mirror of
https://github.com/navidrome/navidrome.git
synced 2026-11-08 11:18:41 +01:00
Adds the seven auth operations to the spec (createAccessToken, listGrants, revokeGrant and logout in core; login, setupFirstAdmin and changePassword in the password module), the bearerAuth/grantAuth schemes, and vacuum rules requiring explicit security and a known x-scope. The strict handlers sit on core/apiauth and are covered end to end against a real SQLite database. The first operations with parameters make the generated code import github.com/oapi-codegen/runtime. An oapi-codegen overlay renames the shared offset/limit parameter types, since a generated Offset clashes with Ginkgo's dot-imported Offset in this package's tests; the published spec is unchanged.
41 lines
1.2 KiB
YAML
41 lines
1.2 KiB
YAML
type: object
|
|
description: A long-lived grant held by one client of one user.
|
|
required: [id, name, client, clientVersion, scopes, provider, createdAt, lastUsedAt, lastUsedIp, current]
|
|
properties:
|
|
id:
|
|
type: string
|
|
description: Grant id.
|
|
name:
|
|
type: string
|
|
description: Label shown to the user.
|
|
client:
|
|
type: string
|
|
description: Name of the client app that holds the grant.
|
|
clientVersion:
|
|
type: string
|
|
nullable: true
|
|
description: "Version of the client app, when it sent one."
|
|
scopes:
|
|
type: array
|
|
description: Scopes this grant may mint tokens for.
|
|
items:
|
|
$ref: ./Scope.yaml
|
|
provider:
|
|
type: string
|
|
description: "How the grant was created, for example `password` or `setup`. Free-form; new values may appear."
|
|
createdAt:
|
|
type: string
|
|
format: date-time
|
|
description: When the grant was created.
|
|
lastUsedAt:
|
|
type: string
|
|
format: date-time
|
|
nullable: true
|
|
description: "When the grant was last used, at a coarse granularity. Null until first use."
|
|
lastUsedIp:
|
|
type: string
|
|
nullable: true
|
|
description: Client IP of the last use. Null until first use.
|
|
current:
|
|
type: boolean
|
|
description: True for the grant that made this request.
|