mirror of
https://github.com/navidrome/navidrome.git
synced 2026-10-22 01:07:27 +02:00
294c1a9a6a
Adds the seven auth operations to the spec (createAccessToken, listGrants, revokeGrant and logout in core; login, setupFirstAdmin and changePassword in the password module), the bearerAuth/grantAuth schemes, and vacuum rules requiring explicit security and a known x-scope. The strict handlers sit on core/apiauth and are covered end to end against a real SQLite database. The first operations with parameters make the generated code import github.com/oapi-codegen/runtime. An oapi-codegen overlay renames the shared offset/limit parameter types, since a generated Offset clashes with Ginkgo's dot-imported Offset in this package's tests; the published spec is unchanged.
19 lines
581 B
YAML
19 lines
581 B
YAML
type: object
|
|
description: "A short-lived access token. Opaque; clients must not decode it."
|
|
required: [accessToken, tokenType, expiresIn, scopes]
|
|
properties:
|
|
accessToken:
|
|
type: string
|
|
description: "The token. Send it as `Authorization: Bearer <token>`."
|
|
tokenType:
|
|
type: string
|
|
enum: [Bearer]
|
|
description: "Always `Bearer`."
|
|
expiresIn:
|
|
type: integer
|
|
description: Seconds until the token expires.
|
|
scopes:
|
|
type: array
|
|
description: "Scopes the token actually carries, which may be fewer than requested."
|
|
items:
|
|
$ref: ./Scope.yaml
|