binoauth 0.0.14 → 0.0.15

package/dist/generated/tenant/apis/OAuth2Api.d.ts

@@ -0,0 +1,352 @@
+/**
+ * BinoAuth Tenant API
+ *  A comprehensive multi-tenant authentication and authorization API supporting OAuth2, OpenID Connect, API keys, and multiple authentication methods.  ## Features  - **Multi-Tenant Architecture**: Isolated tenant-specific authentication - **OAuth2 & OpenID Connect**: Full OAuth2/OIDC implementation with PKCE support - **API Keys**: Long-lived keys for programmatic access - **Multiple Auth Methods**: Password, magic links, phone OTP, social login, MFA - **Session Management**: Secure session handling with Redis backing - **Comprehensive Security**: Rate limiting, audit logging, secure token handling  ## Authentication Methods  ### 1. Session-Based (Web Applications) - HTTP-only secure cookies - Automatic session management - CSRF protection  ### 2. API Keys (Programmatic Access) - Long-lived keys with scoped permissions - SHA-256 hashed storage - Usage tracking and analytics - **Header**: `X-API-Key: ak_live_...`  ### 3. OAuth2 Bearer Tokens - Short-lived JWT tokens - Full OAuth2/OIDC support - Refresh token capability - **Header**: `Authorization: Bearer ...`  ## Getting Started  ### For Web Applications 1. Use `/auth/login` for password authentication 2. Session cookies are automatically managed 3. Access protected endpoints directly  ### For Mobile Applications   1. Use OAuth2 authorization code flow with PKCE 2. Handle deep links for OAuth callbacks 3. Store and use refresh tokens for long-lived sessions  ### For Backend Services 1. Create API keys via `/api-keys` endpoint 2. Use API keys for direct authentication 3. Generate short-lived tokens when needed  ## Error Handling  All endpoints return structured error responses:  ```json {   \"detail\": \"Error description\",   \"error\": \"error_code\",    \"error_description\": \"Detailed error message\" } ```  ## Rate Limiting  API endpoints are rate limited to prevent abuse: - Authentication endpoints: 10 requests/minute - API key operations: 100 requests/hour   - General endpoints: 1000 requests/hour  ## Support  - Documentation: [API Documentation](https://docs.binoauth.com) - Support: support@binoauth.com - Status: [Status Page](https://status.binoauth.com)
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@binoauth.com
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import * as runtime from '../runtime';
+import type { ClientConfigResponse, ClientDiscoveryResponse, ConsentRequest, DeviceAuthResponse, DeviceAuthenticationRequest, DeviceAuthorizationRequest, IntrospectTokenRequest, IntrospectTokenResponse, LogoutRequest, TokenRequest, TokenResponse, UserInfoResponse } from '../models/index';
+export interface AuthorizeApiV1OauthAuthorizeGetRequest {
+    responseType: string;
+    clientId: string;
+    redirectUri: string;
+    scope: string;
+    state?: string | null;
+    nonce?: string | null;
+    codeChallenge?: string | null;
+    codeChallengeMethod?: string | null;
+}
+export interface DeviceAuthenticateApiV1OauthDeviceAuthenticatePostRequest {
+    deviceAuthenticationRequest: DeviceAuthenticationRequest;
+}
+export interface DeviceAuthorizationApiV1OauthDeviceCodePostRequest {
+    deviceAuthorizationRequest: DeviceAuthorizationRequest;
+}
+export interface GetClientInfoApiV1ClientsClientIdConfigGetRequest {
+    clientId: string;
+}
+export interface GetTokensApiV1OauthTokenPostRequest {
+    tokenRequest: TokenRequest;
+}
+export interface HandleConsentApiV1OauthConsentPostRequest {
+    consentRequest: ConsentRequest;
+}
+export interface IntrospectTokenApiV1OauthIntrospectPostRequest {
+    introspectTokenRequest: IntrospectTokenRequest;
+}
+export interface LogoutApiV1OauthLogoutGetRequest {
+    clientId: string;
+    returnTo: string;
+}
+export interface RevokeApiV1OauthRevokePostRequest {
+    logoutRequest: LogoutRequest;
+}
+/**
+ * OAuth2Api - interface
+ *
+ * @export
+ * @interface OAuth2ApiInterface
+ */
+export interface OAuth2ApiInterface {
+    /**
+     * OAuth2 authorization endpoint to start or resume the authorization flow.      Supports Authorization Code Flow with PKCE, manages flow_state in Redis     to handle user login and consent flows securely.
+     * @summary OAuth2 Authorization Endpoint
+     * @param {string} responseType
+     * @param {string} clientId
+     * @param {string} redirectUri
+     * @param {string} scope
+     * @param {string} [state]
+     * @param {string} [nonce]
+     * @param {string} [codeChallenge]
+     * @param {string} [codeChallengeMethod]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof OAuth2ApiInterface
+     */
+    authorizeApiV1OauthAuthorizeGetRaw(requestParameters: AuthorizeApiV1OauthAuthorizeGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
+    /**
+     * OAuth2 authorization endpoint to start or resume the authorization flow.      Supports Authorization Code Flow with PKCE, manages flow_state in Redis     to handle user login and consent flows securely.
+     * OAuth2 Authorization Endpoint
+     */
+    authorizeApiV1OauthAuthorizeGet(requestParameters: AuthorizeApiV1OauthAuthorizeGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
+    /**
+     * Handle device authentication.
+     * @summary Device Authenticate
+     * @param {DeviceAuthenticationRequest} deviceAuthenticationRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof OAuth2ApiInterface
+     */
+    deviceAuthenticateApiV1OauthDeviceAuthenticatePostRaw(requestParameters: DeviceAuthenticateApiV1OauthDeviceAuthenticatePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
+    /**
+     * Handle device authentication.
+     * Device Authenticate
+     */
+    deviceAuthenticateApiV1OauthDeviceAuthenticatePost(requestParameters: DeviceAuthenticateApiV1OauthDeviceAuthenticatePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
+    /**
+     * Handle device authorization request.
+     * @summary Device Authorization
+     * @param {DeviceAuthorizationRequest} deviceAuthorizationRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof OAuth2ApiInterface
+     */
+    deviceAuthorizationApiV1OauthDeviceCodePostRaw(requestParameters: DeviceAuthorizationApiV1OauthDeviceCodePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DeviceAuthResponse>>;
+    /**
+     * Handle device authorization request.
+     * Device Authorization
+     */
+    deviceAuthorizationApiV1OauthDeviceCodePost(requestParameters: DeviceAuthorizationApiV1OauthDeviceCodePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DeviceAuthResponse>;
+    /**
+     * Get client information for consent page.
+     * @summary Get Client Info
+     * @param {string} clientId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof OAuth2ApiInterface
+     */
+    getClientInfoApiV1ClientsClientIdConfigGetRaw(requestParameters: GetClientInfoApiV1ClientsClientIdConfigGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ClientConfigResponse>>;
+    /**
+     * Get client information for consent page.
+     * Get Client Info
+     */
+    getClientInfoApiV1ClientsClientIdConfigGet(requestParameters: GetClientInfoApiV1ClientsClientIdConfigGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ClientConfigResponse>;
+    /**
+     * Get client information for consent page.
+     * @summary Get Client Info
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof OAuth2ApiInterface
+     */
+    getClientInfoApiV1ClientsDiscoveryGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<ClientDiscoveryResponse>>>;
+    /**
+     * Get client information for consent page.
+     * Get Client Info
+     */
+    getClientInfoApiV1ClientsDiscoveryGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ClientDiscoveryResponse>>;
+    /**
+     *
+     * @summary Get Current User
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof OAuth2ApiInterface
+     */
+    getCurrentUserApiV1OauthUserinfoGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<UserInfoResponse>>;
+    /**
+     * Get Current User
+     */
+    getCurrentUserApiV1OauthUserinfoGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<UserInfoResponse>;
+    /**
+     * OAuth2 token endpoint supporting multiple grant types.          This endpoint exchanges various credentials for access tokens according to OAuth2 specification.     Supports both JSON and form-encoded requests.          **Supported Grant Types:**          ### 1. Authorization Code (Recommended)     Exchange authorization code for tokens (with PKCE support):     ```json     {       \"grant_type\": \"authorization_code\",       \"code\": \"authorization_code_from_authorize_endpoint\",       \"redirect_uri\": \"https://myapp.com/callback\",       \"client_id\": \"your_client_id\",       \"code_verifier\": \"original_code_verifier_string\"     }     ```          ### 2. Client Credentials (Server-to-Server)     Machine-to-machine authentication:     ```json     {       \"grant_type\": \"client_credentials\",       \"client_id\": \"your_client_id\",       \"client_secret\": \"your_client_secret\",       \"scope\": \"api:read api:write\"     }     ```          ### 3. Refresh Token     Refresh an expired access token:     ```json     {       \"grant_type\": \"refresh_token\",       \"refresh_token\": \"your_refresh_token\",       \"client_id\": \"your_client_id\"     }     ```          ### 4. Device Code     Complete device authorization flow:     ```json     {       \"grant_type\": \"urn:ietf:params:oauth:grant-type:device_code\",       \"device_code\": \"device_code_from_device_auth\",       \"client_id\": \"your_client_id\"     }     ```          ### 5. Password Grant (Not Recommended)     Direct username/password authentication:     ```json     {       \"grant_type\": \"password\",       \"username\": \"user@example.com\",       \"password\": \"user_password\",       \"client_id\": \"your_client_id\",       \"scope\": \"openid profile\"     }     ```          **Content Types:**     - `application/json` (recommended)     - `application/x-www-form-urlencoded` (standard OAuth2)          **Security Notes:**     - Use PKCE for public clients (mobile/SPA apps)     - Store refresh tokens securely     - Use appropriate scopes for least privilege     - Client credentials should be transmitted securely
+     * @summary OAuth2 Token Endpoint
+     * @param {TokenRequest} tokenRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof OAuth2ApiInterface
+     */
+    getTokensApiV1OauthTokenPostRaw(requestParameters: GetTokensApiV1OauthTokenPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TokenResponse>>;
+    /**
+     * OAuth2 token endpoint supporting multiple grant types.          This endpoint exchanges various credentials for access tokens according to OAuth2 specification.     Supports both JSON and form-encoded requests.          **Supported Grant Types:**          ### 1. Authorization Code (Recommended)     Exchange authorization code for tokens (with PKCE support):     ```json     {       \"grant_type\": \"authorization_code\",       \"code\": \"authorization_code_from_authorize_endpoint\",       \"redirect_uri\": \"https://myapp.com/callback\",       \"client_id\": \"your_client_id\",       \"code_verifier\": \"original_code_verifier_string\"     }     ```          ### 2. Client Credentials (Server-to-Server)     Machine-to-machine authentication:     ```json     {       \"grant_type\": \"client_credentials\",       \"client_id\": \"your_client_id\",       \"client_secret\": \"your_client_secret\",       \"scope\": \"api:read api:write\"     }     ```          ### 3. Refresh Token     Refresh an expired access token:     ```json     {       \"grant_type\": \"refresh_token\",       \"refresh_token\": \"your_refresh_token\",       \"client_id\": \"your_client_id\"     }     ```          ### 4. Device Code     Complete device authorization flow:     ```json     {       \"grant_type\": \"urn:ietf:params:oauth:grant-type:device_code\",       \"device_code\": \"device_code_from_device_auth\",       \"client_id\": \"your_client_id\"     }     ```          ### 5. Password Grant (Not Recommended)     Direct username/password authentication:     ```json     {       \"grant_type\": \"password\",       \"username\": \"user@example.com\",       \"password\": \"user_password\",       \"client_id\": \"your_client_id\",       \"scope\": \"openid profile\"     }     ```          **Content Types:**     - `application/json` (recommended)     - `application/x-www-form-urlencoded` (standard OAuth2)          **Security Notes:**     - Use PKCE for public clients (mobile/SPA apps)     - Store refresh tokens securely     - Use appropriate scopes for least privilege     - Client credentials should be transmitted securely
+     * OAuth2 Token Endpoint
+     */
+    getTokensApiV1OauthTokenPost(requestParameters: GetTokensApiV1OauthTokenPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TokenResponse>;
+    /**
+     * Handle user\'s consent decision.
+     * @summary Handle Consent
+     * @param {ConsentRequest} consentRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof OAuth2ApiInterface
+     */
+    handleConsentApiV1OauthConsentPostRaw(requestParameters: HandleConsentApiV1OauthConsentPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
+    /**
+     * Handle user\'s consent decision.
+     * Handle Consent
+     */
+    handleConsentApiV1OauthConsentPost(requestParameters: HandleConsentApiV1OauthConsentPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
+    /**
+     * Introspect a token.
+     * @summary Introspect Token
+     * @param {IntrospectTokenRequest} introspectTokenRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof OAuth2ApiInterface
+     */
+    introspectTokenApiV1OauthIntrospectPostRaw(requestParameters: IntrospectTokenApiV1OauthIntrospectPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<IntrospectTokenResponse>>;
+    /**
+     * Introspect a token.
+     * Introspect Token
+     */
+    introspectTokenApiV1OauthIntrospectPost(requestParameters: IntrospectTokenApiV1OauthIntrospectPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<IntrospectTokenResponse>;
+    /**
+     * Handle Oauth2 logout. Revokes the token and redirects to the logout endpoint with the return_to URL.
+     * @summary Logout
+     * @param {string} clientId
+     * @param {string} returnTo
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof OAuth2ApiInterface
+     */
+    logoutApiV1OauthLogoutGetRaw(requestParameters: LogoutApiV1OauthLogoutGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
+    /**
+     * Handle Oauth2 logout. Revokes the token and redirects to the logout endpoint with the return_to URL.
+     * Logout
+     */
+    logoutApiV1OauthLogoutGet(requestParameters: LogoutApiV1OauthLogoutGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
+    /**
+     * OpenID Connect discovery endpoint.
+     * @summary Openid Configuration
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof OAuth2ApiInterface
+     */
+    openidConfigurationApiV1OauthWellKnownOpenidConfigurationGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
+    /**
+     * OpenID Connect discovery endpoint.
+     * Openid Configuration
+     */
+    openidConfigurationApiV1OauthWellKnownOpenidConfigurationGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
+    /**
+     * Handle user logout.
+     * @summary Revoke
+     * @param {LogoutRequest} logoutRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof OAuth2ApiInterface
+     */
+    revokeApiV1OauthRevokePostRaw(requestParameters: RevokeApiV1OauthRevokePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
+    /**
+     * Handle user logout.
+     * Revoke
+     */
+    revokeApiV1OauthRevokePost(requestParameters: RevokeApiV1OauthRevokePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
+}
+/**
+ *
+ */
+export declare class OAuth2Api extends runtime.BaseAPI implements OAuth2ApiInterface {
+    /**
+     * OAuth2 authorization endpoint to start or resume the authorization flow.      Supports Authorization Code Flow with PKCE, manages flow_state in Redis     to handle user login and consent flows securely.
+     * OAuth2 Authorization Endpoint
+     */
+    authorizeApiV1OauthAuthorizeGetRaw(requestParameters: AuthorizeApiV1OauthAuthorizeGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
+    /**
+     * OAuth2 authorization endpoint to start or resume the authorization flow.      Supports Authorization Code Flow with PKCE, manages flow_state in Redis     to handle user login and consent flows securely.
+     * OAuth2 Authorization Endpoint
+     */
+    authorizeApiV1OauthAuthorizeGet(requestParameters: AuthorizeApiV1OauthAuthorizeGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
+    /**
+     * Handle device authentication.
+     * Device Authenticate
+     */
+    deviceAuthenticateApiV1OauthDeviceAuthenticatePostRaw(requestParameters: DeviceAuthenticateApiV1OauthDeviceAuthenticatePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
+    /**
+     * Handle device authentication.
+     * Device Authenticate
+     */
+    deviceAuthenticateApiV1OauthDeviceAuthenticatePost(requestParameters: DeviceAuthenticateApiV1OauthDeviceAuthenticatePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
+    /**
+     * Handle device authorization request.
+     * Device Authorization
+     */
+    deviceAuthorizationApiV1OauthDeviceCodePostRaw(requestParameters: DeviceAuthorizationApiV1OauthDeviceCodePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DeviceAuthResponse>>;
+    /**
+     * Handle device authorization request.
+     * Device Authorization
+     */
+    deviceAuthorizationApiV1OauthDeviceCodePost(requestParameters: DeviceAuthorizationApiV1OauthDeviceCodePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DeviceAuthResponse>;
+    /**
+     * Get client information for consent page.
+     * Get Client Info
+     */
+    getClientInfoApiV1ClientsClientIdConfigGetRaw(requestParameters: GetClientInfoApiV1ClientsClientIdConfigGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ClientConfigResponse>>;
+    /**
+     * Get client information for consent page.
+     * Get Client Info
+     */
+    getClientInfoApiV1ClientsClientIdConfigGet(requestParameters: GetClientInfoApiV1ClientsClientIdConfigGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ClientConfigResponse>;
+    /**
+     * Get client information for consent page.
+     * Get Client Info
+     */
+    getClientInfoApiV1ClientsDiscoveryGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<ClientDiscoveryResponse>>>;
+    /**
+     * Get client information for consent page.
+     * Get Client Info
+     */
+    getClientInfoApiV1ClientsDiscoveryGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ClientDiscoveryResponse>>;
+    /**
+     * Get Current User
+     */
+    getCurrentUserApiV1OauthUserinfoGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<UserInfoResponse>>;
+    /**
+     * Get Current User
+     */
+    getCurrentUserApiV1OauthUserinfoGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<UserInfoResponse>;
+    /**
+     * OAuth2 token endpoint supporting multiple grant types.          This endpoint exchanges various credentials for access tokens according to OAuth2 specification.     Supports both JSON and form-encoded requests.          **Supported Grant Types:**          ### 1. Authorization Code (Recommended)     Exchange authorization code for tokens (with PKCE support):     ```json     {       \"grant_type\": \"authorization_code\",       \"code\": \"authorization_code_from_authorize_endpoint\",       \"redirect_uri\": \"https://myapp.com/callback\",       \"client_id\": \"your_client_id\",       \"code_verifier\": \"original_code_verifier_string\"     }     ```          ### 2. Client Credentials (Server-to-Server)     Machine-to-machine authentication:     ```json     {       \"grant_type\": \"client_credentials\",       \"client_id\": \"your_client_id\",       \"client_secret\": \"your_client_secret\",       \"scope\": \"api:read api:write\"     }     ```          ### 3. Refresh Token     Refresh an expired access token:     ```json     {       \"grant_type\": \"refresh_token\",       \"refresh_token\": \"your_refresh_token\",       \"client_id\": \"your_client_id\"     }     ```          ### 4. Device Code     Complete device authorization flow:     ```json     {       \"grant_type\": \"urn:ietf:params:oauth:grant-type:device_code\",       \"device_code\": \"device_code_from_device_auth\",       \"client_id\": \"your_client_id\"     }     ```          ### 5. Password Grant (Not Recommended)     Direct username/password authentication:     ```json     {       \"grant_type\": \"password\",       \"username\": \"user@example.com\",       \"password\": \"user_password\",       \"client_id\": \"your_client_id\",       \"scope\": \"openid profile\"     }     ```          **Content Types:**     - `application/json` (recommended)     - `application/x-www-form-urlencoded` (standard OAuth2)          **Security Notes:**     - Use PKCE for public clients (mobile/SPA apps)     - Store refresh tokens securely     - Use appropriate scopes for least privilege     - Client credentials should be transmitted securely
+     * OAuth2 Token Endpoint
+     */
+    getTokensApiV1OauthTokenPostRaw(requestParameters: GetTokensApiV1OauthTokenPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<TokenResponse>>;
+    /**
+     * OAuth2 token endpoint supporting multiple grant types.          This endpoint exchanges various credentials for access tokens according to OAuth2 specification.     Supports both JSON and form-encoded requests.          **Supported Grant Types:**          ### 1. Authorization Code (Recommended)     Exchange authorization code for tokens (with PKCE support):     ```json     {       \"grant_type\": \"authorization_code\",       \"code\": \"authorization_code_from_authorize_endpoint\",       \"redirect_uri\": \"https://myapp.com/callback\",       \"client_id\": \"your_client_id\",       \"code_verifier\": \"original_code_verifier_string\"     }     ```          ### 2. Client Credentials (Server-to-Server)     Machine-to-machine authentication:     ```json     {       \"grant_type\": \"client_credentials\",       \"client_id\": \"your_client_id\",       \"client_secret\": \"your_client_secret\",       \"scope\": \"api:read api:write\"     }     ```          ### 3. Refresh Token     Refresh an expired access token:     ```json     {       \"grant_type\": \"refresh_token\",       \"refresh_token\": \"your_refresh_token\",       \"client_id\": \"your_client_id\"     }     ```          ### 4. Device Code     Complete device authorization flow:     ```json     {       \"grant_type\": \"urn:ietf:params:oauth:grant-type:device_code\",       \"device_code\": \"device_code_from_device_auth\",       \"client_id\": \"your_client_id\"     }     ```          ### 5. Password Grant (Not Recommended)     Direct username/password authentication:     ```json     {       \"grant_type\": \"password\",       \"username\": \"user@example.com\",       \"password\": \"user_password\",       \"client_id\": \"your_client_id\",       \"scope\": \"openid profile\"     }     ```          **Content Types:**     - `application/json` (recommended)     - `application/x-www-form-urlencoded` (standard OAuth2)          **Security Notes:**     - Use PKCE for public clients (mobile/SPA apps)     - Store refresh tokens securely     - Use appropriate scopes for least privilege     - Client credentials should be transmitted securely
+     * OAuth2 Token Endpoint
+     */
+    getTokensApiV1OauthTokenPost(requestParameters: GetTokensApiV1OauthTokenPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<TokenResponse>;
+    /**
+     * Handle user\'s consent decision.
+     * Handle Consent
+     */
+    handleConsentApiV1OauthConsentPostRaw(requestParameters: HandleConsentApiV1OauthConsentPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
+    /**
+     * Handle user\'s consent decision.
+     * Handle Consent
+     */
+    handleConsentApiV1OauthConsentPost(requestParameters: HandleConsentApiV1OauthConsentPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
+    /**
+     * Introspect a token.
+     * Introspect Token
+     */
+    introspectTokenApiV1OauthIntrospectPostRaw(requestParameters: IntrospectTokenApiV1OauthIntrospectPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<IntrospectTokenResponse>>;
+    /**
+     * Introspect a token.
+     * Introspect Token
+     */
+    introspectTokenApiV1OauthIntrospectPost(requestParameters: IntrospectTokenApiV1OauthIntrospectPostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<IntrospectTokenResponse>;
+    /**
+     * Handle Oauth2 logout. Revokes the token and redirects to the logout endpoint with the return_to URL.
+     * Logout
+     */
+    logoutApiV1OauthLogoutGetRaw(requestParameters: LogoutApiV1OauthLogoutGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
+    /**
+     * Handle Oauth2 logout. Revokes the token and redirects to the logout endpoint with the return_to URL.
+     * Logout
+     */
+    logoutApiV1OauthLogoutGet(requestParameters: LogoutApiV1OauthLogoutGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
+    /**
+     * OpenID Connect discovery endpoint.
+     * Openid Configuration
+     */
+    openidConfigurationApiV1OauthWellKnownOpenidConfigurationGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
+    /**
+     * OpenID Connect discovery endpoint.
+     * Openid Configuration
+     */
+    openidConfigurationApiV1OauthWellKnownOpenidConfigurationGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
+    /**
+     * Handle user logout.
+     * Revoke
+     */
+    revokeApiV1OauthRevokePostRaw(requestParameters: RevokeApiV1OauthRevokePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
+    /**
+     * Handle user logout.
+     * Revoke
+     */
+    revokeApiV1OauthRevokePost(requestParameters: RevokeApiV1OauthRevokePostRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
+}
+//# sourceMappingURL=OAuth2Api.d.ts.map

package/dist/generated/tenant/apis/OAuth2Api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuth2Api.d.ts","sourceRoot":"","sources":["../../../../src/generated/tenant/apis/OAuth2Api.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,OAAO,MAAM,YAAY,CAAC;AACtC,OAAO,KAAK,EACV,oBAAoB,EACpB,uBAAuB,EACvB,cAAc,EACd,kBAAkB,EAClB,2BAA2B,EAC3B,0BAA0B,EAE1B,sBAAsB,EACtB,uBAAuB,EACvB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,gBAAgB,EACjB,MAAM,iBAAiB,CAAC;AA8BzB,MAAM,WAAW,sCAAsC;IACnD,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,yDAAyD;IACtE,2BAA2B,EAAE,2BAA2B,CAAC;CAC5D;AAED,MAAM,WAAW,kDAAkD;IAC/D,0BAA0B,EAAE,0BAA0B,CAAC;CAC1D;AAED,MAAM,WAAW,iDAAiD;IAC9D,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mCAAmC;IAChD,YAAY,EAAE,YAAY,CAAC;CAC9B;AAED,MAAM,WAAW,yCAAyC;IACtD,cAAc,EAAE,cAAc,CAAC;CAClC;AAED,MAAM,WAAW,8CAA8C;IAC3D,sBAAsB,EAAE,sBAAsB,CAAC;CAClD;AAED,MAAM,WAAW,gCAAgC;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iCAAiC;IAC9C,aAAa,EAAE,aAAa,CAAC;CAChC;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAC/B;;;;;;;;;;;;;;OAcG;IACH,kCAAkC,CAAC,iBAAiB,EAAE,sCAAsC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAE7L;;;OAGG;IACH,+BAA+B,CAAC,iBAAiB,EAAE,sCAAsC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAErK;;;;;;;OAOG;IACH,qDAAqD,CAAC,iBAAiB,EAAE,yDAAyD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAEnO;;;OAGG;IACH,kDAAkD,CAAC,iBAAiB,EAAE,yDAAyD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAE3M;;;;;;;OAOG;IACH,8CAA8C,CAAC,iBAAiB,EAAE,kDAAkD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAEpO;;;OAGG;IACH,2CAA2C,CAAC,iBAAiB,EAAE,kDAAkD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE5M;;;;;;;OAOG;IACH,6CAA6C,CAAC,iBAAiB,EAAE,iDAAiD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAEpO;;;OAGG;IACH,0CAA0C,CAAC,iBAAiB,EAAE,iDAAiD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAE5M;;;;;;OAMG;IACH,wCAAwC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;IAEnK;;;OAGG;IACH,qCAAqC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE3I;;;;;;OAMG;IACH,sCAAsC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAEnJ;;OAEG;IACH,mCAAmC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE3H;;;;;;;OAOG;IACH,+BAA+B,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC;IAEjM;;;OAGG;IACH,4BAA4B,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAEzK;;;;;;;OAOG;IACH,qCAAqC,CAAC,iBAAiB,EAAE,yCAAyC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAEnM;;;OAGG;IACH,kCAAkC,CAAC,iBAAiB,EAAE,yCAAyC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAE3K;;;;;;;OAOG;IACH,0CAA0C,CAAC,iBAAiB,EAAE,8CAA8C,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAEjO;;;OAGG;IACH,uCAAuC,CAAC,iBAAiB,EAAE,8CAA8C,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAEzM;;;;;;;;OAQG;IACH,4BAA4B,CAAC,iBAAiB,EAAE,gCAAgC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAEjL;;;OAGG;IACH,yBAAyB,CAAC,iBAAiB,EAAE,gCAAgC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAEzJ;;;;;;OAMG;IACH,+DAA+D,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAE/J;;;OAGG;IACH,4DAA4D,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAEvI;;;;;;;OAOG;IACH,6BAA6B,CAAC,iBAAiB,EAAE,iCAAiC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAEnL;;;OAGG;IACH,0BAA0B,CAAC,iBAAiB,EAAE,iCAAiC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CAE9J;AAED;;GAEG;AACH,qBAAa,SAAU,SAAQ,OAAO,CAAC,OAAQ,YAAW,kBAAkB;IAExE;;;OAGG;IACG,kCAAkC,CAAC,iBAAiB,EAAE,sCAAsC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAkFlM;;;OAGG;IACG,+BAA+B,CAAC,iBAAiB,EAAE,sCAAsC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;IAK1K;;;OAGG;IACG,qDAAqD,CAAC,iBAAiB,EAAE,yDAAyD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAgCxO;;;OAGG;IACG,kDAAkD,CAAC,iBAAiB,EAAE,yDAAyD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;IAKhN;;;OAGG;IACG,8CAA8C,CAAC,iBAAiB,EAAE,kDAAkD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IA4BzO;;;OAGG;IACG,2CAA2C,CAAC,iBAAiB,EAAE,kDAAkD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAKjN;;;OAGG;IACG,6CAA6C,CAAC,iBAAiB,EAAE,iDAAiD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IA0BzO;;;OAGG;IACG,0CAA0C,CAAC,iBAAiB,EAAE,iDAAiD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAKjN;;;OAGG;IACG,wCAAwC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAkBxK;;;OAGG;IACG,qCAAqC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAKhJ;;OAEG;IACG,sCAAsC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAkBxJ;;OAEG;IACG,mCAAmC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAKhI;;;OAGG;IACG,+BAA+B,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IA4BtM;;;OAGG;IACG,4BAA4B,CAAC,iBAAiB,EAAE,mCAAmC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC;IAK9K;;;OAGG;IACG,qCAAqC,CAAC,iBAAiB,EAAE,yCAAyC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAgCxM;;;OAGG;IACG,kCAAkC,CAAC,iBAAiB,EAAE,yCAAyC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;IAKhL;;;OAGG;IACG,0CAA0C,CAAC,iBAAiB,EAAE,8CAA8C,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;IA4BtO;;;OAGG;IACG,uCAAuC,CAAC,iBAAiB,EAAE,8CAA8C,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAK9M;;;OAGG;IACG,4BAA4B,CAAC,iBAAiB,EAAE,gCAAgC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IA4CtL;;;OAGG;IACG,yBAAyB,CAAC,iBAAiB,EAAE,gCAAgC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;IAK9J;;;OAGG;IACG,+DAA+D,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAsBpK;;;OAGG;IACG,4DAA4D,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;IAK5I;;;OAGG;IACG,6BAA6B,CAAC,iBAAiB,EAAE,iCAAiC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAgCxL;;;OAGG;IACG,0BAA0B,CAAC,iBAAiB,EAAE,iCAAiC,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;CAKnK"}