Help us shape the future of Go! Take the 2026 Go Developer Survey

generated

package
v1.1.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Sep 1, 2026 License: AGPL-3.0 Imports: 9 Imported by: 0

Documentation

Overview

Package generated provides primitives to interact with the openapi HTTP API.

Code generated by github.com/oapi-codegen/oapi-codegen/v2 version v2.8.0 DO NOT EDIT.

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func NewDeleteApiAdminClientsClientIdRequest

func NewDeleteApiAdminClientsClientIdRequest(server string, clientId string) (*http.Request, error)

NewDeleteApiAdminClientsClientIdRequest constructs an http.Request for the DeleteApiAdminClientsClientId method

func NewDeleteApiAdminRolesRoleIdRequest

func NewDeleteApiAdminRolesRoleIdRequest(server string, roleId int) (*http.Request, error)

NewDeleteApiAdminRolesRoleIdRequest constructs an http.Request for the DeleteApiAdminRolesRoleId method

func NewDeleteApiAdminScopesScopeIdRequest

func NewDeleteApiAdminScopesScopeIdRequest(server string, scopeId int) (*http.Request, error)

NewDeleteApiAdminScopesScopeIdRequest constructs an http.Request for the DeleteApiAdminScopesScopeId method

func NewDeleteApiAdminTokensTokenPrefixRequest

func NewDeleteApiAdminTokensTokenPrefixRequest(server string, tokenPrefix string) (*http.Request, error)

NewDeleteApiAdminTokensTokenPrefixRequest constructs an http.Request for the DeleteApiAdminTokensTokenPrefix method

func NewDeleteApiAdminUsersUserIdRequest

func NewDeleteApiAdminUsersUserIdRequest(server string, userId int) (*http.Request, error)

NewDeleteApiAdminUsersUserIdRequest constructs an http.Request for the DeleteApiAdminUsersUserId method

func NewDeleteApiMeAuthorizedAppsClientIdRequest

func NewDeleteApiMeAuthorizedAppsClientIdRequest(server string, clientId string) (*http.Request, error)

NewDeleteApiMeAuthorizedAppsClientIdRequest constructs an http.Request for the DeleteApiMeAuthorizedAppsClientId method

func NewDeleteApiMeRequest

func NewDeleteApiMeRequest(server string) (*http.Request, error)

NewDeleteApiMeRequest constructs an http.Request for the DeleteApiMe method

func NewDeleteApiMeSocialLinksProviderRequest

func NewDeleteApiMeSocialLinksProviderRequest(server string, provider DeleteApiMeSocialLinksProviderParamsProvider) (*http.Request, error)

NewDeleteApiMeSocialLinksProviderRequest constructs an http.Request for the DeleteApiMeSocialLinksProvider method

func NewGetApiAdminClientsClientIdRequest

func NewGetApiAdminClientsClientIdRequest(server string, clientId string) (*http.Request, error)

NewGetApiAdminClientsClientIdRequest constructs an http.Request for the GetApiAdminClientsClientId method

func NewGetApiAdminClientsClientIdScopesRequest

func NewGetApiAdminClientsClientIdScopesRequest(server string, clientId string) (*http.Request, error)

NewGetApiAdminClientsClientIdScopesRequest constructs an http.Request for the GetApiAdminClientsClientIdScopes method

func NewGetApiAdminClientsRequest

func NewGetApiAdminClientsRequest(server string) (*http.Request, error)

NewGetApiAdminClientsRequest constructs an http.Request for the GetApiAdminClients method

func NewGetApiAdminDashboardRequest

func NewGetApiAdminDashboardRequest(server string) (*http.Request, error)

NewGetApiAdminDashboardRequest constructs an http.Request for the GetApiAdminDashboard method

func NewGetApiAdminDashboardStatsRequest

func NewGetApiAdminDashboardStatsRequest(server string) (*http.Request, error)

NewGetApiAdminDashboardStatsRequest constructs an http.Request for the GetApiAdminDashboardStats method

func NewGetApiAdminLogsRequest

func NewGetApiAdminLogsRequest(server string) (*http.Request, error)

NewGetApiAdminLogsRequest constructs an http.Request for the GetApiAdminLogs method

func NewGetApiAdminOidcKeysRequest

func NewGetApiAdminOidcKeysRequest(server string) (*http.Request, error)

NewGetApiAdminOidcKeysRequest constructs an http.Request for the GetApiAdminOidcKeys method

func NewGetApiAdminOrganizationsRequest

func NewGetApiAdminOrganizationsRequest(server string) (*http.Request, error)

NewGetApiAdminOrganizationsRequest constructs an http.Request for the GetApiAdminOrganizations method

func NewGetApiAdminOrganizationsSlugRequest

func NewGetApiAdminOrganizationsSlugRequest(server string, slug string) (*http.Request, error)

NewGetApiAdminOrganizationsSlugRequest constructs an http.Request for the GetApiAdminOrganizationsSlug method

func NewGetApiAdminRolesRequest

func NewGetApiAdminRolesRequest(server string) (*http.Request, error)

NewGetApiAdminRolesRequest constructs an http.Request for the GetApiAdminRoles method

func NewGetApiAdminScopesRequest

func NewGetApiAdminScopesRequest(server string) (*http.Request, error)

NewGetApiAdminScopesRequest constructs an http.Request for the GetApiAdminScopes method

func NewGetApiAdminScopesResourcesRequest

func NewGetApiAdminScopesResourcesRequest(server string) (*http.Request, error)

NewGetApiAdminScopesResourcesRequest constructs an http.Request for the GetApiAdminScopesResources method

func NewGetApiAdminTokensRequest

func NewGetApiAdminTokensRequest(server string) (*http.Request, error)

NewGetApiAdminTokensRequest constructs an http.Request for the GetApiAdminTokens method

func NewGetApiAdminUsersRequest

func NewGetApiAdminUsersRequest(server string, params *GetApiAdminUsersParams) (*http.Request, error)

NewGetApiAdminUsersRequest constructs an http.Request for the GetApiAdminUsers method

func NewGetApiAdminUsersUserIdRequest

func NewGetApiAdminUsersUserIdRequest(server string, userId int) (*http.Request, error)

NewGetApiAdminUsersUserIdRequest constructs an http.Request for the GetApiAdminUsersUserId method

func NewGetApiAdminUsersUserIdRolesRequest

func NewGetApiAdminUsersUserIdRolesRequest(server string, userId int) (*http.Request, error)

NewGetApiAdminUsersUserIdRolesRequest constructs an http.Request for the GetApiAdminUsersUserIdRoles method

func NewGetApiMeAuthorizedAppsRequest

func NewGetApiMeAuthorizedAppsRequest(server string) (*http.Request, error)

NewGetApiMeAuthorizedAppsRequest constructs an http.Request for the GetApiMeAuthorizedApps method

func NewGetApiMeRequest

func NewGetApiMeRequest(server string) (*http.Request, error)

NewGetApiMeRequest constructs an http.Request for the GetApiMe method

func NewGetApiMeSocialLinksRequest

func NewGetApiMeSocialLinksRequest(server string) (*http.Request, error)

NewGetApiMeSocialLinksRequest constructs an http.Request for the GetApiMeSocialLinks method

func NewGetApiMeWebauthnCredentialsRequest

func NewGetApiMeWebauthnCredentialsRequest(server string) (*http.Request, error)

NewGetApiMeWebauthnCredentialsRequest constructs an http.Request for the GetApiMeWebauthnCredentials method

func NewGetApiVerifyEmailRequest

func NewGetApiVerifyEmailRequest(server string) (*http.Request, error)

NewGetApiVerifyEmailRequest constructs an http.Request for the GetApiVerifyEmail method

func NewGetHealthLiveRequest

func NewGetHealthLiveRequest(server string) (*http.Request, error)

NewGetHealthLiveRequest constructs an http.Request for the GetHealthLive method

func NewGetHealthReadyRequest

func NewGetHealthReadyRequest(server string) (*http.Request, error)

NewGetHealthReadyRequest constructs an http.Request for the GetHealthReady method

func NewGetHealthRequest

func NewGetHealthRequest(server string) (*http.Request, error)

NewGetHealthRequest constructs an http.Request for the GetHealth method

func NewGetOauth2AuthorizeRequest

func NewGetOauth2AuthorizeRequest(server string, params *GetOauth2AuthorizeParams) (*http.Request, error)

NewGetOauth2AuthorizeRequest constructs an http.Request for the GetOauth2Authorize method

func NewGetOauth2EndSessionRequest

func NewGetOauth2EndSessionRequest(server string, params *GetOauth2EndSessionParams) (*http.Request, error)

NewGetOauth2EndSessionRequest constructs an http.Request for the GetOauth2EndSession method

func NewGetOauth2UserinfoRequest

func NewGetOauth2UserinfoRequest(server string) (*http.Request, error)

NewGetOauth2UserinfoRequest constructs an http.Request for the GetOauth2Userinfo method

func NewGetWellKnownJwksJsonRequest

func NewGetWellKnownJwksJsonRequest(server string) (*http.Request, error)

NewGetWellKnownJwksJsonRequest constructs an http.Request for the GetWellKnownJwksJson method

func NewGetWellKnownOauthAuthorizationServerRequest

func NewGetWellKnownOauthAuthorizationServerRequest(server string) (*http.Request, error)

NewGetWellKnownOauthAuthorizationServerRequest constructs an http.Request for the GetWellKnownOauthAuthorizationServer method

func NewGetWellKnownOpenidConfigurationRequest

func NewGetWellKnownOpenidConfigurationRequest(server string) (*http.Request, error)

NewGetWellKnownOpenidConfigurationRequest constructs an http.Request for the GetWellKnownOpenidConfiguration method

func NewPostApiAdminClientsClientIdResetSecretRequest

func NewPostApiAdminClientsClientIdResetSecretRequest(server string, clientId string) (*http.Request, error)

NewPostApiAdminClientsClientIdResetSecretRequest constructs an http.Request for the PostApiAdminClientsClientIdResetSecret method

func NewPostApiAdminClientsRequest

func NewPostApiAdminClientsRequest(server string, body PostApiAdminClientsJSONRequestBody) (*http.Request, error)

NewPostApiAdminClientsRequest calls the generic PostApiAdminClients builder with application/json body

func NewPostApiAdminClientsRequestWithBody

func NewPostApiAdminClientsRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostApiAdminClientsRequestWithBody constructs an http.Request for the PostApiAdminClients method, with any body, and a specified content type

func NewPostApiAdminOrganizationsRequest

func NewPostApiAdminOrganizationsRequest(server string, body PostApiAdminOrganizationsJSONRequestBody) (*http.Request, error)

NewPostApiAdminOrganizationsRequest calls the generic PostApiAdminOrganizations builder with application/json body

func NewPostApiAdminOrganizationsRequestWithBody

func NewPostApiAdminOrganizationsRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostApiAdminOrganizationsRequestWithBody constructs an http.Request for the PostApiAdminOrganizations method, with any body, and a specified content type

func NewPostApiAdminRolesRequest

func NewPostApiAdminRolesRequest(server string, body PostApiAdminRolesJSONRequestBody) (*http.Request, error)

NewPostApiAdminRolesRequest calls the generic PostApiAdminRoles builder with application/json body

func NewPostApiAdminRolesRequestWithBody

func NewPostApiAdminRolesRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostApiAdminRolesRequestWithBody constructs an http.Request for the PostApiAdminRoles method, with any body, and a specified content type

func NewPostApiAdminScopesRequest

func NewPostApiAdminScopesRequest(server string, body PostApiAdminScopesJSONRequestBody) (*http.Request, error)

NewPostApiAdminScopesRequest calls the generic PostApiAdminScopes builder with application/json body

func NewPostApiAdminScopesRequestWithBody

func NewPostApiAdminScopesRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostApiAdminScopesRequestWithBody constructs an http.Request for the PostApiAdminScopes method, with any body, and a specified content type

func NewPostApiAdminTokensRevokeByClientRequest

func NewPostApiAdminTokensRevokeByClientRequest(server string) (*http.Request, error)

NewPostApiAdminTokensRevokeByClientRequest constructs an http.Request for the PostApiAdminTokensRevokeByClient method

func NewPostApiAdminTokensRevokeByUserRequest

func NewPostApiAdminTokensRevokeByUserRequest(server string) (*http.Request, error)

NewPostApiAdminTokensRevokeByUserRequest constructs an http.Request for the PostApiAdminTokensRevokeByUser method

func NewPostApiAdminUsersRequest

func NewPostApiAdminUsersRequest(server string, body PostApiAdminUsersJSONRequestBody) (*http.Request, error)

NewPostApiAdminUsersRequest calls the generic PostApiAdminUsers builder with application/json body

func NewPostApiAdminUsersRequestWithBody

func NewPostApiAdminUsersRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostApiAdminUsersRequestWithBody constructs an http.Request for the PostApiAdminUsers method, with any body, and a specified content type

func NewPostApiAdminUsersUserIdEnableRequest

func NewPostApiAdminUsersUserIdEnableRequest(server string, userId int) (*http.Request, error)

NewPostApiAdminUsersUserIdEnableRequest constructs an http.Request for the PostApiAdminUsersUserIdEnable method

func NewPostApiGithubLoginRequest

func NewPostApiGithubLoginRequest(server string, params *PostApiGithubLoginParams) (*http.Request, error)

NewPostApiGithubLoginRequest constructs an http.Request for the PostApiGithubLogin method

func NewPostApiGoogleLoginRequest

func NewPostApiGoogleLoginRequest(server string, params *PostApiGoogleLoginParams) (*http.Request, error)

NewPostApiGoogleLoginRequest constructs an http.Request for the PostApiGoogleLogin method

func NewPostApiMeMfaDisableRequest

func NewPostApiMeMfaDisableRequest(server string, body PostApiMeMfaDisableJSONRequestBody) (*http.Request, error)

NewPostApiMeMfaDisableRequest calls the generic PostApiMeMfaDisable builder with application/json body

func NewPostApiMeMfaDisableRequestWithBody

func NewPostApiMeMfaDisableRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostApiMeMfaDisableRequestWithBody constructs an http.Request for the PostApiMeMfaDisable method, with any body, and a specified content type

func NewPostApiMeMfaSetupRequest

func NewPostApiMeMfaSetupRequest(server string, body PostApiMeMfaSetupJSONRequestBody) (*http.Request, error)

NewPostApiMeMfaSetupRequest calls the generic PostApiMeMfaSetup builder with application/json body

func NewPostApiMeMfaSetupRequestWithBody

func NewPostApiMeMfaSetupRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostApiMeMfaSetupRequestWithBody constructs an http.Request for the PostApiMeMfaSetup method, with any body, and a specified content type

func NewPostApiMeMfaVerifyRequest

func NewPostApiMeMfaVerifyRequest(server string, body PostApiMeMfaVerifyJSONRequestBody) (*http.Request, error)

NewPostApiMeMfaVerifyRequest calls the generic PostApiMeMfaVerify builder with application/json body

func NewPostApiMeMfaVerifyRequestWithBody

func NewPostApiMeMfaVerifyRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostApiMeMfaVerifyRequestWithBody constructs an http.Request for the PostApiMeMfaVerify method, with any body, and a specified content type

func NewPostApiMeMfaVerifyRequestWithFormdataBody

func NewPostApiMeMfaVerifyRequestWithFormdataBody(server string, body PostApiMeMfaVerifyFormdataRequestBody) (*http.Request, error)

NewPostApiMeMfaVerifyRequestWithFormdataBody calls the generic PostApiMeMfaVerify builder with application/x-www-form-urlencoded body

func NewPostApiMeSocialLinksProviderAuthorizeRequest added in v1.0.1

func NewPostApiMeSocialLinksProviderAuthorizeRequest(server string, provider PostApiMeSocialLinksProviderAuthorizeParamsProvider) (*http.Request, error)

NewPostApiMeSocialLinksProviderAuthorizeRequest constructs an http.Request for the PostApiMeSocialLinksProviderAuthorize method

func NewPostApiMeSocialLinksProviderRequest

func NewPostApiMeSocialLinksProviderRequest(server string, provider PostApiMeSocialLinksProviderParamsProvider, body PostApiMeSocialLinksProviderJSONRequestBody) (*http.Request, error)

NewPostApiMeSocialLinksProviderRequest calls the generic PostApiMeSocialLinksProvider builder with application/json body

func NewPostApiMeSocialLinksProviderRequestWithBody

func NewPostApiMeSocialLinksProviderRequestWithBody(server string, provider PostApiMeSocialLinksProviderParamsProvider, contentType string, body io.Reader) (*http.Request, error)

NewPostApiMeSocialLinksProviderRequestWithBody constructs an http.Request for the PostApiMeSocialLinksProvider method, with any body, and a specified content type

func NewPostApiMeWebauthnRegisterBeginRequest

func NewPostApiMeWebauthnRegisterBeginRequest(server string) (*http.Request, error)

NewPostApiMeWebauthnRegisterBeginRequest constructs an http.Request for the PostApiMeWebauthnRegisterBegin method

func NewPostApiMeWebauthnRegisterFinishRequest

func NewPostApiMeWebauthnRegisterFinishRequest(server string, body PostApiMeWebauthnRegisterFinishJSONRequestBody) (*http.Request, error)

NewPostApiMeWebauthnRegisterFinishRequest calls the generic PostApiMeWebauthnRegisterFinish builder with application/json body

func NewPostApiMeWebauthnRegisterFinishRequestWithBody added in v1.1.0

func NewPostApiMeWebauthnRegisterFinishRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostApiMeWebauthnRegisterFinishRequestWithBody constructs an http.Request for the PostApiMeWebauthnRegisterFinish method, with any body, and a specified content type

func NewPostApiPasswordResetConfirmRequest

func NewPostApiPasswordResetConfirmRequest(server string) (*http.Request, error)

NewPostApiPasswordResetConfirmRequest constructs an http.Request for the PostApiPasswordResetConfirm method

func NewPostApiPasswordResetRequestRequest

func NewPostApiPasswordResetRequestRequest(server string) (*http.Request, error)

NewPostApiPasswordResetRequestRequest constructs an http.Request for the PostApiPasswordResetRequest method

func NewPostApiRegisterRequest

func NewPostApiRegisterRequest(server string, params *PostApiRegisterParams) (*http.Request, error)

NewPostApiRegisterRequest constructs an http.Request for the PostApiRegister method

func NewPostApiVerifyEmailResendRequest

func NewPostApiVerifyEmailResendRequest(server string) (*http.Request, error)

NewPostApiVerifyEmailResendRequest constructs an http.Request for the PostApiVerifyEmailResend method

func NewPostApiWechatLoginRequest

func NewPostApiWechatLoginRequest(server string, params *PostApiWechatLoginParams) (*http.Request, error)

NewPostApiWechatLoginRequest constructs an http.Request for the PostApiWechatLogin method

func NewPostOauth2ConsentRequest

func NewPostOauth2ConsentRequest(server string, params *PostOauth2ConsentParams) (*http.Request, error)

NewPostOauth2ConsentRequest constructs an http.Request for the PostOauth2Consent method

func NewPostOauth2DeviceApproveRequestWithBody

func NewPostOauth2DeviceApproveRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostOauth2DeviceApproveRequestWithBody constructs an http.Request for the PostOauth2DeviceApprove method, with any body, and a specified content type

func NewPostOauth2DeviceApproveRequestWithFormdataBody

func NewPostOauth2DeviceApproveRequestWithFormdataBody(server string, body PostOauth2DeviceApproveFormdataRequestBody) (*http.Request, error)

NewPostOauth2DeviceApproveRequestWithFormdataBody calls the generic PostOauth2DeviceApprove builder with application/x-www-form-urlencoded body

func NewPostOauth2DeviceAuthorizationRequestWithBody

func NewPostOauth2DeviceAuthorizationRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostOauth2DeviceAuthorizationRequestWithBody constructs an http.Request for the PostOauth2DeviceAuthorization method, with any body, and a specified content type

func NewPostOauth2DeviceAuthorizationRequestWithFormdataBody

func NewPostOauth2DeviceAuthorizationRequestWithFormdataBody(server string, body PostOauth2DeviceAuthorizationFormdataRequestBody) (*http.Request, error)

NewPostOauth2DeviceAuthorizationRequestWithFormdataBody calls the generic PostOauth2DeviceAuthorization builder with application/x-www-form-urlencoded body

func NewPostOauth2EndSessionRequest

func NewPostOauth2EndSessionRequest(server string, params *PostOauth2EndSessionParams) (*http.Request, error)

NewPostOauth2EndSessionRequest constructs an http.Request for the PostOauth2EndSession method

func NewPostOauth2IntrospectRequestWithBody

func NewPostOauth2IntrospectRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostOauth2IntrospectRequestWithBody constructs an http.Request for the PostOauth2Introspect method, with any body, and a specified content type

func NewPostOauth2IntrospectRequestWithFormdataBody

func NewPostOauth2IntrospectRequestWithFormdataBody(server string, body PostOauth2IntrospectFormdataRequestBody) (*http.Request, error)

NewPostOauth2IntrospectRequestWithFormdataBody calls the generic PostOauth2Introspect builder with application/x-www-form-urlencoded body

func NewPostOauth2LoginRequest

func NewPostOauth2LoginRequest(server string, body PostOauth2LoginJSONRequestBody) (*http.Request, error)

NewPostOauth2LoginRequest calls the generic PostOauth2Login builder with application/json body

func NewPostOauth2LoginRequestWithBody

func NewPostOauth2LoginRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostOauth2LoginRequestWithBody constructs an http.Request for the PostOauth2Login method, with any body, and a specified content type

func NewPostOauth2LoginRequestWithFormdataBody

func NewPostOauth2LoginRequestWithFormdataBody(server string, body PostOauth2LoginFormdataRequestBody) (*http.Request, error)

NewPostOauth2LoginRequestWithFormdataBody calls the generic PostOauth2Login builder with application/x-www-form-urlencoded body

func NewPostOauth2LogoutRequest

func NewPostOauth2LogoutRequest(server string, body PostOauth2LogoutJSONRequestBody) (*http.Request, error)

NewPostOauth2LogoutRequest calls the generic PostOauth2Logout builder with application/json body

func NewPostOauth2LogoutRequestWithBody

func NewPostOauth2LogoutRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostOauth2LogoutRequestWithBody constructs an http.Request for the PostOauth2Logout method, with any body, and a specified content type

func NewPostOauth2MfaVerifyRequest

func NewPostOauth2MfaVerifyRequest(server string, body PostOauth2MfaVerifyJSONRequestBody) (*http.Request, error)

NewPostOauth2MfaVerifyRequest calls the generic PostOauth2MfaVerify builder with application/json body

func NewPostOauth2MfaVerifyRequestWithBody

func NewPostOauth2MfaVerifyRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostOauth2MfaVerifyRequestWithBody constructs an http.Request for the PostOauth2MfaVerify method, with any body, and a specified content type

func NewPostOauth2MfaVerifyRequestWithFormdataBody

func NewPostOauth2MfaVerifyRequestWithFormdataBody(server string, body PostOauth2MfaVerifyFormdataRequestBody) (*http.Request, error)

NewPostOauth2MfaVerifyRequestWithFormdataBody calls the generic PostOauth2MfaVerify builder with application/x-www-form-urlencoded body

func NewPostOauth2RegisterRequest

func NewPostOauth2RegisterRequest(server string) (*http.Request, error)

NewPostOauth2RegisterRequest constructs an http.Request for the PostOauth2Register method

func NewPostOauth2RevokeRequestWithBody

func NewPostOauth2RevokeRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostOauth2RevokeRequestWithBody constructs an http.Request for the PostOauth2Revoke method, with any body, and a specified content type

func NewPostOauth2RevokeRequestWithFormdataBody

func NewPostOauth2RevokeRequestWithFormdataBody(server string, body PostOauth2RevokeFormdataRequestBody) (*http.Request, error)

NewPostOauth2RevokeRequestWithFormdataBody calls the generic PostOauth2Revoke builder with application/x-www-form-urlencoded body

func NewPostOauth2TokenRequestWithBody

func NewPostOauth2TokenRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostOauth2TokenRequestWithBody constructs an http.Request for the PostOauth2Token method, with any body, and a specified content type

func NewPostOauth2TokenRequestWithFormdataBody

func NewPostOauth2TokenRequestWithFormdataBody(server string, body PostOauth2TokenFormdataRequestBody) (*http.Request, error)

NewPostOauth2TokenRequestWithFormdataBody calls the generic PostOauth2Token builder with application/x-www-form-urlencoded body

func NewPostOauth2WebauthnAuthenticateBeginRequest

func NewPostOauth2WebauthnAuthenticateBeginRequest(server string) (*http.Request, error)

NewPostOauth2WebauthnAuthenticateBeginRequest constructs an http.Request for the PostOauth2WebauthnAuthenticateBegin method

func NewPostOauth2WebauthnAuthenticateFinishRequest

func NewPostOauth2WebauthnAuthenticateFinishRequest(server string, body PostOauth2WebauthnAuthenticateFinishJSONRequestBody) (*http.Request, error)

NewPostOauth2WebauthnAuthenticateFinishRequest calls the generic PostOauth2WebauthnAuthenticateFinish builder with application/json body

func NewPostOauth2WebauthnAuthenticateFinishRequestWithBody added in v1.1.0

func NewPostOauth2WebauthnAuthenticateFinishRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error)

NewPostOauth2WebauthnAuthenticateFinishRequestWithBody constructs an http.Request for the PostOauth2WebauthnAuthenticateFinish method, with any body, and a specified content type

func NewPutApiAdminClientsClientIdRequest

func NewPutApiAdminClientsClientIdRequest(server string, clientId string, body PutApiAdminClientsClientIdJSONRequestBody) (*http.Request, error)

NewPutApiAdminClientsClientIdRequest calls the generic PutApiAdminClientsClientId builder with application/json body

func NewPutApiAdminClientsClientIdRequestWithBody

func NewPutApiAdminClientsClientIdRequestWithBody(server string, clientId string, contentType string, body io.Reader) (*http.Request, error)

NewPutApiAdminClientsClientIdRequestWithBody constructs an http.Request for the PutApiAdminClientsClientId method, with any body, and a specified content type

func NewPutApiAdminClientsClientIdScopesRequest

func NewPutApiAdminClientsClientIdScopesRequest(server string, clientId string) (*http.Request, error)

NewPutApiAdminClientsClientIdScopesRequest constructs an http.Request for the PutApiAdminClientsClientIdScopes method

func NewPutApiAdminRolesRoleIdRequest

func NewPutApiAdminRolesRoleIdRequest(server string, roleId int, body PutApiAdminRolesRoleIdJSONRequestBody) (*http.Request, error)

NewPutApiAdminRolesRoleIdRequest calls the generic PutApiAdminRolesRoleId builder with application/json body

func NewPutApiAdminRolesRoleIdRequestWithBody

func NewPutApiAdminRolesRoleIdRequestWithBody(server string, roleId int, contentType string, body io.Reader) (*http.Request, error)

NewPutApiAdminRolesRoleIdRequestWithBody constructs an http.Request for the PutApiAdminRolesRoleId method, with any body, and a specified content type

func NewPutApiAdminScopesScopeIdRequest

func NewPutApiAdminScopesScopeIdRequest(server string, scopeId int, body PutApiAdminScopesScopeIdJSONRequestBody) (*http.Request, error)

NewPutApiAdminScopesScopeIdRequest calls the generic PutApiAdminScopesScopeId builder with application/json body

func NewPutApiAdminScopesScopeIdRequestWithBody

func NewPutApiAdminScopesScopeIdRequestWithBody(server string, scopeId int, contentType string, body io.Reader) (*http.Request, error)

NewPutApiAdminScopesScopeIdRequestWithBody constructs an http.Request for the PutApiAdminScopesScopeId method, with any body, and a specified content type

func NewPutApiAdminUsersUserIdDisableRequest

func NewPutApiAdminUsersUserIdDisableRequest(server string, userId int) (*http.Request, error)

NewPutApiAdminUsersUserIdDisableRequest constructs an http.Request for the PutApiAdminUsersUserIdDisable method

func NewPutApiAdminUsersUserIdRequest

func NewPutApiAdminUsersUserIdRequest(server string, userId int, body PutApiAdminUsersUserIdJSONRequestBody) (*http.Request, error)

NewPutApiAdminUsersUserIdRequest calls the generic PutApiAdminUsersUserId builder with application/json body

func NewPutApiAdminUsersUserIdRequestWithBody

func NewPutApiAdminUsersUserIdRequestWithBody(server string, userId int, contentType string, body io.Reader) (*http.Request, error)

NewPutApiAdminUsersUserIdRequestWithBody constructs an http.Request for the PutApiAdminUsersUserId method, with any body, and a specified content type

func NewPutApiAdminUsersUserIdRolesRequest

func NewPutApiAdminUsersUserIdRolesRequest(server string, userId int, body PutApiAdminUsersUserIdRolesJSONRequestBody) (*http.Request, error)

NewPutApiAdminUsersUserIdRolesRequest calls the generic PutApiAdminUsersUserIdRoles builder with application/json body

func NewPutApiAdminUsersUserIdRolesRequestWithBody

func NewPutApiAdminUsersUserIdRolesRequestWithBody(server string, userId int, contentType string, body io.Reader) (*http.Request, error)

NewPutApiAdminUsersUserIdRolesRequestWithBody constructs an http.Request for the PutApiAdminUsersUserIdRoles method, with any body, and a specified content type

func NewPutApiMePasswordRequest

func NewPutApiMePasswordRequest(server string) (*http.Request, error)

NewPutApiMePasswordRequest constructs an http.Request for the PutApiMePassword method

Types

type Client

type Client struct {
	// The endpoint of the server conforming to this interface, with scheme,
	// https://api.deepmap.com for example. This can contain a path relative
	// to the server, such as https://api.deepmap.com/dev-test, and all the
	// paths in the swagger spec will be appended to the server.
	Server string

	// Doer for performing requests, typically a *http.Client with any
	// customized settings, such as certificate chains.
	Client HttpRequestDoer

	// A list of callbacks for modifying requests which are generated before sending over
	// the network.
	RequestEditors []RequestEditorFn
}

Client which conforms to the OpenAPI3 specification for this service.

func NewClient

func NewClient(server string, opts ...ClientOption) (*Client, error)

Creates a new Client, with reasonable defaults

func (*Client) DeleteApiAdminClientsClientId

func (c *Client) DeleteApiAdminClientsClientId(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*http.Response, error)

DeleteApiAdminClientsClientId Delete OAuth2 Client

Delete a specific OAuth2 client.

Corresponds with DELETE /api/admin/clients/{clientId} (the `DeleteApiAdminClientsClientId` operationId).

func (*Client) DeleteApiAdminRolesRoleId

func (c *Client) DeleteApiAdminRolesRoleId(ctx context.Context, roleId int, reqEditors ...RequestEditorFn) (*http.Response, error)

DeleteApiAdminRolesRoleId Delete Role

Delete a role. Built-in roles (admin, user) cannot be deleted.

Corresponds with DELETE /api/admin/roles/{roleId} (the `DeleteApiAdminRolesRoleId` operationId).

func (*Client) DeleteApiAdminScopesScopeId

func (c *Client) DeleteApiAdminScopesScopeId(ctx context.Context, scopeId int, reqEditors ...RequestEditorFn) (*http.Response, error)

DeleteApiAdminScopesScopeId Delete Scope

Delete a scope. Built-in scopes (openid, profile, email, admin) cannot be deleted.

Corresponds with DELETE /api/admin/scopes/{scopeId} (the `DeleteApiAdminScopesScopeId` operationId).

func (*Client) DeleteApiAdminTokensTokenPrefix

func (c *Client) DeleteApiAdminTokensTokenPrefix(ctx context.Context, tokenPrefix string, reqEditors ...RequestEditorFn) (*http.Response, error)

DeleteApiAdminTokensTokenPrefix Revoke Token

Revoke a specific token by its prefix.

Corresponds with DELETE /api/admin/tokens/{tokenPrefix} (the `DeleteApiAdminTokensTokenPrefix` operationId).

func (*Client) DeleteApiAdminUsersUserId

func (c *Client) DeleteApiAdminUsersUserId(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*http.Response, error)

DeleteApiAdminUsersUserId Delete User

Soft-delete a user account (sets deleted_at). The user is excluded from all queries and can no longer log in. Outstanding access and refresh tokens are revoked (matched on both the public subject and the internal id) before the response is sent; the 200 body reports tokens_revoked (false + warning on revocation failure).

Corresponds with DELETE /api/admin/users/{userId} (the `DeleteApiAdminUsersUserId` operationId).

func (*Client) DeleteApiMe

func (c *Client) DeleteApiMe(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

DeleteApiMe Delete Account

Soft-delete the current user's account.

Corresponds with DELETE /api/me (the `DeleteApiMe` operationId).

func (*Client) DeleteApiMeAuthorizedAppsClientId

func (c *Client) DeleteApiMeAuthorizedAppsClientId(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*http.Response, error)

DeleteApiMeAuthorizedAppsClientId Revoke App Authorization

Revoke the current user's authorization for a specific OAuth2 client.

Corresponds with DELETE /api/me/authorized-apps/{clientId} (the `DeleteApiMeAuthorizedAppsClientId` operationId).

func (*Client) DeleteApiMeSocialLinksProvider

func (c *Client) DeleteApiMeSocialLinksProvider(ctx context.Context, provider DeleteApiMeSocialLinksProviderParamsProvider, reqEditors ...RequestEditorFn) (*http.Response, error)

DeleteApiMeSocialLinksProvider Unlink Social Account

Remove the current user's linked identity for a provider. Existing sessions issued through that provider are NOT revoked -- they stay valid until natural expiry. The provider identity cannot be used for new sign-ins until it is linked to an account again. Refused with 409 when it is the user's last social link and the user has no usable password (last-credential guard). Requires the `profile` scope.

Corresponds with DELETE /api/me/social/links/{provider} (the `DeleteApiMeSocialLinksProvider` operationId).

func (*Client) GetApiAdminClients

func (c *Client) GetApiAdminClients(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminClients List OAuth2 Clients

Get a paginated list of registered OAuth2 clients.

Corresponds with GET /api/admin/clients (the `GetApiAdminClients` operationId).

func (*Client) GetApiAdminClientsClientId

func (c *Client) GetApiAdminClientsClientId(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminClientsClientId Get Client Details

Get details of a specific OAuth2 client by ID.

Corresponds with GET /api/admin/clients/{clientId} (the `GetApiAdminClientsClientId` operationId).

func (*Client) GetApiAdminClientsClientIdScopes

func (c *Client) GetApiAdminClientsClientIdScopes(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminClientsClientIdScopes Get Client Scopes

Get the assigned scopes for an OAuth2 client.

Corresponds with GET /api/admin/clients/{clientId}/scopes (the `GetApiAdminClientsClientIdScopes` operationId).

func (*Client) GetApiAdminDashboard

func (c *Client) GetApiAdminDashboard(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminDashboard Get Dashboard

Static admin dashboard overview (welcome payload; live numbers are on /api/admin/dashboard/stats).

Corresponds with GET /api/admin/dashboard (the `GetApiAdminDashboard` operationId).

func (*Client) GetApiAdminDashboardStats

func (c *Client) GetApiAdminDashboardStats(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminDashboardStats Get Dashboard Stats

Get dashboard statistics including user count, client count, active tokens, and failure metrics.

Corresponds with GET /api/admin/dashboard/stats (the `GetApiAdminDashboardStats` operationId).

func (*Client) GetApiAdminLogs

func (c *Client) GetApiAdminLogs(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminLogs List Audit Logs

Get a paginated list of system audit logs.

Corresponds with GET /api/admin/logs (the `GetApiAdminLogs` operationId).

func (*Client) GetApiAdminOidcKeys

func (c *Client) GetApiAdminOidcKeys(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminOidcKeys Get OIDC Keys Info

Get information about OIDC signing keys.

Corresponds with GET /api/admin/oidc/keys (the `GetApiAdminOidcKeys` operationId).

func (*Client) GetApiAdminOrganizations

func (c *Client) GetApiAdminOrganizations(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminOrganizations List Organizations

List all organizations (id, slug, name, branding fields; no created_at).

Corresponds with GET /api/admin/organizations (the `GetApiAdminOrganizations` operationId).

func (*Client) GetApiAdminOrganizationsSlug

func (c *Client) GetApiAdminOrganizationsSlug(ctx context.Context, slug string, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminOrganizationsSlug Get Organization

Get a single organization by its slug.

Corresponds with GET /api/admin/organizations/{slug} (the `GetApiAdminOrganizationsSlug` operationId).

func (*Client) GetApiAdminRoles

func (c *Client) GetApiAdminRoles(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminRoles List Roles

Get a list of all roles with user counts.

Corresponds with GET /api/admin/roles (the `GetApiAdminRoles` operationId).

func (*Client) GetApiAdminScopes

func (c *Client) GetApiAdminScopes(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminScopes List Scopes

Get a list of all available scopes.

Corresponds with GET /api/admin/scopes (the `GetApiAdminScopes` operationId).

func (*Client) GetApiAdminScopesResources

func (c *Client) GetApiAdminScopesResources(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminScopesResources Scope-Resource Matrix

#43 discovery -- the (path, method) -> required-scopes matrix from the central ResourceScopeRegistry. Read-only, no DB access.

Corresponds with GET /api/admin/scopes/resources (the `GetApiAdminScopesResources` operationId).

func (*Client) GetApiAdminTokens

func (c *Client) GetApiAdminTokens(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminTokens List Tokens

Get a list of active OAuth2 tokens.

Corresponds with GET /api/admin/tokens (the `GetApiAdminTokens` operationId).

func (*Client) GetApiAdminUsers

func (c *Client) GetApiAdminUsers(ctx context.Context, params *GetApiAdminUsersParams, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminUsers List Users

List users with optional pagination (page, per_page) and filtering (q for username/email prefix, role, locked). Returns total count.

Corresponds with GET /api/admin/users (the `GetApiAdminUsers` operationId).

func (*Client) GetApiAdminUsersUserId

func (c *Client) GetApiAdminUsersUserId(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminUsersUserId Get User Detail

Get detailed information about a specific user including roles and account status.

Corresponds with GET /api/admin/users/{userId} (the `GetApiAdminUsersUserId` operationId).

func (*Client) GetApiAdminUsersUserIdRoles

func (c *Client) GetApiAdminUsersUserIdRoles(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiAdminUsersUserIdRoles Get User Roles

Get the roles assigned to a specific user.

Corresponds with GET /api/admin/users/{userId}/roles (the `GetApiAdminUsersUserIdRoles` operationId).

func (*Client) GetApiMe

func (c *Client) GetApiMe(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiMe Get User Profile

Get current user's profile information.

Corresponds with GET /api/me (the `GetApiMe` operationId).

func (*Client) GetApiMeAuthorizedApps

func (c *Client) GetApiMeAuthorizedApps(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiMeAuthorizedApps List Authorized Apps

List OAuth2 clients authorized by the current user.

Corresponds with GET /api/me/authorized-apps (the `GetApiMeAuthorizedApps` operationId).

func (c *Client) GetApiMeSocialLinks(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiMeSocialLinks List Linked Social Accounts

List the social provider identities (github/google/wechat) linked to the current user. The seeded password-subject mapping (provider=local) is not a social identity and is excluded. Requires the `profile` scope.

Corresponds with GET /api/me/social/links (the `GetApiMeSocialLinks` operationId).

func (*Client) GetApiMeWebauthnCredentials

func (c *Client) GetApiMeWebauthnCredentials(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiMeWebauthnCredentials List WebAuthn Credentials

List registered WebAuthn credentials.

Corresponds with GET /api/me/webauthn/credentials (the `GetApiMeWebauthnCredentials` operationId).

func (*Client) GetApiVerifyEmail

func (c *Client) GetApiVerifyEmail(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetApiVerifyEmail Verify Email

Verify an email address using a token.

Corresponds with GET /api/verify-email (the `GetApiVerifyEmail` operationId).

func (*Client) GetHealth

func (c *Client) GetHealth(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetHealth Health check

Aggregate health status of the service (process + database).

Corresponds with GET /health (the `GetHealth` operationId).

func (*Client) GetHealthLive

func (c *Client) GetHealthLive(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetHealthLive Liveness probe

Liveness probe — always 200 while the process is up (no dependency checks).

Corresponds with GET /health/live (the `GetHealthLive` operationId).

func (*Client) GetHealthReady

func (c *Client) GetHealthReady(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetHealthReady Readiness probe

Readiness probe — database / redis dependency checks; 503 when a required dependency is down.

Corresponds with GET /health/ready (the `GetHealthReady` operationId).

func (*Client) GetOauth2Authorize

func (c *Client) GetOauth2Authorize(ctx context.Context, params *GetOauth2AuthorizeParams, reqEditors ...RequestEditorFn) (*http.Response, error)

GetOauth2Authorize Request authorization

OAuth2 authorization endpoint - initiates authorization flow.

Corresponds with GET /oauth2/authorize (the `GetOauth2Authorize` operationId).

func (*Client) GetOauth2EndSession

func (c *Client) GetOauth2EndSession(ctx context.Context, params *GetOauth2EndSessionParams, reqEditors ...RequestEditorFn) (*http.Response, error)

GetOauth2EndSession RP-Initiated Logout

OIDC RP-Initiated Logout 1.0 §2. Terminates the user's server-side session and (optionally) redirects to a registered post_logout_redirect_uri. When id_token_hint is supplied it MUST pass end-to-end verification (#78: RS256 signature against the OP key set, strict alg/kid, iss, exp) — any failure, or a hint subject that contradicts the browser session, is rejected with 400 AUTH_INVALID_ID_TOKEN_HINT (Error Envelope). post_logout_redirect_uri MUST be registered for the client identified by the verified id_token_hint (its aud claim); without a hint the request is rejected with 400 when a redirect URI is supplied. Accepts both GET (link-based) and POST (form-based).

Corresponds with GET /oauth2/end_session (the `GetOauth2EndSession` operationId).

func (*Client) GetOauth2Userinfo

func (c *Client) GetOauth2Userinfo(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetOauth2Userinfo Get user information

Returns information about the authenticated user. F-023 (OIDC Core §5.3): the access token's scope MUST include openid; M2M tokens (client_credentials, subject client:*) are rejected. The response includes the email_verified claim (F-024) when an email is present.

Corresponds with GET /oauth2/userinfo (the `GetOauth2Userinfo` operationId).

func (*Client) GetWellKnownJwksJson

func (c *Client) GetWellKnownJwksJson(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetWellKnownJwksJson JSON Web Key Set

Returns the public keys used by this server to sign JWTs.

Corresponds with GET /.well-known/jwks.json (the `GetWellKnownJwksJson` operationId).

func (*Client) GetWellKnownOauthAuthorizationServer

func (c *Client) GetWellKnownOauthAuthorizationServer(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetWellKnownOauthAuthorizationServer OAuth 2.0 Authorization Server Metadata

RFC 8414 OAuth 2.0 Authorization Server Metadata. Unlike the OIDC discovery document this carries no userinfo/jwks entries.

Corresponds with GET /.well-known/oauth-authorization-server (the `GetWellKnownOauthAuthorizationServer` operationId).

func (*Client) GetWellKnownOpenidConfiguration

func (c *Client) GetWellKnownOpenidConfiguration(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

GetWellKnownOpenidConfiguration OpenID Connect Discovery

Returns OIDC discovery metadata including endpoints and supported scopes.

Corresponds with GET /.well-known/openid-configuration (the `GetWellKnownOpenidConfiguration` operationId).

func (*Client) PostApiAdminClients

func (c *Client) PostApiAdminClients(ctx context.Context, body PostApiAdminClientsJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiAdminClients Create OAuth2 Client

Register a new OAuth2 client.

Takes a body of the `application/json` content type.

Corresponds with POST /api/admin/clients (the `PostApiAdminClients` operationId).

func (*Client) PostApiAdminClientsClientIdResetSecret

func (c *Client) PostApiAdminClientsClientIdResetSecret(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiAdminClientsClientIdResetSecret Reset Client Secret

Reset the secret of a specific OAuth2 client.

Corresponds with POST /api/admin/clients/{clientId}/reset-secret (the `PostApiAdminClientsClientIdResetSecret` operationId).

func (*Client) PostApiAdminClientsWithBody

func (c *Client) PostApiAdminClientsWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiAdminClientsWithBody Create OAuth2 Client

Register a new OAuth2 client.

Takes any type of body and a specified content type.

Corresponds with POST /api/admin/clients (the `PostApiAdminClients` operationId).

func (*Client) PostApiAdminOrganizations

func (c *Client) PostApiAdminOrganizations(ctx context.Context, body PostApiAdminOrganizationsJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiAdminOrganizations Create Organization

Create an organization. Slug must be 3-50 chars of lowercase alphanumeric + hyphens, starting/ending alphanumeric.

Takes a body of the `application/json` content type.

Corresponds with POST /api/admin/organizations (the `PostApiAdminOrganizations` operationId).

func (*Client) PostApiAdminOrganizationsWithBody

func (c *Client) PostApiAdminOrganizationsWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiAdminOrganizationsWithBody Create Organization

Create an organization. Slug must be 3-50 chars of lowercase alphanumeric + hyphens, starting/ending alphanumeric.

Takes any type of body and a specified content type.

Corresponds with POST /api/admin/organizations (the `PostApiAdminOrganizations` operationId).

func (*Client) PostApiAdminRoles

func (c *Client) PostApiAdminRoles(ctx context.Context, body PostApiAdminRolesJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiAdminRoles Create Role

Create a new role. Built-in roles (admin, user) cannot be duplicated.

Takes a body of the `application/json` content type.

Corresponds with POST /api/admin/roles (the `PostApiAdminRoles` operationId).

func (*Client) PostApiAdminRolesWithBody

func (c *Client) PostApiAdminRolesWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiAdminRolesWithBody Create Role

Create a new role. Built-in roles (admin, user) cannot be duplicated.

Takes any type of body and a specified content type.

Corresponds with POST /api/admin/roles (the `PostApiAdminRoles` operationId).

func (*Client) PostApiAdminScopes

func (c *Client) PostApiAdminScopes(ctx context.Context, body PostApiAdminScopesJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiAdminScopes Create Scope

Create a new OAuth2 scope. Built-in scopes cannot be duplicated.

Takes a body of the `application/json` content type.

Corresponds with POST /api/admin/scopes (the `PostApiAdminScopes` operationId).

func (*Client) PostApiAdminScopesWithBody

func (c *Client) PostApiAdminScopesWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiAdminScopesWithBody Create Scope

Create a new OAuth2 scope. Built-in scopes cannot be duplicated.

Takes any type of body and a specified content type.

Corresponds with POST /api/admin/scopes (the `PostApiAdminScopes` operationId).

func (*Client) PostApiAdminTokensRevokeByClient

func (c *Client) PostApiAdminTokensRevokeByClient(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiAdminTokensRevokeByClient Revoke Tokens By Client

Revoke all tokens issued to a specific client.

Corresponds with POST /api/admin/tokens/revoke-by-client (the `PostApiAdminTokensRevokeByClient` operationId).

func (*Client) PostApiAdminTokensRevokeByUser

func (c *Client) PostApiAdminTokensRevokeByUser(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiAdminTokensRevokeByUser Revoke Tokens By User

Revoke all tokens issued for a specific user.

Corresponds with POST /api/admin/tokens/revoke-by-user (the `PostApiAdminTokensRevokeByUser` operationId).

func (*Client) PostApiAdminUsers

func (c *Client) PostApiAdminUsers(ctx context.Context, body PostApiAdminUsersJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiAdminUsers Create User

Create a new user. Requires username and password; email, roles, mfa_enabled, email_verified, and org_id are optional.

Takes a body of the `application/json` content type.

Corresponds with POST /api/admin/users (the `PostApiAdminUsers` operationId).

func (*Client) PostApiAdminUsersUserIdEnable

func (c *Client) PostApiAdminUsersUserIdEnable(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiAdminUsersUserIdEnable Enable User

Enable a disabled user account by resetting lockout state.

Corresponds with POST /api/admin/users/{userId}/enable (the `PostApiAdminUsersUserIdEnable` operationId).

func (*Client) PostApiAdminUsersWithBody

func (c *Client) PostApiAdminUsersWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiAdminUsersWithBody Create User

Create a new user. Requires username and password; email, roles, mfa_enabled, email_verified, and org_id are optional.

Takes any type of body and a specified content type.

Corresponds with POST /api/admin/users (the `PostApiAdminUsers` operationId).

func (*Client) PostApiGithubLogin

func (c *Client) PostApiGithubLogin(ctx context.Context, params *PostApiGithubLoginParams, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiGithubLogin GitHub OAuth2 Login

Exchange GitHub authorization code for user information. This endpoint handles the server-side OAuth2 flow with GitHub.

Corresponds with POST /api/github/login (the `PostApiGithubLogin` operationId).

func (*Client) PostApiGoogleLogin

func (c *Client) PostApiGoogleLogin(ctx context.Context, params *PostApiGoogleLoginParams, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiGoogleLogin Google OAuth2 Login

Exchange Google authorization code for user information. This endpoint handles the server-side OAuth2 flow with Google Identity Platform.

Corresponds with POST /api/google/login (the `PostApiGoogleLogin` operationId).

func (*Client) PostApiMeMfaDisable

func (c *Client) PostApiMeMfaDisable(ctx context.Context, body PostApiMeMfaDisableJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiMeMfaDisable Disable MFA

Disable MFA (TOTP) for the authenticated user.

Takes a body of the `application/json` content type.

Corresponds with POST /api/me/mfa/disable (the `PostApiMeMfaDisable` operationId).

func (*Client) PostApiMeMfaDisableWithBody

func (c *Client) PostApiMeMfaDisableWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiMeMfaDisableWithBody Disable MFA

Disable MFA (TOTP) for the authenticated user.

Takes any type of body and a specified content type.

Corresponds with POST /api/me/mfa/disable (the `PostApiMeMfaDisable` operationId).

func (*Client) PostApiMeMfaSetup

func (c *Client) PostApiMeMfaSetup(ctx context.Context, body PostApiMeMfaSetupJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiMeMfaSetup Setup MFA

Initiate MFA setup by generating a TOTP secret. Returns the base32 secret and an otpauth:// URI for authenticator apps / QR codes.

Takes a body of the `application/json` content type.

Corresponds with POST /api/me/mfa/setup (the `PostApiMeMfaSetup` operationId).

func (*Client) PostApiMeMfaSetupWithBody

func (c *Client) PostApiMeMfaSetupWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiMeMfaSetupWithBody Setup MFA

Initiate MFA setup by generating a TOTP secret. Returns the base32 secret and an otpauth:// URI for authenticator apps / QR codes.

Takes any type of body and a specified content type.

Corresponds with POST /api/me/mfa/setup (the `PostApiMeMfaSetup` operationId).

func (*Client) PostApiMeMfaVerify

func (c *Client) PostApiMeMfaVerify(ctx context.Context, body PostApiMeMfaVerifyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiMeMfaVerify Verify MFA Setup

Verify a 6-digit TOTP code to finalize MFA setup. Returns 10 single-use backup codes on success.

Takes a body of the `application/json` content type.

Corresponds with POST /api/me/mfa/verify (the `PostApiMeMfaVerify` operationId).

func (*Client) PostApiMeMfaVerifyWithBody

func (c *Client) PostApiMeMfaVerifyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiMeMfaVerifyWithBody Verify MFA Setup

Verify a 6-digit TOTP code to finalize MFA setup. Returns 10 single-use backup codes on success.

Takes any type of body and a specified content type.

Corresponds with POST /api/me/mfa/verify (the `PostApiMeMfaVerify` operationId).

func (*Client) PostApiMeMfaVerifyWithFormdataBody

func (c *Client) PostApiMeMfaVerifyWithFormdataBody(ctx context.Context, body PostApiMeMfaVerifyFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiMeMfaVerifyWithFormdataBody Verify MFA Setup

Verify a 6-digit TOTP code to finalize MFA setup. Returns 10 single-use backup codes on success.

Takes a body of the `application/x-www-form-urlencoded` content type.

Corresponds with POST /api/me/mfa/verify (the `PostApiMeMfaVerify` operationId).

func (*Client) PostApiMeSocialLinksProvider

PostApiMeSocialLinksProvider Link Social Account

Verify a provider authorization code (the SPA completes the provider redirect and submits the code) and link that provider identity to the current user. Conflicts (409) when the identity is already linked to any account or the user already has a different mapping for the provider. Requires the `profile` scope.

Takes a body of the `application/json` content type.

Corresponds with POST /api/me/social/links/{provider} (the `PostApiMeSocialLinksProvider` operationId).

func (*Client) PostApiMeSocialLinksProviderAuthorize added in v1.0.1

func (c *Client) PostApiMeSocialLinksProviderAuthorize(ctx context.Context, provider PostApiMeSocialLinksProviderAuthorizeParamsProvider, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiMeSocialLinksProviderAuthorize Begin Social Link (mint one-time state)

Begin a social link flow (#71): mint a one-time state bound to (current user, provider) and return the provider authorize URL (with the state embedded) the SPA must redirect to. The link-back POST must present the same state; tokens are single-use with a short TTL. Fails closed (500) when linking or the state store (Redis) is not configured. Requires the `profile` scope.

Corresponds with POST /api/me/social/links/{provider}/authorize (the `PostApiMeSocialLinksProviderAuthorize` operationId).

func (*Client) PostApiMeSocialLinksProviderWithBody

func (c *Client) PostApiMeSocialLinksProviderWithBody(ctx context.Context, provider PostApiMeSocialLinksProviderParamsProvider, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiMeSocialLinksProviderWithBody Link Social Account

Verify a provider authorization code (the SPA completes the provider redirect and submits the code) and link that provider identity to the current user. Conflicts (409) when the identity is already linked to any account or the user already has a different mapping for the provider. Requires the `profile` scope.

Takes any type of body and a specified content type.

Corresponds with POST /api/me/social/links/{provider} (the `PostApiMeSocialLinksProvider` operationId).

func (*Client) PostApiMeWebauthnRegisterBegin

func (c *Client) PostApiMeWebauthnRegisterBegin(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiMeWebauthnRegisterBegin WebAuthn Register Begin

Start passkey registration (#142): ES256-only pubKeyCredParams, userVerification=required, user.id is the base64url of the internal user id bytes, excludeCredentials lists already-registered credentials, and the challenge is bound to the Bearer subject (no session cookie contract). Requires webauthn.rp_origins to be configured.

Corresponds with POST /api/me/webauthn/register/begin (the `PostApiMeWebauthnRegisterBegin` operationId).

func (*Client) PostApiMeWebauthnRegisterFinish

func (c *Client) PostApiMeWebauthnRegisterFinish(ctx context.Context, body PostApiMeWebauthnRegisterFinishJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiMeWebauthnRegisterFinish WebAuthn Register Finish

Finish passkey registration (#142): the browser PublicKeyCredential is verified server-side (subject-bound challenge, origin allowlist, none-format attestation, ES256 COSE key) before anything is stored; the legacy {credential_id, public_key} body is rejected.

Takes a body of the `application/json` content type.

Corresponds with POST /api/me/webauthn/register/finish (the `PostApiMeWebauthnRegisterFinish` operationId).

func (*Client) PostApiMeWebauthnRegisterFinishWithBody added in v1.1.0

func (c *Client) PostApiMeWebauthnRegisterFinishWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiMeWebauthnRegisterFinishWithBody WebAuthn Register Finish

Finish passkey registration (#142): the browser PublicKeyCredential is verified server-side (subject-bound challenge, origin allowlist, none-format attestation, ES256 COSE key) before anything is stored; the legacy {credential_id, public_key} body is rejected.

Takes any type of body and a specified content type.

Corresponds with POST /api/me/webauthn/register/finish (the `PostApiMeWebauthnRegisterFinish` operationId).

func (*Client) PostApiPasswordResetConfirm

func (c *Client) PostApiPasswordResetConfirm(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiPasswordResetConfirm Confirm Password Reset

Confirm a password reset using the token sent via email.

Corresponds with POST /api/password-reset/confirm (the `PostApiPasswordResetConfirm` operationId).

func (*Client) PostApiPasswordResetRequest

func (c *Client) PostApiPasswordResetRequest(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiPasswordResetRequest Request Password Reset

Request a password reset link to be sent via email.

Corresponds with POST /api/password-reset/request (the `PostApiPasswordResetRequest` operationId).

func (*Client) PostApiRegister

func (c *Client) PostApiRegister(ctx context.Context, params *PostApiRegisterParams, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiRegister Register new user

Registers a new user account into the system.

Corresponds with POST /api/register (the `PostApiRegister` operationId).

func (*Client) PostApiVerifyEmailResend

func (c *Client) PostApiVerifyEmailResend(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiVerifyEmailResend Resend Verification Email

Resend the email verification link.

Corresponds with POST /api/verify-email/resend (the `PostApiVerifyEmailResend` operationId).

func (*Client) PostApiWechatLogin

func (c *Client) PostApiWechatLogin(ctx context.Context, params *PostApiWechatLoginParams, reqEditors ...RequestEditorFn) (*http.Response, error)

PostApiWechatLogin WeChat OAuth2 Login

Exchange WeChat authorization code for user information. This endpoint handles the server-side OAuth2 flow with WeChat Open Platform.

Corresponds with POST /api/wechat/login (the `PostApiWechatLogin` operationId).

func (*Client) PostOauth2Consent

func (c *Client) PostOauth2Consent(ctx context.Context, params *PostOauth2ConsentParams, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2Consent Submit user consent

Submit user consent for requested scopes. Redirects back to client.

Corresponds with POST /oauth2/consent (the `PostOauth2Consent` operationId).

func (*Client) PostOauth2DeviceApproveWithBody

func (c *Client) PostOauth2DeviceApproveWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2DeviceApproveWithBody Approve Device Authorization

Admin-only approval of a pending device authorization (RFC 8628 user approval step). Requires an admin Bearer token (AuthorizationFilter).

Takes any type of body and a specified content type.

Corresponds with POST /oauth2/device/approve (the `PostOauth2DeviceApprove` operationId).

func (*Client) PostOauth2DeviceApproveWithFormdataBody

func (c *Client) PostOauth2DeviceApproveWithFormdataBody(ctx context.Context, body PostOauth2DeviceApproveFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2DeviceApproveWithFormdataBody Approve Device Authorization

Admin-only approval of a pending device authorization (RFC 8628 user approval step). Requires an admin Bearer token (AuthorizationFilter).

Takes a body of the `application/x-www-form-urlencoded` content type.

Corresponds with POST /oauth2/device/approve (the `PostOauth2DeviceApprove` operationId).

func (*Client) PostOauth2DeviceAuthorizationWithBody

func (c *Client) PostOauth2DeviceAuthorizationWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2DeviceAuthorizationWithBody Device Authorization

RFC 8628 device authorization endpoint. A CONFIDENTIAL client authenticates with client_secret (HTTP Basic preferred); a PUBLIC client sends client_id only. The user then visits verification_uri and an admin approves via /oauth2/device/approve; the device polls /oauth2/token with grant_type=urn:ietf:params:oauth:grant-type:device_code.

Takes any type of body and a specified content type.

Corresponds with POST /oauth2/device_authorization (the `PostOauth2DeviceAuthorization` operationId).

func (*Client) PostOauth2DeviceAuthorizationWithFormdataBody

func (c *Client) PostOauth2DeviceAuthorizationWithFormdataBody(ctx context.Context, body PostOauth2DeviceAuthorizationFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2DeviceAuthorizationWithFormdataBody Device Authorization

RFC 8628 device authorization endpoint. A CONFIDENTIAL client authenticates with client_secret (HTTP Basic preferred); a PUBLIC client sends client_id only. The user then visits verification_uri and an admin approves via /oauth2/device/approve; the device polls /oauth2/token with grant_type=urn:ietf:params:oauth:grant-type:device_code.

Takes a body of the `application/x-www-form-urlencoded` content type.

Corresponds with POST /oauth2/device_authorization (the `PostOauth2DeviceAuthorization` operationId).

func (*Client) PostOauth2EndSession

func (c *Client) PostOauth2EndSession(ctx context.Context, params *PostOauth2EndSessionParams, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2EndSession RP-Initiated Logout (POST)

OIDC RP-Initiated Logout (POST form-based variant; see GET for semantics). id_token_hint, when supplied, is signature-verified (#78); verification failure yields 400 AUTH_INVALID_ID_TOKEN_HINT Error Envelope.

Corresponds with POST /oauth2/end_session (the `PostOauth2EndSession` operationId).

func (*Client) PostOauth2IntrospectWithBody

func (c *Client) PostOauth2IntrospectWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2IntrospectWithBody Introspect token

RFC 7662 OAuth 2.0 Token Introspection. Returns information about a token. The calling client MUST authenticate (HTTP Basic preferred; client_id/client_secret form parameters accepted).

Takes any type of body and a specified content type.

Corresponds with POST /oauth2/introspect (the `PostOauth2Introspect` operationId).

func (*Client) PostOauth2IntrospectWithFormdataBody

func (c *Client) PostOauth2IntrospectWithFormdataBody(ctx context.Context, body PostOauth2IntrospectFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2IntrospectWithFormdataBody Introspect token

RFC 7662 OAuth 2.0 Token Introspection. Returns information about a token. The calling client MUST authenticate (HTTP Basic preferred; client_id/client_secret form parameters accepted).

Takes a body of the `application/x-www-form-urlencoded` content type.

Corresponds with POST /oauth2/introspect (the `PostOauth2Introspect` operationId).

func (*Client) PostOauth2Login

func (c *Client) PostOauth2Login(ctx context.Context, body PostOauth2LoginJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2Login Authenticate user

Authenticates user credentials and generates an authorization code. Usually called by the frontend login page during the authorization code flow. Accepts a JSON body or form-encoded parameters; when MFA is enabled on the account the response defers to POST /oauth2/mfa/verify.

Takes a body of the `application/json` content type.

Corresponds with POST /oauth2/login (the `PostOauth2Login` operationId).

func (*Client) PostOauth2LoginWithBody

func (c *Client) PostOauth2LoginWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2LoginWithBody Authenticate user

Authenticates user credentials and generates an authorization code. Usually called by the frontend login page during the authorization code flow. Accepts a JSON body or form-encoded parameters; when MFA is enabled on the account the response defers to POST /oauth2/mfa/verify.

Takes any type of body and a specified content type.

Corresponds with POST /oauth2/login (the `PostOauth2Login` operationId).

func (*Client) PostOauth2LoginWithFormdataBody

func (c *Client) PostOauth2LoginWithFormdataBody(ctx context.Context, body PostOauth2LoginFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2LoginWithFormdataBody Authenticate user

Authenticates user credentials and generates an authorization code. Usually called by the frontend login page during the authorization code flow. Accepts a JSON body or form-encoded parameters; when MFA is enabled on the account the response defers to POST /oauth2/mfa/verify.

Takes a body of the `application/x-www-form-urlencoded` content type.

Corresponds with POST /oauth2/login (the `PostOauth2Login` operationId).

func (*Client) PostOauth2Logout

func (c *Client) PostOauth2Logout(ctx context.Context, body PostOauth2LogoutJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2Logout Logout

Terminates the server-side session behind the presented Bearer access token (also fires OIDC back-channel logout notifications when configured).

Takes a body of the `application/json` content type.

Corresponds with POST /oauth2/logout (the `PostOauth2Logout` operationId).

func (*Client) PostOauth2LogoutWithBody

func (c *Client) PostOauth2LogoutWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2LogoutWithBody Logout

Terminates the server-side session behind the presented Bearer access token (also fires OIDC back-channel logout notifications when configured).

Takes any type of body and a specified content type.

Corresponds with POST /oauth2/logout (the `PostOauth2Logout` operationId).

func (*Client) PostOauth2MfaVerify

func (c *Client) PostOauth2MfaVerify(ctx context.Context, body PostOauth2MfaVerifyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2MfaVerify Verify MFA Code (Login)

Verify MFA (TOTP) code during login. Completes the authorization-code issuance started by /oauth2/login when MFA was required. The PKCE code_verifier (C4, RFC 7636) must be supplied so the internally-generated code passes PKCE verification against the code_challenge persisted on the session during the first-factor login step. Accepts a JSON body or form-encoded parameters.

Takes a body of the `application/json` content type.

Corresponds with POST /oauth2/mfa/verify (the `PostOauth2MfaVerify` operationId).

func (*Client) PostOauth2MfaVerifyWithBody

func (c *Client) PostOauth2MfaVerifyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2MfaVerifyWithBody Verify MFA Code (Login)

Verify MFA (TOTP) code during login. Completes the authorization-code issuance started by /oauth2/login when MFA was required. The PKCE code_verifier (C4, RFC 7636) must be supplied so the internally-generated code passes PKCE verification against the code_challenge persisted on the session during the first-factor login step. Accepts a JSON body or form-encoded parameters.

Takes any type of body and a specified content type.

Corresponds with POST /oauth2/mfa/verify (the `PostOauth2MfaVerify` operationId).

func (*Client) PostOauth2MfaVerifyWithFormdataBody

func (c *Client) PostOauth2MfaVerifyWithFormdataBody(ctx context.Context, body PostOauth2MfaVerifyFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2MfaVerifyWithFormdataBody Verify MFA Code (Login)

Verify MFA (TOTP) code during login. Completes the authorization-code issuance started by /oauth2/login when MFA was required. The PKCE code_verifier (C4, RFC 7636) must be supplied so the internally-generated code passes PKCE verification against the code_challenge persisted on the session during the first-factor login step. Accepts a JSON body or form-encoded parameters.

Takes a body of the `application/x-www-form-urlencoded` content type.

Corresponds with POST /oauth2/mfa/verify (the `PostOauth2MfaVerify` operationId).

func (*Client) PostOauth2Register

func (c *Client) PostOauth2Register(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2Register Register Client

Dynamic client registration.

Corresponds with POST /oauth2/register (the `PostOauth2Register` operationId).

func (*Client) PostOauth2RevokeWithBody

func (c *Client) PostOauth2RevokeWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2RevokeWithBody Revoke token

RFC 7009 OAuth 2.0 Token Revocation. Revokes an access OR refresh token (C3 fix — refresh tokens are now actually revoked, not silently no-op'd). The caller must be the token's owning client (ownership enforced via introspection). CONFIDENTIAL clients authenticate via client_secret (HTTP Basic or body); PUBLIC clients (token_endpoint_auth_method='none') authenticate with client_id only (RFC 7009 §2.1 exempts them from client authentication at this endpoint). Unknown or already-inactive tokens still return 200 per RFC 7009; the success body is EMPTY.

Takes any type of body and a specified content type.

Corresponds with POST /oauth2/revoke (the `PostOauth2Revoke` operationId).

func (*Client) PostOauth2RevokeWithFormdataBody

func (c *Client) PostOauth2RevokeWithFormdataBody(ctx context.Context, body PostOauth2RevokeFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2RevokeWithFormdataBody Revoke token

RFC 7009 OAuth 2.0 Token Revocation. Revokes an access OR refresh token (C3 fix — refresh tokens are now actually revoked, not silently no-op'd). The caller must be the token's owning client (ownership enforced via introspection). CONFIDENTIAL clients authenticate via client_secret (HTTP Basic or body); PUBLIC clients (token_endpoint_auth_method='none') authenticate with client_id only (RFC 7009 §2.1 exempts them from client authentication at this endpoint). Unknown or already-inactive tokens still return 200 per RFC 7009; the success body is EMPTY.

Takes a body of the `application/x-www-form-urlencoded` content type.

Corresponds with POST /oauth2/revoke (the `PostOauth2Revoke` operationId).

func (*Client) PostOauth2TokenWithBody

func (c *Client) PostOauth2TokenWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2TokenWithBody Exchange authorization code for access token

OAuth2 token endpoint - exchanges an authorization code, refresh token, client credentials, or device code for access tokens (RFC 6749 §3.2). Request parameters are sent as application/x-www-form-urlencoded (the server also accepts them as query parameters). Client authentication follows each client's registered token_endpoint_auth_method (F-017): client_secret_basic (the default) -> HTTP Basic ONLY (a body client_secret is rejected); client_secret_post -> client_id + client_secret form fields ONLY (a Basic header is rejected); PUBLIC clients send client_id only (any client_secret is rejected).

Takes any type of body and a specified content type.

Corresponds with POST /oauth2/token (the `PostOauth2Token` operationId).

func (*Client) PostOauth2TokenWithFormdataBody

func (c *Client) PostOauth2TokenWithFormdataBody(ctx context.Context, body PostOauth2TokenFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2TokenWithFormdataBody Exchange authorization code for access token

OAuth2 token endpoint - exchanges an authorization code, refresh token, client credentials, or device code for access tokens (RFC 6749 §3.2). Request parameters are sent as application/x-www-form-urlencoded (the server also accepts them as query parameters). Client authentication follows each client's registered token_endpoint_auth_method (F-017): client_secret_basic (the default) -> HTTP Basic ONLY (a body client_secret is rejected); client_secret_post -> client_id + client_secret form fields ONLY (a Basic header is rejected); PUBLIC clients send client_id only (any client_secret is rejected).

Takes a body of the `application/x-www-form-urlencoded` content type.

Corresponds with POST /oauth2/token (the `PostOauth2Token` operationId).

func (*Client) PostOauth2WebauthnAuthenticateBegin

func (c *Client) PostOauth2WebauthnAuthenticateBegin(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2WebauthnAuthenticateBegin WebAuthn Authenticate Begin

Start passkey authentication (#142): the challenge is bound to the caller's session (send cookies - credentials include); userVerification=required; ES256 only. Requires webauthn.rp_origins.

Corresponds with POST /oauth2/webauthn/authenticate/begin (the `PostOauth2WebauthnAuthenticateBegin` operationId).

func (*Client) PostOauth2WebauthnAuthenticateFinish

func (c *Client) PostOauth2WebauthnAuthenticateFinish(ctx context.Context, body PostOauth2WebauthnAuthenticateFinishJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2WebauthnAuthenticateFinish WebAuthn Authenticate Finish

Finish passkey authentication (#142): the session challenge is consumed unconditionally, the ES256 signature over authData || SHA256(clientDataJSON) is verified against the STORED COSE key, UV=1 is enforced and signCount regression is treated as cloning. On success a browser session is established (Set-Cookie). All failures answer the generic AUTH_INVALID_CREDENTIALS.

Takes a body of the `application/json` content type.

Corresponds with POST /oauth2/webauthn/authenticate/finish (the `PostOauth2WebauthnAuthenticateFinish` operationId).

func (*Client) PostOauth2WebauthnAuthenticateFinishWithBody added in v1.1.0

func (c *Client) PostOauth2WebauthnAuthenticateFinishWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PostOauth2WebauthnAuthenticateFinishWithBody WebAuthn Authenticate Finish

Finish passkey authentication (#142): the session challenge is consumed unconditionally, the ES256 signature over authData || SHA256(clientDataJSON) is verified against the STORED COSE key, UV=1 is enforced and signCount regression is treated as cloning. On success a browser session is established (Set-Cookie). All failures answer the generic AUTH_INVALID_CREDENTIALS.

Takes any type of body and a specified content type.

Corresponds with POST /oauth2/webauthn/authenticate/finish (the `PostOauth2WebauthnAuthenticateFinish` operationId).

func (*Client) PutApiAdminClientsClientId

func (c *Client) PutApiAdminClientsClientId(ctx context.Context, clientId string, body PutApiAdminClientsClientIdJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PutApiAdminClientsClientId Update OAuth2 Client

Update details of a specific OAuth2 client.

Takes a body of the `application/json` content type.

Corresponds with PUT /api/admin/clients/{clientId} (the `PutApiAdminClientsClientId` operationId).

func (*Client) PutApiAdminClientsClientIdScopes

func (c *Client) PutApiAdminClientsClientIdScopes(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*http.Response, error)

PutApiAdminClientsClientIdScopes Update Client Scopes

Update the assigned scopes for an OAuth2 client.

Corresponds with PUT /api/admin/clients/{clientId}/scopes (the `PutApiAdminClientsClientIdScopes` operationId).

func (*Client) PutApiAdminClientsClientIdWithBody

func (c *Client) PutApiAdminClientsClientIdWithBody(ctx context.Context, clientId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PutApiAdminClientsClientIdWithBody Update OAuth2 Client

Update details of a specific OAuth2 client.

Takes any type of body and a specified content type.

Corresponds with PUT /api/admin/clients/{clientId} (the `PutApiAdminClientsClientId` operationId).

func (*Client) PutApiAdminRolesRoleId

func (c *Client) PutApiAdminRolesRoleId(ctx context.Context, roleId int, body PutApiAdminRolesRoleIdJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PutApiAdminRolesRoleId Update Role

Update a role's description.

Takes a body of the `application/json` content type.

Corresponds with PUT /api/admin/roles/{roleId} (the `PutApiAdminRolesRoleId` operationId).

func (*Client) PutApiAdminRolesRoleIdWithBody

func (c *Client) PutApiAdminRolesRoleIdWithBody(ctx context.Context, roleId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PutApiAdminRolesRoleIdWithBody Update Role

Update a role's description.

Takes any type of body and a specified content type.

Corresponds with PUT /api/admin/roles/{roleId} (the `PutApiAdminRolesRoleId` operationId).

func (*Client) PutApiAdminScopesScopeId

func (c *Client) PutApiAdminScopesScopeId(ctx context.Context, scopeId int, body PutApiAdminScopesScopeIdJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PutApiAdminScopesScopeId Update Scope

Update a scope's properties.

Takes a body of the `application/json` content type.

Corresponds with PUT /api/admin/scopes/{scopeId} (the `PutApiAdminScopesScopeId` operationId).

func (*Client) PutApiAdminScopesScopeIdWithBody

func (c *Client) PutApiAdminScopesScopeIdWithBody(ctx context.Context, scopeId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PutApiAdminScopesScopeIdWithBody Update Scope

Update a scope's properties.

Takes any type of body and a specified content type.

Corresponds with PUT /api/admin/scopes/{scopeId} (the `PutApiAdminScopesScopeId` operationId).

func (*Client) PutApiAdminUsersUserId

func (c *Client) PutApiAdminUsersUserId(ctx context.Context, userId int, body PutApiAdminUsersUserIdJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PutApiAdminUsersUserId Update User

Update user information. Updatable fields: username, email, email_verified, mfa_enabled, locked (true locks the account), and org_id (integer sets it; JSON null clears it). Fields with a wrong JSON type are rejected with 400 (never silently skipped).

Takes a body of the `application/json` content type.

Corresponds with PUT /api/admin/users/{userId} (the `PutApiAdminUsersUserId` operationId).

func (*Client) PutApiAdminUsersUserIdDisable

func (c *Client) PutApiAdminUsersUserIdDisable(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*http.Response, error)

PutApiAdminUsersUserIdDisable Disable User

Disable a specific user account.

Corresponds with PUT /api/admin/users/{userId}/disable (the `PutApiAdminUsersUserIdDisable` operationId).

func (*Client) PutApiAdminUsersUserIdRoles

func (c *Client) PutApiAdminUsersUserIdRoles(ctx context.Context, userId int, body PutApiAdminUsersUserIdRolesJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

PutApiAdminUsersUserIdRoles Assign User Roles

Assign roles to a specific user.

Takes a body of the `application/json` content type.

Corresponds with PUT /api/admin/users/{userId}/roles (the `PutApiAdminUsersUserIdRoles` operationId).

func (*Client) PutApiAdminUsersUserIdRolesWithBody

func (c *Client) PutApiAdminUsersUserIdRolesWithBody(ctx context.Context, userId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PutApiAdminUsersUserIdRolesWithBody Assign User Roles

Assign roles to a specific user.

Takes any type of body and a specified content type.

Corresponds with PUT /api/admin/users/{userId}/roles (the `PutApiAdminUsersUserIdRoles` operationId).

func (*Client) PutApiAdminUsersUserIdWithBody

func (c *Client) PutApiAdminUsersUserIdWithBody(ctx context.Context, userId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

PutApiAdminUsersUserIdWithBody Update User

Update user information. Updatable fields: username, email, email_verified, mfa_enabled, locked (true locks the account), and org_id (integer sets it; JSON null clears it). Fields with a wrong JSON type are rejected with 400 (never silently skipped).

Takes any type of body and a specified content type.

Corresponds with PUT /api/admin/users/{userId} (the `PutApiAdminUsersUserId` operationId).

func (*Client) PutApiMePassword

func (c *Client) PutApiMePassword(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

PutApiMePassword Change Password

Change the current user's password.

Corresponds with PUT /api/me/password (the `PutApiMePassword` operationId).

type ClientInterface

type ClientInterface interface {

	// GetWellKnownJwksJson JSON Web Key Set
	//
	// Returns the public keys used by this server to sign JWTs.
	//
	// Corresponds with GET /.well-known/jwks.json (the `GetWellKnownJwksJson` operationId).
	GetWellKnownJwksJson(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetWellKnownOauthAuthorizationServer OAuth 2.0 Authorization Server Metadata
	//
	// RFC 8414 OAuth 2.0 Authorization Server Metadata. Unlike the OIDC discovery document this carries no userinfo/jwks entries.
	//
	// Corresponds with GET /.well-known/oauth-authorization-server (the `GetWellKnownOauthAuthorizationServer` operationId).
	GetWellKnownOauthAuthorizationServer(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetWellKnownOpenidConfiguration OpenID Connect Discovery
	//
	// Returns OIDC discovery metadata including endpoints and supported scopes.
	//
	// Corresponds with GET /.well-known/openid-configuration (the `GetWellKnownOpenidConfiguration` operationId).
	GetWellKnownOpenidConfiguration(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminClients List OAuth2 Clients
	//
	// Get a paginated list of registered OAuth2 clients.
	//
	// Corresponds with GET /api/admin/clients (the `GetApiAdminClients` operationId).
	GetApiAdminClients(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiAdminClientsWithBody Create OAuth2 Client
	//
	// Register a new OAuth2 client.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /api/admin/clients (the `PostApiAdminClients` operationId).
	PostApiAdminClientsWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiAdminClients Create OAuth2 Client
	//
	// Register a new OAuth2 client.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with POST /api/admin/clients (the `PostApiAdminClients` operationId).
	PostApiAdminClients(ctx context.Context, body PostApiAdminClientsJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// DeleteApiAdminClientsClientId Delete OAuth2 Client
	//
	// Delete a specific OAuth2 client.
	//
	// Corresponds with DELETE /api/admin/clients/{clientId} (the `DeleteApiAdminClientsClientId` operationId).
	DeleteApiAdminClientsClientId(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminClientsClientId Get Client Details
	//
	// Get details of a specific OAuth2 client by ID.
	//
	// Corresponds with GET /api/admin/clients/{clientId} (the `GetApiAdminClientsClientId` operationId).
	GetApiAdminClientsClientId(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PutApiAdminClientsClientIdWithBody Update OAuth2 Client
	//
	// Update details of a specific OAuth2 client.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with PUT /api/admin/clients/{clientId} (the `PutApiAdminClientsClientId` operationId).
	PutApiAdminClientsClientIdWithBody(ctx context.Context, clientId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PutApiAdminClientsClientId Update OAuth2 Client
	//
	// Update details of a specific OAuth2 client.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with PUT /api/admin/clients/{clientId} (the `PutApiAdminClientsClientId` operationId).
	PutApiAdminClientsClientId(ctx context.Context, clientId string, body PutApiAdminClientsClientIdJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiAdminClientsClientIdResetSecret Reset Client Secret
	//
	// Reset the secret of a specific OAuth2 client.
	//
	// Corresponds with POST /api/admin/clients/{clientId}/reset-secret (the `PostApiAdminClientsClientIdResetSecret` operationId).
	PostApiAdminClientsClientIdResetSecret(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminClientsClientIdScopes Get Client Scopes
	//
	// Get the assigned scopes for an OAuth2 client.
	//
	// Corresponds with GET /api/admin/clients/{clientId}/scopes (the `GetApiAdminClientsClientIdScopes` operationId).
	GetApiAdminClientsClientIdScopes(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PutApiAdminClientsClientIdScopes Update Client Scopes
	//
	// Update the assigned scopes for an OAuth2 client.
	//
	// Corresponds with PUT /api/admin/clients/{clientId}/scopes (the `PutApiAdminClientsClientIdScopes` operationId).
	PutApiAdminClientsClientIdScopes(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminDashboard Get Dashboard
	//
	// Static admin dashboard overview (welcome payload; live numbers are on /api/admin/dashboard/stats).
	//
	// Corresponds with GET /api/admin/dashboard (the `GetApiAdminDashboard` operationId).
	GetApiAdminDashboard(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminDashboardStats Get Dashboard Stats
	//
	// Get dashboard statistics including user count, client count, active tokens, and failure metrics.
	//
	// Corresponds with GET /api/admin/dashboard/stats (the `GetApiAdminDashboardStats` operationId).
	GetApiAdminDashboardStats(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminLogs List Audit Logs
	//
	// Get a paginated list of system audit logs.
	//
	// Corresponds with GET /api/admin/logs (the `GetApiAdminLogs` operationId).
	GetApiAdminLogs(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminOidcKeys Get OIDC Keys Info
	//
	// Get information about OIDC signing keys.
	//
	// Corresponds with GET /api/admin/oidc/keys (the `GetApiAdminOidcKeys` operationId).
	GetApiAdminOidcKeys(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminOrganizations List Organizations
	//
	// List all organizations (id, slug, name, branding fields; no created_at).
	//
	// Corresponds with GET /api/admin/organizations (the `GetApiAdminOrganizations` operationId).
	GetApiAdminOrganizations(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiAdminOrganizationsWithBody Create Organization
	//
	// Create an organization. Slug must be 3-50 chars of lowercase alphanumeric + hyphens, starting/ending alphanumeric.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /api/admin/organizations (the `PostApiAdminOrganizations` operationId).
	PostApiAdminOrganizationsWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiAdminOrganizations Create Organization
	//
	// Create an organization. Slug must be 3-50 chars of lowercase alphanumeric + hyphens, starting/ending alphanumeric.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with POST /api/admin/organizations (the `PostApiAdminOrganizations` operationId).
	PostApiAdminOrganizations(ctx context.Context, body PostApiAdminOrganizationsJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminOrganizationsSlug Get Organization
	//
	// Get a single organization by its slug.
	//
	// Corresponds with GET /api/admin/organizations/{slug} (the `GetApiAdminOrganizationsSlug` operationId).
	GetApiAdminOrganizationsSlug(ctx context.Context, slug string, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminRoles List Roles
	//
	// Get a list of all roles with user counts.
	//
	// Corresponds with GET /api/admin/roles (the `GetApiAdminRoles` operationId).
	GetApiAdminRoles(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiAdminRolesWithBody Create Role
	//
	// Create a new role. Built-in roles (admin, user) cannot be duplicated.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /api/admin/roles (the `PostApiAdminRoles` operationId).
	PostApiAdminRolesWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiAdminRoles Create Role
	//
	// Create a new role. Built-in roles (admin, user) cannot be duplicated.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with POST /api/admin/roles (the `PostApiAdminRoles` operationId).
	PostApiAdminRoles(ctx context.Context, body PostApiAdminRolesJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// DeleteApiAdminRolesRoleId Delete Role
	//
	// Delete a role. Built-in roles (admin, user) cannot be deleted.
	//
	// Corresponds with DELETE /api/admin/roles/{roleId} (the `DeleteApiAdminRolesRoleId` operationId).
	DeleteApiAdminRolesRoleId(ctx context.Context, roleId int, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PutApiAdminRolesRoleIdWithBody Update Role
	//
	// Update a role's description.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with PUT /api/admin/roles/{roleId} (the `PutApiAdminRolesRoleId` operationId).
	PutApiAdminRolesRoleIdWithBody(ctx context.Context, roleId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PutApiAdminRolesRoleId Update Role
	//
	// Update a role's description.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with PUT /api/admin/roles/{roleId} (the `PutApiAdminRolesRoleId` operationId).
	PutApiAdminRolesRoleId(ctx context.Context, roleId int, body PutApiAdminRolesRoleIdJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminScopes List Scopes
	//
	// Get a list of all available scopes.
	//
	// Corresponds with GET /api/admin/scopes (the `GetApiAdminScopes` operationId).
	GetApiAdminScopes(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiAdminScopesWithBody Create Scope
	//
	// Create a new OAuth2 scope. Built-in scopes cannot be duplicated.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /api/admin/scopes (the `PostApiAdminScopes` operationId).
	PostApiAdminScopesWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiAdminScopes Create Scope
	//
	// Create a new OAuth2 scope. Built-in scopes cannot be duplicated.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with POST /api/admin/scopes (the `PostApiAdminScopes` operationId).
	PostApiAdminScopes(ctx context.Context, body PostApiAdminScopesJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminScopesResources Scope-Resource Matrix
	//
	// #43 discovery -- the (path, method) -> required-scopes matrix from the central ResourceScopeRegistry. Read-only, no DB access.
	//
	// Corresponds with GET /api/admin/scopes/resources (the `GetApiAdminScopesResources` operationId).
	GetApiAdminScopesResources(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// DeleteApiAdminScopesScopeId Delete Scope
	//
	// Delete a scope. Built-in scopes (openid, profile, email, admin) cannot be deleted.
	//
	// Corresponds with DELETE /api/admin/scopes/{scopeId} (the `DeleteApiAdminScopesScopeId` operationId).
	DeleteApiAdminScopesScopeId(ctx context.Context, scopeId int, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PutApiAdminScopesScopeIdWithBody Update Scope
	//
	// Update a scope's properties.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with PUT /api/admin/scopes/{scopeId} (the `PutApiAdminScopesScopeId` operationId).
	PutApiAdminScopesScopeIdWithBody(ctx context.Context, scopeId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PutApiAdminScopesScopeId Update Scope
	//
	// Update a scope's properties.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with PUT /api/admin/scopes/{scopeId} (the `PutApiAdminScopesScopeId` operationId).
	PutApiAdminScopesScopeId(ctx context.Context, scopeId int, body PutApiAdminScopesScopeIdJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminTokens List Tokens
	//
	// Get a list of active OAuth2 tokens.
	//
	// Corresponds with GET /api/admin/tokens (the `GetApiAdminTokens` operationId).
	GetApiAdminTokens(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiAdminTokensRevokeByClient Revoke Tokens By Client
	//
	// Revoke all tokens issued to a specific client.
	//
	// Corresponds with POST /api/admin/tokens/revoke-by-client (the `PostApiAdminTokensRevokeByClient` operationId).
	PostApiAdminTokensRevokeByClient(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiAdminTokensRevokeByUser Revoke Tokens By User
	//
	// Revoke all tokens issued for a specific user.
	//
	// Corresponds with POST /api/admin/tokens/revoke-by-user (the `PostApiAdminTokensRevokeByUser` operationId).
	PostApiAdminTokensRevokeByUser(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// DeleteApiAdminTokensTokenPrefix Revoke Token
	//
	// Revoke a specific token by its prefix.
	//
	// Corresponds with DELETE /api/admin/tokens/{tokenPrefix} (the `DeleteApiAdminTokensTokenPrefix` operationId).
	DeleteApiAdminTokensTokenPrefix(ctx context.Context, tokenPrefix string, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminUsers List Users
	//
	// List users with optional pagination (page, per_page) and filtering (q for username/email prefix, role, locked). Returns total count.
	//
	// Corresponds with GET /api/admin/users (the `GetApiAdminUsers` operationId).
	GetApiAdminUsers(ctx context.Context, params *GetApiAdminUsersParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiAdminUsersWithBody Create User
	//
	// Create a new user. Requires username and password; email, roles, mfa_enabled, email_verified, and org_id are optional.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /api/admin/users (the `PostApiAdminUsers` operationId).
	PostApiAdminUsersWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiAdminUsers Create User
	//
	// Create a new user. Requires username and password; email, roles, mfa_enabled, email_verified, and org_id are optional.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with POST /api/admin/users (the `PostApiAdminUsers` operationId).
	PostApiAdminUsers(ctx context.Context, body PostApiAdminUsersJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// DeleteApiAdminUsersUserId Delete User
	//
	// Soft-delete a user account (sets deleted_at). The user is excluded from all queries and can no longer log in. Outstanding access and refresh tokens are revoked (matched on both the public subject and the internal id) before the response is sent; the 200 body reports tokens_revoked (false + warning on revocation failure).
	//
	// Corresponds with DELETE /api/admin/users/{userId} (the `DeleteApiAdminUsersUserId` operationId).
	DeleteApiAdminUsersUserId(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminUsersUserId Get User Detail
	//
	// Get detailed information about a specific user including roles and account status.
	//
	// Corresponds with GET /api/admin/users/{userId} (the `GetApiAdminUsersUserId` operationId).
	GetApiAdminUsersUserId(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PutApiAdminUsersUserIdWithBody Update User
	//
	// Update user information. Updatable fields: username, email, email_verified, mfa_enabled, locked (true locks the account), and org_id (integer sets it; JSON null clears it). Fields with a wrong JSON type are rejected with 400 (never silently skipped).
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with PUT /api/admin/users/{userId} (the `PutApiAdminUsersUserId` operationId).
	PutApiAdminUsersUserIdWithBody(ctx context.Context, userId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PutApiAdminUsersUserId Update User
	//
	// Update user information. Updatable fields: username, email, email_verified, mfa_enabled, locked (true locks the account), and org_id (integer sets it; JSON null clears it). Fields with a wrong JSON type are rejected with 400 (never silently skipped).
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with PUT /api/admin/users/{userId} (the `PutApiAdminUsersUserId` operationId).
	PutApiAdminUsersUserId(ctx context.Context, userId int, body PutApiAdminUsersUserIdJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PutApiAdminUsersUserIdDisable Disable User
	//
	// Disable a specific user account.
	//
	// Corresponds with PUT /api/admin/users/{userId}/disable (the `PutApiAdminUsersUserIdDisable` operationId).
	PutApiAdminUsersUserIdDisable(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiAdminUsersUserIdEnable Enable User
	//
	// Enable a disabled user account by resetting lockout state.
	//
	// Corresponds with POST /api/admin/users/{userId}/enable (the `PostApiAdminUsersUserIdEnable` operationId).
	PostApiAdminUsersUserIdEnable(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiAdminUsersUserIdRoles Get User Roles
	//
	// Get the roles assigned to a specific user.
	//
	// Corresponds with GET /api/admin/users/{userId}/roles (the `GetApiAdminUsersUserIdRoles` operationId).
	GetApiAdminUsersUserIdRoles(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PutApiAdminUsersUserIdRolesWithBody Assign User Roles
	//
	// Assign roles to a specific user.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with PUT /api/admin/users/{userId}/roles (the `PutApiAdminUsersUserIdRoles` operationId).
	PutApiAdminUsersUserIdRolesWithBody(ctx context.Context, userId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PutApiAdminUsersUserIdRoles Assign User Roles
	//
	// Assign roles to a specific user.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with PUT /api/admin/users/{userId}/roles (the `PutApiAdminUsersUserIdRoles` operationId).
	PutApiAdminUsersUserIdRoles(ctx context.Context, userId int, body PutApiAdminUsersUserIdRolesJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiGithubLogin GitHub OAuth2 Login
	//
	// Exchange GitHub authorization code for user information. This endpoint handles the server-side OAuth2 flow with GitHub.
	//
	// Corresponds with POST /api/github/login (the `PostApiGithubLogin` operationId).
	PostApiGithubLogin(ctx context.Context, params *PostApiGithubLoginParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiGoogleLogin Google OAuth2 Login
	//
	// Exchange Google authorization code for user information. This endpoint handles the server-side OAuth2 flow with Google Identity Platform.
	//
	// Corresponds with POST /api/google/login (the `PostApiGoogleLogin` operationId).
	PostApiGoogleLogin(ctx context.Context, params *PostApiGoogleLoginParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// DeleteApiMe Delete Account
	//
	// Soft-delete the current user's account.
	//
	// Corresponds with DELETE /api/me (the `DeleteApiMe` operationId).
	DeleteApiMe(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiMe Get User Profile
	//
	// Get current user's profile information.
	//
	// Corresponds with GET /api/me (the `GetApiMe` operationId).
	GetApiMe(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiMeAuthorizedApps List Authorized Apps
	//
	// List OAuth2 clients authorized by the current user.
	//
	// Corresponds with GET /api/me/authorized-apps (the `GetApiMeAuthorizedApps` operationId).
	GetApiMeAuthorizedApps(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// DeleteApiMeAuthorizedAppsClientId Revoke App Authorization
	//
	// Revoke the current user's authorization for a specific OAuth2 client.
	//
	// Corresponds with DELETE /api/me/authorized-apps/{clientId} (the `DeleteApiMeAuthorizedAppsClientId` operationId).
	DeleteApiMeAuthorizedAppsClientId(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiMeMfaDisableWithBody Disable MFA
	//
	// Disable MFA (TOTP) for the authenticated user.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /api/me/mfa/disable (the `PostApiMeMfaDisable` operationId).
	PostApiMeMfaDisableWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiMeMfaDisable Disable MFA
	//
	// Disable MFA (TOTP) for the authenticated user.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with POST /api/me/mfa/disable (the `PostApiMeMfaDisable` operationId).
	PostApiMeMfaDisable(ctx context.Context, body PostApiMeMfaDisableJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiMeMfaSetupWithBody Setup MFA
	//
	// Initiate MFA setup by generating a TOTP secret. Returns the base32 secret and an otpauth:// URI for authenticator apps / QR codes.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /api/me/mfa/setup (the `PostApiMeMfaSetup` operationId).
	PostApiMeMfaSetupWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiMeMfaSetup Setup MFA
	//
	// Initiate MFA setup by generating a TOTP secret. Returns the base32 secret and an otpauth:// URI for authenticator apps / QR codes.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with POST /api/me/mfa/setup (the `PostApiMeMfaSetup` operationId).
	PostApiMeMfaSetup(ctx context.Context, body PostApiMeMfaSetupJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiMeMfaVerifyWithBody Verify MFA Setup
	//
	// Verify a 6-digit TOTP code to finalize MFA setup. Returns 10 single-use backup codes on success.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /api/me/mfa/verify (the `PostApiMeMfaVerify` operationId).
	PostApiMeMfaVerifyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiMeMfaVerify Verify MFA Setup
	//
	// Verify a 6-digit TOTP code to finalize MFA setup. Returns 10 single-use backup codes on success.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with POST /api/me/mfa/verify (the `PostApiMeMfaVerify` operationId).
	PostApiMeMfaVerify(ctx context.Context, body PostApiMeMfaVerifyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiMeMfaVerifyWithFormdataBody Verify MFA Setup
	//
	// Verify a 6-digit TOTP code to finalize MFA setup. Returns 10 single-use backup codes on success.
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type.
	//
	// Corresponds with POST /api/me/mfa/verify (the `PostApiMeMfaVerify` operationId).
	PostApiMeMfaVerifyWithFormdataBody(ctx context.Context, body PostApiMeMfaVerifyFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PutApiMePassword Change Password
	//
	// Change the current user's password.
	//
	// Corresponds with PUT /api/me/password (the `PutApiMePassword` operationId).
	PutApiMePassword(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiMeSocialLinks List Linked Social Accounts
	//
	// List the social provider identities (github/google/wechat) linked to the current user. The seeded password-subject mapping (provider=local) is not a social identity and is excluded. Requires the `profile` scope.
	//
	// Corresponds with GET /api/me/social/links (the `GetApiMeSocialLinks` operationId).
	GetApiMeSocialLinks(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// DeleteApiMeSocialLinksProvider Unlink Social Account
	//
	// Remove the current user's linked identity for a provider. Existing sessions issued through that provider are NOT revoked -- they stay valid until natural expiry. The provider identity cannot be used for new sign-ins until it is linked to an account again. Refused with 409 when it is the user's last social link and the user has no usable password (last-credential guard). Requires the `profile` scope.
	//
	// Corresponds with DELETE /api/me/social/links/{provider} (the `DeleteApiMeSocialLinksProvider` operationId).
	DeleteApiMeSocialLinksProvider(ctx context.Context, provider DeleteApiMeSocialLinksProviderParamsProvider, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiMeSocialLinksProviderWithBody Link Social Account
	//
	// Verify a provider authorization code (the SPA completes the provider redirect and submits the code) and link that provider identity to the current user. Conflicts (409) when the identity is already linked to any account or the user already has a different mapping for the provider. Requires the `profile` scope.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /api/me/social/links/{provider} (the `PostApiMeSocialLinksProvider` operationId).
	PostApiMeSocialLinksProviderWithBody(ctx context.Context, provider PostApiMeSocialLinksProviderParamsProvider, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiMeSocialLinksProvider Link Social Account
	//
	// Verify a provider authorization code (the SPA completes the provider redirect and submits the code) and link that provider identity to the current user. Conflicts (409) when the identity is already linked to any account or the user already has a different mapping for the provider. Requires the `profile` scope.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with POST /api/me/social/links/{provider} (the `PostApiMeSocialLinksProvider` operationId).
	PostApiMeSocialLinksProvider(ctx context.Context, provider PostApiMeSocialLinksProviderParamsProvider, body PostApiMeSocialLinksProviderJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiMeSocialLinksProviderAuthorize Begin Social Link (mint one-time state)
	//
	// Begin a social link flow (#71): mint a one-time state bound to (current user, provider) and return the provider authorize URL (with the state embedded) the SPA must redirect to. The link-back POST must present the same state; tokens are single-use with a short TTL. Fails closed (500) when linking or the state store (Redis) is not configured. Requires the `profile` scope.
	//
	// Corresponds with POST /api/me/social/links/{provider}/authorize (the `PostApiMeSocialLinksProviderAuthorize` operationId).
	PostApiMeSocialLinksProviderAuthorize(ctx context.Context, provider PostApiMeSocialLinksProviderAuthorizeParamsProvider, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiMeWebauthnCredentials List WebAuthn Credentials
	//
	// List registered WebAuthn credentials.
	//
	// Corresponds with GET /api/me/webauthn/credentials (the `GetApiMeWebauthnCredentials` operationId).
	GetApiMeWebauthnCredentials(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiMeWebauthnRegisterBegin WebAuthn Register Begin
	//
	// Start passkey registration (#142): ES256-only pubKeyCredParams, userVerification=required, user.id is the base64url of the internal user id bytes, excludeCredentials lists already-registered credentials, and the challenge is bound to the Bearer subject (no session cookie contract). Requires webauthn.rp_origins to be configured.
	//
	// Corresponds with POST /api/me/webauthn/register/begin (the `PostApiMeWebauthnRegisterBegin` operationId).
	PostApiMeWebauthnRegisterBegin(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiMeWebauthnRegisterFinishWithBody WebAuthn Register Finish
	//
	// Finish passkey registration (#142): the browser PublicKeyCredential is verified server-side (subject-bound challenge, origin allowlist, none-format attestation, ES256 COSE key) before anything is stored; the legacy {credential_id, public_key} body is rejected.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /api/me/webauthn/register/finish (the `PostApiMeWebauthnRegisterFinish` operationId).
	PostApiMeWebauthnRegisterFinishWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiMeWebauthnRegisterFinish WebAuthn Register Finish
	//
	// Finish passkey registration (#142): the browser PublicKeyCredential is verified server-side (subject-bound challenge, origin allowlist, none-format attestation, ES256 COSE key) before anything is stored; the legacy {credential_id, public_key} body is rejected.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with POST /api/me/webauthn/register/finish (the `PostApiMeWebauthnRegisterFinish` operationId).
	PostApiMeWebauthnRegisterFinish(ctx context.Context, body PostApiMeWebauthnRegisterFinishJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiPasswordResetConfirm Confirm Password Reset
	//
	// Confirm a password reset using the token sent via email.
	//
	// Corresponds with POST /api/password-reset/confirm (the `PostApiPasswordResetConfirm` operationId).
	PostApiPasswordResetConfirm(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiPasswordResetRequest Request Password Reset
	//
	// Request a password reset link to be sent via email.
	//
	// Corresponds with POST /api/password-reset/request (the `PostApiPasswordResetRequest` operationId).
	PostApiPasswordResetRequest(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiRegister Register new user
	//
	// Registers a new user account into the system.
	//
	// Corresponds with POST /api/register (the `PostApiRegister` operationId).
	PostApiRegister(ctx context.Context, params *PostApiRegisterParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetApiVerifyEmail Verify Email
	//
	// Verify an email address using a token.
	//
	// Corresponds with GET /api/verify-email (the `GetApiVerifyEmail` operationId).
	GetApiVerifyEmail(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiVerifyEmailResend Resend Verification Email
	//
	// Resend the email verification link.
	//
	// Corresponds with POST /api/verify-email/resend (the `PostApiVerifyEmailResend` operationId).
	PostApiVerifyEmailResend(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostApiWechatLogin WeChat OAuth2 Login
	//
	// Exchange WeChat authorization code for user information. This endpoint handles the server-side OAuth2 flow with WeChat Open Platform.
	//
	// Corresponds with POST /api/wechat/login (the `PostApiWechatLogin` operationId).
	PostApiWechatLogin(ctx context.Context, params *PostApiWechatLoginParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetHealth Health check
	//
	// Aggregate health status of the service (process + database).
	//
	// Corresponds with GET /health (the `GetHealth` operationId).
	GetHealth(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetHealthLive Liveness probe
	//
	// Liveness probe — always 200 while the process is up (no dependency checks).
	//
	// Corresponds with GET /health/live (the `GetHealthLive` operationId).
	GetHealthLive(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetHealthReady Readiness probe
	//
	// Readiness probe — database / redis dependency checks; 503 when a required dependency is down.
	//
	// Corresponds with GET /health/ready (the `GetHealthReady` operationId).
	GetHealthReady(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetOauth2Authorize Request authorization
	//
	// OAuth2 authorization endpoint - initiates authorization flow.
	//
	// Corresponds with GET /oauth2/authorize (the `GetOauth2Authorize` operationId).
	GetOauth2Authorize(ctx context.Context, params *GetOauth2AuthorizeParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2Consent Submit user consent
	//
	// Submit user consent for requested scopes. Redirects back to client.
	//
	// Corresponds with POST /oauth2/consent (the `PostOauth2Consent` operationId).
	PostOauth2Consent(ctx context.Context, params *PostOauth2ConsentParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2DeviceApproveWithBody Approve Device Authorization
	//
	// Admin-only approval of a pending device authorization (RFC 8628 user approval step). Requires an admin Bearer token (AuthorizationFilter).
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /oauth2/device/approve (the `PostOauth2DeviceApprove` operationId).
	PostOauth2DeviceApproveWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2DeviceApproveWithFormdataBody Approve Device Authorization
	//
	// Admin-only approval of a pending device authorization (RFC 8628 user approval step). Requires an admin Bearer token (AuthorizationFilter).
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type.
	//
	// Corresponds with POST /oauth2/device/approve (the `PostOauth2DeviceApprove` operationId).
	PostOauth2DeviceApproveWithFormdataBody(ctx context.Context, body PostOauth2DeviceApproveFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2DeviceAuthorizationWithBody Device Authorization
	//
	// RFC 8628 device authorization endpoint. A CONFIDENTIAL client authenticates with client_secret (HTTP Basic preferred); a PUBLIC client sends client_id only. The user then visits verification_uri and an admin approves via /oauth2/device/approve; the device polls /oauth2/token with grant_type=urn:ietf:params:oauth:grant-type:device_code.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /oauth2/device_authorization (the `PostOauth2DeviceAuthorization` operationId).
	PostOauth2DeviceAuthorizationWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2DeviceAuthorizationWithFormdataBody Device Authorization
	//
	// RFC 8628 device authorization endpoint. A CONFIDENTIAL client authenticates with client_secret (HTTP Basic preferred); a PUBLIC client sends client_id only. The user then visits verification_uri and an admin approves via /oauth2/device/approve; the device polls /oauth2/token with grant_type=urn:ietf:params:oauth:grant-type:device_code.
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type.
	//
	// Corresponds with POST /oauth2/device_authorization (the `PostOauth2DeviceAuthorization` operationId).
	PostOauth2DeviceAuthorizationWithFormdataBody(ctx context.Context, body PostOauth2DeviceAuthorizationFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetOauth2EndSession RP-Initiated Logout
	//
	// OIDC RP-Initiated Logout 1.0 §2. Terminates the user's server-side session and (optionally) redirects to a registered post_logout_redirect_uri. When id_token_hint is supplied it MUST pass end-to-end verification (#78: RS256 signature against the OP key set, strict alg/kid, iss, exp) — any failure, or a hint subject that contradicts the browser session, is rejected with 400 AUTH_INVALID_ID_TOKEN_HINT (Error Envelope). post_logout_redirect_uri MUST be registered for the client identified by the verified id_token_hint (its aud claim); without a hint the request is rejected with 400 when a redirect URI is supplied. Accepts both GET (link-based) and POST (form-based).
	//
	// Corresponds with GET /oauth2/end_session (the `GetOauth2EndSession` operationId).
	GetOauth2EndSession(ctx context.Context, params *GetOauth2EndSessionParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2EndSession RP-Initiated Logout (POST)
	//
	// OIDC RP-Initiated Logout (POST form-based variant; see GET for semantics). id_token_hint, when supplied, is signature-verified (#78); verification failure yields 400 AUTH_INVALID_ID_TOKEN_HINT Error Envelope.
	//
	// Corresponds with POST /oauth2/end_session (the `PostOauth2EndSession` operationId).
	PostOauth2EndSession(ctx context.Context, params *PostOauth2EndSessionParams, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2IntrospectWithBody Introspect token
	//
	// RFC 7662 OAuth 2.0 Token Introspection. Returns information about a token. The calling client MUST authenticate (HTTP Basic preferred; client_id/client_secret form parameters accepted).
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /oauth2/introspect (the `PostOauth2Introspect` operationId).
	PostOauth2IntrospectWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2IntrospectWithFormdataBody Introspect token
	//
	// RFC 7662 OAuth 2.0 Token Introspection. Returns information about a token. The calling client MUST authenticate (HTTP Basic preferred; client_id/client_secret form parameters accepted).
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type.
	//
	// Corresponds with POST /oauth2/introspect (the `PostOauth2Introspect` operationId).
	PostOauth2IntrospectWithFormdataBody(ctx context.Context, body PostOauth2IntrospectFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2LoginWithBody Authenticate user
	//
	// Authenticates user credentials and generates an authorization code. Usually called by the frontend login page during the authorization code flow. Accepts a JSON body or form-encoded parameters; when MFA is enabled on the account the response defers to POST /oauth2/mfa/verify.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /oauth2/login (the `PostOauth2Login` operationId).
	PostOauth2LoginWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2Login Authenticate user
	//
	// Authenticates user credentials and generates an authorization code. Usually called by the frontend login page during the authorization code flow. Accepts a JSON body or form-encoded parameters; when MFA is enabled on the account the response defers to POST /oauth2/mfa/verify.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with POST /oauth2/login (the `PostOauth2Login` operationId).
	PostOauth2Login(ctx context.Context, body PostOauth2LoginJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2LoginWithFormdataBody Authenticate user
	//
	// Authenticates user credentials and generates an authorization code. Usually called by the frontend login page during the authorization code flow. Accepts a JSON body or form-encoded parameters; when MFA is enabled on the account the response defers to POST /oauth2/mfa/verify.
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type.
	//
	// Corresponds with POST /oauth2/login (the `PostOauth2Login` operationId).
	PostOauth2LoginWithFormdataBody(ctx context.Context, body PostOauth2LoginFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2LogoutWithBody Logout
	//
	// Terminates the server-side session behind the presented Bearer access token (also fires OIDC back-channel logout notifications when configured).
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /oauth2/logout (the `PostOauth2Logout` operationId).
	PostOauth2LogoutWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2Logout Logout
	//
	// Terminates the server-side session behind the presented Bearer access token (also fires OIDC back-channel logout notifications when configured).
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with POST /oauth2/logout (the `PostOauth2Logout` operationId).
	PostOauth2Logout(ctx context.Context, body PostOauth2LogoutJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2MfaVerifyWithBody Verify MFA Code (Login)
	//
	// Verify MFA (TOTP) code during login. Completes the authorization-code issuance started by /oauth2/login when MFA was required. The PKCE code_verifier (C4, RFC 7636) must be supplied so the internally-generated code passes PKCE verification against the code_challenge persisted on the session during the first-factor login step. Accepts a JSON body or form-encoded parameters.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /oauth2/mfa/verify (the `PostOauth2MfaVerify` operationId).
	PostOauth2MfaVerifyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2MfaVerify Verify MFA Code (Login)
	//
	// Verify MFA (TOTP) code during login. Completes the authorization-code issuance started by /oauth2/login when MFA was required. The PKCE code_verifier (C4, RFC 7636) must be supplied so the internally-generated code passes PKCE verification against the code_challenge persisted on the session during the first-factor login step. Accepts a JSON body or form-encoded parameters.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with POST /oauth2/mfa/verify (the `PostOauth2MfaVerify` operationId).
	PostOauth2MfaVerify(ctx context.Context, body PostOauth2MfaVerifyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2MfaVerifyWithFormdataBody Verify MFA Code (Login)
	//
	// Verify MFA (TOTP) code during login. Completes the authorization-code issuance started by /oauth2/login when MFA was required. The PKCE code_verifier (C4, RFC 7636) must be supplied so the internally-generated code passes PKCE verification against the code_challenge persisted on the session during the first-factor login step. Accepts a JSON body or form-encoded parameters.
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type.
	//
	// Corresponds with POST /oauth2/mfa/verify (the `PostOauth2MfaVerify` operationId).
	PostOauth2MfaVerifyWithFormdataBody(ctx context.Context, body PostOauth2MfaVerifyFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2Register Register Client
	//
	// Dynamic client registration.
	//
	// Corresponds with POST /oauth2/register (the `PostOauth2Register` operationId).
	PostOauth2Register(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2RevokeWithBody Revoke token
	//
	// RFC 7009 OAuth 2.0 Token Revocation. Revokes an access OR refresh token (C3 fix — refresh tokens are now actually revoked, not silently no-op'd). The caller must be the token's owning client (ownership enforced via introspection). CONFIDENTIAL clients authenticate via client_secret (HTTP Basic or body); PUBLIC clients (token_endpoint_auth_method='none') authenticate with client_id only (RFC 7009 §2.1 exempts them from client authentication at this endpoint). Unknown or already-inactive tokens still return 200 per RFC 7009; the success body is EMPTY.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /oauth2/revoke (the `PostOauth2Revoke` operationId).
	PostOauth2RevokeWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2RevokeWithFormdataBody Revoke token
	//
	// RFC 7009 OAuth 2.0 Token Revocation. Revokes an access OR refresh token (C3 fix — refresh tokens are now actually revoked, not silently no-op'd). The caller must be the token's owning client (ownership enforced via introspection). CONFIDENTIAL clients authenticate via client_secret (HTTP Basic or body); PUBLIC clients (token_endpoint_auth_method='none') authenticate with client_id only (RFC 7009 §2.1 exempts them from client authentication at this endpoint). Unknown or already-inactive tokens still return 200 per RFC 7009; the success body is EMPTY.
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type.
	//
	// Corresponds with POST /oauth2/revoke (the `PostOauth2Revoke` operationId).
	PostOauth2RevokeWithFormdataBody(ctx context.Context, body PostOauth2RevokeFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2TokenWithBody Exchange authorization code for access token
	//
	// OAuth2 token endpoint - exchanges an authorization code, refresh token, client credentials, or device code for access tokens (RFC 6749 §3.2). Request parameters are sent as application/x-www-form-urlencoded (the server also accepts them as query parameters). Client authentication follows each client's registered token_endpoint_auth_method (F-017): client_secret_basic (the default) -> HTTP Basic ONLY (a body client_secret is rejected); client_secret_post -> client_id + client_secret form fields ONLY (a Basic header is rejected); PUBLIC clients send client_id only (any client_secret is rejected).
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /oauth2/token (the `PostOauth2Token` operationId).
	PostOauth2TokenWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2TokenWithFormdataBody Exchange authorization code for access token
	//
	// OAuth2 token endpoint - exchanges an authorization code, refresh token, client credentials, or device code for access tokens (RFC 6749 §3.2). Request parameters are sent as application/x-www-form-urlencoded (the server also accepts them as query parameters). Client authentication follows each client's registered token_endpoint_auth_method (F-017): client_secret_basic (the default) -> HTTP Basic ONLY (a body client_secret is rejected); client_secret_post -> client_id + client_secret form fields ONLY (a Basic header is rejected); PUBLIC clients send client_id only (any client_secret is rejected).
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type.
	//
	// Corresponds with POST /oauth2/token (the `PostOauth2Token` operationId).
	PostOauth2TokenWithFormdataBody(ctx context.Context, body PostOauth2TokenFormdataRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)

	// GetOauth2Userinfo Get user information
	//
	// Returns information about the authenticated user. F-023 (OIDC Core §5.3): the access token's scope MUST include openid; M2M tokens (client_credentials, subject client:*) are rejected. The response includes the email_verified claim (F-024) when an email is present.
	//
	// Corresponds with GET /oauth2/userinfo (the `GetOauth2Userinfo` operationId).
	GetOauth2Userinfo(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2WebauthnAuthenticateBegin WebAuthn Authenticate Begin
	//
	// Start passkey authentication (#142): the challenge is bound to the caller's session (send cookies - credentials include); userVerification=required; ES256 only. Requires webauthn.rp_origins.
	//
	// Corresponds with POST /oauth2/webauthn/authenticate/begin (the `PostOauth2WebauthnAuthenticateBegin` operationId).
	PostOauth2WebauthnAuthenticateBegin(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2WebauthnAuthenticateFinishWithBody WebAuthn Authenticate Finish
	//
	// Finish passkey authentication (#142): the session challenge is consumed unconditionally, the ES256 signature over authData || SHA256(clientDataJSON) is verified against the STORED COSE key, UV=1 is enforced and signCount regression is treated as cloning. On success a browser session is established (Set-Cookie). All failures answer the generic AUTH_INVALID_CREDENTIALS.
	//
	// Takes any type of body and a specified content type.
	//
	// Corresponds with POST /oauth2/webauthn/authenticate/finish (the `PostOauth2WebauthnAuthenticateFinish` operationId).
	PostOauth2WebauthnAuthenticateFinishWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)

	// PostOauth2WebauthnAuthenticateFinish WebAuthn Authenticate Finish
	//
	// Finish passkey authentication (#142): the session challenge is consumed unconditionally, the ES256 signature over authData || SHA256(clientDataJSON) is verified against the STORED COSE key, UV=1 is enforced and signCount regression is treated as cloning. On success a browser session is established (Set-Cookie). All failures answer the generic AUTH_INVALID_CREDENTIALS.
	//
	// Takes a body of the `application/json` content type.
	//
	// Corresponds with POST /oauth2/webauthn/authenticate/finish (the `PostOauth2WebauthnAuthenticateFinish` operationId).
	PostOauth2WebauthnAuthenticateFinish(ctx context.Context, body PostOauth2WebauthnAuthenticateFinishJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
}

The interface specification for the client above.

type ClientOption

type ClientOption func(*Client) error

ClientOption allows setting custom parameters during construction

func WithBaseURL

func WithBaseURL(baseURL string) ClientOption

WithBaseURL overrides the baseURL.

func WithHTTPClient

func WithHTTPClient(doer HttpRequestDoer) ClientOption

WithHTTPClient allows overriding the default Doer, which is automatically created using http.Client. This is useful for tests.

func WithRequestEditorFn

func WithRequestEditorFn(fn RequestEditorFn) ClientOption

WithRequestEditorFn allows setting up a callback function, which will be called right before sending the request. This can be used to mutate the request.

type ClientWithResponses

type ClientWithResponses struct {
	ClientInterface
}

ClientWithResponses builds on ClientInterface to offer response payloads

func NewClientWithResponses

func NewClientWithResponses(server string, opts ...ClientOption) (*ClientWithResponses, error)

NewClientWithResponses creates a new ClientWithResponses, which wraps Client with return type handling

func (*ClientWithResponses) DeleteApiAdminClientsClientIdWithResponse

func (c *ClientWithResponses) DeleteApiAdminClientsClientIdWithResponse(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*DeleteApiAdminClientsClientIdResponse, error)

DeleteApiAdminClientsClientIdWithResponse Delete OAuth2 Client

Delete a specific OAuth2 client.

Returns a wrapper object for the known response body format(s).

Corresponds with DELETE /api/admin/clients/{clientId} (the `DeleteApiAdminClientsClientId` operationId).

func (*ClientWithResponses) DeleteApiAdminRolesRoleIdWithResponse

func (c *ClientWithResponses) DeleteApiAdminRolesRoleIdWithResponse(ctx context.Context, roleId int, reqEditors ...RequestEditorFn) (*DeleteApiAdminRolesRoleIdResponse, error)

DeleteApiAdminRolesRoleIdWithResponse Delete Role

Delete a role. Built-in roles (admin, user) cannot be deleted.

Returns a wrapper object for the known response body format(s).

Corresponds with DELETE /api/admin/roles/{roleId} (the `DeleteApiAdminRolesRoleId` operationId).

func (*ClientWithResponses) DeleteApiAdminScopesScopeIdWithResponse

func (c *ClientWithResponses) DeleteApiAdminScopesScopeIdWithResponse(ctx context.Context, scopeId int, reqEditors ...RequestEditorFn) (*DeleteApiAdminScopesScopeIdResponse, error)

DeleteApiAdminScopesScopeIdWithResponse Delete Scope

Delete a scope. Built-in scopes (openid, profile, email, admin) cannot be deleted.

Returns a wrapper object for the known response body format(s).

Corresponds with DELETE /api/admin/scopes/{scopeId} (the `DeleteApiAdminScopesScopeId` operationId).

func (*ClientWithResponses) DeleteApiAdminTokensTokenPrefixWithResponse

func (c *ClientWithResponses) DeleteApiAdminTokensTokenPrefixWithResponse(ctx context.Context, tokenPrefix string, reqEditors ...RequestEditorFn) (*DeleteApiAdminTokensTokenPrefixResponse, error)

DeleteApiAdminTokensTokenPrefixWithResponse Revoke Token

Revoke a specific token by its prefix.

Returns a wrapper object for the known response body format(s).

Corresponds with DELETE /api/admin/tokens/{tokenPrefix} (the `DeleteApiAdminTokensTokenPrefix` operationId).

func (*ClientWithResponses) DeleteApiAdminUsersUserIdWithResponse

func (c *ClientWithResponses) DeleteApiAdminUsersUserIdWithResponse(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*DeleteApiAdminUsersUserIdResponse, error)

DeleteApiAdminUsersUserIdWithResponse Delete User

Soft-delete a user account (sets deleted_at). The user is excluded from all queries and can no longer log in. Outstanding access and refresh tokens are revoked (matched on both the public subject and the internal id) before the response is sent; the 200 body reports tokens_revoked (false + warning on revocation failure).

Returns a wrapper object for the known response body format(s).

Corresponds with DELETE /api/admin/users/{userId} (the `DeleteApiAdminUsersUserId` operationId).

func (*ClientWithResponses) DeleteApiMeAuthorizedAppsClientIdWithResponse

func (c *ClientWithResponses) DeleteApiMeAuthorizedAppsClientIdWithResponse(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*DeleteApiMeAuthorizedAppsClientIdResponse, error)

DeleteApiMeAuthorizedAppsClientIdWithResponse Revoke App Authorization

Revoke the current user's authorization for a specific OAuth2 client.

Returns a wrapper object for the known response body format(s).

Corresponds with DELETE /api/me/authorized-apps/{clientId} (the `DeleteApiMeAuthorizedAppsClientId` operationId).

func (*ClientWithResponses) DeleteApiMeSocialLinksProviderWithResponse

func (c *ClientWithResponses) DeleteApiMeSocialLinksProviderWithResponse(ctx context.Context, provider DeleteApiMeSocialLinksProviderParamsProvider, reqEditors ...RequestEditorFn) (*DeleteApiMeSocialLinksProviderResponse, error)

DeleteApiMeSocialLinksProviderWithResponse Unlink Social Account

Remove the current user's linked identity for a provider. Existing sessions issued through that provider are NOT revoked -- they stay valid until natural expiry. The provider identity cannot be used for new sign-ins until it is linked to an account again. Refused with 409 when it is the user's last social link and the user has no usable password (last-credential guard). Requires the `profile` scope.

Returns a wrapper object for the known response body format(s).

Corresponds with DELETE /api/me/social/links/{provider} (the `DeleteApiMeSocialLinksProvider` operationId).

func (*ClientWithResponses) DeleteApiMeWithResponse

func (c *ClientWithResponses) DeleteApiMeWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*DeleteApiMeResponse, error)

DeleteApiMeWithResponse Delete Account

Soft-delete the current user's account.

Returns a wrapper object for the known response body format(s).

Corresponds with DELETE /api/me (the `DeleteApiMe` operationId).

func (*ClientWithResponses) GetApiAdminClientsClientIdScopesWithResponse

func (c *ClientWithResponses) GetApiAdminClientsClientIdScopesWithResponse(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*GetApiAdminClientsClientIdScopesResponse, error)

GetApiAdminClientsClientIdScopesWithResponse Get Client Scopes

Get the assigned scopes for an OAuth2 client.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/clients/{clientId}/scopes (the `GetApiAdminClientsClientIdScopes` operationId).

func (*ClientWithResponses) GetApiAdminClientsClientIdWithResponse

func (c *ClientWithResponses) GetApiAdminClientsClientIdWithResponse(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*GetApiAdminClientsClientIdResponse, error)

GetApiAdminClientsClientIdWithResponse Get Client Details

Get details of a specific OAuth2 client by ID.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/clients/{clientId} (the `GetApiAdminClientsClientId` operationId).

func (*ClientWithResponses) GetApiAdminClientsWithResponse

func (c *ClientWithResponses) GetApiAdminClientsWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminClientsResponse, error)

GetApiAdminClientsWithResponse List OAuth2 Clients

Get a paginated list of registered OAuth2 clients.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/clients (the `GetApiAdminClients` operationId).

func (*ClientWithResponses) GetApiAdminDashboardStatsWithResponse

func (c *ClientWithResponses) GetApiAdminDashboardStatsWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminDashboardStatsResponse, error)

GetApiAdminDashboardStatsWithResponse Get Dashboard Stats

Get dashboard statistics including user count, client count, active tokens, and failure metrics.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/dashboard/stats (the `GetApiAdminDashboardStats` operationId).

func (*ClientWithResponses) GetApiAdminDashboardWithResponse

func (c *ClientWithResponses) GetApiAdminDashboardWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminDashboardResponse, error)

GetApiAdminDashboardWithResponse Get Dashboard

Static admin dashboard overview (welcome payload; live numbers are on /api/admin/dashboard/stats).

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/dashboard (the `GetApiAdminDashboard` operationId).

func (*ClientWithResponses) GetApiAdminLogsWithResponse

func (c *ClientWithResponses) GetApiAdminLogsWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminLogsResponse, error)

GetApiAdminLogsWithResponse List Audit Logs

Get a paginated list of system audit logs.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/logs (the `GetApiAdminLogs` operationId).

func (*ClientWithResponses) GetApiAdminOidcKeysWithResponse

func (c *ClientWithResponses) GetApiAdminOidcKeysWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminOidcKeysResponse, error)

GetApiAdminOidcKeysWithResponse Get OIDC Keys Info

Get information about OIDC signing keys.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/oidc/keys (the `GetApiAdminOidcKeys` operationId).

func (*ClientWithResponses) GetApiAdminOrganizationsSlugWithResponse

func (c *ClientWithResponses) GetApiAdminOrganizationsSlugWithResponse(ctx context.Context, slug string, reqEditors ...RequestEditorFn) (*GetApiAdminOrganizationsSlugResponse, error)

GetApiAdminOrganizationsSlugWithResponse Get Organization

Get a single organization by its slug.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/organizations/{slug} (the `GetApiAdminOrganizationsSlug` operationId).

func (*ClientWithResponses) GetApiAdminOrganizationsWithResponse

func (c *ClientWithResponses) GetApiAdminOrganizationsWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminOrganizationsResponse, error)

GetApiAdminOrganizationsWithResponse List Organizations

List all organizations (id, slug, name, branding fields; no created_at).

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/organizations (the `GetApiAdminOrganizations` operationId).

func (*ClientWithResponses) GetApiAdminRolesWithResponse

func (c *ClientWithResponses) GetApiAdminRolesWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminRolesResponse, error)

GetApiAdminRolesWithResponse List Roles

Get a list of all roles with user counts.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/roles (the `GetApiAdminRoles` operationId).

func (*ClientWithResponses) GetApiAdminScopesResourcesWithResponse

func (c *ClientWithResponses) GetApiAdminScopesResourcesWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminScopesResourcesResponse, error)

GetApiAdminScopesResourcesWithResponse Scope-Resource Matrix

#43 discovery -- the (path, method) -> required-scopes matrix from the central ResourceScopeRegistry. Read-only, no DB access.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/scopes/resources (the `GetApiAdminScopesResources` operationId).

func (*ClientWithResponses) GetApiAdminScopesWithResponse

func (c *ClientWithResponses) GetApiAdminScopesWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminScopesResponse, error)

GetApiAdminScopesWithResponse List Scopes

Get a list of all available scopes.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/scopes (the `GetApiAdminScopes` operationId).

func (*ClientWithResponses) GetApiAdminTokensWithResponse

func (c *ClientWithResponses) GetApiAdminTokensWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminTokensResponse, error)

GetApiAdminTokensWithResponse List Tokens

Get a list of active OAuth2 tokens.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/tokens (the `GetApiAdminTokens` operationId).

func (*ClientWithResponses) GetApiAdminUsersUserIdRolesWithResponse

func (c *ClientWithResponses) GetApiAdminUsersUserIdRolesWithResponse(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*GetApiAdminUsersUserIdRolesResponse, error)

GetApiAdminUsersUserIdRolesWithResponse Get User Roles

Get the roles assigned to a specific user.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/users/{userId}/roles (the `GetApiAdminUsersUserIdRoles` operationId).

func (*ClientWithResponses) GetApiAdminUsersUserIdWithResponse

func (c *ClientWithResponses) GetApiAdminUsersUserIdWithResponse(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*GetApiAdminUsersUserIdResponse, error)

GetApiAdminUsersUserIdWithResponse Get User Detail

Get detailed information about a specific user including roles and account status.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/users/{userId} (the `GetApiAdminUsersUserId` operationId).

func (*ClientWithResponses) GetApiAdminUsersWithResponse

func (c *ClientWithResponses) GetApiAdminUsersWithResponse(ctx context.Context, params *GetApiAdminUsersParams, reqEditors ...RequestEditorFn) (*GetApiAdminUsersResponse, error)

GetApiAdminUsersWithResponse List Users

List users with optional pagination (page, per_page) and filtering (q for username/email prefix, role, locked). Returns total count.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/admin/users (the `GetApiAdminUsers` operationId).

func (*ClientWithResponses) GetApiMeAuthorizedAppsWithResponse

func (c *ClientWithResponses) GetApiMeAuthorizedAppsWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiMeAuthorizedAppsResponse, error)

GetApiMeAuthorizedAppsWithResponse List Authorized Apps

List OAuth2 clients authorized by the current user.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/me/authorized-apps (the `GetApiMeAuthorizedApps` operationId).

func (*ClientWithResponses) GetApiMeSocialLinksWithResponse

func (c *ClientWithResponses) GetApiMeSocialLinksWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiMeSocialLinksResponse, error)

GetApiMeSocialLinksWithResponse List Linked Social Accounts

List the social provider identities (github/google/wechat) linked to the current user. The seeded password-subject mapping (provider=local) is not a social identity and is excluded. Requires the `profile` scope.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/me/social/links (the `GetApiMeSocialLinks` operationId).

func (*ClientWithResponses) GetApiMeWebauthnCredentialsWithResponse

func (c *ClientWithResponses) GetApiMeWebauthnCredentialsWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiMeWebauthnCredentialsResponse, error)

GetApiMeWebauthnCredentialsWithResponse List WebAuthn Credentials

List registered WebAuthn credentials.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/me/webauthn/credentials (the `GetApiMeWebauthnCredentials` operationId).

func (*ClientWithResponses) GetApiMeWithResponse

func (c *ClientWithResponses) GetApiMeWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiMeResponse, error)

GetApiMeWithResponse Get User Profile

Get current user's profile information.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/me (the `GetApiMe` operationId).

func (*ClientWithResponses) GetApiVerifyEmailWithResponse

func (c *ClientWithResponses) GetApiVerifyEmailWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiVerifyEmailResponse, error)

GetApiVerifyEmailWithResponse Verify Email

Verify an email address using a token.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /api/verify-email (the `GetApiVerifyEmail` operationId).

func (*ClientWithResponses) GetHealthLiveWithResponse

func (c *ClientWithResponses) GetHealthLiveWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetHealthLiveResponse, error)

GetHealthLiveWithResponse Liveness probe

Liveness probe — always 200 while the process is up (no dependency checks).

Returns a wrapper object for the known response body format(s).

Corresponds with GET /health/live (the `GetHealthLive` operationId).

func (*ClientWithResponses) GetHealthReadyWithResponse

func (c *ClientWithResponses) GetHealthReadyWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetHealthReadyResponse, error)

GetHealthReadyWithResponse Readiness probe

Readiness probe — database / redis dependency checks; 503 when a required dependency is down.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /health/ready (the `GetHealthReady` operationId).

func (*ClientWithResponses) GetHealthWithResponse

func (c *ClientWithResponses) GetHealthWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetHealthResponse, error)

GetHealthWithResponse Health check

Aggregate health status of the service (process + database).

Returns a wrapper object for the known response body format(s).

Corresponds with GET /health (the `GetHealth` operationId).

func (*ClientWithResponses) GetOauth2AuthorizeWithResponse

func (c *ClientWithResponses) GetOauth2AuthorizeWithResponse(ctx context.Context, params *GetOauth2AuthorizeParams, reqEditors ...RequestEditorFn) (*GetOauth2AuthorizeResponse, error)

GetOauth2AuthorizeWithResponse Request authorization

OAuth2 authorization endpoint - initiates authorization flow.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /oauth2/authorize (the `GetOauth2Authorize` operationId).

func (*ClientWithResponses) GetOauth2EndSessionWithResponse

func (c *ClientWithResponses) GetOauth2EndSessionWithResponse(ctx context.Context, params *GetOauth2EndSessionParams, reqEditors ...RequestEditorFn) (*GetOauth2EndSessionResponse, error)

GetOauth2EndSessionWithResponse RP-Initiated Logout

OIDC RP-Initiated Logout 1.0 §2. Terminates the user's server-side session and (optionally) redirects to a registered post_logout_redirect_uri. When id_token_hint is supplied it MUST pass end-to-end verification (#78: RS256 signature against the OP key set, strict alg/kid, iss, exp) — any failure, or a hint subject that contradicts the browser session, is rejected with 400 AUTH_INVALID_ID_TOKEN_HINT (Error Envelope). post_logout_redirect_uri MUST be registered for the client identified by the verified id_token_hint (its aud claim); without a hint the request is rejected with 400 when a redirect URI is supplied. Accepts both GET (link-based) and POST (form-based).

Returns a wrapper object for the known response body format(s).

Corresponds with GET /oauth2/end_session (the `GetOauth2EndSession` operationId).

func (*ClientWithResponses) GetOauth2UserinfoWithResponse

func (c *ClientWithResponses) GetOauth2UserinfoWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetOauth2UserinfoResponse, error)

GetOauth2UserinfoWithResponse Get user information

Returns information about the authenticated user. F-023 (OIDC Core §5.3): the access token's scope MUST include openid; M2M tokens (client_credentials, subject client:*) are rejected. The response includes the email_verified claim (F-024) when an email is present.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /oauth2/userinfo (the `GetOauth2Userinfo` operationId).

func (*ClientWithResponses) GetWellKnownJwksJsonWithResponse

func (c *ClientWithResponses) GetWellKnownJwksJsonWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetWellKnownJwksJsonResponse, error)

GetWellKnownJwksJsonWithResponse JSON Web Key Set

Returns the public keys used by this server to sign JWTs.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /.well-known/jwks.json (the `GetWellKnownJwksJson` operationId).

func (*ClientWithResponses) GetWellKnownOauthAuthorizationServerWithResponse

func (c *ClientWithResponses) GetWellKnownOauthAuthorizationServerWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetWellKnownOauthAuthorizationServerResponse, error)

GetWellKnownOauthAuthorizationServerWithResponse OAuth 2.0 Authorization Server Metadata

RFC 8414 OAuth 2.0 Authorization Server Metadata. Unlike the OIDC discovery document this carries no userinfo/jwks entries.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /.well-known/oauth-authorization-server (the `GetWellKnownOauthAuthorizationServer` operationId).

func (*ClientWithResponses) GetWellKnownOpenidConfigurationWithResponse

func (c *ClientWithResponses) GetWellKnownOpenidConfigurationWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetWellKnownOpenidConfigurationResponse, error)

GetWellKnownOpenidConfigurationWithResponse OpenID Connect Discovery

Returns OIDC discovery metadata including endpoints and supported scopes.

Returns a wrapper object for the known response body format(s).

Corresponds with GET /.well-known/openid-configuration (the `GetWellKnownOpenidConfiguration` operationId).

func (*ClientWithResponses) PostApiAdminClientsClientIdResetSecretWithResponse

func (c *ClientWithResponses) PostApiAdminClientsClientIdResetSecretWithResponse(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*PostApiAdminClientsClientIdResetSecretResponse, error)

PostApiAdminClientsClientIdResetSecretWithResponse Reset Client Secret

Reset the secret of a specific OAuth2 client.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /api/admin/clients/{clientId}/reset-secret (the `PostApiAdminClientsClientIdResetSecret` operationId).

func (*ClientWithResponses) PostApiAdminClientsWithBodyWithResponse

func (c *ClientWithResponses) PostApiAdminClientsWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiAdminClientsResponse, error)

PostApiAdminClientsWithBodyWithResponse Create OAuth2 Client

Register a new OAuth2 client.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/admin/clients (the `PostApiAdminClients` operationId).

func (*ClientWithResponses) PostApiAdminClientsWithResponse

func (c *ClientWithResponses) PostApiAdminClientsWithResponse(ctx context.Context, body PostApiAdminClientsJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiAdminClientsResponse, error)

PostApiAdminClientsWithResponse Create OAuth2 Client

Register a new OAuth2 client.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/admin/clients (the `PostApiAdminClients` operationId).

func (*ClientWithResponses) PostApiAdminOrganizationsWithBodyWithResponse

func (c *ClientWithResponses) PostApiAdminOrganizationsWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiAdminOrganizationsResponse, error)

PostApiAdminOrganizationsWithBodyWithResponse Create Organization

Create an organization. Slug must be 3-50 chars of lowercase alphanumeric + hyphens, starting/ending alphanumeric.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/admin/organizations (the `PostApiAdminOrganizations` operationId).

func (*ClientWithResponses) PostApiAdminOrganizationsWithResponse

func (c *ClientWithResponses) PostApiAdminOrganizationsWithResponse(ctx context.Context, body PostApiAdminOrganizationsJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiAdminOrganizationsResponse, error)

PostApiAdminOrganizationsWithResponse Create Organization

Create an organization. Slug must be 3-50 chars of lowercase alphanumeric + hyphens, starting/ending alphanumeric.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/admin/organizations (the `PostApiAdminOrganizations` operationId).

func (*ClientWithResponses) PostApiAdminRolesWithBodyWithResponse

func (c *ClientWithResponses) PostApiAdminRolesWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiAdminRolesResponse, error)

PostApiAdminRolesWithBodyWithResponse Create Role

Create a new role. Built-in roles (admin, user) cannot be duplicated.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/admin/roles (the `PostApiAdminRoles` operationId).

func (*ClientWithResponses) PostApiAdminRolesWithResponse

func (c *ClientWithResponses) PostApiAdminRolesWithResponse(ctx context.Context, body PostApiAdminRolesJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiAdminRolesResponse, error)

PostApiAdminRolesWithResponse Create Role

Create a new role. Built-in roles (admin, user) cannot be duplicated.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/admin/roles (the `PostApiAdminRoles` operationId).

func (*ClientWithResponses) PostApiAdminScopesWithBodyWithResponse

func (c *ClientWithResponses) PostApiAdminScopesWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiAdminScopesResponse, error)

PostApiAdminScopesWithBodyWithResponse Create Scope

Create a new OAuth2 scope. Built-in scopes cannot be duplicated.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/admin/scopes (the `PostApiAdminScopes` operationId).

func (*ClientWithResponses) PostApiAdminScopesWithResponse

func (c *ClientWithResponses) PostApiAdminScopesWithResponse(ctx context.Context, body PostApiAdminScopesJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiAdminScopesResponse, error)

PostApiAdminScopesWithResponse Create Scope

Create a new OAuth2 scope. Built-in scopes cannot be duplicated.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/admin/scopes (the `PostApiAdminScopes` operationId).

func (*ClientWithResponses) PostApiAdminTokensRevokeByClientWithResponse

func (c *ClientWithResponses) PostApiAdminTokensRevokeByClientWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostApiAdminTokensRevokeByClientResponse, error)

PostApiAdminTokensRevokeByClientWithResponse Revoke Tokens By Client

Revoke all tokens issued to a specific client.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /api/admin/tokens/revoke-by-client (the `PostApiAdminTokensRevokeByClient` operationId).

func (*ClientWithResponses) PostApiAdminTokensRevokeByUserWithResponse

func (c *ClientWithResponses) PostApiAdminTokensRevokeByUserWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostApiAdminTokensRevokeByUserResponse, error)

PostApiAdminTokensRevokeByUserWithResponse Revoke Tokens By User

Revoke all tokens issued for a specific user.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /api/admin/tokens/revoke-by-user (the `PostApiAdminTokensRevokeByUser` operationId).

func (*ClientWithResponses) PostApiAdminUsersUserIdEnableWithResponse

func (c *ClientWithResponses) PostApiAdminUsersUserIdEnableWithResponse(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*PostApiAdminUsersUserIdEnableResponse, error)

PostApiAdminUsersUserIdEnableWithResponse Enable User

Enable a disabled user account by resetting lockout state.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /api/admin/users/{userId}/enable (the `PostApiAdminUsersUserIdEnable` operationId).

func (*ClientWithResponses) PostApiAdminUsersWithBodyWithResponse

func (c *ClientWithResponses) PostApiAdminUsersWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiAdminUsersResponse, error)

PostApiAdminUsersWithBodyWithResponse Create User

Create a new user. Requires username and password; email, roles, mfa_enabled, email_verified, and org_id are optional.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/admin/users (the `PostApiAdminUsers` operationId).

func (*ClientWithResponses) PostApiAdminUsersWithResponse

func (c *ClientWithResponses) PostApiAdminUsersWithResponse(ctx context.Context, body PostApiAdminUsersJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiAdminUsersResponse, error)

PostApiAdminUsersWithResponse Create User

Create a new user. Requires username and password; email, roles, mfa_enabled, email_verified, and org_id are optional.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/admin/users (the `PostApiAdminUsers` operationId).

func (*ClientWithResponses) PostApiGithubLoginWithResponse

func (c *ClientWithResponses) PostApiGithubLoginWithResponse(ctx context.Context, params *PostApiGithubLoginParams, reqEditors ...RequestEditorFn) (*PostApiGithubLoginResponse, error)

PostApiGithubLoginWithResponse GitHub OAuth2 Login

Exchange GitHub authorization code for user information. This endpoint handles the server-side OAuth2 flow with GitHub.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /api/github/login (the `PostApiGithubLogin` operationId).

func (*ClientWithResponses) PostApiGoogleLoginWithResponse

func (c *ClientWithResponses) PostApiGoogleLoginWithResponse(ctx context.Context, params *PostApiGoogleLoginParams, reqEditors ...RequestEditorFn) (*PostApiGoogleLoginResponse, error)

PostApiGoogleLoginWithResponse Google OAuth2 Login

Exchange Google authorization code for user information. This endpoint handles the server-side OAuth2 flow with Google Identity Platform.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /api/google/login (the `PostApiGoogleLogin` operationId).

func (*ClientWithResponses) PostApiMeMfaDisableWithBodyWithResponse

func (c *ClientWithResponses) PostApiMeMfaDisableWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiMeMfaDisableResponse, error)

PostApiMeMfaDisableWithBodyWithResponse Disable MFA

Disable MFA (TOTP) for the authenticated user.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/me/mfa/disable (the `PostApiMeMfaDisable` operationId).

func (*ClientWithResponses) PostApiMeMfaDisableWithResponse

func (c *ClientWithResponses) PostApiMeMfaDisableWithResponse(ctx context.Context, body PostApiMeMfaDisableJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiMeMfaDisableResponse, error)

PostApiMeMfaDisableWithResponse Disable MFA

Disable MFA (TOTP) for the authenticated user.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/me/mfa/disable (the `PostApiMeMfaDisable` operationId).

func (*ClientWithResponses) PostApiMeMfaSetupWithBodyWithResponse

func (c *ClientWithResponses) PostApiMeMfaSetupWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiMeMfaSetupResponse, error)

PostApiMeMfaSetupWithBodyWithResponse Setup MFA

Initiate MFA setup by generating a TOTP secret. Returns the base32 secret and an otpauth:// URI for authenticator apps / QR codes.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/me/mfa/setup (the `PostApiMeMfaSetup` operationId).

func (*ClientWithResponses) PostApiMeMfaSetupWithResponse

func (c *ClientWithResponses) PostApiMeMfaSetupWithResponse(ctx context.Context, body PostApiMeMfaSetupJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiMeMfaSetupResponse, error)

PostApiMeMfaSetupWithResponse Setup MFA

Initiate MFA setup by generating a TOTP secret. Returns the base32 secret and an otpauth:// URI for authenticator apps / QR codes.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/me/mfa/setup (the `PostApiMeMfaSetup` operationId).

func (*ClientWithResponses) PostApiMeMfaVerifyWithBodyWithResponse

func (c *ClientWithResponses) PostApiMeMfaVerifyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiMeMfaVerifyResponse, error)

PostApiMeMfaVerifyWithBodyWithResponse Verify MFA Setup

Verify a 6-digit TOTP code to finalize MFA setup. Returns 10 single-use backup codes on success.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/me/mfa/verify (the `PostApiMeMfaVerify` operationId).

func (*ClientWithResponses) PostApiMeMfaVerifyWithFormdataBodyWithResponse

func (c *ClientWithResponses) PostApiMeMfaVerifyWithFormdataBodyWithResponse(ctx context.Context, body PostApiMeMfaVerifyFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostApiMeMfaVerifyResponse, error)

PostApiMeMfaVerifyWithFormdataBodyWithResponse Verify MFA Setup

Verify a 6-digit TOTP code to finalize MFA setup. Returns 10 single-use backup codes on success.

Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/me/mfa/verify (the `PostApiMeMfaVerify` operationId).

func (*ClientWithResponses) PostApiMeMfaVerifyWithResponse

func (c *ClientWithResponses) PostApiMeMfaVerifyWithResponse(ctx context.Context, body PostApiMeMfaVerifyJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiMeMfaVerifyResponse, error)

PostApiMeMfaVerifyWithResponse Verify MFA Setup

Verify a 6-digit TOTP code to finalize MFA setup. Returns 10 single-use backup codes on success.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/me/mfa/verify (the `PostApiMeMfaVerify` operationId).

func (*ClientWithResponses) PostApiMeSocialLinksProviderAuthorizeWithResponse added in v1.0.1

func (c *ClientWithResponses) PostApiMeSocialLinksProviderAuthorizeWithResponse(ctx context.Context, provider PostApiMeSocialLinksProviderAuthorizeParamsProvider, reqEditors ...RequestEditorFn) (*PostApiMeSocialLinksProviderAuthorizeResponse, error)

PostApiMeSocialLinksProviderAuthorizeWithResponse Begin Social Link (mint one-time state)

Begin a social link flow (#71): mint a one-time state bound to (current user, provider) and return the provider authorize URL (with the state embedded) the SPA must redirect to. The link-back POST must present the same state; tokens are single-use with a short TTL. Fails closed (500) when linking or the state store (Redis) is not configured. Requires the `profile` scope.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /api/me/social/links/{provider}/authorize (the `PostApiMeSocialLinksProviderAuthorize` operationId).

func (*ClientWithResponses) PostApiMeSocialLinksProviderWithBodyWithResponse

func (c *ClientWithResponses) PostApiMeSocialLinksProviderWithBodyWithResponse(ctx context.Context, provider PostApiMeSocialLinksProviderParamsProvider, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiMeSocialLinksProviderResponse, error)

PostApiMeSocialLinksProviderWithBodyWithResponse Link Social Account

Verify a provider authorization code (the SPA completes the provider redirect and submits the code) and link that provider identity to the current user. Conflicts (409) when the identity is already linked to any account or the user already has a different mapping for the provider. Requires the `profile` scope.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/me/social/links/{provider} (the `PostApiMeSocialLinksProvider` operationId).

func (*ClientWithResponses) PostApiMeSocialLinksProviderWithResponse

PostApiMeSocialLinksProviderWithResponse Link Social Account

Verify a provider authorization code (the SPA completes the provider redirect and submits the code) and link that provider identity to the current user. Conflicts (409) when the identity is already linked to any account or the user already has a different mapping for the provider. Requires the `profile` scope.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/me/social/links/{provider} (the `PostApiMeSocialLinksProvider` operationId).

func (*ClientWithResponses) PostApiMeWebauthnRegisterBeginWithResponse

func (c *ClientWithResponses) PostApiMeWebauthnRegisterBeginWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostApiMeWebauthnRegisterBeginResponse, error)

PostApiMeWebauthnRegisterBeginWithResponse WebAuthn Register Begin

Start passkey registration (#142): ES256-only pubKeyCredParams, userVerification=required, user.id is the base64url of the internal user id bytes, excludeCredentials lists already-registered credentials, and the challenge is bound to the Bearer subject (no session cookie contract). Requires webauthn.rp_origins to be configured.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /api/me/webauthn/register/begin (the `PostApiMeWebauthnRegisterBegin` operationId).

func (*ClientWithResponses) PostApiMeWebauthnRegisterFinishWithBodyWithResponse added in v1.1.0

func (c *ClientWithResponses) PostApiMeWebauthnRegisterFinishWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiMeWebauthnRegisterFinishResponse, error)

PostApiMeWebauthnRegisterFinishWithBodyWithResponse WebAuthn Register Finish

Finish passkey registration (#142): the browser PublicKeyCredential is verified server-side (subject-bound challenge, origin allowlist, none-format attestation, ES256 COSE key) before anything is stored; the legacy {credential_id, public_key} body is rejected.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/me/webauthn/register/finish (the `PostApiMeWebauthnRegisterFinish` operationId).

func (*ClientWithResponses) PostApiMeWebauthnRegisterFinishWithResponse

func (c *ClientWithResponses) PostApiMeWebauthnRegisterFinishWithResponse(ctx context.Context, body PostApiMeWebauthnRegisterFinishJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiMeWebauthnRegisterFinishResponse, error)

PostApiMeWebauthnRegisterFinishWithResponse WebAuthn Register Finish

Finish passkey registration (#142): the browser PublicKeyCredential is verified server-side (subject-bound challenge, origin allowlist, none-format attestation, ES256 COSE key) before anything is stored; the legacy {credential_id, public_key} body is rejected.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /api/me/webauthn/register/finish (the `PostApiMeWebauthnRegisterFinish` operationId).

func (*ClientWithResponses) PostApiPasswordResetConfirmWithResponse

func (c *ClientWithResponses) PostApiPasswordResetConfirmWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostApiPasswordResetConfirmResponse, error)

PostApiPasswordResetConfirmWithResponse Confirm Password Reset

Confirm a password reset using the token sent via email.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /api/password-reset/confirm (the `PostApiPasswordResetConfirm` operationId).

func (*ClientWithResponses) PostApiPasswordResetRequestWithResponse

func (c *ClientWithResponses) PostApiPasswordResetRequestWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostApiPasswordResetRequestResponse, error)

PostApiPasswordResetRequestWithResponse Request Password Reset

Request a password reset link to be sent via email.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /api/password-reset/request (the `PostApiPasswordResetRequest` operationId).

func (*ClientWithResponses) PostApiRegisterWithResponse

func (c *ClientWithResponses) PostApiRegisterWithResponse(ctx context.Context, params *PostApiRegisterParams, reqEditors ...RequestEditorFn) (*PostApiRegisterResponse, error)

PostApiRegisterWithResponse Register new user

Registers a new user account into the system.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /api/register (the `PostApiRegister` operationId).

func (*ClientWithResponses) PostApiVerifyEmailResendWithResponse

func (c *ClientWithResponses) PostApiVerifyEmailResendWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostApiVerifyEmailResendResponse, error)

PostApiVerifyEmailResendWithResponse Resend Verification Email

Resend the email verification link.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /api/verify-email/resend (the `PostApiVerifyEmailResend` operationId).

func (*ClientWithResponses) PostApiWechatLoginWithResponse

func (c *ClientWithResponses) PostApiWechatLoginWithResponse(ctx context.Context, params *PostApiWechatLoginParams, reqEditors ...RequestEditorFn) (*PostApiWechatLoginResponse, error)

PostApiWechatLoginWithResponse WeChat OAuth2 Login

Exchange WeChat authorization code for user information. This endpoint handles the server-side OAuth2 flow with WeChat Open Platform.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /api/wechat/login (the `PostApiWechatLogin` operationId).

func (*ClientWithResponses) PostOauth2ConsentWithResponse

func (c *ClientWithResponses) PostOauth2ConsentWithResponse(ctx context.Context, params *PostOauth2ConsentParams, reqEditors ...RequestEditorFn) (*PostOauth2ConsentResponse, error)

PostOauth2ConsentWithResponse Submit user consent

Submit user consent for requested scopes. Redirects back to client.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/consent (the `PostOauth2Consent` operationId).

func (*ClientWithResponses) PostOauth2DeviceApproveWithBodyWithResponse

func (c *ClientWithResponses) PostOauth2DeviceApproveWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2DeviceApproveResponse, error)

PostOauth2DeviceApproveWithBodyWithResponse Approve Device Authorization

Admin-only approval of a pending device authorization (RFC 8628 user approval step). Requires an admin Bearer token (AuthorizationFilter).

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/device/approve (the `PostOauth2DeviceApprove` operationId).

func (*ClientWithResponses) PostOauth2DeviceApproveWithFormdataBodyWithResponse

func (c *ClientWithResponses) PostOauth2DeviceApproveWithFormdataBodyWithResponse(ctx context.Context, body PostOauth2DeviceApproveFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2DeviceApproveResponse, error)

PostOauth2DeviceApproveWithFormdataBodyWithResponse Approve Device Authorization

Admin-only approval of a pending device authorization (RFC 8628 user approval step). Requires an admin Bearer token (AuthorizationFilter).

Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/device/approve (the `PostOauth2DeviceApprove` operationId).

func (*ClientWithResponses) PostOauth2DeviceAuthorizationWithBodyWithResponse

func (c *ClientWithResponses) PostOauth2DeviceAuthorizationWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2DeviceAuthorizationResponse, error)

PostOauth2DeviceAuthorizationWithBodyWithResponse Device Authorization

RFC 8628 device authorization endpoint. A CONFIDENTIAL client authenticates with client_secret (HTTP Basic preferred); a PUBLIC client sends client_id only. The user then visits verification_uri and an admin approves via /oauth2/device/approve; the device polls /oauth2/token with grant_type=urn:ietf:params:oauth:grant-type:device_code.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/device_authorization (the `PostOauth2DeviceAuthorization` operationId).

func (*ClientWithResponses) PostOauth2DeviceAuthorizationWithFormdataBodyWithResponse

func (c *ClientWithResponses) PostOauth2DeviceAuthorizationWithFormdataBodyWithResponse(ctx context.Context, body PostOauth2DeviceAuthorizationFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2DeviceAuthorizationResponse, error)

PostOauth2DeviceAuthorizationWithFormdataBodyWithResponse Device Authorization

RFC 8628 device authorization endpoint. A CONFIDENTIAL client authenticates with client_secret (HTTP Basic preferred); a PUBLIC client sends client_id only. The user then visits verification_uri and an admin approves via /oauth2/device/approve; the device polls /oauth2/token with grant_type=urn:ietf:params:oauth:grant-type:device_code.

Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/device_authorization (the `PostOauth2DeviceAuthorization` operationId).

func (*ClientWithResponses) PostOauth2EndSessionWithResponse

func (c *ClientWithResponses) PostOauth2EndSessionWithResponse(ctx context.Context, params *PostOauth2EndSessionParams, reqEditors ...RequestEditorFn) (*PostOauth2EndSessionResponse, error)

PostOauth2EndSessionWithResponse RP-Initiated Logout (POST)

OIDC RP-Initiated Logout (POST form-based variant; see GET for semantics). id_token_hint, when supplied, is signature-verified (#78); verification failure yields 400 AUTH_INVALID_ID_TOKEN_HINT Error Envelope.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/end_session (the `PostOauth2EndSession` operationId).

func (*ClientWithResponses) PostOauth2IntrospectWithBodyWithResponse

func (c *ClientWithResponses) PostOauth2IntrospectWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2IntrospectResponse, error)

PostOauth2IntrospectWithBodyWithResponse Introspect token

RFC 7662 OAuth 2.0 Token Introspection. Returns information about a token. The calling client MUST authenticate (HTTP Basic preferred; client_id/client_secret form parameters accepted).

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/introspect (the `PostOauth2Introspect` operationId).

func (*ClientWithResponses) PostOauth2IntrospectWithFormdataBodyWithResponse

func (c *ClientWithResponses) PostOauth2IntrospectWithFormdataBodyWithResponse(ctx context.Context, body PostOauth2IntrospectFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2IntrospectResponse, error)

PostOauth2IntrospectWithFormdataBodyWithResponse Introspect token

RFC 7662 OAuth 2.0 Token Introspection. Returns information about a token. The calling client MUST authenticate (HTTP Basic preferred; client_id/client_secret form parameters accepted).

Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/introspect (the `PostOauth2Introspect` operationId).

func (*ClientWithResponses) PostOauth2LoginWithBodyWithResponse

func (c *ClientWithResponses) PostOauth2LoginWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2LoginResponse, error)

PostOauth2LoginWithBodyWithResponse Authenticate user

Authenticates user credentials and generates an authorization code. Usually called by the frontend login page during the authorization code flow. Accepts a JSON body or form-encoded parameters; when MFA is enabled on the account the response defers to POST /oauth2/mfa/verify.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/login (the `PostOauth2Login` operationId).

func (*ClientWithResponses) PostOauth2LoginWithFormdataBodyWithResponse

func (c *ClientWithResponses) PostOauth2LoginWithFormdataBodyWithResponse(ctx context.Context, body PostOauth2LoginFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2LoginResponse, error)

PostOauth2LoginWithFormdataBodyWithResponse Authenticate user

Authenticates user credentials and generates an authorization code. Usually called by the frontend login page during the authorization code flow. Accepts a JSON body or form-encoded parameters; when MFA is enabled on the account the response defers to POST /oauth2/mfa/verify.

Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/login (the `PostOauth2Login` operationId).

func (*ClientWithResponses) PostOauth2LoginWithResponse

func (c *ClientWithResponses) PostOauth2LoginWithResponse(ctx context.Context, body PostOauth2LoginJSONRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2LoginResponse, error)

PostOauth2LoginWithResponse Authenticate user

Authenticates user credentials and generates an authorization code. Usually called by the frontend login page during the authorization code flow. Accepts a JSON body or form-encoded parameters; when MFA is enabled on the account the response defers to POST /oauth2/mfa/verify.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/login (the `PostOauth2Login` operationId).

func (*ClientWithResponses) PostOauth2LogoutWithBodyWithResponse

func (c *ClientWithResponses) PostOauth2LogoutWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2LogoutResponse, error)

PostOauth2LogoutWithBodyWithResponse Logout

Terminates the server-side session behind the presented Bearer access token (also fires OIDC back-channel logout notifications when configured).

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/logout (the `PostOauth2Logout` operationId).

func (*ClientWithResponses) PostOauth2LogoutWithResponse

func (c *ClientWithResponses) PostOauth2LogoutWithResponse(ctx context.Context, body PostOauth2LogoutJSONRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2LogoutResponse, error)

PostOauth2LogoutWithResponse Logout

Terminates the server-side session behind the presented Bearer access token (also fires OIDC back-channel logout notifications when configured).

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/logout (the `PostOauth2Logout` operationId).

func (*ClientWithResponses) PostOauth2MfaVerifyWithBodyWithResponse

func (c *ClientWithResponses) PostOauth2MfaVerifyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2MfaVerifyResponse, error)

PostOauth2MfaVerifyWithBodyWithResponse Verify MFA Code (Login)

Verify MFA (TOTP) code during login. Completes the authorization-code issuance started by /oauth2/login when MFA was required. The PKCE code_verifier (C4, RFC 7636) must be supplied so the internally-generated code passes PKCE verification against the code_challenge persisted on the session during the first-factor login step. Accepts a JSON body or form-encoded parameters.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/mfa/verify (the `PostOauth2MfaVerify` operationId).

func (*ClientWithResponses) PostOauth2MfaVerifyWithFormdataBodyWithResponse

func (c *ClientWithResponses) PostOauth2MfaVerifyWithFormdataBodyWithResponse(ctx context.Context, body PostOauth2MfaVerifyFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2MfaVerifyResponse, error)

PostOauth2MfaVerifyWithFormdataBodyWithResponse Verify MFA Code (Login)

Verify MFA (TOTP) code during login. Completes the authorization-code issuance started by /oauth2/login when MFA was required. The PKCE code_verifier (C4, RFC 7636) must be supplied so the internally-generated code passes PKCE verification against the code_challenge persisted on the session during the first-factor login step. Accepts a JSON body or form-encoded parameters.

Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/mfa/verify (the `PostOauth2MfaVerify` operationId).

func (*ClientWithResponses) PostOauth2MfaVerifyWithResponse

func (c *ClientWithResponses) PostOauth2MfaVerifyWithResponse(ctx context.Context, body PostOauth2MfaVerifyJSONRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2MfaVerifyResponse, error)

PostOauth2MfaVerifyWithResponse Verify MFA Code (Login)

Verify MFA (TOTP) code during login. Completes the authorization-code issuance started by /oauth2/login when MFA was required. The PKCE code_verifier (C4, RFC 7636) must be supplied so the internally-generated code passes PKCE verification against the code_challenge persisted on the session during the first-factor login step. Accepts a JSON body or form-encoded parameters.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/mfa/verify (the `PostOauth2MfaVerify` operationId).

func (*ClientWithResponses) PostOauth2RegisterWithResponse

func (c *ClientWithResponses) PostOauth2RegisterWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostOauth2RegisterResponse, error)

PostOauth2RegisterWithResponse Register Client

Dynamic client registration.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/register (the `PostOauth2Register` operationId).

func (*ClientWithResponses) PostOauth2RevokeWithBodyWithResponse

func (c *ClientWithResponses) PostOauth2RevokeWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2RevokeResponse, error)

PostOauth2RevokeWithBodyWithResponse Revoke token

RFC 7009 OAuth 2.0 Token Revocation. Revokes an access OR refresh token (C3 fix — refresh tokens are now actually revoked, not silently no-op'd). The caller must be the token's owning client (ownership enforced via introspection). CONFIDENTIAL clients authenticate via client_secret (HTTP Basic or body); PUBLIC clients (token_endpoint_auth_method='none') authenticate with client_id only (RFC 7009 §2.1 exempts them from client authentication at this endpoint). Unknown or already-inactive tokens still return 200 per RFC 7009; the success body is EMPTY.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/revoke (the `PostOauth2Revoke` operationId).

func (*ClientWithResponses) PostOauth2RevokeWithFormdataBodyWithResponse

func (c *ClientWithResponses) PostOauth2RevokeWithFormdataBodyWithResponse(ctx context.Context, body PostOauth2RevokeFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2RevokeResponse, error)

PostOauth2RevokeWithFormdataBodyWithResponse Revoke token

RFC 7009 OAuth 2.0 Token Revocation. Revokes an access OR refresh token (C3 fix — refresh tokens are now actually revoked, not silently no-op'd). The caller must be the token's owning client (ownership enforced via introspection). CONFIDENTIAL clients authenticate via client_secret (HTTP Basic or body); PUBLIC clients (token_endpoint_auth_method='none') authenticate with client_id only (RFC 7009 §2.1 exempts them from client authentication at this endpoint). Unknown or already-inactive tokens still return 200 per RFC 7009; the success body is EMPTY.

Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/revoke (the `PostOauth2Revoke` operationId).

func (*ClientWithResponses) PostOauth2TokenWithBodyWithResponse

func (c *ClientWithResponses) PostOauth2TokenWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2TokenResponse, error)

PostOauth2TokenWithBodyWithResponse Exchange authorization code for access token

OAuth2 token endpoint - exchanges an authorization code, refresh token, client credentials, or device code for access tokens (RFC 6749 §3.2). Request parameters are sent as application/x-www-form-urlencoded (the server also accepts them as query parameters). Client authentication follows each client's registered token_endpoint_auth_method (F-017): client_secret_basic (the default) -> HTTP Basic ONLY (a body client_secret is rejected); client_secret_post -> client_id + client_secret form fields ONLY (a Basic header is rejected); PUBLIC clients send client_id only (any client_secret is rejected).

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/token (the `PostOauth2Token` operationId).

func (*ClientWithResponses) PostOauth2TokenWithFormdataBodyWithResponse

func (c *ClientWithResponses) PostOauth2TokenWithFormdataBodyWithResponse(ctx context.Context, body PostOauth2TokenFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2TokenResponse, error)

PostOauth2TokenWithFormdataBodyWithResponse Exchange authorization code for access token

OAuth2 token endpoint - exchanges an authorization code, refresh token, client credentials, or device code for access tokens (RFC 6749 §3.2). Request parameters are sent as application/x-www-form-urlencoded (the server also accepts them as query parameters). Client authentication follows each client's registered token_endpoint_auth_method (F-017): client_secret_basic (the default) -> HTTP Basic ONLY (a body client_secret is rejected); client_secret_post -> client_id + client_secret form fields ONLY (a Basic header is rejected); PUBLIC clients send client_id only (any client_secret is rejected).

Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/token (the `PostOauth2Token` operationId).

func (*ClientWithResponses) PostOauth2WebauthnAuthenticateBeginWithResponse

func (c *ClientWithResponses) PostOauth2WebauthnAuthenticateBeginWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostOauth2WebauthnAuthenticateBeginResponse, error)

PostOauth2WebauthnAuthenticateBeginWithResponse WebAuthn Authenticate Begin

Start passkey authentication (#142): the challenge is bound to the caller's session (send cookies - credentials include); userVerification=required; ES256 only. Requires webauthn.rp_origins.

Returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/webauthn/authenticate/begin (the `PostOauth2WebauthnAuthenticateBegin` operationId).

func (*ClientWithResponses) PostOauth2WebauthnAuthenticateFinishWithBodyWithResponse added in v1.1.0

func (c *ClientWithResponses) PostOauth2WebauthnAuthenticateFinishWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2WebauthnAuthenticateFinishResponse, error)

PostOauth2WebauthnAuthenticateFinishWithBodyWithResponse WebAuthn Authenticate Finish

Finish passkey authentication (#142): the session challenge is consumed unconditionally, the ES256 signature over authData || SHA256(clientDataJSON) is verified against the STORED COSE key, UV=1 is enforced and signCount regression is treated as cloning. On success a browser session is established (Set-Cookie). All failures answer the generic AUTH_INVALID_CREDENTIALS.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/webauthn/authenticate/finish (the `PostOauth2WebauthnAuthenticateFinish` operationId).

func (*ClientWithResponses) PostOauth2WebauthnAuthenticateFinishWithResponse

PostOauth2WebauthnAuthenticateFinishWithResponse WebAuthn Authenticate Finish

Finish passkey authentication (#142): the session challenge is consumed unconditionally, the ES256 signature over authData || SHA256(clientDataJSON) is verified against the STORED COSE key, UV=1 is enforced and signCount regression is treated as cloning. On success a browser session is established (Set-Cookie). All failures answer the generic AUTH_INVALID_CREDENTIALS.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with POST /oauth2/webauthn/authenticate/finish (the `PostOauth2WebauthnAuthenticateFinish` operationId).

func (*ClientWithResponses) PutApiAdminClientsClientIdScopesWithResponse

func (c *ClientWithResponses) PutApiAdminClientsClientIdScopesWithResponse(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*PutApiAdminClientsClientIdScopesResponse, error)

PutApiAdminClientsClientIdScopesWithResponse Update Client Scopes

Update the assigned scopes for an OAuth2 client.

Returns a wrapper object for the known response body format(s).

Corresponds with PUT /api/admin/clients/{clientId}/scopes (the `PutApiAdminClientsClientIdScopes` operationId).

func (*ClientWithResponses) PutApiAdminClientsClientIdWithBodyWithResponse

func (c *ClientWithResponses) PutApiAdminClientsClientIdWithBodyWithResponse(ctx context.Context, clientId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PutApiAdminClientsClientIdResponse, error)

PutApiAdminClientsClientIdWithBodyWithResponse Update OAuth2 Client

Update details of a specific OAuth2 client.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with PUT /api/admin/clients/{clientId} (the `PutApiAdminClientsClientId` operationId).

func (*ClientWithResponses) PutApiAdminClientsClientIdWithResponse

func (c *ClientWithResponses) PutApiAdminClientsClientIdWithResponse(ctx context.Context, clientId string, body PutApiAdminClientsClientIdJSONRequestBody, reqEditors ...RequestEditorFn) (*PutApiAdminClientsClientIdResponse, error)

PutApiAdminClientsClientIdWithResponse Update OAuth2 Client

Update details of a specific OAuth2 client.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with PUT /api/admin/clients/{clientId} (the `PutApiAdminClientsClientId` operationId).

func (*ClientWithResponses) PutApiAdminRolesRoleIdWithBodyWithResponse

func (c *ClientWithResponses) PutApiAdminRolesRoleIdWithBodyWithResponse(ctx context.Context, roleId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PutApiAdminRolesRoleIdResponse, error)

PutApiAdminRolesRoleIdWithBodyWithResponse Update Role

Update a role's description.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with PUT /api/admin/roles/{roleId} (the `PutApiAdminRolesRoleId` operationId).

func (*ClientWithResponses) PutApiAdminRolesRoleIdWithResponse

func (c *ClientWithResponses) PutApiAdminRolesRoleIdWithResponse(ctx context.Context, roleId int, body PutApiAdminRolesRoleIdJSONRequestBody, reqEditors ...RequestEditorFn) (*PutApiAdminRolesRoleIdResponse, error)

PutApiAdminRolesRoleIdWithResponse Update Role

Update a role's description.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with PUT /api/admin/roles/{roleId} (the `PutApiAdminRolesRoleId` operationId).

func (*ClientWithResponses) PutApiAdminScopesScopeIdWithBodyWithResponse

func (c *ClientWithResponses) PutApiAdminScopesScopeIdWithBodyWithResponse(ctx context.Context, scopeId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PutApiAdminScopesScopeIdResponse, error)

PutApiAdminScopesScopeIdWithBodyWithResponse Update Scope

Update a scope's properties.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with PUT /api/admin/scopes/{scopeId} (the `PutApiAdminScopesScopeId` operationId).

func (*ClientWithResponses) PutApiAdminScopesScopeIdWithResponse

func (c *ClientWithResponses) PutApiAdminScopesScopeIdWithResponse(ctx context.Context, scopeId int, body PutApiAdminScopesScopeIdJSONRequestBody, reqEditors ...RequestEditorFn) (*PutApiAdminScopesScopeIdResponse, error)

PutApiAdminScopesScopeIdWithResponse Update Scope

Update a scope's properties.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with PUT /api/admin/scopes/{scopeId} (the `PutApiAdminScopesScopeId` operationId).

func (*ClientWithResponses) PutApiAdminUsersUserIdDisableWithResponse

func (c *ClientWithResponses) PutApiAdminUsersUserIdDisableWithResponse(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*PutApiAdminUsersUserIdDisableResponse, error)

PutApiAdminUsersUserIdDisableWithResponse Disable User

Disable a specific user account.

Returns a wrapper object for the known response body format(s).

Corresponds with PUT /api/admin/users/{userId}/disable (the `PutApiAdminUsersUserIdDisable` operationId).

func (*ClientWithResponses) PutApiAdminUsersUserIdRolesWithBodyWithResponse

func (c *ClientWithResponses) PutApiAdminUsersUserIdRolesWithBodyWithResponse(ctx context.Context, userId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PutApiAdminUsersUserIdRolesResponse, error)

PutApiAdminUsersUserIdRolesWithBodyWithResponse Assign User Roles

Assign roles to a specific user.

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with PUT /api/admin/users/{userId}/roles (the `PutApiAdminUsersUserIdRoles` operationId).

func (*ClientWithResponses) PutApiAdminUsersUserIdRolesWithResponse

func (c *ClientWithResponses) PutApiAdminUsersUserIdRolesWithResponse(ctx context.Context, userId int, body PutApiAdminUsersUserIdRolesJSONRequestBody, reqEditors ...RequestEditorFn) (*PutApiAdminUsersUserIdRolesResponse, error)

PutApiAdminUsersUserIdRolesWithResponse Assign User Roles

Assign roles to a specific user.

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with PUT /api/admin/users/{userId}/roles (the `PutApiAdminUsersUserIdRoles` operationId).

func (*ClientWithResponses) PutApiAdminUsersUserIdWithBodyWithResponse

func (c *ClientWithResponses) PutApiAdminUsersUserIdWithBodyWithResponse(ctx context.Context, userId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PutApiAdminUsersUserIdResponse, error)

PutApiAdminUsersUserIdWithBodyWithResponse Update User

Update user information. Updatable fields: username, email, email_verified, mfa_enabled, locked (true locks the account), and org_id (integer sets it; JSON null clears it). Fields with a wrong JSON type are rejected with 400 (never silently skipped).

Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).

Corresponds with PUT /api/admin/users/{userId} (the `PutApiAdminUsersUserId` operationId).

func (*ClientWithResponses) PutApiAdminUsersUserIdWithResponse

func (c *ClientWithResponses) PutApiAdminUsersUserIdWithResponse(ctx context.Context, userId int, body PutApiAdminUsersUserIdJSONRequestBody, reqEditors ...RequestEditorFn) (*PutApiAdminUsersUserIdResponse, error)

PutApiAdminUsersUserIdWithResponse Update User

Update user information. Updatable fields: username, email, email_verified, mfa_enabled, locked (true locks the account), and org_id (integer sets it; JSON null clears it). Fields with a wrong JSON type are rejected with 400 (never silently skipped).

Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).

Corresponds with PUT /api/admin/users/{userId} (the `PutApiAdminUsersUserId` operationId).

func (*ClientWithResponses) PutApiMePasswordWithResponse

func (c *ClientWithResponses) PutApiMePasswordWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PutApiMePasswordResponse, error)

PutApiMePasswordWithResponse Change Password

Change the current user's password.

Returns a wrapper object for the known response body format(s).

Corresponds with PUT /api/me/password (the `PutApiMePassword` operationId).

type ClientWithResponsesInterface

type ClientWithResponsesInterface interface {

	// GetWellKnownJwksJsonWithResponse JSON Web Key Set
	//
	// Returns the public keys used by this server to sign JWTs.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /.well-known/jwks.json (the `GetWellKnownJwksJson` operationId).
	GetWellKnownJwksJsonWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetWellKnownJwksJsonResponse, error)

	// GetWellKnownOauthAuthorizationServerWithResponse OAuth 2.0 Authorization Server Metadata
	//
	// RFC 8414 OAuth 2.0 Authorization Server Metadata. Unlike the OIDC discovery document this carries no userinfo/jwks entries.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /.well-known/oauth-authorization-server (the `GetWellKnownOauthAuthorizationServer` operationId).
	GetWellKnownOauthAuthorizationServerWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetWellKnownOauthAuthorizationServerResponse, error)

	// GetWellKnownOpenidConfigurationWithResponse OpenID Connect Discovery
	//
	// Returns OIDC discovery metadata including endpoints and supported scopes.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /.well-known/openid-configuration (the `GetWellKnownOpenidConfiguration` operationId).
	GetWellKnownOpenidConfigurationWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetWellKnownOpenidConfigurationResponse, error)

	// GetApiAdminClientsWithResponse List OAuth2 Clients
	//
	// Get a paginated list of registered OAuth2 clients.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/clients (the `GetApiAdminClients` operationId).
	GetApiAdminClientsWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminClientsResponse, error)

	// PostApiAdminClientsWithBodyWithResponse Create OAuth2 Client
	//
	// Register a new OAuth2 client.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/admin/clients (the `PostApiAdminClients` operationId).
	PostApiAdminClientsWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiAdminClientsResponse, error)

	// PostApiAdminClientsWithResponse Create OAuth2 Client
	//
	// Register a new OAuth2 client.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/admin/clients (the `PostApiAdminClients` operationId).
	PostApiAdminClientsWithResponse(ctx context.Context, body PostApiAdminClientsJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiAdminClientsResponse, error)

	// DeleteApiAdminClientsClientIdWithResponse Delete OAuth2 Client
	//
	// Delete a specific OAuth2 client.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with DELETE /api/admin/clients/{clientId} (the `DeleteApiAdminClientsClientId` operationId).
	DeleteApiAdminClientsClientIdWithResponse(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*DeleteApiAdminClientsClientIdResponse, error)

	// GetApiAdminClientsClientIdWithResponse Get Client Details
	//
	// Get details of a specific OAuth2 client by ID.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/clients/{clientId} (the `GetApiAdminClientsClientId` operationId).
	GetApiAdminClientsClientIdWithResponse(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*GetApiAdminClientsClientIdResponse, error)

	// PutApiAdminClientsClientIdWithBodyWithResponse Update OAuth2 Client
	//
	// Update details of a specific OAuth2 client.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with PUT /api/admin/clients/{clientId} (the `PutApiAdminClientsClientId` operationId).
	PutApiAdminClientsClientIdWithBodyWithResponse(ctx context.Context, clientId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PutApiAdminClientsClientIdResponse, error)

	// PutApiAdminClientsClientIdWithResponse Update OAuth2 Client
	//
	// Update details of a specific OAuth2 client.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with PUT /api/admin/clients/{clientId} (the `PutApiAdminClientsClientId` operationId).
	PutApiAdminClientsClientIdWithResponse(ctx context.Context, clientId string, body PutApiAdminClientsClientIdJSONRequestBody, reqEditors ...RequestEditorFn) (*PutApiAdminClientsClientIdResponse, error)

	// PostApiAdminClientsClientIdResetSecretWithResponse Reset Client Secret
	//
	// Reset the secret of a specific OAuth2 client.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/admin/clients/{clientId}/reset-secret (the `PostApiAdminClientsClientIdResetSecret` operationId).
	PostApiAdminClientsClientIdResetSecretWithResponse(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*PostApiAdminClientsClientIdResetSecretResponse, error)

	// GetApiAdminClientsClientIdScopesWithResponse Get Client Scopes
	//
	// Get the assigned scopes for an OAuth2 client.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/clients/{clientId}/scopes (the `GetApiAdminClientsClientIdScopes` operationId).
	GetApiAdminClientsClientIdScopesWithResponse(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*GetApiAdminClientsClientIdScopesResponse, error)

	// PutApiAdminClientsClientIdScopesWithResponse Update Client Scopes
	//
	// Update the assigned scopes for an OAuth2 client.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with PUT /api/admin/clients/{clientId}/scopes (the `PutApiAdminClientsClientIdScopes` operationId).
	PutApiAdminClientsClientIdScopesWithResponse(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*PutApiAdminClientsClientIdScopesResponse, error)

	// GetApiAdminDashboardWithResponse Get Dashboard
	//
	// Static admin dashboard overview (welcome payload; live numbers are on /api/admin/dashboard/stats).
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/dashboard (the `GetApiAdminDashboard` operationId).
	GetApiAdminDashboardWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminDashboardResponse, error)

	// GetApiAdminDashboardStatsWithResponse Get Dashboard Stats
	//
	// Get dashboard statistics including user count, client count, active tokens, and failure metrics.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/dashboard/stats (the `GetApiAdminDashboardStats` operationId).
	GetApiAdminDashboardStatsWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminDashboardStatsResponse, error)

	// GetApiAdminLogsWithResponse List Audit Logs
	//
	// Get a paginated list of system audit logs.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/logs (the `GetApiAdminLogs` operationId).
	GetApiAdminLogsWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminLogsResponse, error)

	// GetApiAdminOidcKeysWithResponse Get OIDC Keys Info
	//
	// Get information about OIDC signing keys.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/oidc/keys (the `GetApiAdminOidcKeys` operationId).
	GetApiAdminOidcKeysWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminOidcKeysResponse, error)

	// GetApiAdminOrganizationsWithResponse List Organizations
	//
	// List all organizations (id, slug, name, branding fields; no created_at).
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/organizations (the `GetApiAdminOrganizations` operationId).
	GetApiAdminOrganizationsWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminOrganizationsResponse, error)

	// PostApiAdminOrganizationsWithBodyWithResponse Create Organization
	//
	// Create an organization. Slug must be 3-50 chars of lowercase alphanumeric + hyphens, starting/ending alphanumeric.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/admin/organizations (the `PostApiAdminOrganizations` operationId).
	PostApiAdminOrganizationsWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiAdminOrganizationsResponse, error)

	// PostApiAdminOrganizationsWithResponse Create Organization
	//
	// Create an organization. Slug must be 3-50 chars of lowercase alphanumeric + hyphens, starting/ending alphanumeric.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/admin/organizations (the `PostApiAdminOrganizations` operationId).
	PostApiAdminOrganizationsWithResponse(ctx context.Context, body PostApiAdminOrganizationsJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiAdminOrganizationsResponse, error)

	// GetApiAdminOrganizationsSlugWithResponse Get Organization
	//
	// Get a single organization by its slug.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/organizations/{slug} (the `GetApiAdminOrganizationsSlug` operationId).
	GetApiAdminOrganizationsSlugWithResponse(ctx context.Context, slug string, reqEditors ...RequestEditorFn) (*GetApiAdminOrganizationsSlugResponse, error)

	// GetApiAdminRolesWithResponse List Roles
	//
	// Get a list of all roles with user counts.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/roles (the `GetApiAdminRoles` operationId).
	GetApiAdminRolesWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminRolesResponse, error)

	// PostApiAdminRolesWithBodyWithResponse Create Role
	//
	// Create a new role. Built-in roles (admin, user) cannot be duplicated.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/admin/roles (the `PostApiAdminRoles` operationId).
	PostApiAdminRolesWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiAdminRolesResponse, error)

	// PostApiAdminRolesWithResponse Create Role
	//
	// Create a new role. Built-in roles (admin, user) cannot be duplicated.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/admin/roles (the `PostApiAdminRoles` operationId).
	PostApiAdminRolesWithResponse(ctx context.Context, body PostApiAdminRolesJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiAdminRolesResponse, error)

	// DeleteApiAdminRolesRoleIdWithResponse Delete Role
	//
	// Delete a role. Built-in roles (admin, user) cannot be deleted.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with DELETE /api/admin/roles/{roleId} (the `DeleteApiAdminRolesRoleId` operationId).
	DeleteApiAdminRolesRoleIdWithResponse(ctx context.Context, roleId int, reqEditors ...RequestEditorFn) (*DeleteApiAdminRolesRoleIdResponse, error)

	// PutApiAdminRolesRoleIdWithBodyWithResponse Update Role
	//
	// Update a role's description.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with PUT /api/admin/roles/{roleId} (the `PutApiAdminRolesRoleId` operationId).
	PutApiAdminRolesRoleIdWithBodyWithResponse(ctx context.Context, roleId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PutApiAdminRolesRoleIdResponse, error)

	// PutApiAdminRolesRoleIdWithResponse Update Role
	//
	// Update a role's description.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with PUT /api/admin/roles/{roleId} (the `PutApiAdminRolesRoleId` operationId).
	PutApiAdminRolesRoleIdWithResponse(ctx context.Context, roleId int, body PutApiAdminRolesRoleIdJSONRequestBody, reqEditors ...RequestEditorFn) (*PutApiAdminRolesRoleIdResponse, error)

	// GetApiAdminScopesWithResponse List Scopes
	//
	// Get a list of all available scopes.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/scopes (the `GetApiAdminScopes` operationId).
	GetApiAdminScopesWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminScopesResponse, error)

	// PostApiAdminScopesWithBodyWithResponse Create Scope
	//
	// Create a new OAuth2 scope. Built-in scopes cannot be duplicated.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/admin/scopes (the `PostApiAdminScopes` operationId).
	PostApiAdminScopesWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiAdminScopesResponse, error)

	// PostApiAdminScopesWithResponse Create Scope
	//
	// Create a new OAuth2 scope. Built-in scopes cannot be duplicated.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/admin/scopes (the `PostApiAdminScopes` operationId).
	PostApiAdminScopesWithResponse(ctx context.Context, body PostApiAdminScopesJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiAdminScopesResponse, error)

	// GetApiAdminScopesResourcesWithResponse Scope-Resource Matrix
	//
	// #43 discovery -- the (path, method) -> required-scopes matrix from the central ResourceScopeRegistry. Read-only, no DB access.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/scopes/resources (the `GetApiAdminScopesResources` operationId).
	GetApiAdminScopesResourcesWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminScopesResourcesResponse, error)

	// DeleteApiAdminScopesScopeIdWithResponse Delete Scope
	//
	// Delete a scope. Built-in scopes (openid, profile, email, admin) cannot be deleted.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with DELETE /api/admin/scopes/{scopeId} (the `DeleteApiAdminScopesScopeId` operationId).
	DeleteApiAdminScopesScopeIdWithResponse(ctx context.Context, scopeId int, reqEditors ...RequestEditorFn) (*DeleteApiAdminScopesScopeIdResponse, error)

	// PutApiAdminScopesScopeIdWithBodyWithResponse Update Scope
	//
	// Update a scope's properties.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with PUT /api/admin/scopes/{scopeId} (the `PutApiAdminScopesScopeId` operationId).
	PutApiAdminScopesScopeIdWithBodyWithResponse(ctx context.Context, scopeId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PutApiAdminScopesScopeIdResponse, error)

	// PutApiAdminScopesScopeIdWithResponse Update Scope
	//
	// Update a scope's properties.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with PUT /api/admin/scopes/{scopeId} (the `PutApiAdminScopesScopeId` operationId).
	PutApiAdminScopesScopeIdWithResponse(ctx context.Context, scopeId int, body PutApiAdminScopesScopeIdJSONRequestBody, reqEditors ...RequestEditorFn) (*PutApiAdminScopesScopeIdResponse, error)

	// GetApiAdminTokensWithResponse List Tokens
	//
	// Get a list of active OAuth2 tokens.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/tokens (the `GetApiAdminTokens` operationId).
	GetApiAdminTokensWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiAdminTokensResponse, error)

	// PostApiAdminTokensRevokeByClientWithResponse Revoke Tokens By Client
	//
	// Revoke all tokens issued to a specific client.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/admin/tokens/revoke-by-client (the `PostApiAdminTokensRevokeByClient` operationId).
	PostApiAdminTokensRevokeByClientWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostApiAdminTokensRevokeByClientResponse, error)

	// PostApiAdminTokensRevokeByUserWithResponse Revoke Tokens By User
	//
	// Revoke all tokens issued for a specific user.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/admin/tokens/revoke-by-user (the `PostApiAdminTokensRevokeByUser` operationId).
	PostApiAdminTokensRevokeByUserWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostApiAdminTokensRevokeByUserResponse, error)

	// DeleteApiAdminTokensTokenPrefixWithResponse Revoke Token
	//
	// Revoke a specific token by its prefix.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with DELETE /api/admin/tokens/{tokenPrefix} (the `DeleteApiAdminTokensTokenPrefix` operationId).
	DeleteApiAdminTokensTokenPrefixWithResponse(ctx context.Context, tokenPrefix string, reqEditors ...RequestEditorFn) (*DeleteApiAdminTokensTokenPrefixResponse, error)

	// GetApiAdminUsersWithResponse List Users
	//
	// List users with optional pagination (page, per_page) and filtering (q for username/email prefix, role, locked). Returns total count.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/users (the `GetApiAdminUsers` operationId).
	GetApiAdminUsersWithResponse(ctx context.Context, params *GetApiAdminUsersParams, reqEditors ...RequestEditorFn) (*GetApiAdminUsersResponse, error)

	// PostApiAdminUsersWithBodyWithResponse Create User
	//
	// Create a new user. Requires username and password; email, roles, mfa_enabled, email_verified, and org_id are optional.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/admin/users (the `PostApiAdminUsers` operationId).
	PostApiAdminUsersWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiAdminUsersResponse, error)

	// PostApiAdminUsersWithResponse Create User
	//
	// Create a new user. Requires username and password; email, roles, mfa_enabled, email_verified, and org_id are optional.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/admin/users (the `PostApiAdminUsers` operationId).
	PostApiAdminUsersWithResponse(ctx context.Context, body PostApiAdminUsersJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiAdminUsersResponse, error)

	// DeleteApiAdminUsersUserIdWithResponse Delete User
	//
	// Soft-delete a user account (sets deleted_at). The user is excluded from all queries and can no longer log in. Outstanding access and refresh tokens are revoked (matched on both the public subject and the internal id) before the response is sent; the 200 body reports tokens_revoked (false + warning on revocation failure).
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with DELETE /api/admin/users/{userId} (the `DeleteApiAdminUsersUserId` operationId).
	DeleteApiAdminUsersUserIdWithResponse(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*DeleteApiAdminUsersUserIdResponse, error)

	// GetApiAdminUsersUserIdWithResponse Get User Detail
	//
	// Get detailed information about a specific user including roles and account status.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/users/{userId} (the `GetApiAdminUsersUserId` operationId).
	GetApiAdminUsersUserIdWithResponse(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*GetApiAdminUsersUserIdResponse, error)

	// PutApiAdminUsersUserIdWithBodyWithResponse Update User
	//
	// Update user information. Updatable fields: username, email, email_verified, mfa_enabled, locked (true locks the account), and org_id (integer sets it; JSON null clears it). Fields with a wrong JSON type are rejected with 400 (never silently skipped).
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with PUT /api/admin/users/{userId} (the `PutApiAdminUsersUserId` operationId).
	PutApiAdminUsersUserIdWithBodyWithResponse(ctx context.Context, userId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PutApiAdminUsersUserIdResponse, error)

	// PutApiAdminUsersUserIdWithResponse Update User
	//
	// Update user information. Updatable fields: username, email, email_verified, mfa_enabled, locked (true locks the account), and org_id (integer sets it; JSON null clears it). Fields with a wrong JSON type are rejected with 400 (never silently skipped).
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with PUT /api/admin/users/{userId} (the `PutApiAdminUsersUserId` operationId).
	PutApiAdminUsersUserIdWithResponse(ctx context.Context, userId int, body PutApiAdminUsersUserIdJSONRequestBody, reqEditors ...RequestEditorFn) (*PutApiAdminUsersUserIdResponse, error)

	// PutApiAdminUsersUserIdDisableWithResponse Disable User
	//
	// Disable a specific user account.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with PUT /api/admin/users/{userId}/disable (the `PutApiAdminUsersUserIdDisable` operationId).
	PutApiAdminUsersUserIdDisableWithResponse(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*PutApiAdminUsersUserIdDisableResponse, error)

	// PostApiAdminUsersUserIdEnableWithResponse Enable User
	//
	// Enable a disabled user account by resetting lockout state.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/admin/users/{userId}/enable (the `PostApiAdminUsersUserIdEnable` operationId).
	PostApiAdminUsersUserIdEnableWithResponse(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*PostApiAdminUsersUserIdEnableResponse, error)

	// GetApiAdminUsersUserIdRolesWithResponse Get User Roles
	//
	// Get the roles assigned to a specific user.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/admin/users/{userId}/roles (the `GetApiAdminUsersUserIdRoles` operationId).
	GetApiAdminUsersUserIdRolesWithResponse(ctx context.Context, userId int, reqEditors ...RequestEditorFn) (*GetApiAdminUsersUserIdRolesResponse, error)

	// PutApiAdminUsersUserIdRolesWithBodyWithResponse Assign User Roles
	//
	// Assign roles to a specific user.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with PUT /api/admin/users/{userId}/roles (the `PutApiAdminUsersUserIdRoles` operationId).
	PutApiAdminUsersUserIdRolesWithBodyWithResponse(ctx context.Context, userId int, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PutApiAdminUsersUserIdRolesResponse, error)

	// PutApiAdminUsersUserIdRolesWithResponse Assign User Roles
	//
	// Assign roles to a specific user.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with PUT /api/admin/users/{userId}/roles (the `PutApiAdminUsersUserIdRoles` operationId).
	PutApiAdminUsersUserIdRolesWithResponse(ctx context.Context, userId int, body PutApiAdminUsersUserIdRolesJSONRequestBody, reqEditors ...RequestEditorFn) (*PutApiAdminUsersUserIdRolesResponse, error)

	// PostApiGithubLoginWithResponse GitHub OAuth2 Login
	//
	// Exchange GitHub authorization code for user information. This endpoint handles the server-side OAuth2 flow with GitHub.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/github/login (the `PostApiGithubLogin` operationId).
	PostApiGithubLoginWithResponse(ctx context.Context, params *PostApiGithubLoginParams, reqEditors ...RequestEditorFn) (*PostApiGithubLoginResponse, error)

	// PostApiGoogleLoginWithResponse Google OAuth2 Login
	//
	// Exchange Google authorization code for user information. This endpoint handles the server-side OAuth2 flow with Google Identity Platform.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/google/login (the `PostApiGoogleLogin` operationId).
	PostApiGoogleLoginWithResponse(ctx context.Context, params *PostApiGoogleLoginParams, reqEditors ...RequestEditorFn) (*PostApiGoogleLoginResponse, error)

	// DeleteApiMeWithResponse Delete Account
	//
	// Soft-delete the current user's account.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with DELETE /api/me (the `DeleteApiMe` operationId).
	DeleteApiMeWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*DeleteApiMeResponse, error)

	// GetApiMeWithResponse Get User Profile
	//
	// Get current user's profile information.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/me (the `GetApiMe` operationId).
	GetApiMeWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiMeResponse, error)

	// GetApiMeAuthorizedAppsWithResponse List Authorized Apps
	//
	// List OAuth2 clients authorized by the current user.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/me/authorized-apps (the `GetApiMeAuthorizedApps` operationId).
	GetApiMeAuthorizedAppsWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiMeAuthorizedAppsResponse, error)

	// DeleteApiMeAuthorizedAppsClientIdWithResponse Revoke App Authorization
	//
	// Revoke the current user's authorization for a specific OAuth2 client.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with DELETE /api/me/authorized-apps/{clientId} (the `DeleteApiMeAuthorizedAppsClientId` operationId).
	DeleteApiMeAuthorizedAppsClientIdWithResponse(ctx context.Context, clientId string, reqEditors ...RequestEditorFn) (*DeleteApiMeAuthorizedAppsClientIdResponse, error)

	// PostApiMeMfaDisableWithBodyWithResponse Disable MFA
	//
	// Disable MFA (TOTP) for the authenticated user.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/me/mfa/disable (the `PostApiMeMfaDisable` operationId).
	PostApiMeMfaDisableWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiMeMfaDisableResponse, error)

	// PostApiMeMfaDisableWithResponse Disable MFA
	//
	// Disable MFA (TOTP) for the authenticated user.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/me/mfa/disable (the `PostApiMeMfaDisable` operationId).
	PostApiMeMfaDisableWithResponse(ctx context.Context, body PostApiMeMfaDisableJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiMeMfaDisableResponse, error)

	// PostApiMeMfaSetupWithBodyWithResponse Setup MFA
	//
	// Initiate MFA setup by generating a TOTP secret. Returns the base32 secret and an otpauth:// URI for authenticator apps / QR codes.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/me/mfa/setup (the `PostApiMeMfaSetup` operationId).
	PostApiMeMfaSetupWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiMeMfaSetupResponse, error)

	// PostApiMeMfaSetupWithResponse Setup MFA
	//
	// Initiate MFA setup by generating a TOTP secret. Returns the base32 secret and an otpauth:// URI for authenticator apps / QR codes.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/me/mfa/setup (the `PostApiMeMfaSetup` operationId).
	PostApiMeMfaSetupWithResponse(ctx context.Context, body PostApiMeMfaSetupJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiMeMfaSetupResponse, error)

	// PostApiMeMfaVerifyWithBodyWithResponse Verify MFA Setup
	//
	// Verify a 6-digit TOTP code to finalize MFA setup. Returns 10 single-use backup codes on success.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/me/mfa/verify (the `PostApiMeMfaVerify` operationId).
	PostApiMeMfaVerifyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiMeMfaVerifyResponse, error)

	// PostApiMeMfaVerifyWithResponse Verify MFA Setup
	//
	// Verify a 6-digit TOTP code to finalize MFA setup. Returns 10 single-use backup codes on success.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/me/mfa/verify (the `PostApiMeMfaVerify` operationId).
	PostApiMeMfaVerifyWithResponse(ctx context.Context, body PostApiMeMfaVerifyJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiMeMfaVerifyResponse, error)

	// PostApiMeMfaVerifyWithFormdataBodyWithResponse Verify MFA Setup
	//
	// Verify a 6-digit TOTP code to finalize MFA setup. Returns 10 single-use backup codes on success.
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/me/mfa/verify (the `PostApiMeMfaVerify` operationId).
	PostApiMeMfaVerifyWithFormdataBodyWithResponse(ctx context.Context, body PostApiMeMfaVerifyFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostApiMeMfaVerifyResponse, error)

	// PutApiMePasswordWithResponse Change Password
	//
	// Change the current user's password.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with PUT /api/me/password (the `PutApiMePassword` operationId).
	PutApiMePasswordWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PutApiMePasswordResponse, error)

	// GetApiMeSocialLinksWithResponse List Linked Social Accounts
	//
	// List the social provider identities (github/google/wechat) linked to the current user. The seeded password-subject mapping (provider=local) is not a social identity and is excluded. Requires the `profile` scope.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/me/social/links (the `GetApiMeSocialLinks` operationId).
	GetApiMeSocialLinksWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiMeSocialLinksResponse, error)

	// DeleteApiMeSocialLinksProviderWithResponse Unlink Social Account
	//
	// Remove the current user's linked identity for a provider. Existing sessions issued through that provider are NOT revoked -- they stay valid until natural expiry. The provider identity cannot be used for new sign-ins until it is linked to an account again. Refused with 409 when it is the user's last social link and the user has no usable password (last-credential guard). Requires the `profile` scope.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with DELETE /api/me/social/links/{provider} (the `DeleteApiMeSocialLinksProvider` operationId).
	DeleteApiMeSocialLinksProviderWithResponse(ctx context.Context, provider DeleteApiMeSocialLinksProviderParamsProvider, reqEditors ...RequestEditorFn) (*DeleteApiMeSocialLinksProviderResponse, error)

	// PostApiMeSocialLinksProviderWithBodyWithResponse Link Social Account
	//
	// Verify a provider authorization code (the SPA completes the provider redirect and submits the code) and link that provider identity to the current user. Conflicts (409) when the identity is already linked to any account or the user already has a different mapping for the provider. Requires the `profile` scope.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/me/social/links/{provider} (the `PostApiMeSocialLinksProvider` operationId).
	PostApiMeSocialLinksProviderWithBodyWithResponse(ctx context.Context, provider PostApiMeSocialLinksProviderParamsProvider, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiMeSocialLinksProviderResponse, error)

	// PostApiMeSocialLinksProviderWithResponse Link Social Account
	//
	// Verify a provider authorization code (the SPA completes the provider redirect and submits the code) and link that provider identity to the current user. Conflicts (409) when the identity is already linked to any account or the user already has a different mapping for the provider. Requires the `profile` scope.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/me/social/links/{provider} (the `PostApiMeSocialLinksProvider` operationId).
	PostApiMeSocialLinksProviderWithResponse(ctx context.Context, provider PostApiMeSocialLinksProviderParamsProvider, body PostApiMeSocialLinksProviderJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiMeSocialLinksProviderResponse, error)

	// PostApiMeSocialLinksProviderAuthorizeWithResponse Begin Social Link (mint one-time state)
	//
	// Begin a social link flow (#71): mint a one-time state bound to (current user, provider) and return the provider authorize URL (with the state embedded) the SPA must redirect to. The link-back POST must present the same state; tokens are single-use with a short TTL. Fails closed (500) when linking or the state store (Redis) is not configured. Requires the `profile` scope.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/me/social/links/{provider}/authorize (the `PostApiMeSocialLinksProviderAuthorize` operationId).
	PostApiMeSocialLinksProviderAuthorizeWithResponse(ctx context.Context, provider PostApiMeSocialLinksProviderAuthorizeParamsProvider, reqEditors ...RequestEditorFn) (*PostApiMeSocialLinksProviderAuthorizeResponse, error)

	// GetApiMeWebauthnCredentialsWithResponse List WebAuthn Credentials
	//
	// List registered WebAuthn credentials.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/me/webauthn/credentials (the `GetApiMeWebauthnCredentials` operationId).
	GetApiMeWebauthnCredentialsWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiMeWebauthnCredentialsResponse, error)

	// PostApiMeWebauthnRegisterBeginWithResponse WebAuthn Register Begin
	//
	// Start passkey registration (#142): ES256-only pubKeyCredParams, userVerification=required, user.id is the base64url of the internal user id bytes, excludeCredentials lists already-registered credentials, and the challenge is bound to the Bearer subject (no session cookie contract). Requires webauthn.rp_origins to be configured.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/me/webauthn/register/begin (the `PostApiMeWebauthnRegisterBegin` operationId).
	PostApiMeWebauthnRegisterBeginWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostApiMeWebauthnRegisterBeginResponse, error)

	// PostApiMeWebauthnRegisterFinishWithBodyWithResponse WebAuthn Register Finish
	//
	// Finish passkey registration (#142): the browser PublicKeyCredential is verified server-side (subject-bound challenge, origin allowlist, none-format attestation, ES256 COSE key) before anything is stored; the legacy {credential_id, public_key} body is rejected.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/me/webauthn/register/finish (the `PostApiMeWebauthnRegisterFinish` operationId).
	PostApiMeWebauthnRegisterFinishWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostApiMeWebauthnRegisterFinishResponse, error)

	// PostApiMeWebauthnRegisterFinishWithResponse WebAuthn Register Finish
	//
	// Finish passkey registration (#142): the browser PublicKeyCredential is verified server-side (subject-bound challenge, origin allowlist, none-format attestation, ES256 COSE key) before anything is stored; the legacy {credential_id, public_key} body is rejected.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/me/webauthn/register/finish (the `PostApiMeWebauthnRegisterFinish` operationId).
	PostApiMeWebauthnRegisterFinishWithResponse(ctx context.Context, body PostApiMeWebauthnRegisterFinishJSONRequestBody, reqEditors ...RequestEditorFn) (*PostApiMeWebauthnRegisterFinishResponse, error)

	// PostApiPasswordResetConfirmWithResponse Confirm Password Reset
	//
	// Confirm a password reset using the token sent via email.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/password-reset/confirm (the `PostApiPasswordResetConfirm` operationId).
	PostApiPasswordResetConfirmWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostApiPasswordResetConfirmResponse, error)

	// PostApiPasswordResetRequestWithResponse Request Password Reset
	//
	// Request a password reset link to be sent via email.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/password-reset/request (the `PostApiPasswordResetRequest` operationId).
	PostApiPasswordResetRequestWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostApiPasswordResetRequestResponse, error)

	// PostApiRegisterWithResponse Register new user
	//
	// Registers a new user account into the system.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/register (the `PostApiRegister` operationId).
	PostApiRegisterWithResponse(ctx context.Context, params *PostApiRegisterParams, reqEditors ...RequestEditorFn) (*PostApiRegisterResponse, error)

	// GetApiVerifyEmailWithResponse Verify Email
	//
	// Verify an email address using a token.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /api/verify-email (the `GetApiVerifyEmail` operationId).
	GetApiVerifyEmailWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetApiVerifyEmailResponse, error)

	// PostApiVerifyEmailResendWithResponse Resend Verification Email
	//
	// Resend the email verification link.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/verify-email/resend (the `PostApiVerifyEmailResend` operationId).
	PostApiVerifyEmailResendWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostApiVerifyEmailResendResponse, error)

	// PostApiWechatLoginWithResponse WeChat OAuth2 Login
	//
	// Exchange WeChat authorization code for user information. This endpoint handles the server-side OAuth2 flow with WeChat Open Platform.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /api/wechat/login (the `PostApiWechatLogin` operationId).
	PostApiWechatLoginWithResponse(ctx context.Context, params *PostApiWechatLoginParams, reqEditors ...RequestEditorFn) (*PostApiWechatLoginResponse, error)

	// GetHealthWithResponse Health check
	//
	// Aggregate health status of the service (process + database).
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /health (the `GetHealth` operationId).
	GetHealthWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetHealthResponse, error)

	// GetHealthLiveWithResponse Liveness probe
	//
	// Liveness probe — always 200 while the process is up (no dependency checks).
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /health/live (the `GetHealthLive` operationId).
	GetHealthLiveWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetHealthLiveResponse, error)

	// GetHealthReadyWithResponse Readiness probe
	//
	// Readiness probe — database / redis dependency checks; 503 when a required dependency is down.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /health/ready (the `GetHealthReady` operationId).
	GetHealthReadyWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetHealthReadyResponse, error)

	// GetOauth2AuthorizeWithResponse Request authorization
	//
	// OAuth2 authorization endpoint - initiates authorization flow.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /oauth2/authorize (the `GetOauth2Authorize` operationId).
	GetOauth2AuthorizeWithResponse(ctx context.Context, params *GetOauth2AuthorizeParams, reqEditors ...RequestEditorFn) (*GetOauth2AuthorizeResponse, error)

	// PostOauth2ConsentWithResponse Submit user consent
	//
	// Submit user consent for requested scopes. Redirects back to client.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/consent (the `PostOauth2Consent` operationId).
	PostOauth2ConsentWithResponse(ctx context.Context, params *PostOauth2ConsentParams, reqEditors ...RequestEditorFn) (*PostOauth2ConsentResponse, error)

	// PostOauth2DeviceApproveWithBodyWithResponse Approve Device Authorization
	//
	// Admin-only approval of a pending device authorization (RFC 8628 user approval step). Requires an admin Bearer token (AuthorizationFilter).
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/device/approve (the `PostOauth2DeviceApprove` operationId).
	PostOauth2DeviceApproveWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2DeviceApproveResponse, error)

	// PostOauth2DeviceApproveWithFormdataBodyWithResponse Approve Device Authorization
	//
	// Admin-only approval of a pending device authorization (RFC 8628 user approval step). Requires an admin Bearer token (AuthorizationFilter).
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/device/approve (the `PostOauth2DeviceApprove` operationId).
	PostOauth2DeviceApproveWithFormdataBodyWithResponse(ctx context.Context, body PostOauth2DeviceApproveFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2DeviceApproveResponse, error)

	// PostOauth2DeviceAuthorizationWithBodyWithResponse Device Authorization
	//
	// RFC 8628 device authorization endpoint. A CONFIDENTIAL client authenticates with client_secret (HTTP Basic preferred); a PUBLIC client sends client_id only. The user then visits verification_uri and an admin approves via /oauth2/device/approve; the device polls /oauth2/token with grant_type=urn:ietf:params:oauth:grant-type:device_code.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/device_authorization (the `PostOauth2DeviceAuthorization` operationId).
	PostOauth2DeviceAuthorizationWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2DeviceAuthorizationResponse, error)

	// PostOauth2DeviceAuthorizationWithFormdataBodyWithResponse Device Authorization
	//
	// RFC 8628 device authorization endpoint. A CONFIDENTIAL client authenticates with client_secret (HTTP Basic preferred); a PUBLIC client sends client_id only. The user then visits verification_uri and an admin approves via /oauth2/device/approve; the device polls /oauth2/token with grant_type=urn:ietf:params:oauth:grant-type:device_code.
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/device_authorization (the `PostOauth2DeviceAuthorization` operationId).
	PostOauth2DeviceAuthorizationWithFormdataBodyWithResponse(ctx context.Context, body PostOauth2DeviceAuthorizationFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2DeviceAuthorizationResponse, error)

	// GetOauth2EndSessionWithResponse RP-Initiated Logout
	//
	// OIDC RP-Initiated Logout 1.0 §2. Terminates the user's server-side session and (optionally) redirects to a registered post_logout_redirect_uri. When id_token_hint is supplied it MUST pass end-to-end verification (#78: RS256 signature against the OP key set, strict alg/kid, iss, exp) — any failure, or a hint subject that contradicts the browser session, is rejected with 400 AUTH_INVALID_ID_TOKEN_HINT (Error Envelope). post_logout_redirect_uri MUST be registered for the client identified by the verified id_token_hint (its aud claim); without a hint the request is rejected with 400 when a redirect URI is supplied. Accepts both GET (link-based) and POST (form-based).
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /oauth2/end_session (the `GetOauth2EndSession` operationId).
	GetOauth2EndSessionWithResponse(ctx context.Context, params *GetOauth2EndSessionParams, reqEditors ...RequestEditorFn) (*GetOauth2EndSessionResponse, error)

	// PostOauth2EndSessionWithResponse RP-Initiated Logout (POST)
	//
	// OIDC RP-Initiated Logout (POST form-based variant; see GET for semantics). id_token_hint, when supplied, is signature-verified (#78); verification failure yields 400 AUTH_INVALID_ID_TOKEN_HINT Error Envelope.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/end_session (the `PostOauth2EndSession` operationId).
	PostOauth2EndSessionWithResponse(ctx context.Context, params *PostOauth2EndSessionParams, reqEditors ...RequestEditorFn) (*PostOauth2EndSessionResponse, error)

	// PostOauth2IntrospectWithBodyWithResponse Introspect token
	//
	// RFC 7662 OAuth 2.0 Token Introspection. Returns information about a token. The calling client MUST authenticate (HTTP Basic preferred; client_id/client_secret form parameters accepted).
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/introspect (the `PostOauth2Introspect` operationId).
	PostOauth2IntrospectWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2IntrospectResponse, error)

	// PostOauth2IntrospectWithFormdataBodyWithResponse Introspect token
	//
	// RFC 7662 OAuth 2.0 Token Introspection. Returns information about a token. The calling client MUST authenticate (HTTP Basic preferred; client_id/client_secret form parameters accepted).
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/introspect (the `PostOauth2Introspect` operationId).
	PostOauth2IntrospectWithFormdataBodyWithResponse(ctx context.Context, body PostOauth2IntrospectFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2IntrospectResponse, error)

	// PostOauth2LoginWithBodyWithResponse Authenticate user
	//
	// Authenticates user credentials and generates an authorization code. Usually called by the frontend login page during the authorization code flow. Accepts a JSON body or form-encoded parameters; when MFA is enabled on the account the response defers to POST /oauth2/mfa/verify.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/login (the `PostOauth2Login` operationId).
	PostOauth2LoginWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2LoginResponse, error)

	// PostOauth2LoginWithResponse Authenticate user
	//
	// Authenticates user credentials and generates an authorization code. Usually called by the frontend login page during the authorization code flow. Accepts a JSON body or form-encoded parameters; when MFA is enabled on the account the response defers to POST /oauth2/mfa/verify.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/login (the `PostOauth2Login` operationId).
	PostOauth2LoginWithResponse(ctx context.Context, body PostOauth2LoginJSONRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2LoginResponse, error)

	// PostOauth2LoginWithFormdataBodyWithResponse Authenticate user
	//
	// Authenticates user credentials and generates an authorization code. Usually called by the frontend login page during the authorization code flow. Accepts a JSON body or form-encoded parameters; when MFA is enabled on the account the response defers to POST /oauth2/mfa/verify.
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/login (the `PostOauth2Login` operationId).
	PostOauth2LoginWithFormdataBodyWithResponse(ctx context.Context, body PostOauth2LoginFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2LoginResponse, error)

	// PostOauth2LogoutWithBodyWithResponse Logout
	//
	// Terminates the server-side session behind the presented Bearer access token (also fires OIDC back-channel logout notifications when configured).
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/logout (the `PostOauth2Logout` operationId).
	PostOauth2LogoutWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2LogoutResponse, error)

	// PostOauth2LogoutWithResponse Logout
	//
	// Terminates the server-side session behind the presented Bearer access token (also fires OIDC back-channel logout notifications when configured).
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/logout (the `PostOauth2Logout` operationId).
	PostOauth2LogoutWithResponse(ctx context.Context, body PostOauth2LogoutJSONRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2LogoutResponse, error)

	// PostOauth2MfaVerifyWithBodyWithResponse Verify MFA Code (Login)
	//
	// Verify MFA (TOTP) code during login. Completes the authorization-code issuance started by /oauth2/login when MFA was required. The PKCE code_verifier (C4, RFC 7636) must be supplied so the internally-generated code passes PKCE verification against the code_challenge persisted on the session during the first-factor login step. Accepts a JSON body or form-encoded parameters.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/mfa/verify (the `PostOauth2MfaVerify` operationId).
	PostOauth2MfaVerifyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2MfaVerifyResponse, error)

	// PostOauth2MfaVerifyWithResponse Verify MFA Code (Login)
	//
	// Verify MFA (TOTP) code during login. Completes the authorization-code issuance started by /oauth2/login when MFA was required. The PKCE code_verifier (C4, RFC 7636) must be supplied so the internally-generated code passes PKCE verification against the code_challenge persisted on the session during the first-factor login step. Accepts a JSON body or form-encoded parameters.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/mfa/verify (the `PostOauth2MfaVerify` operationId).
	PostOauth2MfaVerifyWithResponse(ctx context.Context, body PostOauth2MfaVerifyJSONRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2MfaVerifyResponse, error)

	// PostOauth2MfaVerifyWithFormdataBodyWithResponse Verify MFA Code (Login)
	//
	// Verify MFA (TOTP) code during login. Completes the authorization-code issuance started by /oauth2/login when MFA was required. The PKCE code_verifier (C4, RFC 7636) must be supplied so the internally-generated code passes PKCE verification against the code_challenge persisted on the session during the first-factor login step. Accepts a JSON body or form-encoded parameters.
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/mfa/verify (the `PostOauth2MfaVerify` operationId).
	PostOauth2MfaVerifyWithFormdataBodyWithResponse(ctx context.Context, body PostOauth2MfaVerifyFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2MfaVerifyResponse, error)

	// PostOauth2RegisterWithResponse Register Client
	//
	// Dynamic client registration.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/register (the `PostOauth2Register` operationId).
	PostOauth2RegisterWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostOauth2RegisterResponse, error)

	// PostOauth2RevokeWithBodyWithResponse Revoke token
	//
	// RFC 7009 OAuth 2.0 Token Revocation. Revokes an access OR refresh token (C3 fix — refresh tokens are now actually revoked, not silently no-op'd). The caller must be the token's owning client (ownership enforced via introspection). CONFIDENTIAL clients authenticate via client_secret (HTTP Basic or body); PUBLIC clients (token_endpoint_auth_method='none') authenticate with client_id only (RFC 7009 §2.1 exempts them from client authentication at this endpoint). Unknown or already-inactive tokens still return 200 per RFC 7009; the success body is EMPTY.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/revoke (the `PostOauth2Revoke` operationId).
	PostOauth2RevokeWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2RevokeResponse, error)

	// PostOauth2RevokeWithFormdataBodyWithResponse Revoke token
	//
	// RFC 7009 OAuth 2.0 Token Revocation. Revokes an access OR refresh token (C3 fix — refresh tokens are now actually revoked, not silently no-op'd). The caller must be the token's owning client (ownership enforced via introspection). CONFIDENTIAL clients authenticate via client_secret (HTTP Basic or body); PUBLIC clients (token_endpoint_auth_method='none') authenticate with client_id only (RFC 7009 §2.1 exempts them from client authentication at this endpoint). Unknown or already-inactive tokens still return 200 per RFC 7009; the success body is EMPTY.
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/revoke (the `PostOauth2Revoke` operationId).
	PostOauth2RevokeWithFormdataBodyWithResponse(ctx context.Context, body PostOauth2RevokeFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2RevokeResponse, error)

	// PostOauth2TokenWithBodyWithResponse Exchange authorization code for access token
	//
	// OAuth2 token endpoint - exchanges an authorization code, refresh token, client credentials, or device code for access tokens (RFC 6749 §3.2). Request parameters are sent as application/x-www-form-urlencoded (the server also accepts them as query parameters). Client authentication follows each client's registered token_endpoint_auth_method (F-017): client_secret_basic (the default) -> HTTP Basic ONLY (a body client_secret is rejected); client_secret_post -> client_id + client_secret form fields ONLY (a Basic header is rejected); PUBLIC clients send client_id only (any client_secret is rejected).
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/token (the `PostOauth2Token` operationId).
	PostOauth2TokenWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2TokenResponse, error)

	// PostOauth2TokenWithFormdataBodyWithResponse Exchange authorization code for access token
	//
	// OAuth2 token endpoint - exchanges an authorization code, refresh token, client credentials, or device code for access tokens (RFC 6749 §3.2). Request parameters are sent as application/x-www-form-urlencoded (the server also accepts them as query parameters). Client authentication follows each client's registered token_endpoint_auth_method (F-017): client_secret_basic (the default) -> HTTP Basic ONLY (a body client_secret is rejected); client_secret_post -> client_id + client_secret form fields ONLY (a Basic header is rejected); PUBLIC clients send client_id only (any client_secret is rejected).
	//
	// Takes a body of the `application/x-www-form-urlencoded` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/token (the `PostOauth2Token` operationId).
	PostOauth2TokenWithFormdataBodyWithResponse(ctx context.Context, body PostOauth2TokenFormdataRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2TokenResponse, error)

	// GetOauth2UserinfoWithResponse Get user information
	//
	// Returns information about the authenticated user. F-023 (OIDC Core §5.3): the access token's scope MUST include openid; M2M tokens (client_credentials, subject client:*) are rejected. The response includes the email_verified claim (F-024) when an email is present.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with GET /oauth2/userinfo (the `GetOauth2Userinfo` operationId).
	GetOauth2UserinfoWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetOauth2UserinfoResponse, error)

	// PostOauth2WebauthnAuthenticateBeginWithResponse WebAuthn Authenticate Begin
	//
	// Start passkey authentication (#142): the challenge is bound to the caller's session (send cookies - credentials include); userVerification=required; ES256 only. Requires webauthn.rp_origins.
	//
	// Returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/webauthn/authenticate/begin (the `PostOauth2WebauthnAuthenticateBegin` operationId).
	PostOauth2WebauthnAuthenticateBeginWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*PostOauth2WebauthnAuthenticateBeginResponse, error)

	// PostOauth2WebauthnAuthenticateFinishWithBodyWithResponse WebAuthn Authenticate Finish
	//
	// Finish passkey authentication (#142): the session challenge is consumed unconditionally, the ES256 signature over authData || SHA256(clientDataJSON) is verified against the STORED COSE key, UV=1 is enforced and signCount regression is treated as cloning. On success a browser session is established (Set-Cookie). All failures answer the generic AUTH_INVALID_CREDENTIALS.
	//
	// Takes any type of body and a specified content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/webauthn/authenticate/finish (the `PostOauth2WebauthnAuthenticateFinish` operationId).
	PostOauth2WebauthnAuthenticateFinishWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*PostOauth2WebauthnAuthenticateFinishResponse, error)

	// PostOauth2WebauthnAuthenticateFinishWithResponse WebAuthn Authenticate Finish
	//
	// Finish passkey authentication (#142): the session challenge is consumed unconditionally, the ES256 signature over authData || SHA256(clientDataJSON) is verified against the STORED COSE key, UV=1 is enforced and signCount regression is treated as cloning. On success a browser session is established (Set-Cookie). All failures answer the generic AUTH_INVALID_CREDENTIALS.
	//
	// Takes a body of the `application/json` content type, and returns a wrapper object for the known response body format(s).
	//
	// Corresponds with POST /oauth2/webauthn/authenticate/finish (the `PostOauth2WebauthnAuthenticateFinish` operationId).
	PostOauth2WebauthnAuthenticateFinishWithResponse(ctx context.Context, body PostOauth2WebauthnAuthenticateFinishJSONRequestBody, reqEditors ...RequestEditorFn) (*PostOauth2WebauthnAuthenticateFinishResponse, error)
}

ClientWithResponsesInterface is the interface specification for the client with responses above.

type DeleteApiAdminClientsClientIdResponse

type DeleteApiAdminClientsClientIdResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseDeleteApiAdminClientsClientIdResponse

func ParseDeleteApiAdminClientsClientIdResponse(rsp *http.Response) (*DeleteApiAdminClientsClientIdResponse, error)

ParseDeleteApiAdminClientsClientIdResponse parses an HTTP response from a DeleteApiAdminClientsClientIdWithResponse call

func (DeleteApiAdminClientsClientIdResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (DeleteApiAdminClientsClientIdResponse) GetBody

GetBody returns the raw response body bytes

func (DeleteApiAdminClientsClientIdResponse) Status

Status returns HTTPResponse.Status

func (DeleteApiAdminClientsClientIdResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type DeleteApiAdminRolesRoleIdResponse

type DeleteApiAdminRolesRoleIdResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseDeleteApiAdminRolesRoleIdResponse

func ParseDeleteApiAdminRolesRoleIdResponse(rsp *http.Response) (*DeleteApiAdminRolesRoleIdResponse, error)

ParseDeleteApiAdminRolesRoleIdResponse parses an HTTP response from a DeleteApiAdminRolesRoleIdWithResponse call

func (DeleteApiAdminRolesRoleIdResponse) ContentType

func (r DeleteApiAdminRolesRoleIdResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (DeleteApiAdminRolesRoleIdResponse) GetBody

GetBody returns the raw response body bytes

func (DeleteApiAdminRolesRoleIdResponse) Status

Status returns HTTPResponse.Status

func (DeleteApiAdminRolesRoleIdResponse) StatusCode

func (r DeleteApiAdminRolesRoleIdResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type DeleteApiAdminScopesScopeIdResponse

type DeleteApiAdminScopesScopeIdResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseDeleteApiAdminScopesScopeIdResponse

func ParseDeleteApiAdminScopesScopeIdResponse(rsp *http.Response) (*DeleteApiAdminScopesScopeIdResponse, error)

ParseDeleteApiAdminScopesScopeIdResponse parses an HTTP response from a DeleteApiAdminScopesScopeIdWithResponse call

func (DeleteApiAdminScopesScopeIdResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (DeleteApiAdminScopesScopeIdResponse) GetBody

GetBody returns the raw response body bytes

func (DeleteApiAdminScopesScopeIdResponse) Status

Status returns HTTPResponse.Status

func (DeleteApiAdminScopesScopeIdResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type DeleteApiAdminTokensTokenPrefixResponse

type DeleteApiAdminTokensTokenPrefixResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseDeleteApiAdminTokensTokenPrefixResponse

func ParseDeleteApiAdminTokensTokenPrefixResponse(rsp *http.Response) (*DeleteApiAdminTokensTokenPrefixResponse, error)

ParseDeleteApiAdminTokensTokenPrefixResponse parses an HTTP response from a DeleteApiAdminTokensTokenPrefixWithResponse call

func (DeleteApiAdminTokensTokenPrefixResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (DeleteApiAdminTokensTokenPrefixResponse) GetBody

GetBody returns the raw response body bytes

func (DeleteApiAdminTokensTokenPrefixResponse) Status

Status returns HTTPResponse.Status

func (DeleteApiAdminTokensTokenPrefixResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type DeleteApiAdminUsersUserIdResponse

type DeleteApiAdminUsersUserIdResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseDeleteApiAdminUsersUserIdResponse

func ParseDeleteApiAdminUsersUserIdResponse(rsp *http.Response) (*DeleteApiAdminUsersUserIdResponse, error)

ParseDeleteApiAdminUsersUserIdResponse parses an HTTP response from a DeleteApiAdminUsersUserIdWithResponse call

func (DeleteApiAdminUsersUserIdResponse) ContentType

func (r DeleteApiAdminUsersUserIdResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (DeleteApiAdminUsersUserIdResponse) GetBody

GetBody returns the raw response body bytes

func (DeleteApiAdminUsersUserIdResponse) Status

Status returns HTTPResponse.Status

func (DeleteApiAdminUsersUserIdResponse) StatusCode

func (r DeleteApiAdminUsersUserIdResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type DeleteApiMeAuthorizedAppsClientIdResponse

type DeleteApiMeAuthorizedAppsClientIdResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseDeleteApiMeAuthorizedAppsClientIdResponse

func ParseDeleteApiMeAuthorizedAppsClientIdResponse(rsp *http.Response) (*DeleteApiMeAuthorizedAppsClientIdResponse, error)

ParseDeleteApiMeAuthorizedAppsClientIdResponse parses an HTTP response from a DeleteApiMeAuthorizedAppsClientIdWithResponse call

func (DeleteApiMeAuthorizedAppsClientIdResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (DeleteApiMeAuthorizedAppsClientIdResponse) GetBody

GetBody returns the raw response body bytes

func (DeleteApiMeAuthorizedAppsClientIdResponse) Status

Status returns HTTPResponse.Status

func (DeleteApiMeAuthorizedAppsClientIdResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type DeleteApiMeResponse

type DeleteApiMeResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseDeleteApiMeResponse

func ParseDeleteApiMeResponse(rsp *http.Response) (*DeleteApiMeResponse, error)

ParseDeleteApiMeResponse parses an HTTP response from a DeleteApiMeWithResponse call

func (DeleteApiMeResponse) ContentType

func (r DeleteApiMeResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (DeleteApiMeResponse) GetBody

func (r DeleteApiMeResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (DeleteApiMeResponse) Status

func (r DeleteApiMeResponse) Status() string

Status returns HTTPResponse.Status

func (DeleteApiMeResponse) StatusCode

func (r DeleteApiMeResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type DeleteApiMeSocialLinksProviderParamsProvider

type DeleteApiMeSocialLinksProviderParamsProvider string

DeleteApiMeSocialLinksProviderParamsProvider defines parameters for DeleteApiMeSocialLinksProvider.

const (
	DeleteApiMeSocialLinksProviderParamsProviderGithub DeleteApiMeSocialLinksProviderParamsProvider = "github"
	DeleteApiMeSocialLinksProviderParamsProviderGoogle DeleteApiMeSocialLinksProviderParamsProvider = "google"
	DeleteApiMeSocialLinksProviderParamsProviderWechat DeleteApiMeSocialLinksProviderParamsProvider = "wechat"
)

Defines values for DeleteApiMeSocialLinksProviderParamsProvider.

func (DeleteApiMeSocialLinksProviderParamsProvider) Valid

Valid indicates whether the value is a known member of the DeleteApiMeSocialLinksProviderParamsProvider enum.

type DeleteApiMeSocialLinksProviderResponse

type DeleteApiMeSocialLinksProviderResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *SocialLinkResult
	// JSON400 the response for an HTTP 400 `application/json` response
	JSON400 *ErrorEnvelope
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *ErrorEnvelope
	// JSON404 the response for an HTTP 404 `application/json` response
	JSON404 *ErrorEnvelope
	// JSON409 the response for an HTTP 409 `application/json` response
	JSON409 *ErrorEnvelope
	// JSON500 the response for an HTTP 500 `application/json` response
	JSON500 *ErrorEnvelope
}

func ParseDeleteApiMeSocialLinksProviderResponse

func ParseDeleteApiMeSocialLinksProviderResponse(rsp *http.Response) (*DeleteApiMeSocialLinksProviderResponse, error)

ParseDeleteApiMeSocialLinksProviderResponse parses an HTTP response from a DeleteApiMeSocialLinksProviderWithResponse call

func (DeleteApiMeSocialLinksProviderResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (DeleteApiMeSocialLinksProviderResponse) GetBody

GetBody returns the raw response body bytes

func (DeleteApiMeSocialLinksProviderResponse) GetJSON200

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (DeleteApiMeSocialLinksProviderResponse) GetJSON400

GetJSON400 returns the response for an HTTP 400 `application/json` response

func (DeleteApiMeSocialLinksProviderResponse) GetJSON401

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (DeleteApiMeSocialLinksProviderResponse) GetJSON404

GetJSON404 returns the response for an HTTP 404 `application/json` response

func (DeleteApiMeSocialLinksProviderResponse) GetJSON409

GetJSON409 returns the response for an HTTP 409 `application/json` response

func (DeleteApiMeSocialLinksProviderResponse) GetJSON500

GetJSON500 returns the response for an HTTP 500 `application/json` response

func (DeleteApiMeSocialLinksProviderResponse) Status

Status returns HTTPResponse.Status

func (DeleteApiMeSocialLinksProviderResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type DeviceAuthorizationResponse

type DeviceAuthorizationResponse struct {
	DeviceCode string `json:"device_code"`

	// ExpiresIn Device code lifetime in seconds (600).
	ExpiresIn int `json:"expires_in"`

	// Interval Required polling interval in seconds (5).
	Interval int `json:"interval"`

	// UserCode 8 characters from the A-Z2-9 alphabet (no 0/1/I/O).
	UserCode        string `json:"user_code"`
	VerificationUri string `json:"verification_uri"`
}

DeviceAuthorizationResponse RFC 8628 device authorization response (no verification_uri_complete).

type Error

type Error struct {
	// Category Error category, e.g. VALIDATION / AUTH / AUTHZ / DB / INTERNAL.
	Category *string `json:"category,omitempty"`

	// Code Machine-readable error code, e.g. VALIDATION_INVALID_INPUT.
	Code *string `json:"code,omitempty"`

	// Details Extra context; only emitted when the server runs in non-production mode.
	Details *string `json:"details,omitempty"`
	Message *string `json:"message,omitempty"`

	// NumericCode Numeric catalog code (present iff the code is registered, e.g. 3001).
	NumericCode *int    `json:"numeric_code,omitempty"`
	RequestId   *string `json:"request_id,omitempty"`
}

Error The nested error object of the application error envelope. Application (non-OAuth2-protocol) endpoints respond with {"error": {...}} on failure; /oauth2/* and /.well-known/* endpoints use RFC 6749 §5.2 bodies instead (see OAuth2Error).

type ErrorEnvelope

type ErrorEnvelope struct {
	// Error The nested error object of the application error envelope. Application (non-OAuth2-protocol) endpoints respond with {"error": {...}} on failure; /oauth2/* and /.well-known/* endpoints use RFC 6749 §5.2 bodies instead (see OAuth2Error).
	Error Error `json:"error"`
}

ErrorEnvelope Application-endpoint error wrapper.

type GetApiAdminClientsClientIdResponse

type GetApiAdminClientsClientIdResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseGetApiAdminClientsClientIdResponse

func ParseGetApiAdminClientsClientIdResponse(rsp *http.Response) (*GetApiAdminClientsClientIdResponse, error)

ParseGetApiAdminClientsClientIdResponse parses an HTTP response from a GetApiAdminClientsClientIdWithResponse call

func (GetApiAdminClientsClientIdResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminClientsClientIdResponse) GetBody

GetBody returns the raw response body bytes

func (GetApiAdminClientsClientIdResponse) Status

Status returns HTTPResponse.Status

func (GetApiAdminClientsClientIdResponse) StatusCode

func (r GetApiAdminClientsClientIdResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminClientsClientIdScopesResponse

type GetApiAdminClientsClientIdScopesResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseGetApiAdminClientsClientIdScopesResponse

func ParseGetApiAdminClientsClientIdScopesResponse(rsp *http.Response) (*GetApiAdminClientsClientIdScopesResponse, error)

ParseGetApiAdminClientsClientIdScopesResponse parses an HTTP response from a GetApiAdminClientsClientIdScopesWithResponse call

func (GetApiAdminClientsClientIdScopesResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminClientsClientIdScopesResponse) GetBody

GetBody returns the raw response body bytes

func (GetApiAdminClientsClientIdScopesResponse) Status

Status returns HTTPResponse.Status

func (GetApiAdminClientsClientIdScopesResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminClientsResponse

type GetApiAdminClientsResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseGetApiAdminClientsResponse

func ParseGetApiAdminClientsResponse(rsp *http.Response) (*GetApiAdminClientsResponse, error)

ParseGetApiAdminClientsResponse parses an HTTP response from a GetApiAdminClientsWithResponse call

func (GetApiAdminClientsResponse) ContentType

func (r GetApiAdminClientsResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminClientsResponse) GetBody

func (r GetApiAdminClientsResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetApiAdminClientsResponse) Status

Status returns HTTPResponse.Status

func (GetApiAdminClientsResponse) StatusCode

func (r GetApiAdminClientsResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminDashboardResponse

type GetApiAdminDashboardResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *struct {
		Message *string `json:"message,omitempty"`
		Status  *string `json:"status,omitempty"`
	}
}

func ParseGetApiAdminDashboardResponse

func ParseGetApiAdminDashboardResponse(rsp *http.Response) (*GetApiAdminDashboardResponse, error)

ParseGetApiAdminDashboardResponse parses an HTTP response from a GetApiAdminDashboardWithResponse call

func (GetApiAdminDashboardResponse) ContentType

func (r GetApiAdminDashboardResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminDashboardResponse) GetBody

func (r GetApiAdminDashboardResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetApiAdminDashboardResponse) GetJSON200

func (r GetApiAdminDashboardResponse) GetJSON200() *struct {
	Message *string `json:"message,omitempty"`
	Status  *string `json:"status,omitempty"`
}

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetApiAdminDashboardResponse) Status

Status returns HTTPResponse.Status

func (GetApiAdminDashboardResponse) StatusCode

func (r GetApiAdminDashboardResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminDashboardStatsResponse

type GetApiAdminDashboardStatsResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *struct {
		ActiveTokens  *int    `json:"active_tokens,omitempty"`
		FailuresToday *int    `json:"failures_today,omitempty"`
		LogsToday     *int    `json:"logs_today,omitempty"`
		Status        *string `json:"status,omitempty"`
		TotalClients  *int    `json:"total_clients,omitempty"`
		TotalUsers    *int    `json:"total_users,omitempty"`
	}
}

func ParseGetApiAdminDashboardStatsResponse

func ParseGetApiAdminDashboardStatsResponse(rsp *http.Response) (*GetApiAdminDashboardStatsResponse, error)

ParseGetApiAdminDashboardStatsResponse parses an HTTP response from a GetApiAdminDashboardStatsWithResponse call

func (GetApiAdminDashboardStatsResponse) ContentType

func (r GetApiAdminDashboardStatsResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminDashboardStatsResponse) GetBody

GetBody returns the raw response body bytes

func (GetApiAdminDashboardStatsResponse) GetJSON200

func (r GetApiAdminDashboardStatsResponse) GetJSON200() *struct {
	ActiveTokens  *int    `json:"active_tokens,omitempty"`
	FailuresToday *int    `json:"failures_today,omitempty"`
	LogsToday     *int    `json:"logs_today,omitempty"`
	Status        *string `json:"status,omitempty"`
	TotalClients  *int    `json:"total_clients,omitempty"`
	TotalUsers    *int    `json:"total_users,omitempty"`
}

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetApiAdminDashboardStatsResponse) Status

Status returns HTTPResponse.Status

func (GetApiAdminDashboardStatsResponse) StatusCode

func (r GetApiAdminDashboardStatsResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminLogsResponse

type GetApiAdminLogsResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseGetApiAdminLogsResponse

func ParseGetApiAdminLogsResponse(rsp *http.Response) (*GetApiAdminLogsResponse, error)

ParseGetApiAdminLogsResponse parses an HTTP response from a GetApiAdminLogsWithResponse call

func (GetApiAdminLogsResponse) ContentType

func (r GetApiAdminLogsResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminLogsResponse) GetBody

func (r GetApiAdminLogsResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetApiAdminLogsResponse) Status

func (r GetApiAdminLogsResponse) Status() string

Status returns HTTPResponse.Status

func (GetApiAdminLogsResponse) StatusCode

func (r GetApiAdminLogsResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminOidcKeysResponse

type GetApiAdminOidcKeysResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseGetApiAdminOidcKeysResponse

func ParseGetApiAdminOidcKeysResponse(rsp *http.Response) (*GetApiAdminOidcKeysResponse, error)

ParseGetApiAdminOidcKeysResponse parses an HTTP response from a GetApiAdminOidcKeysWithResponse call

func (GetApiAdminOidcKeysResponse) ContentType

func (r GetApiAdminOidcKeysResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminOidcKeysResponse) GetBody

func (r GetApiAdminOidcKeysResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetApiAdminOidcKeysResponse) Status

Status returns HTTPResponse.Status

func (GetApiAdminOidcKeysResponse) StatusCode

func (r GetApiAdminOidcKeysResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminOrganizationsResponse

type GetApiAdminOrganizationsResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *struct {
		Organizations *[]Organization `json:"organizations,omitempty"`
		Total         *int            `json:"total,omitempty"`
	}
}

func ParseGetApiAdminOrganizationsResponse

func ParseGetApiAdminOrganizationsResponse(rsp *http.Response) (*GetApiAdminOrganizationsResponse, error)

ParseGetApiAdminOrganizationsResponse parses an HTTP response from a GetApiAdminOrganizationsWithResponse call

func (GetApiAdminOrganizationsResponse) ContentType

func (r GetApiAdminOrganizationsResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminOrganizationsResponse) GetBody

func (r GetApiAdminOrganizationsResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetApiAdminOrganizationsResponse) GetJSON200

func (r GetApiAdminOrganizationsResponse) GetJSON200() *struct {
	Organizations *[]Organization `json:"organizations,omitempty"`
	Total         *int            `json:"total,omitempty"`
}

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetApiAdminOrganizationsResponse) Status

Status returns HTTPResponse.Status

func (GetApiAdminOrganizationsResponse) StatusCode

func (r GetApiAdminOrganizationsResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminOrganizationsSlugResponse

type GetApiAdminOrganizationsSlugResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *Organization
}

func ParseGetApiAdminOrganizationsSlugResponse

func ParseGetApiAdminOrganizationsSlugResponse(rsp *http.Response) (*GetApiAdminOrganizationsSlugResponse, error)

ParseGetApiAdminOrganizationsSlugResponse parses an HTTP response from a GetApiAdminOrganizationsSlugWithResponse call

func (GetApiAdminOrganizationsSlugResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminOrganizationsSlugResponse) GetBody

GetBody returns the raw response body bytes

func (GetApiAdminOrganizationsSlugResponse) GetJSON200

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetApiAdminOrganizationsSlugResponse) Status

Status returns HTTPResponse.Status

func (GetApiAdminOrganizationsSlugResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminRolesResponse

type GetApiAdminRolesResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *struct {
		Roles *[]struct {
			CreatedAt   *string `json:"created_at,omitempty"`
			Description *string `json:"description,omitempty"`
			Id          *int    `json:"id,omitempty"`
			Name        *string `json:"name,omitempty"`
			UserCount   *int    `json:"user_count,omitempty"`
		} `json:"roles,omitempty"`
		Status *string `json:"status,omitempty"`
		Total  *int    `json:"total,omitempty"`
	}
}

func ParseGetApiAdminRolesResponse

func ParseGetApiAdminRolesResponse(rsp *http.Response) (*GetApiAdminRolesResponse, error)

ParseGetApiAdminRolesResponse parses an HTTP response from a GetApiAdminRolesWithResponse call

func (GetApiAdminRolesResponse) ContentType

func (r GetApiAdminRolesResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminRolesResponse) GetBody

func (r GetApiAdminRolesResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetApiAdminRolesResponse) GetJSON200

func (r GetApiAdminRolesResponse) GetJSON200() *struct {
	Roles *[]struct {
		CreatedAt   *string `json:"created_at,omitempty"`
		Description *string `json:"description,omitempty"`
		Id          *int    `json:"id,omitempty"`
		Name        *string `json:"name,omitempty"`
		UserCount   *int    `json:"user_count,omitempty"`
	} `json:"roles,omitempty"`
	Status *string `json:"status,omitempty"`
	Total  *int    `json:"total,omitempty"`
}

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetApiAdminRolesResponse) Status

func (r GetApiAdminRolesResponse) Status() string

Status returns HTTPResponse.Status

func (GetApiAdminRolesResponse) StatusCode

func (r GetApiAdminRolesResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminScopesResourcesResponse

type GetApiAdminScopesResourcesResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *struct {
		Resources *[]struct {
			ImpliedBy      *[]string `json:"implied_by,omitempty"`
			Method         *string   `json:"method,omitempty"`
			Path           *string   `json:"path,omitempty"`
			RequiredScopes *[]string `json:"required_scopes,omitempty"`
		} `json:"resources,omitempty"`
	}
}

func ParseGetApiAdminScopesResourcesResponse

func ParseGetApiAdminScopesResourcesResponse(rsp *http.Response) (*GetApiAdminScopesResourcesResponse, error)

ParseGetApiAdminScopesResourcesResponse parses an HTTP response from a GetApiAdminScopesResourcesWithResponse call

func (GetApiAdminScopesResourcesResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminScopesResourcesResponse) GetBody

GetBody returns the raw response body bytes

func (GetApiAdminScopesResourcesResponse) GetJSON200

func (r GetApiAdminScopesResourcesResponse) GetJSON200() *struct {
	Resources *[]struct {
		ImpliedBy      *[]string `json:"implied_by,omitempty"`
		Method         *string   `json:"method,omitempty"`
		Path           *string   `json:"path,omitempty"`
		RequiredScopes *[]string `json:"required_scopes,omitempty"`
	} `json:"resources,omitempty"`
}

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetApiAdminScopesResourcesResponse) Status

Status returns HTTPResponse.Status

func (GetApiAdminScopesResourcesResponse) StatusCode

func (r GetApiAdminScopesResourcesResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminScopesResponse

type GetApiAdminScopesResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *struct {
		Scopes *[]struct {
			Description       *string `json:"description,omitempty"`
			Id                *int    `json:"id,omitempty"`
			IsDefault         *bool   `json:"is_default,omitempty"`
			MappedRole        *string `json:"mapped_role,omitempty"`
			Name              *string `json:"name,omitempty"`
			RequiresAdminRole *bool   `json:"requires_admin_role,omitempty"`
		} `json:"scopes,omitempty"`
		Status *string `json:"status,omitempty"`
		Total  *int    `json:"total,omitempty"`
	}
}

func ParseGetApiAdminScopesResponse

func ParseGetApiAdminScopesResponse(rsp *http.Response) (*GetApiAdminScopesResponse, error)

ParseGetApiAdminScopesResponse parses an HTTP response from a GetApiAdminScopesWithResponse call

func (GetApiAdminScopesResponse) ContentType

func (r GetApiAdminScopesResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminScopesResponse) GetBody

func (r GetApiAdminScopesResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetApiAdminScopesResponse) GetJSON200

func (r GetApiAdminScopesResponse) GetJSON200() *struct {
	Scopes *[]struct {
		Description       *string `json:"description,omitempty"`
		Id                *int    `json:"id,omitempty"`
		IsDefault         *bool   `json:"is_default,omitempty"`
		MappedRole        *string `json:"mapped_role,omitempty"`
		Name              *string `json:"name,omitempty"`
		RequiresAdminRole *bool   `json:"requires_admin_role,omitempty"`
	} `json:"scopes,omitempty"`
	Status *string `json:"status,omitempty"`
	Total  *int    `json:"total,omitempty"`
}

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetApiAdminScopesResponse) Status

func (r GetApiAdminScopesResponse) Status() string

Status returns HTTPResponse.Status

func (GetApiAdminScopesResponse) StatusCode

func (r GetApiAdminScopesResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminTokensResponse

type GetApiAdminTokensResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseGetApiAdminTokensResponse

func ParseGetApiAdminTokensResponse(rsp *http.Response) (*GetApiAdminTokensResponse, error)

ParseGetApiAdminTokensResponse parses an HTTP response from a GetApiAdminTokensWithResponse call

func (GetApiAdminTokensResponse) ContentType

func (r GetApiAdminTokensResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminTokensResponse) GetBody

func (r GetApiAdminTokensResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetApiAdminTokensResponse) Status

func (r GetApiAdminTokensResponse) Status() string

Status returns HTTPResponse.Status

func (GetApiAdminTokensResponse) StatusCode

func (r GetApiAdminTokensResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminUsersParams

type GetApiAdminUsersParams struct {
	// Page Page number (1-based)
	Page *int `form:"page,omitempty" json:"page,omitempty"`

	// PerPage Items per page (1-100)
	PerPage *int `form:"per_page,omitempty" json:"per_page,omitempty"`

	// Q Search by username or email prefix
	Q *string `form:"q,omitempty" json:"q,omitempty"`

	// Role Filter by role name
	Role *string `form:"role,omitempty" json:"role,omitempty"`

	// Locked Filter by lock state (true = locked, false = active)
	Locked *GetApiAdminUsersParamsLocked `form:"locked,omitempty" json:"locked,omitempty"`
}

GetApiAdminUsersParams defines parameters for GetApiAdminUsers.

type GetApiAdminUsersParamsLocked

type GetApiAdminUsersParamsLocked string

GetApiAdminUsersParamsLocked defines parameters for GetApiAdminUsers.

const (
	False GetApiAdminUsersParamsLocked = "false"
	True  GetApiAdminUsersParamsLocked = "true"
)

Defines values for GetApiAdminUsersParamsLocked.

func (GetApiAdminUsersParamsLocked) Valid

Valid indicates whether the value is a known member of the GetApiAdminUsersParamsLocked enum.

type GetApiAdminUsersResponse

type GetApiAdminUsersResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseGetApiAdminUsersResponse

func ParseGetApiAdminUsersResponse(rsp *http.Response) (*GetApiAdminUsersResponse, error)

ParseGetApiAdminUsersResponse parses an HTTP response from a GetApiAdminUsersWithResponse call

func (GetApiAdminUsersResponse) ContentType

func (r GetApiAdminUsersResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminUsersResponse) GetBody

func (r GetApiAdminUsersResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetApiAdminUsersResponse) Status

func (r GetApiAdminUsersResponse) Status() string

Status returns HTTPResponse.Status

func (GetApiAdminUsersResponse) StatusCode

func (r GetApiAdminUsersResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminUsersUserIdResponse

type GetApiAdminUsersUserIdResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *struct {
		CreatedAt        *string   `json:"created_at,omitempty"`
		Email            *string   `json:"email,omitempty"`
		EmailVerified    *bool     `json:"email_verified,omitempty"`
		FailedLoginCount *int      `json:"failed_login_count,omitempty"`
		Id               *int      `json:"id,omitempty"`
		Locked           *bool     `json:"locked,omitempty"`
		LockedUntil      *int      `json:"locked_until,omitempty"`
		MfaEnabled       *bool     `json:"mfa_enabled,omitempty"`
		OrgId            *int      `json:"org_id,omitempty"`
		Roles            *[]string `json:"roles,omitempty"`
		Status           *string   `json:"status,omitempty"`
		Username         *string   `json:"username,omitempty"`
	}
}

func ParseGetApiAdminUsersUserIdResponse

func ParseGetApiAdminUsersUserIdResponse(rsp *http.Response) (*GetApiAdminUsersUserIdResponse, error)

ParseGetApiAdminUsersUserIdResponse parses an HTTP response from a GetApiAdminUsersUserIdWithResponse call

func (GetApiAdminUsersUserIdResponse) ContentType

func (r GetApiAdminUsersUserIdResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminUsersUserIdResponse) GetBody

func (r GetApiAdminUsersUserIdResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetApiAdminUsersUserIdResponse) GetJSON200

func (r GetApiAdminUsersUserIdResponse) GetJSON200() *struct {
	CreatedAt        *string   `json:"created_at,omitempty"`
	Email            *string   `json:"email,omitempty"`
	EmailVerified    *bool     `json:"email_verified,omitempty"`
	FailedLoginCount *int      `json:"failed_login_count,omitempty"`
	Id               *int      `json:"id,omitempty"`
	Locked           *bool     `json:"locked,omitempty"`
	LockedUntil      *int      `json:"locked_until,omitempty"`
	MfaEnabled       *bool     `json:"mfa_enabled,omitempty"`
	OrgId            *int      `json:"org_id,omitempty"`
	Roles            *[]string `json:"roles,omitempty"`
	Status           *string   `json:"status,omitempty"`
	Username         *string   `json:"username,omitempty"`
}

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetApiAdminUsersUserIdResponse) Status

Status returns HTTPResponse.Status

func (GetApiAdminUsersUserIdResponse) StatusCode

func (r GetApiAdminUsersUserIdResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiAdminUsersUserIdRolesResponse

type GetApiAdminUsersUserIdRolesResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *struct {
		Roles *[]struct {
			Description *string `json:"description,omitempty"`
			Id          *int    `json:"id,omitempty"`
			Name        *string `json:"name,omitempty"`
		} `json:"roles,omitempty"`
		Status *string `json:"status,omitempty"`
	}
}

func ParseGetApiAdminUsersUserIdRolesResponse

func ParseGetApiAdminUsersUserIdRolesResponse(rsp *http.Response) (*GetApiAdminUsersUserIdRolesResponse, error)

ParseGetApiAdminUsersUserIdRolesResponse parses an HTTP response from a GetApiAdminUsersUserIdRolesWithResponse call

func (GetApiAdminUsersUserIdRolesResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiAdminUsersUserIdRolesResponse) GetBody

GetBody returns the raw response body bytes

func (GetApiAdminUsersUserIdRolesResponse) GetJSON200

func (r GetApiAdminUsersUserIdRolesResponse) GetJSON200() *struct {
	Roles *[]struct {
		Description *string `json:"description,omitempty"`
		Id          *int    `json:"id,omitempty"`
		Name        *string `json:"name,omitempty"`
	} `json:"roles,omitempty"`
	Status *string `json:"status,omitempty"`
}

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetApiAdminUsersUserIdRolesResponse) Status

Status returns HTTPResponse.Status

func (GetApiAdminUsersUserIdRolesResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type GetApiMeAuthorizedAppsResponse

type GetApiMeAuthorizedAppsResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseGetApiMeAuthorizedAppsResponse

func ParseGetApiMeAuthorizedAppsResponse(rsp *http.Response) (*GetApiMeAuthorizedAppsResponse, error)

ParseGetApiMeAuthorizedAppsResponse parses an HTTP response from a GetApiMeAuthorizedAppsWithResponse call

func (GetApiMeAuthorizedAppsResponse) ContentType

func (r GetApiMeAuthorizedAppsResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiMeAuthorizedAppsResponse) GetBody

func (r GetApiMeAuthorizedAppsResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetApiMeAuthorizedAppsResponse) Status

Status returns HTTPResponse.Status

func (GetApiMeAuthorizedAppsResponse) StatusCode

func (r GetApiMeAuthorizedAppsResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiMeResponse

type GetApiMeResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseGetApiMeResponse

func ParseGetApiMeResponse(rsp *http.Response) (*GetApiMeResponse, error)

ParseGetApiMeResponse parses an HTTP response from a GetApiMeWithResponse call

func (GetApiMeResponse) ContentType

func (r GetApiMeResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiMeResponse) GetBody

func (r GetApiMeResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetApiMeResponse) Status

func (r GetApiMeResponse) Status() string

Status returns HTTPResponse.Status

func (GetApiMeResponse) StatusCode

func (r GetApiMeResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiMeSocialLinksResponse

type GetApiMeSocialLinksResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *SocialLinksList
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *ErrorEnvelope
	// JSON404 the response for an HTTP 404 `application/json` response
	JSON404 *ErrorEnvelope
	// JSON500 the response for an HTTP 500 `application/json` response
	JSON500 *ErrorEnvelope
}

func ParseGetApiMeSocialLinksResponse

func ParseGetApiMeSocialLinksResponse(rsp *http.Response) (*GetApiMeSocialLinksResponse, error)

ParseGetApiMeSocialLinksResponse parses an HTTP response from a GetApiMeSocialLinksWithResponse call

func (GetApiMeSocialLinksResponse) ContentType

func (r GetApiMeSocialLinksResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiMeSocialLinksResponse) GetBody

func (r GetApiMeSocialLinksResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetApiMeSocialLinksResponse) GetJSON200

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetApiMeSocialLinksResponse) GetJSON401

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (GetApiMeSocialLinksResponse) GetJSON404

GetJSON404 returns the response for an HTTP 404 `application/json` response

func (GetApiMeSocialLinksResponse) GetJSON500

GetJSON500 returns the response for an HTTP 500 `application/json` response

func (GetApiMeSocialLinksResponse) Status

Status returns HTTPResponse.Status

func (GetApiMeSocialLinksResponse) StatusCode

func (r GetApiMeSocialLinksResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetApiMeWebauthnCredentialsResponse

type GetApiMeWebauthnCredentialsResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseGetApiMeWebauthnCredentialsResponse

func ParseGetApiMeWebauthnCredentialsResponse(rsp *http.Response) (*GetApiMeWebauthnCredentialsResponse, error)

ParseGetApiMeWebauthnCredentialsResponse parses an HTTP response from a GetApiMeWebauthnCredentialsWithResponse call

func (GetApiMeWebauthnCredentialsResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiMeWebauthnCredentialsResponse) GetBody

GetBody returns the raw response body bytes

func (GetApiMeWebauthnCredentialsResponse) Status

Status returns HTTPResponse.Status

func (GetApiMeWebauthnCredentialsResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type GetApiVerifyEmailResponse

type GetApiVerifyEmailResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseGetApiVerifyEmailResponse

func ParseGetApiVerifyEmailResponse(rsp *http.Response) (*GetApiVerifyEmailResponse, error)

ParseGetApiVerifyEmailResponse parses an HTTP response from a GetApiVerifyEmailWithResponse call

func (GetApiVerifyEmailResponse) ContentType

func (r GetApiVerifyEmailResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetApiVerifyEmailResponse) GetBody

func (r GetApiVerifyEmailResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetApiVerifyEmailResponse) Status

func (r GetApiVerifyEmailResponse) Status() string

Status returns HTTPResponse.Status

func (GetApiVerifyEmailResponse) StatusCode

func (r GetApiVerifyEmailResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetHealthLiveResponse

type GetHealthLiveResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *HealthStatus
}

func ParseGetHealthLiveResponse

func ParseGetHealthLiveResponse(rsp *http.Response) (*GetHealthLiveResponse, error)

ParseGetHealthLiveResponse parses an HTTP response from a GetHealthLiveWithResponse call

func (GetHealthLiveResponse) ContentType

func (r GetHealthLiveResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetHealthLiveResponse) GetBody

func (r GetHealthLiveResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetHealthLiveResponse) GetJSON200

func (r GetHealthLiveResponse) GetJSON200() *HealthStatus

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetHealthLiveResponse) Status

func (r GetHealthLiveResponse) Status() string

Status returns HTTPResponse.Status

func (GetHealthLiveResponse) StatusCode

func (r GetHealthLiveResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetHealthReadyResponse

type GetHealthReadyResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *HealthStatus
	// JSON503 the response for an HTTP 503 `application/json` response
	JSON503 *HealthStatus
}

func ParseGetHealthReadyResponse

func ParseGetHealthReadyResponse(rsp *http.Response) (*GetHealthReadyResponse, error)

ParseGetHealthReadyResponse parses an HTTP response from a GetHealthReadyWithResponse call

func (GetHealthReadyResponse) ContentType

func (r GetHealthReadyResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetHealthReadyResponse) GetBody

func (r GetHealthReadyResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetHealthReadyResponse) GetJSON200

func (r GetHealthReadyResponse) GetJSON200() *HealthStatus

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetHealthReadyResponse) GetJSON503

func (r GetHealthReadyResponse) GetJSON503() *HealthStatus

GetJSON503 returns the response for an HTTP 503 `application/json` response

func (GetHealthReadyResponse) Status

func (r GetHealthReadyResponse) Status() string

Status returns HTTPResponse.Status

func (GetHealthReadyResponse) StatusCode

func (r GetHealthReadyResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetHealthResponse

type GetHealthResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *HealthStatus
	// JSON503 the response for an HTTP 503 `application/json` response
	JSON503 *HealthStatus
}

func ParseGetHealthResponse

func ParseGetHealthResponse(rsp *http.Response) (*GetHealthResponse, error)

ParseGetHealthResponse parses an HTTP response from a GetHealthWithResponse call

func (GetHealthResponse) ContentType

func (r GetHealthResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetHealthResponse) GetBody

func (r GetHealthResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetHealthResponse) GetJSON200

func (r GetHealthResponse) GetJSON200() *HealthStatus

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetHealthResponse) GetJSON503

func (r GetHealthResponse) GetJSON503() *HealthStatus

GetJSON503 returns the response for an HTTP 503 `application/json` response

func (GetHealthResponse) Status

func (r GetHealthResponse) Status() string

Status returns HTTPResponse.Status

func (GetHealthResponse) StatusCode

func (r GetHealthResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetOauth2AuthorizeParams

type GetOauth2AuthorizeParams struct {
	// ClientId Client identifier (required)
	ClientId string `form:"client_id" json:"client_id"`

	// RedirectUri Redirect URI (required)
	RedirectUri string `form:"redirect_uri" json:"redirect_uri"`

	// ResponseType Response type, must be 'code' (required)
	ResponseType string `form:"response_type" json:"response_type"`

	// Scope Requested scope (optional)
	Scope *string `form:"scope,omitempty" json:"scope,omitempty"`

	// State Opaque value to maintain state between request and callback (recommended)
	State *string `form:"state,omitempty" json:"state,omitempty"`

	// CodeChallenge PKCE code challenge (RFC 7636). Required for public clients when auth.require_pkce_for_public is enabled (default true).
	CodeChallenge *string `form:"code_challenge,omitempty" json:"code_challenge,omitempty"`

	// CodeChallengeMethod PKCE code challenge method ('plain' or 'S256')
	CodeChallengeMethod *string `form:"code_challenge_method,omitempty" json:"code_challenge_method,omitempty"`

	// Nonce OIDC nonce (anti-replay). Echoed in the id_token when openid scope is requested.
	Nonce *string `form:"nonce,omitempty" json:"nonce,omitempty"`

	// Prompt OIDC prompt values, space-separated (none|login|consent). none forbids UI; login forces re-auth; consent forces the consent screen. Combining none with another value returns 400. (OIDC Core §3.1.2.1)
	Prompt *string `form:"prompt,omitempty" json:"prompt,omitempty"`

	// MaxAge Maximum allowable age in seconds of the user's authentication. If the session auth_time is older, re-authentication is forced.
	MaxAge *int `form:"max_age,omitempty" json:"max_age,omitempty"`
}

GetOauth2AuthorizeParams defines parameters for GetOauth2Authorize.

type GetOauth2AuthorizeResponse

type GetOauth2AuthorizeResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParseGetOauth2AuthorizeResponse

func ParseGetOauth2AuthorizeResponse(rsp *http.Response) (*GetOauth2AuthorizeResponse, error)

ParseGetOauth2AuthorizeResponse parses an HTTP response from a GetOauth2AuthorizeWithResponse call

func (GetOauth2AuthorizeResponse) ContentType

func (r GetOauth2AuthorizeResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetOauth2AuthorizeResponse) GetBody

func (r GetOauth2AuthorizeResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetOauth2AuthorizeResponse) Status

Status returns HTTPResponse.Status

func (GetOauth2AuthorizeResponse) StatusCode

func (r GetOauth2AuthorizeResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetOauth2EndSessionParams

type GetOauth2EndSessionParams struct {
	// IdTokenHint Previously issued id_token hinting at the client/session to terminate. Signature-verified against the OP key set (#78); a bad or expired signature, wrong issuer, or a subject contradicting the current session yields 400 AUTH_INVALID_ID_TOKEN_HINT. The aud claim (string or array, RFC 7519 §4.1.3) identifies the client(s) for validating post_logout_redirect_uri; the first candidate owning the URI wins.
	IdTokenHint *string `form:"id_token_hint,omitempty" json:"id_token_hint,omitempty"`

	// PostLogoutRedirectUri URI to redirect to after logout. Must be registered for the id_token_hint client; rejected with 400 otherwise.
	PostLogoutRedirectUri *string `form:"post_logout_redirect_uri,omitempty" json:"post_logout_redirect_uri,omitempty"`

	// State Opaque value echoed back to the post_logout_redirect_uri.
	State *string `form:"state,omitempty" json:"state,omitempty"`
}

GetOauth2EndSessionParams defines parameters for GetOauth2EndSession.

type GetOauth2EndSessionResponse

type GetOauth2EndSessionResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *MessageResponse
	// JSON400 the response for an HTTP 400 `application/json` response
	JSON400 *ErrorEnvelope
}

func ParseGetOauth2EndSessionResponse

func ParseGetOauth2EndSessionResponse(rsp *http.Response) (*GetOauth2EndSessionResponse, error)

ParseGetOauth2EndSessionResponse parses an HTTP response from a GetOauth2EndSessionWithResponse call

func (GetOauth2EndSessionResponse) ContentType

func (r GetOauth2EndSessionResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetOauth2EndSessionResponse) GetBody

func (r GetOauth2EndSessionResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetOauth2EndSessionResponse) GetJSON200

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetOauth2EndSessionResponse) GetJSON400

GetJSON400 returns the response for an HTTP 400 `application/json` response

func (GetOauth2EndSessionResponse) Status

Status returns HTTPResponse.Status

func (GetOauth2EndSessionResponse) StatusCode

func (r GetOauth2EndSessionResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetOauth2UserinfoResponse

type GetOauth2UserinfoResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *UserInfoResponse
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *OAuth2Error
	// JSON403 the response for an HTTP 403 `application/json` response
	JSON403 *OAuth2Error
}

func ParseGetOauth2UserinfoResponse

func ParseGetOauth2UserinfoResponse(rsp *http.Response) (*GetOauth2UserinfoResponse, error)

ParseGetOauth2UserinfoResponse parses an HTTP response from a GetOauth2UserinfoWithResponse call

func (GetOauth2UserinfoResponse) ContentType

func (r GetOauth2UserinfoResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetOauth2UserinfoResponse) GetBody

func (r GetOauth2UserinfoResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetOauth2UserinfoResponse) GetJSON200

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetOauth2UserinfoResponse) GetJSON401

func (r GetOauth2UserinfoResponse) GetJSON401() *OAuth2Error

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (GetOauth2UserinfoResponse) GetJSON403

func (r GetOauth2UserinfoResponse) GetJSON403() *OAuth2Error

GetJSON403 returns the response for an HTTP 403 `application/json` response

func (GetOauth2UserinfoResponse) Status

func (r GetOauth2UserinfoResponse) Status() string

Status returns HTTPResponse.Status

func (GetOauth2UserinfoResponse) StatusCode

func (r GetOauth2UserinfoResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetWellKnownJwksJsonResponse

type GetWellKnownJwksJsonResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *JWKSet
}

func ParseGetWellKnownJwksJsonResponse

func ParseGetWellKnownJwksJsonResponse(rsp *http.Response) (*GetWellKnownJwksJsonResponse, error)

ParseGetWellKnownJwksJsonResponse parses an HTTP response from a GetWellKnownJwksJsonWithResponse call

func (GetWellKnownJwksJsonResponse) ContentType

func (r GetWellKnownJwksJsonResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetWellKnownJwksJsonResponse) GetBody

func (r GetWellKnownJwksJsonResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (GetWellKnownJwksJsonResponse) GetJSON200

func (r GetWellKnownJwksJsonResponse) GetJSON200() *JWKSet

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetWellKnownJwksJsonResponse) Status

Status returns HTTPResponse.Status

func (GetWellKnownJwksJsonResponse) StatusCode

func (r GetWellKnownJwksJsonResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type GetWellKnownOauthAuthorizationServerResponse

type GetWellKnownOauthAuthorizationServerResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *OAuthAuthorizationServerMetadata
}

func ParseGetWellKnownOauthAuthorizationServerResponse

func ParseGetWellKnownOauthAuthorizationServerResponse(rsp *http.Response) (*GetWellKnownOauthAuthorizationServerResponse, error)

ParseGetWellKnownOauthAuthorizationServerResponse parses an HTTP response from a GetWellKnownOauthAuthorizationServerWithResponse call

func (GetWellKnownOauthAuthorizationServerResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetWellKnownOauthAuthorizationServerResponse) GetBody

GetBody returns the raw response body bytes

func (GetWellKnownOauthAuthorizationServerResponse) GetJSON200

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetWellKnownOauthAuthorizationServerResponse) Status

Status returns HTTPResponse.Status

func (GetWellKnownOauthAuthorizationServerResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type GetWellKnownOpenidConfigurationResponse

type GetWellKnownOpenidConfigurationResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *OpenIDConfiguration
}

func ParseGetWellKnownOpenidConfigurationResponse

func ParseGetWellKnownOpenidConfigurationResponse(rsp *http.Response) (*GetWellKnownOpenidConfigurationResponse, error)

ParseGetWellKnownOpenidConfigurationResponse parses an HTTP response from a GetWellKnownOpenidConfigurationWithResponse call

func (GetWellKnownOpenidConfigurationResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (GetWellKnownOpenidConfigurationResponse) GetBody

GetBody returns the raw response body bytes

func (GetWellKnownOpenidConfigurationResponse) GetJSON200

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (GetWellKnownOpenidConfigurationResponse) Status

Status returns HTTPResponse.Status

func (GetWellKnownOpenidConfigurationResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type HealthStatus

type HealthStatus struct {
	// Database connected / disconnected / not_configured / unknown
	Database *string `json:"database,omitempty"`

	// Redis connected / disconnected / not_configured
	Redis       *string            `json:"redis,omitempty"`
	Service     *string            `json:"service,omitempty"`
	Status      HealthStatusStatus `json:"status"`
	StorageType *string            `json:"storage_type,omitempty"`
	Timestamp   *int64             `json:"timestamp,omitempty"`
}

HealthStatus defines model for HealthStatus.

type HealthStatusStatus

type HealthStatusStatus string

HealthStatusStatus defines model for HealthStatus.Status.

const (
	Degraded  HealthStatusStatus = "degraded"
	Ok        HealthStatusStatus = "ok"
	Unhealthy HealthStatusStatus = "unhealthy"
)

Defines values for HealthStatusStatus.

func (HealthStatusStatus) Valid

func (e HealthStatusStatus) Valid() bool

Valid indicates whether the value is a known member of the HealthStatusStatus enum.

type HttpRequestDoer

type HttpRequestDoer interface {
	Do(req *http.Request) (*http.Response, error)
}

Doer performs HTTP requests.

The standard http.Client implements this interface.

type IntrospectionResponse

type IntrospectionResponse struct {
	Active   bool    `json:"active"`
	Aud      *string `json:"aud,omitempty"`
	ClientId *string `json:"client_id,omitempty"`
	Exp      *int64  `json:"exp,omitempty"`
	Iat      *int64  `json:"iat,omitempty"`
	Iss      *string `json:"iss,omitempty"`
	Nbf      *int64  `json:"nbf,omitempty"`

	// Scope Space-separated scopes.
	Scope *string `json:"scope,omitempty"`

	// Sub Resource-owner subject; "client:<id>" for client_credentials tokens.
	Sub *string `json:"sub,omitempty"`

	// TokenType Always "Bearer" when active.
	TokenType *string `json:"token_type,omitempty"`
}

IntrospectionResponse RFC 7662 introspection body. Inactive tokens return {"active": false} only. Active responses always carry iss (backfilled from config); Cache-Control: no-store.

type JWKSet

type JWKSet struct {
	Keys []struct {
		Alg *string   `json:"alg,omitempty"`
		E   *string   `json:"e,omitempty"`
		Kid *string   `json:"kid,omitempty"`
		Kty string    `json:"kty"`
		N   *string   `json:"n,omitempty"`
		Use *string   `json:"use,omitempty"`
		X5c *[]string `json:"x5c,omitempty"`
	} `json:"keys"`
}

JWKSet RFC 7517 JSON Web Key Set (Cache-Control: public, max-age=3600).

type LoginRequest

type LoginRequest struct {
	// ClientId Matches the requesting app (required for code issuance).
	ClientId *string `json:"client_id,omitempty"`

	// CodeChallenge PKCE code challenge (RFC 7636). REQUIRED for PUBLIC clients (vue-client, admin-console) when auth.require_pkce_for_public is enabled (default true, F-011 / RFC 9700 §2.1.1). The matching code_verifier must be sent on the /oauth2/token exchange.
	CodeChallenge *string `json:"code_challenge,omitempty"`

	// CodeChallengeMethod S256 (recommended) or plain.
	CodeChallengeMethod *string `json:"code_challenge_method,omitempty"`

	// Json Set to "true" to receive a JSON body instead of a 302 redirect.
	Json *string `json:"json,omitempty"`

	// Nonce OIDC nonce (anti-replay), echoed in the id_token.
	Nonce    *string `json:"nonce,omitempty"`
	Password string  `json:"password"`

	// RedirectUri Must match the registered client.
	RedirectUri *string `json:"redirect_uri,omitempty"`

	// Scope Space-separated (optional).
	Scope *string `json:"scope,omitempty"`

	// State Opaque value maintained between request and callback (recommended).
	State *string `json:"state,omitempty"`

	// Username Account username or email.
	Username string `json:"username"`
}

LoginRequest /oauth2/login credentials (JSON body or form-encoded; query also accepted).

type LoginSuccessResponse

type LoginSuccessResponse struct {
	// Code The issued authorization code.
	Code string `json:"code"`

	// Location Full redirect URI with code and state query parameters.
	Location string `json:"location"`
}

LoginSuccessResponse /oauth2/login success when json=true (otherwise a 302 redirect with code+state query).

type MessageResponse

type MessageResponse struct {
	Message string `json:"message"`
}

MessageResponse defines model for MessageResponse.

type MfaRequiredResponse

type MfaRequiredResponse struct {
	Message     *string `json:"message,omitempty"`
	MfaRequired bool    `json:"mfa_required"`

	// MfaToken Pending-MFA token to submit to /oauth2/mfa/verify.
	MfaToken string `json:"mfa_token"`
}

MfaRequiredResponse /oauth2/login response when the account has MFA enabled; complete the flow at POST /oauth2/mfa/verify.

type MfaVerifyRequest

type MfaVerifyRequest struct {
	// ClientId Must match the first-factor login.
	ClientId string `json:"client_id"`

	// Code The 6-digit TOTP code from the user's authenticator.
	Code string `json:"code"`

	// CodeVerifier PKCE code_verifier matching the code_challenge sent on the first-factor /oauth2/login step. Required for PUBLIC clients.
	CodeVerifier *string `json:"code_verifier,omitempty"`

	// MfaToken The MFA pending token returned by /oauth2/login when mfa_required was true.
	MfaToken string  `json:"mfa_token"`
	Nonce    *string `json:"nonce,omitempty"`

	// RedirectUri Must match the first-factor login.
	RedirectUri string `json:"redirect_uri"`

	// Scope Defaults to "openid profile email".
	Scope *string `json:"scope,omitempty"`
}

MfaVerifyRequest /oauth2/mfa/verify completion payload (JSON body or form-encoded).

type OAuth2Error

type OAuth2Error struct {
	Error            OAuth2ErrorError `json:"error"`
	ErrorDescription *string          `json:"error_description,omitempty"`
	ErrorUri         *string          `json:"error_uri,omitempty"`
}

OAuth2Error RFC 6749 §5.2 error body used by /oauth2/* and /.well-known/* endpoints (with Cache-Control: no-store). HTTP status per code: invalid_request 400, invalid_client 401, invalid_grant 400, unauthorized_client 400, unsupported_grant_type 400, invalid_scope 400, access_denied 403, authorization_pending 400, slow_down 400, expired_token 400, server_error 500, temporarily_unavailable 503. Bearer-protected resources (userinfo) additionally use the RFC 6750 section 3.1 codes invalid_token (401) and insufficient_scope (403).

type OAuth2ErrorError

type OAuth2ErrorError string

OAuth2ErrorError defines model for OAuth2Error.Error.

const (
	AccessDenied           OAuth2ErrorError = "access_denied"
	AuthorizationPending   OAuth2ErrorError = "authorization_pending"
	ExpiredToken           OAuth2ErrorError = "expired_token"
	InsufficientScope      OAuth2ErrorError = "insufficient_scope"
	InvalidClient          OAuth2ErrorError = "invalid_client"
	InvalidGrant           OAuth2ErrorError = "invalid_grant"
	InvalidRequest         OAuth2ErrorError = "invalid_request"
	InvalidScope           OAuth2ErrorError = "invalid_scope"
	InvalidToken           OAuth2ErrorError = "invalid_token"
	ServerError            OAuth2ErrorError = "server_error"
	SlowDown               OAuth2ErrorError = "slow_down"
	TemporarilyUnavailable OAuth2ErrorError = "temporarily_unavailable"
	UnauthorizedClient     OAuth2ErrorError = "unauthorized_client"
	UnsupportedGrantType   OAuth2ErrorError = "unsupported_grant_type"
	UnsupportedTokenType   OAuth2ErrorError = "unsupported_token_type"
)

Defines values for OAuth2ErrorError.

func (OAuth2ErrorError) Valid

func (e OAuth2ErrorError) Valid() bool

Valid indicates whether the value is a known member of the OAuth2ErrorError enum.

type OAuthAuthorizationServerMetadata

type OAuthAuthorizationServerMetadata struct {
	AuthorizationEndpoint                     *string   `json:"authorization_endpoint,omitempty"`
	CodeChallengeMethodsSupported             *[]string `json:"code_challenge_methods_supported,omitempty"`
	DeviceAuthorizationEndpoint               *string   `json:"device_authorization_endpoint,omitempty"`
	GrantTypesSupported                       *[]string `json:"grant_types_supported,omitempty"`
	IntrospectionEndpoint                     *string   `json:"introspection_endpoint,omitempty"`
	IntrospectionEndpointAuthMethodsSupported *[]string `json:"introspection_endpoint_auth_methods_supported,omitempty"`
	Issuer                                    *string   `json:"issuer,omitempty"`
	OpPolicyUri                               *string   `json:"op_policy_uri,omitempty"`
	OpTosUri                                  *string   `json:"op_tos_uri,omitempty"`
	RegistrationEndpoint                      *string   `json:"registration_endpoint,omitempty"`
	ResponseModesSupported                    *[]string `json:"response_modes_supported,omitempty"`
	ResponseTypesSupported                    *[]string `json:"response_types_supported,omitempty"`
	RevocationEndpoint                        *string   `json:"revocation_endpoint,omitempty"`
	RevocationEndpointAuthMethodsSupported    *[]string `json:"revocation_endpoint_auth_methods_supported,omitempty"`
	ScopesSupported                           *[]string `json:"scopes_supported,omitempty"`
	ServiceDocumentation                      *string   `json:"service_documentation,omitempty"`
	SubjectTypesSupported                     *[]string `json:"subject_types_supported,omitempty"`
	TokenEndpoint                             *string   `json:"token_endpoint,omitempty"`
	TokenEndpointAuthMethodsSupported         *[]string `json:"token_endpoint_auth_methods_supported,omitempty"`
}

OAuthAuthorizationServerMetadata RFC 8414 authorization server metadata (no userinfo/jwks entries; OIDC discovery carries those).

type OpenIDConfiguration

type OpenIDConfiguration struct {
	AcrValuesSupported                *[]string `json:"acr_values_supported,omitempty"`
	AuthorizationEndpoint             *string   `json:"authorization_endpoint,omitempty"`
	BackchannelLogoutSessionSupported *bool     `json:"backchannel_logout_session_supported,omitempty"`
	BackchannelLogoutSupported        *bool     `json:"backchannel_logout_supported,omitempty"`
	ClaimsSupported                   *[]string `json:"claims_supported,omitempty"`
	CodeChallengeMethodsSupported     *[]string `json:"code_challenge_methods_supported,omitempty"`
	DeviceAuthorizationEndpoint       *string   `json:"device_authorization_endpoint,omitempty"`
	EndSessionEndpoint                *string   `json:"end_session_endpoint,omitempty"`
	GrantTypesSupported               *[]string `json:"grant_types_supported,omitempty"`
	IdTokenSigningAlgValuesSupported  *[]string `json:"id_token_signing_alg_values_supported,omitempty"`
	IntrospectionEndpoint             *string   `json:"introspection_endpoint,omitempty"`
	Issuer                            *string   `json:"issuer,omitempty"`
	JwksUri                           *string   `json:"jwks_uri,omitempty"`
	PromptValuesSupported             *[]string `json:"prompt_values_supported,omitempty"`
	RegistrationEndpoint              *string   `json:"registration_endpoint,omitempty"`
	ResponseTypesSupported            *[]string `json:"response_types_supported,omitempty"`
	RevocationEndpoint                *string   `json:"revocation_endpoint,omitempty"`
	ScopesSupported                   *[]string `json:"scopes_supported,omitempty"`
	SubjectTypesSupported             *[]string `json:"subject_types_supported,omitempty"`
	TokenEndpoint                     *string   `json:"token_endpoint,omitempty"`
	TokenEndpointAuthMethodsSupported *[]string `json:"token_endpoint_auth_methods_supported,omitempty"`
	UserinfoEndpoint                  *string   `json:"userinfo_endpoint,omitempty"`
}

OpenIDConfiguration OIDC Discovery 1.0 provider metadata.

type Organization

type Organization struct {
	Id             *int    `json:"id,omitempty"`
	IssuerOverride *string `json:"issuer_override,omitempty"`
	LogoUri        *string `json:"logo_uri,omitempty"`
	Name           *string `json:"name,omitempty"`
	PrimaryColor   *string `json:"primary_color,omitempty"`
	Slug           *string `json:"slug,omitempty"`
}

Organization defines model for Organization.

type PostApiAdminClientsClientIdResetSecretResponse

type PostApiAdminClientsClientIdResetSecretResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostApiAdminClientsClientIdResetSecretResponse

func ParsePostApiAdminClientsClientIdResetSecretResponse(rsp *http.Response) (*PostApiAdminClientsClientIdResetSecretResponse, error)

ParsePostApiAdminClientsClientIdResetSecretResponse parses an HTTP response from a PostApiAdminClientsClientIdResetSecretWithResponse call

func (PostApiAdminClientsClientIdResetSecretResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiAdminClientsClientIdResetSecretResponse) GetBody

GetBody returns the raw response body bytes

func (PostApiAdminClientsClientIdResetSecretResponse) Status

Status returns HTTPResponse.Status

func (PostApiAdminClientsClientIdResetSecretResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PostApiAdminClientsJSONBody

type PostApiAdminClientsJSONBody struct {
	AllowedGrantTypes *string `json:"allowed_grant_types,omitempty"`

	// BackchannelLogoutUri OIDC Back-Channel Logout 1.0 RP endpoint. MUST use https (spec §2.3). When set, the OP POSTs a signed logout_token here on user logout.
	BackchannelLogoutUri *string                                `json:"backchannel_logout_uri,omitempty"`
	ClientType           *PostApiAdminClientsJSONBodyClientType `json:"client_type,omitempty"`
	Name                 string                                 `json:"name"`

	// RedirectUris Comma-separated redirect URIs (https required).
	RedirectUris            *string `json:"redirect_uris,omitempty"`
	TokenEndpointAuthMethod *string `json:"token_endpoint_auth_method,omitempty"`
}

PostApiAdminClientsJSONBody defines parameters for PostApiAdminClients.

type PostApiAdminClientsJSONBodyClientType

type PostApiAdminClientsJSONBodyClientType string

PostApiAdminClientsJSONBodyClientType defines parameters for PostApiAdminClients.

const (
	CONFIDENTIAL PostApiAdminClientsJSONBodyClientType = "CONFIDENTIAL"
	PUBLIC       PostApiAdminClientsJSONBodyClientType = "PUBLIC"
)

Defines values for PostApiAdminClientsJSONBodyClientType.

func (PostApiAdminClientsJSONBodyClientType) Valid

Valid indicates whether the value is a known member of the PostApiAdminClientsJSONBodyClientType enum.

type PostApiAdminClientsJSONRequestBody

type PostApiAdminClientsJSONRequestBody PostApiAdminClientsJSONBody

PostApiAdminClientsJSONRequestBody defines body for PostApiAdminClients for application/json ContentType.

type PostApiAdminClientsResponse

type PostApiAdminClientsResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostApiAdminClientsResponse

func ParsePostApiAdminClientsResponse(rsp *http.Response) (*PostApiAdminClientsResponse, error)

ParsePostApiAdminClientsResponse parses an HTTP response from a PostApiAdminClientsWithResponse call

func (PostApiAdminClientsResponse) ContentType

func (r PostApiAdminClientsResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiAdminClientsResponse) GetBody

func (r PostApiAdminClientsResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostApiAdminClientsResponse) Status

Status returns HTTPResponse.Status

func (PostApiAdminClientsResponse) StatusCode

func (r PostApiAdminClientsResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostApiAdminOrganizationsJSONBody

type PostApiAdminOrganizationsJSONBody struct {
	IssuerOverride *string `json:"issuer_override,omitempty"`
	LogoUri        *string `json:"logo_uri,omitempty"`
	Name           string  `json:"name"`
	PrimaryColor   *string `json:"primary_color,omitempty"`
	Slug           string  `json:"slug"`
}

PostApiAdminOrganizationsJSONBody defines parameters for PostApiAdminOrganizations.

type PostApiAdminOrganizationsJSONRequestBody

type PostApiAdminOrganizationsJSONRequestBody PostApiAdminOrganizationsJSONBody

PostApiAdminOrganizationsJSONRequestBody defines body for PostApiAdminOrganizations for application/json ContentType.

type PostApiAdminOrganizationsResponse

type PostApiAdminOrganizationsResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *struct {
		Id             *int    `json:"id,omitempty"`
		IssuerOverride *string `json:"issuer_override,omitempty"`
		LogoUri        *string `json:"logo_uri,omitempty"`
		Message        *string `json:"message,omitempty"`
		Name           *string `json:"name,omitempty"`
		PrimaryColor   *string `json:"primary_color,omitempty"`
		Slug           *string `json:"slug,omitempty"`
	}
	// JSON400 the response for an HTTP 400 `application/json` response
	JSON400 *ErrorEnvelope
}

func ParsePostApiAdminOrganizationsResponse

func ParsePostApiAdminOrganizationsResponse(rsp *http.Response) (*PostApiAdminOrganizationsResponse, error)

ParsePostApiAdminOrganizationsResponse parses an HTTP response from a PostApiAdminOrganizationsWithResponse call

func (PostApiAdminOrganizationsResponse) ContentType

func (r PostApiAdminOrganizationsResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiAdminOrganizationsResponse) GetBody

GetBody returns the raw response body bytes

func (PostApiAdminOrganizationsResponse) GetJSON200

func (r PostApiAdminOrganizationsResponse) GetJSON200() *struct {
	Id             *int    `json:"id,omitempty"`
	IssuerOverride *string `json:"issuer_override,omitempty"`
	LogoUri        *string `json:"logo_uri,omitempty"`
	Message        *string `json:"message,omitempty"`
	Name           *string `json:"name,omitempty"`
	PrimaryColor   *string `json:"primary_color,omitempty"`
	Slug           *string `json:"slug,omitempty"`
}

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostApiAdminOrganizationsResponse) GetJSON400

GetJSON400 returns the response for an HTTP 400 `application/json` response

func (PostApiAdminOrganizationsResponse) Status

Status returns HTTPResponse.Status

func (PostApiAdminOrganizationsResponse) StatusCode

func (r PostApiAdminOrganizationsResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostApiAdminRolesJSONBody

type PostApiAdminRolesJSONBody struct {
	Description *string `json:"description,omitempty"`
	Name        string  `json:"name"`
}

PostApiAdminRolesJSONBody defines parameters for PostApiAdminRoles.

type PostApiAdminRolesJSONRequestBody

type PostApiAdminRolesJSONRequestBody PostApiAdminRolesJSONBody

PostApiAdminRolesJSONRequestBody defines body for PostApiAdminRoles for application/json ContentType.

type PostApiAdminRolesResponse

type PostApiAdminRolesResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostApiAdminRolesResponse

func ParsePostApiAdminRolesResponse(rsp *http.Response) (*PostApiAdminRolesResponse, error)

ParsePostApiAdminRolesResponse parses an HTTP response from a PostApiAdminRolesWithResponse call

func (PostApiAdminRolesResponse) ContentType

func (r PostApiAdminRolesResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiAdminRolesResponse) GetBody

func (r PostApiAdminRolesResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostApiAdminRolesResponse) Status

func (r PostApiAdminRolesResponse) Status() string

Status returns HTTPResponse.Status

func (PostApiAdminRolesResponse) StatusCode

func (r PostApiAdminRolesResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostApiAdminScopesJSONBody

type PostApiAdminScopesJSONBody struct {
	Description       *string `json:"description,omitempty"`
	IsDefault         *bool   `json:"is_default,omitempty"`
	MappedRole        *string `json:"mapped_role,omitempty"`
	Name              string  `json:"name"`
	RequiresAdminRole *bool   `json:"requires_admin_role,omitempty"`
}

PostApiAdminScopesJSONBody defines parameters for PostApiAdminScopes.

type PostApiAdminScopesJSONRequestBody

type PostApiAdminScopesJSONRequestBody PostApiAdminScopesJSONBody

PostApiAdminScopesJSONRequestBody defines body for PostApiAdminScopes for application/json ContentType.

type PostApiAdminScopesResponse

type PostApiAdminScopesResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostApiAdminScopesResponse

func ParsePostApiAdminScopesResponse(rsp *http.Response) (*PostApiAdminScopesResponse, error)

ParsePostApiAdminScopesResponse parses an HTTP response from a PostApiAdminScopesWithResponse call

func (PostApiAdminScopesResponse) ContentType

func (r PostApiAdminScopesResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiAdminScopesResponse) GetBody

func (r PostApiAdminScopesResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostApiAdminScopesResponse) Status

Status returns HTTPResponse.Status

func (PostApiAdminScopesResponse) StatusCode

func (r PostApiAdminScopesResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostApiAdminTokensRevokeByClientResponse

type PostApiAdminTokensRevokeByClientResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostApiAdminTokensRevokeByClientResponse

func ParsePostApiAdminTokensRevokeByClientResponse(rsp *http.Response) (*PostApiAdminTokensRevokeByClientResponse, error)

ParsePostApiAdminTokensRevokeByClientResponse parses an HTTP response from a PostApiAdminTokensRevokeByClientWithResponse call

func (PostApiAdminTokensRevokeByClientResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiAdminTokensRevokeByClientResponse) GetBody

GetBody returns the raw response body bytes

func (PostApiAdminTokensRevokeByClientResponse) Status

Status returns HTTPResponse.Status

func (PostApiAdminTokensRevokeByClientResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PostApiAdminTokensRevokeByUserResponse

type PostApiAdminTokensRevokeByUserResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostApiAdminTokensRevokeByUserResponse

func ParsePostApiAdminTokensRevokeByUserResponse(rsp *http.Response) (*PostApiAdminTokensRevokeByUserResponse, error)

ParsePostApiAdminTokensRevokeByUserResponse parses an HTTP response from a PostApiAdminTokensRevokeByUserWithResponse call

func (PostApiAdminTokensRevokeByUserResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiAdminTokensRevokeByUserResponse) GetBody

GetBody returns the raw response body bytes

func (PostApiAdminTokensRevokeByUserResponse) Status

Status returns HTTPResponse.Status

func (PostApiAdminTokensRevokeByUserResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PostApiAdminUsersJSONBody

type PostApiAdminUsersJSONBody struct {
	Email         *string   `json:"email,omitempty"`
	EmailVerified *bool     `json:"email_verified,omitempty"`
	MfaEnabled    *bool     `json:"mfa_enabled,omitempty"`
	OrgId         *int      `json:"org_id,omitempty"`
	Password      string    `json:"password"`
	Roles         *[]string `json:"roles,omitempty"`
	Username      string    `json:"username"`
}

PostApiAdminUsersJSONBody defines parameters for PostApiAdminUsers.

type PostApiAdminUsersJSONRequestBody

type PostApiAdminUsersJSONRequestBody PostApiAdminUsersJSONBody

PostApiAdminUsersJSONRequestBody defines body for PostApiAdminUsers for application/json ContentType.

type PostApiAdminUsersResponse

type PostApiAdminUsersResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostApiAdminUsersResponse

func ParsePostApiAdminUsersResponse(rsp *http.Response) (*PostApiAdminUsersResponse, error)

ParsePostApiAdminUsersResponse parses an HTTP response from a PostApiAdminUsersWithResponse call

func (PostApiAdminUsersResponse) ContentType

func (r PostApiAdminUsersResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiAdminUsersResponse) GetBody

func (r PostApiAdminUsersResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostApiAdminUsersResponse) Status

func (r PostApiAdminUsersResponse) Status() string

Status returns HTTPResponse.Status

func (PostApiAdminUsersResponse) StatusCode

func (r PostApiAdminUsersResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostApiAdminUsersUserIdEnableResponse

type PostApiAdminUsersUserIdEnableResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostApiAdminUsersUserIdEnableResponse

func ParsePostApiAdminUsersUserIdEnableResponse(rsp *http.Response) (*PostApiAdminUsersUserIdEnableResponse, error)

ParsePostApiAdminUsersUserIdEnableResponse parses an HTTP response from a PostApiAdminUsersUserIdEnableWithResponse call

func (PostApiAdminUsersUserIdEnableResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiAdminUsersUserIdEnableResponse) GetBody

GetBody returns the raw response body bytes

func (PostApiAdminUsersUserIdEnableResponse) Status

Status returns HTTPResponse.Status

func (PostApiAdminUsersUserIdEnableResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PostApiGithubLoginParams

type PostApiGithubLoginParams struct {
	// Code Authorization code from GitHub OAuth2 callback (required)
	Code string `form:"code" json:"code"`
}

PostApiGithubLoginParams defines parameters for PostApiGithubLogin.

type PostApiGithubLoginResponse

type PostApiGithubLoginResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *SocialLoginTokenResponse
}

func ParsePostApiGithubLoginResponse

func ParsePostApiGithubLoginResponse(rsp *http.Response) (*PostApiGithubLoginResponse, error)

ParsePostApiGithubLoginResponse parses an HTTP response from a PostApiGithubLoginWithResponse call

func (PostApiGithubLoginResponse) ContentType

func (r PostApiGithubLoginResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiGithubLoginResponse) GetBody

func (r PostApiGithubLoginResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostApiGithubLoginResponse) GetJSON200

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostApiGithubLoginResponse) Status

Status returns HTTPResponse.Status

func (PostApiGithubLoginResponse) StatusCode

func (r PostApiGithubLoginResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostApiGoogleLoginParams

type PostApiGoogleLoginParams struct {
	// Code Authorization code from Google OAuth2 callback (required)
	Code string `form:"code" json:"code"`
}

PostApiGoogleLoginParams defines parameters for PostApiGoogleLogin.

type PostApiGoogleLoginResponse

type PostApiGoogleLoginResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *SocialLoginTokenResponse
}

func ParsePostApiGoogleLoginResponse

func ParsePostApiGoogleLoginResponse(rsp *http.Response) (*PostApiGoogleLoginResponse, error)

ParsePostApiGoogleLoginResponse parses an HTTP response from a PostApiGoogleLoginWithResponse call

func (PostApiGoogleLoginResponse) ContentType

func (r PostApiGoogleLoginResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiGoogleLoginResponse) GetBody

func (r PostApiGoogleLoginResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostApiGoogleLoginResponse) GetJSON200 added in v1.1.0

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostApiGoogleLoginResponse) Status

Status returns HTTPResponse.Status

func (PostApiGoogleLoginResponse) StatusCode

func (r PostApiGoogleLoginResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostApiMeMfaDisableJSONBody

type PostApiMeMfaDisableJSONBody = map[string]interface{}

PostApiMeMfaDisableJSONBody defines parameters for PostApiMeMfaDisable.

type PostApiMeMfaDisableJSONRequestBody

type PostApiMeMfaDisableJSONRequestBody = PostApiMeMfaDisableJSONBody

PostApiMeMfaDisableJSONRequestBody defines body for PostApiMeMfaDisable for application/json ContentType.

type PostApiMeMfaDisableResponse

type PostApiMeMfaDisableResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *MessageResponse
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *ErrorEnvelope
}

func ParsePostApiMeMfaDisableResponse

func ParsePostApiMeMfaDisableResponse(rsp *http.Response) (*PostApiMeMfaDisableResponse, error)

ParsePostApiMeMfaDisableResponse parses an HTTP response from a PostApiMeMfaDisableWithResponse call

func (PostApiMeMfaDisableResponse) ContentType

func (r PostApiMeMfaDisableResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiMeMfaDisableResponse) GetBody

func (r PostApiMeMfaDisableResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostApiMeMfaDisableResponse) GetJSON200

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostApiMeMfaDisableResponse) GetJSON401

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (PostApiMeMfaDisableResponse) Status

Status returns HTTPResponse.Status

func (PostApiMeMfaDisableResponse) StatusCode

func (r PostApiMeMfaDisableResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostApiMeMfaSetupJSONBody

type PostApiMeMfaSetupJSONBody = map[string]interface{}

PostApiMeMfaSetupJSONBody defines parameters for PostApiMeMfaSetup.

type PostApiMeMfaSetupJSONRequestBody

type PostApiMeMfaSetupJSONRequestBody = PostApiMeMfaSetupJSONBody

PostApiMeMfaSetupJSONRequestBody defines body for PostApiMeMfaSetup for application/json ContentType.

type PostApiMeMfaSetupResponse

type PostApiMeMfaSetupResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *struct {
		Message *string `json:"message,omitempty"`

		// OtpauthUri otpauth:// provisioning URI (encode as QR for authenticators).
		OtpauthUri string `json:"otpauth_uri"`

		// Secret Base32 TOTP shared secret.
		Secret string `json:"secret"`
	}
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *ErrorEnvelope
}

func ParsePostApiMeMfaSetupResponse

func ParsePostApiMeMfaSetupResponse(rsp *http.Response) (*PostApiMeMfaSetupResponse, error)

ParsePostApiMeMfaSetupResponse parses an HTTP response from a PostApiMeMfaSetupWithResponse call

func (PostApiMeMfaSetupResponse) ContentType

func (r PostApiMeMfaSetupResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiMeMfaSetupResponse) GetBody

func (r PostApiMeMfaSetupResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostApiMeMfaSetupResponse) GetJSON200

func (r PostApiMeMfaSetupResponse) GetJSON200() *struct {
	Message *string `json:"message,omitempty"`

	// OtpauthUri otpauth:// provisioning URI (encode as QR for authenticators).
	OtpauthUri string `json:"otpauth_uri"`

	// Secret Base32 TOTP shared secret.
	Secret string `json:"secret"`
}

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostApiMeMfaSetupResponse) GetJSON401

func (r PostApiMeMfaSetupResponse) GetJSON401() *ErrorEnvelope

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (PostApiMeMfaSetupResponse) Status

func (r PostApiMeMfaSetupResponse) Status() string

Status returns HTTPResponse.Status

func (PostApiMeMfaSetupResponse) StatusCode

func (r PostApiMeMfaSetupResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostApiMeMfaVerifyFormdataBody

type PostApiMeMfaVerifyFormdataBody struct {
	Code string `form:"code" json:"code"`
}

PostApiMeMfaVerifyFormdataBody defines parameters for PostApiMeMfaVerify.

type PostApiMeMfaVerifyFormdataRequestBody

type PostApiMeMfaVerifyFormdataRequestBody PostApiMeMfaVerifyFormdataBody

PostApiMeMfaVerifyFormdataRequestBody defines body for PostApiMeMfaVerify for application/x-www-form-urlencoded ContentType.

type PostApiMeMfaVerifyJSONBody

type PostApiMeMfaVerifyJSONBody struct {
	// Code 6-digit TOTP code from the user's authenticator.
	Code string `json:"code"`
}

PostApiMeMfaVerifyJSONBody defines parameters for PostApiMeMfaVerify.

type PostApiMeMfaVerifyJSONRequestBody

type PostApiMeMfaVerifyJSONRequestBody PostApiMeMfaVerifyJSONBody

PostApiMeMfaVerifyJSONRequestBody defines body for PostApiMeMfaVerify for application/json ContentType.

type PostApiMeMfaVerifyResponse

type PostApiMeMfaVerifyResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *struct {
		// BackupCodes 10 single-use backup codes.
		BackupCodes *[]string `json:"backup_codes,omitempty"`
		Message     *string   `json:"message,omitempty"`
		Warning     *string   `json:"warning,omitempty"`
	}
	// JSON400 the response for an HTTP 400 `application/json` response
	JSON400 *ErrorEnvelope
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *ErrorEnvelope
}

func ParsePostApiMeMfaVerifyResponse

func ParsePostApiMeMfaVerifyResponse(rsp *http.Response) (*PostApiMeMfaVerifyResponse, error)

ParsePostApiMeMfaVerifyResponse parses an HTTP response from a PostApiMeMfaVerifyWithResponse call

func (PostApiMeMfaVerifyResponse) ContentType

func (r PostApiMeMfaVerifyResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiMeMfaVerifyResponse) GetBody

func (r PostApiMeMfaVerifyResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostApiMeMfaVerifyResponse) GetJSON200

func (r PostApiMeMfaVerifyResponse) GetJSON200() *struct {
	// BackupCodes 10 single-use backup codes.
	BackupCodes *[]string `json:"backup_codes,omitempty"`
	Message     *string   `json:"message,omitempty"`
	Warning     *string   `json:"warning,omitempty"`
}

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostApiMeMfaVerifyResponse) GetJSON400

func (r PostApiMeMfaVerifyResponse) GetJSON400() *ErrorEnvelope

GetJSON400 returns the response for an HTTP 400 `application/json` response

func (PostApiMeMfaVerifyResponse) GetJSON401

func (r PostApiMeMfaVerifyResponse) GetJSON401() *ErrorEnvelope

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (PostApiMeMfaVerifyResponse) Status

Status returns HTTPResponse.Status

func (PostApiMeMfaVerifyResponse) StatusCode

func (r PostApiMeMfaVerifyResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostApiMeSocialLinksProviderAuthorizeParamsProvider added in v1.0.1

type PostApiMeSocialLinksProviderAuthorizeParamsProvider string

PostApiMeSocialLinksProviderAuthorizeParamsProvider defines parameters for PostApiMeSocialLinksProviderAuthorize.

const (
	PostApiMeSocialLinksProviderAuthorizeParamsProviderGithub PostApiMeSocialLinksProviderAuthorizeParamsProvider = "github"
	PostApiMeSocialLinksProviderAuthorizeParamsProviderGoogle PostApiMeSocialLinksProviderAuthorizeParamsProvider = "google"
	PostApiMeSocialLinksProviderAuthorizeParamsProviderWechat PostApiMeSocialLinksProviderAuthorizeParamsProvider = "wechat"
)

Defines values for PostApiMeSocialLinksProviderAuthorizeParamsProvider.

func (PostApiMeSocialLinksProviderAuthorizeParamsProvider) Valid added in v1.0.1

Valid indicates whether the value is a known member of the PostApiMeSocialLinksProviderAuthorizeParamsProvider enum.

type PostApiMeSocialLinksProviderAuthorizeResponse added in v1.0.1

type PostApiMeSocialLinksProviderAuthorizeResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *struct {
		AuthorizeUrl *string `json:"authorize_url,omitempty"`
		Provider     *string `json:"provider,omitempty"`
		State        *string `json:"state,omitempty"`
	}
	// JSON400 the response for an HTTP 400 `application/json` response
	JSON400 *ErrorEnvelope
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *ErrorEnvelope
	// JSON500 the response for an HTTP 500 `application/json` response
	JSON500 *ErrorEnvelope
}

func ParsePostApiMeSocialLinksProviderAuthorizeResponse added in v1.0.1

func ParsePostApiMeSocialLinksProviderAuthorizeResponse(rsp *http.Response) (*PostApiMeSocialLinksProviderAuthorizeResponse, error)

ParsePostApiMeSocialLinksProviderAuthorizeResponse parses an HTTP response from a PostApiMeSocialLinksProviderAuthorizeWithResponse call

func (PostApiMeSocialLinksProviderAuthorizeResponse) ContentType added in v1.0.1

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiMeSocialLinksProviderAuthorizeResponse) GetBody added in v1.0.1

GetBody returns the raw response body bytes

func (PostApiMeSocialLinksProviderAuthorizeResponse) GetJSON200 added in v1.0.1

func (r PostApiMeSocialLinksProviderAuthorizeResponse) GetJSON200() *struct {
	AuthorizeUrl *string `json:"authorize_url,omitempty"`
	Provider     *string `json:"provider,omitempty"`
	State        *string `json:"state,omitempty"`
}

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostApiMeSocialLinksProviderAuthorizeResponse) GetJSON400 added in v1.0.1

GetJSON400 returns the response for an HTTP 400 `application/json` response

func (PostApiMeSocialLinksProviderAuthorizeResponse) GetJSON401 added in v1.0.1

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (PostApiMeSocialLinksProviderAuthorizeResponse) GetJSON500 added in v1.0.1

GetJSON500 returns the response for an HTTP 500 `application/json` response

func (PostApiMeSocialLinksProviderAuthorizeResponse) Status added in v1.0.1

Status returns HTTPResponse.Status

func (PostApiMeSocialLinksProviderAuthorizeResponse) StatusCode added in v1.0.1

StatusCode returns HTTPResponse.StatusCode

type PostApiMeSocialLinksProviderJSONBody

type PostApiMeSocialLinksProviderJSONBody struct {
	// Code Authorization code from the provider's OAuth2 callback.
	Code string `json:"code"`

	// State The one-time state token from the authorize step (single use, bound to this user and provider). Unknown/expired/replayed or foreign-bound states are rejected with 400 before any provider call (#71).
	State string `json:"state"`
}

PostApiMeSocialLinksProviderJSONBody defines parameters for PostApiMeSocialLinksProvider.

type PostApiMeSocialLinksProviderJSONRequestBody

type PostApiMeSocialLinksProviderJSONRequestBody PostApiMeSocialLinksProviderJSONBody

PostApiMeSocialLinksProviderJSONRequestBody defines body for PostApiMeSocialLinksProvider for application/json ContentType.

type PostApiMeSocialLinksProviderParamsProvider

type PostApiMeSocialLinksProviderParamsProvider string

PostApiMeSocialLinksProviderParamsProvider defines parameters for PostApiMeSocialLinksProvider.

const (
	PostApiMeSocialLinksProviderParamsProviderGithub PostApiMeSocialLinksProviderParamsProvider = "github"
	PostApiMeSocialLinksProviderParamsProviderGoogle PostApiMeSocialLinksProviderParamsProvider = "google"
	PostApiMeSocialLinksProviderParamsProviderWechat PostApiMeSocialLinksProviderParamsProvider = "wechat"
)

Defines values for PostApiMeSocialLinksProviderParamsProvider.

func (PostApiMeSocialLinksProviderParamsProvider) Valid

Valid indicates whether the value is a known member of the PostApiMeSocialLinksProviderParamsProvider enum.

type PostApiMeSocialLinksProviderResponse

type PostApiMeSocialLinksProviderResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *SocialLinkResult
	// JSON400 the response for an HTTP 400 `application/json` response
	JSON400 *ErrorEnvelope
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *ErrorEnvelope
	// JSON404 the response for an HTTP 404 `application/json` response
	JSON404 *ErrorEnvelope
	// JSON409 the response for an HTTP 409 `application/json` response
	JSON409 *ErrorEnvelope
	// JSON500 the response for an HTTP 500 `application/json` response
	JSON500 *ErrorEnvelope
	// JSON502 the response for an HTTP 502 `application/json` response
	JSON502 *ErrorEnvelope
}

func ParsePostApiMeSocialLinksProviderResponse

func ParsePostApiMeSocialLinksProviderResponse(rsp *http.Response) (*PostApiMeSocialLinksProviderResponse, error)

ParsePostApiMeSocialLinksProviderResponse parses an HTTP response from a PostApiMeSocialLinksProviderWithResponse call

func (PostApiMeSocialLinksProviderResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiMeSocialLinksProviderResponse) GetBody

GetBody returns the raw response body bytes

func (PostApiMeSocialLinksProviderResponse) GetJSON200

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostApiMeSocialLinksProviderResponse) GetJSON400

GetJSON400 returns the response for an HTTP 400 `application/json` response

func (PostApiMeSocialLinksProviderResponse) GetJSON401

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (PostApiMeSocialLinksProviderResponse) GetJSON404

GetJSON404 returns the response for an HTTP 404 `application/json` response

func (PostApiMeSocialLinksProviderResponse) GetJSON409

GetJSON409 returns the response for an HTTP 409 `application/json` response

func (PostApiMeSocialLinksProviderResponse) GetJSON500

GetJSON500 returns the response for an HTTP 500 `application/json` response

func (PostApiMeSocialLinksProviderResponse) GetJSON502

GetJSON502 returns the response for an HTTP 502 `application/json` response

func (PostApiMeSocialLinksProviderResponse) Status

Status returns HTTPResponse.Status

func (PostApiMeSocialLinksProviderResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PostApiMeWebauthnRegisterBeginResponse

type PostApiMeWebauthnRegisterBeginResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostApiMeWebauthnRegisterBeginResponse

func ParsePostApiMeWebauthnRegisterBeginResponse(rsp *http.Response) (*PostApiMeWebauthnRegisterBeginResponse, error)

ParsePostApiMeWebauthnRegisterBeginResponse parses an HTTP response from a PostApiMeWebauthnRegisterBeginWithResponse call

func (PostApiMeWebauthnRegisterBeginResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiMeWebauthnRegisterBeginResponse) GetBody

GetBody returns the raw response body bytes

func (PostApiMeWebauthnRegisterBeginResponse) Status

Status returns HTTPResponse.Status

func (PostApiMeWebauthnRegisterBeginResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PostApiMeWebauthnRegisterFinishJSONRequestBody added in v1.1.0

type PostApiMeWebauthnRegisterFinishJSONRequestBody = WebAuthnRegistrationCredential

PostApiMeWebauthnRegisterFinishJSONRequestBody defines body for PostApiMeWebauthnRegisterFinish for application/json ContentType.

type PostApiMeWebauthnRegisterFinishResponse

type PostApiMeWebauthnRegisterFinishResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostApiMeWebauthnRegisterFinishResponse

func ParsePostApiMeWebauthnRegisterFinishResponse(rsp *http.Response) (*PostApiMeWebauthnRegisterFinishResponse, error)

ParsePostApiMeWebauthnRegisterFinishResponse parses an HTTP response from a PostApiMeWebauthnRegisterFinishWithResponse call

func (PostApiMeWebauthnRegisterFinishResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiMeWebauthnRegisterFinishResponse) GetBody

GetBody returns the raw response body bytes

func (PostApiMeWebauthnRegisterFinishResponse) Status

Status returns HTTPResponse.Status

func (PostApiMeWebauthnRegisterFinishResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PostApiPasswordResetConfirmResponse

type PostApiPasswordResetConfirmResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostApiPasswordResetConfirmResponse

func ParsePostApiPasswordResetConfirmResponse(rsp *http.Response) (*PostApiPasswordResetConfirmResponse, error)

ParsePostApiPasswordResetConfirmResponse parses an HTTP response from a PostApiPasswordResetConfirmWithResponse call

func (PostApiPasswordResetConfirmResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiPasswordResetConfirmResponse) GetBody

GetBody returns the raw response body bytes

func (PostApiPasswordResetConfirmResponse) Status

Status returns HTTPResponse.Status

func (PostApiPasswordResetConfirmResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PostApiPasswordResetRequestResponse

type PostApiPasswordResetRequestResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostApiPasswordResetRequestResponse

func ParsePostApiPasswordResetRequestResponse(rsp *http.Response) (*PostApiPasswordResetRequestResponse, error)

ParsePostApiPasswordResetRequestResponse parses an HTTP response from a PostApiPasswordResetRequestWithResponse call

func (PostApiPasswordResetRequestResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiPasswordResetRequestResponse) GetBody

GetBody returns the raw response body bytes

func (PostApiPasswordResetRequestResponse) Status

Status returns HTTPResponse.Status

func (PostApiPasswordResetRequestResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PostApiRegisterParams

type PostApiRegisterParams struct {
	// Username Desired username (required)
	Username string `form:"username" json:"username"`

	// Password Strong password (required)
	Password string `form:"password" json:"password"`

	// Email Email address (optional)
	Email *string `form:"email,omitempty" json:"email,omitempty"`
}

PostApiRegisterParams defines parameters for PostApiRegister.

type PostApiRegisterResponse

type PostApiRegisterResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostApiRegisterResponse

func ParsePostApiRegisterResponse(rsp *http.Response) (*PostApiRegisterResponse, error)

ParsePostApiRegisterResponse parses an HTTP response from a PostApiRegisterWithResponse call

func (PostApiRegisterResponse) ContentType

func (r PostApiRegisterResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiRegisterResponse) GetBody

func (r PostApiRegisterResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostApiRegisterResponse) Status

func (r PostApiRegisterResponse) Status() string

Status returns HTTPResponse.Status

func (PostApiRegisterResponse) StatusCode

func (r PostApiRegisterResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostApiVerifyEmailResendResponse

type PostApiVerifyEmailResendResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostApiVerifyEmailResendResponse

func ParsePostApiVerifyEmailResendResponse(rsp *http.Response) (*PostApiVerifyEmailResendResponse, error)

ParsePostApiVerifyEmailResendResponse parses an HTTP response from a PostApiVerifyEmailResendWithResponse call

func (PostApiVerifyEmailResendResponse) ContentType

func (r PostApiVerifyEmailResendResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiVerifyEmailResendResponse) GetBody

func (r PostApiVerifyEmailResendResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostApiVerifyEmailResendResponse) Status

Status returns HTTPResponse.Status

func (PostApiVerifyEmailResendResponse) StatusCode

func (r PostApiVerifyEmailResendResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostApiWechatLoginParams

type PostApiWechatLoginParams struct {
	// Code Authorization code from WeChat OAuth2 callback (required)
	Code string `form:"code" json:"code"`
}

PostApiWechatLoginParams defines parameters for PostApiWechatLogin.

type PostApiWechatLoginResponse

type PostApiWechatLoginResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *SocialLoginTokenResponse
}

func ParsePostApiWechatLoginResponse

func ParsePostApiWechatLoginResponse(rsp *http.Response) (*PostApiWechatLoginResponse, error)

ParsePostApiWechatLoginResponse parses an HTTP response from a PostApiWechatLoginWithResponse call

func (PostApiWechatLoginResponse) ContentType

func (r PostApiWechatLoginResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostApiWechatLoginResponse) GetBody

func (r PostApiWechatLoginResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostApiWechatLoginResponse) GetJSON200 added in v1.1.0

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostApiWechatLoginResponse) Status

Status returns HTTPResponse.Status

func (PostApiWechatLoginResponse) StatusCode

func (r PostApiWechatLoginResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostOauth2ConsentParams

type PostOauth2ConsentParams struct {
	// ClientId Client identifier (required)
	ClientId string `form:"client_id" json:"client_id"`

	// UserId User identifier (required)
	UserId string `form:"user_id" json:"user_id"`

	// Scope Requested scope to consent (required)
	Scope string `form:"scope" json:"scope"`

	// RedirectUri Redirect URI (required)
	RedirectUri string `form:"redirect_uri" json:"redirect_uri"`

	// State Opaque value to maintain state
	State *string `form:"state,omitempty" json:"state,omitempty"`

	// Action Action to perform: 'approve' or 'deny' (required)
	Action PostOauth2ConsentParamsAction `form:"action" json:"action"`

	// ConsentCsrf Server-minted one-shot CSRF nonce from the authorize->consent redirect (required; consumed on use)
	ConsentCsrf string `form:"consent_csrf" json:"consent_csrf"`
}

PostOauth2ConsentParams defines parameters for PostOauth2Consent.

type PostOauth2ConsentParamsAction

type PostOauth2ConsentParamsAction string

PostOauth2ConsentParamsAction defines parameters for PostOauth2Consent.

const (
	Approve PostOauth2ConsentParamsAction = "approve"
	Deny    PostOauth2ConsentParamsAction = "deny"
)

Defines values for PostOauth2ConsentParamsAction.

func (PostOauth2ConsentParamsAction) Valid

Valid indicates whether the value is a known member of the PostOauth2ConsentParamsAction enum.

type PostOauth2ConsentResponse

type PostOauth2ConsentResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostOauth2ConsentResponse

func ParsePostOauth2ConsentResponse(rsp *http.Response) (*PostOauth2ConsentResponse, error)

ParsePostOauth2ConsentResponse parses an HTTP response from a PostOauth2ConsentWithResponse call

func (PostOauth2ConsentResponse) ContentType

func (r PostOauth2ConsentResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostOauth2ConsentResponse) GetBody

func (r PostOauth2ConsentResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostOauth2ConsentResponse) Status

func (r PostOauth2ConsentResponse) Status() string

Status returns HTTPResponse.Status

func (PostOauth2ConsentResponse) StatusCode

func (r PostOauth2ConsentResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostOauth2DeviceApproveFormdataBody

type PostOauth2DeviceApproveFormdataBody struct {
	// UserCode The user_code shown to the user by the device.
	UserCode string `form:"user_code" json:"user_code"`

	// UserId Approving user's identifier.
	UserId string `form:"user_id" json:"user_id"`
}

PostOauth2DeviceApproveFormdataBody defines parameters for PostOauth2DeviceApprove.

type PostOauth2DeviceApproveFormdataRequestBody

type PostOauth2DeviceApproveFormdataRequestBody PostOauth2DeviceApproveFormdataBody

PostOauth2DeviceApproveFormdataRequestBody defines body for PostOauth2DeviceApprove for application/x-www-form-urlencoded ContentType.

type PostOauth2DeviceApproveResponse

type PostOauth2DeviceApproveResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *struct {
		// Status Example: approved
		Status   *string `json:"status,omitempty"`
		UserCode *string `json:"user_code,omitempty"`
	}
	// JSON400 the response for an HTTP 400 `application/json` response
	JSON400 *ErrorEnvelope
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *ErrorEnvelope
	// JSON403 the response for an HTTP 403 `application/json` response
	JSON403 *ErrorEnvelope
}

func ParsePostOauth2DeviceApproveResponse

func ParsePostOauth2DeviceApproveResponse(rsp *http.Response) (*PostOauth2DeviceApproveResponse, error)

ParsePostOauth2DeviceApproveResponse parses an HTTP response from a PostOauth2DeviceApproveWithResponse call

func (PostOauth2DeviceApproveResponse) ContentType

func (r PostOauth2DeviceApproveResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostOauth2DeviceApproveResponse) GetBody

func (r PostOauth2DeviceApproveResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostOauth2DeviceApproveResponse) GetJSON200

func (r PostOauth2DeviceApproveResponse) GetJSON200() *struct {
	// Status Example: approved
	Status   *string `json:"status,omitempty"`
	UserCode *string `json:"user_code,omitempty"`
}

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostOauth2DeviceApproveResponse) GetJSON400

GetJSON400 returns the response for an HTTP 400 `application/json` response

func (PostOauth2DeviceApproveResponse) GetJSON401

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (PostOauth2DeviceApproveResponse) GetJSON403

GetJSON403 returns the response for an HTTP 403 `application/json` response

func (PostOauth2DeviceApproveResponse) Status

Status returns HTTPResponse.Status

func (PostOauth2DeviceApproveResponse) StatusCode

func (r PostOauth2DeviceApproveResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostOauth2DeviceAuthorizationFormdataBody

type PostOauth2DeviceAuthorizationFormdataBody struct {
	ClientId string `form:"client_id" json:"client_id"`

	// ClientSecret Required for CONFIDENTIAL clients (send via HTTP Basic when possible).
	ClientSecret *string `form:"client_secret,omitempty" json:"client_secret,omitempty"`

	// Scope Space-separated requested scopes (optional).
	Scope *string `form:"scope,omitempty" json:"scope,omitempty"`
}

PostOauth2DeviceAuthorizationFormdataBody defines parameters for PostOauth2DeviceAuthorization.

type PostOauth2DeviceAuthorizationFormdataRequestBody

type PostOauth2DeviceAuthorizationFormdataRequestBody PostOauth2DeviceAuthorizationFormdataBody

PostOauth2DeviceAuthorizationFormdataRequestBody defines body for PostOauth2DeviceAuthorization for application/x-www-form-urlencoded ContentType.

type PostOauth2DeviceAuthorizationResponse

type PostOauth2DeviceAuthorizationResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *DeviceAuthorizationResponse
	// JSON400 the response for an HTTP 400 `application/json` response
	JSON400 *OAuth2Error
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *OAuth2Error
	// JSON500 the response for an HTTP 500 `application/json` response
	JSON500 *OAuth2Error
}

func ParsePostOauth2DeviceAuthorizationResponse

func ParsePostOauth2DeviceAuthorizationResponse(rsp *http.Response) (*PostOauth2DeviceAuthorizationResponse, error)

ParsePostOauth2DeviceAuthorizationResponse parses an HTTP response from a PostOauth2DeviceAuthorizationWithResponse call

func (PostOauth2DeviceAuthorizationResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostOauth2DeviceAuthorizationResponse) GetBody

GetBody returns the raw response body bytes

func (PostOauth2DeviceAuthorizationResponse) GetJSON200

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostOauth2DeviceAuthorizationResponse) GetJSON400

GetJSON400 returns the response for an HTTP 400 `application/json` response

func (PostOauth2DeviceAuthorizationResponse) GetJSON401

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (PostOauth2DeviceAuthorizationResponse) GetJSON500

GetJSON500 returns the response for an HTTP 500 `application/json` response

func (PostOauth2DeviceAuthorizationResponse) Status

Status returns HTTPResponse.Status

func (PostOauth2DeviceAuthorizationResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PostOauth2EndSessionParams

type PostOauth2EndSessionParams struct {
	// IdTokenHint Previously issued id_token hint (signature-verified,
	IdTokenHint *string `form:"id_token_hint,omitempty" json:"id_token_hint,omitempty"`

	// PostLogoutRedirectUri Registered post-logout redirect URI.
	PostLogoutRedirectUri *string `form:"post_logout_redirect_uri,omitempty" json:"post_logout_redirect_uri,omitempty"`

	// State Opaque state value.
	State *string `form:"state,omitempty" json:"state,omitempty"`
}

PostOauth2EndSessionParams defines parameters for PostOauth2EndSession.

type PostOauth2EndSessionResponse

type PostOauth2EndSessionResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *MessageResponse
	// JSON400 the response for an HTTP 400 `application/json` response
	JSON400 *ErrorEnvelope
}

func ParsePostOauth2EndSessionResponse

func ParsePostOauth2EndSessionResponse(rsp *http.Response) (*PostOauth2EndSessionResponse, error)

ParsePostOauth2EndSessionResponse parses an HTTP response from a PostOauth2EndSessionWithResponse call

func (PostOauth2EndSessionResponse) ContentType

func (r PostOauth2EndSessionResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostOauth2EndSessionResponse) GetBody

func (r PostOauth2EndSessionResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostOauth2EndSessionResponse) GetJSON200

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostOauth2EndSessionResponse) GetJSON400

GetJSON400 returns the response for an HTTP 400 `application/json` response

func (PostOauth2EndSessionResponse) Status

Status returns HTTPResponse.Status

func (PostOauth2EndSessionResponse) StatusCode

func (r PostOauth2EndSessionResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostOauth2IntrospectFormdataBody

type PostOauth2IntrospectFormdataBody struct {
	// ClientId Client identifier (alternative to HTTP Basic authentication).
	ClientId *string `form:"client_id,omitempty" json:"client_id,omitempty"`

	// ClientSecret Client secret (alternative to HTTP Basic authentication).
	ClientSecret *string `form:"client_secret,omitempty" json:"client_secret,omitempty"`

	// Token The string value of the token (required).
	Token string `form:"token" json:"token"`

	// TokenTypeHint Optional hint: access_token or refresh_token (accepted, currently ignored).
	TokenTypeHint *string `form:"token_type_hint,omitempty" json:"token_type_hint,omitempty"`
}

PostOauth2IntrospectFormdataBody defines parameters for PostOauth2Introspect.

type PostOauth2IntrospectFormdataRequestBody

type PostOauth2IntrospectFormdataRequestBody PostOauth2IntrospectFormdataBody

PostOauth2IntrospectFormdataRequestBody defines body for PostOauth2Introspect for application/x-www-form-urlencoded ContentType.

type PostOauth2IntrospectResponse

type PostOauth2IntrospectResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *IntrospectionResponse
	// JSON400 the response for an HTTP 400 `application/json` response
	JSON400 *OAuth2Error
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *OAuth2Error
	// Headers200 the parsed response headers for an HTTP 200 response
	Headers200 *PostOauth2IntrospectResponse200Headers
	// Headers401 the parsed response headers for an HTTP 401 response
	Headers401 *PostOauth2IntrospectResponse401Headers
	// Headers429 the parsed response headers for an HTTP 429 response
	Headers429 *PostOauth2IntrospectResponse429Headers
}

func ParsePostOauth2IntrospectResponse

func ParsePostOauth2IntrospectResponse(rsp *http.Response) (*PostOauth2IntrospectResponse, error)

ParsePostOauth2IntrospectResponse parses an HTTP response from a PostOauth2IntrospectWithResponse call

func (PostOauth2IntrospectResponse) ContentType

func (r PostOauth2IntrospectResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostOauth2IntrospectResponse) GetBody

func (r PostOauth2IntrospectResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostOauth2IntrospectResponse) GetJSON200

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostOauth2IntrospectResponse) GetJSON400

func (r PostOauth2IntrospectResponse) GetJSON400() *OAuth2Error

GetJSON400 returns the response for an HTTP 400 `application/json` response

func (PostOauth2IntrospectResponse) GetJSON401

func (r PostOauth2IntrospectResponse) GetJSON401() *OAuth2Error

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (PostOauth2IntrospectResponse) Status

Status returns HTTPResponse.Status

func (PostOauth2IntrospectResponse) StatusCode

func (r PostOauth2IntrospectResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostOauth2IntrospectResponse200Headers

type PostOauth2IntrospectResponse200Headers struct {
	CacheControl *string
}

PostOauth2IntrospectResponse200Headers the declared response headers of an HTTP 200 response for PostOauth2Introspect

type PostOauth2IntrospectResponse401Headers

type PostOauth2IntrospectResponse401Headers struct {
	WWWAuthenticate *string
}

PostOauth2IntrospectResponse401Headers the declared response headers of an HTTP 401 response for PostOauth2Introspect

type PostOauth2IntrospectResponse429Headers

type PostOauth2IntrospectResponse429Headers struct {
	RetryAfter *int
}

PostOauth2IntrospectResponse429Headers the declared response headers of an HTTP 429 response for PostOauth2Introspect

type PostOauth2Login200JSONResponseBody

type PostOauth2Login200JSONResponseBody struct {
	// contains filtered or unexported fields
}

PostOauth2Login200JSONResponseBody defines parameters for PostOauth2Login.

func (PostOauth2Login200JSONResponseBody) AsLoginSuccessResponse

func (t PostOauth2Login200JSONResponseBody) AsLoginSuccessResponse() (LoginSuccessResponse, error)

AsLoginSuccessResponse returns the union data inside the PostOauth2Login200JSONResponseBody as a LoginSuccessResponse

func (PostOauth2Login200JSONResponseBody) AsMfaRequiredResponse

func (t PostOauth2Login200JSONResponseBody) AsMfaRequiredResponse() (MfaRequiredResponse, error)

AsMfaRequiredResponse returns the union data inside the PostOauth2Login200JSONResponseBody as a MfaRequiredResponse

func (*PostOauth2Login200JSONResponseBody) FromLoginSuccessResponse

func (t *PostOauth2Login200JSONResponseBody) FromLoginSuccessResponse(v LoginSuccessResponse) error

FromLoginSuccessResponse overwrites any union data inside the PostOauth2Login200JSONResponseBody as the provided LoginSuccessResponse

func (*PostOauth2Login200JSONResponseBody) FromMfaRequiredResponse

func (t *PostOauth2Login200JSONResponseBody) FromMfaRequiredResponse(v MfaRequiredResponse) error

FromMfaRequiredResponse overwrites any union data inside the PostOauth2Login200JSONResponseBody as the provided MfaRequiredResponse

func (PostOauth2Login200JSONResponseBody) MarshalJSON

func (t PostOauth2Login200JSONResponseBody) MarshalJSON() ([]byte, error)

func (*PostOauth2Login200JSONResponseBody) MergeLoginSuccessResponse

func (t *PostOauth2Login200JSONResponseBody) MergeLoginSuccessResponse(v LoginSuccessResponse) error

MergeLoginSuccessResponse performs a merge with any union data inside the PostOauth2Login200JSONResponseBody, using the provided LoginSuccessResponse

func (*PostOauth2Login200JSONResponseBody) MergeMfaRequiredResponse

func (t *PostOauth2Login200JSONResponseBody) MergeMfaRequiredResponse(v MfaRequiredResponse) error

MergeMfaRequiredResponse performs a merge with any union data inside the PostOauth2Login200JSONResponseBody, using the provided MfaRequiredResponse

func (*PostOauth2Login200JSONResponseBody) UnmarshalJSON

func (t *PostOauth2Login200JSONResponseBody) UnmarshalJSON(b []byte) error

type PostOauth2LoginFormdataRequestBody

type PostOauth2LoginFormdataRequestBody = LoginRequest

PostOauth2LoginFormdataRequestBody defines body for PostOauth2Login for application/x-www-form-urlencoded ContentType.

type PostOauth2LoginJSONRequestBody

type PostOauth2LoginJSONRequestBody = LoginRequest

PostOauth2LoginJSONRequestBody defines body for PostOauth2Login for application/json ContentType.

type PostOauth2LoginResponse

type PostOauth2LoginResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *PostOauth2Login200JSONResponseBody
	// JSON400 the response for an HTTP 400 `application/json` response
	JSON400 *ErrorEnvelope
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *ErrorEnvelope
	// JSON403 the response for an HTTP 403 `application/json` response
	JSON403 *ErrorEnvelope
}

func ParsePostOauth2LoginResponse

func ParsePostOauth2LoginResponse(rsp *http.Response) (*PostOauth2LoginResponse, error)

ParsePostOauth2LoginResponse parses an HTTP response from a PostOauth2LoginWithResponse call

func (PostOauth2LoginResponse) ContentType

func (r PostOauth2LoginResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostOauth2LoginResponse) GetBody

func (r PostOauth2LoginResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostOauth2LoginResponse) GetJSON200

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostOauth2LoginResponse) GetJSON400

func (r PostOauth2LoginResponse) GetJSON400() *ErrorEnvelope

GetJSON400 returns the response for an HTTP 400 `application/json` response

func (PostOauth2LoginResponse) GetJSON401

func (r PostOauth2LoginResponse) GetJSON401() *ErrorEnvelope

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (PostOauth2LoginResponse) GetJSON403

func (r PostOauth2LoginResponse) GetJSON403() *ErrorEnvelope

GetJSON403 returns the response for an HTTP 403 `application/json` response

func (PostOauth2LoginResponse) Status

func (r PostOauth2LoginResponse) Status() string

Status returns HTTPResponse.Status

func (PostOauth2LoginResponse) StatusCode

func (r PostOauth2LoginResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostOauth2LogoutJSONBody

type PostOauth2LogoutJSONBody = map[string]interface{}

PostOauth2LogoutJSONBody defines parameters for PostOauth2Logout.

type PostOauth2LogoutJSONRequestBody

type PostOauth2LogoutJSONRequestBody = PostOauth2LogoutJSONBody

PostOauth2LogoutJSONRequestBody defines body for PostOauth2Logout for application/json ContentType.

type PostOauth2LogoutResponse

type PostOauth2LogoutResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *MessageResponse
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *ErrorEnvelope
}

func ParsePostOauth2LogoutResponse

func ParsePostOauth2LogoutResponse(rsp *http.Response) (*PostOauth2LogoutResponse, error)

ParsePostOauth2LogoutResponse parses an HTTP response from a PostOauth2LogoutWithResponse call

func (PostOauth2LogoutResponse) ContentType

func (r PostOauth2LogoutResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostOauth2LogoutResponse) GetBody

func (r PostOauth2LogoutResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostOauth2LogoutResponse) GetJSON200

func (r PostOauth2LogoutResponse) GetJSON200() *MessageResponse

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostOauth2LogoutResponse) GetJSON401

func (r PostOauth2LogoutResponse) GetJSON401() *ErrorEnvelope

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (PostOauth2LogoutResponse) Status

func (r PostOauth2LogoutResponse) Status() string

Status returns HTTPResponse.Status

func (PostOauth2LogoutResponse) StatusCode

func (r PostOauth2LogoutResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostOauth2MfaVerifyFormdataRequestBody

type PostOauth2MfaVerifyFormdataRequestBody = MfaVerifyRequest

PostOauth2MfaVerifyFormdataRequestBody defines body for PostOauth2MfaVerify for application/x-www-form-urlencoded ContentType.

type PostOauth2MfaVerifyJSONRequestBody

type PostOauth2MfaVerifyJSONRequestBody = MfaVerifyRequest

PostOauth2MfaVerifyJSONRequestBody defines body for PostOauth2MfaVerify for application/json ContentType.

type PostOauth2MfaVerifyResponse

type PostOauth2MfaVerifyResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *struct {
		AccessToken string `json:"access_token"`

		// ExpiresIn Seconds until access_token expiry.
		ExpiresIn int64 `json:"expires_in"`

		// IdToken OIDC ID token (JWT); present iff scope includes openid and signing keys are configured.
		IdToken     *string `json:"id_token,omitempty"`
		Message     *string `json:"message,omitempty"`
		MfaVerified *bool   `json:"mfa_verified,omitempty"`

		// RefreshToken Present for grants that issue refresh tokens (rotated on refresh).
		RefreshToken *string `json:"refresh_token,omitempty"`

		// Roles Role names; authorization_code grant only.
		Roles *[]string `json:"roles,omitempty"`

		// Scope Space-separated scopes; echoed for client_credentials/device grants only.
		Scope *string `json:"scope,omitempty"`

		// TokenType Always "Bearer".
		TokenType string `json:"token_type"`
	}
	// JSON400 the response for an HTTP 400 `application/json` response
	JSON400 *ErrorEnvelope
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *ErrorEnvelope
}

func ParsePostOauth2MfaVerifyResponse

func ParsePostOauth2MfaVerifyResponse(rsp *http.Response) (*PostOauth2MfaVerifyResponse, error)

ParsePostOauth2MfaVerifyResponse parses an HTTP response from a PostOauth2MfaVerifyWithResponse call

func (PostOauth2MfaVerifyResponse) ContentType

func (r PostOauth2MfaVerifyResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostOauth2MfaVerifyResponse) GetBody

func (r PostOauth2MfaVerifyResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostOauth2MfaVerifyResponse) GetJSON200

func (r PostOauth2MfaVerifyResponse) GetJSON200() *struct {
	AccessToken string `json:"access_token"`

	// ExpiresIn Seconds until access_token expiry.
	ExpiresIn int64 `json:"expires_in"`

	// IdToken OIDC ID token (JWT); present iff scope includes openid and signing keys are configured.
	IdToken     *string `json:"id_token,omitempty"`
	Message     *string `json:"message,omitempty"`
	MfaVerified *bool   `json:"mfa_verified,omitempty"`

	// RefreshToken Present for grants that issue refresh tokens (rotated on refresh).
	RefreshToken *string `json:"refresh_token,omitempty"`

	// Roles Role names; authorization_code grant only.
	Roles *[]string `json:"roles,omitempty"`

	// Scope Space-separated scopes; echoed for client_credentials/device grants only.
	Scope *string `json:"scope,omitempty"`

	// TokenType Always "Bearer".
	TokenType string `json:"token_type"`
}

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostOauth2MfaVerifyResponse) GetJSON400

GetJSON400 returns the response for an HTTP 400 `application/json` response

func (PostOauth2MfaVerifyResponse) GetJSON401

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (PostOauth2MfaVerifyResponse) Status

Status returns HTTPResponse.Status

func (PostOauth2MfaVerifyResponse) StatusCode

func (r PostOauth2MfaVerifyResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostOauth2RegisterResponse

type PostOauth2RegisterResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostOauth2RegisterResponse

func ParsePostOauth2RegisterResponse(rsp *http.Response) (*PostOauth2RegisterResponse, error)

ParsePostOauth2RegisterResponse parses an HTTP response from a PostOauth2RegisterWithResponse call

func (PostOauth2RegisterResponse) ContentType

func (r PostOauth2RegisterResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostOauth2RegisterResponse) GetBody

func (r PostOauth2RegisterResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostOauth2RegisterResponse) Status

Status returns HTTPResponse.Status

func (PostOauth2RegisterResponse) StatusCode

func (r PostOauth2RegisterResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostOauth2RevokeFormdataBody

type PostOauth2RevokeFormdataBody struct {
	// ClientId Client identifier (alternative to HTTP Basic authentication).
	ClientId *string `form:"client_id,omitempty" json:"client_id,omitempty"`

	// ClientSecret Client secret (alternative to HTTP Basic; required for CONFIDENTIAL clients).
	ClientSecret *string `form:"client_secret,omitempty" json:"client_secret,omitempty"`

	// Token The token that the client wants to get revoked (required).
	Token string `form:"token" json:"token"`

	// TokenTypeHint Optional hint: access_token or refresh_token (accepted, currently ignored).
	TokenTypeHint *string `form:"token_type_hint,omitempty" json:"token_type_hint,omitempty"`
}

PostOauth2RevokeFormdataBody defines parameters for PostOauth2Revoke.

type PostOauth2RevokeFormdataRequestBody

type PostOauth2RevokeFormdataRequestBody PostOauth2RevokeFormdataBody

PostOauth2RevokeFormdataRequestBody defines body for PostOauth2Revoke for application/x-www-form-urlencoded ContentType.

type PostOauth2RevokeResponse

type PostOauth2RevokeResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON400 the response for an HTTP 400 `application/json` response
	JSON400 *OAuth2Error
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *OAuth2Error
	// Headers429 the parsed response headers for an HTTP 429 response
	Headers429 *PostOauth2RevokeResponse429Headers
}

func ParsePostOauth2RevokeResponse

func ParsePostOauth2RevokeResponse(rsp *http.Response) (*PostOauth2RevokeResponse, error)

ParsePostOauth2RevokeResponse parses an HTTP response from a PostOauth2RevokeWithResponse call

func (PostOauth2RevokeResponse) ContentType

func (r PostOauth2RevokeResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostOauth2RevokeResponse) GetBody

func (r PostOauth2RevokeResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostOauth2RevokeResponse) GetJSON400

func (r PostOauth2RevokeResponse) GetJSON400() *OAuth2Error

GetJSON400 returns the response for an HTTP 400 `application/json` response

func (PostOauth2RevokeResponse) GetJSON401

func (r PostOauth2RevokeResponse) GetJSON401() *OAuth2Error

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (PostOauth2RevokeResponse) Status

func (r PostOauth2RevokeResponse) Status() string

Status returns HTTPResponse.Status

func (PostOauth2RevokeResponse) StatusCode

func (r PostOauth2RevokeResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostOauth2RevokeResponse429Headers

type PostOauth2RevokeResponse429Headers struct {
	RetryAfter *int
}

PostOauth2RevokeResponse429Headers the declared response headers of an HTTP 429 response for PostOauth2Revoke

type PostOauth2TokenFormdataRequestBody

type PostOauth2TokenFormdataRequestBody = TokenRequest

PostOauth2TokenFormdataRequestBody defines body for PostOauth2Token for application/x-www-form-urlencoded ContentType.

type PostOauth2TokenResponse

type PostOauth2TokenResponse struct {
	Body         []byte
	HTTPResponse *http.Response
	// JSON200 the response for an HTTP 200 `application/json` response
	JSON200 *TokenResponse
	// JSON400 the response for an HTTP 400 `application/json` response
	JSON400 *OAuth2Error
	// JSON401 the response for an HTTP 401 `application/json` response
	JSON401 *OAuth2Error
	// JSON429 the response for an HTTP 429 `application/json` response
	JSON429 *OAuth2Error
	// Headers200 the parsed response headers for an HTTP 200 response
	Headers200 *PostOauth2TokenResponse200Headers
	// Headers401 the parsed response headers for an HTTP 401 response
	Headers401 *PostOauth2TokenResponse401Headers
	// Headers429 the parsed response headers for an HTTP 429 response
	Headers429 *PostOauth2TokenResponse429Headers
}

func ParsePostOauth2TokenResponse

func ParsePostOauth2TokenResponse(rsp *http.Response) (*PostOauth2TokenResponse, error)

ParsePostOauth2TokenResponse parses an HTTP response from a PostOauth2TokenWithResponse call

func (PostOauth2TokenResponse) ContentType

func (r PostOauth2TokenResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostOauth2TokenResponse) GetBody

func (r PostOauth2TokenResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PostOauth2TokenResponse) GetJSON200

func (r PostOauth2TokenResponse) GetJSON200() *TokenResponse

GetJSON200 returns the response for an HTTP 200 `application/json` response

func (PostOauth2TokenResponse) GetJSON400

func (r PostOauth2TokenResponse) GetJSON400() *OAuth2Error

GetJSON400 returns the response for an HTTP 400 `application/json` response

func (PostOauth2TokenResponse) GetJSON401

func (r PostOauth2TokenResponse) GetJSON401() *OAuth2Error

GetJSON401 returns the response for an HTTP 401 `application/json` response

func (PostOauth2TokenResponse) GetJSON429

func (r PostOauth2TokenResponse) GetJSON429() *OAuth2Error

GetJSON429 returns the response for an HTTP 429 `application/json` response

func (PostOauth2TokenResponse) Status

func (r PostOauth2TokenResponse) Status() string

Status returns HTTPResponse.Status

func (PostOauth2TokenResponse) StatusCode

func (r PostOauth2TokenResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PostOauth2TokenResponse200Headers

type PostOauth2TokenResponse200Headers struct {
	CacheControl *string
	Pragma       *string
}

PostOauth2TokenResponse200Headers the declared response headers of an HTTP 200 response for PostOauth2Token

type PostOauth2TokenResponse401Headers

type PostOauth2TokenResponse401Headers struct {
	WWWAuthenticate *string
}

PostOauth2TokenResponse401Headers the declared response headers of an HTTP 401 response for PostOauth2Token

type PostOauth2TokenResponse429Headers

type PostOauth2TokenResponse429Headers struct {
	RetryAfter *int
}

PostOauth2TokenResponse429Headers the declared response headers of an HTTP 429 response for PostOauth2Token

type PostOauth2WebauthnAuthenticateBeginResponse

type PostOauth2WebauthnAuthenticateBeginResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostOauth2WebauthnAuthenticateBeginResponse

func ParsePostOauth2WebauthnAuthenticateBeginResponse(rsp *http.Response) (*PostOauth2WebauthnAuthenticateBeginResponse, error)

ParsePostOauth2WebauthnAuthenticateBeginResponse parses an HTTP response from a PostOauth2WebauthnAuthenticateBeginWithResponse call

func (PostOauth2WebauthnAuthenticateBeginResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostOauth2WebauthnAuthenticateBeginResponse) GetBody

GetBody returns the raw response body bytes

func (PostOauth2WebauthnAuthenticateBeginResponse) Status

Status returns HTTPResponse.Status

func (PostOauth2WebauthnAuthenticateBeginResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PostOauth2WebauthnAuthenticateFinishJSONRequestBody added in v1.1.0

type PostOauth2WebauthnAuthenticateFinishJSONRequestBody = WebAuthnAssertionCredential

PostOauth2WebauthnAuthenticateFinishJSONRequestBody defines body for PostOauth2WebauthnAuthenticateFinish for application/json ContentType.

type PostOauth2WebauthnAuthenticateFinishResponse

type PostOauth2WebauthnAuthenticateFinishResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePostOauth2WebauthnAuthenticateFinishResponse

func ParsePostOauth2WebauthnAuthenticateFinishResponse(rsp *http.Response) (*PostOauth2WebauthnAuthenticateFinishResponse, error)

ParsePostOauth2WebauthnAuthenticateFinishResponse parses an HTTP response from a PostOauth2WebauthnAuthenticateFinishWithResponse call

func (PostOauth2WebauthnAuthenticateFinishResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PostOauth2WebauthnAuthenticateFinishResponse) GetBody

GetBody returns the raw response body bytes

func (PostOauth2WebauthnAuthenticateFinishResponse) Status

Status returns HTTPResponse.Status

func (PostOauth2WebauthnAuthenticateFinishResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PutApiAdminClientsClientIdJSONBody

type PutApiAdminClientsClientIdJSONBody struct {
	AllowedGrantTypes *string `json:"allowed_grant_types,omitempty"`

	// BackchannelLogoutUri Set to an https URI to enable OIDC back-channel logout notifications to this RP; an empty string clears it.
	BackchannelLogoutUri *string `json:"backchannel_logout_uri,omitempty"`
	Name                 *string `json:"name,omitempty"`
	RedirectUris         *string `json:"redirect_uris,omitempty"`
}

PutApiAdminClientsClientIdJSONBody defines parameters for PutApiAdminClientsClientId.

type PutApiAdminClientsClientIdJSONRequestBody

type PutApiAdminClientsClientIdJSONRequestBody PutApiAdminClientsClientIdJSONBody

PutApiAdminClientsClientIdJSONRequestBody defines body for PutApiAdminClientsClientId for application/json ContentType.

type PutApiAdminClientsClientIdResponse

type PutApiAdminClientsClientIdResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePutApiAdminClientsClientIdResponse

func ParsePutApiAdminClientsClientIdResponse(rsp *http.Response) (*PutApiAdminClientsClientIdResponse, error)

ParsePutApiAdminClientsClientIdResponse parses an HTTP response from a PutApiAdminClientsClientIdWithResponse call

func (PutApiAdminClientsClientIdResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PutApiAdminClientsClientIdResponse) GetBody

GetBody returns the raw response body bytes

func (PutApiAdminClientsClientIdResponse) Status

Status returns HTTPResponse.Status

func (PutApiAdminClientsClientIdResponse) StatusCode

func (r PutApiAdminClientsClientIdResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PutApiAdminClientsClientIdScopesResponse

type PutApiAdminClientsClientIdScopesResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePutApiAdminClientsClientIdScopesResponse

func ParsePutApiAdminClientsClientIdScopesResponse(rsp *http.Response) (*PutApiAdminClientsClientIdScopesResponse, error)

ParsePutApiAdminClientsClientIdScopesResponse parses an HTTP response from a PutApiAdminClientsClientIdScopesWithResponse call

func (PutApiAdminClientsClientIdScopesResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PutApiAdminClientsClientIdScopesResponse) GetBody

GetBody returns the raw response body bytes

func (PutApiAdminClientsClientIdScopesResponse) Status

Status returns HTTPResponse.Status

func (PutApiAdminClientsClientIdScopesResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PutApiAdminRolesRoleIdJSONBody

type PutApiAdminRolesRoleIdJSONBody struct {
	Description *string `json:"description,omitempty"`
}

PutApiAdminRolesRoleIdJSONBody defines parameters for PutApiAdminRolesRoleId.

type PutApiAdminRolesRoleIdJSONRequestBody

type PutApiAdminRolesRoleIdJSONRequestBody PutApiAdminRolesRoleIdJSONBody

PutApiAdminRolesRoleIdJSONRequestBody defines body for PutApiAdminRolesRoleId for application/json ContentType.

type PutApiAdminRolesRoleIdResponse

type PutApiAdminRolesRoleIdResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePutApiAdminRolesRoleIdResponse

func ParsePutApiAdminRolesRoleIdResponse(rsp *http.Response) (*PutApiAdminRolesRoleIdResponse, error)

ParsePutApiAdminRolesRoleIdResponse parses an HTTP response from a PutApiAdminRolesRoleIdWithResponse call

func (PutApiAdminRolesRoleIdResponse) ContentType

func (r PutApiAdminRolesRoleIdResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PutApiAdminRolesRoleIdResponse) GetBody

func (r PutApiAdminRolesRoleIdResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PutApiAdminRolesRoleIdResponse) Status

Status returns HTTPResponse.Status

func (PutApiAdminRolesRoleIdResponse) StatusCode

func (r PutApiAdminRolesRoleIdResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PutApiAdminScopesScopeIdJSONBody

type PutApiAdminScopesScopeIdJSONBody struct {
	Description       *string `json:"description,omitempty"`
	IsDefault         *bool   `json:"is_default,omitempty"`
	MappedRole        *string `json:"mapped_role,omitempty"`
	RequiresAdminRole *bool   `json:"requires_admin_role,omitempty"`
}

PutApiAdminScopesScopeIdJSONBody defines parameters for PutApiAdminScopesScopeId.

type PutApiAdminScopesScopeIdJSONRequestBody

type PutApiAdminScopesScopeIdJSONRequestBody PutApiAdminScopesScopeIdJSONBody

PutApiAdminScopesScopeIdJSONRequestBody defines body for PutApiAdminScopesScopeId for application/json ContentType.

type PutApiAdminScopesScopeIdResponse

type PutApiAdminScopesScopeIdResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePutApiAdminScopesScopeIdResponse

func ParsePutApiAdminScopesScopeIdResponse(rsp *http.Response) (*PutApiAdminScopesScopeIdResponse, error)

ParsePutApiAdminScopesScopeIdResponse parses an HTTP response from a PutApiAdminScopesScopeIdWithResponse call

func (PutApiAdminScopesScopeIdResponse) ContentType

func (r PutApiAdminScopesScopeIdResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PutApiAdminScopesScopeIdResponse) GetBody

func (r PutApiAdminScopesScopeIdResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PutApiAdminScopesScopeIdResponse) Status

Status returns HTTPResponse.Status

func (PutApiAdminScopesScopeIdResponse) StatusCode

func (r PutApiAdminScopesScopeIdResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PutApiAdminUsersUserIdDisableResponse

type PutApiAdminUsersUserIdDisableResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePutApiAdminUsersUserIdDisableResponse

func ParsePutApiAdminUsersUserIdDisableResponse(rsp *http.Response) (*PutApiAdminUsersUserIdDisableResponse, error)

ParsePutApiAdminUsersUserIdDisableResponse parses an HTTP response from a PutApiAdminUsersUserIdDisableWithResponse call

func (PutApiAdminUsersUserIdDisableResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PutApiAdminUsersUserIdDisableResponse) GetBody

GetBody returns the raw response body bytes

func (PutApiAdminUsersUserIdDisableResponse) Status

Status returns HTTPResponse.Status

func (PutApiAdminUsersUserIdDisableResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PutApiAdminUsersUserIdJSONBody

type PutApiAdminUsersUserIdJSONBody struct {
	Email         *string `json:"email,omitempty"`
	EmailVerified *bool   `json:"email_verified,omitempty"`
	Locked        *bool   `json:"locked,omitempty"`
	MfaEnabled    *bool   `json:"mfa_enabled,omitempty"`
	OrgId         *int    `json:"org_id,omitempty"`
	Username      *string `json:"username,omitempty"`
}

PutApiAdminUsersUserIdJSONBody defines parameters for PutApiAdminUsersUserId.

type PutApiAdminUsersUserIdJSONRequestBody

type PutApiAdminUsersUserIdJSONRequestBody PutApiAdminUsersUserIdJSONBody

PutApiAdminUsersUserIdJSONRequestBody defines body for PutApiAdminUsersUserId for application/json ContentType.

type PutApiAdminUsersUserIdResponse

type PutApiAdminUsersUserIdResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePutApiAdminUsersUserIdResponse

func ParsePutApiAdminUsersUserIdResponse(rsp *http.Response) (*PutApiAdminUsersUserIdResponse, error)

ParsePutApiAdminUsersUserIdResponse parses an HTTP response from a PutApiAdminUsersUserIdWithResponse call

func (PutApiAdminUsersUserIdResponse) ContentType

func (r PutApiAdminUsersUserIdResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PutApiAdminUsersUserIdResponse) GetBody

func (r PutApiAdminUsersUserIdResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PutApiAdminUsersUserIdResponse) Status

Status returns HTTPResponse.Status

func (PutApiAdminUsersUserIdResponse) StatusCode

func (r PutApiAdminUsersUserIdResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type PutApiAdminUsersUserIdRolesJSONBody

type PutApiAdminUsersUserIdRolesJSONBody struct {
	Roles []string `json:"roles"`
}

PutApiAdminUsersUserIdRolesJSONBody defines parameters for PutApiAdminUsersUserIdRoles.

type PutApiAdminUsersUserIdRolesJSONRequestBody

type PutApiAdminUsersUserIdRolesJSONRequestBody PutApiAdminUsersUserIdRolesJSONBody

PutApiAdminUsersUserIdRolesJSONRequestBody defines body for PutApiAdminUsersUserIdRoles for application/json ContentType.

type PutApiAdminUsersUserIdRolesResponse

type PutApiAdminUsersUserIdRolesResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePutApiAdminUsersUserIdRolesResponse

func ParsePutApiAdminUsersUserIdRolesResponse(rsp *http.Response) (*PutApiAdminUsersUserIdRolesResponse, error)

ParsePutApiAdminUsersUserIdRolesResponse parses an HTTP response from a PutApiAdminUsersUserIdRolesWithResponse call

func (PutApiAdminUsersUserIdRolesResponse) ContentType

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PutApiAdminUsersUserIdRolesResponse) GetBody

GetBody returns the raw response body bytes

func (PutApiAdminUsersUserIdRolesResponse) Status

Status returns HTTPResponse.Status

func (PutApiAdminUsersUserIdRolesResponse) StatusCode

StatusCode returns HTTPResponse.StatusCode

type PutApiMePasswordResponse

type PutApiMePasswordResponse struct {
	Body         []byte
	HTTPResponse *http.Response
}

func ParsePutApiMePasswordResponse

func ParsePutApiMePasswordResponse(rsp *http.Response) (*PutApiMePasswordResponse, error)

ParsePutApiMePasswordResponse parses an HTTP response from a PutApiMePasswordWithResponse call

func (PutApiMePasswordResponse) ContentType

func (r PutApiMePasswordResponse) ContentType() string

ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers

func (PutApiMePasswordResponse) GetBody

func (r PutApiMePasswordResponse) GetBody() []byte

GetBody returns the raw response body bytes

func (PutApiMePasswordResponse) Status

func (r PutApiMePasswordResponse) Status() string

Status returns HTTPResponse.Status

func (PutApiMePasswordResponse) StatusCode

func (r PutApiMePasswordResponse) StatusCode() int

StatusCode returns HTTPResponse.StatusCode

type RequestEditorFn

type RequestEditorFn func(ctx context.Context, req *http.Request) error

RequestEditorFn is the function signature for the RequestEditor callback function

type SocialLinkEntry

type SocialLinkEntry struct {
	// LinkedAt Mapping row creation timestamp.
	LinkedAt *string                 `json:"linked_at,omitempty"`
	Provider SocialLinkEntryProvider `json:"provider"`

	// Subject Provider-scoped stable id (GitHub numeric id, Google sub, WeChat openid).
	Subject string `json:"subject"`
}

SocialLinkEntry One social provider identity linked to the current user.

type SocialLinkEntryProvider

type SocialLinkEntryProvider string

SocialLinkEntryProvider defines model for SocialLinkEntry.Provider.

const (
	SocialLinkEntryProviderGithub SocialLinkEntryProvider = "github"
	SocialLinkEntryProviderGoogle SocialLinkEntryProvider = "google"
	SocialLinkEntryProviderWechat SocialLinkEntryProvider = "wechat"
)

Defines values for SocialLinkEntryProvider.

func (SocialLinkEntryProvider) Valid

func (e SocialLinkEntryProvider) Valid() bool

Valid indicates whether the value is a known member of the SocialLinkEntryProvider enum.

type SocialLinkResult

type SocialLinkResult struct {
	Message  string                   `json:"message"`
	Provider SocialLinkResultProvider `json:"provider"`

	// Subject Provider subject (link success; unlink success keeps the removed subject).
	Subject *string `json:"subject,omitempty"`
}

SocialLinkResult Result of a link/unlink mutation.

type SocialLinkResultProvider

type SocialLinkResultProvider string

SocialLinkResultProvider defines model for SocialLinkResult.Provider.

const (
	SocialLinkResultProviderGithub SocialLinkResultProvider = "github"
	SocialLinkResultProviderGoogle SocialLinkResultProvider = "google"
	SocialLinkResultProviderWechat SocialLinkResultProvider = "wechat"
)

Defines values for SocialLinkResultProvider.

func (SocialLinkResultProvider) Valid

func (e SocialLinkResultProvider) Valid() bool

Valid indicates whether the value is a known member of the SocialLinkResultProvider enum.

type SocialLinksList struct {
	SocialLinks []SocialLinkEntry `json:"social_links"`
	Total       int               `json:"total"`
}

SocialLinksList defines model for SocialLinksList.

type SocialLoginTokenResponse added in v1.1.0

type SocialLoginTokenResponse struct {
	AccessToken  string `json:"access_token"`
	ExpiresIn    int64  `json:"expires_in"`
	RefreshToken string `json:"refresh_token"`

	// TokenType Always "Bearer".
	TokenType string `json:"token_type"`
}

SocialLoginTokenResponse First-party token pair issued by a social login endpoint (/api/{github,google,wechat}/login) once the provider identity is linked to a local account (or auto-created on first login). Issued for the configured first-party client (external_auth.social_token_client_id, default vue-client) with scope "openid profile email". Recorded as a SOCIAL_LOGIN_TOKEN_ISSUED audit event (NOT a consent row) — an explicit social-consent interaction is a registered follow-up.

type TokenRequest

type TokenRequest struct {
	// ClientId Client identifier (alternative to HTTP Basic authentication).
	ClientId *string `json:"client_id,omitempty"`

	// ClientSecret Client secret for CONFIDENTIAL clients with token_endpoint_auth_method=client_secret_post; FORBIDDEN for PUBLIC clients whose method is 'none' (F-017).
	ClientSecret *string `json:"client_secret,omitempty"`

	// Code Authorization code (required for grant_type=authorization_code).
	Code *string `json:"code,omitempty"`

	// CodeVerifier PKCE code_verifier (RFC 7636): required for authorization_code when the login/authorize request carried a code_challenge.
	CodeVerifier *string `json:"code_verifier,omitempty"`

	// DeviceCode Required for the device_code grant (from /oauth2/device_authorization).
	DeviceCode *string               `json:"device_code,omitempty"`
	GrantType  TokenRequestGrantType `json:"grant_type"`

	// RedirectUri Required for the authorization_code grant.
	RedirectUri *string `json:"redirect_uri,omitempty"`

	// RefreshToken Required for grant_type=refresh_token (rotated on use).
	RefreshToken *string `json:"refresh_token,omitempty"`

	// Scope Space-separated scopes (client_credentials grant only).
	Scope *string `json:"scope,omitempty"`
}

TokenRequest RFC 6749 §4.1.3 token request (form-encoded). Field requirements are grant-dependent: authorization_code needs code (+ redirect_uri + code_verifier when PKCE was used); refresh_token needs refresh_token; client_credentials may send scope; device_code needs device_code. Client auth follows the client's registered token_endpoint_auth_method (F-017): client_secret_basic (default) -> HTTP Basic ONLY; client_secret_post -> these form fields ONLY; 'none' (PUBLIC) -> client_id only, secrets rejected.

type TokenRequestGrantType

type TokenRequestGrantType string

TokenRequestGrantType defines model for TokenRequest.GrantType.

const (
	AuthorizationCode                     TokenRequestGrantType = "authorization_code"
	ClientCredentials                     TokenRequestGrantType = "client_credentials"
	RefreshToken                          TokenRequestGrantType = "refresh_token"
	UrnIetfParamsOauthGrantTypeDeviceCode TokenRequestGrantType = "urn:ietf:params:oauth:grant-type:device_code"
)

Defines values for TokenRequestGrantType.

func (TokenRequestGrantType) Valid

func (e TokenRequestGrantType) Valid() bool

Valid indicates whether the value is a known member of the TokenRequestGrantType enum.

type TokenResponse

type TokenResponse struct {
	AccessToken string `json:"access_token"`

	// ExpiresIn Seconds until access_token expiry.
	ExpiresIn int64 `json:"expires_in"`

	// IdToken OIDC ID token (JWT); present iff scope includes openid and signing keys are configured.
	IdToken *string `json:"id_token,omitempty"`

	// RefreshToken Present for grants that issue refresh tokens (rotated on refresh).
	RefreshToken *string `json:"refresh_token,omitempty"`

	// Roles Role names; authorization_code grant only.
	Roles *[]string `json:"roles,omitempty"`

	// Scope Space-separated scopes; echoed for client_credentials/device grants only.
	Scope *string `json:"scope,omitempty"`

	// TokenType Always "Bearer".
	TokenType string `json:"token_type"`
}

TokenResponse Token endpoint success body (grant-dependent fields). authorization_code: access_token/token_type/expires_in/refresh_token/roles + id_token iff scope includes openid (no scope echo). refresh_token: rotated refresh_token, no roles. client_credentials: scope echo, NO refresh_token. device_code: refresh_token + optional scope/id_token. Always carries Cache-Control: no-store / Pragma: no-cache.

type UserInfoResponse

type UserInfoResponse struct {
	Email         *string `json:"email,omitempty"`
	EmailVerified *bool   `json:"email_verified,omitempty"`

	// Name Username (fallback: email, then sub).
	Name  string    `json:"name"`
	Roles *[]string `json:"roles,omitempty"`

	// Sub Subject (public user id, stringified).
	Sub      string  `json:"sub"`
	Username *string `json:"username,omitempty"`
}

UserInfoResponse OIDC Core §5.3 userinfo claims. email_verified present iff email present; roles present iff non-empty.

type WebAuthnAssertionCredential added in v1.1.0

type WebAuthnAssertionCredential struct {
	// Id base64url credential id (must equal rawId).
	Id       string `json:"id"`
	RawId    string `json:"rawId"`
	Response struct {
		AuthenticatorData string `json:"authenticatorData"`
		ClientDataJSON    string `json:"clientDataJSON"`

		// Signature base64url ASN.1 DER ECDSA signature.
		Signature string `json:"signature"`
	} `json:"response"`

	// UserHandle Optional base64url user handle; when present it must name the credential's owner.
	UserHandle *string `json:"userHandle,omitempty"`
}

WebAuthnAssertionCredential Browser PublicKeyCredential for navigator.credentials.get() (#142). All binary fields are base64url without padding.

type WebAuthnRegistrationCredential added in v1.1.0

type WebAuthnRegistrationCredential struct {
	// Id base64url credential id (must equal rawId).
	Id string `json:"id"`

	// Name Optional human-readable label (default "Passkey").
	Name     *string `json:"name,omitempty"`
	RawId    string  `json:"rawId"`
	Response struct {
		// AttestationObject base64url CBOR attestation object (fmt "none" only).
		AttestationObject string `json:"attestationObject"`
		ClientDataJSON    string `json:"clientDataJSON"`
	} `json:"response"`
}

WebAuthnRegistrationCredential Browser PublicKeyCredential for navigator.credentials.create() (#142). All binary fields are base64url without padding. The server ignores any client-submitted public_key: the stored key comes from the verified attestation object's COSE bytes.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL