|
959 | 959 | "default": "720h", |
960 | 960 | "description": "Configures what the maximum age of a JWT assertion used in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523) can be.\n\nThis feature uses the `exp` claim and `iat` claim to calculate assertion age. Assertions exceeding the max age will be denied.\n\nUseful as a safety measure and recommended to keep below 720h.\n\nThis governs the \"oauth2.grant.jwt.max_ttl\" setting.", |
961 | 961 | "example": "30m", |
962 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 962 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
963 | 963 | "type": "string" |
964 | 964 | }, |
965 | 965 | "hydra_oauth2_grant_refresh_token_rotation_grace_period": { |
|
1075 | 1075 | "default": "30m", |
1076 | 1076 | "description": "This governs the \"ttl.access_token\" setting.", |
1077 | 1077 | "example": "1h", |
1078 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 1078 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
1079 | 1079 | "type": "string" |
1080 | 1080 | }, |
1081 | 1081 | "hydra_ttl_auth_code": { |
1082 | 1082 | "default": "720h", |
1083 | 1083 | "description": "Configures how long refresh tokens are valid.\n\nSet to -1 for refresh tokens to never expire. This is not recommended!\n\nThis governs the \"ttl.auth_code\" setting.", |
1084 | 1084 | "example": "30m", |
1085 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 1085 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
1086 | 1086 | "type": "string" |
1087 | 1087 | }, |
1088 | 1088 | "hydra_ttl_id_token": { |
1089 | 1089 | "default": "30m", |
1090 | 1090 | "description": "This governs the \"ttl.id_token\" setting.", |
1091 | 1091 | "example": "1h", |
1092 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 1092 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
1093 | 1093 | "type": "string" |
1094 | 1094 | }, |
1095 | 1095 | "hydra_ttl_login_consent_request": { |
1096 | 1096 | "default": "30m", |
1097 | 1097 | "description": "Configures how long a user login and consent flow may take.\n\nThis governs the \"ttl.login_consent_request\" setting.", |
1098 | 1098 | "example": "1h", |
1099 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 1099 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
1100 | 1100 | "type": "string" |
1101 | 1101 | }, |
1102 | 1102 | "hydra_ttl_refresh_token": { |
1103 | 1103 | "default": "720h", |
1104 | 1104 | "description": "Configures how long refresh tokens are valid.\n\nSet to -1 for refresh tokens to never expire. This is not recommended!\n\nThis governs the \"ttl.refresh_token\" setting.", |
1105 | 1105 | "example": "30m", |
1106 | | - "pattern": "^([0-9]+(ns|us|ms|s|m|h)|-1)$", |
| 1106 | + "pattern": "^(([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+|-1)$", |
1107 | 1107 | "type": "string" |
1108 | 1108 | }, |
1109 | 1109 | "hydra_urls_consent": { |
|
1975 | 1975 | "talos_cache_ttl": { |
1976 | 1976 | "description": "Talos cache TTL controls how long API key verification results are cached.", |
1977 | 1977 | "example": "5m", |
1978 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 1978 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
1979 | 1979 | "type": "string" |
1980 | 1980 | }, |
1981 | 1981 | "talos_credentials_api_keys_default_ttl": { |
1982 | 1982 | "description": "Talos API keys default TTL.", |
1983 | 1983 | "example": "1h", |
1984 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 1984 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
1985 | 1985 | "type": "string" |
1986 | 1986 | }, |
1987 | 1987 | "talos_credentials_api_keys_max_ttl": { |
1988 | 1988 | "description": "Talos API keys max TTL.", |
1989 | 1989 | "example": "24h", |
1990 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 1990 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
1991 | 1991 | "type": "string" |
1992 | 1992 | }, |
1993 | 1993 | "talos_credentials_api_keys_prefix_current": { |
|
2015 | 2015 | "talos_credentials_derived_tokens_default_ttl": { |
2016 | 2016 | "description": "Talos derived tokens default TTL (applies to both JWT and macaroon tokens).", |
2017 | 2017 | "example": "1h", |
2018 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 2018 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
2019 | 2019 | "type": "string" |
2020 | 2020 | }, |
2021 | 2021 | "talos_credentials_derived_tokens_jwt_signing_key_id": { |
|
2859 | 2859 | }, |
2860 | 2860 | "NullDuration": { |
2861 | 2861 | "nullable": true, |
2862 | | - "pattern": "^[0-9]+(ns|us|ms|s|m|h)$", |
| 2862 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
2863 | 2863 | "type": "string" |
2864 | 2864 | }, |
2865 | 2865 | "NullInt": { |
|
4349 | 4349 | "properties": { |
4350 | 4350 | "expires_in": { |
4351 | 4351 | "description": "Code Expires In\n\nThe recovery code will expire after that amount of time has passed. Defaults to the configuration value of\n`selfservice.methods.code.config.lifespan`.", |
4352 | | - "pattern": "^([0-9]+(ns|us|ms|s|m|h))*$", |
| 4352 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
4353 | 4353 | "type": "string" |
4354 | 4354 | }, |
4355 | 4355 | "flow_type": { |
|
4369 | 4369 | "properties": { |
4370 | 4370 | "expires_in": { |
4371 | 4371 | "description": "Link Expires In\n\nThe recovery link will expire after that amount of time has passed. Defaults to the configuration value of\n`selfservice.methods.code.config.lifespan`.", |
4372 | | - "pattern": "^[0-9]+(ns|us|ms|s|m|h)$", |
| 4372 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
4373 | 4373 | "type": "string" |
4374 | 4374 | }, |
4375 | 4375 | "identity_id": { |
|
7349 | 7349 | "default": "720h", |
7350 | 7350 | "description": "Configures what the maximum age of a JWT assertion used in the JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants (RFC7523) can be.\n\nThis feature uses the `exp` claim and `iat` claim to calculate assertion age. Assertions exceeding the max age will be denied.\n\nUseful as a safety measure and recommended to keep below 720h.\n\nThis governs the \"oauth2.grant.jwt.max_ttl\" setting.", |
7351 | 7351 | "example": "30m", |
7352 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 7352 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
7353 | 7353 | "type": "string" |
7354 | 7354 | }, |
7355 | 7355 | "hydra_oauth2_grant_refresh_token_rotation_grace_period": { |
|
7465 | 7465 | "default": "30m", |
7466 | 7466 | "description": "This governs the \"ttl.access_token\" setting.", |
7467 | 7467 | "example": "1h", |
7468 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 7468 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
7469 | 7469 | "type": "string" |
7470 | 7470 | }, |
7471 | 7471 | "hydra_ttl_auth_code": { |
7472 | 7472 | "default": "720h", |
7473 | 7473 | "description": "Configures how long refresh tokens are valid.\n\nSet to -1 for refresh tokens to never expire. This is not recommended!\n\nThis governs the \"ttl.auth_code\" setting.", |
7474 | 7474 | "example": "30m", |
7475 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 7475 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
7476 | 7476 | "type": "string" |
7477 | 7477 | }, |
7478 | 7478 | "hydra_ttl_id_token": { |
7479 | 7479 | "default": "30m", |
7480 | 7480 | "description": "This governs the \"ttl.id_token\" setting.", |
7481 | 7481 | "example": "1h", |
7482 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 7482 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
7483 | 7483 | "type": "string" |
7484 | 7484 | }, |
7485 | 7485 | "hydra_ttl_login_consent_request": { |
7486 | 7486 | "default": "30m", |
7487 | 7487 | "description": "Configures how long a user login and consent flow may take.\n\nThis governs the \"ttl.login_consent_request\" setting.", |
7488 | 7488 | "example": "1h", |
7489 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 7489 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
7490 | 7490 | "type": "string" |
7491 | 7491 | }, |
7492 | 7492 | "hydra_ttl_refresh_token": { |
7493 | 7493 | "default": "720h", |
7494 | 7494 | "description": "Configures how long refresh tokens are valid.\n\nSet to -1 for refresh tokens to never expire. This is not recommended!\n\nThis governs the \"ttl.refresh_token\" setting.", |
7495 | 7495 | "example": "30m", |
7496 | | - "pattern": "^([0-9]+(ns|us|ms|s|m|h)|-1)$", |
| 7496 | + "pattern": "^(([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+|-1)$", |
7497 | 7497 | "type": "string" |
7498 | 7498 | }, |
7499 | 7499 | "hydra_urls_consent": { |
|
8365 | 8365 | "talos_cache_ttl": { |
8366 | 8366 | "description": "Talos cache TTL controls how long API key verification results are cached.", |
8367 | 8367 | "example": "5m", |
8368 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 8368 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
8369 | 8369 | "type": "string" |
8370 | 8370 | }, |
8371 | 8371 | "talos_credentials_api_keys_default_ttl": { |
8372 | 8372 | "description": "Talos API keys default TTL.", |
8373 | 8373 | "example": "1h", |
8374 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 8374 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
8375 | 8375 | "type": "string" |
8376 | 8376 | }, |
8377 | 8377 | "talos_credentials_api_keys_max_ttl": { |
8378 | 8378 | "description": "Talos API keys max TTL.", |
8379 | 8379 | "example": "24h", |
8380 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 8380 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
8381 | 8381 | "type": "string" |
8382 | 8382 | }, |
8383 | 8383 | "talos_credentials_api_keys_prefix_current": { |
|
8405 | 8405 | "talos_credentials_derived_tokens_default_ttl": { |
8406 | 8406 | "description": "Talos derived tokens default TTL (applies to both JWT and macaroon tokens).", |
8407 | 8407 | "example": "1h", |
8408 | | - "pattern": "^(\\d+(\\.\\d+)?(ns|us|µs|ms|s|m|h))+$", |
| 8408 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
8409 | 8409 | "type": "string" |
8410 | 8410 | }, |
8411 | 8411 | "talos_credentials_derived_tokens_jwt_signing_key_id": { |
|
8944 | 8944 | "default": "1m", |
8945 | 8945 | "description": "Token time to live", |
8946 | 8946 | "example": "1h", |
8947 | | - "pattern": "^[0-9]+(ns|us|ms|s|m|h)$", |
| 8947 | + "pattern": "^([0-9]+([.][0-9]+)?(ns|us|µs|ms|s|m|h))+$", |
8948 | 8948 | "type": "string" |
8949 | 8949 | }, |
8950 | 8950 | "updated_at": { |
|
8972 | 8972 | "nullable": true, |
8973 | 8973 | "type": "boolean" |
8974 | 8974 | }, |
8975 | | - "nullDuration": { |
8976 | | - "nullable": true, |
8977 | | - "pattern": "^[0-9]+(ns|us|ms|s|m|h)$", |
8978 | | - "type": "string" |
8979 | | - }, |
8980 | 8975 | "nullInt64": { |
8981 | 8976 | "nullable": true, |
8982 | 8977 | "type": "integer" |
|
9473 | 9468 | "oAuth2LogoutRequest": { |
9474 | 9469 | "properties": { |
9475 | 9470 | "challenge": { |
9476 | | - "description": "Challenge is the identifier of the logout authentication request.", |
| 9471 | + "description": "Challenge is used to retrieve/accept/deny the logout request.", |
9477 | 9472 | "type": "string" |
9478 | 9473 | }, |
9479 | 9474 | "client": { |
9480 | 9475 | "$ref": "#/components/schemas/oAuth2Client" |
9481 | 9476 | }, |
9482 | 9477 | "expires_at": { |
9483 | | - "$ref": "#/components/schemas/nullTime" |
| 9478 | + "format": "date-time", |
| 9479 | + "type": "string" |
9484 | 9480 | }, |
9485 | 9481 | "request_url": { |
9486 | 9482 | "description": "RequestURL is the original Logout URL requested.", |
9487 | 9483 | "type": "string" |
9488 | 9484 | }, |
9489 | 9485 | "requested_at": { |
9490 | | - "$ref": "#/components/schemas/nullTime" |
| 9486 | + "format": "date-time", |
| 9487 | + "type": "string" |
9491 | 9488 | }, |
9492 | 9489 | "rp_initiated": { |
9493 | 9490 | "description": "RPInitiated is set to true if the request was initiated by a Relying Party (RP), also known as an OAuth 2.0 Client.", |
|
9498 | 9495 | "type": "string" |
9499 | 9496 | }, |
9500 | 9497 | "subject": { |
9501 | | - "description": "Subject is the user for whom the logout was request.", |
| 9498 | + "description": "Subject is the user for whom the logout was requested.", |
9502 | 9499 | "type": "string" |
9503 | 9500 | } |
9504 | 9501 | }, |
|
16521 | 16518 | }, |
16522 | 16519 | "description": "oAuth2LogoutRequest" |
16523 | 16520 | }, |
16524 | | - "410": { |
16525 | | - "content": { |
16526 | | - "application/json": { |
16527 | | - "schema": { |
16528 | | - "$ref": "#/components/schemas/oAuth2RedirectTo" |
16529 | | - } |
16530 | | - } |
16531 | | - }, |
16532 | | - "description": "oAuth2RedirectTo" |
16533 | | - }, |
16534 | 16521 | "default": { |
16535 | 16522 | "content": { |
16536 | 16523 | "application/json": { |
|
0 commit comments