Skip to content

Commit 98d6260

Browse files
marythoughtclaude
andcommitted
chore(deps): update vendored OpenAPI specs from platform main
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent d0389dc commit 98d6260

10 files changed

Lines changed: 663 additions & 4 deletions

File tree

specs/authorization/authorization.openapi.yaml

Lines changed: 373 additions & 4 deletions
Large diffs are not rendered by default.

specs/authorization/v2/authorization.openapi.yaml

Lines changed: 218 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -165,6 +165,38 @@ components:
165165
- STANDARD_ACTION_UNSPECIFIED
166166
- STANDARD_ACTION_DECRYPT
167167
- STANDARD_ACTION_TRANSMIT
168+
policy.Algorithm:
169+
type: string
170+
title: Algorithm
171+
enum:
172+
- ALGORITHM_UNSPECIFIED
173+
- ALGORITHM_RSA_2048
174+
- ALGORITHM_RSA_4096
175+
- ALGORITHM_EC_P256
176+
- ALGORITHM_EC_P384
177+
- ALGORITHM_EC_P521
178+
description: Supported key algorithms.
179+
policy.KasPublicKeyAlgEnum:
180+
type: string
181+
title: KasPublicKeyAlgEnum
182+
enum:
183+
- KAS_PUBLIC_KEY_ALG_ENUM_UNSPECIFIED
184+
- KAS_PUBLIC_KEY_ALG_ENUM_RSA_2048
185+
- KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096
186+
- KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP256R1
187+
- KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1
188+
- KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1
189+
policy.SourceType:
190+
type: string
191+
title: SourceType
192+
enum:
193+
- SOURCE_TYPE_UNSPECIFIED
194+
- SOURCE_TYPE_INTERNAL
195+
- SOURCE_TYPE_EXTERNAL
196+
description: |-
197+
Describes whether this kas is managed by the organization or if they imported
198+
the kas information from an external party. These two modes are necessary in order
199+
to encrypt a tdf dek with an external parties kas public key.
168200
authorization.v2.EntityEntitlements:
169201
type: object
170202
properties:
@@ -772,12 +804,198 @@ components:
772804
name:
773805
type: string
774806
title: name
807+
namespace:
808+
title: namespace
809+
description: Namespace context for this action
810+
$ref: '#/components/schemas/policy.Namespace'
775811
metadata:
776812
title: metadata
777813
$ref: '#/components/schemas/common.Metadata'
778814
title: Action
779815
additionalProperties: false
780816
description: An action an entity can take
817+
policy.KasPublicKey:
818+
type: object
819+
properties:
820+
pem:
821+
type: string
822+
title: pem
823+
maxLength: 8192
824+
minLength: 1
825+
description: x509 ASN.1 content in PEM envelope, usually
826+
kid:
827+
type: string
828+
title: kid
829+
maxLength: 32
830+
minLength: 1
831+
description: A unique string identifier for this key
832+
alg:
833+
not:
834+
enum:
835+
- 0
836+
title: alg
837+
description: |-
838+
A known algorithm type with any additional parameters encoded.
839+
To start, these may be `rsa:2048` for RSA-based wrapping and
840+
`ec:secp256r1` for EC-based wrapping, but more formats may be added as needed.
841+
$ref: '#/components/schemas/policy.KasPublicKeyAlgEnum'
842+
title: KasPublicKey
843+
additionalProperties: false
844+
description: |-
845+
Deprecated
846+
A KAS public key and some associated metadata for further identifcation
847+
policy.KasPublicKeySet:
848+
type: object
849+
properties:
850+
keys:
851+
type: array
852+
items:
853+
$ref: '#/components/schemas/policy.KasPublicKey'
854+
title: keys
855+
title: KasPublicKeySet
856+
additionalProperties: false
857+
description: |-
858+
Deprecated
859+
A list of known KAS public keys
860+
policy.KeyAccessServer:
861+
type: object
862+
properties:
863+
id:
864+
type: string
865+
title: id
866+
uri:
867+
type: string
868+
title: uri
869+
description: |+
870+
Address of a KAS instance
871+
URI must be a valid URL (e.g., 'https://demo.com/') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:
872+
```
873+
this.matches('^https?://[a-zA-Z0-9]([a-zA-Z0-9\\-]{0,61}[a-zA-Z0-9])?(\\.[a-zA-Z0-9]([a-zA-Z0-9\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$')
874+
```
875+
876+
publicKey:
877+
title: public_key
878+
description: 'Deprecated: KAS can have multiple key pairs'
879+
$ref: '#/components/schemas/policy.PublicKey'
880+
sourceType:
881+
title: source_type
882+
description: 'The source of the KAS: (INTERNAL, EXTERNAL)'
883+
$ref: '#/components/schemas/policy.SourceType'
884+
kasKeys:
885+
type: array
886+
items:
887+
$ref: '#/components/schemas/policy.SimpleKasKey'
888+
title: kas_keys
889+
description: Kas keys associated with this KAS
890+
name:
891+
type: string
892+
title: name
893+
description: |-
894+
Optional
895+
Unique name of the KAS instance
896+
metadata:
897+
title: metadata
898+
description: Common metadata
899+
$ref: '#/components/schemas/common.Metadata'
900+
title: KeyAccessServer
901+
additionalProperties: false
902+
description: Key Access Server Registry
903+
policy.Namespace:
904+
type: object
905+
properties:
906+
id:
907+
type: string
908+
title: id
909+
description: generated uuid in database
910+
name:
911+
type: string
912+
title: name
913+
description: |-
914+
used to partition Attribute Definitions, support by namespace AuthN and
915+
enable federation
916+
fqn:
917+
type: string
918+
title: fqn
919+
active:
920+
title: active
921+
description: active by default until explicitly deactivated
922+
$ref: '#/components/schemas/google.protobuf.BoolValue'
923+
metadata:
924+
title: metadata
925+
$ref: '#/components/schemas/common.Metadata'
926+
grants:
927+
type: array
928+
items:
929+
$ref: '#/components/schemas/policy.KeyAccessServer'
930+
title: grants
931+
description: Deprecated KAS grants for the namespace. Use kas_keys instead.
932+
kasKeys:
933+
type: array
934+
items:
935+
$ref: '#/components/schemas/policy.SimpleKasKey'
936+
title: kas_keys
937+
description: Keys for the namespace
938+
title: Namespace
939+
additionalProperties: false
940+
policy.PublicKey:
941+
type: object
942+
oneOf:
943+
- properties:
944+
cached:
945+
title: cached
946+
description: public key with additional information. Current preferred version
947+
$ref: '#/components/schemas/policy.KasPublicKeySet'
948+
title: cached
949+
required:
950+
- cached
951+
- properties:
952+
remote:
953+
type: string
954+
title: remote
955+
description: |+
956+
kas public key url - optional since can also be retrieved via public key
957+
URI must be a valid URL (e.g., 'https://demo.com/') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:
958+
```
959+
this.matches('^https://[a-zA-Z0-9]([a-zA-Z0-9\\-]{0,61}[a-zA-Z0-9])?(\\.[a-zA-Z0-9]([a-zA-Z0-9\\-]{0,61}[a-zA-Z0-9])?)*(/.*)?$')
960+
```
961+
962+
title: remote
963+
required:
964+
- remote
965+
title: PublicKey
966+
additionalProperties: false
967+
description: Deprecated
968+
policy.SimpleKasKey:
969+
type: object
970+
properties:
971+
kasUri:
972+
type: string
973+
title: kas_uri
974+
description: The URL of the Key Access Server
975+
publicKey:
976+
title: public_key
977+
description: The public key of the Key that belongs to the KAS
978+
$ref: '#/components/schemas/policy.SimpleKasPublicKey'
979+
kasId:
980+
type: string
981+
title: kas_id
982+
description: The ID of the Key Access Server
983+
title: SimpleKasKey
984+
additionalProperties: false
985+
policy.SimpleKasPublicKey:
986+
type: object
987+
properties:
988+
algorithm:
989+
title: algorithm
990+
$ref: '#/components/schemas/policy.Algorithm'
991+
kid:
992+
type: string
993+
title: kid
994+
pem:
995+
type: string
996+
title: pem
997+
title: SimpleKasPublicKey
998+
additionalProperties: false
781999
connect-protocol-version:
7821000
type: number
7831001
title: Connect-Protocol-Version

specs/policy/actions/actions.openapi.yaml

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -435,6 +435,10 @@ components:
435435
name:
436436
type: string
437437
title: name
438+
namespace:
439+
title: namespace
440+
description: Namespace context for this action
441+
$ref: '#/components/schemas/policy.Namespace'
438442
metadata:
439443
title: metadata
440444
$ref: '#/components/schemas/common.Metadata'
@@ -1053,6 +1057,17 @@ components:
10531057
this.matches('^[a-zA-Z0-9](?:[a-zA-Z0-9_-]*[a-zA-Z0-9])?$')
10541058
```
10551059
1060+
namespaceId:
1061+
type: string
1062+
title: namespace_id
1063+
format: uuid
1064+
description: ID of the namespace. Required if namespace_fqn is not provided.
1065+
namespaceFqn:
1066+
type: string
1067+
title: namespace_fqn
1068+
minLength: 1
1069+
format: uri
1070+
description: FQN of the namespace. Required if namespace_id is not provided.
10561071
metadata:
10571072
title: metadata
10581073
description: Optional
@@ -1116,8 +1131,26 @@ components:
11161131
title: name
11171132
required:
11181133
- name
1134+
properties:
1135+
namespaceId:
1136+
type: string
1137+
title: namespace_id
1138+
format: uuid
1139+
description: ID of the namespace. Required when identifier is set to name.
1140+
namespaceFqn:
1141+
type: string
1142+
title: namespace_fqn
1143+
minLength: 1
1144+
format: uri
1145+
description: FQN of the namespace. Required when identifier is set to name.
11191146
title: GetActionRequest
11201147
additionalProperties: false
1148+
description: |+
1149+
Either namespace_id or namespace_fqn must be provided when getting an action by name:
1150+
```
1151+
!has(this.name) || this.namespace_id != '' || this.namespace_fqn != ''
1152+
```
1153+
11211154
policy.actions.GetActionResponse:
11221155
type: object
11231156
properties:
@@ -1135,6 +1168,17 @@ components:
11351168
policy.actions.ListActionsRequest:
11361169
type: object
11371170
properties:
1171+
namespaceId:
1172+
type: string
1173+
title: namespace_id
1174+
format: uuid
1175+
description: ID of the namespace. Required if namespace_fqn is not provided.
1176+
namespaceFqn:
1177+
type: string
1178+
title: namespace_fqn
1179+
minLength: 1
1180+
format: uri
1181+
description: FQN of the namespace. Required if namespace_id is not provided.
11381182
pagination:
11391183
title: pagination
11401184
description: Optional

specs/policy/attributes/attributes.openapi.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -956,6 +956,10 @@ components:
956956
name:
957957
type: string
958958
title: name
959+
namespace:
960+
title: namespace
961+
description: Namespace context for this action
962+
$ref: '#/components/schemas/policy.Namespace'
959963
metadata:
960964
title: metadata
961965
$ref: '#/components/schemas/common.Metadata'

specs/policy/objects.openapi.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -248,6 +248,10 @@ components:
248248
name:
249249
type: string
250250
title: name
251+
namespace:
252+
title: namespace
253+
description: Namespace context for this action
254+
$ref: '#/components/schemas/policy.Namespace'
251255
metadata:
252256
title: metadata
253257
$ref: '#/components/schemas/common.Metadata'

specs/policy/obligations/obligations.openapi.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -784,6 +784,10 @@ components:
784784
name:
785785
type: string
786786
title: name
787+
namespace:
788+
title: namespace
789+
description: Namespace context for this action
790+
$ref: '#/components/schemas/policy.Namespace'
787791
metadata:
788792
title: metadata
789793
$ref: '#/components/schemas/common.Metadata'

specs/policy/registeredresources/registered_resources.openapi.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -645,6 +645,10 @@ components:
645645
name:
646646
type: string
647647
title: name
648+
namespace:
649+
title: namespace
650+
description: Namespace context for this action
651+
$ref: '#/components/schemas/policy.Namespace'
648652
metadata:
649653
title: metadata
650654
$ref: '#/components/schemas/common.Metadata'

specs/policy/resourcemapping/resource_mapping.openapi.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -645,6 +645,10 @@ components:
645645
name:
646646
type: string
647647
title: name
648+
namespace:
649+
title: namespace
650+
description: Namespace context for this action
651+
$ref: '#/components/schemas/policy.Namespace'
648652
metadata:
649653
title: metadata
650654
$ref: '#/components/schemas/common.Metadata'

specs/policy/subjectmapping/subject_mapping.openapi.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -681,6 +681,10 @@ components:
681681
name:
682682
type: string
683683
title: name
684+
namespace:
685+
title: namespace
686+
description: Namespace context for this action
687+
$ref: '#/components/schemas/policy.Namespace'
684688
metadata:
685689
title: metadata
686690
$ref: '#/components/schemas/common.Metadata'

specs/policy/unsafe/unsafe.openapi.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -614,6 +614,10 @@ components:
614614
name:
615615
type: string
616616
title: name
617+
namespace:
618+
title: namespace
619+
description: Namespace context for this action
620+
$ref: '#/components/schemas/policy.Namespace'
617621
metadata:
618622
title: metadata
619623
$ref: '#/components/schemas/common.Metadata'

0 commit comments

Comments
 (0)