deploy: d9c6f8f

Author: matiasperrone-exo

openapi/pr-113/api-docs.json

@@ -173,10 +173,16 @@
                     {
                         "name": "prompt",
                         "in": "query",
-                        "description": "Space-delimited user interaction prompts (OIDC). Allowed tokens: none, login, consent, select_account. \"none\" cannot be combined with others. Example: \"login consent\"",
+                        "description": "Space-delimited user interaction prompts (OIDC)",
                         "required": false,
                         "schema": {
-                            "type": "string"
+                            "type": "string",
+                            "enum": [
+                                "none",
+                                "login",
+                                "consent",
+                                "select_account"
+                            ]
                         }
                     },
                     {
@@ -488,7 +494,12 @@
                             }
                         }
                     }
-                }
+                },
+                "security": [
+                    {
+                        "OAuth2ProviderSecurity": []
+                    }
+                ]
             }
         },
         "/oauth2/token/revoke": {
@@ -526,6 +537,9 @@
                     }
                 },
                 "security": [
+                    {
+                        "OAuth2ProviderClientBasic": []
+                    },
                     {
                         "OAuth2ProviderSecurity": []
                     }
@@ -574,6 +588,9 @@
                     }
                 },
                 "security": [
+                    {
+                        "OAuth2ProviderClientBasic": []
+                    },
                     {
                         "OAuth2ProviderSecurity": []
                     }
@@ -608,30 +625,8 @@
                     "OAuth2 / OpenID Connect"
                 ],
                 "summary": "OpenID Connect Discovery Endpoint",
-                "description": "Returns the OpenID Provider Configuration document per OpenID Connect Discovery 1.0.",
-                "operationId": "OpenIdDiscovery",
-                "responses": {
-                    "200": {
-                        "description": "OpenID Connect Discovery document",
-                        "content": {
-                            "application/json": {
-                                "schema": {
-                                    "$ref": "#/components/schemas/OpenIDDiscoveryResponse"
-                                }
-                            }
-                        }
-                    }
-                }
-            }
-        },
-        "/oauth2/.well-known/openid-configuration": {
-            "get": {
-                "tags": [
-                    "OAuth2 / OpenID Connect"
-                ],
-                "summary": "OpenID Connect Discovery Endpoint",
-                "description": "Returns the OpenID Provider Configuration document per OpenID Connect Discovery 1.0.",
-                "operationId": "OAclient_secretuth2OpenIdDiscovery",
+                "description": "Returns the OpenID Provider Configuration document per OpenID Connect Discovery 1.0. Also available at /oauth2/.well-known/openid-configuration.",
+                "operationId": "oauth2Discovery",
                 "responses": {
                     "200": {
                         "description": "OpenID Connect Discovery document",
@@ -710,12 +705,7 @@
                             }
                         }
                     }
-                },
-                "security": [
-                    {
-                        "OAuth2ProviderSecurity": []
-                    }
-                ]
+                }
             },
             "post": {
                 "tags": [
@@ -752,12 +742,7 @@
                             }
                         }
                     }
-                },
-                "security": [
-                    {
-                        "OAuth2ProviderSecurity": []
-                    }
-                ]
+                }
             }
         }
     },
@@ -1066,10 +1051,6 @@
             "OAuth2TokenResponse": {
                 "title": "OAuth2 Token Response",
                 "description": "Successful token response per RFC 6749 §5.1",
-                "required": [
-                    "access_token",
-                    "token_type"
-                ],
                 "properties": {
                     "access_token": {
                         "description": "The access token issued by the authorization server",
@@ -1242,9 +1223,6 @@
             "JWKSResponse": {
                 "title": "JSON Web Key Set",
                 "description": "JWK Set document per RFC 7517",
-                "required": [
-                    "keys"
-                ],
                 "properties": {
                     "keys": {
                         "description": "Array of JSON Web Keys",
@@ -1289,15 +1267,6 @@
             "OpenIDDiscoveryResponse": {
                 "title": "OpenID Connect Discovery Document",
                 "description": "OpenID Provider Configuration per OpenID Connect Discovery 1.0",
-                "required": [
-                    "issuer",
-                    "authorization_endpoint",
-                    "token_endpoint",
-                    "jwks_uri",
-                    "response_types_supported",
-                    "subject_types_supported",
-                    "id_token_signing_alg_values_supported"
-                ],
                 "properties": {
                     "issuer": {
                         "description": "Issuer identifier URL",
@@ -1442,7 +1411,7 @@
                         ]
                     },
                     "prompt": {
-                        "description": "Space-delimited user interaction prompts (OIDC). Allowed tokens: none, login, consent, select_account. \"none\" cannot be combined with others. Example: \"login consent\"",
+                        "description": "User interaction prompts",
                         "type": "string"
                     },
                     "login_hint": {
@@ -1508,8 +1477,7 @@
                     },
                     "client_secret": {
                         "description": "Client secret (if not using HTTP Basic auth)",
-                        "type": "string",
-                        "format": "password"
+                        "type": "string"
                     }
                 },
                 "type": "object"
@@ -1639,6 +1607,11 @@
                     }
                 }
             },
+            "OAuth2ProviderClientBasic": {
+                "type": "http",
+                "description": "HTTP Basic authentication with OAuth2 client_id:client_secret (RFC 6749 §2.3.1).",
+                "scheme": "basic"
+            },
             "OAuth2UserSecurity": {
                 "type": "oauth2",
                 "description": "OAuth2 security scheme for user-related API endpoints",