auth

type AuthorizeHTTPResp struct {
	Body         []byte
	HTTPResponse *http.Response
	JSON400      *OAuth2Error
}

type AuthorizeParams struct {
	// ResponseType Must be `code` for the Authorization Code flow.
	ResponseType AuthorizeParamsResponseType `form:"response_type" json:"response_type"`
	ClientId     string                      `form:"client_id" json:"client_id"`

	// RedirectUri Must exactly match the client's registered callback URL.
	RedirectUri string `form:"redirect_uri" json:"redirect_uri"`

	// Scope Requested scope, e.g. `*` for all access.
	Scope string `form:"scope" json:"scope"`

	// State Opaque value returned unchanged in the redirect; use it for CSRF protection.
	State *string `form:"state,omitempty" json:"state,omitempty"`

	// CodeChallenge PKCE code challenge (RFC 7636). Required for public clients.
	CodeChallenge *string `form:"code_challenge,omitempty" json:"code_challenge,omitempty"`

	// CodeChallengeMethod PKCE transformation. `S256` is strongly recommended.
	CodeChallengeMethod *AuthorizeParamsCodeChallengeMethod `form:"code_challenge_method,omitempty" json:"code_challenge_method,omitempty"`
}

type AuthorizeParamsCodeChallengeMethod string

type AuthorizeParamsResponseType string

type Client struct {
	// The endpoint of the server conforming to this interface, with scheme,
	// https://api.deepmap.com for example. This can contain a path relative
	// to the server, such as https://api.deepmap.com/dev-test, and all the
	// paths in the swagger spec will be appended to the server.
	Server string

	// Doer for performing requests, typically a *http.Client with any
	// customized settings, such as certificate chains.
	Client HttpRequestDoer

	// A list of callbacks for modifying requests which are generated before sending over
	// the network.
	RequestEditors []RequestEditorFn
}

type ClientInterface interface {
	// ListOAuthApplications request
	ListOAuthApplications(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// CreateOAuthApplicationWithBody request with any body
	CreateOAuthApplicationWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	CreateOAuthApplication(ctx context.Context, body CreateOAuthApplicationJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// DeleteOAuthApplication request
	DeleteOAuthApplication(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetOAuthApplication request
	GetOAuthApplication(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*http.Response, error)

	// UpdateOAuthApplicationWithBody request with any body
	UpdateOAuthApplicationWithBody(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	UpdateOAuthApplication(ctx context.Context, id string, body UpdateOAuthApplicationJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// ResetOAuthApplicationSecret request
	ResetOAuthApplicationSecret(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*http.Response, error)

	// RevokeOAuthApplicationTokens request
	RevokeOAuthApplicationTokens(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*http.Response, error)

	// Authorize request
	Authorize(ctx context.Context, params *AuthorizeParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// RevokeWithBody request with any body
	RevokeWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	RevokeWithFormdataBody(ctx context.Context, body RevokeFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// TokenWithBody request with any body
	TokenWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	TokenWithFormdataBody(ctx context.Context, body TokenFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
}

type ClientOption func(*Client) error

type ClientWithResponses struct {
	ClientInterface
}

type ClientWithResponsesInterface interface {
	// ListOAuthApplicationsWithResponse request
	ListOAuthApplicationsWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*ListOAuthApplicationsHTTPResp, error)

	// CreateOAuthApplicationWithBodyWithResponse request with any body
	CreateOAuthApplicationWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*CreateOAuthApplicationHTTPResp, error)

	CreateOAuthApplicationWithResponse(ctx context.Context, body CreateOAuthApplicationJSONRequestBody, reqEditors ...RequestEditorFn) (*CreateOAuthApplicationHTTPResp, error)

	// DeleteOAuthApplicationWithResponse request
	DeleteOAuthApplicationWithResponse(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*DeleteOAuthApplicationHTTPResp, error)

	// GetOAuthApplicationWithResponse request
	GetOAuthApplicationWithResponse(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*GetOAuthApplicationHTTPResp, error)

	// UpdateOAuthApplicationWithBodyWithResponse request with any body
	UpdateOAuthApplicationWithBodyWithResponse(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*UpdateOAuthApplicationHTTPResp, error)

	UpdateOAuthApplicationWithResponse(ctx context.Context, id string, body UpdateOAuthApplicationJSONRequestBody, reqEditors ...RequestEditorFn) (*UpdateOAuthApplicationHTTPResp, error)

	// ResetOAuthApplicationSecretWithResponse request
	ResetOAuthApplicationSecretWithResponse(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*ResetOAuthApplicationSecretHTTPResp, error)

	// RevokeOAuthApplicationTokensWithResponse request
	RevokeOAuthApplicationTokensWithResponse(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*RevokeOAuthApplicationTokensHTTPResp, error)

	// AuthorizeWithResponse request
	AuthorizeWithResponse(ctx context.Context, params *AuthorizeParams, reqEditors ...RequestEditorFn) (*AuthorizeHTTPResp, error)

	// RevokeWithBodyWithResponse request with any body
	RevokeWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*RevokeHTTPResp, error)

	RevokeWithFormdataBodyWithResponse(ctx context.Context, body RevokeFormdataRequestBody, reqEditors ...RequestEditorFn) (*RevokeHTTPResp, error)

	// TokenWithBodyWithResponse request with any body
	TokenWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*TokenHTTPResp, error)

	TokenWithFormdataBodyWithResponse(ctx context.Context, body TokenFormdataRequestBody, reqEditors ...RequestEditorFn) (*TokenHTTPResp, error)
}

type CreateOAuthApplicationHTTPResp struct {
	Body         []byte
	HTTPResponse *http.Response
	JSON201      *OAuthApplicationCreated
	JSON400      *map[string]interface{}
	JSON403      *OAuth2Error
}

type CreateOAuthApplicationJSONRequestBody = OAuthApplicationCreateRequest

type DeleteOAuthApplicationHTTPResp struct {
	Body         []byte
	HTTPResponse *http.Response
	JSON200      *map[string]interface{}
	JSON403      *OAuth2Error
	JSON404      *OAuth2Error
}

type GetOAuthApplicationHTTPResp struct {
	Body         []byte
	HTTPResponse *http.Response
	JSON200      *OAuthApplicationItem
	JSON404      *OAuth2Error
}

type HttpRequestDoer interface {
	Do(req *http.Request) (*http.Response, error)
}

type ListOAuthApplicationsHTTPResp struct {
	Body         []byte
	HTTPResponse *http.Response
	JSON200      *OAuthApplicationList
}

type OAuth2Error struct {
	// Error RFC 6749 error code, e.g. invalid_grant, invalid_client, invalid_request.
	Error            string  `json:"error"`
	ErrorDescription *string `json:"error_description,omitempty"`

	// State Echoed from the request when present.
	State *string `json:"state,omitempty"`
}

type OAuthApplication struct {
	// ActiveTokenCount Active tokens of the application in the caller's account.
	ActiveTokenCount *int64 `json:"activeTokenCount,omitempty"`
	ClientId         string `json:"clientId"`

	// CreatedBy Who created the application; null for an application created before this was recorded.
	CreatedBy   *OAuthApplicationCreator `json:"createdBy"`
	HomepageUri *string                  `json:"homepageUri"`

	// Id The application's id (its uuid).
	Id    string  `json:"id"`
	Label *string `json:"label"`
	Name  string  `json:"name"`

	// Partner Set on a partner or babelforce application that belongs to no account.
	Partner      *string `json:"partner"`
	PublicClient *bool   `json:"publicClient,omitempty"`
	RedirectUri  *string `json:"redirectUri"`
}

type OAuthApplicationCreateRequest struct {
	HomepageUri *string `json:"homepage_uri,omitempty"`

	// Label A display label.
	Label string `json:"label"`

	// Name The application's name.
	Name string `json:"name"`

	// PublicClient Register a public client (no usable secret; the Authorization Code grant is authenticated with PKCE). Public clients cannot use `client_credentials`.
	PublicClient *bool `json:"public_client,omitempty"`

	// RedirectUri The callback URL of the Authorization Code flow. Required even for an application that only uses `client_credentials`.
	RedirectUri string `json:"redirect_uri"`

	// Scope The scopes the application holds, space-separated; `account:manage` when absent. At most what `account:manage` implies (`api:*`, `oauth:applications:*`), and for a service token caller at most what its own token holds.
	Scope *string `json:"scope,omitempty"`

	// ServiceTokenTtlSeconds Lifetime of the application's service tokens, and the most a token request may ask for.
	ServiceTokenTtlSeconds *int `json:"service_token_ttl_seconds,omitempty"`
}

type OAuthApplicationCreated struct {
	ClientId string `json:"client_id"`

	// ClientSecret Shown once, here. No read returns it again.
	ClientSecret string `json:"client_secret"`

	// Roles The roles the application's service tokens hold in the account: `MANAGER` with `account:manage`, none otherwise.
	Roles                  []string `json:"roles"`
	ServiceTokenTtlSeconds int      `json:"service_token_ttl_seconds"`

	// Uuid The application's id in `/oauth/applications/{id}`.
	Uuid string `json:"uuid"`
}

type OAuthApplicationCreator struct {
	// Id The creating application's or user's uuid.
	Id string `json:"id"`

	// Type `application` for a service token, `user` for a person.
	Type OAuthApplicationCreatorType `json:"type"`
}

type OAuthApplicationCreatorType string

type OAuthApplicationItem struct {
	Application OAuthApplication `json:"application"`
}

type OAuthApplicationList struct {
	Items []OAuthApplication `json:"items"`
}

type OAuthApplicationSecret struct {
	// ClientSecret The new secret, shown once.
	ClientSecret string `json:"client_secret"`
}

type OAuthApplicationUpdateRequest struct {
	HomepageUri *string `json:"homepage_uri,omitempty"`
	Label       string  `json:"label"`
	Name        string  `json:"name"`
	RedirectUri string  `json:"redirect_uri"`
}

type OAuthRevokeRequest struct {
	// ClientId Optional; validated when supplied.
	ClientId *string `json:"client_id,omitempty"`

	// ClientSecret Required with client_id for confidential clients.
	ClientSecret *string `json:"client_secret,omitempty"`

	// Token The access_token or refresh_token to revoke.
	Token string `json:"token"`

	// TokenTypeHint Optional optimization hint (RFC 7009 §2.1).
	TokenTypeHint *OAuthRevokeRequestTokenTypeHint `json:"token_type_hint,omitempty"`
}

type OAuthRevokeRequestTokenTypeHint string

type OAuthTokenRequest struct {
	// AccessType `offline` (default for authorization_code) also returns a refresh_token.
	AccessType *OAuthTokenRequestAccessType `json:"access_type,omitempty"`

	// AccountId `refresh_token`: switch the refreshed token to another account the user may act in (one listed by `GET /api/v2/user/accounts`); refused otherwise. `client_credentials`: must equal the application's own account when sent.
	AccountId *string `json:"account_id,omitempty"`

	// Audience Token exchange only — the direct sub-account the issued token acts in, named by its account id (uuid) or its `orgKey`.
	Audience *string `json:"audience,omitempty"`

	// ClientId Required for `authorization_code`, `client_credentials` and the token exchange, unless the client authenticates with HTTP Basic.
	ClientId *string `json:"client_id,omitempty"`

	// ClientSecret Required for confidential clients (unless sent as HTTP Basic); omitted by public clients (which use PKCE).
	ClientSecret *string `json:"client_secret,omitempty"`

	// Code `authorization_code` only — the code returned by /oauth/authorize.
	Code *string `json:"code,omitempty"`

	// CodeVerifier `authorization_code` with PKCE (RFC 7636) — required for public clients.
	CodeVerifier *string `json:"code_verifier,omitempty"`

	// ExpiresIn `client_credentials` with an application of an account: the requested lifetime in seconds, at most the application's `service_token_ttl_seconds`.
	ExpiresIn *int64 `json:"expires_in,omitempty"`

	// GrantType The OAuth 2.0 grant type.
	GrantType OAuthTokenRequestGrantType `json:"grant_type"`

	// Password `password` only — the user's password.
	Password *string `json:"password,omitempty"`

	// RedirectUri `authorization_code` only — must match the value used at /oauth/authorize.
	RedirectUri *string `json:"redirect_uri,omitempty"`

	// RefreshToken `refresh_token` only — the most recently issued refresh token (rotated each use).
	RefreshToken *string `json:"refresh_token,omitempty"`

	// Scope Requested scope, space-separated. For `authorization_code` the scope bound to the code always wins. For `client_credentials` a subset of the application's scopes; for the token exchange a subset of the subject token's scope.
	Scope *string `json:"scope,omitempty"`

	// SubjectToken Token exchange only — a service token of the authenticating application in its own account.
	SubjectToken *string `json:"subject_token,omitempty"`

	// SubjectTokenType Token exchange only — the type of `subject_token`; only an access token is exchanged.
	SubjectTokenType *OAuthTokenRequestSubjectTokenType `json:"subject_token_type,omitempty"`

	// Username `password` only — the user's email/username.
	Username *string `json:"username,omitempty"`
}

type OAuthTokenRequestAccessType string

type OAuthTokenRequestGrantType string

type OAuthTokenRequestSubjectTokenType string

type OAuthTokenResponse struct {
	AccessToken string `json:"access_token"`

	// AccountId The account a service token or an exchanged token acts in.
	AccountId *string `json:"account_id,omitempty"`
	ClientId  *string `json:"client_id,omitempty"`

	// ExpireTime The moment the token expires, in milliseconds since the epoch (UTC).
	ExpireTime *int64 `json:"expire_time,omitempty"`

	// ExpiresIn Lifetime in seconds. Omitted for non-expiring tokens.
	ExpiresIn *int64 `json:"expires_in,omitempty"`

	// IssuedTokenType Token exchange only — `urn:ietf:params:oauth:token-type:access_token`.
	IssuedTokenType *string `json:"issued_token_type,omitempty"`

	// RefreshToken Present when a refresh token was issued (rotated on every refresh). Service tokens and exchanged tokens never carry one.
	RefreshToken *string `json:"refresh_token,omitempty"`
	Scope        *string `json:"scope,omitempty"`
	TokenType    string  `json:"token_type"`
}

type RequestEditorFn func(ctx context.Context, req *http.Request) error

type ResetOAuthApplicationSecretHTTPResp struct {
	Body         []byte
	HTTPResponse *http.Response
	JSON200      *OAuthApplicationSecret
	JSON403      *OAuth2Error
	JSON404      *OAuth2Error
}

type RevokeFormdataRequestBody = OAuthRevokeRequest

type RevokeHTTPResp struct {
	Body         []byte
	HTTPResponse *http.Response
	JSON200      *map[string]interface{}
	JSON400      *OAuth2Error
	JSON401      *OAuth2Error
}

type RevokeOAuthApplicationTokensHTTPResp struct {
	Body         []byte
	HTTPResponse *http.Response
	JSON200      *map[string]interface{}
	JSON403      *OAuth2Error
	JSON404      *OAuth2Error
}

type TokenFormdataRequestBody = OAuthTokenRequest

type TokenHTTPResp struct {
	Body         []byte
	HTTPResponse *http.Response
	JSON200      *OAuthTokenResponse
	JSON400      *OAuth2Error
	JSON401      *OAuth2Error
}

type UpdateOAuthApplicationHTTPResp struct {
	Body         []byte
	HTTPResponse *http.Response
	JSON201      *map[string]interface{}
	JSON400      *map[string]interface{}
	JSON403      *OAuth2Error
	JSON404      *OAuth2Error
}

type UpdateOAuthApplicationJSONRequestBody = OAuthApplicationUpdateRequest