{ "components": { "schemas": { "authwise.access.v1alpha1.AccessDecision": { "properties": { "allowed": { "type": "boolean" }, "bindingId": { "title": "the AccessBinding that granted access; empty when denied", "type": "string" }, "reason": { "title": "human-readable explanation; names the granting binding when allowed", "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.AccessResourceRef": { "properties": { "id": { "title": "opaque resource identifier (an AWID for the built-in types)", "type": "string" }, "type": { "title": "resource type: \"tenant\", a type the audience declares, or empty for the platform root. \"issuer\" / \"realm\" / \"audience\" are reserved and not yet evaluable (kit#559)", "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.AccessSubjectRef": { "properties": { "id": { "title": "opaque subject identifier (an AWID for the built-in types)", "type": "string" }, "type": { "title": "\"user\", \"group\", \"client\", or a tenant-declared type", "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.BulkCheckRequest": { "properties": { "checks": { "items": { "$ref": "#/components/schemas/authwise.access.v1alpha1.CheckRequest" }, "type": "array" } }, "type": "object" }, "authwise.access.v1alpha1.BulkCheckResponse": { "properties": { "decisions": { "items": { "$ref": "#/components/schemas/authwise.access.v1alpha1.AccessDecision" }, "title": "one per request entry, same order", "type": "array" } }, "type": "object" }, "authwise.access.v1alpha1.CheckRequest": { "properties": { "attributes": { "additionalProperties": { "type": "string" }, "title": "request attributes for CEL conditions (\"request.ip\", \"request.method\", …)", "type": "object" }, "permission": { "title": "canonical permission name, e.g. \"guard.console.admin\"", "type": "string" }, "resource": { "$ref": "#/components/schemas/authwise.access.v1alpha1.AccessResourceRef" } }, "type": "object" }, "authwise.access.v1alpha1.CheckResponse": { "properties": { "decision": { "$ref": "#/components/schemas/authwise.access.v1alpha1.AccessDecision" } }, "type": "object" }, "authwise.access.v1alpha1.GetPolicyResponse": { "properties": { "accessBindings": { "items": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessBinding" }, "title": "the bindings anchored AT this resource. Bindings at an ancestor reach it too and are not returned — see SetPolicy for why that boundary matters", "type": "array" }, "etag": { "title": "opaque version of the returned set; pass it back to SetPolicy to make the write conditional on nothing having changed", "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.ListAccessBindingsByResourceResponse": { "properties": { "accessBindings": { "items": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessBinding" }, "type": "array" }, "nextPageToken": { "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.ListAccessBindingsBySubjectResponse": { "properties": { "accessBindings": { "items": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessBinding" }, "type": "array" }, "nextPageToken": { "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.ListAccessBindingsResponse": { "properties": { "accessBindings": { "items": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessBinding" }, "type": "array" }, "nextPageToken": { "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.ListAccessConditionsResponse": { "properties": { "accessConditions": { "items": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessCondition" }, "type": "array" }, "nextPageToken": { "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.ListAccessPermissionsByAccessRoleResponse": { "properties": { "accessPermissions": { "items": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessPermission" }, "type": "array" }, "nextPageToken": { "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.ListAccessPermissionsResponse": { "properties": { "accessPermissions": { "items": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessPermission" }, "type": "array" }, "nextPageToken": { "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.ListAccessResourceLinksResponse": { "properties": { "accessResourceLinks": { "items": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceLink" }, "type": "array" }, "nextPageToken": { "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.ListAccessResourceTypesResponse": { "properties": { "accessResourceTypes": { "items": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceType" }, "type": "array" }, "nextPageToken": { "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.ListAccessRolesResponse": { "properties": { "accessRoles": { "items": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessRole" }, "type": "array" }, "nextPageToken": { "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.ListAccessSubjectTypesResponse": { "properties": { "accessSubjectTypes": { "items": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessSubjectType" }, "type": "array" }, "nextPageToken": { "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.LookupResourcesRequest": { "properties": { "attributes": { "additionalProperties": { "type": "string" }, "type": "object" }, "permission": { "type": "string" }, "resourceType": { "title": "resource type to enumerate; v1 supports \"tenant\"", "type": "string" } }, "type": "object" }, "authwise.access.v1alpha1.LookupResourcesResponse": { "properties": { "resources": { "items": { "$ref": "#/components/schemas/authwise.access.v1alpha1.AccessResourceRef" }, "title": "every resource of the requested type the subject holds the permission on", "type": "array" } }, "type": "object" }, "authwise.access.v1alpha1.LookupSubjectsResponse": { "properties": { "subjects": { "items": { "$ref": "#/components/schemas/authwise.access.v1alpha1.AccessSubjectRef" }, "title": "every subject holding the permission on the resource, deduplicated", "type": "array" } }, "type": "object" }, "authwise.access.v1alpha1.SetPolicyResponse": { "properties": { "accessBindings": { "items": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessBinding" }, "title": "the policy as stored, with server-assigned ids on the rows that were created", "type": "array" }, "etag": { "type": "string" } }, "type": "object" }, "authwise.types.core.v1alpha1.AccessBinding": { "description": "AccessBinding is a (subject, role, resource[, condition][, expires_at])\ntuple. The subject and resource are typed pairs of opaque strings to\nallow tenant-defined types alongside built-ins. condition_id and\nexpires_at are optional; an absent condition means the binding always\napplies (subject to inheritance), and an absent expires_at means the\nbinding never expires.", "properties": { "conditionId": { "title": "@gotags: yaml:\"condition_id,omitempty\"", "type": "string" }, "createdBy": { "title": "@gotags: yaml:\"created_by\"", "type": "string" }, "expiresAt": { "format": "date-time", "title": "@gotags: yaml:\"expires_at,omitempty\"", "type": "string" }, "name": { "description": "Output only. The resource name, rendered from the row's id: the address\nused to GET, PATCH and DELETE this row, not a label. A value sent on\ncreate or update is ignored — the server always builds it from the id.", "readOnly": true, "type": "string" }, "resourceId": { "title": "@gotags: yaml:\"resource_id\"", "type": "string" }, "resourceType": { "title": "@gotags: yaml:\"resource_type\"", "type": "string" }, "roleName": { "title": "@gotags: yaml:\"role_name\"", "type": "string" }, "subjectId": { "title": "@gotags: yaml:\"subject_id\"", "type": "string" }, "subjectType": { "title": "@gotags: yaml:\"subject_type\"", "type": "string" } }, "type": "object" }, "authwise.types.core.v1alpha1.AccessCondition": { "description": "AccessCondition is a named, reusable CEL expression that can be\nreferenced from one or more AccessBinding rows. expression is the\nraw CEL source; the engine compiles and caches it on first use.", "properties": { "description": { "type": "string" }, "displayName": { "type": "string" }, "expression": { "type": "string" }, "name": { "description": "Output only. The resource name, rendered from the row's id: the address\nused to GET, PATCH and DELETE this row, not a label. A value sent on\ncreate or update is ignored — the server always builds it from the id.\nFor a human-readable label, use display_name.", "readOnly": true, "type": "string" } }, "type": "object" }, "authwise.types.core.v1alpha1.AccessPermission": { "description": "AccessPermission is a namespaced action (e.g. \"idm.tenants.create\",\n\"invoices.read\"). resource_type is optional and constrains the\npermission to a specific resource type. Provenance is `service`, which\nalready namespaces the shared admin audience (identity.* vs\nguardcontrol.*).", "properties": { "description": { "type": "string" }, "name": { "description": "The resource name, which for this resource is also its KEY. Unlike every\nother resource in this file it is client-supplied and REQUIRED on create:\nthere is no generated id for the server to render a name from, so the\ncreate service reads this field and uses it as the row's key. It is\nignored on update — renaming is not an operation.\n\nThis comment must never contain the phrase protoc-gen-openapiv2 keys\nreadOnly off — it matches the words wherever they appear, not only at\nthe start, so even quoting them here to say \"not that\" marked all four\nof these fields read-only and would have broken every create. Making\nthe surface uniform means giving create a separate client-specified id\nfield (AIP-133); it is a change to the create surface, not a comment.", "type": "string" }, "resourceType": { "title": "@gotags: yaml:\"resource_type\"", "type": "string" }, "service": { "type": "string" } }, "type": "object" }, "authwise.types.core.v1alpha1.AccessResourceLink": { "description": "AccessResourceLink is one push-mode parent edge: this resource belongs to\nthat one (kit#25).\n\nThe natural key is (resource_type, resource_id) — a resource has one parent\n— and that is a unique index rather than the primary key. The row carries an\nid of its own for the reason AccessBinding does: the API addresses rows, and\na composite natural key spelled into a resource name cannot be round-tripped\nwhen either half contains a slash, which tenant resource ids routinely do\nbecause PATH mode makes slashes meaningful.", "properties": { "name": { "description": "Output only. The resource name, rendered from the row's id.", "readOnly": true, "type": "string" }, "parentId": { "title": "@gotags: yaml:\"parent_id\"", "type": "string" }, "parentType": { "title": "@gotags: yaml:\"parent_type\"", "type": "string" }, "resourceId": { "title": "@gotags: yaml:\"resource_id\"", "type": "string" }, "resourceType": { "title": "@gotags: yaml:\"resource_type\"", "type": "string" } }, "type": "object" }, "authwise.types.core.v1alpha1.AccessResourceType": { "description": "AccessResourceType is a resource namespace a tenant declares, together with\nhow the ancestry walker finds its parent (kit#25).\n\nBindings inherit down the resource hierarchy: a binding at `account/acc_3`\nreaches `invoice/inv_9` if the walker can get from the invoice to the\naccount. For Authwise's own entities that walk is hardcoded (tenant →\nroot); for a tenant's entities kit has no idea what the tree is, so the\ntenant declares it. Without the declaration every tenant resource is an\nisland — a binding has to be written at each leaf, and \"grant Alice the\nwhole account\" is not expressible.\n\nAudience-scoped and name-keyed, like the rest of the Access vocabulary.", "properties": { "description": { "type": "string" }, "endpointName": { "description": "Endpoint name for PULL expansion. Empty falls back to the audience's\nauthorization.access.default_resource_expander_endpoint_name.\n\n@gotags: yaml:\"endpoint_name,omitempty\"", "type": "string" }, "expansionMode": { "description": "Where the parent EDGE comes from: NONE, PUSH, PULL or PATH.\n\n NONE flat — the type has no parent and the walk ends at the root.\n PUSH kit holds the edge, written through PutResourceParent. The\n default for a hierarchy, because its latency and availability\n are kit's own.\n PULL the edge lives in the tenant's system and is fetched per request\n over endpoint_name.\n PATH the id IS the ancestry —\n `projects/p-1/buckets/b-2/objects/o-3` — so the walk is string\n manipulation and touches neither database nor network.\n\nNONE with a parent_type set is allowed and means \"declared, not yet\nwired\". It reads as flat, which is the safe direction: a\ndeclared-but-unwired parent grants nothing rather than granting through\nan edge nobody has written.\n\n@gotags: yaml:\"expansion_mode,omitempty\"", "type": "string" }, "materializeLookupResources": { "description": "Opt this type into the precomputed effective-access table that backs\nLookupResources.\n\nPer-type rather than per-audience because the trade is per-type: the\ntable costs writes on every binding and link change, and earns that only\nwhere on-demand enumeration is too slow — which depends on how many\nresources of the type exist.\n\n@gotags: yaml:\"materialize_lookup_resources,omitempty\"", "type": "boolean" }, "name": { "description": "The resource name, which for this resource is also its KEY —\nclient-supplied and REQUIRED on create, ignored on update. See the note\non AccessPermission.name for the full rationale.", "type": "string" }, "parentType": { "description": "The type one level up, or empty for a flat type.\n\nThis is the declaration, not the edge: `invoice`'s parent TYPE is\n`account`, while which account a given invoice belongs to is an edge, and\nexpansion_mode says where that edge lives. Keeping the type here is what\nlets PATH mode work at all — a path-encoded id carries the parent's ID and\nnot its type.\n\nRequired when expansion_mode is PUSH, PULL or PATH; there would be\nnothing for the resolved parent to be typed as otherwise.\n\n@gotags: yaml:\"parent_type,omitempty\"", "type": "string" } }, "type": "object" }, "authwise.types.core.v1alpha1.AccessRole": { "description": "AccessRole is a named bag of permissions in the Authwise Access catalog.\nRoles are referenced from AccessBinding via name (audience-scoped key).\nkind is \"system\" for platform-defined or \"custom\" for tenant-defined.", "properties": { "description": { "type": "string" }, "displayName": { "description": "What the `roles` token claim carries for this role (kit#508). Empty\nmeans the claim carries `name`, which is the right answer for a role\nwhose name IS its display form — every role in the shipped catalog.\n\nIt exists because Simple's `roles` claim carried a display name and\nrelying parties match on that string. `name` cannot carry it: it is the\nkey, capped at 64, and the migration derives it from the display name by\nlowering and slugging, which is lossy and can collide.", "type": "string" }, "name": { "description": "The resource name, which for this resource is also its KEY. Unlike every\nother resource in this file it is client-supplied and REQUIRED on create:\nthere is no generated id for the server to render a name from, so the\ncreate service reads this field and uses it as the row's key. It is\nignored on update — renaming is not an operation.\n\nThis comment must never contain the phrase protoc-gen-openapiv2 keys\nreadOnly off — it matches the words wherever they appear, not only at\nthe start, so even quoting them here to say \"not that\" marked all four\nof these fields read-only and would have broken every create. Making\nthe surface uniform means giving create a separate client-specified id\nfield (AIP-133); it is a change to the create surface, not a comment.", "type": "string" } }, "type": "object" }, "authwise.types.core.v1alpha1.AccessSubjectType": { "description": "AccessSubjectType is a subject namespace a tenant declares for itself\n(kit#24).\n\nA binding names its subject as an opaque (type, id) pair. The engine ships\nthree types — `user`, `client`, `group` — and a tenant modelling its own\nprincipals wants more: `app_user`, `service`, `device`. Declaring the type\nis what makes such a binding checkable rather than merely storable: without\na registry `subject_type` is free text, and `app_usr/usr_42` is a\nwell-formed row that matches nothing the evaluator will ever be asked\nabout, so it grants nothing while reading exactly like a grant.\n\nAudience-scoped and name-keyed, like AccessRole and AccessPermission.", "properties": { "description": { "type": "string" }, "endpointName": { "description": "Endpoint name for PULL expansion. Empty falls back to the audience's\nauthorization.access.default_subject_expander_endpoint_name.\n\n@gotags: yaml:\"endpoint_name,omitempty\"", "type": "string" }, "expansionMode": { "description": "Where members of this subject type come from: NONE, PUSH or PULL.\n\nNONE (the default) means the subject stands for itself and nothing else,\nwhich is what a tenant usually wants — an `app_user` is one principal,\nnamed directly on bindings. PULL resolves members over the endpoint\nbelow, per request (kit#27). PUSH means kit holds the membership, as it\ndoes for the built-in `group` type; a tenant type in push mode would\nneed a store kit does not have yet.\n\n@gotags: yaml:\"expansion_mode,omitempty\"", "type": "string" }, "idFormat": { "description": "An optional RE2 pattern every subject id of this type must match,\nenforced on binding writes.\n\nOptional because the engine treats ids as opaque, and a tenant whose ids\nare UUIDs, emails or opaque vendor strings should not have to describe\nthem. Worth having when they DO have a shape, for the same reason the\nregistry itself is worth having: `usr-42` where the directory says\n`usr_42` is a row that grants nothing and reads as a grant.\n\nA pattern that does not compile is refused at declaration time rather\nthan at check time, because that is the only moment a human is present\nto fix it.\n\n@gotags: yaml:\"id_format,omitempty\"", "type": "string" }, "name": { "description": "The resource name, which for this resource is also its KEY —\nclient-supplied and REQUIRED on create, ignored on update. See the note\non AccessPermission.name for the full rationale and for the phrase this\ncomment must never contain.", "type": "string" } }, "type": "object" }, "authwise.types.core.v1alpha1.AssociationRequest": { "properties": { "remove": { "items": { "type": "string" }, "type": "array" }, "set": { "items": { "type": "string" }, "type": "array" } }, "type": "object" }, "google.protobuf.Any": { "additionalProperties": {}, "description": "`Any` contains an arbitrary serialized protocol buffer message along with a\nURL that describes the type of the serialized message.\n\nProtobuf library provides support to pack/unpack Any values in the form\nof utility functions or additional generated methods of the Any type.\n\nExample 1: Pack and unpack a message in C++.\n\n Foo foo = ...;\n Any any;\n any.PackFrom(foo);\n ...\n if (any.UnpackTo(\u0026foo)) {\n ...\n }\n\nExample 2: Pack and unpack a message in Java.\n\n Foo foo = ...;\n Any any = Any.pack(foo);\n ...\n if (any.is(Foo.class)) {\n foo = any.unpack(Foo.class);\n }\n\nExample 3: Pack and unpack a message in Python.\n\n foo = Foo(...)\n any = Any()\n any.Pack(foo)\n ...\n if any.Is(Foo.DESCRIPTOR):\n any.Unpack(foo)\n ...\n\nExample 4: Pack and unpack a message in Go\n\n foo := \u0026pb.Foo{...}\n any, err := anypb.New(foo)\n if err != nil {\n ...\n }\n ...\n foo := \u0026pb.Foo{}\n if err := any.UnmarshalTo(foo); err != nil {\n ...\n }\n\nThe pack methods provided by protobuf library will by default use\n'type.googleapis.com/full.type.name' as the type URL and the unpack\nmethods only use the fully qualified type name after the last '/'\nin the type URL, for example \"foo.bar.com/x/y.z\" will yield type\nname \"y.z\".\n\n\nJSON\n\nThe JSON representation of an `Any` value uses the regular\nrepresentation of the deserialized, embedded message, with an\nadditional field `@type` which contains the type URL. Example:\n\n package google.profile;\n message Person {\n string first_name = 1;\n string last_name = 2;\n }\n\n {\n \"@type\": \"type.googleapis.com/google.profile.Person\",\n \"firstName\": \u003cstring\u003e,\n \"lastName\": \u003cstring\u003e\n }\n\nIf the embedded message type is well-known and has a custom JSON\nrepresentation, that representation will be embedded adding a field\n`value` which holds the custom JSON in addition to the `@type`\nfield. Example (for message [google.protobuf.Duration][]):\n\n {\n \"@type\": \"type.googleapis.com/google.protobuf.Duration\",\n \"value\": \"1.212s\"\n }", "properties": { "@type": { "description": "A URL/resource name that uniquely identifies the type of the serialized\nprotocol buffer message. This string must contain at least\none \"/\" character. The last segment of the URL's path must represent\nthe fully qualified name of the type (as in\n`path/google.protobuf.Duration`). The name should be in a canonical form\n(e.g., leading \".\" is not accepted).\n\nIn practice, teams usually precompile into the binary all types that they\nexpect it to use in the context of Any. However, for URLs which use the\nscheme `http`, `https`, or no scheme, one can optionally set up a type\nserver that maps type URLs to message definitions as follows:\n\n* If no scheme is provided, `https` is assumed.\n* An HTTP GET on the URL must yield a [google.protobuf.Type][]\n value in binary format, or produce an error.\n* Applications are allowed to cache lookup results based on the\n URL, or have them precompiled into a binary to avoid any\n lookup. Therefore, binary compatibility needs to be preserved\n on changes to types. (Use versioned type names to manage\n breaking changes.)\n\nNote: this functionality is not currently available in the official\nprotobuf release, and it is not used for type URLs beginning with\ntype.googleapis.com.\n\nSchemes other than `http`, `https` (or the empty scheme) might be\nused with implementation specific semantics.", "type": "string" } }, "type": "object" }, "google.rpc.Status": { "properties": { "code": { "format": "int32", "type": "integer" }, "details": { "items": { "$ref": "#/components/schemas/google.protobuf.Any" }, "type": "array" }, "message": { "type": "string" } }, "type": "object" } }, "securitySchemes": { "Authwise": { "type": "openIdConnect", "openIdConnectUrl": "/.well-known/openid-configuration" } } }, "info": { "title": "authwise/access/v1alpha1/grpc.proto", "version": "version not set" }, "openapi": "3.0.3", "paths": { "/v1/access:bulkCheck": { "post": { "operationId": "AuthwiseAccessService_BulkCheck", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.BulkCheckRequest" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.BulkCheckResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Evaluator" ] } }, "/v1/access:check": { "post": { "operationId": "AuthwiseAccessService_Check", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.CheckRequest" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.CheckResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Evaluator" ] } }, "/v1/access:lookupResources": { "post": { "operationId": "AuthwiseAccessService_LookupResources", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.LookupResourcesRequest" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.LookupResourcesResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Evaluator" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-bindings": { "get": { "operationId": "AuthwiseAccessService_ListAccessBindings", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "pageSize", "schema": { "format": "int32", "type": "integer" } }, { "in": "query", "name": "pageToken", "schema": { "type": "string" } }, { "in": "query", "name": "filter", "schema": { "type": "string" } }, { "in": "query", "name": "orderBy", "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.ListAccessBindingsResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Bindings" ] }, "post": { "operationId": "AuthwiseAccessService_CreateAccessBinding", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessBinding" } } }, "required": true, "x-originalParamName": "accessBinding" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessBinding" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Bindings" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-bindings/{accessBindingId}": { "delete": { "operationId": "AuthwiseAccessService_DeleteAccessBinding", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessBindingId", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Bindings" ] }, "get": { "operationId": "AuthwiseAccessService_GetAccessBinding", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessBindingId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessBinding" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Bindings" ] }, "patch": { "operationId": "AuthwiseAccessService_PatchAccessBinding", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessBindingId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "properties": { "accessBinding": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessBinding" }, "updateMask": { "type": "string" } }, "type": "object" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessBinding" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Bindings" ] }, "put": { "operationId": "AuthwiseAccessService_UpdateAccessBinding", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessBindingId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessBinding" } } }, "required": true, "x-originalParamName": "accessBinding" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessBinding" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Bindings" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-conditions": { "get": { "operationId": "AuthwiseAccessService_ListAccessConditions", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "pageSize", "schema": { "format": "int32", "type": "integer" } }, { "in": "query", "name": "pageToken", "schema": { "type": "string" } }, { "in": "query", "name": "filter", "schema": { "type": "string" } }, { "in": "query", "name": "orderBy", "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.ListAccessConditionsResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Conditions" ] }, "post": { "operationId": "AuthwiseAccessService_CreateAccessCondition", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessCondition" } } }, "required": true, "x-originalParamName": "accessCondition" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessCondition" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Conditions" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-conditions/{accessConditionId}": { "delete": { "operationId": "AuthwiseAccessService_DeleteAccessCondition", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessConditionId", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Conditions" ] }, "get": { "operationId": "AuthwiseAccessService_GetAccessCondition", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessConditionId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessCondition" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Conditions" ] }, "patch": { "operationId": "AuthwiseAccessService_PatchAccessCondition", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessConditionId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "properties": { "accessCondition": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessCondition" }, "updateMask": { "type": "string" } }, "type": "object" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessCondition" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Conditions" ] }, "put": { "operationId": "AuthwiseAccessService_UpdateAccessCondition", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessConditionId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessCondition" } } }, "required": true, "x-originalParamName": "accessCondition" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessCondition" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Conditions" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-permissions": { "get": { "operationId": "AuthwiseAccessService_ListAccessPermissions", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "pageSize", "schema": { "format": "int32", "type": "integer" } }, { "in": "query", "name": "pageToken", "schema": { "type": "string" } }, { "in": "query", "name": "filter", "schema": { "type": "string" } }, { "in": "query", "name": "orderBy", "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.ListAccessPermissionsResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Permissions" ] }, "post": { "operationId": "AuthwiseAccessService_CreateAccessPermission", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessPermission" } } }, "required": true, "x-originalParamName": "accessPermission" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessPermission" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Permissions" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-permissions/{accessPermissionId}": { "delete": { "operationId": "AuthwiseAccessService_DeleteAccessPermission", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessPermissionId", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Permissions" ] }, "get": { "operationId": "AuthwiseAccessService_GetAccessPermission", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessPermissionId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessPermission" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Permissions" ] }, "patch": { "operationId": "AuthwiseAccessService_PatchAccessPermission", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessPermissionId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "properties": { "accessPermission": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessPermission" }, "updateMask": { "type": "string" } }, "type": "object" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessPermission" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Permissions" ] }, "put": { "operationId": "AuthwiseAccessService_UpdateAccessPermission", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessPermissionId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessPermission" } } }, "required": true, "x-originalParamName": "accessPermission" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessPermission" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Permissions" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-resource-links": { "get": { "operationId": "AuthwiseAccessService_ListAccessResourceLinks", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "pageSize", "schema": { "format": "int32", "type": "integer" } }, { "in": "query", "name": "pageToken", "schema": { "type": "string" } }, { "in": "query", "name": "filter", "schema": { "type": "string" } }, { "in": "query", "name": "orderBy", "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.ListAccessResourceLinksResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Resource Links" ] }, "post": { "operationId": "AuthwiseAccessService_CreateAccessResourceLink", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceLink" } } }, "required": true, "x-originalParamName": "accessResourceLink" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceLink" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Resource Links" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-resource-links/{accessResourceLinkId}": { "delete": { "operationId": "AuthwiseAccessService_DeleteAccessResourceLink", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessResourceLinkId", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Resource Links" ] }, "get": { "operationId": "AuthwiseAccessService_GetAccessResourceLink", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessResourceLinkId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceLink" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Resource Links" ] }, "patch": { "operationId": "AuthwiseAccessService_PatchAccessResourceLink", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessResourceLinkId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "properties": { "accessResourceLink": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceLink" }, "updateMask": { "type": "string" } }, "type": "object" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceLink" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Resource Links" ] }, "put": { "operationId": "AuthwiseAccessService_UpdateAccessResourceLink", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessResourceLinkId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceLink" } } }, "required": true, "x-originalParamName": "accessResourceLink" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceLink" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Resource Links" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-resource-types": { "get": { "operationId": "AuthwiseAccessService_ListAccessResourceTypes", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "pageSize", "schema": { "format": "int32", "type": "integer" } }, { "in": "query", "name": "pageToken", "schema": { "type": "string" } }, { "in": "query", "name": "filter", "schema": { "type": "string" } }, { "in": "query", "name": "orderBy", "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.ListAccessResourceTypesResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Resource Types" ] }, "post": { "operationId": "AuthwiseAccessService_CreateAccessResourceType", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceType" } } }, "required": true, "x-originalParamName": "accessResourceType" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceType" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Resource Types" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-resource-types/{accessResourceTypeId}": { "delete": { "operationId": "AuthwiseAccessService_DeleteAccessResourceType", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessResourceTypeId", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Resource Types" ] }, "get": { "operationId": "AuthwiseAccessService_GetAccessResourceType", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessResourceTypeId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceType" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Resource Types" ] }, "patch": { "operationId": "AuthwiseAccessService_PatchAccessResourceType", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessResourceTypeId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "properties": { "accessResourceType": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceType" }, "updateMask": { "type": "string" } }, "type": "object" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceType" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Resource Types" ] }, "put": { "operationId": "AuthwiseAccessService_UpdateAccessResourceType", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessResourceTypeId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceType" } } }, "required": true, "x-originalParamName": "accessResourceType" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessResourceType" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Resource Types" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-roles": { "get": { "operationId": "AuthwiseAccessService_ListAccessRoles", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "pageSize", "schema": { "format": "int32", "type": "integer" } }, { "in": "query", "name": "pageToken", "schema": { "type": "string" } }, { "in": "query", "name": "filter", "schema": { "type": "string" } }, { "in": "query", "name": "orderBy", "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.ListAccessRolesResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Roles" ] }, "post": { "operationId": "AuthwiseAccessService_CreateAccessRole", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessRole" } } }, "required": true, "x-originalParamName": "accessRole" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessRole" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Roles" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-roles/{accessRoleId}": { "delete": { "operationId": "AuthwiseAccessService_DeleteAccessRole", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessRoleId", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Roles" ] }, "get": { "operationId": "AuthwiseAccessService_GetAccessRole", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessRoleId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessRole" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Roles" ] }, "patch": { "operationId": "AuthwiseAccessService_PatchAccessRole", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessRoleId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "properties": { "accessRole": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessRole" }, "updateMask": { "type": "string" } }, "type": "object" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessRole" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Roles" ] }, "put": { "operationId": "AuthwiseAccessService_UpdateAccessRole", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessRoleId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessRole" } } }, "required": true, "x-originalParamName": "accessRole" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessRole" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Roles" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-roles/{accessRoleId}:associateAccessPermissions": { "post": { "operationId": "AuthwiseAccessService_AssociateAccessPermissionsToAccessRole", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessRoleId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "properties": { "association": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AssociationRequest" } }, "type": "object" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Roles" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-roles/{accessRoleId}:listAccessPermissions": { "get": { "operationId": "AuthwiseAccessService_ListAccessPermissionsByAccessRole", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessRoleId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "pageSize", "schema": { "format": "int32", "type": "integer" } }, { "in": "query", "name": "pageToken", "schema": { "type": "string" } }, { "in": "query", "name": "filter", "schema": { "type": "string" } }, { "in": "query", "name": "orderBy", "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.ListAccessPermissionsByAccessRoleResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Roles" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-subject-types": { "get": { "operationId": "AuthwiseAccessService_ListAccessSubjectTypes", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "pageSize", "schema": { "format": "int32", "type": "integer" } }, { "in": "query", "name": "pageToken", "schema": { "type": "string" } }, { "in": "query", "name": "filter", "schema": { "type": "string" } }, { "in": "query", "name": "orderBy", "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.ListAccessSubjectTypesResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Subject Types" ] }, "post": { "operationId": "AuthwiseAccessService_CreateAccessSubjectType", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessSubjectType" } } }, "required": true, "x-originalParamName": "accessSubjectType" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessSubjectType" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Subject Types" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access-subject-types/{accessSubjectTypeId}": { "delete": { "operationId": "AuthwiseAccessService_DeleteAccessSubjectType", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessSubjectTypeId", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "type": "object" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Subject Types" ] }, "get": { "operationId": "AuthwiseAccessService_GetAccessSubjectType", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessSubjectTypeId", "required": true, "schema": { "type": "string" } }, { "in": "query", "name": "readMask", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessSubjectType" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Subject Types" ] }, "patch": { "operationId": "AuthwiseAccessService_PatchAccessSubjectType", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessSubjectTypeId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "properties": { "accessSubjectType": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessSubjectType" }, "updateMask": { "type": "string" } }, "type": "object" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessSubjectType" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Subject Types" ] }, "put": { "operationId": "AuthwiseAccessService_UpdateAccessSubjectType", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "accessSubjectTypeId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessSubjectType" } } }, "required": true, "x-originalParamName": "accessSubjectType" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessSubjectType" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Subject Types" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access/bindings:listByResource": { "post": { "operationId": "AuthwiseAccessService_ListAccessBindingsByResource", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "properties": { "includeAncestors": { "title": "also return the bindings anchored above this resource, which reach it by inheritance. An inherited row is one whose own resource_type/resource_id is not the resource asked about", "type": "boolean" }, "pageSize": { "format": "int32", "type": "integer" }, "pageToken": { "type": "string" }, "resourceId": { "title": "opaque resource identifier; empty for the platform root", "type": "string" }, "resourceType": { "title": "\"tenant\", \"issuer\", \"realm\", \"audience\"; empty for the platform root", "type": "string" } }, "type": "object" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.ListAccessBindingsByResourceResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Bindings" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access/bindings:listBySubject": { "post": { "operationId": "AuthwiseAccessService_ListAccessBindingsBySubject", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "properties": { "includeGroups": { "title": "also return the bindings held by the subject's groups. Meaningful for a user subject; a group-held row is the one whose own subject_type is \"group\"", "type": "boolean" }, "pageSize": { "format": "int32", "type": "integer" }, "pageToken": { "type": "string" }, "subjectId": { "title": "opaque subject identifier (an AWID for the built-in types)", "type": "string" }, "subjectType": { "title": "\"user\", \"group\", \"client\", or a tenant-defined type", "type": "string" } }, "type": "object" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.ListAccessBindingsBySubjectResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Bindings" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access/policy:getPolicy": { "post": { "operationId": "AuthwiseAccessService_GetPolicy", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "properties": { "resource": { "$ref": "#/components/schemas/authwise.access.v1alpha1.AccessResourceRef" } }, "type": "object" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.GetPolicyResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Bindings" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access/policy:setPolicy": { "post": { "operationId": "AuthwiseAccessService_SetPolicy", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "properties": { "accessBindings": { "items": { "$ref": "#/components/schemas/authwise.types.core.v1alpha1.AccessBinding" }, "title": "the complete set of bindings to anchor at this resource. Anything currently anchored here and absent from this list is deleted; bindings at ancestors are untouched", "type": "array" }, "etag": { "title": "the etag from GetPolicy. When set, the write is refused if the policy changed since — which is what makes read-modify-write safe against a concurrent editor. Omitting it is a last-writer-wins replace", "type": "string" }, "resource": { "$ref": "#/components/schemas/authwise.access.v1alpha1.AccessResourceRef" } }, "type": "object" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.SetPolicyResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Bindings" ] } }, "/v1/tenants/{tenantId}/issuers/{issuerId}/audiences/{audienceId}/access/subjects:lookupSubjects": { "post": { "operationId": "AuthwiseAccessService_LookupSubjects", "parameters": [ { "in": "path", "name": "tenantId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "issuerId", "required": true, "schema": { "type": "string" } }, { "in": "path", "name": "audienceId", "required": true, "schema": { "type": "string" } } ], "requestBody": { "content": { "application/json": { "schema": { "properties": { "expandGroups": { "title": "resolve a group subject to its members, so the answer is people rather than groups. Costs one expansion per group-held binding", "type": "boolean" }, "includeInherited": { "title": "also return subjects whose binding is anchored ABOVE this resource and reaches it by inheritance. Off by default: \"who was granted this here\" and \"who can do this here\" are different questions, and the second includes every operator", "type": "boolean" }, "permission": { "title": "canonical permission name", "type": "string" }, "resource": { "$ref": "#/components/schemas/authwise.access.v1alpha1.AccessResourceRef" } }, "type": "object" } } }, "required": true, "x-originalParamName": "body" }, "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/authwise.access.v1alpha1.LookupSubjectsResponse" } } }, "description": "A successful response." }, "default": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/google.rpc.Status" } } }, "description": "An unexpected error response." } }, "tags": [ "Access Bindings" ] } } }, "security": [ { "Authwise": [] } ], "tags": [ { "name": "AuthwiseAccessService" } ] }