@tsg-dsp/tsg-sdk 0.20.1 → 0.21.0

package/dist/.generated/sso-bridge.d.ts

@@ -15,7 +15,7 @@ export interface paths {
          * List audit log entries
          * @description Fetches paginated audit log entries with optional filters.
          */
-        get: operations["AuditLogController_list"];
+        get: operations["SsoAuditController_list"];
         put?: never;
         post?: never;
         delete?: never;
@@ -35,7 +35,7 @@ export interface paths {
          * Get audit log entry by ID
          * @description Fetches a single audit log entry by its ID.
          */
-        get: operations["AuditLogController_getById"];
+        get: operations["SsoAuditController_getById"];
         put?: never;
         post?: never;
         delete?: never;
@@ -64,6 +64,214 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/internal/tenants/{tenantId}/configuration": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put: operations["SsoInternalTenantController_ensure"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/internal/tenants/{tenantId}/status": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["SsoInternalTenantController_status"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/internal/tenants/{tenantId}/principals": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["SsoInternalTenantController_principalNames"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/internal/tenants/{tenantId}/authorization": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put: operations["SsoInternalTenantController_authorization"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/internal/tenants/{tenantId}/lifecycle": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put: operations["SsoInternalTenantController_lifecycle"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/internal/platform/accounts/lookup": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["SsoInternalAccountController_lookup"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/internal/platform/accounts/check-availability": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post: operations["SsoInternalAccountController_checkAvailability"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/internal/platform/accounts/resolve": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post: operations["SsoInternalAccountController_resolve"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/internal/platform/accounts/bootstrap": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put: operations["SsoInternalAccountController_bootstrap"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/internal/platform/accounts/{userId}/setup-link": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post: operations["SsoInternalAccountController_setupLink"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/tenants": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["SsoTenantController_list"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/platform/tenants": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["SsoPlatformTenantController_list"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/users/first-login/setup": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post: operations["FirstLoginSetupController_complete"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/auth/user": {
         parameters: {
             query?: never;
@@ -584,6 +792,40 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/users/{id}/tenants": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Get the user's memberships known to SSO */
+        get: operations["UsersController_memberships[0]"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/platform/users/{id}/tenants": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Get the user's memberships known to SSO */
+        get: operations["UsersController_memberships[1]"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/users": {
         parameters: {
             query?: never;
@@ -592,7 +834,24 @@ export interface paths {
             cookie?: never;
         };
         /** Get all users */
-        get: operations["UsersController_getUsers"];
+        get: operations["UsersController_getUsers[0]"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/platform/users": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Get all users */
+        get: operations["UsersController_getUsers[1]"];
         put?: never;
         post?: never;
         delete?: never;
@@ -601,27 +860,115 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/users/lookup": {
+    "/users/lookup": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Lookup a user by id, username, or email
+         * @description Finds a user by their id, username, or email address. Provide exactly one of the query parameters. Platform authentication and user read permission are required.
+         */
+        get: operations["UsersController_lookupUser[0]"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/platform/users/lookup": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Lookup a user by id, username, or email
+         * @description Finds a user by their id, username, or email address. Provide exactly one of the query parameters. Platform authentication and user read permission are required.
+         */
+        get: operations["UsersController_lookupUser[1]"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/users/create": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Create a new user */
+        post: operations["UsersController_createUser[0]"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/platform/users/create": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Create a new user */
+        post: operations["UsersController_createUser[1]"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/users/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /** Delete a user */
+        delete: operations["UsersController_deleteUser[0]"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/platform/users/{id}": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /**
-         * Lookup a user by id, username, or email
-         * @description Finds a user by their id, username, or email address. Provide exactly one of the query parameters. This endpoint is unauthenticated to allow service-to-service lookups.
-         */
-        get: operations["UsersController_lookupUser"];
+        get?: never;
         put?: never;
         post?: never;
-        delete?: never;
+        /** Delete a user */
+        delete: operations["UsersController_deleteUser[1]"];
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/users/create": {
+    "/users/update/{id}": {
         parameters: {
             query?: never;
             header?: never;
@@ -630,15 +977,15 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /** Create a new user */
-        post: operations["UsersController_createUser"];
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
-        patch?: never;
+        /** Update an existing user */
+        patch: operations["UsersController_updateUser[0]"];
         trace?: never;
     };
-    "/users/{id}": {
+    "/platform/users/update/{id}": {
         parameters: {
             query?: never;
             header?: never;
@@ -648,14 +995,14 @@ export interface paths {
         get?: never;
         put?: never;
         post?: never;
-        /** Delete a user */
-        delete: operations["UsersController_deleteUser"];
+        delete?: never;
         options?: never;
         head?: never;
-        patch?: never;
+        /** Update an existing user */
+        patch: operations["UsersController_updateUser[1]"];
         trace?: never;
     };
-    "/users/update/{id}": {
+    "/users/{id}/reset-2fa": {
         parameters: {
             query?: never;
             header?: never;
@@ -664,15 +1011,18 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        post?: never;
+        /**
+         * Reset 2FA for a user
+         * @description Admin endpoint to reset two-factor authentication for a user. Deletes all TOTP credentials, WebAuthn credentials, and recovery codes.
+         */
+        post: operations["UsersController_resetUser2FA[0]"];
         delete?: never;
         options?: never;
         head?: never;
-        /** Update an existing user */
-        patch: operations["UsersController_updateUser"];
+        patch?: never;
         trace?: never;
     };
-    "/users/{id}/reset-2fa": {
+    "/platform/users/{id}/reset-2fa": {
         parameters: {
             query?: never;
             header?: never;
@@ -685,7 +1035,7 @@ export interface paths {
          * Reset 2FA for a user
          * @description Admin endpoint to reset two-factor authentication for a user. Deletes all TOTP credentials, WebAuthn credentials, and recovery codes.
          */
-        post: operations["UsersController_resetUser2FA"];
+        post: operations["UsersController_resetUser2FA[1]"];
         delete?: never;
         options?: never;
         head?: never;
@@ -827,6 +1177,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/oauth/organizations": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Discover eligible organizations
+         * @description Use an identity-only access token to discover the current account's organizations for its registered client and resource.
+         */
+        get: operations["OauthController_organizations"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/oauth/introspect": {
         parameters: {
             query?: never;
@@ -1163,7 +1533,30 @@ export interface paths {
 export type webhooks = Record<string, never>;
 export interface components {
     schemas: {
+        CheckAccountAvailabilityDto: {
+            username: string;
+            email: string;
+        };
+        ResolveSsoAccountDto: {
+            issuer: string;
+            subject: string;
+        };
+        BootstrapSsoAccountDto: {
+            operationId: string;
+            tenantId: string;
+            userId: string;
+            username: string;
+            email: string;
+        };
+        SetupLinkRequestDto: {
+            tenantId: string;
+        };
+        SetupAccountDto: {
+            token: string;
+            newPassword: string;
+        };
         UserDto: {
+            platformAdministrator?: boolean;
             /** @example 1 */
             id?: string;
             /** @example johndoe */
@@ -1189,6 +1582,7 @@ export interface components {
             require2FA?: boolean;
         };
         CreateUserDto: {
+            platformAdministrator?: boolean;
             /** @example johndoe */
             username: string;
             /** @example johndoe@example.com */
@@ -1214,6 +1608,7 @@ export interface components {
             password?: string;
         };
         UpdateUserDto: {
+            platformAdministrator?: boolean;
             /** @example johndoe */
             username?: string;
             /** @example johndoe@example.com */
@@ -1326,12 +1721,20 @@ export interface components {
             token_endpoint_auth_signing_alg_values_supported?: string[];
         };
         ClientDto: {
+            /** @enum {string} */
+            kind: "shared" | "workload" | "platform";
+            /** @description Canonical tenant UUID for a workload client */
+            tenantId?: string;
+            /** @description Registered resource audiences */
+            audiences?: string[];
+            /** @description Allowed OAuth scopes */
+            scopes?: string[];
             /** @example 1 */
             id?: string;
             /** @example Example Client */
             name: string;
             /** @example SecretExample */
-            secretName: string;
+            secretName?: string;
             /** @example A sample client used for demonstration purposes. */
             description: string;
             /** @example client-id-123 */
@@ -1366,12 +1769,14 @@ export interface components {
              */
             permissions: string[];
             /**
+             * @description On creation, defaults to authorization_code and refresh_token for shared clients; client_credentials for workload/platform clients. Omission during updates preserves the stored policy.
              * @example [
+             *       "client_credentials",
              *       "authorization_code",
-             *       "client_credentials"
+             *       "refresh_token"
              *     ]
              */
-            grants: string[];
+            grants?: string[];
             /**
              * @example [
              *       "https://example.com/callback"
@@ -1380,10 +1785,18 @@ export interface components {
             redirectUris: string[];
         };
         CreateClientDto: {
+            /** @enum {string} */
+            kind: "shared" | "workload" | "platform";
+            /** @description Canonical tenant UUID for a workload client */
+            tenantId?: string;
+            /** @description Registered resource audiences */
+            audiences?: string[];
+            /** @description Allowed OAuth scopes */
+            scopes?: string[];
             /** @example Example Client */
             name: string;
             /** @example SecretExample */
-            secretName: string;
+            secretName?: string;
             /** @example A sample client used for demonstration purposes. */
             description: string;
             /** @example client-id-123 */
@@ -1418,12 +1831,14 @@ export interface components {
              */
             permissions: string[];
             /**
+             * @description On creation, defaults to authorization_code and refresh_token for shared clients; client_credentials for workload/platform clients. Omission during updates preserves the stored policy.
              * @example [
+             *       "client_credentials",
              *       "authorization_code",
-             *       "client_credentials"
+             *       "refresh_token"
              *     ]
              */
-            grants: string[];
+            grants?: string[];
             /**
              * @example [
              *       "https://example.com/callback"
@@ -1432,6 +1847,14 @@ export interface components {
             redirectUris: string[];
         };
         UpdateClientDto: {
+            /** @enum {string} */
+            kind?: "shared" | "workload" | "platform";
+            /** @description Canonical tenant UUID for a workload client */
+            tenantId?: string;
+            /** @description Registered resource audiences */
+            audiences?: string[];
+            /** @description Allowed OAuth scopes */
+            scopes?: string[];
             /** @example Example Client */
             name?: string;
             /** @example SecretExample */
@@ -1470,9 +1893,11 @@ export interface components {
              */
             permissions?: string[];
             /**
+             * @description On creation, defaults to authorization_code and refresh_token for shared clients; client_credentials for workload/platform clients. Omission during updates preserves the stored policy.
              * @example [
+             *       "client_credentials",
              *       "authorization_code",
-             *       "client_credentials"
+             *       "refresh_token"
              *     ]
              */
             grants?: string[];
@@ -1521,7 +1946,7 @@ export interface components {
 }
 export type $defs = Record<string, never>;
 export interface operations {
-    AuditLogController_list: {
+    SsoAuditController_list: {
         parameters: {
             query?: {
                 order?: "ASC" | "DESC";
@@ -1569,7 +1994,7 @@ export interface operations {
             };
         };
     };
-    AuditLogController_getById: {
+    SsoAuditController_getById: {
         parameters: {
             query?: never;
             header?: never;
@@ -1742,6 +2167,264 @@ export interface operations {
             };
         };
     };
+    SsoInternalTenantController_ensure: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                tenantId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    SsoInternalTenantController_status: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                tenantId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    SsoInternalTenantController_principalNames: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                tenantId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    SsoInternalTenantController_authorization: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                tenantId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    SsoInternalTenantController_lifecycle: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                tenantId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    SsoInternalAccountController_lookup: {
+        parameters: {
+            query: {
+                username: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    SsoInternalAccountController_checkAvailability: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CheckAccountAvailabilityDto"];
+            };
+        };
+        responses: {
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    SsoInternalAccountController_resolve: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ResolveSsoAccountDto"];
+            };
+        };
+        responses: {
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    SsoInternalAccountController_bootstrap: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["BootstrapSsoAccountDto"];
+            };
+        };
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    SsoInternalAccountController_setupLink: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                userId: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["SetupLinkRequestDto"];
+            };
+        };
+        responses: {
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    SsoTenantController_list: {
+        parameters: {
+            query: {
+                client_id: string;
+                resource: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    SsoPlatformTenantController_list: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    FirstLoginSetupController_complete: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["SetupAccountDto"];
+            };
+        };
+        responses: {
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     AuthController_getUser: {
         parameters: {
             query?: never;
@@ -1762,7 +2445,10 @@ export interface operations {
     AuthController_login: {
         parameters: {
             query?: never;
-            header?: never;
+            header: {
+                /** @description Required for browser-initiated login requests. */
+                "X-TSG-Request": string;
+            };
             path?: never;
             cookie?: never;
         };
@@ -2264,7 +2950,84 @@ export interface operations {
             };
         };
     };
-    UsersController_getUsers: {
+    "UsersController_memberships[0]": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    "UsersController_memberships[1]": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    "UsersController_getUsers[0]": {
+        parameters: {
+            query?: {
+                order?: "ASC" | "DESC";
+                order_by?: string;
+                page?: number;
+                per_page?: number;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description List of users returned. */
+            200: {
+                headers: {
+                    /** @description Index of the current page (starting at 1) */
+                    "x-page"?: number;
+                    /** @description Index of the previous page */
+                    "x-prev-page"?: number;
+                    /** @description Index of the next page */
+                    "x-next-page"?: number;
+                    /** @description Number of items per page */
+                    "x-per-page"?: number;
+                    /** @description Total number of pages */
+                    "x-total-pages"?: number;
+                    /** @description Total number of items */
+                    "x-total"?: number;
+                    /** @description Web Linking to other pages of this resource */
+                    link?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["UserDto"][];
+                };
+            };
+        };
+    };
+    "UsersController_getUsers[1]": {
         parameters: {
             query?: {
                 order?: "ASC" | "DESC";
@@ -2303,7 +3066,36 @@ export interface operations {
             };
         };
     };
-    UsersController_lookupUser: {
+    "UsersController_lookupUser[0]": {
+        parameters: {
+            query?: {
+                id?: string;
+                username?: string;
+                email?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description User found. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description User not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    "UsersController_lookupUser[1]": {
         parameters: {
             query?: {
                 id?: string;
@@ -2332,7 +3124,32 @@ export interface operations {
             };
         };
     };
-    UsersController_createUser: {
+    "UsersController_createUser[0]": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** @description Data for the new user */
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateUserDto"];
+            };
+        };
+        responses: {
+            /** @description The user has been successfully created. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["UserDto"];
+                };
+            };
+        };
+    };
+    "UsersController_createUser[1]": {
         parameters: {
             query?: never;
             header?: never;
@@ -2357,7 +3174,28 @@ export interface operations {
             };
         };
     };
-    UsersController_deleteUser: {
+    "UsersController_deleteUser[0]": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description User id */
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description User successfully deleted. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    "UsersController_deleteUser[1]": {
         parameters: {
             query?: never;
             header?: never;
@@ -2378,7 +3216,35 @@ export interface operations {
             };
         };
     };
-    UsersController_updateUser: {
+    "UsersController_updateUser[0]": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description User id */
+                id: string;
+            };
+            cookie?: never;
+        };
+        /** @description Updated user data */
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpdateUserDto"];
+            };
+        };
+        responses: {
+            /** @description User successfully updated. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["UserDto"];
+                };
+            };
+        };
+    };
+    "UsersController_updateUser[1]": {
         parameters: {
             query?: never;
             header?: never;
@@ -2406,7 +3272,28 @@ export interface operations {
             };
         };
     };
-    UsersController_resetUser2FA: {
+    "UsersController_resetUser2FA[0]": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description User id */
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description 2FA successfully reset for the user. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    "UsersController_resetUser2FA[1]": {
         parameters: {
             query?: never;
             header?: never;
@@ -2491,6 +3378,14 @@ export interface operations {
     OauthController_authorize: {
         parameters: {
             query: {
+                /** @description Space-separated OpenID Connect prompts: none, login, consent, select_account. none cannot be combined with other prompts. */
+                prompt?: string;
+                /** @description Canonical tenant UUID */
+                tenant_id?: string;
+                /** @description Intended receiving resource audience */
+                audience?: string;
+                /** @description Resource audience; must agree with audience */
+                resource?: string;
                 /** @description The response type of the authorization */
                 response_type: string;
                 /** @description The response mode of the authorization */
@@ -2527,6 +3422,14 @@ export interface operations {
     OauthController_login: {
         parameters: {
             query: {
+                /** @description Space-separated OpenID Connect prompts: none, login, consent, select_account. none cannot be combined with other prompts. */
+                prompt?: string;
+                /** @description Canonical tenant UUID */
+                tenant_id?: string;
+                /** @description Intended receiving resource audience */
+                audience?: string;
+                /** @description Resource audience; must agree with audience */
+                resource?: string;
                 /** @description The response type of the authorization */
                 response_type: string;
                 /** @description The response mode of the authorization */
@@ -2546,8 +3449,12 @@ export interface operations {
                 /** @description Optional challenge method */
                 code_challenge_method?: "plain" | "S256";
                 redirect: boolean;
+                automatic: boolean;
+            };
+            header: {
+                /** @description Required for browser-initiated login requests. */
+                "X-TSG-Request": string;
             };
-            header?: never;
             path?: never;
             cookie?: never;
         };
@@ -2614,6 +3521,26 @@ export interface operations {
             };
         };
     };
+    OauthController_organizations: {
+        parameters: {
+            query: {
+                client_id: string;
+                resource: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     OauthController_introspect: {
         parameters: {
             query?: never;
@@ -2717,7 +3644,9 @@ export interface operations {
     };
     IngressAuthController_authUrl: {
         parameters: {
-            query?: never;
+            query: {
+                clientId: string;
+            };
             header?: never;
             path?: never;
             cookie?: never;
@@ -3011,6 +3940,14 @@ export interface operations {
     OID4VPVerifierManagementController_status: {
         parameters: {
             query: {
+                /** @description Space-separated OpenID Connect prompts: none, login, consent, select_account. none cannot be combined with other prompts. */
+                prompt?: string;
+                /** @description Canonical tenant UUID */
+                tenant_id?: string;
+                /** @description Intended receiving resource audience */
+                audience?: string;
+                /** @description Resource audience; must agree with audience */
+                resource?: string;
                 /** @description The response type of the authorization */
                 response_type: string;
                 /** @description The response mode of the authorization */