From 8b69148ca52119eb64c942b2477599b8dc51317e Mon Sep 17 00:00:00 2001 From: zofskeez <24611656+zofskeez@users.noreply.github.com> Date: Mon, 24 Aug 2026 12:31:44 +0000 Subject: [PATCH 1/2] auto: openapi spec update --- openapi.json | 469 ++++++++++++++++++++++++++++++++++++++++++++------- 1 file changed, 410 insertions(+), 59 deletions(-) diff --git a/openapi.json b/openapi.json index 8d8fec0..04c5edd 100644 --- a/openapi.json +++ b/openapi.json @@ -6529,17 +6529,26 @@ "action": "Configure" }, "get": { + "summary": "Return the current Okta configuration.", "operationId": "okta-read-configuration", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/OktaReadConfigurationResponse" + } + } + } } } }, "post": { + "summary": "Configure the Okta auth method.", "operationId": "okta-configure", "tags": [ "auth" @@ -6555,14 +6564,14 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } } }, "/auth/{okta_mount_path}/groups/": { - "description": "Manage users allowed to authenticate.", + "description": "Manage groups allowed to authenticate.", "parameters": [ { "name": "okta_mount_path", @@ -6580,7 +6589,7 @@ "itemType": "Group" }, "get": { - "summary": "Manage users allowed to authenticate.", + "summary": "List groups configured in the Okta auth method.", "operationId": "okta-list-groups", "tags": [ "auth" @@ -6614,7 +6623,7 @@ } }, "/auth/{okta_mount_path}/groups/{name}": { - "description": "Manage users allowed to authenticate.", + "description": "Manage groups allowed to authenticate.", "parameters": [ { "name": "name", @@ -6641,19 +6650,26 @@ "action": "Create" }, "get": { - "summary": "Manage users allowed to authenticate.", + "summary": "Return the properties of an Okta auth method group.", "operationId": "okta-read-group", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/OktaReadGroupResponse" + } + } + } } } }, "post": { - "summary": "Manage users allowed to authenticate.", + "summary": "Create or update an Okta auth method group.", "operationId": "okta-write-group", "tags": [ "auth" @@ -6669,20 +6685,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { - "summary": "Manage users allowed to authenticate.", + "summary": "Delete an Okta auth method group.", "operationId": "okta-delete-group", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -6712,7 +6728,7 @@ ], "x-vault-unauthenticated": true, "post": { - "summary": "Log in with a username and password.", + "summary": "Authenticate with Okta credentials.", "operationId": "okta-login", "tags": [ "auth" @@ -6729,7 +6745,14 @@ }, "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/OktaLoginResponse" + } + } + } } } } @@ -6753,7 +6776,7 @@ "itemType": "User" }, "get": { - "summary": "Manage additional groups for users allowed to authenticate.", + "summary": "List users configured in the Okta auth method.", "operationId": "okta-list-users", "tags": [ "auth" @@ -6814,19 +6837,26 @@ "action": "Create" }, "get": { - "summary": "Manage additional groups for users allowed to authenticate.", + "summary": "Return the properties of an Okta auth method user.", "operationId": "okta-read-user", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/OktaReadUserResponse" + } + } + } } } }, "post": { - "summary": "Manage additional groups for users allowed to authenticate.", + "summary": "Create or update an Okta auth method user.", "operationId": "okta-write-user", "tags": [ "auth" @@ -6842,20 +6872,20 @@ } }, "responses": { - "200": { - "description": "OK" + "204": { + "description": "No Content" } } }, "delete": { - "summary": "Manage additional groups for users allowed to authenticate.", + "summary": "Delete an Okta auth method user.", "operationId": "okta-delete-user", "tags": [ "auth" ], "responses": { "204": { - "description": "empty body" + "description": "No Content" } } } @@ -6884,13 +6914,21 @@ ], "x-vault-unauthenticated": true, "get": { + "summary": "Return the number verification challenge for a pending Okta login.", "operationId": "okta-verify", "tags": [ "auth" ], "responses": { "200": { - "description": "OK" + "description": "OK", + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/OktaVerifyResponse" + } + } + } } } } @@ -11550,6 +11588,40 @@ } } }, + "/identity/scim/client/{client_name}/unlink-entity": { + "parameters": [ + { + "name": "client_name", + "description": "Name of the SCIM client.", + "in": "path", + "schema": { + "type": "string" + }, + "required": true + } + ], + "post": { + "operationId": "scim-update-client-unlink-entity", + "tags": [ + "identity" + ], + "requestBody": { + "required": true, + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/ScimUpdateClientUnlinkEntityRequest" + } + } + } + }, + "responses": { + "200": { + "description": "OK" + } + } + } + }, "/identity/scim/client/{client_name}/unlink-group": { "parameters": [ { @@ -12738,36 +12810,6 @@ } } }, - "/sys/activation-flags/oauth-resource-server/activate": { - "description": "Returns information about Vault's features that require a one-time activation step.", - "x-vault-sudo": true, - "post": { - "summary": "Activate a flagged feature.", - "operationId": "activation-flags-activate", - "tags": [ - "system" - ], - "responses": { - "200": { - "description": "OK" - } - } - } - }, - "/sys/activation-flags/oauth-resource-server/deactivate": { - "x-vault-sudo": true, - "post": { - "operationId": "system-write-activation-flags-oauth-resource-server-deactivate", - "tags": [ - "system" - ], - "responses": { - "200": { - "description": "OK" - } - } - } - }, "/sys/activation-flags/secrets-import/activate": { "description": "Returns information about Vault's features that require a one-time activation step.", "post": { @@ -13685,6 +13727,42 @@ } } }, + "/sys/config/ui/checklist-state": { + "get": { + "summary": "Return the checklist state document.", + "operationId": "ui-config-read-checklist-state", + "tags": [ + "system" + ], + "responses": { + "200": { + "description": "OK" + } + } + }, + "post": { + "summary": "Merge checklist state updates.", + "operationId": "ui-config-configure-checklist-state", + "tags": [ + "system" + ], + "requestBody": { + "required": true, + "content": { + "application/json": { + "schema": { + "$ref": "#/components/schemas/UiConfigConfigureChecklistStateRequest" + } + } + } + }, + "responses": { + "200": { + "description": "OK" + } + } + } + }, "/sys/config/ui/custom-messages": { "x-vault-createSupported": true, "post": { @@ -14543,6 +14621,30 @@ } } }, + "/sys/health-check/last/{path}": { + "parameters": [ + { + "name": "path", + "description": "Full resource path (e.g., ldap/config or ldap/static-role/alice)", + "in": "path", + "schema": { + "type": "string" + }, + "required": true + } + ], + "get": { + "operationId": "system-read-health-check-last-path", + "tags": [ + "system" + ], + "responses": { + "200": { + "description": "OK" + } + } + } + }, "/sys/host-info": { "description": "Information about the host instance that this Vault server is running on.", "get": { @@ -50957,6 +51059,10 @@ "AzureConfigureAuthRequest": { "type": "object", "properties": { + "auth_type": { + "type": "string", + "description": "Specifies how Vault authenticates to Azure for resource metadata lookups. Valid values: root_creds, plugin_wif, aks_wi, msi. If not specified, defaults to existing discovery logic for backward compatibility." + }, "client_id": { "type": "string", "description": "The OAuth2 client id to connection to Azure. This value can also be provided with the AZURE_CLIENT_ID environment variable.", @@ -52384,10 +52490,15 @@ "activation_token": { "type": "string", "description": "The activation token for enrolling with the control hub." + }, + "hostname": { + "type": "string", + "description": "The control hub hostname for enrolling this Vault instance." } }, "required": [ - "activation_token" + "activation_token", + "hostname" ] }, "CorsConfigureRequest": { @@ -60283,6 +60394,198 @@ } } }, + "OktaLoginResponse": { + "type": "object", + "properties": { + "accessor": { + "type": "string", + "description": "Accessor for the client token." + }, + "client_token": { + "type": "string", + "description": "Token issued by Vault for the authenticated client." + }, + "entity_id": { + "type": "string", + "description": "Entity ID associated with the token." + }, + "lease_duration": { + "type": "integer", + "description": "Lease duration in seconds.", + "format": "int64" + }, + "metadata": { + "type": "object", + "description": "Metadata associated with the token.", + "format": "map" + }, + "mfa_requirement": { + "type": "object", + "description": "MFA requirement information.", + "format": "map" + }, + "num_uses": { + "type": "integer", + "description": "Number of uses remaining for the token." + }, + "orphan": { + "type": "boolean", + "description": "Whether the token is an orphan." + }, + "policies": { + "type": "array", + "description": "List of policies associated with the token.", + "items": { + "type": "string" + } + }, + "renewable": { + "type": "boolean", + "description": "Whether the token is renewable." + }, + "token_policies": { + "type": "array", + "description": "List of token policies.", + "items": { + "type": "string" + } + }, + "token_type": { + "type": "string", + "description": "Type of the token." + } + } + }, + "OktaReadConfigurationResponse": { + "type": "object", + "properties": { + "alias_metadata": { + "type": "object", + "description": "Metadata to be set on the token alias.", + "format": "map" + }, + "base_url": { + "type": "string", + "description": "The base domain used for the Okta API." + }, + "bypass_okta_mfa": { + "type": "boolean", + "description": "When true, Okta MFA requests are bypassed." + }, + "max_ttl": { + "type": "integer", + "description": "Use \"token_max_ttl\" instead. If this and \"token_max_ttl\" are both specified, only \"token_max_ttl\" will be used.", + "format": "int64", + "deprecated": true + }, + "org_name": { + "type": "string", + "description": "Name of the Okta organization." + }, + "organization": { + "type": "string", + "description": "Use \"org_name\" instead. If this and \"org_name\" are both specified, only \"org_name\" will be used.", + "deprecated": true + }, + "production": { + "type": "boolean", + "description": "Use \"base_url\" instead. If this and \"base_url\" are both specified, only \"base_url\" will be used.", + "deprecated": true + }, + "token_bound_cidrs": { + "type": "array", + "description": "List of CIDRs valid for the token.", + "items": { + "type": "string" + } + }, + "token_explicit_max_ttl": { + "type": "integer", + "description": "Hard cap on the token TTL.", + "format": "int64" + }, + "token_max_ttl": { + "type": "integer", + "description": "Maximum token TTL.", + "format": "int64" + }, + "token_no_default_policy": { + "type": "boolean", + "description": "When true, the default policy is not added to the token." + }, + "token_num_uses": { + "type": "integer", + "description": "Number of uses the token is allowed." + }, + "token_period": { + "type": "integer", + "description": "Period of the token.", + "format": "int64" + }, + "token_policies": { + "type": "array", + "description": "List of policies applied to the token.", + "items": { + "type": "string" + } + }, + "token_ttl": { + "type": "integer", + "description": "Token TTL in seconds.", + "format": "int64" + }, + "token_type": { + "type": "string", + "description": "Type of the token." + }, + "ttl": { + "type": "integer", + "description": "Use \"token_ttl\" instead. If this and \"token_ttl\" are both specified, only \"token_ttl\" will be used.", + "format": "int64", + "deprecated": true + } + } + }, + "OktaReadGroupResponse": { + "type": "object", + "properties": { + "policies": { + "type": "array", + "description": "List of policies associated with the group.", + "items": { + "type": "string" + } + } + } + }, + "OktaReadUserResponse": { + "type": "object", + "properties": { + "groups": { + "type": "array", + "description": "List of groups associated with the user.", + "items": { + "type": "string" + } + }, + "policies": { + "type": "array", + "description": "List of policies associated with the user.", + "items": { + "type": "string" + } + } + } + }, + "OktaVerifyResponse": { + "type": "object", + "properties": { + "correct_answer": { + "type": "integer", + "description": "The correct answer for the number verification challenge." + } + } + }, "OktaWriteGroupRequest": { "type": "object", "properties": { @@ -76358,9 +76661,41 @@ "type": "string", "description": "Optional. The mount accessor of an auth method where login aliases should be created for provisioned users. When set, the SCIM client will create both a Vault entity and an alias on the specified auth mount for each provisioned user." }, + "allowed_extra_alias_mount_accessors": { + "type": "array", + "description": "Optional. Allowlist of mount accessors on which this SCIM client may create or update secondary (non-primary) aliases. When empty or omitted the client may use any non-local mount (current unrestricted behaviour). alias_mount_accessor is always implicitly allowed and must not appear in this list. On update, omitting the field preserves the existing value; supplying an explicit empty list clears the allowlist.", + "items": { + "type": "string" + } + }, "default_schema_version": { "type": "string", "description": "Optional. The Vault SCIM extension schema version ('2.0' or '2.1') used for responses when a request does not specify an extension schema. Defaults to '2.1' for newly created clients; clients created before this field existed behave as '2.0'." + }, + "delete-linked-resources": { + "type": "boolean", + "description": "If set to true, deletes all SCIM-managed resources (groups, entities, aliases) owned by the client before removing the client itself." + }, + "unlink-resources": { + "type": "boolean", + "description": "If set to true, removes the SCIM client association from all owned resources without deleting them, then removes the client." + } + } + }, + "ScimUpdateClientUnlinkEntityRequest": { + "type": "object", + "properties": { + "entity_id": { + "type": "string", + "description": "ID of the Vault entity to unlink from this SCIM client." + }, + "remove_memberships": { + "type": "boolean", + "description": "Required when the entity is a member of SCIM-managed groups. Consent to removing those group memberships." + }, + "unlink_aliases": { + "type": "boolean", + "description": "Required when the entity has SCIM-managed aliases. Consent to making all managed aliases unmanaged." } } }, @@ -78404,6 +78739,10 @@ "type": "string", "description": "For ECDSA keys, the desired elliptic curve if the key is to be generated, either P256, P384, or P521." }, + "encryption_mode": { + "type": "string", + "description": "Encryption mode for the key: \"envelope\" (default) for AES-GCM envelope encryption, or \"raw\" to encrypt directly with the KMS key." + }, "endpoint": { "type": "string", "description": "The AWS endpoint to use" @@ -81810,9 +82149,10 @@ }, "hybrid_key_type_pqc": { "type": "string", - "description": "The post-quantum key type to use for hybrid signature schemes. Supported types are: ml-dsa.", + "description": "The post-quantum key type to use for hybrid signature schemes. Supported types are: ml-dsa and slh-dsa.", "enum": [ - "ml-dsa" + "ml-dsa", + "slh-dsa" ] }, "key_size": { @@ -82373,9 +82713,10 @@ }, "hybrid_key_type_pqc": { "type": "string", - "description": "The post-quantum key type to use for hybrid signature schemes. Supported types are: ml-dsa.", + "description": "The post-quantum key type to use for hybrid signature schemes. Supported types are: ml-dsa and slh-dsa.", "enum": [ - "ml-dsa" + "ml-dsa", + "slh-dsa" ] }, "imported_key": { @@ -82852,6 +83193,16 @@ } } }, + "UiConfigConfigureChecklistStateRequest": { + "type": "object", + "properties": { + "checklist_state": { + "type": "object", + "description": "The checklist state document to merge into UI config.", + "format": "map" + } + } + }, "UiConfigListCustomMessagesResponse": { "type": "object", "properties": { From 37a59f53468889272de32488d88d1882c3a1fc72 Mon Sep 17 00:00:00 2001 From: hc-github-team-secure-vault-core <82990506+hc-github-team-secure-vault-core@users.noreply.github.com> Date: Mon, 24 Aug 2026 12:32:33 +0000 Subject: [PATCH 2/2] auto: generated client updates --- .openapi-generator/FILES | 7 + src/apis/AuthApi.ts | 87 +++++--- src/apis/IdentityApi.ts | 50 +++++ src/apis/SystemApi.ts | 195 +++++++++++------ src/models/AzureConfigureAuthRequest.ts | 8 + src/models/ControlHubEnrollRequest.ts | 9 + src/models/OktaLoginResponse.ts | 157 ++++++++++++++ src/models/OktaReadConfigurationResponse.ts | 201 ++++++++++++++++++ src/models/OktaReadGroupResponse.ts | 69 ++++++ src/models/OktaReadUserResponse.ts | 77 +++++++ src/models/OktaVerifyResponse.ts | 69 ++++++ src/models/ScimUpdateClientRequest.ts | 24 +++ .../ScimUpdateClientUnlinkEntityRequest.ts | 85 ++++++++ .../SystemWriteManagedKeysTypeNameRequest.ts | 8 + src/models/TransitCreateKeyRequest.ts | 5 +- src/models/TransitReadKeyResponse.ts | 5 +- .../UiConfigConfigureChecklistStateRequest.ts | 69 ++++++ src/models/index.ts | 7 + 18 files changed, 1025 insertions(+), 107 deletions(-) create mode 100644 src/models/OktaLoginResponse.ts create mode 100644 src/models/OktaReadConfigurationResponse.ts create mode 100644 src/models/OktaReadGroupResponse.ts create mode 100644 src/models/OktaReadUserResponse.ts create mode 100644 src/models/OktaVerifyResponse.ts create mode 100644 src/models/ScimUpdateClientUnlinkEntityRequest.ts create mode 100644 src/models/UiConfigConfigureChecklistStateRequest.ts diff --git a/.openapi-generator/FILES b/.openapi-generator/FILES index 23815b4..eae03e5 100644 --- a/.openapi-generator/FILES +++ b/.openapi-generator/FILES @@ -316,6 +316,11 @@ src/models/OidcWriteRoleRequest.ts src/models/OidcWriteScopeRequest.ts src/models/OktaConfigureRequest.ts src/models/OktaLoginRequest.ts +src/models/OktaLoginResponse.ts +src/models/OktaReadConfigurationResponse.ts +src/models/OktaReadGroupResponse.ts +src/models/OktaReadUserResponse.ts +src/models/OktaVerifyResponse.ts src/models/OktaWriteGroupRequest.ts src/models/OktaWriteUserRequest.ts src/models/PatchRequest.ts @@ -704,6 +709,7 @@ src/models/ScepLoginRequest.ts src/models/ScepWriteRoleRoleRequest.ts src/models/ScimUpdateClientLinkGroupRequest.ts src/models/ScimUpdateClientRequest.ts +src/models/ScimUpdateClientUnlinkEntityRequest.ts src/models/ScimUpdateClientUnlinkGroupRequest.ts src/models/SealStatusResponse.ts src/models/SpiffeConfigureRequest.ts @@ -920,6 +926,7 @@ src/models/TransitSignWithAlgorithmRequest.ts src/models/TransitTrimKeyRequest.ts src/models/TransitVerifyRequest.ts src/models/TransitVerifyWithAlgorithmRequest.ts +src/models/UiConfigConfigureChecklistStateRequest.ts src/models/UiConfigListCustomMessagesResponse.ts src/models/UiConfigReadCustomMessageResponse.ts src/models/UiConfigUpdateCustomMessageRequest.ts diff --git a/src/apis/AuthApi.ts b/src/apis/AuthApi.ts index 5ffb408..0e3e046 100644 --- a/src/apis/AuthApi.ts +++ b/src/apis/AuthApi.ts @@ -114,6 +114,11 @@ import type { OciWriteRoleRequest, OktaConfigureRequest, OktaLoginRequest, + OktaLoginResponse, + OktaReadConfigurationResponse, + OktaReadGroupResponse, + OktaReadUserResponse, + OktaVerifyResponse, OktaWriteGroupRequest, OktaWriteUserRequest, RadiusConfigureRequest, @@ -346,6 +351,16 @@ import { OktaConfigureRequestToJSON, OktaLoginRequestFromJSON, OktaLoginRequestToJSON, + OktaLoginResponseFromJSON, + OktaLoginResponseToJSON, + OktaReadConfigurationResponseFromJSON, + OktaReadConfigurationResponseToJSON, + OktaReadGroupResponseFromJSON, + OktaReadGroupResponseToJSON, + OktaReadUserResponseFromJSON, + OktaReadUserResponseToJSON, + OktaVerifyResponseFromJSON, + OktaVerifyResponseToJSON, OktaWriteGroupRequestFromJSON, OktaWriteGroupRequestToJSON, OktaWriteUserRequestFromJSON, @@ -10453,6 +10468,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the Okta auth method. */ async oktaConfigureRaw(requestParameters: AuthApiOktaConfigureOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['okta_mount_path'] == null) { @@ -10488,6 +10504,7 @@ export class AuthApi extends runtime.BaseAPI { } /** + * Configure the Okta auth method. */ async oktaConfigure(okta_mount_path: string, OktaConfigureRequest: OktaConfigureRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.oktaConfigureRaw({ okta_mount_path: okta_mount_path, OktaConfigureRequest: OktaConfigureRequest }, initOverrides); @@ -10495,7 +10512,7 @@ export class AuthApi extends runtime.BaseAPI { } /** - * Manage users allowed to authenticate. + * Delete an Okta auth method group. */ async oktaDeleteGroupRaw(requestParameters: AuthApiOktaDeleteGroupRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { @@ -10528,7 +10545,7 @@ export class AuthApi extends runtime.BaseAPI { } /** - * Manage users allowed to authenticate. + * Delete an Okta auth method group. */ async oktaDeleteGroup(name: string, okta_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.oktaDeleteGroupRaw({ name: name, okta_mount_path: okta_mount_path }, initOverrides); @@ -10536,7 +10553,7 @@ export class AuthApi extends runtime.BaseAPI { } /** - * Manage additional groups for users allowed to authenticate. + * Delete an Okta auth method user. */ async oktaDeleteUserRaw(requestParameters: AuthApiOktaDeleteUserRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { @@ -10569,7 +10586,7 @@ export class AuthApi extends runtime.BaseAPI { } /** - * Manage additional groups for users allowed to authenticate. + * Delete an Okta auth method user. */ async oktaDeleteUser(name: string, okta_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.oktaDeleteUserRaw({ name: name, okta_mount_path: okta_mount_path }, initOverrides); @@ -10577,7 +10594,7 @@ export class AuthApi extends runtime.BaseAPI { } /** - * Manage users allowed to authenticate. + * List groups configured in the Okta auth method. */ async oktaListGroupsRaw(requestParameters: AuthApiOktaListGroupsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['okta_mount_path'] == null) { @@ -10614,7 +10631,7 @@ export class AuthApi extends runtime.BaseAPI { } /** - * Manage users allowed to authenticate. + * List groups configured in the Okta auth method. */ async oktaListGroups(okta_mount_path: string, list: AuthApiOktaListGroupsListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.oktaListGroupsRaw({ okta_mount_path: okta_mount_path, list: list }, initOverrides); @@ -10622,7 +10639,7 @@ export class AuthApi extends runtime.BaseAPI { } /** - * Manage additional groups for users allowed to authenticate. + * List users configured in the Okta auth method. */ async oktaListUsersRaw(requestParameters: AuthApiOktaListUsersRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['okta_mount_path'] == null) { @@ -10659,7 +10676,7 @@ export class AuthApi extends runtime.BaseAPI { } /** - * Manage additional groups for users allowed to authenticate. + * List users configured in the Okta auth method. */ async oktaListUsers(okta_mount_path: string, list: AuthApiOktaListUsersListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.oktaListUsersRaw({ okta_mount_path: okta_mount_path, list: list }, initOverrides); @@ -10667,9 +10684,9 @@ export class AuthApi extends runtime.BaseAPI { } /** - * Log in with a username and password. + * Authenticate with Okta credentials. */ - async oktaLoginRaw(requestParameters: AuthApiOktaLoginOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async oktaLoginRaw(requestParameters: AuthApiOktaLoginOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['username'] == null) { throw new runtime.RequiredError( 'username', @@ -10706,20 +10723,21 @@ export class AuthApi extends runtime.BaseAPI { body: OktaLoginRequestToJSON(requestParameters['OktaLoginRequest']), }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => OktaLoginResponseFromJSON(jsonValue)); } /** - * Log in with a username and password. + * Authenticate with Okta credentials. */ - async oktaLogin(username: string, okta_mount_path: string, OktaLoginRequest: OktaLoginRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async oktaLogin(username: string, okta_mount_path: string, OktaLoginRequest: OktaLoginRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.oktaLoginRaw({ username: username, okta_mount_path: okta_mount_path, OktaLoginRequest: OktaLoginRequest }, initOverrides); return await response.value(); } /** + * Return the current Okta configuration. */ - async oktaReadConfigurationRaw(requestParameters: AuthApiOktaReadConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async oktaReadConfigurationRaw(requestParameters: AuthApiOktaReadConfigurationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['okta_mount_path'] == null) { throw new runtime.RequiredError( 'okta_mount_path', @@ -10739,20 +10757,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => OktaReadConfigurationResponseFromJSON(jsonValue)); } /** + * Return the current Okta configuration. */ - async oktaReadConfiguration(okta_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async oktaReadConfiguration(okta_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.oktaReadConfigurationRaw({ okta_mount_path: okta_mount_path }, initOverrides); return await response.value(); } /** - * Manage users allowed to authenticate. + * Return the properties of an Okta auth method group. */ - async oktaReadGroupRaw(requestParameters: AuthApiOktaReadGroupRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async oktaReadGroupRaw(requestParameters: AuthApiOktaReadGroupRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { throw new runtime.RequiredError( 'name', @@ -10779,21 +10798,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => OktaReadGroupResponseFromJSON(jsonValue)); } /** - * Manage users allowed to authenticate. + * Return the properties of an Okta auth method group. */ - async oktaReadGroup(name: string, okta_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async oktaReadGroup(name: string, okta_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.oktaReadGroupRaw({ name: name, okta_mount_path: okta_mount_path }, initOverrides); return await response.value(); } /** - * Manage additional groups for users allowed to authenticate. + * Return the properties of an Okta auth method user. */ - async oktaReadUserRaw(requestParameters: AuthApiOktaReadUserRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async oktaReadUserRaw(requestParameters: AuthApiOktaReadUserRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { throw new runtime.RequiredError( 'name', @@ -10820,20 +10839,21 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => OktaReadUserResponseFromJSON(jsonValue)); } /** - * Manage additional groups for users allowed to authenticate. + * Return the properties of an Okta auth method user. */ - async oktaReadUser(name: string, okta_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async oktaReadUser(name: string, okta_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.oktaReadUserRaw({ name: name, okta_mount_path: okta_mount_path }, initOverrides); return await response.value(); } /** + * Return the number verification challenge for a pending Okta login. */ - async oktaVerifyRaw(requestParameters: AuthApiOktaVerifyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async oktaVerifyRaw(requestParameters: AuthApiOktaVerifyRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['nonce'] == null) { throw new runtime.RequiredError( 'nonce', @@ -10860,18 +10880,19 @@ export class AuthApi extends runtime.BaseAPI { query: queryParameters, }, initOverrides); - return new runtime.VoidApiResponse(response); + return new runtime.JSONApiResponse(response, (jsonValue) => OktaVerifyResponseFromJSON(jsonValue)); } /** + * Return the number verification challenge for a pending Okta login. */ - async oktaVerify(nonce: string, okta_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + async oktaVerify(nonce: string, okta_mount_path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.oktaVerifyRaw({ nonce: nonce, okta_mount_path: okta_mount_path }, initOverrides); return await response.value(); } /** - * Manage users allowed to authenticate. + * Create or update an Okta auth method group. */ async oktaWriteGroupRaw(requestParameters: AuthApiOktaWriteGroupOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { @@ -10914,7 +10935,7 @@ export class AuthApi extends runtime.BaseAPI { } /** - * Manage users allowed to authenticate. + * Create or update an Okta auth method group. */ async oktaWriteGroup(name: string, okta_mount_path: string, OktaWriteGroupRequest: OktaWriteGroupRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.oktaWriteGroupRaw({ name: name, okta_mount_path: okta_mount_path, OktaWriteGroupRequest: OktaWriteGroupRequest }, initOverrides); @@ -10922,7 +10943,7 @@ export class AuthApi extends runtime.BaseAPI { } /** - * Manage additional groups for users allowed to authenticate. + * Create or update an Okta auth method user. */ async oktaWriteUserRaw(requestParameters: AuthApiOktaWriteUserOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['name'] == null) { @@ -10965,7 +10986,7 @@ export class AuthApi extends runtime.BaseAPI { } /** - * Manage additional groups for users allowed to authenticate. + * Create or update an Okta auth method user. */ async oktaWriteUser(name: string, okta_mount_path: string, OktaWriteUserRequest: OktaWriteUserRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { const response = await this.oktaWriteUserRaw({ name: name, okta_mount_path: okta_mount_path, OktaWriteUserRequest: OktaWriteUserRequest }, initOverrides); diff --git a/src/apis/IdentityApi.ts b/src/apis/IdentityApi.ts index 9a77cf1..f1ca626 100644 --- a/src/apis/IdentityApi.ts +++ b/src/apis/IdentityApi.ts @@ -77,6 +77,7 @@ import type { PersonaUpdateByIdRequest, ScimUpdateClientLinkGroupRequest, ScimUpdateClientRequest, + ScimUpdateClientUnlinkEntityRequest, ScimUpdateClientUnlinkGroupRequest, StandardListResponse, TpmCreateRequest, @@ -204,6 +205,8 @@ import { ScimUpdateClientLinkGroupRequestToJSON, ScimUpdateClientRequestFromJSON, ScimUpdateClientRequestToJSON, + ScimUpdateClientUnlinkEntityRequestFromJSON, + ScimUpdateClientUnlinkEntityRequestToJSON, ScimUpdateClientUnlinkGroupRequestFromJSON, ScimUpdateClientUnlinkGroupRequestToJSON, StandardListResponseFromJSON, @@ -820,6 +823,11 @@ export interface IdentityApiScimUpdateClientLinkGroupOperationRequest { ScimUpdateClientLinkGroupRequest: ScimUpdateClientLinkGroupRequest; } +export interface IdentityApiScimUpdateClientUnlinkEntityOperationRequest { + client_name: string; + ScimUpdateClientUnlinkEntityRequest: ScimUpdateClientUnlinkEntityRequest; +} + export interface IdentityApiScimUpdateClientUnlinkGroupOperationRequest { client_name: string; ScimUpdateClientUnlinkGroupRequest: ScimUpdateClientUnlinkGroupRequest; @@ -6181,6 +6189,48 @@ export class IdentityApi extends runtime.BaseAPI { return await response.value(); } + /** + */ + async scimUpdateClientUnlinkEntityRaw(requestParameters: IdentityApiScimUpdateClientUnlinkEntityOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + if (requestParameters['client_name'] == null) { + throw new runtime.RequiredError( + 'client_name', + 'Required parameter "client_name" was null or undefined when calling scimUpdateClientUnlinkEntity().' + ); + } + + if (requestParameters['ScimUpdateClientUnlinkEntityRequest'] == null) { + throw new runtime.RequiredError( + 'ScimUpdateClientUnlinkEntityRequest', + 'Required parameter "ScimUpdateClientUnlinkEntityRequest" was null or undefined when calling scimUpdateClientUnlinkEntity().' + ); + } + + const queryParameters: any = {}; + + const headerParameters: runtime.HTTPHeaders = {}; + + headerParameters['Content-Type'] = 'application/json'; + + const builtPath = `/identity/scim/client/{client_name}/unlink-entity`.replace(`{${"client_name"}}`, encodeURIComponent(String(requestParameters['client_name']).replace(/\/+$/, ''))); + const response = await this.request({ + path: builtPath.replace(/\/\/+/g, '/'), + method: 'POST', + headers: headerParameters, + query: queryParameters, + body: ScimUpdateClientUnlinkEntityRequestToJSON(requestParameters['ScimUpdateClientUnlinkEntityRequest']), + }, initOverrides); + + return new runtime.VoidApiResponse(response); + } + + /** + */ + async scimUpdateClientUnlinkEntity(client_name: string, ScimUpdateClientUnlinkEntityRequest: ScimUpdateClientUnlinkEntityRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + const response = await this.scimUpdateClientUnlinkEntityRaw({ client_name: client_name, ScimUpdateClientUnlinkEntityRequest: ScimUpdateClientUnlinkEntityRequest }, initOverrides); + return await response.value(); + } + /** */ async scimUpdateClientUnlinkGroupRaw(requestParameters: IdentityApiScimUpdateClientUnlinkGroupOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { diff --git a/src/apis/SystemApi.ts b/src/apis/SystemApi.ts index ebb841e..c6a5d0c 100644 --- a/src/apis/SystemApi.ts +++ b/src/apis/SystemApi.ts @@ -287,6 +287,7 @@ import type { SystemWriteSyncGithubAppsNameResponse, SystemWriteUtilizationRequest, SystemWriteUtilizationResponse, + UiConfigConfigureChecklistStateRequest, UiConfigListCustomMessagesResponse, UiConfigReadCustomMessageResponse, UiConfigUpdateCustomMessageRequest, @@ -841,6 +842,8 @@ import { SystemWriteUtilizationRequestToJSON, SystemWriteUtilizationResponseFromJSON, SystemWriteUtilizationResponseToJSON, + UiConfigConfigureChecklistStateRequestFromJSON, + UiConfigConfigureChecklistStateRequestToJSON, UiConfigListCustomMessagesResponseFromJSON, UiConfigListCustomMessagesResponseToJSON, UiConfigReadCustomMessageResponseFromJSON, @@ -1653,6 +1656,10 @@ export interface SystemApiSystemReadHealthCheckExecPathRequest { path: string; } +export interface SystemApiSystemReadHealthCheckLastPathRequest { + path: string; +} + export interface SystemApiSystemReadManagedKeysTypeNameRequest { name: string; type: string; @@ -2025,6 +2032,10 @@ export interface SystemApiSystemWriteUtilizationOperationRequest { SystemWriteUtilizationRequest: SystemWriteUtilizationRequest; } +export interface SystemApiUiConfigConfigureChecklistStateOperationRequest { + UiConfigConfigureChecklistStateRequest: UiConfigConfigureChecklistStateRequest; +} + export interface SystemApiUiConfigDeleteCustomMessageRequest { id: string; } @@ -2197,7 +2208,7 @@ export class SystemApi extends runtime.BaseAPI { const headerParameters: runtime.HTTPHeaders = {}; - const builtPath = `/sys/activation-flags/oauth-resource-server/activate`; + const builtPath = `/sys/activation-flags/secrets-import/activate`; const response = await this.request({ path: builtPath.replace(/\/\/+/g, '/'), method: 'POST', @@ -2224,7 +2235,7 @@ export class SystemApi extends runtime.BaseAPI { const headerParameters: runtime.HTTPHeaders = {}; - const builtPath = `/sys/activation-flags/secrets-import/activate`; + const builtPath = `/sys/activation-flags/secrets-sync/activate`; const response = await this.request({ path: builtPath.replace(/\/\/+/g, '/'), method: 'POST', @@ -2243,33 +2254,6 @@ export class SystemApi extends runtime.BaseAPI { return await response.value(); } - /** - * Activate a flagged feature. - */ - async activationFlagsActivate_5Raw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { - const queryParameters: any = {}; - - const headerParameters: runtime.HTTPHeaders = {}; - - const builtPath = `/sys/activation-flags/secrets-sync/activate`; - const response = await this.request({ - path: builtPath.replace(/\/\/+/g, '/'), - method: 'POST', - headers: headerParameters, - query: queryParameters, - }, initOverrides); - - return new runtime.VoidApiResponse(response); - } - - /** - * Activate a flagged feature. - */ - async activationFlagsActivate_5(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { - const response = await this.activationFlagsActivate_5Raw(initOverrides); - return await response.value(); - } - /** */ async auditingCalculateHashRaw(requestParameters: SystemApiAuditingCalculateHashOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { @@ -5608,11 +5592,11 @@ export class SystemApi extends runtime.BaseAPI { * Returns metadata, semantics, and examples for one authorization_details type. * Read detailed metadata for a supported OAuth Resource Server authorization_details type. */ - async oauthResourceServerAuthorizationDetailsTypesRead_6Raw(requestParameters: SystemApiOauthResourceServerAuthorizationDetailsTypesRead0Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async oauthResourceServerAuthorizationDetailsTypesRead_5Raw(requestParameters: SystemApiOauthResourceServerAuthorizationDetailsTypesRead0Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['type'] == null) { throw new runtime.RequiredError( 'type', - 'Required parameter "type" was null or undefined when calling oauthResourceServerAuthorizationDetailsTypesRead_6().' + 'Required parameter "type" was null or undefined when calling oauthResourceServerAuthorizationDetailsTypesRead_5().' ); } @@ -5635,8 +5619,8 @@ export class SystemApi extends runtime.BaseAPI { * Returns metadata, semantics, and examples for one authorization_details type. * Read detailed metadata for a supported OAuth Resource Server authorization_details type. */ - async oauthResourceServerAuthorizationDetailsTypesRead_6(type: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { - const response = await this.oauthResourceServerAuthorizationDetailsTypesRead_6Raw({ type: type }, initOverrides); + async oauthResourceServerAuthorizationDetailsTypesRead_5(type: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + const response = await this.oauthResourceServerAuthorizationDetailsTypesRead_5Raw({ type: type }, initOverrides); return await response.value(); } @@ -6402,11 +6386,11 @@ export class SystemApi extends runtime.BaseAPI { /** */ - async pluginsRuntimesCatalogListPluginsRuntimes_7Raw(requestParameters: SystemApiPluginsRuntimesCatalogListPluginsRuntimes0Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async pluginsRuntimesCatalogListPluginsRuntimes_6Raw(requestParameters: SystemApiPluginsRuntimesCatalogListPluginsRuntimes0Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['list'] == null) { throw new runtime.RequiredError( 'list', - 'Required parameter "list" was null or undefined when calling pluginsRuntimesCatalogListPluginsRuntimes_7().' + 'Required parameter "list" was null or undefined when calling pluginsRuntimesCatalogListPluginsRuntimes_6().' ); } @@ -6431,8 +6415,8 @@ export class SystemApi extends runtime.BaseAPI { /** */ - async pluginsRuntimesCatalogListPluginsRuntimes_7(list: SystemApiPluginsRuntimesCatalogListPluginsRuntimes0ListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { - const response = await this.pluginsRuntimesCatalogListPluginsRuntimes_7Raw({ list: list }, initOverrides); + async pluginsRuntimesCatalogListPluginsRuntimes_6(list: SystemApiPluginsRuntimesCatalogListPluginsRuntimes0ListEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + const response = await this.pluginsRuntimesCatalogListPluginsRuntimes_6Raw({ list: list }, initOverrides); return await response.value(); } @@ -8109,7 +8093,7 @@ export class SystemApi extends runtime.BaseAPI { /** * Read the current status of the request limiter. */ - async readVerbosityLevelFor_8Raw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async readVerbosityLevelFor_7Raw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { const queryParameters: any = {}; const headerParameters: runtime.HTTPHeaders = {}; @@ -8128,8 +8112,8 @@ export class SystemApi extends runtime.BaseAPI { /** * Read the current status of the request limiter. */ - async readVerbosityLevelFor_8(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { - const response = await this.readVerbosityLevelFor_8Raw(initOverrides); + async readVerbosityLevelFor_7(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + const response = await this.readVerbosityLevelFor_7Raw(initOverrides); return await response.value(); } @@ -9463,18 +9447,18 @@ export class SystemApi extends runtime.BaseAPI { /** * Deletes the specified event notification subscription and stops sending event notifications to it. */ - async subscriptionsCreate_9Raw(requestParameters: SystemApiSubscriptionsCreate0Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + async subscriptionsCreate_8Raw(requestParameters: SystemApiSubscriptionsCreate0Request, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { if (requestParameters['id'] == null) { throw new runtime.RequiredError( 'id', - 'Required parameter "id" was null or undefined when calling subscriptionsCreate_9().' + 'Required parameter "id" was null or undefined when calling subscriptionsCreate_8().' ); } if (requestParameters['plugin'] == null) { throw new runtime.RequiredError( 'plugin', - 'Required parameter "plugin" was null or undefined when calling subscriptionsCreate_9().' + 'Required parameter "plugin" was null or undefined when calling subscriptionsCreate_8().' ); } @@ -9496,8 +9480,8 @@ export class SystemApi extends runtime.BaseAPI { /** * Deletes the specified event notification subscription and stops sending event notifications to it. */ - async subscriptionsCreate_9(id: string, plugin: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { - const response = await this.subscriptionsCreate_9Raw({ id: id, plugin: plugin }, initOverrides); + async subscriptionsCreate_8(id: string, plugin: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + const response = await this.subscriptionsCreate_8Raw({ id: id, plugin: plugin }, initOverrides); return await response.value(); } @@ -11273,6 +11257,38 @@ export class SystemApi extends runtime.BaseAPI { return await response.value(); } + /** + */ + async systemReadHealthCheckLastPathRaw(requestParameters: SystemApiSystemReadHealthCheckLastPathRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + if (requestParameters['path'] == null) { + throw new runtime.RequiredError( + 'path', + 'Required parameter "path" was null or undefined when calling systemReadHealthCheckLastPath().' + ); + } + + const queryParameters: any = {}; + + const headerParameters: runtime.HTTPHeaders = {}; + + const builtPath = `/sys/health-check/last/{path}`.replace(`{${"path"}}`, encodeURIComponent(String(requestParameters['path']).replace(/\/+$/, ''))); + const response = await this.request({ + path: builtPath.replace(/\/\/+/g, '/'), + method: 'GET', + headers: headerParameters, + query: queryParameters, + }, initOverrides); + + return new runtime.VoidApiResponse(response); + } + + /** + */ + async systemReadHealthCheckLastPath(path: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + const response = await this.systemReadHealthCheckLastPathRaw({ path: path }, initOverrides); + return await response.value(); + } + /** * The path responds to the following HTTP methods. GET / Returns information on the installed license POST Sets the license for the server */ @@ -12374,31 +12390,6 @@ export class SystemApi extends runtime.BaseAPI { return await response.value(); } - /** - */ - async systemWriteActivationFlagsOauthResourceServerDeactivateRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { - const queryParameters: any = {}; - - const headerParameters: runtime.HTTPHeaders = {}; - - const builtPath = `/sys/activation-flags/oauth-resource-server/deactivate`; - const response = await this.request({ - path: builtPath.replace(/\/\/+/g, '/'), - method: 'POST', - headers: headerParameters, - query: queryParameters, - }, initOverrides); - - return new runtime.VoidApiResponse(response); - } - - /** - */ - async systemWriteActivationFlagsOauthResourceServerDeactivate(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { - const response = await this.systemWriteActivationFlagsOauthResourceServerDeactivateRaw(initOverrides); - return await response.value(); - } - /** * Configure the billing data retention period. */ @@ -15123,6 +15114,43 @@ export class SystemApi extends runtime.BaseAPI { return await response.value(); } + /** + * Merge checklist state updates. + */ + async uiConfigConfigureChecklistStateRaw(requestParameters: SystemApiUiConfigConfigureChecklistStateOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + if (requestParameters['UiConfigConfigureChecklistStateRequest'] == null) { + throw new runtime.RequiredError( + 'UiConfigConfigureChecklistStateRequest', + 'Required parameter "UiConfigConfigureChecklistStateRequest" was null or undefined when calling uiConfigConfigureChecklistState().' + ); + } + + const queryParameters: any = {}; + + const headerParameters: runtime.HTTPHeaders = {}; + + headerParameters['Content-Type'] = 'application/json'; + + const builtPath = `/sys/config/ui/checklist-state`; + const response = await this.request({ + path: builtPath.replace(/\/\/+/g, '/'), + method: 'POST', + headers: headerParameters, + query: queryParameters, + body: UiConfigConfigureChecklistStateRequestToJSON(requestParameters['UiConfigConfigureChecklistStateRequest']), + }, initOverrides); + + return new runtime.VoidApiResponse(response); + } + + /** + * Merge checklist state updates. + */ + async uiConfigConfigureChecklistState(UiConfigConfigureChecklistStateRequest: UiConfigConfigureChecklistStateRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + const response = await this.uiConfigConfigureChecklistStateRaw({ UiConfigConfigureChecklistStateRequest: UiConfigConfigureChecklistStateRequest }, initOverrides); + return await response.value(); + } + /** * Delete custom message */ @@ -15207,6 +15235,33 @@ export class SystemApi extends runtime.BaseAPI { return await response.value(); } + /** + * Return the checklist state document. + */ + async uiConfigReadChecklistStateRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise> { + const queryParameters: any = {}; + + const headerParameters: runtime.HTTPHeaders = {}; + + const builtPath = `/sys/config/ui/checklist-state`; + const response = await this.request({ + path: builtPath.replace(/\/\/+/g, '/'), + method: 'GET', + headers: headerParameters, + query: queryParameters, + }, initOverrides); + + return new runtime.VoidApiResponse(response); + } + + /** + * Return the checklist state document. + */ + async uiConfigReadChecklistState(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise { + const response = await this.uiConfigReadChecklistStateRaw(initOverrides); + return await response.value(); + } + /** * Read custom message */ diff --git a/src/models/AzureConfigureAuthRequest.ts b/src/models/AzureConfigureAuthRequest.ts index a5dd8de..71b83d7 100644 --- a/src/models/AzureConfigureAuthRequest.ts +++ b/src/models/AzureConfigureAuthRequest.ts @@ -23,6 +23,12 @@ import { mapValues } from '../runtime'; * @interface AzureConfigureAuthRequest */ export interface AzureConfigureAuthRequest { + /** + * Specifies how Vault authenticates to Azure for resource metadata lookups. Valid values: root_creds, plugin_wif, aks_wi, msi. If not specified, defaults to existing discovery logic for backward compatibility. + * @type {string} + * @memberof AzureConfigureAuthRequest + */ + auth_type?: string; /** * The OAuth2 client id to connection to Azure. This value can also be provided with the AZURE_CLIENT_ID environment variable. * @type {string} @@ -138,6 +144,7 @@ export function AzureConfigureAuthRequestFromJSONTyped(json: any, ignoreDiscrimi } return { + 'auth_type': json['auth_type'] == null ? undefined : json['auth_type'], 'client_id': json['client_id'] == null ? undefined : json['client_id'], 'client_secret': json['client_secret'] == null ? undefined : json['client_secret'], 'disable_automated_rotation': json['disable_automated_rotation'] == null ? undefined : json['disable_automated_rotation'], @@ -168,6 +175,7 @@ export function AzureConfigureAuthRequestToJSONTyped(value?: AzureConfigureAuthR return { + 'auth_type': value['auth_type'], 'client_id': value['client_id'], 'client_secret': value['client_secret'], 'disable_automated_rotation': value['disable_automated_rotation'], diff --git a/src/models/ControlHubEnrollRequest.ts b/src/models/ControlHubEnrollRequest.ts index 90294f9..c695224 100644 --- a/src/models/ControlHubEnrollRequest.ts +++ b/src/models/ControlHubEnrollRequest.ts @@ -29,6 +29,12 @@ export interface ControlHubEnrollRequest { * @memberof ControlHubEnrollRequest */ activation_token: string; + /** + * The control hub hostname for enrolling this Vault instance. + * @type {string} + * @memberof ControlHubEnrollRequest + */ + hostname: string; } /** @@ -36,6 +42,7 @@ export interface ControlHubEnrollRequest { */ export function instanceOfControlHubEnrollRequest(value: object): value is ControlHubEnrollRequest { if (!('activation_token' in value) || value['activation_token'] === undefined) return false; + if (!('hostname' in value) || value['hostname'] === undefined) return false; return true; } @@ -50,6 +57,7 @@ export function ControlHubEnrollRequestFromJSONTyped(json: any, ignoreDiscrimina return { 'activation_token': json['activation_token'], + 'hostname': json['hostname'], }; } @@ -65,6 +73,7 @@ export function ControlHubEnrollRequestToJSONTyped(value?: ControlHubEnrollReque return { 'activation_token': value['activation_token'], + 'hostname': value['hostname'], }; } diff --git a/src/models/OktaLoginResponse.ts b/src/models/OktaLoginResponse.ts new file mode 100644 index 0000000..e8063ae --- /dev/null +++ b/src/models/OktaLoginResponse.ts @@ -0,0 +1,157 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface OktaLoginResponse + */ +export interface OktaLoginResponse { + /** + * Accessor for the client token. + * @type {string} + * @memberof OktaLoginResponse + */ + accessor?: string; + /** + * Token issued by Vault for the authenticated client. + * @type {string} + * @memberof OktaLoginResponse + */ + client_token?: string; + /** + * Entity ID associated with the token. + * @type {string} + * @memberof OktaLoginResponse + */ + entity_id?: string; + /** + * Lease duration in seconds. + * @type {number} + * @memberof OktaLoginResponse + */ + lease_duration?: number; + /** + * Metadata associated with the token. + * @type {object} + * @memberof OktaLoginResponse + */ + metadata?: object; + /** + * MFA requirement information. + * @type {object} + * @memberof OktaLoginResponse + */ + mfa_requirement?: object; + /** + * Number of uses remaining for the token. + * @type {number} + * @memberof OktaLoginResponse + */ + num_uses?: number; + /** + * Whether the token is an orphan. + * @type {boolean} + * @memberof OktaLoginResponse + */ + orphan?: boolean; + /** + * List of policies associated with the token. + * @type {Array} + * @memberof OktaLoginResponse + */ + policies?: Array; + /** + * Whether the token is renewable. + * @type {boolean} + * @memberof OktaLoginResponse + */ + renewable?: boolean; + /** + * List of token policies. + * @type {Array} + * @memberof OktaLoginResponse + */ + token_policies?: Array; + /** + * Type of the token. + * @type {string} + * @memberof OktaLoginResponse + */ + token_type?: string; +} + +/** + * Check if a given object implements the OktaLoginResponse interface. + */ +export function instanceOfOktaLoginResponse(value: object): value is OktaLoginResponse { + return true; +} + +export function OktaLoginResponseFromJSON(json: any): OktaLoginResponse { + return OktaLoginResponseFromJSONTyped(json, false); +} + +export function OktaLoginResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): OktaLoginResponse { + if (json == null) { + return json; + } + return { + + 'accessor': json['accessor'] == null ? undefined : json['accessor'], + 'client_token': json['client_token'] == null ? undefined : json['client_token'], + 'entity_id': json['entity_id'] == null ? undefined : json['entity_id'], + 'lease_duration': json['lease_duration'] == null ? undefined : json['lease_duration'], + 'metadata': json['metadata'] == null ? undefined : json['metadata'], + 'mfa_requirement': json['mfa_requirement'] == null ? undefined : json['mfa_requirement'], + 'num_uses': json['num_uses'] == null ? undefined : json['num_uses'], + 'orphan': json['orphan'] == null ? undefined : json['orphan'], + 'policies': json['policies'] == null ? undefined : json['policies'], + 'renewable': json['renewable'] == null ? undefined : json['renewable'], + 'token_policies': json['token_policies'] == null ? undefined : json['token_policies'], + 'token_type': json['token_type'] == null ? undefined : json['token_type'], + }; +} + +export function OktaLoginResponseToJSON(json: any): OktaLoginResponse { + return OktaLoginResponseToJSONTyped(json, false); +} + +export function OktaLoginResponseToJSONTyped(value?: OktaLoginResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'accessor': value['accessor'], + 'client_token': value['client_token'], + 'entity_id': value['entity_id'], + 'lease_duration': value['lease_duration'], + 'metadata': value['metadata'], + 'mfa_requirement': value['mfa_requirement'], + 'num_uses': value['num_uses'], + 'orphan': value['orphan'], + 'policies': value['policies'], + 'renewable': value['renewable'], + 'token_policies': value['token_policies'], + 'token_type': value['token_type'], + }; +} + diff --git a/src/models/OktaReadConfigurationResponse.ts b/src/models/OktaReadConfigurationResponse.ts new file mode 100644 index 0000000..bd335d7 --- /dev/null +++ b/src/models/OktaReadConfigurationResponse.ts @@ -0,0 +1,201 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface OktaReadConfigurationResponse + */ +export interface OktaReadConfigurationResponse { + /** + * Metadata to be set on the token alias. + * @type {object} + * @memberof OktaReadConfigurationResponse + */ + alias_metadata?: object; + /** + * The base domain used for the Okta API. + * @type {string} + * @memberof OktaReadConfigurationResponse + */ + base_url?: string; + /** + * When true, Okta MFA requests are bypassed. + * @type {boolean} + * @memberof OktaReadConfigurationResponse + */ + bypass_okta_mfa?: boolean; + /** + * Use "token_max_ttl" instead. If this and "token_max_ttl" are both specified, only "token_max_ttl" will be used. + * @type {number} + * @memberof OktaReadConfigurationResponse + * @deprecated + */ + max_ttl?: number; + /** + * Name of the Okta organization. + * @type {string} + * @memberof OktaReadConfigurationResponse + */ + org_name?: string; + /** + * Use "org_name" instead. If this and "org_name" are both specified, only "org_name" will be used. + * @type {string} + * @memberof OktaReadConfigurationResponse + * @deprecated + */ + organization?: string; + /** + * Use "base_url" instead. If this and "base_url" are both specified, only "base_url" will be used. + * @type {boolean} + * @memberof OktaReadConfigurationResponse + * @deprecated + */ + production?: boolean; + /** + * List of CIDRs valid for the token. + * @type {Array} + * @memberof OktaReadConfigurationResponse + */ + token_bound_cidrs?: Array; + /** + * Hard cap on the token TTL. + * @type {number} + * @memberof OktaReadConfigurationResponse + */ + token_explicit_max_ttl?: number; + /** + * Maximum token TTL. + * @type {number} + * @memberof OktaReadConfigurationResponse + */ + token_max_ttl?: number; + /** + * When true, the default policy is not added to the token. + * @type {boolean} + * @memberof OktaReadConfigurationResponse + */ + token_no_default_policy?: boolean; + /** + * Number of uses the token is allowed. + * @type {number} + * @memberof OktaReadConfigurationResponse + */ + token_num_uses?: number; + /** + * Period of the token. + * @type {number} + * @memberof OktaReadConfigurationResponse + */ + token_period?: number; + /** + * List of policies applied to the token. + * @type {Array} + * @memberof OktaReadConfigurationResponse + */ + token_policies?: Array; + /** + * Token TTL in seconds. + * @type {number} + * @memberof OktaReadConfigurationResponse + */ + token_ttl?: number; + /** + * Type of the token. + * @type {string} + * @memberof OktaReadConfigurationResponse + */ + token_type?: string; + /** + * Use "token_ttl" instead. If this and "token_ttl" are both specified, only "token_ttl" will be used. + * @type {number} + * @memberof OktaReadConfigurationResponse + * @deprecated + */ + ttl?: number; +} + +/** + * Check if a given object implements the OktaReadConfigurationResponse interface. + */ +export function instanceOfOktaReadConfigurationResponse(value: object): value is OktaReadConfigurationResponse { + return true; +} + +export function OktaReadConfigurationResponseFromJSON(json: any): OktaReadConfigurationResponse { + return OktaReadConfigurationResponseFromJSONTyped(json, false); +} + +export function OktaReadConfigurationResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): OktaReadConfigurationResponse { + if (json == null) { + return json; + } + return { + + 'alias_metadata': json['alias_metadata'] == null ? undefined : json['alias_metadata'], + 'base_url': json['base_url'] == null ? undefined : json['base_url'], + 'bypass_okta_mfa': json['bypass_okta_mfa'] == null ? undefined : json['bypass_okta_mfa'], + 'max_ttl': json['max_ttl'] == null ? undefined : json['max_ttl'], + 'org_name': json['org_name'] == null ? undefined : json['org_name'], + 'organization': json['organization'] == null ? undefined : json['organization'], + 'production': json['production'] == null ? undefined : json['production'], + 'token_bound_cidrs': json['token_bound_cidrs'] == null ? undefined : json['token_bound_cidrs'], + 'token_explicit_max_ttl': json['token_explicit_max_ttl'] == null ? undefined : json['token_explicit_max_ttl'], + 'token_max_ttl': json['token_max_ttl'] == null ? undefined : json['token_max_ttl'], + 'token_no_default_policy': json['token_no_default_policy'] == null ? undefined : json['token_no_default_policy'], + 'token_num_uses': json['token_num_uses'] == null ? undefined : json['token_num_uses'], + 'token_period': json['token_period'] == null ? undefined : json['token_period'], + 'token_policies': json['token_policies'] == null ? undefined : json['token_policies'], + 'token_ttl': json['token_ttl'] == null ? undefined : json['token_ttl'], + 'token_type': json['token_type'] == null ? undefined : json['token_type'], + 'ttl': json['ttl'] == null ? undefined : json['ttl'], + }; +} + +export function OktaReadConfigurationResponseToJSON(json: any): OktaReadConfigurationResponse { + return OktaReadConfigurationResponseToJSONTyped(json, false); +} + +export function OktaReadConfigurationResponseToJSONTyped(value?: OktaReadConfigurationResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'alias_metadata': value['alias_metadata'], + 'base_url': value['base_url'], + 'bypass_okta_mfa': value['bypass_okta_mfa'], + 'max_ttl': value['max_ttl'], + 'org_name': value['org_name'], + 'organization': value['organization'], + 'production': value['production'], + 'token_bound_cidrs': value['token_bound_cidrs'], + 'token_explicit_max_ttl': value['token_explicit_max_ttl'], + 'token_max_ttl': value['token_max_ttl'], + 'token_no_default_policy': value['token_no_default_policy'], + 'token_num_uses': value['token_num_uses'], + 'token_period': value['token_period'], + 'token_policies': value['token_policies'], + 'token_ttl': value['token_ttl'], + 'token_type': value['token_type'], + 'ttl': value['ttl'], + }; +} + diff --git a/src/models/OktaReadGroupResponse.ts b/src/models/OktaReadGroupResponse.ts new file mode 100644 index 0000000..98b93e2 --- /dev/null +++ b/src/models/OktaReadGroupResponse.ts @@ -0,0 +1,69 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface OktaReadGroupResponse + */ +export interface OktaReadGroupResponse { + /** + * List of policies associated with the group. + * @type {Array} + * @memberof OktaReadGroupResponse + */ + policies?: Array; +} + +/** + * Check if a given object implements the OktaReadGroupResponse interface. + */ +export function instanceOfOktaReadGroupResponse(value: object): value is OktaReadGroupResponse { + return true; +} + +export function OktaReadGroupResponseFromJSON(json: any): OktaReadGroupResponse { + return OktaReadGroupResponseFromJSONTyped(json, false); +} + +export function OktaReadGroupResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): OktaReadGroupResponse { + if (json == null) { + return json; + } + return { + + 'policies': json['policies'] == null ? undefined : json['policies'], + }; +} + +export function OktaReadGroupResponseToJSON(json: any): OktaReadGroupResponse { + return OktaReadGroupResponseToJSONTyped(json, false); +} + +export function OktaReadGroupResponseToJSONTyped(value?: OktaReadGroupResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'policies': value['policies'], + }; +} + diff --git a/src/models/OktaReadUserResponse.ts b/src/models/OktaReadUserResponse.ts new file mode 100644 index 0000000..1ad60ac --- /dev/null +++ b/src/models/OktaReadUserResponse.ts @@ -0,0 +1,77 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface OktaReadUserResponse + */ +export interface OktaReadUserResponse { + /** + * List of groups associated with the user. + * @type {Array} + * @memberof OktaReadUserResponse + */ + groups?: Array; + /** + * List of policies associated with the user. + * @type {Array} + * @memberof OktaReadUserResponse + */ + policies?: Array; +} + +/** + * Check if a given object implements the OktaReadUserResponse interface. + */ +export function instanceOfOktaReadUserResponse(value: object): value is OktaReadUserResponse { + return true; +} + +export function OktaReadUserResponseFromJSON(json: any): OktaReadUserResponse { + return OktaReadUserResponseFromJSONTyped(json, false); +} + +export function OktaReadUserResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): OktaReadUserResponse { + if (json == null) { + return json; + } + return { + + 'groups': json['groups'] == null ? undefined : json['groups'], + 'policies': json['policies'] == null ? undefined : json['policies'], + }; +} + +export function OktaReadUserResponseToJSON(json: any): OktaReadUserResponse { + return OktaReadUserResponseToJSONTyped(json, false); +} + +export function OktaReadUserResponseToJSONTyped(value?: OktaReadUserResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'groups': value['groups'], + 'policies': value['policies'], + }; +} + diff --git a/src/models/OktaVerifyResponse.ts b/src/models/OktaVerifyResponse.ts new file mode 100644 index 0000000..3d0d0ac --- /dev/null +++ b/src/models/OktaVerifyResponse.ts @@ -0,0 +1,69 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface OktaVerifyResponse + */ +export interface OktaVerifyResponse { + /** + * The correct answer for the number verification challenge. + * @type {number} + * @memberof OktaVerifyResponse + */ + correct_answer?: number; +} + +/** + * Check if a given object implements the OktaVerifyResponse interface. + */ +export function instanceOfOktaVerifyResponse(value: object): value is OktaVerifyResponse { + return true; +} + +export function OktaVerifyResponseFromJSON(json: any): OktaVerifyResponse { + return OktaVerifyResponseFromJSONTyped(json, false); +} + +export function OktaVerifyResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): OktaVerifyResponse { + if (json == null) { + return json; + } + return { + + 'correct_answer': json['correct_answer'] == null ? undefined : json['correct_answer'], + }; +} + +export function OktaVerifyResponseToJSON(json: any): OktaVerifyResponse { + return OktaVerifyResponseToJSONTyped(json, false); +} + +export function OktaVerifyResponseToJSONTyped(value?: OktaVerifyResponse | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'correct_answer': value['correct_answer'], + }; +} + diff --git a/src/models/ScimUpdateClientRequest.ts b/src/models/ScimUpdateClientRequest.ts index 0b54571..b6973bf 100644 --- a/src/models/ScimUpdateClientRequest.ts +++ b/src/models/ScimUpdateClientRequest.ts @@ -35,12 +35,30 @@ export interface ScimUpdateClientRequest { * @memberof ScimUpdateClientRequest */ alias_mount_accessor?: string; + /** + * Optional. Allowlist of mount accessors on which this SCIM client may create or update secondary (non-primary) aliases. When empty or omitted the client may use any non-local mount (current unrestricted behaviour). alias_mount_accessor is always implicitly allowed and must not appear in this list. On update, omitting the field preserves the existing value; supplying an explicit empty list clears the allowlist. + * @type {Array} + * @memberof ScimUpdateClientRequest + */ + allowed_extra_alias_mount_accessors?: Array; /** * Optional. The Vault SCIM extension schema version ('2.0' or '2.1') used for responses when a request does not specify an extension schema. Defaults to '2.1' for newly created clients; clients created before this field existed behave as '2.0'. * @type {string} * @memberof ScimUpdateClientRequest */ default_schema_version?: string; + /** + * If set to true, deletes all SCIM-managed resources (groups, entities, aliases) owned by the client before removing the client itself. + * @type {boolean} + * @memberof ScimUpdateClientRequest + */ + delete_linked_resources?: boolean; + /** + * If set to true, removes the SCIM client association from all owned resources without deleting them, then removes the client. + * @type {boolean} + * @memberof ScimUpdateClientRequest + */ + unlink_resources?: boolean; } /** @@ -62,7 +80,10 @@ export function ScimUpdateClientRequestFromJSONTyped(json: any, ignoreDiscrimina 'access_grant_principal': json['access_grant_principal'] == null ? undefined : json['access_grant_principal'], 'alias_mount_accessor': json['alias_mount_accessor'] == null ? undefined : json['alias_mount_accessor'], + 'allowed_extra_alias_mount_accessors': json['allowed_extra_alias_mount_accessors'] == null ? undefined : json['allowed_extra_alias_mount_accessors'], 'default_schema_version': json['default_schema_version'] == null ? undefined : json['default_schema_version'], + 'delete_linked_resources': json['delete-linked-resources'] == null ? undefined : json['delete-linked-resources'], + 'unlink_resources': json['unlink-resources'] == null ? undefined : json['unlink-resources'], }; } @@ -79,7 +100,10 @@ export function ScimUpdateClientRequestToJSONTyped(value?: ScimUpdateClientReque 'access_grant_principal': value['access_grant_principal'], 'alias_mount_accessor': value['alias_mount_accessor'], + 'allowed_extra_alias_mount_accessors': value['allowed_extra_alias_mount_accessors'], 'default_schema_version': value['default_schema_version'], + 'delete-linked-resources': value['delete_linked_resources'], + 'unlink-resources': value['unlink_resources'], }; } diff --git a/src/models/ScimUpdateClientUnlinkEntityRequest.ts b/src/models/ScimUpdateClientUnlinkEntityRequest.ts new file mode 100644 index 0000000..8681f07 --- /dev/null +++ b/src/models/ScimUpdateClientUnlinkEntityRequest.ts @@ -0,0 +1,85 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface ScimUpdateClientUnlinkEntityRequest + */ +export interface ScimUpdateClientUnlinkEntityRequest { + /** + * ID of the Vault entity to unlink from this SCIM client. + * @type {string} + * @memberof ScimUpdateClientUnlinkEntityRequest + */ + entity_id?: string; + /** + * Required when the entity is a member of SCIM-managed groups. Consent to removing those group memberships. + * @type {boolean} + * @memberof ScimUpdateClientUnlinkEntityRequest + */ + remove_memberships?: boolean; + /** + * Required when the entity has SCIM-managed aliases. Consent to making all managed aliases unmanaged. + * @type {boolean} + * @memberof ScimUpdateClientUnlinkEntityRequest + */ + unlink_aliases?: boolean; +} + +/** + * Check if a given object implements the ScimUpdateClientUnlinkEntityRequest interface. + */ +export function instanceOfScimUpdateClientUnlinkEntityRequest(value: object): value is ScimUpdateClientUnlinkEntityRequest { + return true; +} + +export function ScimUpdateClientUnlinkEntityRequestFromJSON(json: any): ScimUpdateClientUnlinkEntityRequest { + return ScimUpdateClientUnlinkEntityRequestFromJSONTyped(json, false); +} + +export function ScimUpdateClientUnlinkEntityRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): ScimUpdateClientUnlinkEntityRequest { + if (json == null) { + return json; + } + return { + + 'entity_id': json['entity_id'] == null ? undefined : json['entity_id'], + 'remove_memberships': json['remove_memberships'] == null ? undefined : json['remove_memberships'], + 'unlink_aliases': json['unlink_aliases'] == null ? undefined : json['unlink_aliases'], + }; +} + +export function ScimUpdateClientUnlinkEntityRequestToJSON(json: any): ScimUpdateClientUnlinkEntityRequest { + return ScimUpdateClientUnlinkEntityRequestToJSONTyped(json, false); +} + +export function ScimUpdateClientUnlinkEntityRequestToJSONTyped(value?: ScimUpdateClientUnlinkEntityRequest | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'entity_id': value['entity_id'], + 'remove_memberships': value['remove_memberships'], + 'unlink_aliases': value['unlink_aliases'], + }; +} + diff --git a/src/models/SystemWriteManagedKeysTypeNameRequest.ts b/src/models/SystemWriteManagedKeysTypeNameRequest.ts index 2a27137..18c4c6d 100644 --- a/src/models/SystemWriteManagedKeysTypeNameRequest.ts +++ b/src/models/SystemWriteManagedKeysTypeNameRequest.ts @@ -95,6 +95,12 @@ export interface SystemWriteManagedKeysTypeNameRequest { * @memberof SystemWriteManagedKeysTypeNameRequest */ curve?: string; + /** + * Encryption mode for the key: "envelope" (default) for AES-GCM envelope encryption, or "raw" to encrypt directly with the KMS key. + * @type {string} + * @memberof SystemWriteManagedKeysTypeNameRequest + */ + encryption_mode?: string; /** * The AWS endpoint to use * @type {string} @@ -270,6 +276,7 @@ export function SystemWriteManagedKeysTypeNameRequestFromJSONTyped(json: any, ig 'crypto_key': json['crypto_key'] == null ? undefined : json['crypto_key'], 'crypto_key_version': json['crypto_key_version'] == null ? undefined : json['crypto_key_version'], 'curve': json['curve'] == null ? undefined : json['curve'], + 'encryption_mode': json['encryption_mode'] == null ? undefined : json['encryption_mode'], 'endpoint': json['endpoint'] == null ? undefined : json['endpoint'], 'environment': json['environment'] == null ? undefined : json['environment'], 'force_rw_session': json['force_rw_session'] == null ? undefined : json['force_rw_session'], @@ -320,6 +327,7 @@ export function SystemWriteManagedKeysTypeNameRequestToJSONTyped(value?: SystemW 'crypto_key': value['crypto_key'], 'crypto_key_version': value['crypto_key_version'], 'curve': value['curve'], + 'encryption_mode': value['encryption_mode'], 'endpoint': value['endpoint'], 'environment': value['environment'], 'force_rw_session': value['force_rw_session'], diff --git a/src/models/TransitCreateKeyRequest.ts b/src/models/TransitCreateKeyRequest.ts index f2d12d5..bc7adc2 100644 --- a/src/models/TransitCreateKeyRequest.ts +++ b/src/models/TransitCreateKeyRequest.ts @@ -66,7 +66,7 @@ export interface TransitCreateKeyRequest { */ hybrid_key_type_ec?: TransitCreateKeyRequestHybridKeyTypeEcEnum; /** - * The post-quantum key type to use for hybrid signature schemes. Supported types are: ml-dsa. + * The post-quantum key type to use for hybrid signature schemes. Supported types are: ml-dsa and slh-dsa. * @type {string} * @memberof TransitCreateKeyRequest */ @@ -118,7 +118,8 @@ export enum TransitCreateKeyRequestHybridKeyTypeEcEnum { * @enum {string} */ export enum TransitCreateKeyRequestHybridKeyTypePqcEnum { - ML_DSA = 'ml-dsa' + ML_DSA = 'ml-dsa', + SLH_DSA = 'slh-dsa' } /** * @export diff --git a/src/models/TransitReadKeyResponse.ts b/src/models/TransitReadKeyResponse.ts index 4d83dcb..f8f1d9f 100644 --- a/src/models/TransitReadKeyResponse.ts +++ b/src/models/TransitReadKeyResponse.ts @@ -78,7 +78,7 @@ export interface TransitReadKeyResponse { */ hybrid_key_type_ec?: TransitReadKeyResponseHybridKeyTypeEcEnum; /** - * The post-quantum key type to use for hybrid signature schemes. Supported types are: ml-dsa. + * The post-quantum key type to use for hybrid signature schemes. Supported types are: ml-dsa and slh-dsa. * @type {string} * @memberof TransitReadKeyResponse */ @@ -208,7 +208,8 @@ export enum TransitReadKeyResponseHybridKeyTypeEcEnum { * @enum {string} */ export enum TransitReadKeyResponseHybridKeyTypePqcEnum { - ML_DSA = 'ml-dsa' + ML_DSA = 'ml-dsa', + SLH_DSA = 'slh-dsa' } /** * @export diff --git a/src/models/UiConfigConfigureChecklistStateRequest.ts b/src/models/UiConfigConfigureChecklistStateRequest.ts new file mode 100644 index 0000000..d3293c9 --- /dev/null +++ b/src/models/UiConfigConfigureChecklistStateRequest.ts @@ -0,0 +1,69 @@ +/** + * Copyright IBM Corp. 2025, 2026 + */ + +/* tslint:disable */ +/* eslint-disable */ +/** + * HashiCorp Vault API + * HTTP API that gives you full access to Vault. All API routes are prefixed with `/v1/`. + * + * The version of the OpenAPI document: 2.2.0 + * + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +import { mapValues } from '../runtime'; +/** + * + * @export + * @interface UiConfigConfigureChecklistStateRequest + */ +export interface UiConfigConfigureChecklistStateRequest { + /** + * The checklist state document to merge into UI config. + * @type {object} + * @memberof UiConfigConfigureChecklistStateRequest + */ + checklist_state?: object; +} + +/** + * Check if a given object implements the UiConfigConfigureChecklistStateRequest interface. + */ +export function instanceOfUiConfigConfigureChecklistStateRequest(value: object): value is UiConfigConfigureChecklistStateRequest { + return true; +} + +export function UiConfigConfigureChecklistStateRequestFromJSON(json: any): UiConfigConfigureChecklistStateRequest { + return UiConfigConfigureChecklistStateRequestFromJSONTyped(json, false); +} + +export function UiConfigConfigureChecklistStateRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): UiConfigConfigureChecklistStateRequest { + if (json == null) { + return json; + } + return { + + 'checklist_state': json['checklist_state'] == null ? undefined : json['checklist_state'], + }; +} + +export function UiConfigConfigureChecklistStateRequestToJSON(json: any): UiConfigConfigureChecklistStateRequest { + return UiConfigConfigureChecklistStateRequestToJSONTyped(json, false); +} + +export function UiConfigConfigureChecklistStateRequestToJSONTyped(value?: UiConfigConfigureChecklistStateRequest | null, ignoreDiscriminator: boolean = false): any { + if (value == null) { + return value; + } + + return { + + 'checklist_state': value['checklist_state'], + }; +} + diff --git a/src/models/index.ts b/src/models/index.ts index 8d071bb..c52b2cf 100644 --- a/src/models/index.ts +++ b/src/models/index.ts @@ -314,6 +314,11 @@ export * from './OidcWriteRoleRequest'; export * from './OidcWriteScopeRequest'; export * from './OktaConfigureRequest'; export * from './OktaLoginRequest'; +export * from './OktaLoginResponse'; +export * from './OktaReadConfigurationResponse'; +export * from './OktaReadGroupResponse'; +export * from './OktaReadUserResponse'; +export * from './OktaVerifyResponse'; export * from './OktaWriteGroupRequest'; export * from './OktaWriteUserRequest'; export * from './PatchRequest'; @@ -702,6 +707,7 @@ export * from './ScepLoginRequest'; export * from './ScepWriteRoleRoleRequest'; export * from './ScimUpdateClientLinkGroupRequest'; export * from './ScimUpdateClientRequest'; +export * from './ScimUpdateClientUnlinkEntityRequest'; export * from './ScimUpdateClientUnlinkGroupRequest'; export * from './SealStatusResponse'; export * from './SpiffeConfigureRequest'; @@ -918,6 +924,7 @@ export * from './TransitSignWithAlgorithmRequest'; export * from './TransitTrimKeyRequest'; export * from './TransitVerifyRequest'; export * from './TransitVerifyWithAlgorithmRequest'; +export * from './UiConfigConfigureChecklistStateRequest'; export * from './UiConfigListCustomMessagesResponse'; export * from './UiConfigReadCustomMessageResponse'; export * from './UiConfigUpdateCustomMessageRequest';