|
173 | 173 | { |
174 | 174 | "name": "prompt", |
175 | 175 | "in": "query", |
176 | | - "description": "Space-delimited user interaction prompts (OIDC)", |
| 176 | + "description": "Space-delimited user interaction prompts (OIDC). Allowed tokens: none, login, consent, select_account. \"none\" cannot be combined with others. Example: \"login consent\"", |
177 | 177 | "required": false, |
178 | 178 | "schema": { |
179 | | - "type": "string", |
180 | | - "enum": [ |
181 | | - "none", |
182 | | - "login", |
183 | | - "consent", |
184 | | - "select_account" |
185 | | - ] |
| 179 | + "type": "string" |
186 | 180 | } |
187 | 181 | }, |
188 | 182 | { |
|
494 | 488 | } |
495 | 489 | } |
496 | 490 | } |
497 | | - }, |
498 | | - "security": [ |
499 | | - { |
500 | | - "OAuth2ProviderSecurity": [] |
501 | | - } |
502 | | - ] |
| 491 | + } |
503 | 492 | } |
504 | 493 | }, |
505 | 494 | "/oauth2/token/revoke": { |
|
619 | 608 | "OAuth2 / OpenID Connect" |
620 | 609 | ], |
621 | 610 | "summary": "OpenID Connect Discovery Endpoint", |
622 | | - "description": "Returns the OpenID Provider Configuration document per OpenID Connect Discovery 1.0. Also available at /oauth2/.well-known/openid-configuration.", |
623 | | - "operationId": "oauth2Discovery", |
| 611 | + "description": "Returns the OpenID Provider Configuration document per OpenID Connect Discovery 1.0.", |
| 612 | + "operationId": "OpenIdDiscovery", |
| 613 | + "responses": { |
| 614 | + "200": { |
| 615 | + "description": "OpenID Connect Discovery document", |
| 616 | + "content": { |
| 617 | + "application/json": { |
| 618 | + "schema": { |
| 619 | + "$ref": "#/components/schemas/OpenIDDiscoveryResponse" |
| 620 | + } |
| 621 | + } |
| 622 | + } |
| 623 | + } |
| 624 | + } |
| 625 | + } |
| 626 | + }, |
| 627 | + "/oauth2/.well-known/openid-configuration": { |
| 628 | + "get": { |
| 629 | + "tags": [ |
| 630 | + "OAuth2 / OpenID Connect" |
| 631 | + ], |
| 632 | + "summary": "OpenID Connect Discovery Endpoint", |
| 633 | + "description": "Returns the OpenID Provider Configuration document per OpenID Connect Discovery 1.0.", |
| 634 | + "operationId": "OAclient_secretuth2OpenIdDiscovery", |
624 | 635 | "responses": { |
625 | 636 | "200": { |
626 | 637 | "description": "OpenID Connect Discovery document", |
|
699 | 710 | } |
700 | 711 | } |
701 | 712 | } |
702 | | - } |
| 713 | + }, |
| 714 | + "security": [ |
| 715 | + { |
| 716 | + "OAuth2ProviderSecurity": [] |
| 717 | + } |
| 718 | + ] |
703 | 719 | }, |
704 | 720 | "post": { |
705 | 721 | "tags": [ |
|
736 | 752 | } |
737 | 753 | } |
738 | 754 | } |
739 | | - } |
| 755 | + }, |
| 756 | + "security": [ |
| 757 | + { |
| 758 | + "OAuth2ProviderSecurity": [] |
| 759 | + } |
| 760 | + ] |
740 | 761 | } |
741 | 762 | } |
742 | 763 | }, |
|
1045 | 1066 | "OAuth2TokenResponse": { |
1046 | 1067 | "title": "OAuth2 Token Response", |
1047 | 1068 | "description": "Successful token response per RFC 6749 §5.1", |
| 1069 | + "required": [ |
| 1070 | + "access_token", |
| 1071 | + "token_type" |
| 1072 | + ], |
1048 | 1073 | "properties": { |
1049 | 1074 | "access_token": { |
1050 | 1075 | "description": "The access token issued by the authorization server", |
|
1217 | 1242 | "JWKSResponse": { |
1218 | 1243 | "title": "JSON Web Key Set", |
1219 | 1244 | "description": "JWK Set document per RFC 7517", |
| 1245 | + "required": [ |
| 1246 | + "keys" |
| 1247 | + ], |
1220 | 1248 | "properties": { |
1221 | 1249 | "keys": { |
1222 | 1250 | "description": "Array of JSON Web Keys", |
|
1261 | 1289 | "OpenIDDiscoveryResponse": { |
1262 | 1290 | "title": "OpenID Connect Discovery Document", |
1263 | 1291 | "description": "OpenID Provider Configuration per OpenID Connect Discovery 1.0", |
| 1292 | + "required": [ |
| 1293 | + "issuer", |
| 1294 | + "authorization_endpoint", |
| 1295 | + "token_endpoint", |
| 1296 | + "jwks_uri", |
| 1297 | + "response_types_supported", |
| 1298 | + "subject_types_supported", |
| 1299 | + "id_token_signing_alg_values_supported" |
| 1300 | + ], |
1264 | 1301 | "properties": { |
1265 | 1302 | "issuer": { |
1266 | 1303 | "description": "Issuer identifier URL", |
|
1405 | 1442 | ] |
1406 | 1443 | }, |
1407 | 1444 | "prompt": { |
1408 | | - "description": "User interaction prompts", |
| 1445 | + "description": "Space-delimited user interaction prompts (OIDC). Allowed tokens: none, login, consent, select_account. \"none\" cannot be combined with others. Example: \"login consent\"", |
1409 | 1446 | "type": "string" |
1410 | 1447 | }, |
1411 | 1448 | "login_hint": { |
|
1471 | 1508 | }, |
1472 | 1509 | "client_secret": { |
1473 | 1510 | "description": "Client secret (if not using HTTP Basic auth)", |
1474 | | - "type": "string" |
| 1511 | + "type": "string", |
| 1512 | + "format": "password" |
1475 | 1513 | } |
1476 | 1514 | }, |
1477 | 1515 | "type": "object" |
|
0 commit comments