @@
+{
+  "data": {
+    "application": {
+      "id": "app-1",
+      "name": "Soha Console"
+    },
+    "accountName": "OpenSoha",
+    "email": "must-not-be-exposed@example.com",
+    "status": "pending",
+    "expiresAt": "2026-08-31T00:01:00Z"
+  }
+}

package/fixtures/openapi/BrowserHandoffEnvelope/valid/pending.json

@@ -0,0 +1,11 @@
+{
+  "data": {
+    "application": {
+      "id": "app-1",
+      "name": "Soha Console"
+    },
+    "accountName": "OpenSoha",
+    "status": "pending",
+    "expiresAt": "2026-08-31T00:01:00Z"
+  }
+}

package/fixtures/openapi/ChangePasswordRequest/invalid/missing-current-password.json

@@ -0,0 +1,3 @@
+{
+  "newPassword": "new-password"
+}

package/fixtures/openapi/ChangePasswordRequest/invalid/short-new-password.json

@@ -0,0 +1,4 @@
+{
+  "currentPassword": "current-password",
+  "newPassword": "short"
+}

package/fixtures/openapi/ChangePasswordRequest/valid/password.json

@@ -0,0 +1,4 @@
+{
+  "currentPassword": "current-password",
+  "newPassword": "new-password"
+}

package/fixtures/openapi/DesktopAuthAttemptCreateRequest/invalid/https-redirect.json

@@ -0,0 +1,6 @@
+{
+  "providerId": "corp-oidc",
+  "redirectUri": "https://127.0.0.1:49152/callback/T4I0wIrt0Pp4qABC",
+  "codeChallenge": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
+  "codeChallengeMethod": "S256"
+}

package/fixtures/openapi/DesktopAuthAttemptCreateRequest/invalid/localhost-redirect.json

@@ -0,0 +1,6 @@
+{
+  "providerId": "corp-oidc",
+  "redirectUri": "http://localhost:49152/callback/T4I0wIrt0Pp4qABC",
+  "codeChallenge": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
+  "codeChallengeMethod": "S256"
+}

package/fixtures/openapi/DesktopAuthAttemptCreateRequest/invalid/plain-challenge.json

@@ -0,0 +1,6 @@
+{
+  "providerId": "corp-oidc",
+  "redirectUri": "http://127.0.0.1:49152/callback/T4I0wIrt0Pp4qABC",
+  "codeChallenge": "short",
+  "codeChallengeMethod": "plain"
+}

package/fixtures/openapi/DesktopAuthAttemptCreateRequest/invalid/privileged-port.json

@@ -0,0 +1,6 @@
+{
+  "providerId": "corp-oidc",
+  "redirectUri": "http://127.0.0.1:1023/callback/T4I0wIrt0Pp4qABC",
+  "codeChallenge": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
+  "codeChallengeMethod": "S256"
+}