Added token management for outbound apps (#155)

* Added token management for outbound apps

* style fixes

* fix test

* slight rename

* slight rename II

* slight rename III

Author: slavikm

src/main/java/com/descope/literals/Routes.java

@@ -217,5 +217,10 @@ public static class ManagementEndPoints {
 
     // Password settings
     public static final String MANAGEMENT_PASSWORD_SETTINGS = "/v1/mgmt/password/settings";
+
+    // Outbound
+    public static final String MANAGEMENT_FETCH_OUTBOUND_APP_USER_TOKEN = "/v1/mgmt/outbound/app/user/token";
+    public static final String MANAGEMENT_DELETE_OUTBOUND_APP_USER_TOKEN_BY_ID = "/v1/mgmt/outbound/token";
+    public static final String MANAGEMENT_DELETE_OUTBOUND_APP_USER_TOKENS = "/v1/mgmt/outbound/tokens";
   }
 }

src/main/java/com/descope/model/mgmt/ManagementServices.java

@@ -6,6 +6,7 @@
 import com.descope.sdk.mgmt.FlowService;
 import com.descope.sdk.mgmt.GroupService;
 import com.descope.sdk.mgmt.JwtService;
+import com.descope.sdk.mgmt.OutboundAppsService;
 import com.descope.sdk.mgmt.PasswordSettingsService;
 import com.descope.sdk.mgmt.PermissionService;
 import com.descope.sdk.mgmt.ProjectService;
@@ -34,4 +35,5 @@ public class ManagementServices {
   AuthzService authzService;
   ProjectService projectService;
   PasswordSettingsService passwordSettingsService;
+  OutboundAppsService outboundAppsService;
 }

src/main/java/com/descope/model/outbound/DeleteOutboundAppUserTokensRequest.java

@@ -0,0 +1,15 @@
+package com.descope.model.outbound;
+
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class DeleteOutboundAppUserTokensRequest {
+  private String appId;
+  private String userId;
+}

src/main/java/com/descope/model/outbound/FetchOutboundAppTokenOptions.java

@@ -0,0 +1,15 @@
+package com.descope.model.outbound;
+
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class FetchOutboundAppTokenOptions {
+  private Boolean withRefreshToken;
+  private Boolean forceRefresh;
+}

src/main/java/com/descope/model/outbound/FetchOutboundAppUserTokenRequest.java

@@ -0,0 +1,18 @@
+package com.descope.model.outbound;
+
+import java.util.List;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class FetchOutboundAppUserTokenRequest {
+  private String appId;
+  private String userId;
+  private List<String> scopes;
+  private FetchOutboundAppTokenOptions options;
+}

src/main/java/com/descope/model/outbound/FetchOutboundAppUserTokenResponse.java

@@ -0,0 +1,14 @@
+package com.descope.model.outbound;
+
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class FetchOutboundAppUserTokenResponse {
+  private OutboundAppToken token;
+}

src/main/java/com/descope/model/outbound/OutboundAppToken.java

@@ -0,0 +1,31 @@
+package com.descope.model.outbound;
+
+import com.descope.utils.InstantToMillisSerializer;
+import com.fasterxml.jackson.databind.annotation.JsonSerialize;
+import java.time.Instant;
+import java.util.List;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class OutboundAppToken {
+  private String id;
+  private String appId;
+  private String userId;
+  private String tokenSub;
+  private String accessToken;
+  private String accessTokenType;
+  @JsonSerialize(using = InstantToMillisSerializer.class)
+  private Instant accessTokenExpiry;
+  private boolean hasRefreshToken;
+  private String refreshToken;
+  @JsonSerialize(using = InstantToMillisSerializer.class)
+  private Instant lastRefreshTime;
+  private String lastRefreshError;
+  private List<String> scopes;
+}

src/main/java/com/descope/model/user/request/UserSearchRequest.java

@@ -29,6 +29,7 @@ public class UserSearchRequest {
   List<String> emails;
   List<String> phones;
   List<String> loginIds;
+  List<String> userIds;
   List<String> ssoAppIds;
   /** Retrieve only users created after the given time. */
   @JsonSerialize(using = InstantToMillisSerializer.class)

src/main/java/com/descope/sdk/mgmt/OutboundAppsService.java

@@ -0,0 +1,36 @@
+package com.descope.sdk.mgmt;
+
+import com.descope.exception.DescopeException;
+import com.descope.model.outbound.DeleteOutboundAppUserTokensRequest;
+import com.descope.model.outbound.FetchOutboundAppUserTokenRequest;
+import com.descope.model.outbound.FetchOutboundAppUserTokenResponse;
+
+/** Provides functions for managing outbound application tokens for a user in a project. */
+public interface OutboundAppsService {
+
+  /**
+   * Fetch the requested token (if exists) for the given user and outbound application.
+   *
+   * @param request The token details including the requested scopes
+   * @return The requested token
+   * @throws DescopeException in case of errors
+   */
+  FetchOutboundAppUserTokenResponse fetchOutboundAppUserToken(FetchOutboundAppUserTokenRequest request)
+      throws DescopeException;
+
+  /**
+   * Delete the outbound application token for the given ID.
+   *
+   * @param id required token ID
+   * @throws DescopeException in case of errors
+   */
+  void deleteOutboundAppTokenById(String id) throws DescopeException;
+
+  /**
+   * Delete all outbound application tokens for the given user.
+   *
+   * @param request required request containing user ID and app ID
+   * @throws DescopeException in case of errors
+   */
+  void deleteOutboundAppUserTokens(DeleteOutboundAppUserTokensRequest request) throws DescopeException;
+}

src/main/java/com/descope/sdk/mgmt/impl/ManagementServiceBuilder.java

@@ -22,6 +22,7 @@ public static ManagementServices buildServices(Client client) {
         .projectService(new ProjectServiceImpl(client))
         .passwordSettingsService(new PasswordSettingsServiceImpl(client))
         .ssoApplicationService(new SsoApplicationServiceImpl(client))
+        .outboundAppsService(new OutboundAppsServiceImpl(client))
         .build();
   }
 }