You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: en/asgardeo/docs/references/service-extensions/pre-flow-extensions/pre-issue-id-token-action/api/pre-issue-id-token-action-v1.0.yaml
+52-9Lines changed: 52 additions & 9 deletions
Original file line number
Diff line number
Diff line change
@@ -41,8 +41,8 @@ paths:
41
41
summary: Failed response
42
42
value:
43
43
actionStatus: FAILED
44
-
failureReason: invalid_claim
45
-
failureDescription: "The requested claim is invalid, unknown, or malformed."
44
+
failureReason: locked_user
45
+
failureDescription: "The user is pending verification."
46
46
"400":
47
47
description: Bad Request
48
48
content:
@@ -90,11 +90,11 @@ components:
90
90
properties:
91
91
grantType:
92
92
type: string
93
-
description: The type of OAuth2 grant used for the token request, such as authorization code, client credentials, password, or refresh token.
93
+
description: The type of OAuth2 grant used for the token request, such as `authorization_code`, `password`, `refresh_token`, `organization_switch` or `urn:ietf:params:oauth:grant-type:device_code`.
94
94
example: authorization_code
95
95
responseType:
96
96
type: string
97
-
description: The type of response requested by the client in the OIDC hybrid flow, such as code, code id_token token, or code id_token.
97
+
description: The type of response requested by the client in the OIDC hybrid flow, such as `codeid_token token`, or `code id_token`.
98
98
example: code token
99
99
clientId:
100
100
type: string
@@ -118,6 +118,20 @@ components:
118
118
items:
119
119
$ref: '#/components/schemas/RequestParams'
120
120
description: Any additional parameters included in the ID token request. These may be custom parameters defined by the client or necessary for specific flows.
121
+
example:
122
+
grantType: authorization_code
123
+
clientId: 1u31N7of6gCNR9FqkG1neSlsF_Qa
124
+
scopes:
125
+
- openid
126
+
- profile
127
+
additionalHeaders:
128
+
- name: X-Custom-Header
129
+
value:
130
+
- customValue
131
+
additionalParams:
132
+
- name: custom_param
133
+
value:
134
+
- customValue
121
135
Tenant:
122
136
type: object
123
137
required:
@@ -145,16 +159,24 @@ components:
145
159
description: Refers to the organization to which the user belongs.
146
160
userType:
147
161
type: string
148
-
description: Defines the type of user. LOCAL indicates a user that exists in Asgardeo; FEDERATED indicates a federated user authenticated via a federated identity provider.
162
+
description: Defines the type of user. `LOCAL` indicates a user that exists in Asgardeo organization; `FEDERATED` indicates a federated user authenticated via a federated identity provider.
149
163
example: LOCAL
150
164
federatedIdP:
151
165
type: string
152
-
description: The name of the federated identity provider used to authenticate the user. This is only applicable for FEDERATED users.
166
+
description: The name of the federated identity provider used to authenticate the user. This is only applicable for `FEDERATED` users.
153
167
example: google
154
168
accessingOrganization:
155
169
$ref: '#/components/schemas/Organization'
156
-
description: Refers to the organization to which the user is accessing. This is only applicable for organization_switch grant type.
170
+
description: Refers to the organization to which the user is accessing. This is only applicable for `organization_switch` grant type.
157
171
description: Contains information about the authenticated user associated with the token request.
172
+
example:
173
+
id: e204849c-4ec2-41f1-8ff7-ec1ebff02821
174
+
organization:
175
+
id: 5c7930f2-c97d-4b38-89a6-7be5fb138a35
176
+
name: foo.com
177
+
orgHandle: foo.com
178
+
depth: 0
179
+
userType: LOCAL
158
180
Organization:
159
181
type: object
160
182
required:
@@ -255,6 +277,26 @@ components:
255
277
- $ref: '#/components/schemas/addOperation'
256
278
- $ref: '#/components/schemas/replaceOperation'
257
279
- $ref: '#/components/schemas/removeOperation'
280
+
example:
281
+
- op: add
282
+
paths:
283
+
- /idToken/claims/-
284
+
- /idToken/claims/aud/
285
+
- op: replace
286
+
paths:
287
+
- /idToken/claims/updated_at
288
+
- /idToken/claims/given_name
289
+
- /idToken/claims/family_name
290
+
- /idToken/claims/username
291
+
- /idToken/claims/aud/
292
+
- /idToken/claims/expires_in
293
+
- op: remove
294
+
paths:
295
+
- /idToken/claims/updated_at
296
+
- /idToken/claims/given_name
297
+
- /idToken/claims/family_name
298
+
- /idToken/claims/username
299
+
- /idToken/claims/aud/
258
300
addOperation:
259
301
type: object
260
302
required:
@@ -325,6 +367,7 @@ components:
325
367
type: string
326
368
enum:
327
369
- SUCCESS
370
+
description: Indicates the outcome of the request. For a successful operation, this should be set to `SUCCESS`.
328
371
operations:
329
372
type: array
330
373
description: Defines the set of operations that your external service is requesting to perform on the ID token's claims.
@@ -345,7 +388,7 @@ components:
345
388
type: string
346
389
enum:
347
390
- FAILED
348
-
description: Indicates the outcome of the request. For a failed operation, this should be set to FAILED.
391
+
description: Indicates the outcome of the request. For a failed operation, this should be set to `FAILED`.
349
392
failureReason:
350
393
type: string
351
394
description: Provides the reason for failing to issue an ID token.
@@ -363,7 +406,7 @@ components:
363
406
type: string
364
407
enum:
365
408
- ERROR
366
-
description: Indicates the outcome of the request. For an error operation, this should be set to ERROR.
409
+
description: Indicates the outcome of the request. For an error operation, this should be set to `ERROR`.
Copy file name to clipboardExpand all lines: en/identity-server/next/docs/references/service-extensions/pre-flow-extensions/pre-issue-id-token-action/api/pre-issue-id-token-action-v1.0.yaml
+52-9Lines changed: 52 additions & 9 deletions
Original file line number
Diff line number
Diff line change
@@ -41,8 +41,8 @@ paths:
41
41
summary: Failed response
42
42
value:
43
43
actionStatus: FAILED
44
-
failureReason: invalid_claim
45
-
failureDescription: "The requested claim is invalid, unknown, or malformed."
44
+
failureReason: locked_user
45
+
failureDescription: "The user is pending verification."
46
46
"400":
47
47
description: Bad Request
48
48
content:
@@ -90,11 +90,11 @@ components:
90
90
properties:
91
91
grantType:
92
92
type: string
93
-
description: The type of OAuth2 grant used for the token request, such as authorization code, client credentials, password, or refresh token.
93
+
description: The type of OAuth2 grant used for the token request, such as `authorization_code`, `password`, `refresh_token`, `organization_switch` or `urn:ietf:params:oauth:grant-type:device_code`.
94
94
example: authorization_code
95
95
responseType:
96
96
type: string
97
-
description: The type of response requested by the client in the OIDC hybrid flow, such as code, code id_token token, or code id_token.
97
+
description: The type of response requested by the client in the OIDC hybrid flow, such as `codeid_token token`, or `code id_token`.
98
98
example: code token
99
99
clientId:
100
100
type: string
@@ -118,6 +118,20 @@ components:
118
118
items:
119
119
$ref: '#/components/schemas/RequestParams'
120
120
description: Any additional parameters included in the ID token request. These may be custom parameters defined by the client or necessary for specific flows.
121
+
example:
122
+
grantType: authorization_code
123
+
clientId: 1u31N7of6gCNR9FqkG1neSlsF_Qa
124
+
scopes:
125
+
- openid
126
+
- profile
127
+
additionalHeaders:
128
+
- name: X-Custom-Header
129
+
value:
130
+
- customValue
131
+
additionalParams:
132
+
- name: custom_param
133
+
value:
134
+
- customValue
121
135
Tenant:
122
136
type: object
123
137
required:
@@ -145,16 +159,24 @@ components:
145
159
description: Refers to the organization to which the user belongs.
146
160
userType:
147
161
type: string
148
-
description: Defines the type of user. LOCAL indicates a user that exists in WSO2 Identity Server; FEDERATED indicates a federated user authenticated via a federated identity provider.
162
+
description: Defines the type of user. `LOCAL` indicates a user that exists in WSO2 Identity Server organization; `FEDERATED` indicates a federated user authenticated via a federated identity provider.
149
163
example: LOCAL
150
164
federatedIdP:
151
165
type: string
152
-
description: The name of the federated identity provider used to authenticate the user. This is only applicable for FEDERATED users.
166
+
description: The name of the federated identity provider used to authenticate the user. This is only applicable for `FEDERATED` users.
153
167
example: google
154
168
accessingOrganization:
155
169
$ref: '#/components/schemas/Organization'
156
-
description: Refers to the organization to which the user is accessing. This is only applicable for organization_switch grant type.
170
+
description: Refers to the organization to which the user is accessing. This is only applicable for `organization_switch` grant type.
157
171
description: Contains information about the authenticated user associated with the token request.
172
+
example:
173
+
id: e204849c-4ec2-41f1-8ff7-ec1ebff02821
174
+
organization:
175
+
id: 5c7930f2-c97d-4b38-89a6-7be5fb138a35
176
+
name: foo.com
177
+
orgHandle: foo.com
178
+
depth: 0
179
+
userType: LOCAL
158
180
Organization:
159
181
type: object
160
182
required:
@@ -255,6 +277,26 @@ components:
255
277
- $ref: '#/components/schemas/addOperation'
256
278
- $ref: '#/components/schemas/replaceOperation'
257
279
- $ref: '#/components/schemas/removeOperation'
280
+
example:
281
+
- op: add
282
+
paths:
283
+
- /idToken/claims/-
284
+
- /idToken/claims/aud/
285
+
- op: replace
286
+
paths:
287
+
- /idToken/claims/updated_at
288
+
- /idToken/claims/given_name
289
+
- /idToken/claims/family_name
290
+
- /idToken/claims/username
291
+
- /idToken/claims/aud/
292
+
- /idToken/claims/expires_in
293
+
- op: remove
294
+
paths:
295
+
- /idToken/claims/updated_at
296
+
- /idToken/claims/given_name
297
+
- /idToken/claims/family_name
298
+
- /idToken/claims/username
299
+
- /idToken/claims/aud/
258
300
addOperation:
259
301
type: object
260
302
required:
@@ -325,6 +367,7 @@ components:
325
367
type: string
326
368
enum:
327
369
- SUCCESS
370
+
description: Indicates the outcome of the request. For a successful operation, this should be set to `SUCCESS`.
328
371
operations:
329
372
type: array
330
373
description: Defines the set of operations that your external service is requesting to perform on the ID token's claims.
@@ -345,7 +388,7 @@ components:
345
388
type: string
346
389
enum:
347
390
- FAILED
348
-
description: Indicates the outcome of the request. For a failed operation, this should be set to FAILED.
391
+
description: Indicates the outcome of the request. For a failed operation, this should be set to `FAILED`.
349
392
failureReason:
350
393
type: string
351
394
description: Provides the reason for failing to issue an ID token.
@@ -363,7 +406,7 @@ components:
363
406
type: string
364
407
enum:
365
408
- ERROR
366
-
description: Indicates the outcome of the request. For an error operation, this should be set to ERROR.
409
+
description: Indicates the outcome of the request. For an error operation, this should be set to `ERROR`.
0 commit comments