binoauth 0.0.13 → 0.0.14

package/dist/tenant-sdk/src/apis/OAuth2Api.d.ts

@@ -1,352 +0,0 @@
-/**
- * BinoAuth Tenant API
- *  A comprehensive multi-tenant authentication and authorization API supporting OAuth2, OpenID Connect, API keys, and multiple authentication methods.  ## Features  - **Multi-Tenant Architecture**: Isolated tenant-specific authentication - **OAuth2 & OpenID Connect**: Full OAuth2/OIDC implementation with PKCE support - **API Keys**: Long-lived keys for programmatic access - **Multiple Auth Methods**: Password, magic links, phone OTP, social login, MFA - **Session Management**: Secure session handling with Redis backing - **Comprehensive Security**: Rate limiting, audit logging, secure token handling  ## Authentication Methods  ### 1. Session-Based (Web Applications) - HTTP-only secure cookies - Automatic session management - CSRF protection  ### 2. API Keys (Programmatic Access) - Long-lived keys with scoped permissions - SHA-256 hashed storage - Usage tracking and analytics - **Header**: `X-API-Key: ak_live_...`  ### 3. OAuth2 Bearer Tokens - Short-lived JWT tokens - Full OAuth2/OIDC support - Refresh token capability - **Header**: `Authorization: Bearer ...`  ## Getting Started  ### For Web Applications 1. Use `/auth/login` for password authentication 2. Session cookies are automatically managed 3. Access protected endpoints directly  ### For Mobile Applications   1. Use OAuth2 authorization code flow with PKCE 2. Handle deep links for OAuth callbacks 3. Store and use refresh tokens for long-lived sessions  ### For Backend Services 1. Create API keys via `/api-keys` endpoint 2. Use API keys for direct authentication 3. Generate short-lived tokens when needed  ## Error Handling  All endpoints return structured error responses:  ```json {   \"detail\": \"Error description\",   \"error\": \"error_code\",    \"error_description\": \"Detailed error message\" } ```  ## Rate Limiting  API endpoints are rate limited to prevent abuse: - Authentication endpoints: 10 requests/minute - API key operations: 100 requests/hour   - General endpoints: 1000 requests/hour  ## Support  - Documentation: [API Documentation](https://docs.binoauth.com) - Support: support@binoauth.com - Status: [Status Page](https://status.binoauth.com)
- *
- * The version of the OpenAPI document: 1.0.0
- * Contact: support@binoauth.com
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-import * as runtime from '../runtime';
-import type { ClientConfigResponse, ClientDiscoveryResponse, ConsentRequest, DeviceAuthResponse, DeviceAuthenticationRequest, DeviceAuthorizationRequest, IntrospectTokenRequest, IntrospectTokenResponse, LogoutRequest, TokenRequest, TokenResponse, UserInfoResponse } from '../models/index';
-export interface AuthorizeApiV1OauthAuthorizeGetRequest {
-    responseType: string;
-    clientId: string;
-    redirectUri: string;
-    scope: string;
-    state?: string | null;
-    nonce?: string | null;
-    codeChallenge?: string | null;
-    codeChallengeMethod?: string | null;
-}
-export interface DeviceAuthenticateApiV1OauthDeviceAuthenticatePostRequest {
-    deviceAuthenticationRequest: DeviceAuthenticationRequest;
-}
-export interface DeviceAuthorizationApiV1OauthDeviceCodePostRequest {
-    deviceAuthorizationRequest: DeviceAuthorizationRequest;
-}
-export interface GetClientInfoApiV1ClientsClientIdConfigGetRequest {
-    clientId: string;
-}
-export interface GetTokensApiV1OauthTokenPostRequest {
-    tokenRequest: TokenRequest;
-}
-export interface HandleConsentApiV1OauthConsentPostRequest {
-    consentRequest: ConsentRequest;
-}
-export interface IntrospectTokenApiV1OauthIntrospectPostRequest {
-    introspectTokenRequest: IntrospectTokenRequest;
-}
-export interface LogoutApiV1OauthLogoutGetRequest {
-    clientId: string;
-    returnTo: string;
-}
-export interface RevokeApiV1OauthRevokePostRequest {
-    logoutRequest: LogoutRequest;
-}
-/**
- * OAuth2Api - interface
- *
- * @export
- * @interface OAuth2ApiInterface
- */
-export interface OAuth2ApiInterface {
-    /**
-     * OAuth2 authorization endpoint to start or resume the authorization flow.      Supports Authorization Code Flow with PKCE, manages flow_state in Redis     to handle user login and consent flows securely.
-     * @summary OAuth2 Authorization Endpoint
-     * @param {string} responseType
-     * @param {string} clientId
-     * @param {string} redirectUri
-     * @param {string} scope
-     * @param {string} [state]
-     * @param {string} [nonce]
-     * @param {string} [codeChallenge]
-     * @param {string} [codeChallengeMethod]
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof OAuth2ApiInterface
-     */
-    authorizeApiV1OauthAuthorizeGetRaw(requestParameters: AuthorizeApiV1OauthAuthorizeGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * OAuth2 authorization endpoint to start or resume the authorization flow.      Supports Authorization Code Flow with PKCE, manages flow_state in Redis     to handle user login and consent flows securely.
-     * OAuth2 Authorization Endpoint
-     */
-    authorizeApiV1OauthAuthorizeGet(requestParameters: AuthorizeApiV1OauthAuthorizeGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-    /**
-     * Handle device authentication.
-     * @summary Device Authenticate
-     * @param {DeviceAuthenticationRequest} deviceAuthenticationRequest
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof OAuth2ApiInterface
-     */
-    deviceAuthenticateApiV1OauthDeviceAuthenticatePostRaw(requestParameters: DeviceAuthenticateApiV1OauthDeviceAuthenticatePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * Handle device authentication.
-     * Device Authenticate
-     */
-    deviceAuthenticateApiV1OauthDeviceAuthenticatePost(requestParameters: DeviceAuthenticateApiV1OauthDeviceAuthenticatePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-    /**
-     * Handle device authorization request.
-     * @summary Device Authorization
-     * @param {DeviceAuthorizationRequest} deviceAuthorizationRequest
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof OAuth2ApiInterface
-     */
-    deviceAuthorizationApiV1OauthDeviceCodePostRaw(requestParameters: DeviceAuthorizationApiV1OauthDeviceCodePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DeviceAuthResponse>>;
-    /**
-     * Handle device authorization request.
-     * Device Authorization
-     */
-    deviceAuthorizationApiV1OauthDeviceCodePost(requestParameters: DeviceAuthorizationApiV1OauthDeviceCodePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DeviceAuthResponse>;
-    /**
-     * Get client information for consent page.
-     * @summary Get Client Info
-     * @param {string} clientId
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof OAuth2ApiInterface
-     */
-    getClientInfoApiV1ClientsClientIdConfigGetRaw(requestParameters: GetClientInfoApiV1ClientsClientIdConfigGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ClientConfigResponse>>;
-    /**
-     * Get client information for consent page.
-     * Get Client Info
-     */
-    getClientInfoApiV1ClientsClientIdConfigGet(requestParameters: GetClientInfoApiV1ClientsClientIdConfigGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ClientConfigResponse>;
-    /**
-     * Get client information for consent page.
-     * @summary Get Client Info
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof OAuth2ApiInterface
-     */
-    getClientInfoApiV1ClientsDiscoveryGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<ClientDiscoveryResponse>>>;
-    /**
-     * Get client information for consent page.
-     * Get Client Info
-     */
-    getClientInfoApiV1ClientsDiscoveryGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ClientDiscoveryResponse>>;
-    /**
-     *
-     * @summary Get Current User
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof OAuth2ApiInterface
-     */
-    getCurrentUserApiV1OauthUserinfoGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<UserInfoResponse>>;
-    /**
-     * Get Current User
-     */
-    getCurrentUserApiV1OauthUserinfoGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<UserInfoResponse>;
-    /**
-     * OAuth2 token endpoint supporting multiple grant types.          This endpoint exchanges various credentials for access tokens according to OAuth2 specification.     Supports both JSON and form-encoded requests.          **Supported Grant Types:**          ### 1. Authorization Code (Recommended)     Exchange authorization code for tokens (with PKCE support):     ```json     {       \"grant_type\": \"authorization_code\",       \"code\": \"authorization_code_from_authorize_endpoint\",       \"redirect_uri\": \"https://myapp.com/callback\",       \"client_id\": \"your_client_id\",       \"code_verifier\": \"original_code_verifier_string\"     }     ```          ### 2. Client Credentials (Server-to-Server)     Machine-to-machine authentication:     ```json     {       \"grant_type\": \"client_credentials\",       \"client_id\": \"your_client_id\",       \"client_secret\": \"your_client_secret\",       \"scope\": \"api:read api:write\"     }     ```          ### 3. Refresh Token     Refresh an expired access token:     ```json     {       \"grant_type\": \"refresh_token\",       \"refresh_token\": \"your_refresh_token\",       \"client_id\": \"your_client_id\"     }     ```          ### 4. Device Code     Complete device authorization flow:     ```json     {       \"grant_type\": \"urn:ietf:params:oauth:grant-type:device_code\",       \"device_code\": \"device_code_from_device_auth\",       \"client_id\": \"your_client_id\"     }     ```          ### 5. Password Grant (Not Recommended)     Direct username/password authentication:     ```json     {       \"grant_type\": \"password\",       \"username\": \"user@example.com\",       \"password\": \"user_password\",       \"client_id\": \"your_client_id\",       \"scope\": \"openid profile\"     }     ```          **Content Types:**     - `application/json` (recommended)     - `application/x-www-form-urlencoded` (standard OAuth2)          **Security Notes:**     - Use PKCE for public clients (mobile/SPA apps)     - Store refresh tokens securely     - Use appropriate scopes for least privilege     - Client credentials should be transmitted securely
-     * @summary OAuth2 Token Endpoint
-     * @param {TokenRequest} tokenRequest
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof OAuth2ApiInterface
-     */
-    getTokensApiV1OauthTokenPostRaw(requestParameters: GetTokensApiV1OauthTokenPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TokenResponse>>;
-    /**
-     * OAuth2 token endpoint supporting multiple grant types.          This endpoint exchanges various credentials for access tokens according to OAuth2 specification.     Supports both JSON and form-encoded requests.          **Supported Grant Types:**          ### 1. Authorization Code (Recommended)     Exchange authorization code for tokens (with PKCE support):     ```json     {       \"grant_type\": \"authorization_code\",       \"code\": \"authorization_code_from_authorize_endpoint\",       \"redirect_uri\": \"https://myapp.com/callback\",       \"client_id\": \"your_client_id\",       \"code_verifier\": \"original_code_verifier_string\"     }     ```          ### 2. Client Credentials (Server-to-Server)     Machine-to-machine authentication:     ```json     {       \"grant_type\": \"client_credentials\",       \"client_id\": \"your_client_id\",       \"client_secret\": \"your_client_secret\",       \"scope\": \"api:read api:write\"     }     ```          ### 3. Refresh Token     Refresh an expired access token:     ```json     {       \"grant_type\": \"refresh_token\",       \"refresh_token\": \"your_refresh_token\",       \"client_id\": \"your_client_id\"     }     ```          ### 4. Device Code     Complete device authorization flow:     ```json     {       \"grant_type\": \"urn:ietf:params:oauth:grant-type:device_code\",       \"device_code\": \"device_code_from_device_auth\",       \"client_id\": \"your_client_id\"     }     ```          ### 5. Password Grant (Not Recommended)     Direct username/password authentication:     ```json     {       \"grant_type\": \"password\",       \"username\": \"user@example.com\",       \"password\": \"user_password\",       \"client_id\": \"your_client_id\",       \"scope\": \"openid profile\"     }     ```          **Content Types:**     - `application/json` (recommended)     - `application/x-www-form-urlencoded` (standard OAuth2)          **Security Notes:**     - Use PKCE for public clients (mobile/SPA apps)     - Store refresh tokens securely     - Use appropriate scopes for least privilege     - Client credentials should be transmitted securely
-     * OAuth2 Token Endpoint
-     */
-    getTokensApiV1OauthTokenPost(requestParameters: GetTokensApiV1OauthTokenPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TokenResponse>;
-    /**
-     * Handle user\'s consent decision.
-     * @summary Handle Consent
-     * @param {ConsentRequest} consentRequest
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof OAuth2ApiInterface
-     */
-    handleConsentApiV1OauthConsentPostRaw(requestParameters: HandleConsentApiV1OauthConsentPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * Handle user\'s consent decision.
-     * Handle Consent
-     */
-    handleConsentApiV1OauthConsentPost(requestParameters: HandleConsentApiV1OauthConsentPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-    /**
-     * Introspect a token.
-     * @summary Introspect Token
-     * @param {IntrospectTokenRequest} introspectTokenRequest
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof OAuth2ApiInterface
-     */
-    introspectTokenApiV1OauthIntrospectPostRaw(requestParameters: IntrospectTokenApiV1OauthIntrospectPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<IntrospectTokenResponse>>;
-    /**
-     * Introspect a token.
-     * Introspect Token
-     */
-    introspectTokenApiV1OauthIntrospectPost(requestParameters: IntrospectTokenApiV1OauthIntrospectPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<IntrospectTokenResponse>;
-    /**
-     * Handle Oauth2 logout. Revokes the token and redirects to the logout endpoint with the return_to URL.
-     * @summary Logout
-     * @param {string} clientId
-     * @param {string} returnTo
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof OAuth2ApiInterface
-     */
-    logoutApiV1OauthLogoutGetRaw(requestParameters: LogoutApiV1OauthLogoutGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * Handle Oauth2 logout. Revokes the token and redirects to the logout endpoint with the return_to URL.
-     * Logout
-     */
-    logoutApiV1OauthLogoutGet(requestParameters: LogoutApiV1OauthLogoutGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-    /**
-     * OpenID Connect discovery endpoint.
-     * @summary Openid Configuration
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof OAuth2ApiInterface
-     */
-    openidConfigurationApiV1OauthWellKnownOpenidConfigurationGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * OpenID Connect discovery endpoint.
-     * Openid Configuration
-     */
-    openidConfigurationApiV1OauthWellKnownOpenidConfigurationGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-    /**
-     * Handle user logout.
-     * @summary Revoke
-     * @param {LogoutRequest} logoutRequest
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof OAuth2ApiInterface
-     */
-    revokeApiV1OauthRevokePostRaw(requestParameters: RevokeApiV1OauthRevokePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * Handle user logout.
-     * Revoke
-     */
-    revokeApiV1OauthRevokePost(requestParameters: RevokeApiV1OauthRevokePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-}
-/**
- *
- */
-export declare class OAuth2Api extends runtime.BaseAPI implements OAuth2ApiInterface {
-    /**
-     * OAuth2 authorization endpoint to start or resume the authorization flow.      Supports Authorization Code Flow with PKCE, manages flow_state in Redis     to handle user login and consent flows securely.
-     * OAuth2 Authorization Endpoint
-     */
-    authorizeApiV1OauthAuthorizeGetRaw(requestParameters: AuthorizeApiV1OauthAuthorizeGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * OAuth2 authorization endpoint to start or resume the authorization flow.      Supports Authorization Code Flow with PKCE, manages flow_state in Redis     to handle user login and consent flows securely.
-     * OAuth2 Authorization Endpoint
-     */
-    authorizeApiV1OauthAuthorizeGet(requestParameters: AuthorizeApiV1OauthAuthorizeGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-    /**
-     * Handle device authentication.
-     * Device Authenticate
-     */
-    deviceAuthenticateApiV1OauthDeviceAuthenticatePostRaw(requestParameters: DeviceAuthenticateApiV1OauthDeviceAuthenticatePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * Handle device authentication.
-     * Device Authenticate
-     */
-    deviceAuthenticateApiV1OauthDeviceAuthenticatePost(requestParameters: DeviceAuthenticateApiV1OauthDeviceAuthenticatePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-    /**
-     * Handle device authorization request.
-     * Device Authorization
-     */
-    deviceAuthorizationApiV1OauthDeviceCodePostRaw(requestParameters: DeviceAuthorizationApiV1OauthDeviceCodePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DeviceAuthResponse>>;
-    /**
-     * Handle device authorization request.
-     * Device Authorization
-     */
-    deviceAuthorizationApiV1OauthDeviceCodePost(requestParameters: DeviceAuthorizationApiV1OauthDeviceCodePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DeviceAuthResponse>;
-    /**
-     * Get client information for consent page.
-     * Get Client Info
-     */
-    getClientInfoApiV1ClientsClientIdConfigGetRaw(requestParameters: GetClientInfoApiV1ClientsClientIdConfigGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ClientConfigResponse>>;
-    /**
-     * Get client information for consent page.
-     * Get Client Info
-     */
-    getClientInfoApiV1ClientsClientIdConfigGet(requestParameters: GetClientInfoApiV1ClientsClientIdConfigGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ClientConfigResponse>;
-    /**
-     * Get client information for consent page.
-     * Get Client Info
-     */
-    getClientInfoApiV1ClientsDiscoveryGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<ClientDiscoveryResponse>>>;
-    /**
-     * Get client information for consent page.
-     * Get Client Info
-     */
-    getClientInfoApiV1ClientsDiscoveryGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ClientDiscoveryResponse>>;
-    /**
-     * Get Current User
-     */
-    getCurrentUserApiV1OauthUserinfoGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<UserInfoResponse>>;
-    /**
-     * Get Current User
-     */
-    getCurrentUserApiV1OauthUserinfoGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<UserInfoResponse>;
-    /**
-     * OAuth2 token endpoint supporting multiple grant types.          This endpoint exchanges various credentials for access tokens according to OAuth2 specification.     Supports both JSON and form-encoded requests.          **Supported Grant Types:**          ### 1. Authorization Code (Recommended)     Exchange authorization code for tokens (with PKCE support):     ```json     {       \"grant_type\": \"authorization_code\",       \"code\": \"authorization_code_from_authorize_endpoint\",       \"redirect_uri\": \"https://myapp.com/callback\",       \"client_id\": \"your_client_id\",       \"code_verifier\": \"original_code_verifier_string\"     }     ```          ### 2. Client Credentials (Server-to-Server)     Machine-to-machine authentication:     ```json     {       \"grant_type\": \"client_credentials\",       \"client_id\": \"your_client_id\",       \"client_secret\": \"your_client_secret\",       \"scope\": \"api:read api:write\"     }     ```          ### 3. Refresh Token     Refresh an expired access token:     ```json     {       \"grant_type\": \"refresh_token\",       \"refresh_token\": \"your_refresh_token\",       \"client_id\": \"your_client_id\"     }     ```          ### 4. Device Code     Complete device authorization flow:     ```json     {       \"grant_type\": \"urn:ietf:params:oauth:grant-type:device_code\",       \"device_code\": \"device_code_from_device_auth\",       \"client_id\": \"your_client_id\"     }     ```          ### 5. Password Grant (Not Recommended)     Direct username/password authentication:     ```json     {       \"grant_type\": \"password\",       \"username\": \"user@example.com\",       \"password\": \"user_password\",       \"client_id\": \"your_client_id\",       \"scope\": \"openid profile\"     }     ```          **Content Types:**     - `application/json` (recommended)     - `application/x-www-form-urlencoded` (standard OAuth2)          **Security Notes:**     - Use PKCE for public clients (mobile/SPA apps)     - Store refresh tokens securely     - Use appropriate scopes for least privilege     - Client credentials should be transmitted securely
-     * OAuth2 Token Endpoint
-     */
-    getTokensApiV1OauthTokenPostRaw(requestParameters: GetTokensApiV1OauthTokenPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TokenResponse>>;
-    /**
-     * OAuth2 token endpoint supporting multiple grant types.          This endpoint exchanges various credentials for access tokens according to OAuth2 specification.     Supports both JSON and form-encoded requests.          **Supported Grant Types:**          ### 1. Authorization Code (Recommended)     Exchange authorization code for tokens (with PKCE support):     ```json     {       \"grant_type\": \"authorization_code\",       \"code\": \"authorization_code_from_authorize_endpoint\",       \"redirect_uri\": \"https://myapp.com/callback\",       \"client_id\": \"your_client_id\",       \"code_verifier\": \"original_code_verifier_string\"     }     ```          ### 2. Client Credentials (Server-to-Server)     Machine-to-machine authentication:     ```json     {       \"grant_type\": \"client_credentials\",       \"client_id\": \"your_client_id\",       \"client_secret\": \"your_client_secret\",       \"scope\": \"api:read api:write\"     }     ```          ### 3. Refresh Token     Refresh an expired access token:     ```json     {       \"grant_type\": \"refresh_token\",       \"refresh_token\": \"your_refresh_token\",       \"client_id\": \"your_client_id\"     }     ```          ### 4. Device Code     Complete device authorization flow:     ```json     {       \"grant_type\": \"urn:ietf:params:oauth:grant-type:device_code\",       \"device_code\": \"device_code_from_device_auth\",       \"client_id\": \"your_client_id\"     }     ```          ### 5. Password Grant (Not Recommended)     Direct username/password authentication:     ```json     {       \"grant_type\": \"password\",       \"username\": \"user@example.com\",       \"password\": \"user_password\",       \"client_id\": \"your_client_id\",       \"scope\": \"openid profile\"     }     ```          **Content Types:**     - `application/json` (recommended)     - `application/x-www-form-urlencoded` (standard OAuth2)          **Security Notes:**     - Use PKCE for public clients (mobile/SPA apps)     - Store refresh tokens securely     - Use appropriate scopes for least privilege     - Client credentials should be transmitted securely
-     * OAuth2 Token Endpoint
-     */
-    getTokensApiV1OauthTokenPost(requestParameters: GetTokensApiV1OauthTokenPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TokenResponse>;
-    /**
-     * Handle user\'s consent decision.
-     * Handle Consent
-     */
-    handleConsentApiV1OauthConsentPostRaw(requestParameters: HandleConsentApiV1OauthConsentPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * Handle user\'s consent decision.
-     * Handle Consent
-     */
-    handleConsentApiV1OauthConsentPost(requestParameters: HandleConsentApiV1OauthConsentPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-    /**
-     * Introspect a token.
-     * Introspect Token
-     */
-    introspectTokenApiV1OauthIntrospectPostRaw(requestParameters: IntrospectTokenApiV1OauthIntrospectPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<IntrospectTokenResponse>>;
-    /**
-     * Introspect a token.
-     * Introspect Token
-     */
-    introspectTokenApiV1OauthIntrospectPost(requestParameters: IntrospectTokenApiV1OauthIntrospectPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<IntrospectTokenResponse>;
-    /**
-     * Handle Oauth2 logout. Revokes the token and redirects to the logout endpoint with the return_to URL.
-     * Logout
-     */
-    logoutApiV1OauthLogoutGetRaw(requestParameters: LogoutApiV1OauthLogoutGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * Handle Oauth2 logout. Revokes the token and redirects to the logout endpoint with the return_to URL.
-     * Logout
-     */
-    logoutApiV1OauthLogoutGet(requestParameters: LogoutApiV1OauthLogoutGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-    /**
-     * OpenID Connect discovery endpoint.
-     * Openid Configuration
-     */
-    openidConfigurationApiV1OauthWellKnownOpenidConfigurationGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * OpenID Connect discovery endpoint.
-     * Openid Configuration
-     */
-    openidConfigurationApiV1OauthWellKnownOpenidConfigurationGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-    /**
-     * Handle user logout.
-     * Revoke
-     */
-    revokeApiV1OauthRevokePostRaw(requestParameters: RevokeApiV1OauthRevokePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * Handle user logout.
-     * Revoke
-     */
-    revokeApiV1OauthRevokePost(requestParameters: RevokeApiV1OauthRevokePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-}
-//# sourceMappingURL=OAuth2Api.d.ts.map

package/dist/tenant-sdk/src/apis/OAuth2Api.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"OAuth2Api.d.ts","sourceRoot":"","sources":["../../../../../tenant-sdk/src/apis/OAuth2Api.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,OAAO,MAAM,YAAY,CAAC;AACtC,OAAO,KAAK,EACV,oBAAoB,EACpB,uBAAuB,EACvB,cAAc,EACd,kBAAkB,EAClB,2BAA2B,EAC3B,0BAA0B,EAE1B,sBAAsB,EACtB,uBAAuB,EACvB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,gBAAgB,EACjB,MAAM,iBAAiB,CAAC;AA8BzB,MAAM,WAAW,sCAAsC;IACnD,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,yDAAyD;IACtE,2BAA2B,EAAE,2BAA2B,CAAC;CAC5D;AAED,MAAM,WAAW,kDAAkD;IAC/D,0BAA0B,EAAE,0BAA0B,CAAC;CAC1D;AAED,MAAM,WAAW,iDAAiD;IAC9D,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mCAAmC;IAChD,YAAY,EAAE,YAAY,CAAC;CAC9B;AAED,MAAM,WAAW,yCAAyC;IACtD,cAAc,EAAE,cAAc,CAAC;CAClC;AAED,MAAM,WAAW,8CAA8C;IAC3D,sBAAsB,EAAE,sBAAsB,CAAC;CAClD;AAED,MAAM,WAAW,gCAAgC;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iCAAiC;IAC9C,aAAa,EAAE,aAAa,CAAC;CAChC;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAC/B;;;;;;;;;;;;;;OAcG;IACH,kCAAkC,CAAC,iBAAiB,EAAE,sCAAsC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAE7L;;;OAGG;IACH,+BAA+B,CAAC,iBAAiB,EAAE,sCAAsC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAErK;;;;;;;OAOG;IACH,qDAAqD,CAAC,iBAAiB,EAAE,yDAAyD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAEnO;;;OAGG;IACH,kDAAkD,CAAC,iBAAiB,EAAE,yDAAyD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAE3M;;;;;;;OAOG;IACH,8CAA8C,CAAC,iBAAiB,EAAE,kDAAkD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAEpO;;;OAGG;IACH,2CAA2C,CAAC,iBAAiB,EAAE,kDAAkD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE5M;;;;;;;OAOG;IACH,6CAA6C,CAAC,iBAAiB,EAAE,iDAAiD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAEpO;;;OAGG;IACH,0CAA0C,CAAC,iBAAiB,EAAE,iDAAiD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAE5M;;;;;;OAMG;IACH,wCAAwC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;IAEnK;;;OAGG;IACH,qCAAqC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE3I;;;;;;OAMG;IACH,sCAAsC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAEnJ;;OAEG;IACH,mCAAmC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE3H;;;;;;;OAOG;IACH,+BAA+B,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC;IAEjM;;;OAGG;IACH,4BAA4B,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAEzK;;;;;;;OAOG;IACH,qCAAqC,CAAC,iBAAiB,EAAE,yCAAyC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAEnM;;;OAGG;IACH,kCAAkC,CAAC,iBAAiB,EAAE,yCAAyC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAE3K;;;;;;;OAOG;IACH,0CAA0C,CAAC,iBAAiB,EAAE,8CAA8C,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAEjO;;;OAGG;IACH,uCAAuC,CAAC,iBAAiB,EAAE,8CAA8C,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAEzM;;;;;;;;OAQG;IACH,4BAA4B,CAAC,iBAAiB,EAAE,gCAAgC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAEjL;;;OAGG;IACH,yBAAyB,CAAC,iBAAiB,EAAE,gCAAgC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAEzJ;;;;;;OAMG;IACH,+DAA+D,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAE/J;;;OAGG;IACH,4DAA4D,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAEvI;;;;;;;OAOG;IACH,6BAA6B,CAAC,iBAAiB,EAAE,iCAAiC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAEnL;;;OAGG;IACH,0BAA0B,CAAC,iBAAiB,EAAE,iCAAiC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CAE9J;AAED;;GAEG;AACH,qBAAa,SAAU,SAAQ,OAAO,CAAC,OAAQ,YAAW,kBAAkB;IAExE;;;OAGG;IACG,kCAAkC,CAAC,iBAAiB,EAAE,sCAAsC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAkFlM;;;OAGG;IACG,+BAA+B,CAAC,iBAAiB,EAAE,sCAAsC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;IAK1K;;;OAGG;IACG,qDAAqD,CAAC,iBAAiB,EAAE,yDAAyD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAgCxO;;;OAGG;IACG,kDAAkD,CAAC,iBAAiB,EAAE,yDAAyD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;IAKhN;;;OAGG;IACG,8CAA8C,CAAC,iBAAiB,EAAE,kDAAkD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IA4BzO;;;OAGG;IACG,2CAA2C,CAAC,iBAAiB,EAAE,kDAAkD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAKjN;;;OAGG;IACG,6CAA6C,CAAC,iBAAiB,EAAE,iDAAiD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IA0BzO;;;OAGG;IACG,0CAA0C,CAAC,iBAAiB,EAAE,iDAAiD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAKjN;;;OAGG;IACG,wCAAwC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAkBxK;;;OAGG;IACG,qCAAqC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAKhJ;;OAEG;IACG,sCAAsC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAkBxJ;;OAEG;IACG,mCAAmC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAKhI;;;OAGG;IACG,+BAA+B,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IA4BtM;;;OAGG;IACG,4BAA4B,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC;IAK9K;;;OAGG;IACG,qCAAqC,CAAC,iBAAiB,EAAE,yCAAyC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAgCxM;;;OAGG;IACG,kCAAkC,CAAC,iBAAiB,EAAE,yCAAyC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;IAKhL;;;OAGG;IACG,0CAA0C,CAAC,iBAAiB,EAAE,8CAA8C,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;IA4BtO;;;OAGG;IACG,uCAAuC,CAAC,iBAAiB,EAAE,8CAA8C,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAK9M;;;OAGG;IACG,4BAA4B,CAAC,iBAAiB,EAAE,gCAAgC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IA4CtL;;;OAGG;IACG,yBAAyB,CAAC,iBAAiB,EAAE,gCAAgC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;IAK9J;;;OAGG;IACG,+DAA+D,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAsBpK;;;OAGG;IACG,4DAA4D,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;IAK5I;;;OAGG;IACG,6BAA6B,CAAC,iBAAiB,EAAE,iCAAiC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAgCxL;;;OAGG;IACG,0BAA0B,CAAC,iBAAiB,EAAE,iCAAiC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;CAKnK"}