openapi: 3.0.1
info:
  title: LemonLDAP::NG Manager API
  description: The Manager API allows an administrator to modify the LemonLDAP::NG configuration programmatically. It is not meant to be accessed by end users. The client libraries mentionned in examples can be generated from doc/sources/manager-api/openapi-spec.yaml
  version: 2.0.9
servers:
  - url: https://manager-api.example.com
tags:
- name: samlsp
  description: SAML Service Providers
- name: oidcrp
  description: OpenID Connect Relaying Parties
- name: 2fa
  description: Registered Second Factors

paths:
  /api/v1/status:
    get:
      summary: Check the status of the API
      operationId: status
      responses:
        200:
          $ref: '#/components/responses/StatusResponse'
        503:
          $ref: '#/components/responses/StatusResponse'

  /api/v1/providers/saml/sp:
    post:
      tags:
      - samlsp
      summary: Create a new SAML Service provider
      operationId: addsamlsp
      requestBody:
        description: SAML Service provider to add
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SamlSp'
        required: true
      responses:
        201:
          $ref: '#/components/responses/Created'
        400:
          $ref: '#/components/responses/Error'
        409:
          $ref: '#/components/responses/Conflict'

  /api/v1/providers/saml/sp/findByConfKey:
    get:
      tags:
      - samlsp
      summary: Finds SAML Service providers by configuration key
      description: Takes a search pattern to be tested against existing service providers
      operationId: findSamlSpByConfKey
      parameters:
      - name: pattern
        in: query
        description: Search pattern
        required: true
        schema:
          type: "string"
        examples:
          any:
            summary: Any value
            value: "*"
          prefix:
            summary: Given prefix
            value: "zone1-*"
          anywhere:
            summary: Substring
            value: "something"
      responses:
        200:
          $ref: '#/components/responses/ManySamlSp'
        400:
          $ref: '#/components/responses/Error'

  /api/v1/providers/saml/sp/findByEntityId:
    get:
      tags:
      - samlsp
      summary: Finds SAML Service Provider by Entity ID
      operationId: findSamlSpByEntityId
      parameters:
      - name: entityId
        in: query
        description: Entity ID to search
        required: true
        schema:
          type: "string"
        example: http://mysp.example.com/saml/metadata
      responses:
        200:
          $ref: '#/components/responses/OneSamlSp'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'

  /api/v1/providers/saml/sp/{confKey}:
    get:
      tags:
      - samlsp
      summary: Get SAML Service Provider by configuration key
      description: Returns a single Service Provider
      operationId: getSamlSpByConfKey
      parameters:
      - name: confKey
        in: path
        description: Configuration key of SAML Service Provider
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      responses:
        200:
          $ref: '#/components/responses/OneSamlSp'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'

    put:
      tags:
      - samlsp
      summary: Replaces a SAML Service
      operationId: replaceSamlSp
      parameters:
      - name: confKey
        in: path
        description: Configuration key of SAML Service Provider that needs to be replaced
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SamlSpReplace'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'
        409:
          $ref: '#/components/responses/Conflict'
    patch:
      tags:
      - samlsp
      summary: Updates a SAML Service.
      operationId: updateSamlSp
      parameters:
      - name: confKey
        in: path
        description: Configuration key of SAML Service Provider that needs to be updated
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SamlSpUpdate'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'
        409:
          $ref: '#/components/responses/Conflict'

    delete:
      tags:
      - samlsp
      summary: Deletes a SAML Service Provider
      operationId: deleteSamlSp
      parameters:
      - name: confKey
        in: path
        description: Configuration key of SAML Service Provider to delete
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'

  /api/v1/providers/oidc/rp:
    post:
      tags:
      - oidcrp
      summary: Create a new OpenID Connect Relaying Party
      operationId: addoidcrp
      requestBody:
        description: OpenID Connect Relaying Party to add
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OidcRp'
        required: true
      responses:
        201:
          $ref: '#/components/responses/Created'
        400:
          $ref: '#/components/responses/Error'
        409:
          $ref: '#/components/responses/Conflict'
  /api/v1/providers/oidc/rp/findByConfKey:
    get:
      tags:
      - oidcrp
      summary: Finds OpenID Connect Relaying Partys by configuration key
      description: Takes a search pattern to be tested against existing service providers
      operationId: findOidcRpByConfKey
      parameters:
      - name: pattern
        in: query
        description: Search pattern
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
        examples:
          any:
            summary: Any value
            value: "*"
          prefix:
            summary: Given prefix
            value: "zone1-*"
          anywhere:
            summary: Substring
            value: "something"
      responses:
        200:
          $ref: '#/components/responses/ManyOidcRp'
        400:
          $ref: '#/components/responses/Error'

  /api/v1/providers/oidc/rp/findByClientId:
    get:
      tags:
      - oidcrp
      summary: Finds OpenID Connect Relaying Party by Client ID
      operationId: findOidcRpByClientId
      parameters:
      - name: clientId
        in: query
        description: Client ID to search
        required: true
        schema:
          type: "string"
        example: my_client_id
      responses:
        200:
          $ref: '#/components/responses/OneOidcRp'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'
  /api/v1/providers/oidc/rp/{confKey}:
    get:
      tags:
      - oidcrp
      summary: Get OpenID Connect Relaying Party by configuration key
      description: Returns a single Service Provider
      operationId: getOidcRpByConfKey
      parameters:
      - name: confKey
        in: path
        description: Configuration key of OpenID Connect Relaying Party
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      responses:
        200:
          $ref: '#/components/responses/OneOidcRp'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'

    patch:
      tags:
      - oidcrp
      summary: Updates an OpenID Connect Relaying Party
      operationId: updateOidcRp
      parameters:
      - name: confKey
        in: path
        description: Configuration key of OpenID Connect Relaying Party that needs to be updated
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OidcRpUpdate'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'
        409:
          $ref: '#/components/responses/Conflict'
    put:
      tags:
      - oidcrp
      summary: Replaces an OpenID Connect Relaying Party
      operationId: replaceOidcRp
      parameters:
      - name: confKey
        in: path
        description: Configuration key of OpenID Connect Relaying Party that needs to be replaced
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OidcRpReplace'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'
        409:
          $ref: '#/components/responses/Conflict'

    delete:
      tags:
      - oidcrp
      summary: Deletes a OpenID Connect Relaying Party
      operationId: deleteOidcRp
      parameters:
      - name: confKey
        in: path
        description: Configuration key of OpenID Connect Relaying Party to delete
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'

  /api/v1/providers/cas/app:
    post:
      tags:
      - casapp
      summary: Create a new CAS Application
      operationId: addcasapp
      requestBody:
        description: CAS Application to add
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CasApp'
        required: true
      responses:
        201:
          $ref: '#/components/responses/Created'
        400:
          $ref: '#/components/responses/Error'
        409:
          $ref: '#/components/responses/Conflict'

  /api/v1/providers/cas/app/findByConfKey:
    get:
      tags:
      - casapp
      summary: Finds CAS applications by configuration key
      description: Takes a search pattern to be tested against existing applications
      operationId: findCasAppByConfKey
      parameters:
      - name: pattern
        in: query
        description: Search pattern
        required: true
        schema:
          type: "string"
        examples:
          any:
           summary: Any value
           value: "*"
          prefix:
           summary: Given prefix
           value: "zone1-*"
          anywhere:
           summary: Substring
           value: "something"
      responses:
        200:
          $ref: '#/components/responses/ManyCasApp'
        400:
          $ref: '#/components/responses/Error'

  /api/v1/providers/cas/app/findByServiceUrl:
    get:
      tags:
      - casapp
      summary: Get CAS Application by Service URL
      operationId: findCasAppByServiceUrl
      parameters:
      - name: serviceUrl
        in: query
        description: Service URL to search
        required: true
        schema:
          type: "string"
        example: http://mycasapp.example.com/
      responses:
        200:
          $ref: '#/components/responses/OneCasApp'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'

  /api/v1/providers/cas/app/{confKey}:
    get:
      tags:
      - casapp
      summary: Get CAS Application by configuration key
      description: Returns a single Application
      operationId: getCasAppByConfKey
      parameters:
      - name: confKey
        in: path
        description: Configuration key of CAS Application
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      responses:
        200:
          $ref: '#/components/responses/OneCasApp'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'

    put:
      tags:
      - casapp
      summary: Replaces a CAS Application
      operationId: replaceCasApp
      parameters:
      - name: confKey
        in: path
        description: Configuration key of CAS Application that needs to be replaced
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CasAppReplace'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'
        409:
          $ref: '#/components/responses/Conflict'
    patch:
      tags:
      - casapp
      summary: Updates a CAS Application.
      operationId: updateCasApp
      parameters:
      - name: confKey
        in: path
        description: Configuration key of CAS Application that needs to be updated
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CasAppUpdate'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'
        409:
          $ref: '#/components/responses/Conflict'

    delete:
      tags:
      - casapp
      summary: Deletes a CAS Application
      operationId: deleteCasApp
      parameters:
      - name: confKey
        in: path
        description: Configuration key of CAS Application to delete
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'

  '/api/v1/secondFactor/{uid}':
    description: Second factors for a particular user
    parameters:
      - name: uid
        in: path
        required: true
        schema:
          type: string
    get:
      summary: List second factors for a user
      description: ''
      tags:
      - 2fa
      operationId: getSecondFactors
      responses:
        200:
          $ref: '#/components/responses/SecondFactors'
        404:
          $ref: '#/components/responses/NotFound'

    delete:
      summary: Delete all second factors for a user
      description: ''
      tags:
      - 2fa
      operationId: deleteSecondFactors
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        404:
          $ref: '#/components/responses/NotFound'

  '/api/v1/secondFactor/{uid}/type/{type}':
    description: Second factors of a given type for a particular user
    parameters:
      - name: uid
        in: path
        required: true
        schema:
          type: string
      - name: type
        in: path
        required: true
        schema:
          type: string
    get:
      summary: List second factors for a user given its type
      description: ''
      tags:
      - 2fa
      operationId: getSecondFactorsByType
      responses:
        200:
          $ref: '#/components/responses/SecondFactors'
        404:
          $ref: '#/components/responses/NotFound'

    delete:
      summary: Delete all second factors of a given type for a user
      description: ''
      tags:
      - 2fa
      operationId: deleteSecondFactorsByType
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        404:
          $ref: '#/components/responses/NotFound'

  '/api/v1/secondFactor/{uid}/id/{id}':
    description: Second factors of a given id for a particular user
    parameters:
      - name: uid
        in: path
        required: true
        schema:
          type: string
      - name: id
        in: path
        required: true
        schema:
          type: string
    get:
      summary: Get second factors for a user given its ID
      description: ''
      tags:
      - 2fa
      operationId: getSecondFactorsById
      responses:
        200:
          $ref: '#/components/responses/SecondFactors'
        404:
          $ref: '#/components/responses/NotFound'

    delete:
      summary: Delete a second factors for a user
      description: ''
      tags:
      - 2fa
      operationId: deleteSecondFactorsById
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        404:
          $ref: '#/components/responses/NotFound'

  /api/v1/menu/cat:
    post:
      tags:
      - menucat
      summary: Create a new Menu Category
      operationId: addMenuCat
      requestBody:
        description: Menu Category to add
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/MenuCat'
        required: true
      responses:
        201:
          $ref: '#/components/responses/Created'
        400:
          $ref: '#/components/responses/Error'
        409:
          $ref: '#/components/responses/Conflict'

  /api/v1/menu/cat/findByConfKey:
    get:
      tags:
      - menucat
      summary: Finds Menu Categories by configuration key
      description: Takes a search pattern to be tested against existing categories
      operationId: findMenuCatByConfKey
      parameters:
      - name: pattern
        in: query
        description: Search pattern
        required: true
        schema:
          type: "string"
        examples:
          any:
           summary: Any value
           value: "*"
          prefix:
           summary: Given prefix
           value: "zone1-*"
          anywhere:
           summary: Substring
           value: "something"
      responses:
        200:
          $ref: '#/components/responses/ManyMenuCat'
        400:
          $ref: '#/components/responses/Error'

  /api/v1/menu/cat/{confKey}:
    get:
      tags:
      - menucat
      summary: Get Menu Category by configuration key
      description: Returns a single Category
      operationId: getMenuCatByConfKey
      parameters:
      - name: confKey
        in: path
        description: Configuration key of Menu Category
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      responses:
        200:
          $ref: '#/components/responses/OneMenuCat'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'

    put:
      tags:
      - menucat
      summary: Replaces a Menu Category
      operationId: replaceMenuCat
      parameters:
      - name: confKey
        in: path
        description: Configuration key of Menu Category that needs to be replaced
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/MenuCat'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'
        409:
          $ref: '#/components/responses/Conflict'
    patch:
      tags:
      - menucat
      summary: Updates a Menu Category
      operationId: updateMenuCat
      parameters:
      - name: confKey
        in: path
        description: Configuration key of Menu Category that needs to be updated
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/MenuCatUpdate'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'
        409:
          $ref: '#/components/responses/Conflict'

    delete:
      tags:
      - menucat
      summary: Deletes a Menu Category
      operationId: deleteMenuCat
      parameters:
      - name: confKey
        in: path
        description: Configuration key of Menu Category to delete
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'

  /api/v1/menu/app/{cat}:
    get:
      tags:
      - menuapp
      summary: Get Menu Applications within a Menu Category
      description: Return existing applications within a menu category
      operationId: getMenuApps
      parameters:
      - name: cat
        in: path
        description: Configuration key of Menu Category to work with
        required: true
        schema:
          $ref: '#/components/schemas/menuCatConfKey'
      responses:
        200:
          $ref: '#/components/responses/ManyMenuApp'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'
    post:
      tags:
      - menuapp
      summary: Create a new Menu Application within a Menu Category
      operationId: addMenuApp
      parameters:
      - name: cat
        in: path
        description: Configuration key of Menu Category to work with
        required: true
        schema:
          $ref: '#/components/schemas/menuCatConfKey'
      requestBody:
        description: Menu Application to add
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/MenuApp'
        required: true
      responses:
        201:
          $ref: '#/components/responses/Created'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'
        409:
          $ref: '#/components/responses/Conflict'

  /api/v1/menu/app/{cat}/findByConfKey:
    get:
      tags:
      - menuapp
      summary: Finds Menu Applications by configuration key within a Menu Category
      description: Takes a search pattern to be tested against existing applications within a menu category
      operationId: findMenuAppByConfKey
      parameters:
      - name: cat
        in: path
        description: Configuration key of Menu Category to work with
        required: true
        schema:
          $ref: '#/components/schemas/menuCatConfKey'
      - name: pattern
        in: query
        description: Search pattern
        required: true
        schema:
          type: "string"
        examples:
          any:
           summary: Any value
           value: "*"
          prefix:
           summary: Given prefix
           value: "zone1-*"
          anywhere:
           summary: Substring
           value: "something"
      responses:
        200:
          $ref: '#/components/responses/ManyMenuApp'
        400:
          $ref: '#/components/responses/Error'

  /api/v1/menu/app/{cat}/{confKey}:
    get:
      tags:
      - menuapp
      summary: Get Menu Application within a Menu Category by configuration key
      description: Returns a single application
      operationId: getMenuAppByConfKey
      parameters:
      - name: cat
        in: path
        description: Configuration key of Menu Category to work with
        required: true
        schema:
          $ref: '#/components/schemas/menuCatConfKey'
      - name: confKey
        in: path
        description: Configuration key of Menu Application
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      responses:
        200:
          $ref: '#/components/responses/OneMenuApp'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'

    put:
      tags:
      - menuapp
      summary: Replaces a Menu Application
      operationId: replaceMenuApp
      parameters:
      - name: cat
        in: path
        description: Configuration key of Menu Category to work with
        required: true
        schema:
          $ref: '#/components/schemas/menuCatConfKey'
      - name: confKey
        in: path
        description: Configuration key of Menu Application that needs to be replaced
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/MenuApp'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'
        409:
          $ref: '#/components/responses/Conflict'
    patch:
      tags:
      - menuapp
      summary: Updates a Menu Application
      operationId: updateMenuApp
      parameters:
      - name: cat
        in: path
        description: Configuration key of Menu Category to work with
        required: true
        schema:
          $ref: '#/components/schemas/menuCatConfKey'
      - name: confKey
        in: path
        description: Configuration key of Menu Application that needs to be updated
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/MenuAppUpdate'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'
        409:
          $ref: '#/components/responses/Conflict'

    delete:
      tags:
      - menuapp
      summary: Deletes a Menu Application
      operationId: deleteMenuApp
      parameters:
      - name: cat
        in: path
        description: Configuration key of Menu Category to work with
        required: true
        schema:
          $ref: '#/components/schemas/menuCatConfKey'
      - name: confKey
        in: path
        description: Configuration key of Menu Application to delete
        required: true
        schema:
          $ref: '#/components/schemas/confKey'
      responses:
        204:
          $ref: '#/components/responses/NoContent'
        400:
          $ref: '#/components/responses/Error'
        404:
          $ref: '#/components/responses/NotFound'

components:
  schemas:
    Status:
      type: object
      properties:
        name:
          type: string
          description: Descriptive name of the software
        version:
          type: string
          description: Version of the LemonLDAP::NG software
        status_sessions:
          type: string
          description: Status of the sessions database
          enum:
            - ok
            - ko
            - unknown
        status_psessions:
          type: string
          description: Status of the psessions database
          enum:
            - ok
            - ko
            - unknown
        status_config:
          type: string
          description: Status of the configuration database
          enum:
            - ok
            - ko
        status:
          type: string
          description: Global status
          enum:
            - ok
            - ko
    confKey:
      type: string
      pattern: '^\w[\w\.\-]*$'
    Error:
      type: object
      properties:
        error:
          type: string
      required:
        - error
    SamlSp:
      required:
      - confKey
      - metadata
      type: object
      properties:
        confKey:
          $ref: '#/components/schemas/confKey'
        metadata:
          type: string
          example: '<?xml version="1.0"?><EntityDescriptor...'
        exportedAttributes:
          type: object
          items:
            $ref: '#/components/schemas/samlAttribute'
        macros:
          type: object
          example:
            myMacroName: "$macro(rule)"
        options:
          $ref: '#/components/schemas/samlOptions'
    SamlSpUpdate:
      type: object
      properties:
        metadata:
          type: string
          example: '<?xml version="1.0"?><EntityDescriptor...'
        macros:
          type: object
          example:
            myMacroName: "$macro(rule)"
        exportedAttributes:
          type: object
          items:
            $ref: '#/components/schemas/samlAttribute'
        options:
          $ref: '#/components/schemas/samlOptions'
    SamlSpReplace:
      type: object
      required:
      - metadata
      properties:
        metadata:
          type: string
          example: '<?xml version="1.0"?><EntityDescriptor...'
        macros:
          type: object
          example:
            myMacroName: "$macro(rule)"
        exportedAttributes:
          type: object
          items:
            $ref: '#/components/schemas/samlAttribute'
        options:
          $ref: '#/components/schemas/samlOptions'
    samlOptions:
      type: object
      properties:
        checkSSOMessageSignature:
          type: boolean
          default: 1
        sessionNotOnOrAfterTimeout:
          type: integer
          default: 72000
        signSLOMessage:
          type: integer
          minimum: -1
          maximum: 1
          default: -1
        enableIDPInitiatedURL:
          type: boolean
        oneTimeUse:
          type: boolean
        checkSLOMessageSignature:
          type: boolean
          default: 1
        encryptionMode:
          type: string
          enum:
              - none
              - nameid
              - assertion
          default: none
        notOnOrAfterTimeout:
          type: integer
          default: 72000
        authnLevel:
          type: integer
        rule:
          type: string
        forceUTF8:
          type: boolean
          default: 1
        signSSOMessage:
          type: integer
          minimum: -1
          maximum: 1
          default: -1
        nameIDSessionKey:
          type: string
        nameIDFormat:
          type: string
          enum:
              - unspecified
              - email
              - x509
              - windows
              - kerberos
              - entity
              - persistent
              - transient
              - encrypted
    samlAttribute:
      type: object
      properties:
        name:
          type: string
        mandatory:
          type: boolean
        friendlyName:
          type: string
        format:
          type: string
          example: 'urn:oasis:names:tc:SAML:2.0:attrname-format:basic'

    OidcRp:
      required:
      - confKey
      - clientId
      - redirectUris
      type: object
      properties:
        confKey:
          $ref: '#/components/schemas/confKey'
        clientId:
          type: string
        redirectUris:
          type: array
          items:
            type: string
            minItems: 1
            format: "uri"
        exportedVars:
          type: object
          example:
            email: mail
            family_name: sn
            name: cn
        extraClaims:
          type: object
          example:
            myscope: "myattr1 myattr2 myattr3"
        macros:
          type: object
          example:
            myMacroName: "$macro(rule)"
        options:
          $ref: '#/components/schemas/OidcOptions'
        scopeRules:
          type: object
          example:
            write: "requested and inGroup('writers')"
    OidcOptions:
      type: object
      properties:
        logoutUrl:
          type: string
          format: url
        clientSecret:
          type: string
          format: password
        displayName:
          type: string
        allowOffline:
          type: boolean
        accessTokenSignAlg:
          type: string
          enum:
            - none
            - RS256
            - RS384
            - RS512
          default: HS512
        accessTokenJWT:
          type: bool
        accessTokenClaims:
          type: bool
        authnLevel:
          type: integer
        rule:
          type: string
        IDTokenSignAlg:
          type: string
          enum:
            - none
            - HS256
            - HS384
            - HS512
            - RS256
            - RS384
            - RS512
          default: HS512
        refreshToken:
          type: boolean
        public:
          type: boolean
        postLogoutRedirectUris:
          type: array
          items:
            type: string
        logoutType:
          type: string
          enum:
            - front
            - back
          default: front
        accessTokenExpiration:
          type: integer
        IDTokenForceClaims:
          type: boolean
        additionalAudiences:
          type: array
          items:
            type: string
        requirePKCE:
          type: boolean
        offlineSessionExpiration:
          type: integer
        redirectUris:
          type: array
          items:
            type: string
        bypassConsent:
          type: boolean
        logoutSessionRequired:
          type: boolean
        clientId:
          type: string
        IDTokenExpiration:
          type: integer
        authorizationCodeExpiration:
          type: integer
        icon:
          type: string
        userIDAttr:
          type: string
    OidcRpUpdate:
      type: object
      properties:
        clientId:
          type: string
        exportedVars:
          type: object
          example:
            email: mail
            family_name: sn
            name: cn
        extraClaims:
          type: object
          example:
            myscope: "myattr1 myattr2 myattr3"
        macros:
          type: object
          example:
            myMacroName: "$macro(rule)"
        options:
          $ref: '#/components/schemas/OidcOptions'
        scopeRules:
          type: object
          example:
            write: "requested and inGroup('writers')"
    OidcRpReplace:
      type: object
      required:
      - clientId
      - redirectUris
      properties:
        clientId:
          type: string
        exportedVars:
          type: object
          example:
            email: mail
            family_name: sn
            name: cn
        extraClaims:
          type: object
          example:
            myscope: "myattr1 myattr2 myattr3"
        macros:
          type: object
          example:
            myMacroName: "$macro(rule)"
        options:
          $ref: '#/components/schemas/OidcOptions'
        scopeRules:
          type: object
          example:
            write: "requested and inGroup('writers')"

    CasApp:
      required:
      - confKey
      type: object
      properties:
        confKey:
          $ref: '#/components/schemas/confKey'
        exportedVars:
          type: object
          default:
            cn: cn
            mail: mail
            uid: uid
        macros:
          type: object
          example:
            myMacroName: "$macro(rule)"
        options:
          $ref: '#/components/schemas/casOptions'
    CasAppUpdate:
      type: object
      properties:
        macros:
          type: object
          example:
            myMacroName: "$macro(rule)"
        exportedVars:
          type: object
          default:
            cn: cn
            mail: mail
            uid: uid
        options:
          $ref: '#/components/schemas/casOptions'
    CasAppReplace:
      type: object
      properties:
        macros:
          type: object
          example:
            myMacroName: "$macro(rule)"
        exportedVars:
          type: object
          default:
            cn: cn
            mail: mail
            uid: uid
        options:
          $ref: '#/components/schemas/casOptions'
    casOptions:
      required:
      - service
      type: object
      properties:
        service:
          type: string
        userAttribute:
          type: string
          default: none
        rule:
          type: string
          default: none

    SecondFactor:
      type: object
      required:
        - type
        - id
      properties:
        id:
          type: string
          description: "An opaque idenfifier for this particular token"
        type:
          type: string
          description: "The type of token in use"
          example: "TOTP, U2F, UBK (Yubikey)"
        name:
          type: string
          description: "A user-set description of the token"
    SecondFactors:
      type: array
      items:
        $ref: "#/components/schemas/SecondFactor"

    menuCatConfKey:
      type: string
      pattern: '^\w[\w\.\-]*$'
    MenuCat:
      required:
      - confKey
      - catname
      type: object
      properties:
        confKey:
          $ref: '#/components/schemas/confKey'
        catname:
          type: string
        order:
          type: integer
    MenuCatUpdate:
      type: object
      properties:
        catname:
          type: string
        order:
          type: integer
    MenuApp:
      required:
      - confKey
      type: object
      properties:
        confKey:
          $ref: '#/components/schemas/confKey'
        order:
          type: integer
        options:
          $ref: '#/components/schemas/MenuAppOptions'
    MenuAppOptions:
      required:
      - name
      type: object
      properties:
        name:
          type: string
        tooltip:
          type: string
        description:
          type: string
        uri:
          type: string
        logo:
          type: string
          default: network.png
          enum:
            - attach.png
            - bell.png
            - bookmark.png
            - configure.png
            - database.png
            - demo.png
            - folder.png
            - gear.png
            - help.png
            - llng.png
            - mailappt.png
            - money.png
            - network.png
            - terminal.png
            - thumbnail.png
            - tux.png
            - web.png
            - (Any reference to an available image in app logo folder)
        display:
          type: string
          default: auto
          enum:
            - 'on'
            - 'off'
            - auto
            - (Any special rule to apply for example "$uid eq 'dwho'")
    MenuAppUpdate:
      type: object
      properties:
        order:
          type: integer
        options:
          $ref: '#/components/schemas/MenuAppOptions'

  responses:
    StatusResponse:
      description: Response to API health check
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Status'
    NoContent:
      description: Successful modification
    Created:
      description: Successful creation
    OneOidcRp:
      description: Return an OpenID Connect Provider
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/OidcRp'
    OneSamlSp:
      description: Return a SAML Provider
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/SamlSp'
    OneCasApp:
      description: Return a CAS Provider
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/CasApp'
    ManyOidcRp:
      description: Return a list of OpenID Connect Providers
      content:
        application/json:
          schema:
            type: array
            items:
              $ref: '#/components/schemas/OidcRp'
    ManySamlSp:
      description: Return a list of SAML Providers
      content:
        application/json:
          schema:
            type: array
            items:
              $ref: '#/components/schemas/SamlSp'
    ManyCasApp:
      description: Return a list of CAS Providers
      content:
        application/json:
          schema:
            type: array
            items:
              $ref: '#/components/schemas/CasApp'
    NotFound:
      description: The specified resource was not found
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
    Conflict:
      description: The specified object could not be created because its configuration key, client_id or entityID already exists
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
    Error:
      description: An error was encountered when processing the request
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
    SecondFactor:
      description: Return a second factor
      content:
        application/json:
          schema:
            $ref: "#/components/schemas/SecondFactor"
    SecondFactors:
      description: Return a list of second factors
      content:
        application/json:
          schema:
            $ref: "#/components/schemas/SecondFactors"
    OneMenuCat:
      description: Return a Menu Category
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/MenuCat'
    ManyMenuCat:
      description: Return a list of Menu Categories
      content:
        application/json:
          schema:
            type: array
            items:
              $ref: '#/components/schemas/MenuCat'
    OneMenuApp:
      description: Return a Menu Application
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/MenuApp'
    ManyMenuApp:
      description: Return a list of Menu Applications
      content:
        application/json:
          schema:
            type: array
            items:
              $ref: '#/components/schemas/MenuApp'