service.rb in authlete-1.0.11

- old
+ new

@@ -30,11 +30,18 @@
       # The access token type. (String)
       attr_accessor :accessTokenType
       alias_method  :access_token_type,  :accessTokenType
       alias_method  :access_token_type=, :accessTokenType=
 
-      # The API key. (Long)
+      # The allowable clock skew between the server and clients in seconds.
+      # The clock skew is taken into consideration when time-related claims
+      # in a JWT (e.g. +exp+, +iat+, +nbf+) are verified. (Integer)
+      attr_accessor :allowableClockSkew
+      alias_method  :allowable_clock_skew,  :allowableClockSkew
+      alias_method  :allowable_clock_skew=, :allowableClockSkew=
+
+      # The API key. (Integer)
       attr_accessor :apiKey
       alias_method  :api_key,  :apiKey
       alias_method  :api_key=, :apiKey=
 
       # The API secret. (String)
@@ -50,16 +57,16 @@
       # The API secret to access the authentication callback endpoint. (String)
       attr_accessor :authenticationCallbackApiSecret
       alias_method  :authentication_callback_api_secret,  :authenticationCallbackApiSecret
       alias_method  :authentication_callback_api_secret=, :authenticationCallbackApiSecret=
 
-      # The URI of the authentication callback endpoint. (URI)
+      # The URI of the authentication callback endpoint. (String)
       attr_accessor :authenticationCallbackEndpoint
       alias_method  :authentication_callback_endpoint,  :authenticationCallbackEndpoint
       alias_method  :authentication_callback_endpoint=, :authenticationCallbackEndpoint=
 
-      # The URI of the authorization endpoint. (URI)
+      # The URI of the authorization endpoint. (String)
       attr_accessor :authorizationEndpoint
       alias_method  :authorization_endpoint,  :authorizationEndpoint
       alias_method  :authorization_endpoint=, :authorizationEndpoint=
 
       # The duration of access tokens in seconds; the value of +expires_in+
@@ -72,10 +79,32 @@
       # using an asymmetric key. (String)
       attr_accessor :authorizationSignatureKeyId
       alias_method  :authorization_signature_key_id,  :authorizationSignatureKeyId
       alias_method  :authorization_signature_key_id=, :authorizationSignatureKeyId=
 
+      # The URI of the backchannel authentication endpoint. (String)
+      attr_accessor :backchannelAuthenticationEndpoint
+      alias_method  :backchannel_authentication_endpoint,  :backchannelAuthenticationEndpoint
+      alias_method  :backchannel_authentication_endpoint=, :backchannelAuthenticationEndpoint=
+
+      # The duration of backchannel authentication request IDs in seconds.
+      # (Integer)
+      attr_accessor :backchannelAuthReqIdDuration
+      alias_method  :backchannel_auth_req_id_duration,  :backchannelAuthReqIdDuration
+      alias_method  :backchannel_auth_req_id_duration=, :backchannelAuthReqIdDuration=
+
+      # The minimum interval between polling requests in seconds. (Integer)
+      attr_accessor :backchannelPollingInterval
+      alias_method  :backchannel_polling_interval,  :backchannelPollingInterval
+      alias_method  :backchannel_polling_interval=, :backchannelPollingInterval=
+
+      # The flag which indicates whether the +user_code+ request parameter
+      # is supported at the backchannel authentication endpoint. (Boolean)
+      attr_accessor :backchannelUserCodeParameterSupported
+      alias_method  :backchannel_user_code_parameter_supported,  :backchannelUserCodeParameterSupported
+      alias_method  :backchannel_user_code_parameter_supported=, :backchannelUserCodeParameterSupported=
+
       # The flag which indicates whether the 'Client ID Alias' feature
       # is enabled or not. (Boolean)
       attr_accessor :clientIdAliasEnabled
       alias_method  :client_id_alias_enabled,  :clientIdAliasEnabled
       alias_method  :client_id_alias_enabled=, :clientIdAliasEnabled=
@@ -102,11 +131,11 @@
       # The API secret to access the developer authentication callback endpoint. (String)
       attr_accessor :developerAuthenticationCallbackApiSecret
       alias_method  :developer_authentication_callback_api_secret,  :developerAuthenticationCallbackApiSecret
       alias_method  :developer_authentication_callback_api_secret=, :developerAuthenticationCallbackApiSecret=
 
-      # The URI of the developer authentication callback endpoint. (URI)
+      # The URI of the developer authentication callback endpoint. (String)
       attr_accessor :developerAuthenticationCallbackEndpoint
       alias_method  :developer_authentication_callback_endpoint,  :developerAuthenticationCallbackEndpoint
       alias_method  :developer_authentication_callback_endpoint=, :developerAuthenticationCallbackEndpoint=
 
       # The list of SNS credentials for developer login. (SnsCredentials array)
@@ -188,17 +217,17 @@
       # The URI of the introspection endpoint. (String)
       attr_accessor :introspectionEndpoint
       alias_method  :introspection_endpoint,  :introspectionEndpoint
       alias_method  :introspection_endpoint=, :introspectionEndpoint=
 
-      # The issuer identifier of this OpenID Provider. (URI)
+      # The issuer identifier of this OpenID Provider. (String)
       attr_accessor :issuer
 
       # The JSON Web Key Set of this service. (String)
       attr_accessor :jwks
 
-      # The URI of the service's JSON Web Key Set. (URI)
+      # The URI of the service's JSON Web Key Set. (String)
       attr_accessor :jwksUri
       alias_method  :jwks_uri,  :jwksUri
       alias_method  :jwks_uri=, :jwksUri=
 
       # The metadata of the service. (Pair Array)
@@ -224,11 +253,11 @@
       # (Boolean)
       attr_accessor :pkceRequired
       alias_method  :pkce_required,  :pkceRequired
       alias_method  :pkce_required=, :pkceRequired=
 
-      # The URI of the service's policy page. (URI)
+      # The URI of the service's policy page. (String)
       attr_accessor :policyUri
       alias_method  :policy_uri,  :policyUri
       alias_method  :policy_uri=, :policyUri=
 
       # The duration of refresh tokens in seconds. (Integer)
@@ -241,21 +270,21 @@
       # (Boolean)
       attr_accessor :refreshTokenKept
       alias_method  :refresh_token_kept,  :refreshTokenKept
       alias_method  :refresh_token_kept=, :refreshTokenKept=
 
-      # The URI of the registration endpoint. (URI)
+      # The URI of the registration endpoint. (String)
       attr_accessor :registrationEndpoint
       alias_method  :registration_endpoint,  :registrationEndpoint
       alias_method  :registration_endpoint=, :registrationEndpoint=
 
-      # The URI of the token revocation endpoint. (URI)
+      # The URI of the token revocation endpoint. (String)
       attr_accessor :revocationEndpoint
       alias_method  :revocation_endpoint,  :revocationEndpoint
       alias_method  :revocation_endpoint=, :revocationEndpoint=
 
-      # The URI of the service's documentation. (URI)
+      # The URI of the service's documentation. (String)
       attr_accessor :serviceDocumentation
       alias_method  :service_documentation,  :serviceDocumentation
       alias_method  :service_documentation=, :serviceDocumentation=
 
       # The service name. (String)
@@ -351,10 +380,16 @@
       # "CLIENT_SECRET_JWT" and "PRIVATE_KEY_JWT".
       attr_accessor :supportedTokenAuthMethods
       alias_method  :supported_token_auth_methods,  :supportedTokenAuthMethods
       alias_method  :supported_token_auth_methods=, :supportedTokenAuthMethods=
 
+      # The list of supported backchannel token delivery modes. (String array)
+      # Valid values are "POLL", "PING" and "PUSH".
+      attr_accessor :supportedBackchannelTokenDeliveryModes
+      alias_method  :supported_backchannel_token_delivery_modes,  :supportedBackchannelTokenDeliveryModes
+      alias_method  :supported_backchannel_token_delivery_modes=, :supportedBackchannelTokenDeliveryModes=
+
       # The list of supported UI locales. (String array)
       attr_accessor :supportedUiLocales
       alias_method  :supported_ui_locales,  :supportedUiLocales
       alias_method  :supported_ui_locales=, :supportedUiLocales=
 
@@ -362,27 +397,27 @@
       # bound access tokens (Boolean)
       attr_accessor :tlsClientCertificateBoundAccessTokens
       alias_method  :tls_client_certificate_bound_access_tokens,  :tlsClientCertificateBoundAccessTokens
       alias_method  :tls_client_certificate_bound_access_tokens=, :tlsClientCertificateBoundAccessTokens=
 
-      # The URI of the token endpoint. (URI)
+      # The URI of the token endpoint. (String)
       attr_accessor :tokenEndpoint
       alias_method  :token_endpoint,  :tokenEndpoint
       alias_method  :token_endpoint=, :tokenEndpoint=
 
-      # The URI of the service's "Terms Of Service" page. (URI)
+      # The URI of the service's "Terms Of Service" page. (String)
       attr_accessor :tosUri
       alias_method  :tos_uri,  :tosUri
       alias_method  :tos_uri=, :tosUri=
 
       # The list of trusted root certificates, used when the service validates client
       # certificate paths. (String array)
       attr_accessor :trustedRootCertificates
       alias_method  :trusted_root_certificates,  :trustedRootCertificates
       alias_method  :trusted_root_certificates=, :trustedRootCertificates=
 
-      # The URI of user info endpoint. (URI)
+      # The URI of user info endpoint. (String)
       attr_accessor :userInfoEndpoint
       alias_method  :user_info_endpoint,  :userInfoEndpoint
       alias_method  :user_info_endpoint=, :userInfoEndpoint=
 
       # The key ID to identify a JWK used for user info signature using an
@@ -393,44 +428,45 @@
 
       private
 
       # Integer attributes.
       INTEGER_ATTRIBUTES = ::Set.new([
-        :accessTokenDuration, :apiKey, :authorizationResponseDuration, :clientsPerDeveloper,
+        :accessTokenDuration, :allowableClockSkew, :apiKey, :authorizationResponseDuration,
+        :backchannelAuthReqIdDuration, :backchannelPollingInterval, :clientsPerDeveloper,
         :createdAt, :idTokenDuration, :modifiedAt, :number, :refreshTokenDuration,
         :serviceOwnerNumber
       ])
 
       # Boolean attributes.
       BOOLEAN_ATTRIBUTES = ::Set.new([
-        :clientIdAliasEnabled, :directAuthorizationEndpointEnabled,
-        :directIntrospectionEndpointEnabled, :directJwksEndpointEnabled,
-        :directRevocationEndpointEnabled, :directTokenEndpointEnabled,
+        :backchannelUserCodeParameterSupported, :clientIdAliasEnabled,
+        :directAuthorizationEndpointEnabled, :directIntrospectionEndpointEnabled,
+        :directJwksEndpointEnabled, :directRevocationEndpointEnabled, :directTokenEndpointEnabled,
         :directUserInfoEndpointEnabled, :errorDescriptionOmitted, :errorUriOmitted,
         :mutualTlsValidatePkiCertChain, :pkceRequired, :refreshTokenKept,
         :singleAccessTokenPerSubject, :tlsClientCertificateBoundAccessTokens
       ])
 
       # String attributes.
       STRING_ATTRIBUTES = ::Set.new([
         :accessTokenType, :apiSecret, :authenticationCallbackApiKey,
         :authenticationCallbackApiSecret, :authenticationCallbackEndpoint,
-        :authorizationEndpoint, :authorizationSignatureKeyId, :description,
-        :developerAuthenticationCallbackApiKey, :developerAuthenticationCallbackApiSecret,
+        :authorizationEndpoint, :authorizationSignatureKeyId, :backchannelAuthenticationEndpoint,
+        :description, :developerAuthenticationCallbackApiKey, :developerAuthenticationCallbackApiSecret,
         :developerAuthenticationCallbackEndpoint, :idTokenSignatureKeyId,
         :introspectionEndpoint, :issuer, :jwks, :jwksUri, :policyUri, :registrationEndpoint,
         :serviceDocumentation, :serviceName, :tokenEndpoint, :tosUri, :userInfoEndpoint,
         :userInfoSignatureKeyId, :revocationEndpoint
       ])
 
       # String array attributes.
       STRING_ARRAY_ATTRIBUTES = ::Set.new([
-        :supportedAcrs, :supportedClaimLocales, :supportedClaims,
-        :supportedClaimTypes, :supportedDeveloperSnses, :supportedDisplays,
-        :supportedGrantTypes, :supportedResponseTypes, :supportedServiceProfiles,
-        :supportedSnses, :supportedTokenAuthMethods, :supportedUiLocales,
-        :trustedRootCertificates
+        :supportedAcrs, :supportedBackchannelTokenDeliveryModes, :supportedClaimLocales,
+        :supportedClaims, :supportedClaimTypes, :supportedDeveloperSnses,
+        :supportedDisplays, :supportedGrantTypes, :supportedResponseTypes,
+        :supportedServiceProfiles, :supportedSnses, :supportedTokenAuthMethods,
+        :supportedUiLocales, :trustedRootCertificates
       ])
 
       # SNS credentials array attributes.
       SNS_CREDENTIALS_ARRAY_ATTRIBUTES = ::Set.new([
         :developerSnsCredentials, :snsCredentials
@@ -438,18 +474,23 @@
 
       # Mapping from snake cases to camel cases.
       SNAKE_TO_CAMEL = {
         :access_token_duration                        => :accessTokenDuration,
         :access_token_type                            => :accessTokenType,
+        :allowable_clock_skew                         => :allowableClockSkew,
         :api_key                                      => :apiKey,
         :api_secret                                   => :apiSecret,
         :authentication_callback_api_key              => :authenticationCallbackApiKey,
         :authentication_callback_api_secret           => :authenticationCallbackApiSecret,
         :authentication_callback_endpoint             => :authenticationCallbackEndpoint,
         :authorization_endpoint                       => :authorizationEndpoint,
         :authorization_response_duration              => :authorizationResponseDuration,
         :authorization_signature_key_id               => :authorizationSignatureKeyId,
+        :backchannel_authentication_endpoint          => :backchannelAuthenticationEndpoint,
+        :backchannel_auth_req_id_duration             => :backchannelAuthReqIdDuration,
+        :backchannel_polling_interval                 => :backchannelPollingInterval,
+        :backchannel_user_code_parameter_supported    => :backchannelUserCodeParameterSupported,
         :developer_authentication_callback_api_key    => :developerAuthenticationCallbackApiKey,
         :developer_authentication_callback_api_secret => :developerAuthenticationCallbackApiSecret,
         :developer_authentication_callback_endpoint   => :developerAuthenticationCallbackEndpoint,
         :developer_sns_credentials                    => :developerSnsCredentials,
         :client_id_alias_enabled                      => :clientIdAliasEnabled,
@@ -479,9 +520,10 @@
         :service_name                                 => :serviceName,
         :service_owner_number                         => :serviceOwnerNumber,
         :single_access_token_per_subject              => :singleAccessTokenPerSubject,
         :sns_credentials                              => :snsCredentials,
         :supported_acrs                               => :supportedAcrs,
+        :supported_backchannel_token_delivery_modes   => :supportedBackchannelTokenDeliveryModes,
         :supported_claim_locales                      => :supportedClaimLocales,
         :supported_claims                             => :supportedClaims,
         :supported_claim_types                        => :supportedClaimTypes,
         :supported_developer_snses                    => :supportedDeveloperSnses,
         :supported_displays                           => :supportedDisplays,
\ No newline at end of file